last executing test programs: 14.776390533s ago: executing program 4 (id=2967): perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x600}, 0x28) 14.266149418s ago: executing program 4 (id=2971): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x30}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x6a, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8=r2, @ANYRESHEX=r4, @ANYBLOB="0100"/20, @ANYRESDEC=r4, @ANYRES32, @ANYRESOCT=r3], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000040000000700000006"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r11}, 0x25) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB \x00'}, 0x20) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r14, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x19, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x7f, &(0x7f0000000280)=""/127, 0x41100, 0x6c, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000540)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x4, 0x3, 0x1a3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[r6, r7, 0xffffffffffffffff, r8, 0xffffffffffffffff, r9, r12, r13, r14, r0], &(0x7f0000000b40)=[{0x1, 0x1, 0x1, 0x10}, {0x3, 0x1, 0xb, 0xa}], 0x10, 0x1}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r16 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002000000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r18, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r15) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={@cgroup=r14, 0x12, 0x1, 0x7, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0], &(0x7f0000000dc0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e80)=ANY=[@ANYRES32=r4, @ANYRES32=r14, @ANYBLOB="2d0000e1e7136471695f8bfc79177fa5f653e2af0312ea37b85f51893ed07445722460cdd4a1ad2c6819b573a6802d68cc9a09000000f7bbb45ef5e625519e5c41a016f300", @ANYRES32=r14, @ANYBLOB, @ANYRES64=r19], 0x20) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 13.471882427s ago: executing program 2 (id=2976): socket$kcm(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00c00e0004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) 12.684514415s ago: executing program 2 (id=2981): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000016c0)=0xffffffffffffffff, 0x4) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x401c5820, &(0x7f0000000a00)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x9, 0x2, &(0x7f0000001700)=@raw=[@exit, @alu={0x7, 0x1, 0x3, 0xa, 0x2, 0x1, 0x4}], &(0x7f0000001740)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000017c0)=[{0x4, 0x1, 0xb, 0x6}], 0x10, 0x2552a814}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000018c0)=r2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfd98) r4 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB="52b388f9b5939e4a481827963aec9ccf97022ff30acf70b4436b7bf1def959e90a2aceaf8a7f6c3c635d6107c174c3021dc3d88f2f0e94182f561180077f5ce046f6a56b55ad68bc4e49ffb04bc87d3077bab81c503344da09008f4e57fb6b083ccc", @ANYRES64], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r1, r3, 0x21, 0x10, r3, @void, @value=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000101000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000001800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x0, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", 0x0, 0x500, 0x4000000}, 0x50) 12.237227098s ago: executing program 2 (id=2986): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8995, &(0x7f0000000200)={'bond0\x00', @local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r3}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r3}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) 11.57912773s ago: executing program 2 (id=2988): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x200008c0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe800700004b037a2c080000000900"/40, 0x5dc}], 0x1}, 0x0) 11.132526682s ago: executing program 2 (id=2991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000095000000200000001801000020786c2500000000002020207b1a0cff000000003fa0fd000000000007010000f8ffffffb702100008000000b700"/93], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x89}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x89}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e080000070200001d0000007ea60864160af3653c005425198bc3488bc3a0e69ee517d34460bc24eab556a705251d6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r1, 0x400454cd, 0x301) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x301) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000000000080000001000000", @ANYRES32, @ANYBLOB="000700000000f400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="e03f0300d25a806c8c6fbafc0424fc60100f000000000000001582c137153e37080c188005ac0f000300", 0x6e}, {&(0x7f0000000200)="86cdbc6845a414b4cf45f673e2371912323b07ff94394c334a953ab1da2611f3dc432b3d6222feddae01427b582cb192896485fc2b76fef18fe7b52c13c9755ce5a7e143ee35d051f52e94b9dbfde70bf15e6fb92dca85bce717d687", 0x5c}], 0x2, 0x0, 0x0, 0x8100000}, 0x0) (async) sendmsg$kcm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="e03f0300d25a806c8c6fbafc0424fc60100f000000000000001582c137153e37080c188005ac0f000300", 0x6e}, {&(0x7f0000000200)="86cdbc6845a414b4cf45f673e2371912323b07ff94394c334a953ab1da2611f3dc432b3d6222feddae01427b582cb192896485fc2b76fef18fe7b52c13c9755ce5a7e143ee35d051f52e94b9dbfde70bf15e6fb92dca85bce717d687", 0x5c}], 0x2, 0x0, 0x0, 0x8100000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000f0ffffffffff0300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000014000000000000000000030018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000b7080000000400007b8af8ff00000000bfa20000001d43b747020000f8ffffffb703000008000000b704000001000000850000008200fe009500"/72], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000014000000000000000000030018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000b7080000000400007b8af8ff00000000bfa20000001d43b747020000f8ffffffb703000008000000b704000001000000850000008200fe009500"/72], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) 9.96631628s ago: executing program 2 (id=2996): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20000280, 0x0, 0x19, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) 3.687799538s ago: executing program 4 (id=3018): r0 = socket$kcm(0xa, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) (async, rerun: 32) r1 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0xa02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(0xffffffffffffffff) (async, rerun: 32) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) (async) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000004"], 0x48) (async, rerun: 64) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r7) (async) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r6], 0x48) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r9) (async) r11 = perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async, rerun: 64) close(r10) (async, rerun: 64) r12 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r12, 0x0, 0x14, 0x0, 0x0) (async, rerun: 64) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r11, @ANYRES32=0x1, @ANYBLOB="000000000008f1", @ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x50) (rerun: 64) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r13}, 0x38) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) 3.467354169s ago: executing program 4 (id=3019): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000a40012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d00000004000000040000000900000050010000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000f7ffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x23, 0x5, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x3c120, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xb, 0x2}, 0xf8a, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x69}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r8) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) r10 = gettid() syz_open_procfs$namespace(r10, &(0x7f0000000080)='ns/pid_for_children\x00') sendmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r11 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r11, 0x29, 0x35, 0x0, 0x42) close(r3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x0, 0x28}, 0xc) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002815c180535a968d12134e46a3dae86a81de0f844b7eb2d9321a86340276b944ce530f2d50c95069fdfa8457ccd291"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r13}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r14, 0x77, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xaa, 0x8, 0x0, 0x0}}, 0x10) 3.312957157s ago: executing program 4 (id=3020): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="98"], 0x98, 0xc03e0000}, 0x80) 3.140265315s ago: executing program 4 (id=3022): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = syz_clone(0x80, &(0x7f00000004c0)="cbd3d1726af4d2ad232686ccdc37f7676339afa7c7e9267480ca8a6c88607b3cb50e489ceea30fd5cf7d6db6d0331a11ced398de2a4b3e189456f96fab634c4526a79a202fe366d348ece6bae5f74b255f031784f0ba196001258501a40c761b54f1a31e73493b458768f34399f6232385", 0x71, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000001280)="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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3075e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x2}, 0x5e02, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x18}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff88}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r6, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 2.44505497s ago: executing program 3 (id=3029): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x6}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0x14, 0x0, &(0x7f0000000440)="f8ad48cc02cb29efc8007f5b0800cfd6782bdb91", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510000006000000852000000200000094ffef"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000377e3159d100000000c3087774493dbea2f1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1810c, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000340)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c690293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}, {&(0x7f0000000800)="6dbbb733a6ba3aede1f4cdc8d826778b9858266859aaf4f91aaa5509e737d82c6405a00ffdc05e9e5fc5bdd72d608e31421ebc320df9444d1df0fcbcc8920c43715ab7019ab4d346b7b36a820946f40992c11a37353ee0ad468ab1a5eb52b32484fb52e34e73b0092f3e550b952c176703e6c3b992b15989d2b04a3002cb43169d42c83995ce28000000000000000000", 0x90}], 0x3}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc01e4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x4, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.294111217s ago: executing program 0 (id=3031): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x40140) 2.04059006s ago: executing program 1 (id=3032): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x21) 1.854777699s ago: executing program 0 (id=3033): perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x1b, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc"], 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x1c}, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) write$cgroup_int(r6, &(0x7f0000000100)=0x1, 0x12) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) bpf$BPF_PROG_DETACH(0x8, 0x0, 0xa) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)="17000000240081029523301a77580492040f46ecdb", 0x15}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x50, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={0x0, 0x0, 0x8, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r1}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20) 1.789697372s ago: executing program 3 (id=3034): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033300fe08fff500000200875a65969ff57bffffffffffffff8d0000000000ac1414aa"], 0xfdef) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7}, &(0x7f0000000300), &(0x7f0000000400)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000500000002000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)}], 0x1}, 0x400c084) 1.724593425s ago: executing program 1 (id=3035): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x18, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}, {0x85, 0x0, 0x0, 0x2d}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x4040010) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x1, 0x7, 0xa0, 0x0, 0x9, 0x0, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000280), 0x4}, 0x100010, 0x0, 0x7b9, 0x3, 0x80000000, 0xa, 0x3, 0x0, 0x6875, 0x0, 0x10}, r4, 0x7, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, &(0x7f0000001ec0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) close(r2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f00000004c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001ce00200142603600e12080005007a010401a80016002000044004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000", 0x1e}], 0x1}, 0x0) 1.555873943s ago: executing program 3 (id=3036): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c200007"], 0xfdef) 1.440048379s ago: executing program 3 (id=3037): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) 1.315587405s ago: executing program 0 (id=3038): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90703600000f007049e0ff065581fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x86, 0x0, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea02f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256", &(0x7f0000000100)}, 0x50) 1.314924005s ago: executing program 1 (id=3039): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000ecb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xde, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000037000b63446a80648c2594f90b24fc60", 0x14}], 0x1}, 0x5006) 1.116652485s ago: executing program 0 (id=3040): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20000280, 0x0, 0x19, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) 1.116409495s ago: executing program 1 (id=3041): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800000000000000a1000000", 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x54) 761.430352ms ago: executing program 0 (id=3042): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c252001001000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x58}, {0x0}], 0x2}, 0x20000884) 642.910488ms ago: executing program 1 (id=3043): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f00000000c0)) 564.477462ms ago: executing program 3 (id=3044): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x6}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0x14, 0x0, &(0x7f0000000440)="f8ad48cc02cb29efc8007f5b0800cfd6782bdb91", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510000006000000852000000200000094ffef"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000377e3159d100000000c3087774493dbea2f1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1810c, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000340)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c690293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}, {&(0x7f0000000800)="6dbbb733a6ba3aede1f4cdc8d826778b9858266859aaf4f91aaa5509e737d82c6405a00ffdc05e9e5fc5bdd72d608e31421ebc320df9444d1df0fcbcc8920c43715ab7019ab4d346b7b36a820946f40992c11a37353ee0ad468ab1a5eb52b32484fb52e34e73b0092f3e550b952c176703e6c3b992b15989d2b04a3002cb43169d42c83995ce28000000000000000000", 0x90}], 0x3}, 0x0) 407.5816ms ago: executing program 0 (id=3045): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) syz_clone(0x108300000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)}], 0x1}, 0x880) close(r0) socket$kcm(0x25, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x808e}, 0x40000100) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'macsec0\x00', 0x200}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x45a1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61cd, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 186.26608ms ago: executing program 1 (id=3046): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0, 0x60}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4c31, 0xc8, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(r0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r2, 0x29, 0x46, &(0x7f0000000040), 0xcf) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c200007"], 0xfdef) 0s ago: executing program 3 (id=3047): socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd100}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x80) close(0xffffffffffffffff) kernel console output (not intermixed with test programs): 002b:00007f592ee1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.048840][ T6932] RAX: ffffffffffffffda RBX: 00007f5930e3afa0 RCX: 00007f5930bc1799 [ 143.056832][ T6932] RDX: 000000000400c044 RSI: 0000200000000000 RDI: 0000000000000005 [ 143.064822][ T6932] RBP: 00007f592ee1b090 R08: 0000000000000000 R09: 0000000000000000 [ 143.072812][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.080804][ T6932] R13: 00007f5930e3b038 R14: 00007f5930e3afa0 R15: 00007ffc8ce385e8 [ 143.088815][ T6932] [ 143.724699][ T6954] device syzkaller0 left promiscuous mode [ 144.898453][ T6984] __nla_validate_parse: 11 callbacks suppressed [ 144.898469][ T6984] netlink: 132 bytes leftover after parsing attributes in process `syz.0.904'. [ 145.022106][ T6991] validate_nla: 18 callbacks suppressed [ 145.022138][ T6991] netlink: 'syz.2.908': attribute type 4 has an invalid length. [ 145.097497][ T6991] netlink: 132 bytes leftover after parsing attributes in process `syz.2.908'. [ 145.123116][ T6996] FAULT_INJECTION: forcing a failure. [ 145.123116][ T6996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.204738][ T6996] CPU: 0 PID: 6996 Comm: syz.1.911 Not tainted syzkaller #0 [ 145.212088][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.222166][ T6996] Call Trace: [ 145.225461][ T6996] [ 145.228404][ T6996] dump_stack_lvl+0x188/0x250 [ 145.233108][ T6996] ? show_regs_print_info+0x20/0x20 [ 145.238334][ T6996] ? load_image+0x400/0x400 [ 145.242878][ T6996] ? __lock_acquire+0x7d10/0x7d10 [ 145.247948][ T6996] ? bpf_test_run+0x78e/0x800 [ 145.252654][ T6996] should_fail+0x38c/0x4c0 [ 145.257102][ T6996] _copy_to_user+0x2e/0x130 [ 145.261629][ T6996] bpf_test_finish+0x215/0x2f0 [ 145.266416][ T6996] ? convert_skb_to___skb+0x360/0x360 [ 145.271857][ T6996] ? __build_skb+0x1e2/0x2e0 [ 145.273360][ T6993] netlink: 'syz.3.910': attribute type 21 has an invalid length. [ 145.276475][ T6996] ? convert_skb_to___skb+0x1ff/0x360 [ 145.276503][ T6996] bpf_prog_test_run_skb+0xb8f/0x1180 [ 145.276543][ T6996] ? cpu_online+0x60/0x60 [ 145.276565][ T6996] bpf_prog_test_run+0x31e/0x390 [ 145.276594][ T6996] __sys_bpf+0x5a5/0x6f0 [ 145.276618][ T6996] ? bpf_link_show_fdinfo+0x380/0x380 [ 145.276654][ T6996] ? vtime_user_exit+0x2c8/0x3e0 [ 145.276686][ T6996] __x64_sys_bpf+0x78/0x90 [ 145.276709][ T6996] do_syscall_64+0x4c/0xa0 [ 145.276729][ T6996] ? clear_bhb_loop+0x30/0x80 [ 145.276749][ T6996] ? clear_bhb_loop+0x30/0x80 [ 145.276775][ T6996] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.276796][ T6996] RIP: 0033:0x7f8b6d112799 [ 145.276821][ T6996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.276837][ T6996] RSP: 002b:00007f8b6b36c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.276860][ T6996] RAX: ffffffffffffffda RBX: 00007f8b6d38bfa0 RCX: 00007f8b6d112799 [ 145.276875][ T6996] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 000000000000000a [ 145.276888][ T6996] RBP: 00007f8b6b36c090 R08: 0000000000000000 R09: 0000000000000000 [ 145.276902][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.276914][ T6996] R13: 00007f8b6d38c038 R14: 00007f8b6d38bfa0 R15: 00007ffee6d668d8 [ 145.276954][ T6996] [ 145.540084][ T6993] netlink: 'syz.3.910': attribute type 6 has an invalid length. [ 145.684869][ T6993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.910'. [ 145.765006][ T7003] netlink: 'syz.0.913': attribute type 21 has an invalid length. [ 145.773324][ T7003] netlink: 'syz.0.913': attribute type 6 has an invalid length. [ 145.825205][ T7003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.913'. [ 145.888226][ T7012] netlink: 'syz.2.926': attribute type 28 has an invalid length. [ 145.944734][ T7012] netlink: 2 bytes leftover after parsing attributes in process `syz.2.926'. [ 146.027266][ T7012] netlink: 'syz.2.926': attribute type 3 has an invalid length. [ 146.054653][ T7012] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.926'. [ 146.166420][ T7012] netlink: 'syz.2.926': attribute type 10 has an invalid length. [ 146.190746][ T7012] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.926'. [ 146.591699][ T7043] netlink: 'syz.4.924': attribute type 4 has an invalid length. [ 146.618060][ T7040] netlink: 'syz.0.922': attribute type 21 has an invalid length. [ 146.626693][ T7043] netlink: 132 bytes leftover after parsing attributes in process `syz.4.924'. [ 146.639459][ T7040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.922'. [ 146.827225][ T7049] netlink: 132 bytes leftover after parsing attributes in process `syz.4.930'. [ 150.144864][ T7170] validate_nla: 22 callbacks suppressed [ 150.144896][ T7170] netlink: 'syz.1.976': attribute type 21 has an invalid length. [ 150.186864][ T7170] netlink: 'syz.1.976': attribute type 6 has an invalid length. [ 150.199227][ T7170] __nla_validate_parse: 13 callbacks suppressed [ 150.199254][ T7170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.976'. [ 150.750899][ T7194] netlink: 'syz.2.986': attribute type 21 has an invalid length. [ 150.768755][ T7194] netlink: 'syz.2.986': attribute type 6 has an invalid length. [ 150.786355][ T7194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.986'. [ 150.818122][ T7196] netlink: 'syz.4.987': attribute type 21 has an invalid length. [ 150.832425][ T7196] netlink: 'syz.4.987': attribute type 6 has an invalid length. [ 150.842474][ T7196] netlink: 132 bytes leftover after parsing attributes in process `syz.4.987'. [ 150.853371][ T7198] netlink: 'syz.1.988': attribute type 4 has an invalid length. [ 150.864175][ T7198] netlink: 132 bytes leftover after parsing attributes in process `syz.1.988'. [ 150.981315][ T7207] netlink: 'syz.1.991': attribute type 29 has an invalid length. [ 151.061358][ T7207] netlink: 'syz.1.991': attribute type 29 has an invalid length. [ 151.123972][ T7209] netlink: 'syz.4.992': attribute type 21 has an invalid length. [ 151.158743][ T7209] netlink: 132 bytes leftover after parsing attributes in process `syz.4.992'. [ 151.507717][ T7231] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1000'. [ 151.591628][ T7239] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1003'. [ 151.612317][ T7238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1002'. [ 151.743438][ T7248] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1007'. [ 151.869993][ T7245] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1005'. [ 155.875690][ T7311] validate_nla: 17 callbacks suppressed [ 155.875721][ T7311] netlink: 'syz.3.1027': attribute type 21 has an invalid length. [ 155.925068][ T7311] netlink: 'syz.3.1027': attribute type 6 has an invalid length. [ 155.964866][ T7311] __nla_validate_parse: 6 callbacks suppressed [ 155.964897][ T7311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1027'. [ 156.078723][ T7323] netlink: 'syz.2.1032': attribute type 21 has an invalid length. [ 156.114395][ T7323] netlink: 'syz.2.1032': attribute type 6 has an invalid length. [ 156.154690][ T7323] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1032'. [ 156.367915][ T7337] netlink: 'syz.3.1035': attribute type 4 has an invalid length. [ 156.425194][ T7337] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1035'. [ 156.444301][ T7344] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1037'. [ 156.478853][ T7344] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1037'. [ 156.978619][ T7366] netlink: 'syz.3.1044': attribute type 21 has an invalid length. [ 157.025029][ T7366] netlink: 'syz.3.1044': attribute type 6 has an invalid length. [ 157.054631][ T7366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1044'. [ 157.088341][ T7363] netlink: 'syz.2.1043': attribute type 21 has an invalid length. [ 157.114887][ T7363] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1043'. [ 157.364479][ T7372] netlink: 'syz.3.1047': attribute type 21 has an invalid length. [ 157.372778][ T7372] netlink: 'syz.3.1047': attribute type 6 has an invalid length. [ 157.414833][ T7372] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1047'. [ 157.538339][ T7380] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1051'. [ 157.688227][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.812911][ T7388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.025164][ T7402] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1056'. [ 158.319387][ T7416] team0: Device ipvlan1 failed to register rx_handler [ 158.948218][ T7443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.970203][ T7443] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 159.019530][ T7442] team0: Device hsr_slave_0 failed to register rx_handler [ 159.092439][ T7440] team0: Device hsr_slave_0 failed to register rx_handler [ 159.579777][ T7456] device syzkaller0 entered promiscuous mode [ 160.987279][ T7516] validate_nla: 14 callbacks suppressed [ 160.987322][ T7516] netlink: 'syz.4.1098': attribute type 4 has an invalid length. [ 161.034326][ T7517] __nla_validate_parse: 7 callbacks suppressed [ 161.034342][ T7517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1097'. [ 161.042805][ T7516] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1098'. [ 161.317957][ T7537] netlink: 'syz.2.1104': attribute type 3 has an invalid length. [ 161.332375][ T7517] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1097'. [ 161.343668][ T7537] netlink: 'syz.2.1104': attribute type 6 has an invalid length. [ 161.383595][ T7537] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1104'. [ 161.442790][ T7541] netlink: 'syz.4.1105': attribute type 21 has an invalid length. [ 161.481372][ T7541] netlink: 'syz.4.1105': attribute type 6 has an invalid length. [ 161.492753][ T7541] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1105'. [ 162.021311][ T7567] netlink: 'syz.0.1113': attribute type 4 has an invalid length. [ 162.054668][ T7567] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1113'. [ 162.100760][ T7574] netlink: 'syz.1.1115': attribute type 29 has an invalid length. [ 162.175082][ T7574] netlink: 'syz.1.1115': attribute type 29 has an invalid length. [ 162.259394][ T7581] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1117'. [ 162.424552][ T7583] netlink: 'syz.3.1121': attribute type 21 has an invalid length. [ 162.456135][ T7583] netlink: 'syz.3.1121': attribute type 6 has an invalid length. [ 162.483275][ T7583] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1121'. [ 162.868251][ T7601] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1127'. [ 163.170804][ T7608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1130'. [ 164.404269][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.412395][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.543946][ T7635] device bridge_slave_1 left promiscuous mode [ 164.551578][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.570166][ T7635] device bridge_slave_0 left promiscuous mode [ 164.583415][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.320388][ T7680] validate_nla: 8 callbacks suppressed [ 166.320402][ T7680] netlink: 'syz.3.1151': attribute type 21 has an invalid length. [ 166.343045][ T7679] netlink: 'syz.4.1153': attribute type 4 has an invalid length. [ 166.364715][ T7680] netlink: 'syz.3.1151': attribute type 6 has an invalid length. [ 166.372543][ T7680] __nla_validate_parse: 5 callbacks suppressed [ 166.372555][ T7680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1151'. [ 166.425125][ T7679] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1153'. [ 166.531863][ T7683] netlink: 'syz.2.1154': attribute type 21 has an invalid length. [ 166.601215][ T7683] netlink: 'syz.2.1154': attribute type 6 has an invalid length. [ 166.649583][ T7683] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1154'. [ 166.676427][ T7685] netlink: 'syz.1.1155': attribute type 21 has an invalid length. [ 166.697498][ T7685] netlink: 'syz.1.1155': attribute type 6 has an invalid length. [ 166.763129][ T7685] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1155'. [ 167.585739][ T7720] netlink: 'syz.1.1166': attribute type 21 has an invalid length. [ 167.643514][ T7720] netlink: 'syz.1.1166': attribute type 6 has an invalid length. [ 167.681191][ T7720] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1166'. [ 167.866748][ T7722] netlink: 'syz.0.1177': attribute type 21 has an invalid length. [ 167.894794][ T7722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1177'. [ 167.952081][ T7724] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1168'. [ 168.245098][ T7732] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.1170'. [ 168.307186][ T7729] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1167'. [ 168.753649][ T7757] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.861765][ T7759] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1187'. [ 169.073340][ T7762] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.993089][ T7797] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 170.096465][ T7801] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.373331][ T7811] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 171.576302][ T7849] validate_nla: 22 callbacks suppressed [ 171.576335][ T7849] netlink: 'syz.2.1210': attribute type 3 has an invalid length. [ 171.608588][ T7849] __nla_validate_parse: 21 callbacks suppressed [ 171.608654][ T7849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1210'. [ 171.830804][ T7858] netlink: 'syz.2.1212': attribute type 21 has an invalid length. [ 171.867572][ T7858] netlink: 'syz.2.1212': attribute type 6 has an invalid length. [ 171.900563][ T7858] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1212'. [ 171.918934][ T7857] netlink: 'syz.4.1211': attribute type 21 has an invalid length. [ 171.969076][ T7857] netlink: 'syz.4.1211': attribute type 6 has an invalid length. [ 172.049487][ T7857] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1211'. [ 172.191457][ T7864] netlink: 'syz.2.1215': attribute type 21 has an invalid length. [ 172.218485][ T7864] netlink: 'syz.2.1215': attribute type 6 has an invalid length. [ 172.226664][ T7864] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1215'. [ 172.265929][ T7866] netlink: 'syz.3.1228': attribute type 4 has an invalid length. [ 172.294129][ T7866] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1228'. [ 172.310380][ T7870] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.436763][ T7874] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1216'. [ 172.514588][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 173.399279][ T7895] netlink: 'syz.4.1227': attribute type 21 has an invalid length. [ 173.426605][ T7895] netlink: 'syz.4.1227': attribute type 6 has an invalid length. [ 173.487824][ T7895] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1227'. [ 173.839933][ T7910] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1232'. [ 173.859556][ T7910] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 174.414349][ T7940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1243'. [ 175.520910][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 175.526370][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 175.530679][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 175.549411][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 175.563663][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 175.619992][ T4209] tipc: Subscription rejected, illegal request [ 175.994803][ T1108] syzkaller0: tun_net_xmit 76 [ 176.711264][ T8001] IPv6: Can't replace route, no match found [ 176.759267][ T8001] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 177.057348][ T8012] validate_nla: 5 callbacks suppressed [ 177.057376][ T8012] netlink: 'syz.0.1270': attribute type 21 has an invalid length. [ 177.111244][ T8012] netlink: 'syz.0.1270': attribute type 6 has an invalid length. [ 177.146325][ T8012] __nla_validate_parse: 5 callbacks suppressed [ 177.146356][ T8012] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1270'. [ 177.628745][ T8032] netlink: 'syz.1.1276': attribute type 4 has an invalid length. [ 177.664759][ T8032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1276'. [ 178.244934][ T8051] netlink: 'syz.2.1286': attribute type 21 has an invalid length. [ 178.271436][ T8051] netlink: 'syz.2.1286': attribute type 6 has an invalid length. [ 178.308528][ T8051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1286'. [ 178.495676][ T8062] netlink: 'syz.2.1291': attribute type 17 has an invalid length. [ 178.609230][ T8069] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.1294'. [ 178.742411][ T8077] netlink: 'syz.0.1297': attribute type 3 has an invalid length. [ 178.769502][ T8077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1297'. [ 178.921033][ T8084] device aaaaaaaaaaaaaaa entered promiscuous mode [ 178.943370][ T8085] netlink: 'syz.1.1306': attribute type 10 has an invalid length. [ 179.028576][ T8093] netlink: 'syz.0.1300': attribute type 3 has an invalid length. [ 179.037084][ T8093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1300'. [ 179.130018][ T8085] team0 (unregistering): Port device team_slave_0 removed [ 179.192834][ T8085] team0 (unregistering): Port device team_slave_1 removed [ 179.525424][ T154] wlan1: Trigger new scan to find an IBSS to join [ 179.652658][ T8106] netlink: 'syz.1.1307': attribute type 9 has an invalid length. [ 179.685216][ T8106] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1307'. [ 180.746377][ T8136] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1317'. [ 180.942342][ T8149] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1323'. [ 181.099527][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 181.752723][ T8187] team0 (unregistering): Port device team_slave_0 removed [ 181.873711][ T8187] team0 (unregistering): Port device team_slave_1 removed [ 181.980983][ T8197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.177129][ T8211] validate_nla: 10 callbacks suppressed [ 182.177145][ T8211] netlink: 'syz.4.1348': attribute type 9 has an invalid length. [ 182.197061][ T8211] __nla_validate_parse: 4 callbacks suppressed [ 182.197073][ T8211] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1348'. [ 182.274764][ T8214] netlink: 'syz.0.1349': attribute type 21 has an invalid length. [ 182.292291][ T8214] netlink: 'syz.0.1349': attribute type 6 has an invalid length. [ 182.302615][ T8214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1349'. [ 182.418232][ T8218] netlink: 'syz.3.1352': attribute type 3 has an invalid length. [ 182.457775][ T8218] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1352'. [ 182.483711][ T8222] device syzkaller0 entered promiscuous mode [ 182.981959][ T8242] device syzkaller0 entered promiscuous mode [ 183.038869][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 183.486590][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1366'. [ 183.544590][ T3041] wlan1: Trigger new scan to find an IBSS to join [ 183.579526][ T8258] netlink: 'syz.2.1364': attribute type 4 has an invalid length. [ 183.613625][ T8258] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1364'. [ 183.624618][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1366'. [ 183.828811][ T8268] netlink: 'syz.2.1371': attribute type 10 has an invalid length. [ 183.909981][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 183.942631][ T8266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.020732][ T8270] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1369'. [ 184.042171][ T8270] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 184.673992][ T8297] netlink: 'syz.3.1382': attribute type 21 has an invalid length. [ 184.714972][ T8297] netlink: 'syz.3.1382': attribute type 6 has an invalid length. [ 184.742496][ T8297] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1382'. [ 184.770785][ T8302] netlink: 'syz.2.1383': attribute type 21 has an invalid length. [ 184.795324][ T8302] netlink: 'syz.2.1383': attribute type 6 has an invalid length. [ 184.822295][ T8302] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1383'. [ 185.323721][ T8329] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 185.496595][ T8339] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.1398'. [ 186.561837][ T3041] wlan1: Trigger new scan to find an IBSS to join [ 186.680191][ T619] wlan1: Creating new IBSS network, BSSID ae:17:28:bd:2a:b2 [ 187.416952][ T8436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 187.464230][ T8436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.541368][ T8436] __nla_validate_parse: 6 callbacks suppressed [ 187.541383][ T8436] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1434'. [ 187.568978][ T8436] bridge_slave_1: default FDB implementation only supports local addresses [ 187.583206][ T8435] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1436'. [ 187.900340][ T8457] validate_nla: 14 callbacks suppressed [ 187.900357][ T8457] netlink: 'syz.1.1443': attribute type 10 has an invalid length. [ 188.432049][ T8477] netlink: 'syz.1.1449': attribute type 21 has an invalid length. [ 189.376657][ T8501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1458'. [ 189.421236][ T8506] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1460'. [ 189.497503][ T8508] netlink: 'syz.0.1462': attribute type 10 has an invalid length. [ 190.325880][ T8524] netlink: 'syz.0.1466': attribute type 21 has an invalid length. [ 190.492714][ T8530] device syzkaller0 entered promiscuous mode [ 190.504960][ T4259] syzkaller0: tun_net_xmit 76 [ 190.535482][ T8532] netlink: 'syz.2.1469': attribute type 4 has an invalid length. [ 190.559365][ T4259] syzkaller0: tun_net_xmit 76 [ 190.604863][ T8532] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1469'. [ 190.610832][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 191.121571][ T8555] netlink: 'syz.0.1478': attribute type 6 has an invalid length. [ 191.150351][ T8559] netlink: 'syz.4.1479': attribute type 21 has an invalid length. [ 191.171338][ T8559] netlink: 'syz.4.1479': attribute type 6 has an invalid length. [ 191.190432][ T8559] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1479'. [ 191.544980][ T8578] netlink: 'syz.4.1484': attribute type 4 has an invalid length. [ 191.573797][ T8578] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1484'. [ 192.071722][ T8598] netlink: 'syz.4.1493': attribute type 3 has an invalid length. [ 192.116804][ T8598] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1493'. [ 192.580950][ T8619] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1498'. [ 192.685092][ T8625] sock: sock_timestamping_bind_phc: sock not bind to device [ 192.693621][ T8619] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 193.046029][ T8633] validate_nla: 2 callbacks suppressed [ 193.046076][ T8633] netlink: 'syz.4.1504': attribute type 4 has an invalid length. [ 193.093706][ T8633] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1504'. [ 193.205713][ T8641] netlink: 'syz.2.1507': attribute type 17 has an invalid length. [ 193.269093][ T8646] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.1508'. [ 193.303865][ T8647] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1509'. [ 193.385495][ T8649] netlink: 'syz.3.1511': attribute type 3 has an invalid length. [ 193.393391][ T8649] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1511'. [ 193.413165][ T8647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1509'. [ 193.442494][ T8652] netlink: 'syz.2.1512': attribute type 21 has an invalid length. [ 193.469749][ T8652] netlink: 'syz.2.1512': attribute type 6 has an invalid length. [ 193.494886][ T8652] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1512'. [ 193.558211][ T8647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1509'. [ 193.814435][ T8668] sock: sock_timestamping_bind_phc: sock not bind to device [ 193.855395][ T8671] netlink: 'syz.2.1519': attribute type 4 has an invalid length. [ 193.863266][ T8671] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1519'. [ 193.922408][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.928750][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.436727][ T8701] netlink: 'syz.3.1528': attribute type 3 has an invalid length. [ 194.444491][ T8701] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1528'. [ 194.773203][ T8713] sock: sock_timestamping_bind_phc: sock not bind to device [ 195.248791][ T8737] netlink: 'syz.3.1542': attribute type 21 has an invalid length. [ 195.303416][ T8737] netlink: 'syz.3.1542': attribute type 6 has an invalid length. [ 195.391807][ T8730] netlink: 'syz.1.1538': attribute type 21 has an invalid length. [ 196.351120][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.570324][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.697267][ T8787] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 197.486491][ T8813] device syzkaller0 entered promiscuous mode [ 197.946224][ T8829] __nla_validate_parse: 8 callbacks suppressed [ 197.946304][ T8829] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1578'. [ 198.013338][ T8831] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1577'. [ 198.111522][ T8831] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1577'. [ 198.125222][ T8835] validate_nla: 13 callbacks suppressed [ 198.125251][ T8835] netlink: 'syz.4.1579': attribute type 21 has an invalid length. [ 198.229297][ T8835] netlink: 'syz.4.1579': attribute type 6 has an invalid length. [ 198.290020][ T8835] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1579'. [ 198.404818][ T8850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.987540][ T8875] netlink: 'syz.2.1594': attribute type 21 has an invalid length. [ 199.048816][ T8875] netlink: 'syz.2.1594': attribute type 6 has an invalid length. [ 199.154715][ T8875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1594'. [ 199.247296][ T8880] netlink: 'syz.3.1595': attribute type 10 has an invalid length. [ 199.315635][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.466938][ T8880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.569326][ T8895] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1600'. [ 199.593810][ T8880] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 199.634892][ T8883] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1595'. [ 199.804411][ T8892] ±ÿ: renamed from team_slave_1 [ 199.894833][ T8896] netlink: 'syz.2.1601': attribute type 10 has an invalid length. [ 200.613693][ T8916] netlink: 'syz.2.1607': attribute type 4 has an invalid length. [ 200.717498][ T8916] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1607'. [ 200.840794][ T8926] netlink: 'syz.4.1611': attribute type 10 has an invalid length. [ 201.559432][ T8949] netlink: 'syz.4.1620': attribute type 10 has an invalid length. [ 201.782534][ T8951] netlink: 'syz.2.1622': attribute type 21 has an invalid length. [ 201.837348][ T8951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1622'. [ 201.901043][ T8959] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1626'. [ 202.779460][ T8997] device syzkaller0 left promiscuous mode [ 203.124483][ T9011] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1644'. [ 203.478413][ T144] tipc: Subscription rejected, illegal request [ 203.802180][ T9039] FAULT_INJECTION: forcing a failure. [ 203.802180][ T9039] name failslab, interval 1, probability 0, space 0, times 0 [ 203.912232][ T9039] CPU: 1 PID: 9039 Comm: syz.1.1653 Not tainted syzkaller #0 [ 203.919661][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.929738][ T9039] Call Trace: [ 203.933033][ T9039] [ 203.935981][ T9039] dump_stack_lvl+0x188/0x250 [ 203.940697][ T9039] ? show_regs_print_info+0x20/0x20 [ 203.945925][ T9039] ? load_image+0x400/0x400 [ 203.950455][ T9039] ? __might_sleep+0xf0/0xf0 [ 203.955068][ T9039] ? __lock_acquire+0x7d10/0x7d10 [ 203.960121][ T9039] should_fail+0x38c/0x4c0 [ 203.964566][ T9039] should_failslab+0x5/0x20 [ 203.969096][ T9039] slab_pre_alloc_hook+0x51/0xc0 [ 203.974147][ T9039] kmem_cache_alloc_node+0x47/0x2d0 [ 203.979369][ T9039] ? dup_task_struct+0x57/0xb30 [ 203.984251][ T9039] dup_task_struct+0x57/0xb30 [ 203.988954][ T9039] ? _raw_spin_unlock_irq+0x1f/0x40 [ 203.994177][ T9039] ? lockdep_hardirqs_on+0x94/0x140 [ 203.999423][ T9039] copy_process+0x5f0/0x3e20 [ 204.004061][ T9039] ? __pidfd_prepare+0x140/0x140 [ 204.009035][ T9039] kernel_clone+0x23f/0x990 [ 204.013568][ T9039] ? trace_event_raw_event_lock+0x270/0x270 [ 204.019530][ T9039] ? trace_event_raw_event_lock+0x270/0x270 [ 204.025450][ T9039] ? vfs_write+0x8b2/0xd60 [ 204.029896][ T9039] ? create_io_thread+0x180/0x180 [ 204.034955][ T9039] __x64_sys_clone+0x19a/0x210 [ 204.039750][ T9039] ? __ia32_sys_vfork+0x130/0x130 [ 204.044809][ T9039] ? lockdep_hardirqs_on+0x94/0x140 [ 204.050038][ T9039] do_syscall_64+0x4c/0xa0 [ 204.054478][ T9039] ? clear_bhb_loop+0x30/0x80 [ 204.059190][ T9039] ? clear_bhb_loop+0x30/0x80 [ 204.063891][ T9039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 204.069816][ T9039] RIP: 0033:0x7f8b6d112799 [ 204.074256][ T9039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.093892][ T9039] RSP: 002b:00007f8b6b36bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 204.102352][ T9039] RAX: ffffffffffffffda RBX: 00007f8b6d38bfa0 RCX: 00007f8b6d112799 [ 204.110350][ T9039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001000000 [ 204.118334][ T9039] RBP: 00007f8b6b36c090 R08: 0000000000000000 R09: 0000000000000000 [ 204.126320][ T9039] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 204.134304][ T9039] R13: 00007f8b6d38c038 R14: 00007f8b6d38bfa0 R15: 00007ffee6d668d8 [ 204.142303][ T9039] [ 204.392513][ T9052] validate_nla: 5 callbacks suppressed [ 204.392559][ T9052] netlink: 'syz.1.1658': attribute type 4 has an invalid length. [ 204.457864][ T9052] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1658'. [ 204.481015][ T9057] netlink: 'syz.4.1660': attribute type 6 has an invalid length. [ 204.908845][ T9072] netlink: 'syz.4.1667': attribute type 21 has an invalid length. [ 204.941683][ T9074] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1668'. [ 204.965712][ T9072] netlink: 'syz.4.1667': attribute type 6 has an invalid length. [ 204.974251][ T9072] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1667'. [ 205.638699][ T9101] netlink: 'syz.3.1675': attribute type 4 has an invalid length. [ 205.683338][ T9101] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1675'. [ 205.875470][ T9110] netlink: 'syz.0.1679': attribute type 7 has an invalid length. [ 205.939834][ T9113] netlink: 'syz.3.1681': attribute type 21 has an invalid length. [ 205.960245][ T9113] netlink: 'syz.3.1681': attribute type 6 has an invalid length. [ 205.989518][ T9113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1681'. [ 206.028312][ T9116] netlink: 9087 bytes leftover after parsing attributes in process `syz.4.1682'. [ 206.711103][ T9155] netlink: 'syz.4.1697': attribute type 21 has an invalid length. [ 206.731523][ T9155] netlink: 'syz.4.1697': attribute type 6 has an invalid length. [ 206.760748][ T9155] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1697'. [ 206.968034][ T9165] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1699'. [ 207.022532][ T9166] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1699'. [ 208.218992][ T9190] delete_channel: no stack [ 208.232259][ T9212] __nla_validate_parse: 5 callbacks suppressed [ 208.232295][ T9212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1717'. [ 208.823573][ T9237] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1728'. [ 208.882401][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1732'. [ 208.981882][ T9246] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1731'. [ 209.413603][ T9267] validate_nla: 12 callbacks suppressed [ 209.428420][ T9267] netlink: 'syz.2.1741': attribute type 3 has an invalid length. [ 209.461466][ T9267] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1741'. [ 209.624685][ T9267] netlink: 35343 bytes leftover after parsing attributes in process `syz.2.1741'. [ 209.660312][ T9267] tc_dump_action: action bad kind [ 210.315762][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 210.582047][ T9303] netlink: 'syz.1.1753': attribute type 27 has an invalid length. [ 210.610740][ T9303] C: renamed from team_slave_0 [ 210.846254][ T9308] netlink: 'syz.1.1753': attribute type 21 has an invalid length. [ 210.854232][ T9308] netlink: 'syz.1.1753': attribute type 6 has an invalid length. [ 210.958333][ T9308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1753'. [ 211.153499][ T3041] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 211.167363][ T3041] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 211.441615][ T9327] netlink: 'syz.1.1763': attribute type 4 has an invalid length. [ 211.464804][ T9327] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1763'. [ 212.107311][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 212.413746][ T9351] netlink: 'syz.0.1772': attribute type 3 has an invalid length. [ 212.663298][ T9354] tc_dump_action: action bad kind [ 212.951051][ T9363] netlink: 'syz.3.1776': attribute type 4 has an invalid length. [ 213.120030][ T9369] netlink: 'syz.0.1779': attribute type 21 has an invalid length. [ 213.234774][ T9369] __nla_validate_parse: 4 callbacks suppressed [ 213.234801][ T9369] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1779'. [ 213.291795][ T9372] netlink: 'syz.4.1778': attribute type 21 has an invalid length. [ 213.367350][ T9372] netlink: 'syz.4.1778': attribute type 6 has an invalid length. [ 213.440944][ T9372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1778'. [ 213.502025][ T9384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1784'. [ 213.610320][ T9384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1784'. [ 214.039591][ T9403] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1791'. [ 214.181625][ T9399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.315907][ T9399] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 215.084644][ T9421] validate_nla: 2 callbacks suppressed [ 215.084661][ T9421] netlink: 'syz.4.1796': attribute type 6 has an invalid length. [ 215.499450][ T9435] netlink: 'syz.2.1798': attribute type 21 has an invalid length. [ 215.539637][ T9435] netlink: 'syz.2.1798': attribute type 6 has an invalid length. [ 215.625979][ T9435] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1798'. [ 216.383240][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'. [ 217.579250][ T9487] netlink: 'syz.1.1816': attribute type 4 has an invalid length. [ 217.653354][ T9487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1816'. [ 217.766824][ T9492] netlink: 'syz.0.1819': attribute type 4 has an invalid length. [ 217.807946][ T9492] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1819'. [ 217.906036][ T9493] netlink: 'syz.4.1818': attribute type 21 has an invalid length. [ 217.914176][ T9493] netlink: 'syz.4.1818': attribute type 6 has an invalid length. [ 217.966688][ T9501] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1822'. [ 218.150738][ T9499] netlink: 'syz.2.1820': attribute type 10 has an invalid length. [ 218.586791][ T9519] __nla_validate_parse: 2 callbacks suppressed [ 218.586806][ T9519] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1827'. [ 218.893808][ T9519] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1827'. [ 219.018551][ T9528] netlink: 'syz.4.1828': attribute type 40 has an invalid length. [ 221.710619][ T9555] netlink: 'syz.2.1836': attribute type 21 has an invalid length. [ 221.833964][ T9555] netlink: 'syz.2.1836': attribute type 6 has an invalid length. [ 221.944327][ T9555] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1836'. [ 222.355498][ T9575] netlink: 'syz.3.1846': attribute type 4 has an invalid length. [ 222.363489][ T9575] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1846'. [ 222.695814][ T9591] netlink: 'syz.4.1853': attribute type 4 has an invalid length. [ 222.734822][ T9591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1853'. [ 223.853548][ T9643] FAULT_INJECTION: forcing a failure. [ 223.853548][ T9643] name failslab, interval 1, probability 0, space 0, times 0 [ 223.937148][ T9643] CPU: 1 PID: 9643 Comm: syz.1.1870 Not tainted syzkaller #0 [ 223.944568][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.954645][ T9643] Call Trace: [ 223.957958][ T9643] [ 223.960915][ T9643] dump_stack_lvl+0x188/0x250 [ 223.965612][ T9643] ? show_regs_print_info+0x20/0x20 [ 223.970825][ T9643] ? load_image+0x400/0x400 [ 223.975370][ T9643] ? __might_sleep+0xf0/0xf0 [ 223.979978][ T9643] ? __lock_acquire+0x7d10/0x7d10 [ 223.985040][ T9643] should_fail+0x38c/0x4c0 [ 223.989494][ T9643] should_failslab+0x5/0x20 [ 223.994015][ T9643] slab_pre_alloc_hook+0x51/0xc0 [ 223.998979][ T9643] __kmalloc_node_track_caller+0x68/0x3a0 [ 224.004733][ T9643] ? netlink_sendmsg+0x654/0xbe0 [ 224.009698][ T9643] ? kmem_cache_alloc_node+0x162/0x2d0 [ 224.015208][ T9643] ? __alloc_skb+0xf4/0x750 [ 224.019738][ T9643] ? netlink_sendmsg+0x654/0xbe0 [ 224.024694][ T9643] __alloc_skb+0x22c/0x750 [ 224.029158][ T9643] netlink_sendmsg+0x654/0xbe0 [ 224.033963][ T9643] ? netlink_getsockopt+0x570/0x570 [ 224.039183][ T9643] ? aa_sock_msg_perm+0x94/0x150 [ 224.044143][ T9643] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 224.049450][ T9643] ? security_socket_sendmsg+0x7c/0xa0 [ 224.054927][ T9643] ? netlink_getsockopt+0x570/0x570 [ 224.060163][ T9643] ____sys_sendmsg+0x5b7/0x8f0 [ 224.064965][ T9643] ? __sys_sendmsg_sock+0x30/0x30 [ 224.070030][ T9643] ? import_iovec+0x6f/0xa0 [ 224.074560][ T9643] ___sys_sendmsg+0x236/0x2e0 [ 224.079274][ T9643] ? __sys_sendmsg+0x2a0/0x2a0 [ 224.084093][ T9643] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 224.090722][ T9643] __se_sys_sendmsg+0x1af/0x290 [ 224.095594][ T9643] ? __x64_sys_sendmsg+0x80/0x80 [ 224.100543][ T9643] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 224.106560][ T9643] ? lockdep_hardirqs_on+0x94/0x140 [ 224.111778][ T9643] do_syscall_64+0x4c/0xa0 [ 224.116208][ T9643] ? clear_bhb_loop+0x30/0x80 [ 224.120898][ T9643] ? clear_bhb_loop+0x30/0x80 [ 224.125598][ T9643] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.131795][ T9643] RIP: 0033:0x7f8b6d112799 [ 224.136250][ T9643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.155878][ T9643] RSP: 002b:00007f8b6b36c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.164307][ T9643] RAX: ffffffffffffffda RBX: 00007f8b6d38bfa0 RCX: 00007f8b6d112799 [ 224.172297][ T9643] RDX: 00000000200000c0 RSI: 0000200000000000 RDI: 0000000000000005 [ 224.180283][ T9643] RBP: 00007f8b6b36c090 R08: 0000000000000000 R09: 0000000000000000 [ 224.188271][ T9643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.196279][ T9643] R13: 00007f8b6d38c038 R14: 00007f8b6d38bfa0 R15: 00007ffee6d668d8 [ 224.204299][ T9643] [ 224.674926][ T9664] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.1875'. [ 225.043551][ T9676] netlink: 'syz.1.1878': attribute type 4 has an invalid length. [ 225.120948][ T9676] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1878'. [ 225.486467][ T9698] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 225.527268][ T9698] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1887'. [ 225.760922][ T9714] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1895'. [ 225.887988][ T9722] netlink: 'syz.3.1891': attribute type 4 has an invalid length. [ 225.934953][ T9720] netlink: 'syz.4.1896': attribute type 2 has an invalid length. [ 225.943078][ T9720] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.1896'. [ 226.012555][ T9722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1891'. [ 226.121022][ T9719] netlink: 'syz.1.1895': attribute type 10 has an invalid length. [ 226.151298][ T9719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.306427][ T9728] netlink: 'syz.2.1898': attribute type 3 has an invalid length. [ 226.324754][ T9728] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1898'. [ 226.604613][ T9719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.781226][ T9719] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 227.842880][ T9768] netlink: 'syz.3.1912': attribute type 4 has an invalid length. [ 227.935439][ T9768] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1912'. [ 228.527146][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 229.629927][ T9814] netlink: 'syz.0.1927': attribute type 29 has an invalid length. [ 230.123018][ T9814] netlink: 'syz.0.1927': attribute type 29 has an invalid length. [ 230.174104][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'. [ 230.309848][ T9825] netlink: 'syz.1.1930': attribute type 4 has an invalid length. [ 230.407738][ T9825] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1930'. [ 231.719634][ T9879] netlink: 'syz.3.1947': attribute type 4 has an invalid length. [ 231.764657][ T9879] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1947'. [ 232.695827][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 232.834297][ T9911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.122423][ T9921] netlink: 'syz.1.1964': attribute type 4 has an invalid length. [ 233.160614][ T9921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1964'. [ 233.238821][ T9925] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1966'. [ 233.591930][ T9938] netlink: 'syz.4.1969': attribute type 21 has an invalid length. [ 233.734706][ T9938] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1969'. [ 234.155602][ T9956] device macvlan1 entered promiscuous mode [ 234.195163][ T9960] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1979'. [ 234.255822][ T9960] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1979'. [ 234.285804][ T9958] netlink: 'syz.2.1978': attribute type 4 has an invalid length. [ 234.294446][ T9958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1978'. [ 235.401682][ T9987] netlink: 'syz.1.1986': attribute type 10 has an invalid length. [ 235.637252][ T9989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1987'. [ 236.520321][T10017] netlink: 'syz.4.1995': attribute type 4 has an invalid length. [ 236.560053][T10017] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1995'. [ 236.856827][T10029] netlink: 'syz.3.2001': attribute type 29 has an invalid length. [ 236.920623][T10029] netlink: 'syz.3.2001': attribute type 29 has an invalid length. [ 237.920748][T10043] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2005'. [ 239.737750][T10108] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.2025'. [ 239.789494][T10108] netlink: 'syz.3.2025': attribute type 10 has an invalid length. [ 239.814798][T10108] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2025'. [ 239.992885][T10116] netlink: 'syz.4.2027': attribute type 10 has an invalid length. [ 240.064752][T10116] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2027'. [ 240.239315][T10126] netlink: 'syz.3.2030': attribute type 10 has an invalid length. [ 240.421952][T10131] netlink: 'syz.1.2031': attribute type 5 has an invalid length. [ 240.609030][T10133] netlink: 15966 bytes leftover after parsing attributes in process `syz.2.2033'. [ 240.715639][T10132] delete_channel: no stack [ 241.318117][T10161] netlink: 'syz.0.2041': attribute type 7 has an invalid length. [ 241.551420][T10161] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2041'. [ 241.852279][T10169] netlink: 'syz.1.2044': attribute type 2 has an invalid length. [ 241.915030][T10169] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2044'. [ 242.154356][ T4209] tipc: Subscription rejected, illegal request [ 244.147157][T10229] netlink: 'syz.4.2065': attribute type 4 has an invalid length. [ 244.255067][T10229] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2065'. [ 244.955675][T10259] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2077'. [ 245.968854][T10286] netlink: 'syz.3.2086': attribute type 29 has an invalid length. [ 246.409063][T10286] netlink: 'syz.3.2086': attribute type 29 has an invalid length. [ 246.836995][T10304] netlink: 'syz.2.2091': attribute type 3 has an invalid length. [ 246.912529][T10304] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2091'. [ 248.927639][T10347] netlink: 'syz.3.2106': attribute type 17 has an invalid length. [ 249.679321][T10363] FAULT_INJECTION: forcing a failure. [ 249.679321][T10363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.939876][T10363] CPU: 1 PID: 10363 Comm: syz.2.2112 Not tainted syzkaller #0 [ 249.947397][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.957479][T10363] Call Trace: [ 249.960776][T10363] [ 249.963726][T10363] dump_stack_lvl+0x188/0x250 [ 249.968428][T10363] ? show_regs_print_info+0x20/0x20 [ 249.973655][T10363] ? load_image+0x400/0x400 [ 249.978177][T10363] ? __lock_acquire+0x7d10/0x7d10 [ 249.983228][T10363] should_fail+0x38c/0x4c0 [ 249.987669][T10363] _copy_from_iter+0x22e/0x1170 [ 249.992544][T10363] ? __lock_acquire+0x7d10/0x7d10 [ 249.997596][T10363] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 250.003011][T10363] ? __virt_addr_valid+0x3c6/0x470 [ 250.008151][T10363] ? __phys_addr_symbol+0x2b/0x70 [ 250.013187][T10363] ? __check_object_size+0x30c/0x410 [ 250.018490][T10363] netlink_sendmsg+0x758/0xbe0 [ 250.023301][T10363] ? netlink_getsockopt+0x570/0x570 [ 250.028530][T10363] ? aa_sock_msg_perm+0x94/0x150 [ 250.033490][T10363] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 250.038792][T10363] ? security_socket_sendmsg+0x7c/0xa0 [ 250.044272][T10363] ? netlink_getsockopt+0x570/0x570 [ 250.049491][T10363] ____sys_sendmsg+0x5b7/0x8f0 [ 250.054298][T10363] ? __sys_sendmsg_sock+0x30/0x30 [ 250.059354][T10363] ? import_iovec+0x6f/0xa0 [ 250.063894][T10363] ___sys_sendmsg+0x236/0x2e0 [ 250.068604][T10363] ? __sys_sendmsg+0x2a0/0x2a0 [ 250.073395][T10363] ? vfs_write+0x8b2/0xd60 [ 250.077848][T10363] __se_sys_sendmsg+0x1af/0x290 [ 250.082716][T10363] ? __x64_sys_sendmsg+0x80/0x80 [ 250.087681][T10363] ? syscall_enter_from_user_mode+0x2a/0x70 [ 250.093599][T10363] do_syscall_64+0x4c/0xa0 [ 250.098041][T10363] ? clear_bhb_loop+0x30/0x80 [ 250.102762][T10363] ? clear_bhb_loop+0x30/0x80 [ 250.107463][T10363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.113377][T10363] RIP: 0033:0x7f691dd61799 [ 250.117806][T10363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.137439][T10363] RSP: 002b:00007f691bfbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.145877][T10363] RAX: ffffffffffffffda RBX: 00007f691dfdafa0 RCX: 00007f691dd61799 [ 250.153863][T10363] RDX: 00000000200000c0 RSI: 0000200000000000 RDI: 0000000000000005 [ 250.161850][T10363] RBP: 00007f691bfbb090 R08: 0000000000000000 R09: 0000000000000000 [ 250.169867][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.177857][T10363] R13: 00007f691dfdb038 R14: 00007f691dfdafa0 R15: 00007ffce0b43a78 [ 250.185858][T10363] [ 250.197074][T10375] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.2116'. [ 250.485402][T10379] netlink: 'syz.1.2117': attribute type 10 has an invalid length. [ 250.493257][T10379] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2117'. [ 250.642349][T10386] netlink: 'syz.0.2120': attribute type 9 has an invalid length. [ 250.694842][T10386] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2120'. [ 251.871785][T10405] netlink: 'syz.3.2128': attribute type 3 has an invalid length. [ 251.954810][T10405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2128'. [ 252.273836][T10415] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2132'. [ 252.395274][T10415] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 252.472305][T10416] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 252.501325][T10415] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 252.536113][T10415] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 252.557689][T10415] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 252.581180][T10415] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 252.628852][T10415] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 252.677652][T10415] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 252.747127][T10415] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 252.815994][T10429] FAULT_INJECTION: forcing a failure. [ 252.815994][T10429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.855152][T10429] CPU: 1 PID: 10429 Comm: syz.1.2138 Not tainted syzkaller #0 [ 252.862652][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.872741][T10429] Call Trace: [ 252.876054][T10429] [ 252.879003][T10429] dump_stack_lvl+0x188/0x250 [ 252.883715][T10429] ? show_regs_print_info+0x20/0x20 [ 252.888940][T10429] ? load_image+0x400/0x400 [ 252.893457][T10429] ? __lock_acquire+0x7d10/0x7d10 [ 252.898518][T10429] should_fail+0x38c/0x4c0 [ 252.902996][T10429] _copy_from_user+0x2e/0x170 [ 252.907692][T10429] __copy_msghdr_from_user+0xc9/0x630 [ 252.913089][T10429] ? verify_lock_unused+0x140/0x140 [ 252.918321][T10429] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 252.923641][T10429] ___sys_sendmsg+0x19a/0x2e0 [ 252.928345][T10429] ? __sys_sendmsg+0x2a0/0x2a0 [ 252.933165][T10429] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 252.939179][T10429] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 252.945347][T10429] ? lockdep_hardirqs_on+0x94/0x140 [ 252.950577][T10429] ? __se_sys_sendmsg+0xe8/0x290 [ 252.955583][T10429] ? kasan_check_range+0x80/0x290 [ 252.960637][T10429] __se_sys_sendmsg+0x1af/0x290 [ 252.965506][T10429] ? __x64_sys_sendmsg+0x80/0x80 [ 252.970471][T10429] ? syscall_enter_from_user_mode+0x2a/0x70 [ 252.976389][T10429] do_syscall_64+0x4c/0xa0 [ 252.980823][T10429] ? clear_bhb_loop+0x30/0x80 [ 252.985614][T10429] ? clear_bhb_loop+0x30/0x80 [ 252.990309][T10429] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.996236][T10429] RIP: 0033:0x7f8b6d112799 [ 253.000663][T10429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.020284][T10429] RSP: 002b:00007f8b6b36c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.028730][T10429] RAX: ffffffffffffffda RBX: 00007f8b6d38bfa0 RCX: 00007f8b6d112799 [ 253.036714][T10429] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 253.044708][T10429] RBP: 00007f8b6b36c090 R08: 0000000000000000 R09: 0000000000000000 [ 253.052697][T10429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.060681][T10429] R13: 00007f8b6d38c038 R14: 00007f8b6d38bfa0 R15: 00007ffee6d668d8 [ 253.068675][T10429] [ 253.287132][T10435] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2141'. [ 253.798263][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2150'. [ 253.876745][T10464] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2148'. [ 255.367315][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.373677][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.994401][T10529] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2177'. [ 256.275670][T10539] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2182'. [ 256.425284][T10549] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2182'. [ 256.698353][T10560] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2190'. [ 256.756648][T10562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2191'. [ 256.978262][T10573] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 257.066678][T10573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.243185][T10576] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2197'. [ 257.697140][T10603] validate_nla: 29 callbacks suppressed [ 257.697155][T10603] netlink: 'syz.2.2204': attribute type 21 has an invalid length. [ 257.808572][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2207'. [ 257.853579][T10603] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2204'. [ 257.908810][T10605] netlink: 'syz.4.2209': attribute type 46 has an invalid length. [ 257.943222][T10605] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2209'. [ 257.974398][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2207'. [ 258.086896][T10610] netlink: 'syz.3.2206': attribute type 4 has an invalid length. [ 258.163648][T10610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2206'. [ 258.291810][T10622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.321248][T10622] netlink: 'syz.4.2214': attribute type 10 has an invalid length. [ 259.407780][T10657] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2225'. [ 259.451016][T10658] netlink: 'syz.4.2227': attribute type 29 has an invalid length. [ 259.492443][T10659] netlink: 'syz.1.2225': attribute type 3 has an invalid length. [ 259.492821][T10658] netlink: 'syz.4.2227': attribute type 29 has an invalid length. [ 259.518787][T10659] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2225'. [ 259.785187][T10664] netlink: 'syz.2.2228': attribute type 4 has an invalid length. [ 259.793058][T10664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2228'. [ 260.201114][T10680] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2235'. [ 260.342638][T10684] netlink: 'syz.1.2236': attribute type 29 has an invalid length. [ 260.410493][T10684] netlink: 'syz.1.2236': attribute type 29 has an invalid length. [ 262.326578][T10727] __nla_validate_parse: 1 callbacks suppressed [ 262.326594][T10727] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2252'. [ 263.571716][T10757] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2264'. [ 263.627864][T10763] validate_nla: 3 callbacks suppressed [ 263.627880][T10763] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 263.649311][T10754] delete_channel: no stack [ 263.713362][T10763] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2267'. [ 264.876410][T10788] netlink: set zone limit has 8 unknown bytes [ 265.149466][T10793] FAULT_INJECTION: forcing a failure. [ 265.149466][T10793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.274133][T10793] CPU: 0 PID: 10793 Comm: syz.2.2277 Not tainted syzkaller #0 [ 265.281649][T10793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.291724][T10793] Call Trace: [ 265.295018][T10793] [ 265.297969][T10793] dump_stack_lvl+0x188/0x250 [ 265.302680][T10793] ? show_regs_print_info+0x20/0x20 [ 265.307901][T10793] ? load_image+0x400/0x400 [ 265.312424][T10793] ? __lock_acquire+0x7d10/0x7d10 [ 265.317501][T10793] should_fail+0x38c/0x4c0 [ 265.321939][T10793] _copy_to_user+0x2e/0x130 [ 265.326458][T10793] simple_read_from_buffer+0xe3/0x150 [ 265.331857][T10793] proc_fail_nth_read+0x1a6/0x220 [ 265.336914][T10793] ? proc_fault_inject_write+0x310/0x310 [ 265.342577][T10793] ? fsnotify_perm+0x254/0x560 [ 265.347359][T10793] ? proc_fault_inject_write+0x310/0x310 [ 265.353012][T10793] vfs_read+0x301/0xd60 [ 265.356870][T10803] netlink: 'syz.1.2281': attribute type 6 has an invalid length. [ 265.357188][T10793] ? kernel_read+0x1e0/0x1e0 [ 265.369489][T10793] ? __fget_files+0x40f/0x480 [ 265.374192][T10793] ? mutex_lock_nested+0x17/0x20 [ 265.379144][T10793] ? __fdget_pos+0x2bf/0x370 [ 265.383753][T10793] ? ksys_read+0x71/0x260 [ 265.388094][T10793] ksys_read+0x152/0x260 [ 265.392359][T10793] ? vfs_write+0xd60/0xd60 [ 265.396792][T10793] ? lockdep_hardirqs_on+0x94/0x140 [ 265.402014][T10793] do_syscall_64+0x4c/0xa0 [ 265.406460][T10793] ? clear_bhb_loop+0x30/0x80 [ 265.411157][T10793] ? clear_bhb_loop+0x30/0x80 [ 265.415942][T10793] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.421854][T10793] RIP: 0033:0x7f691dd21fce [ 265.426291][T10793] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 265.445915][T10793] RSP: 002b:00007f691bfbafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.454349][T10793] RAX: ffffffffffffffda RBX: 00007f691bfbb6c0 RCX: 00007f691dd21fce [ 265.462344][T10793] RDX: 000000000000000f RSI: 00007f691bfbb0a0 RDI: 0000000000000006 [ 265.470340][T10793] RBP: 00007f691bfbb090 R08: 0000000000000000 R09: 0000000000000000 [ 265.478342][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.486325][T10793] R13: 00007f691dfdb038 R14: 00007f691dfdafa0 R15: 00007ffce0b43a78 [ 265.494328][T10793] [ 265.738305][T10810] netlink: 'syz.1.2282': attribute type 21 has an invalid length. [ 266.140856][T10827] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2288'. [ 267.818136][T10879] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.2309'. [ 268.191620][T10895] netlink: 'syz.1.2315': attribute type 9 has an invalid length. [ 268.245332][T10895] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2315'. [ 269.396156][T10931] FAULT_INJECTION: forcing a failure. [ 269.396156][T10931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.514823][T10931] CPU: 1 PID: 10931 Comm: syz.3.2325 Not tainted syzkaller #0 [ 269.522423][T10931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.532496][T10931] Call Trace: [ 269.535791][T10931] [ 269.538733][T10931] dump_stack_lvl+0x188/0x250 [ 269.543433][T10931] ? show_regs_print_info+0x20/0x20 [ 269.548660][T10931] ? load_image+0x400/0x400 [ 269.553195][T10931] ? __lock_acquire+0x7d10/0x7d10 [ 269.558245][T10931] ? lockdep_hardirqs_on+0x94/0x140 [ 269.563527][T10931] should_fail+0x38c/0x4c0 [ 269.567971][T10931] _copy_from_user+0x2e/0x170 [ 269.572675][T10931] iovec_from_user+0x142/0x370 [ 269.577481][T10931] __import_iovec+0x70/0x490 [ 269.582109][T10931] import_iovec+0x6f/0xa0 [ 269.586502][T10931] ___sys_sendmsg+0x1fd/0x2e0 [ 269.591218][T10931] ? __sys_sendmsg+0x2a0/0x2a0 [ 269.596068][T10931] __se_sys_sendmsg+0x1af/0x290 [ 269.600955][T10931] ? __x64_sys_sendmsg+0x80/0x80 [ 269.605919][T10931] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 269.611940][T10931] ? lockdep_hardirqs_on+0x94/0x140 [ 269.617174][T10931] do_syscall_64+0x4c/0xa0 [ 269.621610][T10931] ? clear_bhb_loop+0x30/0x80 [ 269.626303][T10931] ? clear_bhb_loop+0x30/0x80 [ 269.631012][T10931] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.636925][T10931] RIP: 0033:0x7f5930bc1799 [ 269.641358][T10931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.660989][T10931] RSP: 002b:00007f592edfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.669446][T10931] RAX: ffffffffffffffda RBX: 00007f5930e3b090 RCX: 00007f5930bc1799 [ 269.677439][T10931] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 269.685431][T10931] RBP: 00007f592edfa090 R08: 0000000000000000 R09: 0000000000000000 [ 269.693420][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.701406][T10931] R13: 00007f5930e3b128 R14: 00007f5930e3b090 R15: 00007ffc8ce385e8 [ 269.709417][T10931] [ 270.301555][T10957] netlink: 'syz.1.2339': attribute type 10 has an invalid length. [ 272.101109][T11005] netlink: 'syz.1.2356': attribute type 11 has an invalid length. [ 272.163844][T11005] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2356'. [ 272.414980][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 273.044528][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2363'. [ 273.233849][T11038] netlink: 'syz.0.2376': attribute type 3 has an invalid length. [ 273.269420][T11038] netlink: 'syz.0.2376': attribute type 6 has an invalid length. [ 273.340625][T11038] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2376'. [ 273.567919][T11049] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 273.668078][T11049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.982526][T11065] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2375'. [ 274.033588][T11065] netlink: 'syz.2.2375': attribute type 3 has an invalid length. [ 274.084978][T11073] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2381'. [ 274.141323][T11073] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2381'. [ 274.167055][T11069] netlink: 'syz.4.2379': attribute type 21 has an invalid length. [ 274.248384][T11069] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2379'. [ 274.448659][T11080] netlink: 'syz.3.2380': attribute type 16 has an invalid length. [ 274.519242][T11080] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2380'. [ 274.560357][T11092] netlink: 'syz.1.2386': attribute type 9 has an invalid length. [ 274.605987][T11092] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2386'. [ 274.628183][T11080] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 274.704619][T11090] netlink: 'syz.4.2385': attribute type 10 has an invalid length. [ 274.878010][T11094] netlink: 'syz.0.2387': attribute type 3 has an invalid length. [ 274.922657][T11094] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2387'. [ 276.136509][T11130] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2398'. [ 276.317698][T11146] validate_nla: 1 callbacks suppressed [ 276.317735][T11146] netlink: 'syz.4.2404': attribute type 4 has an invalid length. [ 276.522067][T11151] device syzkaller0 entered promiscuous mode [ 276.641089][T11151] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 278.103047][T11187] __nla_validate_parse: 2 callbacks suppressed [ 278.103080][T11187] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2417'. [ 278.892416][T11207] netlink: 'syz.3.2424': attribute type 10 has an invalid length. [ 279.042012][T11213] netlink: 'syz.4.2428': attribute type 21 has an invalid length. [ 279.060559][T11213] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.193168][T11217] netlink: 'syz.2.2430': attribute type 21 has an invalid length. [ 279.264704][T11217] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.310838][T11217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.318228][T11217] IPv6: NLM_F_CREATE should be set when creating new route [ 279.325836][T11217] IPv6: NLM_F_CREATE should be set when creating new route [ 279.333303][T11217] IPv6: NLM_F_CREATE should be set when creating new route [ 280.623411][T11269] FAULT_INJECTION: forcing a failure. [ 280.623411][T11269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.655549][T11269] CPU: 1 PID: 11269 Comm: syz.2.2446 Not tainted syzkaller #0 [ 280.663052][T11269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.673125][T11269] Call Trace: [ 280.676421][T11269] [ 280.679362][T11269] dump_stack_lvl+0x188/0x250 [ 280.684151][T11269] ? show_regs_print_info+0x20/0x20 [ 280.689368][T11269] ? load_image+0x400/0x400 [ 280.693875][T11269] ? __lock_acquire+0x7d10/0x7d10 [ 280.698908][T11269] ? vfs_write+0x8b2/0xd60 [ 280.703335][T11269] should_fail+0x38c/0x4c0 [ 280.707760][T11269] _copy_from_user+0x2e/0x170 [ 280.712442][T11269] __sys_bpf+0x26d/0x6f0 [ 280.716693][T11269] ? bpf_link_show_fdinfo+0x380/0x380 [ 280.722084][T11269] ? vtime_user_exit+0x2c8/0x3e0 [ 280.727032][T11269] __x64_sys_bpf+0x78/0x90 [ 280.731458][T11269] do_syscall_64+0x4c/0xa0 [ 280.735878][T11269] ? clear_bhb_loop+0x30/0x80 [ 280.740553][T11269] ? clear_bhb_loop+0x30/0x80 [ 280.745232][T11269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.751127][T11269] RIP: 0033:0x7f691dd61799 [ 280.755540][T11269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.775151][T11269] RSP: 002b:00007f691bfbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.783567][T11269] RAX: ffffffffffffffda RBX: 00007f691dfdafa0 RCX: 00007f691dd61799 [ 280.791539][T11269] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 280.799517][T11269] RBP: 00007f691bfbb090 R08: 0000000000000000 R09: 0000000000000000 [ 280.807496][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.815465][T11269] R13: 00007f691dfdb038 R14: 00007f691dfdafa0 R15: 00007ffce0b43a78 [ 280.823456][T11269] [ 280.980761][T11275] netlink: 'syz.1.2449': attribute type 21 has an invalid length. [ 280.994527][T11275] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2449'. [ 281.139585][T11270] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2447'. [ 281.492444][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 281.544340][T11285] netlink: 'syz.0.2454': attribute type 10 has an invalid length. [ 281.573370][T11285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2454'. [ 281.614425][T11285] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 282.570503][T11335] netlink: 'syz.3.2471': attribute type 10 has an invalid length. [ 282.659320][T11335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.721317][T11335] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 282.774751][T11334] netlink: 'syz.3.2471': attribute type 10 has an invalid length. [ 282.952034][T11350] netlink: 'syz.1.2476': attribute type 3 has an invalid length. [ 283.044989][T11350] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2476'. [ 283.123800][T11357] netlink: 'syz.0.2478': attribute type 4 has an invalid length. [ 283.512159][T11371] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.2484'. [ 284.043378][T11395] netlink: 'syz.1.2493': attribute type 9 has an invalid length. [ 284.097406][T11395] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2493'. [ 284.512065][T11409] netlink: 'syz.0.2497': attribute type 3 has an invalid length. [ 284.550898][T11409] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2497'. [ 284.958754][T11424] netlink: 'syz.2.2502': attribute type 21 has an invalid length. [ 285.043908][T11424] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2502'. [ 285.507080][T11439] netlink: 'syz.0.2509': attribute type 10 has an invalid length. [ 285.527590][T11442] netlink: 'syz.2.2508': attribute type 3 has an invalid length. [ 285.561150][T11442] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2508'. [ 285.592833][T11439] device wlan1 left promiscuous mode [ 285.622696][T11438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.817013][T11453] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 286.328893][T11473] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2520'. [ 286.752176][T11490] validate_nla: 2 callbacks suppressed [ 286.752206][T11490] netlink: 'syz.0.2527': attribute type 21 has an invalid length. [ 286.796937][T11490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.804424][T11490] IPv6: NLM_F_CREATE should be set when creating new route [ 286.812054][T11490] IPv6: NLM_F_CREATE should be set when creating new route [ 286.819525][T11490] IPv6: NLM_F_CREATE should be set when creating new route [ 287.020255][T11495] netlink: 'syz.4.2529': attribute type 10 has an invalid length. [ 287.263714][T11495] team0 (unregistering): Port device team_slave_0 removed [ 287.479954][T11495] team0 (unregistering): Port device team_slave_1 removed [ 287.754146][T11495] team0 (unregistering): Port device geneve1 removed [ 288.130963][T11515] netlink: 'syz.0.2535': attribute type 1 has an invalid length. [ 288.165495][T11515] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2535'. [ 288.185787][T11525] netlink: 'syz.3.2536': attribute type 13 has an invalid length. [ 288.261634][T11525] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2536'. [ 288.307309][T11525] syz_tun: refused to change device tx_queue_len [ 288.313695][T11525] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 288.518434][T11533] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2540'. [ 288.759742][T11541] netlink: 'syz.4.2543': attribute type 11 has an invalid length. [ 288.784676][T11541] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2543'. [ 288.987711][T11550] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2546'. [ 289.518519][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2552'. [ 289.851625][T11573] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2553'. [ 289.861419][T11581] FAULT_INJECTION: forcing a failure. [ 289.861419][T11581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.904791][T11581] CPU: 0 PID: 11581 Comm: syz.3.2556 Not tainted syzkaller #0 [ 289.912309][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.922380][T11581] Call Trace: [ 289.925715][T11581] [ 289.928706][T11581] dump_stack_lvl+0x188/0x250 [ 289.933401][T11581] ? show_regs_print_info+0x20/0x20 [ 289.938613][T11581] ? load_image+0x400/0x400 [ 289.943123][T11581] ? __lock_acquire+0x7d10/0x7d10 [ 289.948158][T11581] should_fail+0x38c/0x4c0 [ 289.952582][T11581] _copy_from_user+0x2e/0x170 [ 289.957263][T11581] __sys_bpf+0x26d/0x6f0 [ 289.961510][T11581] ? bpf_link_show_fdinfo+0x380/0x380 [ 289.966902][T11581] __x64_sys_bpf+0x78/0x90 [ 289.971321][T11581] do_syscall_64+0x4c/0xa0 [ 289.975736][T11581] ? clear_bhb_loop+0x30/0x80 [ 289.980524][T11581] ? clear_bhb_loop+0x30/0x80 [ 289.985212][T11581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.991116][T11581] RIP: 0033:0x7f5930bc1799 [ 289.995538][T11581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.015577][T11581] RSP: 002b:00007f592ee1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.023987][T11581] RAX: ffffffffffffffda RBX: 00007f5930e3afa0 RCX: 00007f5930bc1799 [ 290.031962][T11581] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 290.039935][T11581] RBP: 00007f592ee1b090 R08: 0000000000000000 R09: 0000000000000000 [ 290.047915][T11581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.055893][T11581] R13: 00007f5930e3b038 R14: 00007f5930e3afa0 R15: 00007ffc8ce385e8 [ 290.063884][T11581] [ 290.364215][T11595] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 290.382368][T11595] netlink: 'syz.3.2560': attribute type 6 has an invalid length. [ 290.396306][T11595] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.2560'. [ 290.926069][T11611] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 290.977800][T11611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.099816][T11618] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2569'. [ 291.142386][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2569'. [ 291.322469][T11630] netlink: 'syz.3.2573': attribute type 29 has an invalid length. [ 291.374120][T11630] netlink: 'syz.3.2573': attribute type 29 has an invalid length. [ 291.415628][T11631] netlink: 'syz.3.2573': attribute type 29 has an invalid length. [ 291.628584][T11643] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2577'. [ 291.684810][T11643] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2577'. [ 292.334761][T11656] validate_nla: 2 callbacks suppressed [ 292.334777][T11656] netlink: 'syz.4.2580': attribute type 21 has an invalid length. [ 293.433475][T11671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.693024][T11674] __nla_validate_parse: 2 callbacks suppressed [ 293.693040][T11674] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2586'. [ 293.899513][T11685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2589'. [ 294.323795][T11693] netlink: 'syz.3.2595': attribute type 10 has an invalid length. [ 294.548294][T11693] team0 (unregistering): Port device team_slave_0 removed [ 294.751894][T11693] team0 (unregistering): Port device team_slave_1 removed [ 295.741354][T11724] netlink: 'syz.4.2605': attribute type 10 has an invalid length. [ 295.802614][T11724] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.873874][T11724] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.902761][T11724] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.928517][T11724] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.049144][T11724] device geneve0 entered promiscuous mode [ 296.086486][T11724] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.138736][T11724] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.189840][T11724] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.214612][T11724] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.240860][T11724] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 296.285052][T11726] netlink: 'syz.4.2605': attribute type 10 has an invalid length. [ 296.363390][T11726] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.386605][T11726] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.442786][T11726] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.502237][T11726] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.616191][T11762] netlink: 'syz.0.2614': attribute type 10 has an invalid length. [ 299.073296][T11816] netlink: 'syz.4.2636': attribute type 10 has an invalid length. [ 299.152486][T11817] netlink: 'syz.0.2633': attribute type 10 has an invalid length. [ 299.354889][T11817] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2633'. [ 299.749176][T11840] netlink: 'syz.4.2643': attribute type 10 has an invalid length. [ 300.735646][T11858] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2649'. [ 301.200403][T11879] netlink: 'syz.4.2659': attribute type 7 has an invalid length. [ 301.214906][T11883] FAULT_INJECTION: forcing a failure. [ 301.214906][T11883] name failslab, interval 1, probability 0, space 0, times 0 [ 301.228167][T11879] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2659'. [ 301.313095][T11883] CPU: 1 PID: 11883 Comm: syz.3.2660 Not tainted syzkaller #0 [ 301.320604][T11883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.330676][T11883] Call Trace: [ 301.333970][T11883] [ 301.336918][T11883] dump_stack_lvl+0x188/0x250 [ 301.341627][T11883] ? show_regs_print_info+0x20/0x20 [ 301.346857][T11883] ? load_image+0x400/0x400 [ 301.351386][T11883] ? __might_sleep+0xf0/0xf0 [ 301.355996][T11883] ? __lock_acquire+0x7d10/0x7d10 [ 301.361045][T11883] should_fail+0x38c/0x4c0 [ 301.365489][T11883] should_failslab+0x5/0x20 [ 301.370026][T11883] slab_pre_alloc_hook+0x51/0xc0 [ 301.374993][T11883] __kmalloc+0x6b/0x330 [ 301.379163][T11883] ? bpf_test_init+0xf8/0x1b0 [ 301.383866][T11883] ? __lock_acquire+0x7d10/0x7d10 [ 301.388919][T11883] bpf_test_init+0xf8/0x1b0 [ 301.393449][T11883] bpf_prog_test_run_skb+0x181/0x1180 [ 301.398840][T11883] ? __fget_files+0x40f/0x480 [ 301.403547][T11883] ? cpu_online+0x60/0x60 [ 301.407908][T11883] bpf_prog_test_run+0x31e/0x390 [ 301.412867][T11883] __sys_bpf+0x5a5/0x6f0 [ 301.417143][T11883] ? bpf_link_show_fdinfo+0x380/0x380 [ 301.422560][T11883] ? vtime_user_exit+0x2c8/0x3e0 [ 301.427610][T11883] __x64_sys_bpf+0x78/0x90 [ 301.432053][T11883] do_syscall_64+0x4c/0xa0 [ 301.436486][T11883] ? clear_bhb_loop+0x30/0x80 [ 301.441178][T11883] ? clear_bhb_loop+0x30/0x80 [ 301.445878][T11883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.451791][T11883] RIP: 0033:0x7f5930bc1799 [ 301.456224][T11883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.475844][T11883] RSP: 002b:00007f592ee1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 301.484275][T11883] RAX: ffffffffffffffda RBX: 00007f5930e3afa0 RCX: 00007f5930bc1799 [ 301.492281][T11883] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 301.500274][T11883] RBP: 00007f592ee1b090 R08: 0000000000000000 R09: 0000000000000000 [ 301.508269][T11883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.516301][T11883] R13: 00007f5930e3b038 R14: 00007f5930e3afa0 R15: 00007ffc8ce385e8 [ 301.524312][T11883] [ 301.892739][ T9] tipc: Subscription rejected, illegal request [ 305.176636][T11973] netlink: 'syz.4.2689': attribute type 3 has an invalid length. [ 305.282866][T11983] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.2693'. [ 305.284655][T11973] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2689'. [ 305.488620][T11988] FAULT_INJECTION: forcing a failure. [ 305.488620][T11988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.549205][T11988] CPU: 0 PID: 11988 Comm: syz.2.2694 Not tainted syzkaller #0 [ 305.556719][T11988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 305.566790][T11988] Call Trace: [ 305.570078][T11988] [ 305.573018][T11988] dump_stack_lvl+0x188/0x250 [ 305.577800][T11988] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 305.583972][T11988] ? show_regs_print_info+0x20/0x20 [ 305.589190][T11988] ? load_image+0x400/0x400 [ 305.593738][T11988] should_fail+0x38c/0x4c0 [ 305.598191][T11988] _copy_from_user+0x2e/0x170 [ 305.602904][T11988] __copy_msghdr_from_user+0xc9/0x630 [ 305.608307][T11988] ? verify_lock_unused+0x140/0x140 [ 305.613540][T11988] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 305.618864][T11988] ___sys_sendmsg+0x19a/0x2e0 [ 305.623586][T11988] ? __sys_sendmsg+0x2a0/0x2a0 [ 305.628393][T11988] ? trace_event_raw_event_lock+0x270/0x270 [ 305.634413][T11988] __se_sys_sendmsg+0x1af/0x290 [ 305.639293][T11988] ? __x64_sys_sendmsg+0x80/0x80 [ 305.644269][T11988] ? syscall_enter_from_user_mode+0x2a/0x70 [ 305.650188][T11988] do_syscall_64+0x4c/0xa0 [ 305.654618][T11988] ? clear_bhb_loop+0x30/0x80 [ 305.659307][T11988] ? clear_bhb_loop+0x30/0x80 [ 305.663996][T11988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 305.669903][T11988] RIP: 0033:0x7f691dd61799 [ 305.674338][T11988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.693959][T11988] RSP: 002b:00007f691bfbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.702389][T11988] RAX: ffffffffffffffda RBX: 00007f691dfdafa0 RCX: 00007f691dd61799 [ 305.710383][T11988] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 305.718372][T11988] RBP: 00007f691bfbb090 R08: 0000000000000000 R09: 0000000000000000 [ 305.726357][T11988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.734372][T11988] R13: 00007f691dfdb038 R14: 00007f691dfdafa0 R15: 00007ffce0b43a78 [ 305.742461][T11988] [ 305.866747][T11997] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2700'. [ 305.881472][T11995] netlink: 'syz.4.2697': attribute type 21 has an invalid length. [ 305.905755][T11995] netlink: 'syz.4.2697': attribute type 6 has an invalid length. [ 305.943111][T11995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2697'. [ 306.721844][T12022] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2709'. [ 307.321271][T12043] netlink: 'syz.0.2716': attribute type 10 has an invalid length. [ 307.413564][T12043] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 308.013158][T12056] netlink: 'syz.1.2720': attribute type 3 has an invalid length. [ 308.277611][T12056] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2720'. [ 308.518556][T12071] netlink: 'syz.3.2726': attribute type 6 has an invalid length. [ 308.621194][T12073] netlink: 'syz.2.2727': attribute type 3 has an invalid length. [ 308.673654][T12073] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2727'. [ 309.843296][T12110] netlink: set zone limit has 8 unknown bytes [ 309.964814][T12113] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2741'. [ 312.302388][T12163] netlink: 'syz.2.2761': attribute type 10 has an invalid length. [ 312.386763][T12167] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2764'. [ 312.570506][T12179] FAULT_INJECTION: forcing a failure. [ 312.570506][T12179] name failslab, interval 1, probability 0, space 0, times 0 [ 312.629181][T12179] CPU: 0 PID: 12179 Comm: syz.3.2766 Not tainted syzkaller #0 [ 312.636687][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.646757][T12179] Call Trace: [ 312.650048][T12179] [ 312.653002][T12179] dump_stack_lvl+0x188/0x250 [ 312.657718][T12179] ? show_regs_print_info+0x20/0x20 [ 312.662953][T12179] ? load_image+0x400/0x400 [ 312.667473][T12179] ? __might_sleep+0xf0/0xf0 [ 312.672087][T12179] ? __lock_acquire+0x7d10/0x7d10 [ 312.677133][T12179] should_fail+0x38c/0x4c0 [ 312.681570][T12179] should_failslab+0x5/0x20 [ 312.686084][T12179] slab_pre_alloc_hook+0x51/0xc0 [ 312.691048][T12179] __kmalloc+0x6b/0x330 [ 312.695217][T12179] ? bpf_test_init+0xf8/0x1b0 [ 312.699913][T12179] bpf_test_init+0xf8/0x1b0 [ 312.704432][T12179] bpf_prog_test_run_skb+0x181/0x1180 [ 312.709904][T12179] ? lockdep_hardirqs_on+0x94/0x140 [ 312.715126][T12179] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 312.721309][T12179] ? cpu_online+0x60/0x60 [ 312.725665][T12179] ? cpu_online+0x60/0x60 [ 312.730015][T12179] bpf_prog_test_run+0x31e/0x390 [ 312.735005][T12179] __sys_bpf+0x5a5/0x6f0 [ 312.739279][T12179] ? bpf_link_show_fdinfo+0x380/0x380 [ 312.744682][T12179] ? vtime_user_exit+0x2c8/0x3e0 [ 312.749645][T12179] __x64_sys_bpf+0x78/0x90 [ 312.754087][T12179] do_syscall_64+0x4c/0xa0 [ 312.758518][T12179] ? clear_bhb_loop+0x30/0x80 [ 312.763209][T12179] ? clear_bhb_loop+0x30/0x80 [ 312.767899][T12179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.773809][T12179] RIP: 0033:0x7f5930bc1799 [ 312.778247][T12179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.797879][T12179] RSP: 002b:00007f592ee1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.806303][T12179] RAX: ffffffffffffffda RBX: 00007f5930e3afa0 RCX: 00007f5930bc1799 [ 312.814289][T12179] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 312.822281][T12179] RBP: 00007f592ee1b090 R08: 0000000000000000 R09: 0000000000000000 [ 312.830282][T12179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.838262][T12179] R13: 00007f5930e3b038 R14: 00007f5930e3afa0 R15: 00007ffc8ce385e8 [ 312.846262][T12179] [ 312.986127][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2768'. [ 314.690338][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2779'. [ 315.624836][T12245] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2787'. [ 315.755350][T12251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2790'. [ 315.967238][T12257] netlink: 'syz.4.2793': attribute type 3 has an invalid length. [ 316.055728][T12257] netlink: 'syz.4.2793': attribute type 6 has an invalid length. [ 316.094752][T12257] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.2793'. [ 316.219876][T12261] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2792'. [ 316.800386][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.807008][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.848702][T12270] netlink: 'syz.3.2797': attribute type 1 has an invalid length. [ 316.935006][T12271] netlink: 'syz.2.2796': attribute type 10 has an invalid length. [ 317.463021][T12283] netlink: 'syz.0.2802': attribute type 4 has an invalid length. [ 317.594570][T12283] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2802'. [ 317.805518][T12288] netlink: 'syz.1.2804': attribute type 8 has an invalid length. [ 317.972354][T12299] netlink: 'syz.3.2807': attribute type 10 has an invalid length. [ 318.017426][T12288] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2804'. [ 318.046249][T12299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2807'. [ 318.091363][T12299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.115410][T12299] batman_adv: batadv0: Adding interface: vlan1 [ 318.131532][T12305] netlink: 'syz.0.2810': attribute type 29 has an invalid length. [ 318.149791][T12299] batman_adv: batadv0: The MTU of interface vlan1 is too small (1024) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.269782][T12299] batman_adv: batadv0: Interface activated: vlan1 [ 318.400004][T12299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.624810][T12305] netlink: 'syz.0.2810': attribute type 29 has an invalid length. [ 319.478083][T12327] netlink: 'syz.4.2818': attribute type 21 has an invalid length. [ 319.504629][T12327] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2818'. [ 319.705540][T12333] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.2820'. [ 320.264826][T12347] netlink: 'syz.2.2825': attribute type 10 has an invalid length. [ 320.285793][T12347] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2825'. [ 321.062512][T12344] chnl_net:caif_netlink_parms(): no params data found [ 321.594448][T12344] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.634709][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.659199][T12344] device bridge_slave_0 entered promiscuous mode [ 321.798388][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.812710][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.832778][T12344] device bridge_slave_1 entered promiscuous mode [ 322.002430][T12344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.072760][T12344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.237671][T12344] team0: Port device team_slave_0 added [ 322.275514][T12344] team0: Port device team_slave_1 added [ 322.305617][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 322.326761][ T144] tipc: Left network mode [ 322.356423][T12397] FAULT_INJECTION: forcing a failure. [ 322.356423][T12397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.411663][T12344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.434396][T12397] CPU: 0 PID: 12397 Comm: syz.2.2840 Not tainted syzkaller #0 [ 322.441898][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.451971][T12397] Call Trace: [ 322.455267][T12397] [ 322.458227][T12397] dump_stack_lvl+0x188/0x250 [ 322.462929][T12397] ? show_regs_print_info+0x20/0x20 [ 322.468239][T12397] ? load_image+0x400/0x400 [ 322.472790][T12397] ? __lock_acquire+0x7d10/0x7d10 [ 322.477839][T12397] should_fail+0x38c/0x4c0 [ 322.482286][T12397] _copy_from_user+0x2e/0x170 [ 322.486992][T12397] bpf_test_init+0x136/0x1b0 [ 322.491735][T12397] bpf_prog_test_run_skb+0x181/0x1180 [ 322.497132][T12397] ? __fget_files+0x40f/0x480 [ 322.501852][T12397] ? cpu_online+0x60/0x60 [ 322.506214][T12397] bpf_prog_test_run+0x31e/0x390 [ 322.511189][T12397] __sys_bpf+0x5a5/0x6f0 [ 322.515453][T12397] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 322.521714][T12397] ? bpf_link_show_fdinfo+0x380/0x380 [ 322.527116][T12397] ? rcu_nmi_exit+0x6f/0xf0 [ 322.531672][T12397] ? vtime_user_exit+0x2c8/0x3e0 [ 322.536657][T12397] __x64_sys_bpf+0x78/0x90 [ 322.541101][T12397] do_syscall_64+0x4c/0xa0 [ 322.545534][T12397] ? clear_bhb_loop+0x30/0x80 [ 322.550241][T12397] ? clear_bhb_loop+0x30/0x80 [ 322.554941][T12397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.556081][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.560851][T12397] RIP: 0033:0x7f691dd61799 [ 322.591133][T12397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.610759][T12397] RSP: 002b:00007f691bfbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.619315][T12397] RAX: ffffffffffffffda RBX: 00007f691dfdafa0 RCX: 00007f691dd61799 [ 322.627313][T12397] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 322.635389][T12397] RBP: 00007f691bfbb090 R08: 0000000000000000 R09: 0000000000000000 [ 322.643388][T12397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.651378][T12397] R13: 00007f691dfdb038 R14: 00007f691dfdafa0 R15: 00007ffce0b43a78 [ 322.659490][T12397] [ 322.734276][T12344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.000855][T12344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.018900][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.080194][T12417] netlink: 'syz.3.2842': attribute type 8 has an invalid length. [ 323.128812][T12344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.195245][T12417] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2842'. [ 323.746527][T12344] device hsr_slave_0 entered promiscuous mode [ 323.855856][T12344] device hsr_slave_1 entered promiscuous mode [ 323.922701][T12344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.962200][T12344] Cannot create hsr debugfs directory [ 324.324803][ T4228] Bluetooth: hci5: command 0x041b tx timeout [ 325.142329][T12488] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.2862'. [ 325.198812][T12490] netlink: 'syz.0.2863': attribute type 3 has an invalid length. [ 325.240246][T12490] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2863'. [ 325.833868][T12508] netlink: 'syz.0.2870': attribute type 21 has an invalid length. [ 325.867383][T12508] netlink: 'syz.0.2870': attribute type 6 has an invalid length. [ 325.894607][T12508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2870'. [ 325.939098][T12511] netlink: 'syz.3.2869': attribute type 21 has an invalid length. [ 325.999424][T12511] netlink: 'syz.3.2869': attribute type 6 has an invalid length. [ 326.074738][T12511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2869'. [ 326.395420][ T1108] Bluetooth: hci5: command 0x040f tx timeout [ 326.483081][T12531] netlink: 'syz.3.2877': attribute type 9 has an invalid length. [ 326.513045][T12531] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2877'. [ 326.903749][T12344] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 327.101619][T12344] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 327.324135][T12556] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2885'. [ 327.394735][T12344] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 327.417114][T12344] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 327.466371][T12554] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.2885'. [ 327.757838][T12572] netlink: 'syz.0.2888': attribute type 6 has an invalid length. [ 327.864733][T12344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.943080][T12578] netlink: 'syz.3.2890': attribute type 3 has an invalid length. [ 327.971336][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.991048][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.006835][T12578] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2890'. [ 328.047135][T12344] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.248957][ T144] device hsr_slave_0 left promiscuous mode [ 328.321820][ T144] device hsr_slave_1 left promiscuous mode [ 328.336584][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.366225][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.430886][ T144] device veth1_macvtap left promiscuous mode [ 328.447697][ T144] device veth0_macvtap left promiscuous mode [ 328.467538][ T144] device veth1_vlan left promiscuous mode [ 328.484573][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 328.497516][ T144] device veth0_vlan left promiscuous mode [ 328.969977][ T144] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 329.386409][ T144] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 329.476609][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.546180][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.734008][ T144] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 329.815040][ T144] bond0 (unregistering): Released all slaves [ 329.930595][T12605] netlink: 'syz.2.2895': attribute type 21 has an invalid length. [ 330.031315][T12605] netlink: 'syz.2.2895': attribute type 20 has an invalid length. [ 330.065399][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.107576][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.128095][ T619] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.135271][ T619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.174356][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.206164][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.225108][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.232365][ T619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.284983][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.303866][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.341696][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.370843][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.400794][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.444615][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.486271][T12637] tun0: tun_chr_ioctl cmd 1074025681 [ 330.504795][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.530656][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.557758][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.589632][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.615769][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.641007][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.690536][T12344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.776746][T12649] netlink: 'syz.3.2905': attribute type 10 has an invalid length. [ 330.906516][T12651] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2906'. [ 330.971974][T12651] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.2906'. [ 331.241772][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.263780][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.311263][T12344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.141055][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.163152][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.229581][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.248206][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.325318][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.356054][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.383491][T12344] device veth0_vlan entered promiscuous mode [ 332.430867][T12344] device veth1_vlan entered promiscuous mode [ 332.542454][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.562756][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.600473][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.639077][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.671974][T12344] device veth0_macvtap entered promiscuous mode [ 332.708569][T12344] device veth1_macvtap entered promiscuous mode [ 332.782503][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.833688][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.861917][T12344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.898382][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.917059][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.945195][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.993934][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.019031][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.060085][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.094482][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.142575][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.183332][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.230769][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.271371][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.303146][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.364643][T12344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.405566][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.422139][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.455392][T12344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.484526][T12344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.525086][T12344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.554225][T12344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.180018][ T5050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.234884][ T5050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.257432][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 334.317350][ T5050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.325772][ T5050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.362224][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.640185][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'. [ 335.373000][T12722] netlink: 'syz.3.2930': attribute type 29 has an invalid length. [ 335.442579][T12722] netlink: 'syz.3.2930': attribute type 29 has an invalid length. [ 335.688213][T12730] netlink: 'syz.4.2934': attribute type 2 has an invalid length. [ 335.714609][T12730] netlink: 'syz.4.2934': attribute type 7 has an invalid length. [ 335.791998][T12730] netlink: 208644 bytes leftover after parsing attributes in process `syz.4.2934'. [ 335.891152][T12737] netlink: 'syz.3.2936': attribute type 10 has an invalid length. [ 336.262570][T12732] chnl_net:caif_netlink_parms(): no params data found [ 336.484183][T12755] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 336.491244][T12755] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 336.736060][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.771601][T12732] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.797030][T12732] device bridge_slave_0 entered promiscuous mode [ 336.865235][T12732] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.924604][T12732] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.961877][T12732] device bridge_slave_1 entered promiscuous mode [ 337.065843][T12732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.118273][T12732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.161990][T12732] team0: Port device team_slave_0 added [ 337.186807][T12732] team0: Port device team_slave_1 added [ 337.269401][T12732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.317628][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.401089][T12732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.471367][T12732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.500352][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.594720][T12732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.754676][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 337.836259][T12732] device hsr_slave_0 entered promiscuous mode [ 337.888345][T12732] device hsr_slave_1 entered promiscuous mode [ 337.913185][T12732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.937406][T12732] Cannot create hsr debugfs directory [ 339.835136][ T1324] Bluetooth: hci4: command 0x041b tx timeout [ 341.355549][T12732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.398563][T12811] netlink: 'syz.3.2958': attribute type 40 has an invalid length. [ 341.568356][T12732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.799144][T12732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.869980][T12826] FAULT_INJECTION: forcing a failure. [ 341.869980][T12826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.904643][T12826] CPU: 0 PID: 12826 Comm: syz.3.2962 Not tainted syzkaller #0 [ 341.912151][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.922224][T12826] Call Trace: [ 341.925527][T12826] [ 341.928480][T12826] dump_stack_lvl+0x188/0x250 [ 341.933187][T12826] ? show_regs_print_info+0x20/0x20 [ 341.938434][T12826] ? load_image+0x400/0x400 [ 341.942968][T12826] ? __lock_acquire+0x7d10/0x7d10 [ 341.948038][T12826] should_fail+0x38c/0x4c0 [ 341.952490][T12826] _copy_from_user+0x2e/0x170 [ 341.957207][T12826] __copy_msghdr_from_user+0xc9/0x630 [ 341.962650][T12826] ? verify_lock_unused+0x140/0x140 [ 341.967893][T12826] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 341.973219][T12826] ___sys_sendmsg+0x19a/0x2e0 [ 341.977929][T12826] ? __sys_sendmsg+0x2a0/0x2a0 [ 341.982766][T12826] __se_sys_sendmsg+0x1af/0x290 [ 341.987650][T12826] ? __x64_sys_sendmsg+0x80/0x80 [ 341.992627][T12826] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 341.998664][T12826] ? lockdep_hardirqs_on+0x94/0x140 [ 342.003917][T12826] do_syscall_64+0x4c/0xa0 [ 342.008393][T12826] ? clear_bhb_loop+0x30/0x80 [ 342.013094][T12826] ? clear_bhb_loop+0x30/0x80 [ 342.017801][T12826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.023726][T12826] RIP: 0033:0x7f5930bc1799 [ 342.028172][T12826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.047801][T12826] RSP: 002b:00007f592ee1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.056238][T12826] RAX: ffffffffffffffda RBX: 00007f5930e3afa0 RCX: 00007f5930bc1799 [ 342.064240][T12826] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000004 [ 342.072249][T12826] RBP: 00007f592ee1b090 R08: 0000000000000000 R09: 0000000000000000 [ 342.080255][T12826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.088255][T12826] R13: 00007f5930e3b038 R14: 00007f5930e3afa0 R15: 00007ffc8ce385e8 [ 342.096266][T12826] [ 342.102868][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 342.165927][T12732] bond0: (slave netdevsim0): Releasing backup interface [ 342.196728][T12732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.676432][T12732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.767817][T12732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.813562][T12846] netlink: 'syz.2.2966': attribute type 12 has an invalid length. [ 342.942363][T12846] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2966'. [ 343.036137][T12732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.068200][T12732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 343.465086][T12732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.496661][T12865] netlink: 'syz.3.2975': attribute type 9 has an invalid length. [ 343.532688][T12732] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.567075][T12865] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2975'. [ 343.589013][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.615343][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.768072][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.792970][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.841472][ T5050] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.848708][ T5050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.873143][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.895604][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.911351][ T5050] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.918554][ T5050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.961824][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.051808][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.091414][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.111503][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.136884][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.154865][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 344.184924][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.235284][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.272241][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.360787][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.389502][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.412419][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.435348][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.481279][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.795978][T12883] netlink: 'syz.3.2983': attribute type 6 has an invalid length. [ 345.073724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.091505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.120545][T12732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.263802][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.275523][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.452105][T12732] device veth0_vlan entered promiscuous mode [ 345.462305][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.477869][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.520404][T12732] device veth1_vlan entered promiscuous mode [ 345.551267][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.576076][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.592329][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.701588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.765187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.785850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.835668][T12732] device veth0_macvtap entered promiscuous mode [ 345.859705][T12732] device veth1_macvtap entered promiscuous mode [ 345.917235][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.954426][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.964559][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.994788][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.054754][T12732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.089188][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.115150][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.164526][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.193831][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.211336][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.244515][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.266642][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.310653][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.334528][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.364508][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.398356][T12732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.444783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.461065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.509117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.518942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.555622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.585207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.683009][T12923] netlink: 'syz.3.2994': attribute type 3 has an invalid length. [ 346.730410][T12732] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.744593][T12732] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.754142][T12923] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2994'. [ 346.784340][T12732] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.804713][T12732] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.232372][ T5050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.244676][ T5050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.253227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.303603][ T5050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.321809][ T5050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.425220][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.557011][ T144] device hsr_slave_0 left promiscuous mode [ 348.609668][ T144] device hsr_slave_1 left promiscuous mode [ 348.736403][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.743890][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.099430][T12962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3006'. [ 350.474934][ T4228] Bluetooth: hci0: command 0x0409 tx timeout [ 350.482744][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.510425][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.422236][ T144] device veth1_macvtap left promiscuous mode [ 351.444951][ T144] device veth0_macvtap left promiscuous mode [ 351.471591][ T144] device veth1_vlan left promiscuous mode [ 351.504885][ T144] device veth0_vlan left promiscuous mode [ 352.244396][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.310053][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.555066][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 352.612478][ T144] bond0 (unregistering): Released all slaves [ 352.718131][T12958] netlink: 'syz.3.3005': attribute type 17 has an invalid length. [ 353.133676][T12951] chnl_net:caif_netlink_parms(): no params data found [ 353.233300][T12983] netlink: 'syz.3.3012': attribute type 10 has an invalid length. [ 353.423611][T12951] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.504542][T12951] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.512648][T12951] device bridge_slave_0 entered promiscuous mode [ 353.550728][T12951] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.594587][T12998] netlink: 'syz.1.3017': attribute type 3 has an invalid length. [ 353.612053][T12951] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.636857][T12951] device bridge_slave_1 entered promiscuous mode [ 353.674174][T12998] netlink: 'syz.1.3017': attribute type 6 has an invalid length. [ 353.714073][T12951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.738749][T13007] netlink: 'syz.4.3019': attribute type 11 has an invalid length. [ 353.751904][T12951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.777482][T12998] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.3017'. [ 353.887163][T12951] team0: Port device team_slave_0 added [ 353.932299][T12951] team0: Port device team_slave_1 added [ 354.016621][T12951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.074566][T12951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.174113][T12951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.246376][T12951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.285276][T12951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.388934][T12951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.493757][T12951] device hsr_slave_0 entered promiscuous mode [ 354.512668][T12951] device hsr_slave_1 entered promiscuous mode [ 354.574559][T12951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.591410][T12951] Cannot create hsr debugfs directory [ 354.634869][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 355.037653][T12951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.105292][T13033] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3029'. [ 355.232285][T12951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.422270][T12951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.565664][T12951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.589340][T13045] netlink: 'syz.1.3035': attribute type 4 has an invalid length. [ 355.618004][T13045] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3035'. [ 355.928345][T12951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 355.990560][T12951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.075419][T12951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.116583][T12951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 356.151306][T13063] netlink: 'syz.1.3041': attribute type 29 has an invalid length. [ 356.299874][T13063] netlink: 'syz.1.3041': attribute type 29 has an invalid length. [ 356.437319][T12951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.497738][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 356.537692][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.579137][T12951] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.601051][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.620997][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.660693][ T3041] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.667832][ T3041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.714816][ T4226] Bluetooth: hci0: command 0x0419 tx timeout [ 356.735326][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.763675][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.792171][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.815105][ T3041] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.822230][ T3041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.850820][T13069] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3044'. [ 356.875185][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.915381][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.988224][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.033527][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 357.054351][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.093581][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.137803][T12951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.204482][T12951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.239347][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.255722][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.270606][T13015] ------------[ cut here ]------------ [ 357.276322][T13015] WARNING: CPU: 1 PID: 13015 at kernel/events/core.c:6688 perf_pending_task+0x358/0x470 [ 357.286126][T13015] Modules linked in: [ 357.290043][T13015] CPU: 1 PID: 13015 Comm: syz.4.3022 Not tainted syzkaller #0 [ 357.297567][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.301503][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.307932][T13015] RIP: 0010:perf_pending_task+0x358/0x470 [ 357.321307][T13015] Code: ff 84 db 75 14 e8 c8 4c de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 4c de ff e8 d7 a8 65 ff eb e5 e8 a8 4c de ff <0f> 0b e9 f3 fe ff ff e8 9c 4c de ff 48 c7 c7 a0 43 3a 8c 4c 89 f6 [ 357.341029][T13015] RSP: 0018:ffffc90002f2f9f8 EFLAGS: 00010293 [ 357.347150][T13015] RAX: ffffffff819ad468 RBX: ffff88801f42efc0 RCX: ffff8880635bd940 [ 357.355176][T13015] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 357.363168][T13015] RBP: 0000000000000001 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 357.371192][T13015] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff8880635bd940 [ 357.379301][T13015] R13: ffff88807a617d58 R14: ffff88801f42ed90 R15: 1ffff11003e85db2 [ 357.387419][T13015] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 357.396394][T13015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.400573][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.402998][T13015] CR2: 0000000000000004 CR3: 0000000073964000 CR4: 00000000003506e0 [ 357.403017][T13015] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.403031][T13015] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 357.403044][T13015] Call Trace: [ 357.438203][T13015] [ 357.441156][T13015] task_work_run+0x125/0x1a0 [ 357.445806][T13015] do_exit+0x626/0x20c0 [ 357.449997][T13015] ? put_task_struct+0x80/0x80 [ 357.454823][T13015] ? lock_chain_count+0x20/0x20 [ 357.459714][T13015] do_group_exit+0x12e/0x300 [ 357.464325][T13015] ? lockdep_hardirqs_on+0x94/0x140 [ 357.469595][T13015] get_signal+0x6ca/0x12c0 [ 357.474059][T13015] arch_do_signal_or_restart+0xe7/0x12c0 [ 357.479767][T13015] ? force_sig_info_to_task+0x320/0x3d0 [ 357.485358][T13015] ? get_sigframe_size+0x10/0x10 [ 357.490326][T13015] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 357.492479][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.496387][T13015] ? exit_to_user_mode_loop+0x3b/0x130 [ 357.496415][T13015] exit_to_user_mode_loop+0x9e/0x130 [ 357.496435][T13015] exit_to_user_mode_prepare+0xee/0x180 [ 357.496454][T13015] irqentry_exit_to_user_mode+0x5/0x30 [ 357.496475][T13015] exc_page_fault+0x88/0x100 [ 357.496497][T13015] asm_exc_page_fault+0x22/0x30 [ 357.535505][T13015] RIP: 0033:0x85 [ 357.539078][T13015] Code: Unable to access opcode bytes at RIP 0x5b. [ 357.545624][T13015] RSP: 002b:0000200000000538 EFLAGS: 00010217 [ 357.551719][T13015] RAX: 0000000000000000 RBX: 00007f868efc8fa0 RCX: 00007f868ed4f799 [ 357.559732][T13015] RDX: 0000200000000140 RSI: 0000200000000530 RDI: 0000000000000080 [ 357.567773][T13015] RBP: 00007f868ede5c99 R08: 0000200000001280 R09: 0000200000001280 [ 357.575785][T13015] R10: 0000200000000240 R11: 0000000000000202 R12: 0000000000000000 [ 357.583863][T13015] R13: 00007f868efc9038 R14: 00007f868efc8fa0 R15: 00007ffc860b7908 [ 357.588774][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.591906][T13015] [ 357.602054][T13015] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 357.609351][T13015] CPU: 1 PID: 13015 Comm: syz.4.3022 Not tainted syzkaller #0 [ 357.616827][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.626900][T13015] Call Trace: [ 357.630193][T13015] [ 357.633141][T13015] dump_stack_lvl+0x188/0x250 [ 357.637641][T13072] caif:caif_disconnect_client(): nothing to disconnect [ 357.637849][T13015] ? show_regs_print_info+0x20/0x20 [ 357.650013][T13015] ? load_image+0x400/0x400 [ 357.654554][T13015] panic+0x2e5/0x810 [ 357.658490][T13015] ? bpf_jit_dump+0xd0/0xd0 [ 357.663022][T13015] ? perf_pending_task+0x358/0x470 [ 357.668159][T13015] __warn+0x248/0x2b0 [ 357.672149][T13015] ? perf_pending_task+0x358/0x470 [ 357.677271][T13015] report_bug+0x1b7/0x2e0 [ 357.681617][T13015] handle_bug+0x3a/0x70 [ 357.685832][T13015] exc_invalid_op+0x16/0x40 [ 357.690350][T13015] asm_exc_invalid_op+0x16/0x20 [ 357.695202][T13015] RIP: 0010:perf_pending_task+0x358/0x470 [ 357.701024][T13015] Code: ff 84 db 75 14 e8 c8 4c de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 4c de ff e8 d7 a8 65 ff eb e5 e8 a8 4c de ff <0f> 0b e9 f3 fe ff ff e8 9c 4c de ff 48 c7 c7 a0 43 3a 8c 4c 89 f6 [ 357.720635][T13015] RSP: 0018:ffffc90002f2f9f8 EFLAGS: 00010293 [ 357.726706][T13015] RAX: ffffffff819ad468 RBX: ffff88801f42efc0 RCX: ffff8880635bd940 [ 357.734693][T13015] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 357.742673][T13015] RBP: 0000000000000001 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 357.750648][T13015] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff8880635bd940 [ 357.758642][T13015] R13: ffff88807a617d58 R14: ffff88801f42ed90 R15: 1ffff11003e85db2 [ 357.766867][T13015] ? perf_pending_task+0x358/0x470 [ 357.771996][T13015] ? perf_pending_task+0x358/0x470 [ 357.777123][T13015] task_work_run+0x125/0x1a0 [ 357.781728][T13015] do_exit+0x626/0x20c0 [ 357.785891][T13015] ? put_task_struct+0x80/0x80 [ 357.790660][T13015] ? lock_chain_count+0x20/0x20 [ 357.795543][T13015] do_group_exit+0x12e/0x300 [ 357.800147][T13015] ? lockdep_hardirqs_on+0x94/0x140 [ 357.805353][T13015] get_signal+0x6ca/0x12c0 [ 357.809795][T13015] arch_do_signal_or_restart+0xe7/0x12c0 [ 357.815475][T13015] ? force_sig_info_to_task+0x320/0x3d0 [ 357.821031][T13015] ? get_sigframe_size+0x10/0x10 [ 357.825979][T13015] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 357.831969][T13015] ? exit_to_user_mode_loop+0x3b/0x130 [ 357.837433][T13015] exit_to_user_mode_loop+0x9e/0x130 [ 357.842728][T13015] exit_to_user_mode_prepare+0xee/0x180 [ 357.848288][T13015] irqentry_exit_to_user_mode+0x5/0x30 [ 357.853774][T13015] exc_page_fault+0x88/0x100 [ 357.858387][T13015] asm_exc_page_fault+0x22/0x30 [ 357.863246][T13015] RIP: 0033:0x85 [ 357.866795][T13015] Code: Unable to access opcode bytes at RIP 0x5b. [ 357.873289][T13015] RSP: 002b:0000200000000538 EFLAGS: 00010217 [ 357.879361][T13015] RAX: 0000000000000000 RBX: 00007f868efc8fa0 RCX: 00007f868ed4f799 [ 357.887341][T13015] RDX: 0000200000000140 RSI: 0000200000000530 RDI: 0000000000000080 [ 357.895313][T13015] RBP: 00007f868ede5c99 R08: 0000200000001280 R09: 0000200000001280 [ 357.903378][T13015] R10: 0000200000000240 R11: 0000000000000202 R12: 0000000000000000 [ 357.911372][T13015] R13: 00007f868efc9038 R14: 00007f868efc8fa0 R15: 00007ffc860b7908 [ 357.919370][T13015] [ 357.922708][T13015] Kernel Offset: disabled [ 357.927044][T13015] Rebooting in 86400 seconds..