last executing test programs: 26m58.753084279s ago: executing program 4 (id=5225): openat$tun(0xffffffffffffff9c, 0x0, 0x183081, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31b08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x1000, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffff}}, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast}) 26m57.251054792s ago: executing program 4 (id=5231): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xfd, 0x3, 0x9, 0x0, 0x0, 0x3ff, 0x20028, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x206, 0x1, @perf_bp={0x0, 0x9}, 0x8400, 0xc764, 0x6, 0x1, 0x9, 0x401, 0x3e, 0x0, 0x10005, 0x0, 0xfffffffffffffff3}, 0x0, 0xc, r0, 0x8) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r3, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x5c}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x5, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3bc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x101}, 0x1, 0xc8, 0x8, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711824000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0xf71d0c53aa6556ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x5}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x4}, {0x8}, {0xb}, {0x2}, {0x7, 0x4}]}, @volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x8, 0xfffffffa}, {0x2, 0x2}]}]}, {0x0, [0x30, 0x0, 0x30]}}, &(0x7f0000000880)=""/4096, 0x99, 0x1000, 0x1, 0x23d}, 0x28) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 26m57.214968834s ago: executing program 4 (id=5232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000aa84eace85000000000000009b0340140311a1aee6a83778984be64e28842a08c35131c5900c5165fe702396c2cbddf4aa3d3144e54b42f85c085491a82a1e593b133b0d62dbbeeb04bf4c1293061008241d336325c2605fee3429e8df30da56f6d0f142fe219e0d67e6e9d9334687bd1bd5602bd3189fd000"/134], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xb}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) r5 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0xa, 0x3, 0x3a) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) 26m56.838901242s ago: executing program 4 (id=5236): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x7fe2, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000005000000002800000000000059b639a5b6cd4a27d874853d6cfe1778b50907c257bf3fb05ecd95ab2eaf40e65927520c61d38bb487c6d23b370597c9c38e5bade3ae3bebd2919277bad34c4386af4744cefa39ab201fe276e80df48794342c3c19c4de45b5904656d2f1dcb0f4f58f936d2d7733a988b0c2f1c5c26b43ee6173b0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26m56.702187289s ago: executing program 4 (id=5238): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6060, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 26m56.566454746s ago: executing program 4 (id=5241): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x2950b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x96, 0x0, 0x2, 0xfefff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0xd, 0x69, 0x3, 0x6, 0x0, 0xd, 0x200, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x8000000000000001, 0x6}, 0x10000, 0x0, 0x6, 0x7, 0x2, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xd) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x3, 0xff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcbc0, 0x1}, 0x81, 0xffffffffffffffff, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, r0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0xa, 0xe, 0x5, 0x0, 0x0, 0x100000ad2b, 0x342, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fcef8f, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x3488, 0xa40, 0x3, 0x9, 0x1ff, 0xffff, 0x6, 0x0, 0x0, 0x0, 0x44}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x0, 0x2, 0x2, 0x8, 0x1, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(r5, 0x8004745a, &(0x7f0000000180)) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000500"/20, @ANYRES64=r3, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x1c, &(0x7f00000000c0), 0xb9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x7, 0xd1, &(0x7f0000000600)=""/209, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r7, r7, r7, 0xffffffffffffffff], &(0x7f00000003c0), 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000240)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000900)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0xd, 0x4, 0x3, 0xc, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000005c0)='syzkaller\x00', 0x1ff, 0x3f, &(0x7f0000000700)=""/63, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000cc0)=[{0x0, 0x2, 0x3, 0x3}, {0x2, 0x4, 0x8, 0x9}, {0x2, 0x5, 0xf}, {0x5, 0x4, 0x9}], 0x10, 0xfffffffa}, 0x94) getpid() gettid() r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x6, 0x4, &(0x7f0000000200)=r9, 0x21) 26m41.477092862s ago: executing program 32 (id=5241): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x2950b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x96, 0x0, 0x2, 0xfefff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0xd, 0x69, 0x3, 0x6, 0x0, 0xd, 0x200, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x8000000000000001, 0x6}, 0x10000, 0x0, 0x6, 0x7, 0x2, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xd) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x3, 0xff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcbc0, 0x1}, 0x81, 0xffffffffffffffff, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, r0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0xa, 0xe, 0x5, 0x0, 0x0, 0x100000ad2b, 0x342, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fcef8f, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x3488, 0xa40, 0x3, 0x9, 0x1ff, 0xffff, 0x6, 0x0, 0x0, 0x0, 0x44}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x0, 0x2, 0x2, 0x8, 0x1, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(r5, 0x8004745a, &(0x7f0000000180)) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000500"/20, @ANYRES64=r3, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x1c, &(0x7f00000000c0), 0xb9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x7, 0xd1, &(0x7f0000000600)=""/209, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r7, r7, r7, 0xffffffffffffffff], &(0x7f00000003c0), 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000240)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000900)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0xd, 0x4, 0x3, 0xc, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000005c0)='syzkaller\x00', 0x1ff, 0x3f, &(0x7f0000000700)=""/63, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000cc0)=[{0x0, 0x2, 0x3, 0x3}, {0x2, 0x4, 0x8, 0x9}, {0x2, 0x5, 0xf}, {0x5, 0x4, 0x9}], 0x10, 0xfffffffa}, 0x94) getpid() gettid() r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x6, 0x4, &(0x7f0000000200)=r9, 0x21) 6.435795413s ago: executing program 2 (id=19325): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa10000000000000701", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82641, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0xffdc, 0x0, 0x0, 0x0, 0x8800000008000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16004, 0x0, 0x81, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, &(0x7f00000009c0)=""/229, 0x0, 0xe5, 0x1}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) 6.220042464s ago: executing program 2 (id=19329): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40086602, &(0x7f0000000780)='S\x931r\x858 ;s\xc2\xd8\xf5E$?kT\xfdH(\x81Y\xbe\xe4\xdc\xf4\x99^\x14\f|\xa7\x8c&\xc4MA\r\xf8\xfe\xd2\xeb\xde \xc0\x1e\x9eN\xb9`\xa3a\']\xf0\xb2\xc91\xea\x9d\xfd\x16B\xc3\xe2\x8e\xa4\x86!\xdb\x13\xdah\xcd\xdbg\x15N_\xe8\xc8\x11\x9c\xe3\xa2\xa4[\xe0\xb5x\xc6\x92\xde\x00^(\xecn\xe5:( \xc7UQT\xd1-\xcc\xb2_\xaa\xca\xba\xa2W\x15\xc5\x03\xe5|,\x8b\x14\x00\xcc6\x000\xa1\x03\x888V\xfem\xba\x1b\xc6\xd8\xf4\xc2##4\x99\xfa*Ep\x7f\xca\x8b\x89@\xb4\x85\x1e\xadW\xde\xba\xdf\xe6\x7f\x80k\xfeL^\xf9\xd7\xa5\xd3\xf1\xed)Wne\x04\xa4\xdbq\x1d\x86\'3\xf0\xe0\xdf\xea\xb3T\'\x02\x00E\xcdT[N\xcbLW\x00\x89\xee\xd2a\x89\x9ax0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 4.931733207s ago: executing program 3 (id=19344): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e6c, 0xc78, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xfffffe8000000000, 0x200}, 0x200, 0x0, 0x0, 0x0, 0x1, 0x2, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af"], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7101}) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="3556337f816b6ab2b5502297ebb9dfa6e0a1f22cc1e440246dc89e4eaba21a51bab62f49276b491c6939be71ea67ac9f839849bd1a9894c4900765a5cbb8fda27d7a29f034e9040dc32a63c740aeb5d8", 0x50}, {&(0x7f00000005c0)="4215ddafa8d60c9836a5102061af18311b707d93e138120590b32ba24900026a6af0c99b997ca31cc987f0611392b8c6a509401176ca1707e1048596c2d2db8bd1c2693fab8545aa137e1c65a7a83ce26f5297f2b76a2da7bc4e7d398e997588b09d7b374c295f716918846bd3186cd2aaadfd95b3ecbebfdff737c8622648e335f64d1ff2f70229e1d85b433b0a54d9344758c962f58d2c953e6e4f90f39ee50a1fab990b548e172c55dd927d1ac2c0c19922c6963ad1f706f7fbdef6dfb17331d5d5e98b5d0e9526de960ce3565e87621935894d3d", 0xd6}], 0x2}, 0x20000000) write$cgroup_devices(r1, 0x0, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x6, 0x7, 0x6, 0xc5, 0x0, 0xb6, 0x2b18, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x4, 0x7}, 0x100505, 0xfffffffffffffc54, 0x3, 0x7, 0xff, 0x10001, 0xc, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, 0x0, 0x7, r1, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x1, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000740)={0x1, 0x80, 0x7, 0x24, 0x0, 0x9, 0x0, 0x100007, 0x10000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x9, 0x6}, 0x192c00, 0xa000, 0x8, 0x5, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x100}, 0xffffffffffffffff, 0x8, r1, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000540)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={r5}) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c080000000900"/40, 0x5dc}], 0x1}, 0x0) 4.749845686s ago: executing program 2 (id=19347): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0xbc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x25, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x30, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.swap.events\x00', 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x34000}], 0x1}, 0xc8d4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$inet(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000001180)}, 0x4000) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10020) recvmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000300)=[{&(0x7f0000000440)=""/131, 0x83}], 0x1, &(0x7f0000000500)=""/109, 0x6d}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x200000, 0x0, 0x93c0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) 4.725326238s ago: executing program 1 (id=19348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x1000}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x0, @perf_config_ext={0x81, 0x4b}, 0x101000, 0x80007, 0x8, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1", 0x0, 0x0, 0x0}, 0x38) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x10) r3 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfff}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() r6 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000ec0)="f66baf58125e7a85f0fb14a73e03f1bb6de15806e0705ed4d6412c81df93358a78caa337ca0a8f25dd7fcd9ac082faed29acebf9f373a2276f683e6f33e9690e188a8cfdd730fdbaed5ae30c4a5865579e7810b89c30c835ac1953d73bda5a0490d8de9a5be3f1ccc6ad42209159f1c05a75a31c317a92b41db8903ea279b34a83007944744da27ddf565a6791adc259ad54a818fa00c331c5691f3f66adcbfcc755f0b143316a54f2d838e4415fcee9e961bf7a", 0xb4}, {&(0x7f0000000240)="5630167d7c64738fd7b80312aedb16acdd00", 0x12}, {&(0x7f0000000880)="aeeb8b240b91f59f90e31034e14f6ac0b260cea72b30e03e952fd299843cec66cd5136719f027fcce17fd499fcfba703104ca3b847b23b0847aa794fd5b0ab8d6f88cd5e917b0fbab86381c1b9c4282b0b93d774973cb1b6ddb6f9a1adc27cc5948c5087067b4f7bb0c8319f21f0a14b8de80731eac111c2d556d9689a6661b7d7e95cf462e6ae7432e00b7cf58a3511e1c184e102039919cf911ff9cb9d4fc2e1b5ba257327e6", 0xa7}], 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="048a35f5b700", @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x140, 0x20000000}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r7, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x56, 0x3, [@ptr={0x8, 0x0, 0x0, 0x2, 0x3}, @datasec={0xa, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x8, 0xffffffff}], '-'}, @fwd={0xc}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x3}, {0xe}]}, @fwd={0x9}, @ptr={0x4, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30]}}, &(0x7f0000000b00)=""/189, 0x83, 0xbd, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000010000000000000002000000851000b90a2efbb40257127f57040005"], &(0x7f00000005c0)='GPL\x00', 0x0, 0xde, &(0x7f00000006c0)=""/222, 0x41100, 0x20, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000840)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x7, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r10, r11], &(0x7f0000000dc0)=[{0x1, 0x5, 0x10, 0xb}, {0x0, 0x2, 0xa, 0xa}, {0x1, 0x3, 0xa}, {0x0, 0x1, 0x7, 0xb}], 0x10, 0xf}, 0x94) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0xc0, 0x0, 0xffffffffffffffff, 0xfffff36c, '\x00', r8, r12, 0x5, 0x1, 0x2}, 0x50) r13 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$kcm(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 4.541508966s ago: executing program 0 (id=19349): socket$kcm(0xa, 0x2, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) r1 = socket$kcm(0x23, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000003c0)="e30e40bf"}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1f, 0x2, 0x4, 0x2, 0x70800, r2, 0xf9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x0, @void, @value, @value=r2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={0x0}, 0x18) 4.527104237s ago: executing program 5 (id=19350): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1159f0ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) 4.409483833s ago: executing program 1 (id=19351): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa10000000000000701", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82641, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0xffdc, 0x0, 0x0, 0x0, 0x8800000008000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16004, 0x0, 0x81, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, &(0x7f00000009c0)=""/229, 0x0, 0xe5, 0x1}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) 4.344538346s ago: executing program 3 (id=19352): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.311907918s ago: executing program 0 (id=19353): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8200, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3feb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.280632949s ago: executing program 5 (id=19354): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x50, 0x1, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="801c074fe729bd9a7dc1320c648ce5b2144394df78171eb4", 0x18}], 0x1}, 0x0) socketpair(0x28, 0x2, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.137806616s ago: executing program 1 (id=19355): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c80)="a7b8", 0x2}], 0x1}, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e", 0x6f}], 0x1}, 0x4009080) 4.110912528s ago: executing program 3 (id=19356): r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0xf5, 0x3, 0xd, 0x3, 0x0, 0xfffffffffffffff9, 0xa090, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x101, 0x3}, 0x4000, 0xfff, 0x2, 0x3, 0x1b0, 0x0, 0x1a29, 0x0, 0xcc9, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x106) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x6, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r5}, 0x1) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x23, 0x0, &(0x7f0000000540)="3d25ab555b19c4cbd0017085080040fee5a990ecaf5c07d06f1f7a8aa879d3a622a888", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000580)=""/140, 0x8c}], 0x2}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="720ac4ff000000007110c900000000009500000000000000be993bada524a52f6054f2fa7d7947ae09e499f386b7ab3bef3df478dd9a5a64ceadc33c0b40cb6b172feb81b0bdf0860046c42b30555d2cd1eedc562ebc992c14c204867e8b"], &(0x7f0000000480)='GPL\x00'}, 0x80) 3.934247427s ago: executing program 0 (id=19357): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000a8ab907ecd26145f2edfa100020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000), 0x6e, 0x0}, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3da9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10c803, 0x47c3, 0x0, 0x0, 0x3, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x9a) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.746797496s ago: executing program 0 (id=19358): socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="801c074fe729bd9a7dc1320c648ce5b2144394df78171eb4", 0x18}], 0x1}, 0x0) socketpair(0x28, 0x2, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.738232556s ago: executing program 2 (id=19359): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c3b, 0x0, @perf_config_ext={0x8}, 0x180, 0xc8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000500)="671e993f650ca7ffbbd16d54d03c96726cd1b5dd156e3d6da763d484c62c31620cb5daa312f820eb27fd72837fceffbbb53c1ca03f6c8f310661b7b97ce3c40f79a2ac902cc50ea86ba0558f4a4cf0b3c711a3e9a4fc826a1208a4ac932e7a7a2e719b6e568b852794f8b3bf68b8c35696d57cde023957f5f4577646663f5f13eee9dee3f2a38a0d28c0cc3b9365306bbb8ce95c541b8e1c8eb3a417f3859f8f2f9a74bcbd6cf12a7fb1bfb0b5a5fecb5aa218c0c45bfc96607bde7a1415621f906d55c17609d18d42de6da581d936c11e", 0xd1}, {&(0x7f0000000600)="d1dcf6bba4a5afd7ac924dc59fa280bb11a0d5de46d970fa34735d7303df059e8272ca371f8489af4caea1624083894e7b5dbd0d07b200e637f9ad6bbd56b80db1e2b68a66c35e22be4a986f9d17118f6f0b6cbeb0e2d72bcd8f3dfe2b2a21caad5b4dcb0bc693db5748a86a37fb4c64d7465809f3a87e81d973e72f77b51e2095477d2e15707ff06cb819c72adf519363fd36054422c6271aa424d747e6117143e1fa07f65f1a81d2ac57b080390da287e2c919db9de13e0ce8735a366f706519d0f3b29f0242c8dc40aa898894fd8b852b", 0xd2}, {&(0x7f00000002c0)="11471e63e07e0305459422c5346f596b2d31ab0686b557b2c6c847c13bc3f5249697a234147cd7a6fa8ccae6252893b717fe876ed741bd6c9fc217c9cbba5142ce0cd712265dff1ffb645b054895a1973d91d05038d2e48beffe92c083ad48f8f2abad5224db659845eab2e6f299d187ff775083394a1d82b3", 0x79}, {&(0x7f0000000440)="8f0022acb507cb3ee357645f3237109266626e2303d3d5bed3c425b1552d2b6b7ca044dd563d", 0x26}, {&(0x7f0000000800)="76a009026b3df9c05a403007210f0f25454e4e10f5832c3d4638ff83c44f2d032b8698e0bc6602a06ade6919a78d544c07318d228a236a64cc210469e39a50d2670ced9dda4c0e1613d07a92565e21d1f7ecfde2009d2b28785f53f4928d15ccf3719a2b7da28707953dc71ebedb4dde5bad75a1b4eaae4b5c04511fec9963cadc4c2d2fa4ca801930b74c9bdcfee294286ac184de7f6d71335154845392ed9f42fc4a55fb163357e74804e6e5005db2b58d9a93b821c7f772155257ed46754e042d86a3af", 0xc5}, {&(0x7f0000000900)="1a0ec3d66dbfc2b5446bd2ed0760bbb77fdbb0f5a4f829b9fb69798286716a1c4ba4c85b8db35e8ca9f606e0ee48b06844a94794fe07491b47c705b7f4b09d35b4c0c966058a579e28b7249250e79ab7cd61f231ee5908bc9002a5061ea766e3c8adfc5ea68299c672c89daa6f2c726e5e1bc04044741d914a325baeec387eb730d8e798443be2f83c9e083901b19266200678f91430d209006fa21b0296e4a8578ecfd2e5ff462e931d51ebbfe1a0be0dda608e45d88071b5a39486", 0xbc}], 0x6, &(0x7f0000000a40)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x13, 0x0, 0x2, [0x3]}, @end, @rr={0x7, 0x23, 0xed, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010102]}, @ssrr={0x89, 0xf, 0xb9, [@multicast1, @multicast2, @broadcast]}, @generic={0x86, 0x11, "ae7c12d06b7767083c9a4f3c246d8d"}, @lsrr={0x83, 0xf, 0x5, [@remote, @dev={0xac, 0x14, 0x14, 0xb}, @remote]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0x89, 0xb, "fc0e4436d934885561"}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}], 0xf0}, 0x24044000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xb}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) r3 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d036c00fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="1f0000000a20000000000008", @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) 3.65416719s ago: executing program 3 (id=19360): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40086602, &(0x7f0000000780)='S\x931r\x858 ;s\xc2\xd8\xf5E$?kT\xfdH(\x81Y\xbe\xe4\xdc\xf4\x99^\x14\f|\xa7\x8c&\xc4MA\r\xf8\xfe\xd2\xeb\xde \xc0\x1e\x9eN\xb9`\xa3a\']\xf0\xb2\xc91\xea\x9d\xfd\x16B\xc3\xe2\x8e\xa4\x86!\xdb\x13\xdah\xcd\xdbg\x15N_\xe8\xc8\x11\x9c\xe3\xa2\xa4[\xe0\xb5x\xc6\x92\xde\x00^(\xecn\xe5:( \xc7UQT\xd1-\xcc\xb2_\xaa\xca\xba\xa2W\x15\xc5\x03\xe5|,\x8b\x14\x00\xcc6\x000\xa1\x03\x888V\xfem\xba\x1b\xc6\xd8\xf4\xc2##4\x99\xfa*Ep\x7f\xca\x8b\x89@\xb4\x85\x1e\xadW\xde\xba\xdf\xe6\x7f\x80k\xfeL^\xf9\xd7\xa5\xd3\xf1\xed)Wne\x04\xa4\xdbq\x1d\x86\'3\xf0\xe0\xdf\xea\xb3T\'\x02\x00E\xcdT[N\xcbLW\x00\x89\xee\xd2a\x89\x9ax0x0}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x56, 0x3, [@ptr={0x8, 0x0, 0x0, 0x2, 0x3}, @datasec={0xa, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x8, 0xffffffff}], '-'}, @fwd={0xc}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x3}, {0xe}]}, @fwd={0x9}, @ptr={0x4, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30]}}, &(0x7f0000000b00)=""/189, 0x83, 0xbd, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000010000000000000002000000851000b90a2efbb40257127f57040005"], &(0x7f00000005c0)='GPL\x00', 0x0, 0xde, &(0x7f00000006c0)=""/222, 0x41100, 0x20, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000840)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x7, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r10, r11], &(0x7f0000000dc0)=[{0x1, 0x5, 0x10, 0xb}, {0x0, 0x2, 0xa, 0xa}, {0x1, 0x3, 0xa}, {0x0, 0x1, 0x7, 0xb}], 0x10, 0xf}, 0x94) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0xc0, 0x0, 0xffffffffffffffff, 0xfffff36c, '\x00', r8, r12, 0x5, 0x1, 0x2}, 0x50) r13 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$kcm(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 3.197778903s ago: executing program 0 (id=19362): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8200, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3feb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000000)='./file0\x00', r3, 0x4000, r1}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.145599035s ago: executing program 1 (id=19363): socket$kcm(0xa, 0x2, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) r1 = socket$kcm(0x23, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000003c0)="e30e40bf"}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1f, 0x2, 0x4, 0x2, 0x70800, r2, 0xf9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x0, @void, @value, @value=r2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={0x0}, 0x18) 3.090937708s ago: executing program 5 (id=19364): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1159f0ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) 2.83841788s ago: executing program 5 (id=19365): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa10000000000000701", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82641, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0xffdc, 0x0, 0x0, 0x0, 0x8800000008000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16004, 0x0, 0x81, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) 109.637844ms ago: executing program 1 (id=19366): socket$kcm(0xa, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x25, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000007000000090000060100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 105.713475ms ago: executing program 3 (id=19367): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8200, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3feb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.372459ms ago: executing program 2 (id=19368): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 7.415029ms ago: executing program 0 (id=19369): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000a8ab907ecd26145f2edfa100020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000), 0x6e, 0x0}, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3da9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10c803, 0x47c3, 0x0, 0x0, 0x3, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x9a) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 0s ago: executing program 5 (id=19370): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="d7", 0xffffff2a}], 0x1}, 0x20004001) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) r5 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r6}, &(0x7f00000009c0), &(0x7f0000000a00)='%pS \x00'}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x103442, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40012, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x80, 0xcb, 0xffffff80, 0xb, 0x9, 0x80, 0x9, 0x0, 0xecbc, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10b4fd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x17e) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r10}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r9) write$cgroup_type(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): ing attributes in process `syz.2.15820'. [ 2084.625746][T17211] device veth1_macvtap left promiscuous mode [ 2084.646450][T17211] device macsec0 entered promiscuous mode [ 2084.846268][T17214] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15827'. [ 2085.299120][T17227] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15833'. [ 2085.372162][T17227] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2085.957764][T17246] netlink: 156 bytes leftover after parsing attributes in process `syz.5.15839'. [ 2086.987925][T17266] validate_nla: 5 callbacks suppressed [ 2086.987963][T17266] netlink: 'syz.5.15848': attribute type 4 has an invalid length. [ 2086.992640][T17268] FAULT_INJECTION: forcing a failure. [ 2086.992640][T17268] name failslab, interval 1, probability 0, space 0, times 0 [ 2087.015130][T17268] CPU: 0 PID: 17268 Comm: syz.0.15849 Not tainted syzkaller #0 [ 2087.019690][T17266] netlink: 152 bytes leftover after parsing attributes in process `syz.5.15848'. [ 2087.022872][T17268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2087.022889][T17268] Call Trace: [ 2087.022895][T17268] [ 2087.022904][T17268] dump_stack_lvl+0x188/0x250 [ 2087.022930][T17268] ? show_regs_print_info+0x20/0x20 [ 2087.022955][T17268] ? load_image+0x400/0x400 [ 2087.022975][T17268] ? __might_sleep+0xf0/0xf0 [ 2087.022998][T17268] ? __lock_acquire+0x7d10/0x7d10 [ 2087.023024][T17268] should_fail+0x38c/0x4c0 [ 2087.023052][T17268] should_failslab+0x5/0x20 [ 2087.074644][T17266] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2087.078168][T17268] slab_pre_alloc_hook+0x51/0xc0 [ 2087.078204][T17268] __kmalloc_node_track_caller+0x68/0x3a0 [ 2087.078219][T17268] ? netlink_sendmsg+0x654/0xbe0 [ 2087.078236][T17268] ? kmem_cache_alloc_node+0x162/0x2d0 [ 2087.078251][T17268] ? __alloc_skb+0xf4/0x750 [ 2087.078272][T17268] ? netlink_sendmsg+0x654/0xbe0 [ 2087.078291][T17268] __alloc_skb+0x22c/0x750 [ 2087.134315][T17268] netlink_sendmsg+0x654/0xbe0 [ 2087.139134][T17268] ? netlink_getsockopt+0x570/0x570 [ 2087.144569][T17268] ? aa_sock_msg_perm+0x94/0x150 [ 2087.149505][T17268] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2087.154787][T17268] ? security_socket_sendmsg+0x7c/0xa0 [ 2087.160328][T17268] ? netlink_getsockopt+0x570/0x570 [ 2087.165612][T17268] ____sys_sendmsg+0x5b7/0x8f0 [ 2087.170379][T17268] ? __sys_sendmsg_sock+0x30/0x30 [ 2087.175666][T17268] ? import_iovec+0x6f/0xa0 [ 2087.180222][T17268] ___sys_sendmsg+0x236/0x2e0 [ 2087.185246][T17268] ? __sys_sendmsg+0x2a0/0x2a0 [ 2087.190023][T17268] __se_sys_sendmsg+0x1af/0x290 [ 2087.194978][T17268] ? __x64_sys_sendmsg+0x80/0x80 [ 2087.199903][T17268] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2087.205974][T17268] ? lockdep_hardirqs_on+0x94/0x140 [ 2087.211236][T17268] do_syscall_64+0x4c/0xa0 [ 2087.215725][T17268] ? clear_bhb_loop+0x30/0x80 [ 2087.220572][T17268] ? clear_bhb_loop+0x30/0x80 [ 2087.225347][T17268] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2087.231254][T17268] RIP: 0033:0x7fcdb3193799 [ 2087.235954][T17268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2087.256128][T17268] RSP: 002b:00007fcdb13ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2087.264940][T17268] RAX: ffffffffffffffda RBX: 00007fcdb340cfa0 RCX: 00007fcdb3193799 [ 2087.272997][T17268] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2087.280963][T17268] RBP: 00007fcdb13ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2087.288929][T17268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2087.296982][T17268] R13: 00007fcdb340d038 R14: 00007fcdb340cfa0 R15: 00007fff8d94e6b8 [ 2087.305051][T17268] [ 2087.838373][T17300] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15861'. [ 2087.895868][T17298] netlink: 'syz.3.15862': attribute type 21 has an invalid length. [ 2087.996292][T17298] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15862'. [ 2088.115848][T17304] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15864'. [ 2088.175364][T17308] netlink: 'syz.1.15865': attribute type 4 has an invalid length. [ 2088.243123][T17308] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15865'. [ 2088.320024][T17308] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2088.417297][T17314] netlink: 'syz.3.15866': attribute type 10 has an invalid length. [ 2088.948725][T17340] netlink: 'syz.3.15876': attribute type 21 has an invalid length. [ 2088.964522][T17340] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15876'. [ 2089.202343][T17349] netlink: 'syz.2.15882': attribute type 4 has an invalid length. [ 2089.236951][T17349] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15882'. [ 2089.313065][T17349] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2089.462656][T17352] netlink: 'syz.0.15880': attribute type 10 has an invalid length. [ 2089.949551][T17367] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15885'. [ 2090.846987][T17390] FAULT_INJECTION: forcing a failure. [ 2090.846987][T17390] name failslab, interval 1, probability 0, space 0, times 0 [ 2090.909136][T17390] CPU: 0 PID: 17390 Comm: syz.0.15896 Not tainted syzkaller #0 [ 2090.916863][T17390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2090.927831][T17390] Call Trace: [ 2090.931531][T17390] [ 2090.934587][T17390] dump_stack_lvl+0x188/0x250 [ 2090.939486][T17390] ? show_regs_print_info+0x20/0x20 [ 2090.945097][T17390] ? load_image+0x400/0x400 [ 2090.949759][T17390] ? __might_sleep+0xf0/0xf0 [ 2090.954872][T17390] ? __lock_acquire+0x7d10/0x7d10 [ 2090.960028][T17390] ? mark_lock+0x94/0x320 [ 2090.964408][T17390] should_fail+0x38c/0x4c0 [ 2090.969064][T17390] should_failslab+0x5/0x20 [ 2090.973813][T17390] slab_pre_alloc_hook+0x51/0xc0 [ 2090.978800][T17390] __kmalloc+0x6b/0x330 [ 2090.983242][T17390] ? tomoyo_realpath_from_path+0x118/0x610 [ 2090.989522][T17390] tomoyo_realpath_from_path+0x118/0x610 [ 2090.995197][T17390] tomoyo_path_number_perm+0x242/0x660 [ 2091.000889][T17390] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2091.007678][T17390] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2091.013296][T17390] security_file_ioctl+0x6c/0xa0 [ 2091.018366][T17390] __se_sys_ioctl+0x48/0x170 [ 2091.023151][T17390] do_syscall_64+0x4c/0xa0 [ 2091.027667][T17390] ? clear_bhb_loop+0x30/0x80 [ 2091.032610][T17390] ? clear_bhb_loop+0x30/0x80 [ 2091.037480][T17390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2091.043675][T17390] RIP: 0033:0x7fcdb3193799 [ 2091.048221][T17390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2091.068116][T17390] RSP: 002b:00007fcdb13ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2091.076752][T17390] RAX: ffffffffffffffda RBX: 00007fcdb340cfa0 RCX: 00007fcdb3193799 [ 2091.084836][T17390] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000007 [ 2091.093083][T17390] RBP: 00007fcdb13ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2091.101237][T17390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2091.109347][T17390] R13: 00007fcdb340d038 R14: 00007fcdb340cfa0 R15: 00007fff8d94e6b8 [ 2091.117801][T17390] [ 2091.186628][T17390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2091.279114][T17395] netlink: 'syz.3.15895': attribute type 10 has an invalid length. [ 2091.566064][T17405] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15902'. [ 2091.790060][T17417] netlink: 'syz.2.15905': attribute type 21 has an invalid length. [ 2091.834578][T17417] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15905'. [ 2092.303124][T17437] netlink: 'syz.5.15916': attribute type 10 has an invalid length. [ 2092.389856][T17445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15913'. [ 2092.588640][T17455] netlink: 'syz.5.15921': attribute type 10 has an invalid length. [ 2092.688540][T17458] netlink: 'syz.5.15921': attribute type 29 has an invalid length. [ 2092.770868][T17455] team0: Device ipvlan1 failed to register rx_handler [ 2092.927997][T17458] netlink: 'syz.5.15921': attribute type 29 has an invalid length. [ 2093.118601][T17469] netlink: 'syz.0.15925': attribute type 21 has an invalid length. [ 2093.194122][T17469] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15925'. [ 2093.398370][T17474] netlink: 'syz.1.15928': attribute type 10 has an invalid length. [ 2093.538262][T17483] netlink: 'syz.2.15930': attribute type 27 has an invalid length. [ 2093.566905][T17483] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2093.646744][T17484] netlink: 'syz.2.15930': attribute type 27 has an invalid length. [ 2093.677925][T17484] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2094.535760][T17516] netlink: 'syz.0.15941': attribute type 21 has an invalid length. [ 2094.735173][T17516] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15941'. [ 2095.714704][T17550] FAULT_INJECTION: forcing a failure. [ 2095.714704][T17550] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2095.789548][T17550] CPU: 1 PID: 17550 Comm: syz.0.15956 Not tainted syzkaller #0 [ 2095.797247][T17550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2095.807503][T17550] Call Trace: [ 2095.810904][T17550] [ 2095.813860][T17550] dump_stack_lvl+0x188/0x250 [ 2095.818731][T17550] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2095.825018][T17550] ? show_regs_print_info+0x20/0x20 [ 2095.830497][T17550] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2095.836965][T17550] should_fail+0x38c/0x4c0 [ 2095.841690][T17550] prepare_alloc_pages+0x1e4/0x5f0 [ 2095.847004][T17550] __alloc_pages+0x11b/0x480 [ 2095.851711][T17550] ? zone_statistics+0x170/0x170 [ 2095.856693][T17550] pcpu_populate_chunk+0x15d/0xc80 [ 2095.861836][T17550] ? _find_next_bit+0x1f0/0x200 [ 2095.866897][T17550] pcpu_alloc+0xbf0/0x1770 [ 2095.871472][T17550] bpf_map_alloc_percpu+0xc5/0x150 [ 2095.876842][T17550] htab_map_alloc+0xccb/0x15a0 [ 2095.881666][T17550] map_create+0x485/0x2350 [ 2095.886108][T17550] ? copy_user_enhanced_fast_string+0xe/0x40 [ 2095.892113][T17550] __sys_bpf+0x30a/0x6f0 [ 2095.896377][T17550] ? bpf_link_show_fdinfo+0x380/0x380 [ 2095.901894][T17550] __x64_sys_bpf+0x78/0x90 [ 2095.906408][T17550] do_syscall_64+0x4c/0xa0 [ 2095.910850][T17550] ? clear_bhb_loop+0x30/0x80 [ 2095.915544][T17550] ? clear_bhb_loop+0x30/0x80 [ 2095.920292][T17550] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2095.926549][T17550] RIP: 0033:0x7fcdb3193799 [ 2095.931171][T17550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2095.951510][T17550] RSP: 002b:00007fcdb13ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2095.960139][T17550] RAX: ffffffffffffffda RBX: 00007fcdb340cfa0 RCX: 00007fcdb3193799 [ 2095.968371][T17550] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 2095.976655][T17550] RBP: 00007fcdb13ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2095.984775][T17550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2095.993208][T17550] R13: 00007fcdb340d038 R14: 00007fcdb340cfa0 R15: 00007fff8d94e6b8 [ 2096.001224][T17550] [ 2096.390802][T17570] bridge0: port 1(bridge_slave_0) entered disabled state [ 2096.966070][T17583] netlink: 'syz.2.15964': attribute type 21 has an invalid length. [ 2097.005435][T17583] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15964'. [ 2097.006615][T17585] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.15965'. [ 2097.153512][T17581] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15963'. [ 2097.445605][T17585] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2098.176639][T17621] validate_nla: 1 callbacks suppressed [ 2098.176658][T17621] netlink: 'syz.1.15978': attribute type 21 has an invalid length. [ 2098.291908][T17621] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15978'. [ 2098.660754][T17632] device bridge_slave_1 left promiscuous mode [ 2098.721895][T17632] bridge0: port 2(bridge_slave_1) entered disabled state [ 2098.771133][T17632] bridge0: port 1(bridge_slave_0) entered disabled state [ 2098.954852][T17634] netlink: 'syz.0.15980': attribute type 21 has an invalid length. [ 2099.003813][T17634] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15980'. [ 2099.560043][T17668] netlink: 'syz.2.15996': attribute type 21 has an invalid length. [ 2099.611112][T17668] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15996'. [ 2099.658857][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.665303][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.998150][T17687] netlink: 'syz.3.16002': attribute type 21 has an invalid length. [ 2100.045980][T17687] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16002'. [ 2100.478005][T17701] netlink: 'syz.0.16011': attribute type 10 has an invalid length. [ 2100.654256][T17708] netlink: 'syz.5.16014': attribute type 21 has an invalid length. [ 2100.885355][T17708] netlink: 156 bytes leftover after parsing attributes in process `syz.5.16014'. [ 2101.474706][T17740] netlink: 'syz.2.16027': attribute type 10 has an invalid length. [ 2101.621350][T17747] netlink: 'syz.3.16026': attribute type 21 has an invalid length. [ 2101.671600][T17747] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16026'. [ 2101.707209][T17748] netlink: 'syz.1.16030': attribute type 21 has an invalid length. [ 2101.779489][T17748] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16030'. [ 2102.696481][T17772] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16037'. [ 2102.872290][T17779] FAULT_INJECTION: forcing a failure. [ 2102.872290][T17779] name failslab, interval 1, probability 0, space 0, times 0 [ 2102.954566][T17779] CPU: 1 PID: 17779 Comm: syz.2.16040 Not tainted syzkaller #0 [ 2102.963310][T17779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2102.973764][T17779] Call Trace: [ 2102.977235][T17779] [ 2102.980171][T17779] dump_stack_lvl+0x188/0x250 [ 2102.985360][T17779] ? show_regs_print_info+0x20/0x20 [ 2102.990744][T17779] ? load_image+0x400/0x400 [ 2102.995440][T17779] should_fail+0x38c/0x4c0 [ 2102.999877][T17779] should_failslab+0x5/0x20 [ 2103.004414][T17779] slab_pre_alloc_hook+0x51/0xc0 [ 2103.009465][T17779] __kmalloc_node_track_caller+0x68/0x3a0 [ 2103.015216][T17779] ? tcp_send_fin+0x1ac/0xe80 [ 2103.020089][T17779] ? kmem_cache_alloc_node+0x162/0x2d0 [ 2103.025571][T17779] ? __alloc_skb+0xf4/0x750 [ 2103.030097][T17779] ? tcp_send_fin+0x1ac/0xe80 [ 2103.034992][T17779] __alloc_skb+0x22c/0x750 [ 2103.039425][T17779] tcp_send_fin+0x1ac/0xe80 [ 2103.044030][T17779] ? trace_inet_sock_set_state+0x80/0x1c0 [ 2103.049953][T17779] __tcp_close+0x5e4/0xfa0 [ 2103.054401][T17779] tcp_close+0x24/0x110 [ 2103.058574][T17779] inet_release+0x139/0x180 [ 2103.063362][T17779] sock_release+0x7b/0x140 [ 2103.067792][T17779] smc_clcsock_release+0xc5/0xe0 [ 2103.072926][T17779] __smc_release+0x398/0x500 [ 2103.077624][T17779] smc_release+0x2ca/0x530 [ 2103.082228][T17779] sock_close+0xd5/0x240 [ 2103.086472][T17779] ? sock_mmap+0x90/0x90 [ 2103.090711][T17779] __fput+0x234/0x930 [ 2103.094702][T17779] task_work_run+0x125/0x1a0 [ 2103.099315][T17779] exit_to_user_mode_loop+0x10f/0x130 [ 2103.104711][T17779] exit_to_user_mode_prepare+0xee/0x180 [ 2103.110266][T17779] syscall_exit_to_user_mode+0x16/0x40 [ 2103.116006][T17779] do_syscall_64+0x58/0xa0 [ 2103.120715][T17779] ? clear_bhb_loop+0x30/0x80 [ 2103.125573][T17779] ? clear_bhb_loop+0x30/0x80 [ 2103.130597][T17779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2103.136680][T17779] RIP: 0033:0x7f6fa8d10799 [ 2103.141284][T17779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2103.161611][T17779] RSP: 002b:00007f6fa6f6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2103.170313][T17779] RAX: 0000000000000000 RBX: 00007f6fa8f89fa0 RCX: 00007f6fa8d10799 [ 2103.178387][T17779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2103.186374][T17779] RBP: 00007f6fa6f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2103.194552][T17779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2103.202805][T17779] R13: 00007f6fa8f8a038 R14: 00007f6fa8f89fa0 R15: 00007ffcbe3fa418 [ 2103.210928][T17779] [ 2103.727143][T17791] netlink: 'syz.3.16043': attribute type 10 has an invalid length. [ 2106.016660][T17804] device syzkaller0 entered promiscuous mode [ 2106.164254][T17810] netlink: 'syz.3.16046': attribute type 21 has an invalid length. [ 2106.186607][T17810] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16046'. [ 2106.465141][T17822] netlink: 'syz.2.16054': attribute type 4 has an invalid length. [ 2106.537266][T17822] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16054'. [ 2106.560779][T17822] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2106.670153][T17820] netlink: 'syz.5.16053': attribute type 21 has an invalid length. [ 2106.686701][T17820] netlink: 156 bytes leftover after parsing attributes in process `syz.5.16053'. [ 2106.763231][T17834] netlink: 'syz.3.16057': attribute type 10 has an invalid length. [ 2107.135158][T17858] FAULT_INJECTION: forcing a failure. [ 2107.135158][T17858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2107.166817][T17858] CPU: 1 PID: 17858 Comm: syz.3.16065 Not tainted syzkaller #0 [ 2107.174525][T17858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2107.184760][T17858] Call Trace: [ 2107.188123][T17858] [ 2107.191042][T17858] dump_stack_lvl+0x188/0x250 [ 2107.195897][T17858] ? show_regs_print_info+0x20/0x20 [ 2107.201247][T17858] ? load_image+0x400/0x400 [ 2107.205828][T17858] ? __lock_acquire+0x7d10/0x7d10 [ 2107.210855][T17858] should_fail+0x38c/0x4c0 [ 2107.215441][T17858] _copy_from_user+0x2e/0x170 [ 2107.220215][T17858] tipc_setsockopt+0x355/0x960 [ 2107.225069][T17858] ? tipc_shutdown+0x4d0/0x4d0 [ 2107.229918][T17858] ? aa_sock_opt_perm+0x74/0x100 [ 2107.234849][T17858] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 2107.240398][T17858] ? security_socket_setsockopt+0x7a/0xa0 [ 2107.246194][T17858] ? tipc_shutdown+0x4d0/0x4d0 [ 2107.250952][T17858] __sys_setsockopt+0x2bf/0x3d0 [ 2107.255812][T17858] __x64_sys_setsockopt+0xb1/0xc0 [ 2107.260829][T17858] do_syscall_64+0x4c/0xa0 [ 2107.265246][T17858] ? clear_bhb_loop+0x30/0x80 [ 2107.270179][T17858] ? clear_bhb_loop+0x30/0x80 [ 2107.275284][T17858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2107.281261][T17858] RIP: 0033:0x7f804a210799 [ 2107.285751][T17858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2107.305527][T17858] RSP: 002b:00007f804846a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2107.314028][T17858] RAX: ffffffffffffffda RBX: 00007f804a489fa0 RCX: 00007f804a210799 [ 2107.322076][T17858] RDX: 0000000000000087 RSI: 000000000000010f RDI: 000000000000000b [ 2107.330123][T17858] RBP: 00007f804846a090 R08: 0000000000000043 R09: 0000000000000000 [ 2107.338084][T17858] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 2107.346131][T17858] R13: 00007f804a48a038 R14: 00007f804a489fa0 R15: 00007ffcf48d7808 [ 2107.354498][T17858] [ 2107.378220][T17860] netlink: 'syz.2.16066': attribute type 21 has an invalid length. [ 2107.411840][T17860] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16066'. [ 2107.634547][T17871] netlink: 'syz.1.16070': attribute type 4 has an invalid length. [ 2107.684877][T17871] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16070'. [ 2107.727528][T17871] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2107.729709][T17877] netlink: 'syz.5.16071': attribute type 8 has an invalid length. [ 2107.801398][T17875] netlink: 'syz.3.16072': attribute type 10 has an invalid length. [ 2107.809880][T17877] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.16071'. [ 2108.005742][T17893] FAULT_INJECTION: forcing a failure. [ 2108.005742][T17893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2108.036580][T17893] CPU: 1 PID: 17893 Comm: syz.0.16088 Not tainted syzkaller #0 [ 2108.045070][T17893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2108.055365][T17893] Call Trace: [ 2108.058750][T17893] [ 2108.061784][T17893] dump_stack_lvl+0x188/0x250 [ 2108.066839][T17893] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2108.073102][T17893] ? show_regs_print_info+0x20/0x20 [ 2108.078971][T17893] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2108.085413][T17893] should_fail+0x38c/0x4c0 [ 2108.090021][T17893] _copy_from_user+0x2e/0x170 [ 2108.094820][T17893] __copy_msghdr_from_user+0xc9/0x630 [ 2108.100287][T17893] ? verify_lock_unused+0x140/0x140 [ 2108.105781][T17893] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 2108.111319][T17893] ___sys_sendmsg+0x19a/0x2e0 [ 2108.116119][T17893] ? __sys_sendmsg+0x2a0/0x2a0 [ 2108.121125][T17893] __se_sys_sendmsg+0x1af/0x290 [ 2108.126174][T17893] ? __x64_sys_sendmsg+0x80/0x80 [ 2108.131217][T17893] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2108.137125][T17893] do_syscall_64+0x4c/0xa0 [ 2108.141716][T17893] ? clear_bhb_loop+0x30/0x80 [ 2108.146579][T17893] ? clear_bhb_loop+0x30/0x80 [ 2108.151744][T17893] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2108.157642][T17893] RIP: 0033:0x7fcdb3193799 [ 2108.162250][T17893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2108.182203][T17893] RSP: 002b:00007fcdb13ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2108.190884][T17893] RAX: ffffffffffffffda RBX: 00007fcdb340cfa0 RCX: 00007fcdb3193799 [ 2108.198944][T17893] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 2108.206915][T17893] RBP: 00007fcdb13ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2108.214974][T17893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2108.222968][T17893] R13: 00007fcdb340d038 R14: 00007fcdb340cfa0 R15: 00007fff8d94e6b8 [ 2108.231046][T17893] [ 2108.880692][T17918] netlink: 'syz.2.16089': attribute type 4 has an invalid length. [ 2108.916594][T17918] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16089'. [ 2108.941088][T17918] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2108.987289][T17917] netlink: 'syz.3.16087': attribute type 10 has an invalid length. [ 2109.164978][T17929] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.16094'. [ 2109.369777][T17944] FAULT_INJECTION: forcing a failure. [ 2109.369777][T17944] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.421959][T17944] CPU: 1 PID: 17944 Comm: syz.3.16099 Not tainted syzkaller #0 [ 2109.429744][T17944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2109.440161][T17944] Call Trace: [ 2109.443563][T17944] [ 2109.446506][T17944] dump_stack_lvl+0x188/0x250 [ 2109.451209][T17944] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2109.457568][T17944] ? show_regs_print_info+0x20/0x20 [ 2109.462963][T17944] ? load_image+0x400/0x400 [ 2109.467497][T17944] should_fail+0x38c/0x4c0 [ 2109.472152][T17944] ? netlink_trim+0x180/0x220 [ 2109.477023][T17944] should_failslab+0x5/0x20 [ 2109.481709][T17944] slab_pre_alloc_hook+0x51/0xc0 [ 2109.486651][T17944] ? netlink_trim+0x180/0x220 [ 2109.491513][T17944] __kmalloc_node_track_caller+0x68/0x3a0 [ 2109.497217][T17944] ? netlink_trim+0x180/0x220 [ 2109.502082][T17944] ? ieee80211_ibss_disconnect+0x262/0x710 [ 2109.508162][T17944] ? ieee80211_ibss_leave+0x21/0x120 [ 2109.513529][T17944] ? cfg80211_ibss_wext_siwfreq+0x220/0x370 [ 2109.519607][T17944] ? netlink_trim+0x180/0x220 [ 2109.524485][T17944] pskb_expand_head+0x127/0x10f0 [ 2109.529461][T17944] netlink_trim+0x180/0x220 [ 2109.533974][T17944] netlink_broadcast_filtered+0x7c/0x1170 [ 2109.539830][T17944] netlink_broadcast+0x33/0x40 [ 2109.544591][T17944] cfg80211_del_sta_sinfo+0x2e1/0x550 [ 2109.550091][T17944] ? nl80211_send_station+0x3420/0x3420 [ 2109.555893][T17944] ? trace_drv_return_int+0x7e/0x1c0 [ 2109.561279][T17944] ? drv_sta_state+0x8d3/0x1060 [ 2109.566317][T17944] __sta_info_destroy_part2+0x2f7/0x3f0 [ 2109.571879][T17944] __sta_info_flush+0x3b7/0x460 [ 2109.576819][T17944] ? sta_info_stop+0x30/0x30 [ 2109.581393][T17944] ? __local_bh_enable_ip+0x136/0x1c0 [ 2109.586803][T17944] ? _local_bh_enable+0xa0/0xa0 [ 2109.591651][T17944] ? do_raw_spin_unlock+0x11d/0x230 [ 2109.597106][T17944] ieee80211_ibss_disconnect+0x262/0x710 [ 2109.602750][T17944] ieee80211_ibss_leave+0x21/0x120 [ 2109.608028][T17944] __cfg80211_leave_ibss+0x1ce/0x3f0 [ 2109.613658][T17944] cfg80211_ibss_wext_siwfreq+0x220/0x370 [ 2109.619389][T17944] __cfg80211_wext_siwfreq+0x16d/0x7d0 [ 2109.625041][T17944] ? __cfg80211_wext_giwname+0x30/0x30 [ 2109.630636][T17944] ? apparmor_capable+0x12c/0x190 [ 2109.635654][T17944] ? full_name_hash+0x8e/0xe0 [ 2109.640622][T17944] ? __cfg80211_wext_giwname+0x30/0x30 [ 2109.646099][T17944] ioctl_standard_call+0xd4/0x2b0 [ 2109.651130][T17944] ? __cfg80211_wext_giwname+0x30/0x30 [ 2109.656584][T17944] wext_ioctl_dispatch+0x3da/0x470 [ 2109.661686][T17944] ? wext_ioctl_dispatch+0x470/0x470 [ 2109.667069][T17944] ? iw_handler_get_private+0x1e0/0x1e0 [ 2109.672824][T17944] wext_handle_ioctl+0x113/0x1d0 [ 2109.677761][T17944] ? call_commit_handler+0xf0/0xf0 [ 2109.682865][T17944] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2109.688937][T17944] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2109.695026][T17944] ? lock_chain_count+0x20/0x20 [ 2109.699874][T17944] sock_ioctl+0x143/0x710 [ 2109.704213][T17944] ? sock_poll+0x410/0x410 [ 2109.708709][T17944] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2109.715057][T17944] ? sock_poll+0x410/0x410 [ 2109.719669][T17944] __se_sys_ioctl+0xfa/0x170 [ 2109.724339][T17944] do_syscall_64+0x4c/0xa0 [ 2109.728917][T17944] ? clear_bhb_loop+0x30/0x80 [ 2109.733764][T17944] ? clear_bhb_loop+0x30/0x80 [ 2109.738549][T17944] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2109.744458][T17944] RIP: 0033:0x7f804a210799 [ 2109.748884][T17944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2109.768687][T17944] RSP: 002b:00007f804846a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2109.777269][T17944] RAX: ffffffffffffffda RBX: 00007f804a489fa0 RCX: 00007f804a210799 [ 2109.785325][T17944] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004 [ 2109.793294][T17944] RBP: 00007f804846a090 R08: 0000000000000000 R09: 0000000000000000 [ 2109.801353][T17944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2109.809315][T17944] R13: 00007f804a48a038 R14: 00007f804a489fa0 R15: 00007ffcf48d7808 [ 2109.817572][T17944] [ 2109.998766][T17947] netlink: 'syz.1.16101': attribute type 21 has an invalid length. [ 2110.016732][T17947] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16101'. [ 2110.077444][T17957] netlink: 'syz.2.16104': attribute type 4 has an invalid length. [ 2110.103187][T17957] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16104'. [ 2110.163801][T17957] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2110.784949][T17985] FAULT_INJECTION: forcing a failure. [ 2110.784949][T17985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2110.924485][T17985] CPU: 0 PID: 17985 Comm: syz.0.16113 Not tainted syzkaller #0 [ 2110.932344][T17985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2110.942945][T17985] Call Trace: [ 2110.946236][T17985] [ 2110.949462][T17985] dump_stack_lvl+0x188/0x250 [ 2110.954171][T17985] ? show_regs_print_info+0x20/0x20 [ 2110.959476][T17985] ? load_image+0x400/0x400 [ 2110.964076][T17985] ? __lock_acquire+0x7d10/0x7d10 [ 2110.969210][T17985] ? vfs_write+0x8b2/0xd60 [ 2110.973643][T17985] should_fail+0x38c/0x4c0 [ 2110.978071][T17985] _copy_from_user+0x2e/0x170 [ 2110.983211][T17985] __sys_bpf+0x26d/0x6f0 [ 2110.987479][T17985] ? bpf_link_show_fdinfo+0x380/0x380 [ 2110.992925][T17985] ? vtime_user_exit+0x2c8/0x3e0 [ 2110.997898][T17985] __x64_sys_bpf+0x78/0x90 [ 2111.002340][T17985] do_syscall_64+0x4c/0xa0 [ 2111.006864][T17985] ? clear_bhb_loop+0x30/0x80 [ 2111.011546][T17985] ? clear_bhb_loop+0x30/0x80 [ 2111.016410][T17985] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2111.022403][T17985] RIP: 0033:0x7fcdb3193799 [ 2111.026926][T17985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2111.046711][T17985] RSP: 002b:00007fcdb13ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2111.055229][T17985] RAX: ffffffffffffffda RBX: 00007fcdb340cfa0 RCX: 00007fcdb3193799 [ 2111.063459][T17985] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 2111.071449][T17985] RBP: 00007fcdb13ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2111.079525][T17985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.087546][T17985] R13: 00007fcdb340d038 R14: 00007fcdb340cfa0 R15: 00007fff8d94e6b8 [ 2111.095551][T17985] [ 2111.168716][T17990] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2111.197016][T17990] syzkaller0: linktype set to 769 [ 2111.270196][T17990] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 2111.394393][T17996] netlink: 'syz.0.16119': attribute type 4 has an invalid length. [ 2111.420535][T17996] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16119'. [ 2111.460913][T17996] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2111.521856][T17997] netlink: 'syz.3.16118': attribute type 10 has an invalid length. [ 2111.530478][T17997] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16118'. [ 2111.551656][T17997] batman_adv: batadv0: Adding interface: veth0_vlan [ 2111.561285][T17997] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2111.606580][T17997] batman_adv: batadv0: Interface activated: veth0_vlan [ 2111.889674][T18004] netlink: 'syz.2.16121': attribute type 21 has an invalid length. [ 2111.915655][T18004] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16121'. [ 2112.186144][T18017] netlink: 'syz.2.16126': attribute type 10 has an invalid length. [ 2112.491605][T18037] netlink: 'syz.2.16134': attribute type 4 has an invalid length. [ 2112.500157][T18037] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16134'. [ 2112.510819][T18037] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2112.632089][T18039] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16133'. [ 2112.769279][T18044] netlink: 'syz.3.16135': attribute type 21 has an invalid length. [ 2112.820061][T18044] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16135'. [ 2113.076272][T18048] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16136'. [ 2113.719186][T18071] netlink: 152 bytes leftover after parsing attributes in process `syz.5.16147'. [ 2113.743297][T18071] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2113.815000][T18079] netlink: 100 bytes leftover after parsing attributes in process `syz.1.16150'. [ 2114.110469][T18087] validate_nla: 3 callbacks suppressed [ 2114.110488][T18087] netlink: 'syz.0.16153': attribute type 10 has an invalid length. [ 2114.288611][T18094] netlink: 'syz.5.16154': attribute type 21 has an invalid length. [ 2114.455901][T18101] FAULT_INJECTION: forcing a failure. [ 2114.455901][T18101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2114.470697][T18094] netlink: 156 bytes leftover after parsing attributes in process `syz.5.16154'. [ 2114.513347][T18101] CPU: 1 PID: 18101 Comm: syz.0.16157 Not tainted syzkaller #0 [ 2114.521115][T18101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2114.531177][T18101] Call Trace: [ 2114.534549][T18101] [ 2114.537485][T18101] dump_stack_lvl+0x188/0x250 [ 2114.542168][T18101] ? show_regs_print_info+0x20/0x20 [ 2114.547372][T18101] ? load_image+0x400/0x400 [ 2114.551964][T18101] ? __lock_acquire+0x7d10/0x7d10 [ 2114.556997][T18101] should_fail+0x38c/0x4c0 [ 2114.561418][T18101] _copy_from_user+0x2e/0x170 [ 2114.566100][T18101] __copy_msghdr_from_user+0x48a/0x630 [ 2114.571830][T18101] ? verify_lock_unused+0x140/0x140 [ 2114.577132][T18101] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 2114.582455][T18101] ? perf_tp_event+0xa92/0xbf0 [ 2114.587398][T18101] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2114.593382][T18101] ___sys_sendmsg+0x19a/0x2e0 [ 2114.598160][T18101] ? __sys_sendmsg+0x2a0/0x2a0 [ 2114.603061][T18101] __se_sys_sendmsg+0x1af/0x290 [ 2114.608014][T18101] ? __x64_sys_sendmsg+0x80/0x80 [ 2114.613138][T18101] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2114.619505][T18101] ? lockdep_hardirqs_on+0x94/0x140 [ 2114.625990][T18101] do_syscall_64+0x4c/0xa0 [ 2114.630529][T18101] ? clear_bhb_loop+0x30/0x80 [ 2114.635224][T18101] ? clear_bhb_loop+0x30/0x80 [ 2114.639997][T18101] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2114.646210][T18101] RIP: 0033:0x7fcdb3193799 [ 2114.650823][T18101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2114.671928][T18101] RSP: 002b:00007fcdb13ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2114.680673][T18101] RAX: ffffffffffffffda RBX: 00007fcdb340cfa0 RCX: 00007fcdb3193799 [ 2114.688907][T18101] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 2114.697240][T18101] RBP: 00007fcdb13ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2114.705324][T18101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2114.713719][T18101] R13: 00007fcdb340d038 R14: 00007fcdb340cfa0 R15: 00007fff8d94e6b8 [ 2114.721843][T18101] [ 2114.767822][T18097] netlink: 'syz.1.16155': attribute type 21 has an invalid length. [ 2117.097322][T24294] Bluetooth: hci4: command 0x0406 tx timeout [ 2118.197802][T18119] netlink: 'syz.0.16164': attribute type 4 has an invalid length. [ 2118.222164][T18119] __nla_validate_parse: 1 callbacks suppressed [ 2118.222200][T18119] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16164'. [ 2118.244763][T18119] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2118.339550][T18125] netlink: 'syz.1.16167': attribute type 10 has an invalid length. [ 2118.391863][T18118] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16162'. [ 2118.575680][T18133] netlink: 'syz.0.16169': attribute type 21 has an invalid length. [ 2118.625837][T18133] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16169'. [ 2118.802298][T18140] netlink: 'syz.3.16172': attribute type 10 has an invalid length. [ 2118.816323][T18140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16172'. [ 2118.921010][T18144] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.16173'. [ 2119.078022][T18149] netlink: 'syz.3.16174': attribute type 21 has an invalid length. [ 2119.140606][T18149] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16174'. [ 2119.364983][T18165] FAULT_INJECTION: forcing a failure. [ 2119.364983][T18165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2119.383589][T18165] CPU: 1 PID: 18165 Comm: syz.0.16179 Not tainted syzkaller #0 [ 2119.391363][T18165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2119.401633][T18165] Call Trace: [ 2119.405030][T18165] [ 2119.407966][T18165] dump_stack_lvl+0x188/0x250 [ 2119.412741][T18165] ? show_regs_print_info+0x20/0x20 [ 2119.417937][T18165] ? load_image+0x400/0x400 [ 2119.422593][T18165] ? __lock_acquire+0x7d10/0x7d10 [ 2119.427904][T18165] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2119.434173][T18165] should_fail+0x38c/0x4c0 [ 2119.438598][T18165] prepare_alloc_pages+0x1e4/0x5f0 [ 2119.443726][T18165] __alloc_pages+0x11b/0x480 [ 2119.448509][T18165] ? zone_statistics+0x170/0x170 [ 2119.453671][T18165] ? alloc_pages+0x438/0x550 [ 2119.458480][T18165] alloc_skb_with_frags+0x215/0x730 [ 2119.463770][T18165] sock_alloc_send_pskb+0x87f/0x9a0 [ 2119.468961][T18165] ? __might_fault+0xb3/0x110 [ 2119.474009][T18165] ? sock_kzfree_s+0x50/0x50 [ 2119.478881][T18165] ? iov_iter_advance+0x202/0x390 [ 2119.483911][T18165] tun_get_user+0x7c8/0x3a70 [ 2119.488543][T18165] ? tun_ring_recv+0xc40/0xc40 [ 2119.493394][T18165] ? rcu_lock_release+0x5/0x20 [ 2119.498356][T18165] ? __lock_acquire+0x7d10/0x7d10 [ 2119.503829][T18165] tun_chr_write_iter+0x112/0x1e0 [ 2119.508965][T18165] vfs_write+0x745/0xd60 [ 2119.513231][T18165] ? file_end_write+0x250/0x250 [ 2119.518155][T18165] ? __fget_files+0x40f/0x480 [ 2119.522951][T18165] ? __fdget_pos+0x1e2/0x370 [ 2119.527550][T18165] ? ksys_write+0x71/0x260 [ 2119.532078][T18165] ksys_write+0x152/0x260 [ 2119.536406][T18165] ? __ia32_sys_read+0x80/0x80 [ 2119.541257][T18165] ? lockdep_hardirqs_on+0x94/0x140 [ 2119.546640][T18165] do_syscall_64+0x4c/0xa0 [ 2119.551047][T18165] ? clear_bhb_loop+0x30/0x80 [ 2119.555815][T18165] ? clear_bhb_loop+0x30/0x80 [ 2119.560844][T18165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2119.566961][T18165] RIP: 0033:0x7fcdb3193799 [ 2119.571739][T18165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2119.592147][T18165] RSP: 002b:00007fcdb13cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2119.600746][T18165] RAX: ffffffffffffffda RBX: 00007fcdb340d090 RCX: 00007fcdb3193799 [ 2119.609085][T18165] RDX: 000000000000ffdd RSI: 0000200000000740 RDI: 0000000000000006 [ 2119.617328][T18165] RBP: 00007fcdb13cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2119.625561][T18165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2119.633701][T18165] R13: 00007fcdb340d128 R14: 00007fcdb340d090 R15: 00007fff8d94e6b8 [ 2119.641976][T18165] [ 2119.792551][T18164] netlink: 'syz.3.16181': attribute type 10 has an invalid length. [ 2119.928915][T18170] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16183'. [ 2120.183803][T18178] netlink: 'syz.3.16186': attribute type 21 has an invalid length. [ 2120.216920][T18178] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16186'. [ 2120.568341][T18193] netlink: 'syz.5.16190': attribute type 10 has an invalid length. [ 2120.628984][T18193] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16190'. [ 2120.673760][T18193] batman_adv: batadv0: Adding interface: veth0_vlan [ 2120.706548][T18193] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2120.776422][T18193] batman_adv: batadv0: Interface activated: veth0_vlan [ 2120.868045][T18198] netlink: 'syz.0.16191': attribute type 21 has an invalid length. [ 2120.965148][T18198] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16191'. [ 2121.099560][T18210] FAULT_INJECTION: forcing a failure. [ 2121.099560][T18210] name failslab, interval 1, probability 0, space 0, times 0 [ 2121.126067][T18210] CPU: 1 PID: 18210 Comm: syz.3.16195 Not tainted syzkaller #0 [ 2121.134034][T18210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2121.144379][T18210] Call Trace: [ 2121.147698][T18210] [ 2121.150806][T18210] dump_stack_lvl+0x188/0x250 [ 2121.155505][T18210] ? show_regs_print_info+0x20/0x20 [ 2121.160819][T18210] ? load_image+0x400/0x400 [ 2121.165334][T18210] ? lockdep_hardirqs_on+0x94/0x140 [ 2121.170640][T18210] should_fail+0x38c/0x4c0 [ 2121.175150][T18210] should_failslab+0x5/0x20 [ 2121.179728][T18210] slab_pre_alloc_hook+0x51/0xc0 [ 2121.184751][T18210] kmem_cache_alloc_trace+0x47/0x2a0 [ 2121.190132][T18210] ? sctp_add_bind_addr+0x89/0x350 [ 2121.195333][T18210] sctp_add_bind_addr+0x89/0x350 [ 2121.200269][T18210] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 2121.205898][T18210] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 2121.212130][T18210] ? sctp_v4_is_any+0x31/0x50 [ 2121.217085][T18210] ? sctp_copy_one_addr+0x93/0x660 [ 2121.222192][T18210] sctp_bind_addr_copy+0xaf/0x3c0 [ 2121.227247][T18210] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2121.233889][T18210] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2121.239278][T18210] ? __sctp_connect+0xd80/0xd80 [ 2121.244145][T18210] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2121.249782][T18210] ? security_sctp_bind_connect+0x85/0xb0 [ 2121.255716][T18210] sctp_sendmsg+0x158d/0x2900 [ 2121.260602][T18210] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2121.267028][T18210] ? aa_sk_perm+0x7dc/0x910 [ 2121.271620][T18210] ? sctp_getsockopt+0x8a0/0x8a0 [ 2121.276741][T18210] ? aa_af_perm+0x340/0x340 [ 2121.281522][T18210] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2121.288375][T18210] ? sock_rps_record_flow+0x17/0x3b0 [ 2121.293670][T18210] ? inet_sendmsg+0xe5/0x2f0 [ 2121.298250][T18210] ? inet_send_prepare+0x260/0x260 [ 2121.303678][T18210] ____sys_sendmsg+0x5b7/0x8f0 [ 2121.308882][T18210] ? __sys_sendmsg_sock+0x30/0x30 [ 2121.313993][T18210] ? import_iovec+0x6f/0xa0 [ 2121.318772][T18210] ___sys_sendmsg+0x236/0x2e0 [ 2121.323799][T18210] ? __sys_sendmsg+0x2a0/0x2a0 [ 2121.328740][T18210] ? rcu_nmi_exit+0x6f/0xf0 [ 2121.333271][T18210] __se_sys_sendmsg+0x1af/0x290 [ 2121.338117][T18210] ? __x64_sys_sendmsg+0x80/0x80 [ 2121.343132][T18210] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2121.349471][T18210] ? lockdep_hardirqs_on+0x94/0x140 [ 2121.354848][T18210] do_syscall_64+0x4c/0xa0 [ 2121.359458][T18210] ? clear_bhb_loop+0x30/0x80 [ 2121.364236][T18210] ? clear_bhb_loop+0x30/0x80 [ 2121.369006][T18210] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2121.375417][T18210] RIP: 0033:0x7f804a210799 [ 2121.379826][T18210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2121.400096][T18210] RSP: 002b:00007f804846a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2121.408509][T18210] RAX: ffffffffffffffda RBX: 00007f804a489fa0 RCX: 00007f804a210799 [ 2121.416670][T18210] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 2121.424903][T18210] RBP: 00007f804846a090 R08: 0000000000000000 R09: 0000000000000000 [ 2121.432882][T18210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2121.441375][T18210] R13: 00007f804a48a038 R14: 00007f804a489fa0 R15: 00007ffcf48d7808 [ 2121.449446][T18210] [ 2121.710160][T18216] netlink: 'syz.5.16197': attribute type 10 has an invalid length. [ 2121.910419][T18218] netlink: 'syz.3.16198': attribute type 21 has an invalid length. [ 2121.975296][T18224] netlink: 'syz.0.16211': attribute type 10 has an invalid length. [ 2122.203069][T18237] netlink: 'syz.1.16205': attribute type 10 has an invalid length. [ 2122.264478][T18237] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2123.029550][T18262] netlink: 'syz.5.16214': attribute type 21 has an invalid length. [ 2123.232262][T18270] netlink: 'syz.2.16217': attribute type 10 has an invalid length. [ 2123.386061][T18277] FAULT_INJECTION: forcing a failure. [ 2123.386061][T18277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2123.441102][T18277] CPU: 0 PID: 18277 Comm: syz.0.16220 Not tainted syzkaller #0 [ 2123.448781][T18277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2123.458939][T18277] Call Trace: [ 2123.462326][T18277] [ 2123.465276][T18277] dump_stack_lvl+0x188/0x250 [ 2123.469978][T18277] ? show_regs_print_info+0x20/0x20 [ 2123.475363][T18277] ? load_image+0x400/0x400 [ 2123.479967][T18277] ? __lock_acquire+0x7d10/0x7d10 [ 2123.485187][T18277] should_fail+0x38c/0x4c0 [ 2123.489635][T18277] _copy_to_user+0x2e/0x130 [ 2123.494170][T18277] simple_read_from_buffer+0xe3/0x150 [ 2123.499636][T18277] proc_fail_nth_read+0x1a6/0x220 [ 2123.504779][T18277] ? proc_fault_inject_write+0x310/0x310 [ 2123.510693][T18277] ? vfs_read+0x2ea/0xd60 [ 2123.515047][T18277] ? proc_fault_inject_write+0x310/0x310 [ 2123.520881][T18277] vfs_read+0x301/0xd60 [ 2123.525320][T18277] ? kernel_read+0x1e0/0x1e0 [ 2123.530015][T18277] ? rcu_nmi_exit+0x6f/0xf0 [ 2123.534543][T18277] ? __fget_files+0x40f/0x480 [ 2123.539259][T18277] ? mutex_lock_nested+0x17/0x20 [ 2123.544212][T18277] ? __fdget_pos+0x2bf/0x370 [ 2123.548900][T18277] ? ksys_read+0x71/0x260 [ 2123.553257][T18277] ksys_read+0x152/0x260 [ 2123.557509][T18277] ? vfs_write+0xd60/0xd60 [ 2123.561943][T18277] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2123.567962][T18277] do_syscall_64+0x4c/0xa0 [ 2123.572494][T18277] ? clear_bhb_loop+0x30/0x80 [ 2123.577264][T18277] ? clear_bhb_loop+0x30/0x80 [ 2123.581953][T18277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2123.587934][T18277] RIP: 0033:0x7fcdb3153fce [ 2123.592364][T18277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2123.612261][T18277] RSP: 002b:00007fcdb13ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2123.620792][T18277] RAX: ffffffffffffffda RBX: 00007fcdb13ed6c0 RCX: 00007fcdb3153fce [ 2123.629089][T18277] RDX: 000000000000000f RSI: 00007fcdb13ed0a0 RDI: 0000000000000004 [ 2123.637262][T18277] RBP: 00007fcdb13ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2123.645242][T18277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2123.653414][T18277] R13: 00007fcdb340d038 R14: 00007fcdb340cfa0 R15: 00007fff8d94e6b8 [ 2123.661523][T18277] [ 2123.811649][T18270] team0: Port device wlan1 added [ 2123.931908][T18283] __nla_validate_parse: 6 callbacks suppressed [ 2123.931930][T18283] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.16222'. [ 2124.419510][T18313] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.16234'. [ 2124.454130][T18310] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16232'. [ 2124.497732][T18321] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.16233'. [ 2124.541802][T18321] openvswitch: netlink: Flow key attr not present in new flow. [ 2124.630375][T18323] FAULT_INJECTION: forcing a failure. [ 2124.630375][T18323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2124.683578][T18323] CPU: 1 PID: 18323 Comm: syz.5.16237 Not tainted syzkaller #0 [ 2124.691180][T18323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2124.701353][T18323] Call Trace: [ 2124.704654][T18323] [ 2124.707620][T18323] dump_stack_lvl+0x188/0x250 [ 2124.712516][T18323] ? show_regs_print_info+0x20/0x20 [ 2124.717922][T18323] ? load_image+0x400/0x400 [ 2124.722656][T18323] ? __lock_acquire+0x7d10/0x7d10 [ 2124.727828][T18323] should_fail+0x38c/0x4c0 [ 2124.732384][T18323] _copy_from_user+0x2e/0x170 [ 2124.737116][T18323] __copy_msghdr_from_user+0xc9/0x630 [ 2124.742604][T18323] ? verify_lock_unused+0x140/0x140 [ 2124.747971][T18323] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 2124.753417][T18323] ___sys_sendmsg+0x19a/0x2e0 [ 2124.758234][T18323] ? __sys_sendmsg+0x2a0/0x2a0 [ 2124.763055][T18323] ? vfs_write+0x8b2/0xd60 [ 2124.767752][T18323] __se_sys_sendmsg+0x1af/0x290 [ 2124.772644][T18323] ? __x64_sys_sendmsg+0x80/0x80 [ 2124.777791][T18323] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2124.783948][T18323] ? lockdep_hardirqs_on+0x94/0x140 [ 2124.789161][T18323] do_syscall_64+0x4c/0xa0 [ 2124.793579][T18323] ? clear_bhb_loop+0x30/0x80 [ 2124.798251][T18323] ? clear_bhb_loop+0x30/0x80 [ 2124.802925][T18323] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2124.808825][T18323] RIP: 0033:0x7f86557b4799 [ 2124.813355][T18323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2124.833173][T18323] RSP: 002b:00007f8653a0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2124.841800][T18323] RAX: ffffffffffffffda RBX: 00007f8655a2dfa0 RCX: 00007f86557b4799 [ 2124.849864][T18323] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 2124.857830][T18323] RBP: 00007f8653a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 2124.866249][T18323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2124.874462][T18323] R13: 00007f8655a2e038 R14: 00007f8655a2dfa0 R15: 00007fffc9455178 [ 2124.882513][T18323] [ 2125.038991][T18341] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.16245'. [ 2125.070872][T18342] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16244'. [ 2125.107647][T18339] validate_nla: 3 callbacks suppressed [ 2125.107670][T18339] netlink: 'syz.3.16243': attribute type 10 has an invalid length. [ 2125.152989][T18342] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2125.176637][T18344] netlink: 830 bytes leftover after parsing attributes in process `syz.0.16244'. [ 2125.761042][T18356] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.16248'. [ 2125.878679][T18358] netlink: 'syz.5.16249': attribute type 10 has an invalid length. [ 2125.916737][T18358] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16249'. [ 2126.209014][T18375] netlink: 'syz.1.16256': attribute type 10 has an invalid length. [ 2126.235087][T18381] netlink: 1034 bytes leftover after parsing attributes in process `syz.5.16258'. [ 2126.335164][T18387] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2126.738928][T18392] netlink: 'syz.2.16263': attribute type 10 has an invalid length. [ 2126.762265][T18392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2126.800598][T18392] batman_adv: batadv0: Adding interface: veth0_vlan [ 2126.825878][T18392] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1024) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2126.872470][T18392] batman_adv: batadv0: Interface activated: veth0_vlan [ 2126.971648][T18392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2127.062942][T18401] netlink: 'syz.3.16265': attribute type 10 has an invalid length. [ 2127.320007][T18418] FAULT_INJECTION: forcing a failure. [ 2127.320007][T18418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2127.421097][T18418] CPU: 1 PID: 18418 Comm: syz.2.16272 Not tainted syzkaller #0 [ 2127.428861][T18418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2127.439350][T18418] Call Trace: [ 2127.442797][T18418] [ 2127.445717][T18418] dump_stack_lvl+0x188/0x250 [ 2127.450485][T18418] ? show_regs_print_info+0x20/0x20 [ 2127.455739][T18418] ? load_image+0x400/0x400 [ 2127.460255][T18418] ? __lock_acquire+0x7d10/0x7d10 [ 2127.465387][T18418] should_fail+0x38c/0x4c0 [ 2127.469826][T18418] _copy_from_user+0x2e/0x170 [ 2127.474512][T18418] __sys_bpf+0x26d/0x6f0 [ 2127.478936][T18418] ? bpf_link_show_fdinfo+0x380/0x380 [ 2127.484335][T18418] __x64_sys_bpf+0x78/0x90 [ 2127.488836][T18418] do_syscall_64+0x4c/0xa0 [ 2127.493351][T18418] ? clear_bhb_loop+0x30/0x80 [ 2127.498022][T18418] ? clear_bhb_loop+0x30/0x80 [ 2127.502863][T18418] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2127.508741][T18418] RIP: 0033:0x7f6fa8d10799 [ 2127.513148][T18418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2127.533179][T18418] RSP: 002b:00007f6fa6f6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2127.541671][T18418] RAX: ffffffffffffffda RBX: 00007f6fa8f89fa0 RCX: 00007f6fa8d10799 [ 2127.549631][T18418] RDX: 0000000000000038 RSI: 0000200000000440 RDI: 000000000000001b [ 2127.557589][T18418] RBP: 00007f6fa6f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2127.565545][T18418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2127.573519][T18418] R13: 00007f6fa8f8a038 R14: 00007f6fa8f89fa0 R15: 00007ffcbe3fa418 [ 2127.581596][T18418] [ 2127.848873][T18427] netlink: 'syz.1.16275': attribute type 21 has an invalid length. [ 2127.882949][T18432] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2128.442678][T18440] netlink: 'syz.5.16279': attribute type 10 has an invalid length. [ 2128.638663][T18443] netlink: 'syz.2.16280': attribute type 10 has an invalid length. [ 2128.667950][T18443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2128.698538][T18447] netlink: 'syz.1.16281': attribute type 4 has an invalid length. [ 2128.740831][T18447] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2128.885650][T18457] netlink: 'syz.2.16285': attribute type 10 has an invalid length. [ 2128.994910][T18457] team0: Port device netdevsim0 added [ 2129.264971][T18470] __nla_validate_parse: 11 callbacks suppressed [ 2129.265007][T18470] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16290'. [ 2129.473257][T18474] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16291'. [ 2130.131819][T18484] validate_nla: 2 callbacks suppressed [ 2130.131856][T18484] netlink: 'syz.1.16293': attribute type 10 has an invalid length. [ 2130.176961][T18484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16293'. [ 2130.199688][T18484] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2130.264235][T18491] netlink: 'syz.2.16296': attribute type 10 has an invalid length. [ 2130.290063][T18490] netlink: 'syz.5.16298': attribute type 4 has an invalid length. [ 2130.309304][T18490] netlink: 152 bytes leftover after parsing attributes in process `syz.5.16298'. [ 2130.334794][T18490] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2130.410427][T18496] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.16300'. [ 2130.517506][T18496] netlink: 'syz.1.16300': attribute type 10 has an invalid length. [ 2130.630834][T18496] team0: Port device netdevsim0 added [ 2130.714136][T18506] netlink: 'syz.5.16303': attribute type 21 has an invalid length. [ 2130.724145][T18506] netlink: 156 bytes leftover after parsing attributes in process `syz.5.16303'. [ 2131.144988][T18520] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.16309'. [ 2131.299027][T18526] netlink: 'syz.5.16312': attribute type 10 has an invalid length. [ 2131.312980][T18526] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16312'. [ 2131.470237][T18529] netlink: 'syz.3.16313': attribute type 4 has an invalid length. [ 2131.507766][T18529] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16313'. [ 2131.518541][T18531] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.16314'. [ 2131.545681][T18529] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2131.567150][T18531] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2132.127569][T18548] netlink: 'syz.2.16320': attribute type 21 has an invalid length. [ 2132.227446][T18550] FAULT_INJECTION: forcing a failure. [ 2132.227446][T18550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2132.478227][T18550] CPU: 0 PID: 18550 Comm: syz.0.16322 Not tainted syzkaller #0 [ 2132.486019][T18550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2132.496484][T18550] Call Trace: [ 2132.499875][T18550] [ 2132.502851][T18550] dump_stack_lvl+0x188/0x250 [ 2132.507543][T18550] ? show_regs_print_info+0x20/0x20 [ 2132.512763][T18550] ? load_image+0x400/0x400 [ 2132.517295][T18550] ? __lock_acquire+0x7d10/0x7d10 [ 2132.522344][T18550] should_fail+0x38c/0x4c0 [ 2132.526780][T18550] _copy_from_user+0x2e/0x170 [ 2132.531460][T18550] map_update_elem+0x5b8/0x770 [ 2132.536437][T18550] __sys_bpf+0x46b/0x6f0 [ 2132.540709][T18550] ? bpf_link_show_fdinfo+0x380/0x380 [ 2132.546196][T18550] __x64_sys_bpf+0x78/0x90 [ 2132.550729][T18550] do_syscall_64+0x4c/0xa0 [ 2132.555155][T18550] ? clear_bhb_loop+0x30/0x80 [ 2132.559843][T18550] ? clear_bhb_loop+0x30/0x80 [ 2132.564622][T18550] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2132.570578][T18550] RIP: 0033:0x7fcdb3193799 [ 2132.575264][T18550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2132.595882][T18550] RSP: 002b:00007fcdb13ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2132.604603][T18550] RAX: ffffffffffffffda RBX: 00007fcdb340cfa0 RCX: 00007fcdb3193799 [ 2132.613042][T18550] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000002 [ 2132.621042][T18550] RBP: 00007fcdb13ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2132.629227][T18550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2132.637945][T18550] R13: 00007fcdb340d038 R14: 00007fcdb340cfa0 R15: 00007fff8d94e6b8 [ 2132.646345][T18550] [ 2132.827211][T18560] netlink: 'syz.1.16324': attribute type 21 has an invalid length. [ 2132.929756][T18564] netlink: 'syz.3.16325': attribute type 10 has an invalid length. [ 2133.168402][T18577] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2133.604559][T18576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2134.273223][T18606] IPv6: pim6reg1: Disabled Multicast RS [ 2134.561590][T18620] __nla_validate_parse: 7 callbacks suppressed [ 2134.561653][T18620] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16347'. [ 2134.602994][T18618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16345'. [ 2134.626976][T18620] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2134.692918][T18620] netlink: 830 bytes leftover after parsing attributes in process `syz.2.16347'. [ 2134.852826][T18634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16349'. [ 2134.930291][T18634] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2135.011803][T18638] netlink: 55 bytes leftover after parsing attributes in process `syz.5.16353'. [ 2135.303889][T18647] validate_nla: 6 callbacks suppressed [ 2135.303927][T18647] netlink: 'syz.1.16355': attribute type 21 has an invalid length. [ 2135.332160][T18647] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16355'. [ 2135.569800][T18658] netlink: 1034 bytes leftover after parsing attributes in process `syz.5.16359'. [ 2135.714035][T18663] netlink: 'syz.3.16362': attribute type 10 has an invalid length. [ 2135.972326][T18667] netlink: 'syz.0.16363': attribute type 21 has an invalid length. [ 2136.028993][T18667] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16363'. [ 2136.290905][T18674] netlink: 'syz.3.16365': attribute type 8 has an invalid length. [ 2136.351360][T18674] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16365'. [ 2136.746835][T18681] netlink: 'syz.2.16368': attribute type 10 has an invalid length. [ 2136.797423][T18681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16368'. [ 2136.826831][T18681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2136.841914][T18683] delete_channel: no stack [ 2137.187013][T18706] netlink: 'syz.0.16376': attribute type 21 has an invalid length. [ 2137.385768][T18709] netlink: 'syz.2.16377': attribute type 10 has an invalid length. [ 2137.405193][T18709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2137.701759][T18687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2137.709035][T18720] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2138.308188][T18743] netlink: 'syz.3.16388': attribute type 21 has an invalid length. [ 2138.376484][T18741] netlink: 'syz.0.16391': attribute type 10 has an invalid length. [ 2138.413618][T18741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2138.473471][T18741] batman_adv: batadv0: Adding interface: veth0_vlan [ 2138.491032][T18741] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1024) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2138.644580][T18741] batman_adv: batadv0: Interface activated: veth0_vlan [ 2138.709602][T18741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2138.852177][T20616] device hsr_slave_0 left promiscuous mode [ 2138.874146][T20616] device bridge_slave_1 left promiscuous mode [ 2138.891226][T20616] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.094256][T20616] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.114735][T20616] device veth1_macvtap left promiscuous mode [ 2139.122038][T20616] device veth0_macvtap left promiscuous mode [ 2139.135170][T20616] device veth1_vlan left promiscuous mode [ 2139.141816][T20616] device veth0_vlan left promiscuous mode [ 2139.239217][T18776] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2139.749247][T18765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2142.431516][T18789] __nla_validate_parse: 9 callbacks suppressed [ 2142.431536][T18789] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16407'. [ 2142.459550][T18789] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2142.627112][T18791] FAULT_INJECTION: forcing a failure. [ 2142.627112][T18791] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2142.644472][T20616] team0 (unregistering): Port device team_slave_1 removed [ 2142.653252][T18791] CPU: 0 PID: 18791 Comm: syz.3.16408 Not tainted syzkaller #0 [ 2142.661042][T18791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2142.671741][T18791] Call Trace: [ 2142.675206][T18791] [ 2142.678165][T18791] dump_stack_lvl+0x188/0x250 [ 2142.682986][T18791] ? show_regs_print_info+0x20/0x20 [ 2142.688317][T18791] ? load_image+0x400/0x400 [ 2142.693001][T18791] should_fail+0x38c/0x4c0 [ 2142.697473][T18791] prepare_alloc_pages+0x1e4/0x5f0 [ 2142.702654][T18791] __alloc_pages+0x11b/0x480 [ 2142.707384][T18791] ? zone_statistics+0x170/0x170 [ 2142.712473][T18791] ? alloc_pages+0x438/0x550 [ 2142.717238][T18791] skb_page_frag_refill+0x225/0x4c0 [ 2142.722500][T18791] tun_get_user+0x1905/0x3a70 [ 2142.727222][T18791] ? perf_trace_lock+0x301/0x390 [ 2142.732383][T18791] ? tun_ring_recv+0xc40/0xc40 [ 2142.737215][T18791] ? rcu_lock_release+0x5/0x20 [ 2142.742110][T18791] ? __lock_acquire+0x7d10/0x7d10 [ 2142.747153][T18791] ? rcu_nmi_exit+0x6f/0xf0 [ 2142.751751][T18791] tun_chr_write_iter+0x112/0x1e0 [ 2142.756833][T18791] vfs_write+0x745/0xd60 [ 2142.761228][T18791] ? file_end_write+0x250/0x250 [ 2142.766426][T18791] ? __fget_files+0x40f/0x480 [ 2142.771196][T18791] ? __fdget_pos+0x1e2/0x370 [ 2142.775800][T18791] ? ksys_write+0x71/0x260 [ 2142.780339][T18791] ksys_write+0x152/0x260 [ 2142.784804][T18791] ? __ia32_sys_read+0x80/0x80 [ 2142.789831][T18791] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2142.795792][T18791] do_syscall_64+0x4c/0xa0 [ 2142.800329][T18791] ? clear_bhb_loop+0x30/0x80 [ 2142.805045][T18791] ? clear_bhb_loop+0x30/0x80 [ 2142.810165][T18791] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2142.816618][T18791] RIP: 0033:0x7f804a210799 [ 2142.821347][T18791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2142.841432][T18791] RSP: 002b:00007f804846a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2142.849980][T18791] RAX: ffffffffffffffda RBX: 00007f804a489fa0 RCX: 00007f804a210799 [ 2142.858314][T18791] RDX: 0000000000000017 RSI: 0000200000000040 RDI: 00000000000000c8 [ 2142.867009][T18791] RBP: 00007f804846a090 R08: 0000000000000000 R09: 0000000000000000 [ 2142.875517][T18791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2142.883769][T18791] R13: 00007f804a48a038 R14: 00007f804a489fa0 R15: 00007ffcf48d7808 [ 2142.891904][T18791] [ 2142.986760][T20616] team0 (unregistering): Port device team_slave_0 removed [ 2143.059697][T20616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2143.095300][T20616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2143.244320][T20616] team0 (unregistering): Port device bond0 removed [ 2143.344298][T20616] bond0 (unregistering): Released all slaves [ 2143.506462][T18776] netlink: 830 bytes leftover after parsing attributes in process `syz.2.16402'. [ 2143.538183][T18789] netlink: 830 bytes leftover after parsing attributes in process `syz.0.16407'. [ 2143.798401][T18805] netlink: 'syz.5.16413': attribute type 10 has an invalid length. [ 2143.844303][T18801] netlink: 'syz.3.16410': attribute type 21 has an invalid length. [ 2143.924434][T18801] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16410'. [ 2144.258721][T18831] netlink: 1034 bytes leftover after parsing attributes in process `syz.5.16420'. [ 2144.511263][T18837] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16426'. [ 2144.584365][T18837] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2144.686678][T18840] netlink: 830 bytes leftover after parsing attributes in process `syz.0.16426'. [ 2147.392961][T18841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2147.478400][T18852] netlink: 'syz.5.16430': attribute type 10 has an invalid length. [ 2147.644254][T18858] netlink: 'syz.1.16432': attribute type 21 has an invalid length. [ 2147.819836][T18858] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16432'. [ 2148.050948][T18878] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16441'. [ 2148.091748][T18880] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.16440'. [ 2148.099635][T18886] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16444'. [ 2148.216441][T18886] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2148.322228][T18890] netlink: 1034 bytes leftover after parsing attributes in process `syz.5.16445'. [ 2148.373368][T18886] netlink: 830 bytes leftover after parsing attributes in process `syz.1.16444'. [ 2149.482581][T18882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2149.553752][T18898] netlink: 'syz.3.16446': attribute type 10 has an invalid length. [ 2149.700428][T18904] netlink: 'syz.0.16457': attribute type 10 has an invalid length. [ 2149.766196][T18904] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2149.825823][T18908] netlink: 'syz.3.16450': attribute type 10 has an invalid length. [ 2149.839583][T18908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16450'. [ 2149.852456][T18908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2150.033988][T18920] netlink: 'syz.1.16454': attribute type 21 has an invalid length. [ 2150.129446][T18920] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16454'. [ 2150.216115][T18929] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16459'. [ 2150.288535][T18934] netlink: 830 bytes leftover after parsing attributes in process `syz.0.16459'. [ 2150.329824][T18929] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2150.715835][T18940] netlink: 'syz.5.16462': attribute type 10 has an invalid length. [ 2151.220272][T18950] netlink: 'syz.0.16464': attribute type 10 has an invalid length. [ 2151.246481][T18950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2151.268585][T18947] netlink: 'syz.5.16466': attribute type 10 has an invalid length. [ 2151.284594][T18947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2151.296936][T18937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2151.544829][T18975] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2151.869520][T18982] netlink: 'syz.2.16476': attribute type 10 has an invalid length. [ 2151.970670][T18984] netlink: 'syz.1.16477': attribute type 21 has an invalid length. [ 2152.185583][T18995] FAULT_INJECTION: forcing a failure. [ 2152.185583][T18995] name failslab, interval 1, probability 0, space 0, times 0 [ 2152.227229][T18995] CPU: 1 PID: 18995 Comm: syz.3.16480 Not tainted syzkaller #0 [ 2152.234826][T18995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2152.245133][T18995] Call Trace: [ 2152.248434][T18995] [ 2152.251460][T18995] dump_stack_lvl+0x188/0x250 [ 2152.256360][T18995] ? show_regs_print_info+0x20/0x20 [ 2152.262113][T18995] ? load_image+0x400/0x400 [ 2152.266715][T18995] ? __might_sleep+0xf0/0xf0 [ 2152.271437][T18995] ? __lock_acquire+0x7d10/0x7d10 [ 2152.276752][T18995] should_fail+0x38c/0x4c0 [ 2152.281278][T18995] should_failslab+0x5/0x20 [ 2152.285978][T18995] slab_pre_alloc_hook+0x51/0xc0 [ 2152.291110][T18995] kmem_cache_alloc_node+0x47/0x2d0 [ 2152.296313][T18995] ? dup_task_struct+0x57/0xb30 [ 2152.301248][T18995] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2152.306268][T18995] dup_task_struct+0x57/0xb30 [ 2152.310942][T18995] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2152.316141][T18995] ? lockdep_hardirqs_on+0x94/0x140 [ 2152.321357][T18995] copy_process+0x5f0/0x3e20 [ 2152.326487][T18995] ? perf_swevent_event+0xc8/0x530 [ 2152.331908][T18995] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2152.337928][T18995] ? __pidfd_prepare+0x140/0x140 [ 2152.343058][T18995] kernel_clone+0x23f/0x990 [ 2152.347554][T18995] ? __lock_acquire+0x7d10/0x7d10 [ 2152.352837][T18995] ? create_io_thread+0x180/0x180 [ 2152.358612][T18995] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2152.364590][T18995] __x64_sys_clone+0x19a/0x210 [ 2152.369799][T18995] ? __ia32_sys_vfork+0x130/0x130 [ 2152.375264][T18995] ? lockdep_hardirqs_on+0x94/0x140 [ 2152.380471][T18995] do_syscall_64+0x4c/0xa0 [ 2152.384889][T18995] ? clear_bhb_loop+0x30/0x80 [ 2152.389652][T18995] ? clear_bhb_loop+0x30/0x80 [ 2152.394410][T18995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2152.400297][T18995] RIP: 0033:0x7f804a210799 [ 2152.404792][T18995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2152.424747][T18995] RSP: 002b:00007f8048469fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2152.433349][T18995] RAX: ffffffffffffffda RBX: 00007f804a489fa0 RCX: 00007f804a210799 [ 2152.441414][T18995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000003002400 [ 2152.449389][T18995] RBP: 00007f804846a090 R08: 0000000000000000 R09: 0000000000000000 [ 2152.457449][T18995] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2152.466470][T18995] R13: 00007f804a48a038 R14: 00007f804a489fa0 R15: 00007ffcf48d7808 [ 2152.475048][T18995] [ 2152.646182][T19001] netlink: 'syz.5.16482': attribute type 10 has an invalid length. [ 2152.669287][T19001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2152.729579][T19006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2152.997523][T19022] __nla_validate_parse: 10 callbacks suppressed [ 2152.997544][T19022] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16490'. [ 2153.031753][T19022] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2153.125214][T19028] netlink: 1034 bytes leftover after parsing attributes in process `syz.5.16493'. [ 2153.141905][T19024] netlink: 830 bytes leftover after parsing attributes in process `syz.0.16490'. [ 2153.634029][T19049] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16497'. [ 2153.753433][T19047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16499'. [ 2153.833683][T19047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2154.060282][T19060] FAULT_INJECTION: forcing a failure. [ 2154.060282][T19060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2154.079787][T19060] CPU: 0 PID: 19060 Comm: syz.5.16504 Not tainted syzkaller #0 [ 2154.087557][T19060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2154.097635][T19060] Call Trace: [ 2154.100929][T19060] [ 2154.103966][T19060] dump_stack_lvl+0x188/0x250 [ 2154.108659][T19060] ? show_regs_print_info+0x20/0x20 [ 2154.113864][T19060] ? load_image+0x400/0x400 [ 2154.118384][T19060] ? __lock_acquire+0x7d10/0x7d10 [ 2154.123427][T19060] should_fail+0x38c/0x4c0 [ 2154.127953][T19060] _copy_to_user+0x2e/0x130 [ 2154.132660][T19060] simple_read_from_buffer+0xe3/0x150 [ 2154.138050][T19060] proc_fail_nth_read+0x1a6/0x220 [ 2154.143091][T19060] ? proc_fault_inject_write+0x310/0x310 [ 2154.148744][T19060] ? fsnotify_perm+0x254/0x560 [ 2154.153522][T19060] ? proc_fault_inject_write+0x310/0x310 [ 2154.159162][T19060] vfs_read+0x301/0xd60 [ 2154.163488][T19060] ? kernel_read+0x1e0/0x1e0 [ 2154.168187][T19060] ? rcu_nmi_exit+0x6f/0xf0 [ 2154.172775][T19060] ? __fget_files+0x40f/0x480 [ 2154.177646][T19060] ? mutex_lock_nested+0x17/0x20 [ 2154.182676][T19060] ? __fdget_pos+0x2bf/0x370 [ 2154.187452][T19060] ? ksys_read+0x71/0x260 [ 2154.191799][T19060] ksys_read+0x152/0x260 [ 2154.196043][T19060] ? vfs_write+0xd60/0xd60 [ 2154.200469][T19060] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2154.206360][T19060] do_syscall_64+0x4c/0xa0 [ 2154.210783][T19060] ? clear_bhb_loop+0x30/0x80 [ 2154.215537][T19060] ? clear_bhb_loop+0x30/0x80 [ 2154.220419][T19060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2154.226318][T19060] RIP: 0033:0x7f8655774fce [ 2154.230826][T19060] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2154.250781][T19060] RSP: 002b:00007f8653a0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2154.259336][T19060] RAX: ffffffffffffffda RBX: 00007f8653a0e6c0 RCX: 00007f8655774fce [ 2154.267488][T19060] RDX: 000000000000000f RSI: 00007f8653a0e0a0 RDI: 0000000000000007 [ 2154.275685][T19060] RBP: 00007f8653a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 2154.283767][T19060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2154.291824][T19060] R13: 00007f8655a2e038 R14: 00007f8655a2dfa0 R15: 00007fffc9455178 [ 2154.299996][T19060] [ 2154.310057][T19061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16501'. [ 2154.346910][T19061] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2154.672983][T19079] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16511'. [ 2154.707168][T19079] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2154.748906][T19079] netlink: 830 bytes leftover after parsing attributes in process `syz.2.16511'. [ 2154.748964][T19085] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.16514'. [ 2154.787722][T19087] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.16515'. [ 2155.202149][T19098] validate_nla: 6 callbacks suppressed [ 2155.202170][T19098] netlink: 'syz.3.16518': attribute type 21 has an invalid length. [ 2155.241958][T19099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2155.319681][T19103] netlink: 'syz.0.16522': attribute type 10 has an invalid length. [ 2155.968028][T19133] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2156.751341][T19147] netlink: 'syz.5.16536': attribute type 10 has an invalid length. [ 2156.812096][T19156] netlink: 'syz.0.16538': attribute type 21 has an invalid length. [ 2157.315394][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.413877][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.427195][T19179] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2157.583891][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.759346][T19188] FAULT_INJECTION: forcing a failure. [ 2157.759346][T19188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2157.819910][ T144] team0: Port device netdevsim0 removed [ 2157.871224][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.882376][T19188] CPU: 1 PID: 19188 Comm: syz.2.16546 Not tainted syzkaller #0 [ 2157.890043][T19188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2157.900480][T19188] Call Trace: [ 2157.903783][T19188] [ 2157.906722][T19188] dump_stack_lvl+0x188/0x250 [ 2157.911510][T19188] ? show_regs_print_info+0x20/0x20 [ 2157.916726][T19188] ? load_image+0x400/0x400 [ 2157.921768][T19188] ? __lock_acquire+0x7d10/0x7d10 [ 2157.927195][T19188] should_fail+0x38c/0x4c0 [ 2157.932269][T19188] _copy_from_user+0x2e/0x170 [ 2157.937300][T19188] kstrtouint_from_user+0xd3/0x220 [ 2157.942516][T19188] ? kstrtol_from_user+0x2a0/0x2a0 [ 2157.947837][T19188] proc_fail_nth_write+0x8b/0x200 [ 2157.953159][T19188] ? proc_fail_nth_read+0x220/0x220 [ 2157.958475][T19188] ? common_file_perm+0x171/0x1c0 [ 2157.963539][T19188] ? proc_fail_nth_read+0x220/0x220 [ 2157.968928][T19188] vfs_write+0x30b/0xd60 [ 2157.973618][T19188] ? file_end_write+0x250/0x250 [ 2157.978680][T19188] ? __fget_files+0x40f/0x480 [ 2157.983476][T19188] ? mutex_lock_nested+0x17/0x20 [ 2157.988416][T19188] ? __fdget_pos+0x2bf/0x370 [ 2157.993108][T19188] ? ksys_write+0x71/0x260 [ 2157.997626][T19188] ksys_write+0x152/0x260 [ 2158.002054][T19188] ? __ia32_sys_read+0x80/0x80 [ 2158.006829][T19188] ? lockdep_hardirqs_on+0x94/0x140 [ 2158.012036][T19188] do_syscall_64+0x4c/0xa0 [ 2158.016452][T19188] ? clear_bhb_loop+0x30/0x80 [ 2158.021286][T19188] ? clear_bhb_loop+0x30/0x80 [ 2158.026233][T19188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2158.032400][T19188] RIP: 0033:0x7f6fa8cd0fce [ 2158.037118][T19188] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2158.057300][T19188] RSP: 002b:00007f6fa6f48fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2158.065726][T19188] RAX: ffffffffffffffda RBX: 00007f6fa6f496c0 RCX: 00007f6fa8cd0fce [ 2158.073785][T19188] RDX: 0000000000000001 RSI: 00007f6fa6f490a0 RDI: 0000000000000006 [ 2158.082004][T19188] RBP: 00007f6fa6f49090 R08: 0000000000000000 R09: 0000000000000000 [ 2158.090085][T19188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2158.098062][T19188] R13: 00007f6fa8f8a128 R14: 00007f6fa8f8a090 R15: 00007ffcbe3fa418 [ 2158.106070][T19188] [ 2158.111864][T24297] Bluetooth: hci0: command 0x0406 tx timeout [ 2158.195174][T19152] chnl_net:caif_netlink_parms(): no params data found [ 2158.557866][T19203] netlink: 'syz.3.16552': attribute type 10 has an invalid length. [ 2158.624731][T19205] netlink: 'syz.0.16551': attribute type 21 has an invalid length. [ 2158.665663][T19205] __nla_validate_parse: 9 callbacks suppressed [ 2158.665704][T19205] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16551'. [ 2158.704184][T19152] bridge0: port 1(bridge_slave_0) entered blocking state [ 2158.755644][T19152] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.795785][T19152] device bridge_slave_0 entered promiscuous mode [ 2158.845019][T19222] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16558'. [ 2158.858290][ T7560] Bluetooth: hci5: command 0x0409 tx timeout [ 2158.876818][T19152] bridge0: port 2(bridge_slave_1) entered blocking state [ 2158.884008][T19152] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.891669][T19222] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2158.927295][T19152] device bridge_slave_1 entered promiscuous mode [ 2159.002577][T19222] netlink: 830 bytes leftover after parsing attributes in process `syz.3.16558'. [ 2159.108785][T19228] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.16559'. [ 2159.151677][T19152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2159.224067][T19152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2159.498622][T19152] team0: Port device team_slave_0 added [ 2159.548451][T19152] team0: Port device team_slave_1 added [ 2159.636760][T19152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2159.643822][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2159.713091][T19152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2159.776082][T19152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2159.797306][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2159.913029][T19152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2159.973912][T19254] netlink: 'syz.0.16566': attribute type 10 has an invalid length. [ 2160.171941][T19271] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16570'. [ 2160.173214][T19152] device hsr_slave_0 entered promiscuous mode [ 2160.200894][T19271] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2160.214368][T19152] device hsr_slave_1 entered promiscuous mode [ 2160.242759][T19152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2160.247157][T19275] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.16571'. [ 2160.263005][T19152] Cannot create hsr debugfs directory [ 2160.301927][T19276] netlink: 'syz.5.16573': attribute type 4 has an invalid length. [ 2160.326895][T19276] netlink: 152 bytes leftover after parsing attributes in process `syz.5.16573'. [ 2160.361608][T19276] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2160.484587][T19271] netlink: 830 bytes leftover after parsing attributes in process `syz.2.16570'. [ 2160.853935][T19293] netlink: 'syz.3.16575': attribute type 3 has an invalid length. [ 2160.866832][T19293] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16575'. [ 2160.929374][T19296] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16577'. [ 2160.940227][T24297] Bluetooth: hci5: command 0x041b tx timeout [ 2161.099319][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.106077][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.113857][ T144] device hsr_slave_0 left promiscuous mode [ 2161.132088][ T144] device veth0_macvtap left promiscuous mode [ 2161.150785][ T144] device veth1_vlan left promiscuous mode [ 2161.160633][ T144] device veth0_vlan left promiscuous mode [ 2161.241625][ T144] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2161.349081][ T144] team0 (unregistering): Port device team_slave_1 removed [ 2161.364188][ T144] team0 (unregistering): Port device team_slave_0 removed [ 2161.378864][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2161.461599][ T144] bond0 (unregistering): Released all slaves [ 2161.697754][T19313] netlink: 'syz.5.16581': attribute type 10 has an invalid length. [ 2162.140988][T19331] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2162.523358][T19336] netlink: 'syz.3.16587': attribute type 4 has an invalid length. [ 2162.565222][T19336] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2162.640321][T19152] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2163.026559][T24295] Bluetooth: hci5: command 0x040f tx timeout [ 2165.096622][T24294] Bluetooth: hci5: command 0x0419 tx timeout [ 2165.623497][T19152] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2165.650020][T19356] __nla_validate_parse: 6 callbacks suppressed [ 2165.650037][T19356] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16598'. [ 2165.652817][T19152] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2165.734190][T19356] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2165.809260][T19152] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2165.865430][T19361] netlink: 830 bytes leftover after parsing attributes in process `syz.0.16598'. [ 2166.070958][T19365] netlink: 'syz.2.16592': attribute type 10 has an invalid length. [ 2166.091269][T19365] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16592'. [ 2166.138404][T19365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2166.383300][T19152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2166.450492][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2166.487109][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2166.525488][T19380] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.16597'. [ 2166.539185][T19152] 8021q: adding VLAN 0 to HW filter on device team0 [ 2166.562018][T19374] netlink: 'syz.0.16595': attribute type 10 has an invalid length. [ 2166.591103][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2166.620740][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2166.661509][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 2166.668831][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2166.701030][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2166.720573][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2166.736128][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2166.768829][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 2166.776043][T12558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2166.837118][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2166.884383][T19400] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.16605'. [ 2166.898710][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2166.951193][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2166.967835][T19400] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2166.979374][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2166.998636][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2167.014776][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2167.045306][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2167.071443][T19400] netlink: 830 bytes leftover after parsing attributes in process `syz.5.16605'. [ 2167.126701][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2167.146026][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2167.185082][T19410] netlink: 'syz.0.16608': attribute type 10 has an invalid length. [ 2167.200010][T19410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16608'. [ 2167.248450][T19410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2167.300470][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2167.328890][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2167.375698][T19152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2167.628662][T19419] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.16611'. [ 2168.082455][T19434] netlink: 'syz.3.16614': attribute type 10 has an invalid length. [ 2168.275703][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2168.300569][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2168.339463][T19152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2168.436654][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2168.462114][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2168.523503][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2168.550753][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2168.581257][T19152] device veth0_vlan entered promiscuous mode [ 2168.600058][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2168.614095][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2168.642505][T19152] device veth1_vlan entered promiscuous mode [ 2168.731144][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2168.755620][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2168.788610][T19152] device veth0_macvtap entered promiscuous mode [ 2168.827783][T19152] device veth1_macvtap entered promiscuous mode [ 2168.891174][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2168.924055][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2168.953940][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2168.991620][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.019360][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2169.054095][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.083295][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2169.114839][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.151916][T19152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2169.178597][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2169.199847][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2169.225243][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2169.255093][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2169.307239][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2169.346406][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.385733][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2169.415584][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.451684][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2169.483449][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.524218][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2169.561570][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.586841][T19152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2169.597162][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2169.622445][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2169.652082][T19152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2169.688526][T19152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2169.708596][T19152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2169.743245][T19152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.922282][T12558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2170.962032][T19470] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16619'. [ 2170.971125][T12558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2171.003697][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2171.060191][T19470] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2171.119148][T19475] netlink: 830 bytes leftover after parsing attributes in process `syz.0.16619'. [ 2171.356739][T19480] netlink: 'syz.5.16621': attribute type 10 has an invalid length. [ 2171.365211][T19480] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16621'. [ 2171.408343][T19480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2171.452498][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2171.506529][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2171.578216][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2171.863595][T19499] netlink: 'syz.3.16632': attribute type 10 has an invalid length. [ 2171.902417][T19499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16632'. [ 2171.912790][T19499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2172.632034][T19493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2174.486160][T19522] netlink: 'syz.3.16628': attribute type 10 has an invalid length. [ 2174.519282][T19516] netlink: 'syz.1.16627': attribute type 21 has an invalid length. [ 2174.537529][T19516] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16627'. [ 2174.646882][T19531] netlink: 'syz.3.16634': attribute type 1 has an invalid length. [ 2174.695297][T19531] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.16634'. [ 2174.747376][T19531] netlink: 9 bytes leftover after parsing attributes in process `syz.3.16634'. [ 2174.785068][T19532] netlink: 'syz.3.16634': attribute type 1 has an invalid length. [ 2174.819153][T19532] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.16634'. [ 2174.858458][T19540] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16637'. [ 2174.876373][T19532] netlink: 9 bytes leftover after parsing attributes in process `syz.3.16634'. [ 2174.915057][T19540] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2174.960117][T19542] netlink: 'syz.2.16639': attribute type 10 has an invalid length. [ 2174.990965][T19542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2175.279406][T19549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2175.598409][T19560] FAULT_INJECTION: forcing a failure. [ 2175.598409][T19560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2175.602839][T19563] netlink: 'syz.3.16644': attribute type 10 has an invalid length. [ 2175.621240][T19560] CPU: 0 PID: 19560 Comm: syz.2.16643 Not tainted syzkaller #0 [ 2175.628919][T19560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2175.639172][T19560] Call Trace: [ 2175.642475][T19560] [ 2175.645421][T19560] dump_stack_lvl+0x188/0x250 [ 2175.650204][T19560] ? show_regs_print_info+0x20/0x20 [ 2175.655792][T19560] ? load_image+0x400/0x400 [ 2175.660765][T19560] ? __lock_acquire+0x7d10/0x7d10 [ 2175.665918][T19560] should_fail+0x38c/0x4c0 [ 2175.670463][T19560] _copy_from_user+0x2e/0x170 [ 2175.675190][T19560] iovec_from_user+0x142/0x370 [ 2175.680104][T19560] __import_iovec+0x70/0x490 [ 2175.684733][T19560] import_iovec+0x6f/0xa0 [ 2175.689114][T19560] ___sys_sendmsg+0x1fd/0x2e0 [ 2175.693837][T19560] ? __sys_sendmsg+0x2a0/0x2a0 [ 2175.698089][T19568] netlink: 'syz.1.16646': attribute type 4 has an invalid length. [ 2175.698735][T19560] ? rcu_is_watching+0x11/0xa0 [ 2175.698786][T19560] __se_sys_sendmsg+0x1af/0x290 [ 2175.698814][T19560] ? __x64_sys_sendmsg+0x80/0x80 [ 2175.721775][T19560] ? lockdep_hardirqs_on+0x94/0x140 [ 2175.727108][T19560] do_syscall_64+0x4c/0xa0 [ 2175.731702][T19560] ? clear_bhb_loop+0x30/0x80 [ 2175.736570][T19560] ? clear_bhb_loop+0x30/0x80 [ 2175.741256][T19560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2175.747241][T19560] RIP: 0033:0x7f6fa8d10799 [ 2175.751738][T19560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2175.771705][T19560] RSP: 002b:00007f6fa6f6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2175.780215][T19560] RAX: ffffffffffffffda RBX: 00007f6fa8f89fa0 RCX: 00007f6fa8d10799 [ 2175.788372][T19560] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000b [ 2175.796431][T19560] RBP: 00007f6fa6f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2175.804863][T19560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2175.812824][T19560] R13: 00007f6fa8f8a038 R14: 00007f6fa8f89fa0 R15: 00007ffcbe3fa418 [ 2175.820972][T19560] [ 2175.906531][T19568] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2175.980199][T19578] netlink: 'syz.5.16647': attribute type 21 has an invalid length. [ 2176.026726][T19578] __nla_validate_parse: 4 callbacks suppressed [ 2176.026769][T19578] netlink: 156 bytes leftover after parsing attributes in process `syz.5.16647'. [ 2176.078148][T19585] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.16651'. [ 2176.596463][T19588] validate_nla: 1 callbacks suppressed [ 2176.596513][T19588] netlink: 'syz.2.16652': attribute type 10 has an invalid length. [ 2176.625852][T19588] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16652'. [ 2176.646052][T19588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2176.684240][T19597] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16656'. [ 2176.726473][T19597] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2176.745272][T19592] device syzkaller0 entered promiscuous mode [ 2177.099827][T19600] netlink: 830 bytes leftover after parsing attributes in process `syz.3.16656'. [ 2177.282182][T19605] netlink: 'syz.2.16667': attribute type 21 has an invalid length. [ 2177.466814][T19605] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16667'. [ 2177.805569][T19616] netlink: 'syz.1.16660': attribute type 10 has an invalid length. [ 2177.885894][T19616] bond0: (slave bond_slave_0): Releasing backup interface [ 2177.943584][T19619] netlink: 'syz.2.16662': attribute type 4 has an invalid length. [ 2177.957830][T19619] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16662'. [ 2177.974472][T19619] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2177.999873][T19621] netlink: 'syz.3.16663': attribute type 4 has an invalid length. [ 2178.010329][T19621] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16663'. [ 2178.024759][T19621] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2178.061986][T19625] netlink: 'syz.5.16665': attribute type 21 has an invalid length. [ 2178.085140][T19625] netlink: 100 bytes leftover after parsing attributes in process `syz.5.16665'. [ 2178.137846][T19632] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.16666'. [ 2178.404554][T19640] netlink: 'syz.0.16668': attribute type 10 has an invalid length. [ 2178.423811][T19640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2178.533578][T19642] device syzkaller0 entered promiscuous mode [ 2178.734628][T19653] netlink: 'syz.3.16673': attribute type 21 has an invalid length. [ 2178.953837][T19659] netlink: 'syz.5.16677': attribute type 10 has an invalid length. [ 2179.098944][T19664] netlink: 'syz.0.16679': attribute type 4 has an invalid length. [ 2179.109582][T19664] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2179.173149][T19657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2179.797614][T19686] batman_adv: batadv0: Adding interface: veth0_vlan [ 2179.873003][T19686] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2179.946669][T19686] batman_adv: batadv0: Interface activated: veth0_vlan [ 2180.038160][T19699] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2180.071924][T19694] tc_dump_action: action bad kind [ 2180.095040][T19701] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2182.913319][T19724] validate_nla: 6 callbacks suppressed [ 2182.913334][T19724] netlink: 'syz.1.16695': attribute type 6 has an invalid length. [ 2182.957903][T19724] __nla_validate_parse: 11 callbacks suppressed [ 2182.957919][T19724] netlink: 140 bytes leftover after parsing attributes in process `syz.1.16695'. [ 2183.089499][T19734] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.16701'. [ 2183.159185][T19736] FAULT_INJECTION: forcing a failure. [ 2183.159185][T19736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2183.182074][T19736] CPU: 1 PID: 19736 Comm: syz.5.16702 Not tainted syzkaller #0 [ 2183.189668][T19736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2183.199868][T19736] Call Trace: [ 2183.203162][T19736] [ 2183.206106][T19736] dump_stack_lvl+0x188/0x250 [ 2183.210803][T19736] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2183.217174][T19736] ? show_regs_print_info+0x20/0x20 [ 2183.222388][T19736] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2183.228785][T19736] should_fail+0x38c/0x4c0 [ 2183.233228][T19736] _copy_from_user+0x2e/0x170 [ 2183.237918][T19736] kstrtouint_from_user+0xd3/0x220 [ 2183.243133][T19736] ? kstrtol_from_user+0x2a0/0x2a0 [ 2183.248372][T19736] proc_fail_nth_write+0x8b/0x200 [ 2183.253413][T19736] ? proc_fail_nth_read+0x220/0x220 [ 2183.258725][T19736] ? common_file_perm+0x171/0x1c0 [ 2183.263858][T19736] ? proc_fail_nth_read+0x220/0x220 [ 2183.269251][T19736] vfs_write+0x30b/0xd60 [ 2183.273523][T19736] ? file_end_write+0x250/0x250 [ 2183.278397][T19736] ? __fget_files+0x40f/0x480 [ 2183.283293][T19736] ? mutex_lock_nested+0x17/0x20 [ 2183.288336][T19736] ? __fdget_pos+0x2bf/0x370 [ 2183.292935][T19736] ? ksys_write+0x71/0x260 [ 2183.297361][T19736] ksys_write+0x152/0x260 [ 2183.301832][T19736] ? __ia32_sys_read+0x80/0x80 [ 2183.306782][T19736] ? lockdep_hardirqs_on+0x94/0x140 [ 2183.312183][T19736] do_syscall_64+0x4c/0xa0 [ 2183.317067][T19736] ? clear_bhb_loop+0x30/0x80 [ 2183.321844][T19736] ? clear_bhb_loop+0x30/0x80 [ 2183.326616][T19736] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2183.332515][T19736] RIP: 0033:0x7f8655774fce [ 2183.337027][T19736] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2183.357092][T19736] RSP: 002b:00007f8653a0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2183.365957][T19736] RAX: ffffffffffffffda RBX: 00007f8653a0e6c0 RCX: 00007f8655774fce [ 2183.374206][T19736] RDX: 0000000000000001 RSI: 00007f8653a0e0a0 RDI: 0000000000000007 [ 2183.382202][T19736] RBP: 00007f8653a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 2183.390182][T19736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2183.398558][T19736] R13: 00007f8655a2e038 R14: 00007f8655a2dfa0 R15: 00007fffc9455178 [ 2183.407164][T19736] [ 2183.897106][T19723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2184.001532][T19746] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.16707'. [ 2184.019996][T19744] netlink: 'syz.0.16705': attribute type 10 has an invalid length. [ 2184.036458][T19744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16705'. [ 2184.050573][T19744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2184.073820][T19752] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16709'. [ 2184.127372][T19752] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2184.172162][T19751] netlink: 'syz.3.16708': attribute type 4 has an invalid length. [ 2184.187054][T19755] netlink: 'syz.2.16710': attribute type 29 has an invalid length. [ 2184.215625][T19751] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16708'. [ 2184.230482][T19751] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2184.253296][T19756] netlink: 830 bytes leftover after parsing attributes in process `syz.1.16709'. [ 2184.316736][T19748] netlink: 'syz.5.16706': attribute type 21 has an invalid length. [ 2184.330024][T19764] netlink: 'syz.2.16710': attribute type 4 has an invalid length. [ 2184.358088][T19748] netlink: 156 bytes leftover after parsing attributes in process `syz.5.16706'. [ 2184.375097][T19764] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.16710'. [ 2184.413956][T19755] netlink: 'syz.2.16710': attribute type 29 has an invalid length. [ 2184.466027][T19762] netlink: 'syz.2.16710': attribute type 29 has an invalid length. [ 2184.925626][T19787] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.16720'. [ 2184.936021][T19775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2185.120014][T19791] netlink: 'syz.0.16722': attribute type 21 has an invalid length. [ 2185.240990][T19795] netlink: 'syz.3.16723': attribute type 4 has an invalid length. [ 2185.276788][T19795] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2185.318975][T19808] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2185.910402][T19824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2186.273417][T19834] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2186.353713][T19834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2186.378364][T19847] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2186.436786][T19850] device hsr_slave_0 left promiscuous mode [ 2186.455689][T19850] device hsr_slave_1 left promiscuous mode [ 2186.547285][T19856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2186.718156][T19861] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2187.343034][T19868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2187.407263][T19883] FAULT_INJECTION: forcing a failure. [ 2187.407263][T19883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2187.433084][T19883] CPU: 1 PID: 19883 Comm: syz.2.16751 Not tainted syzkaller #0 [ 2187.440672][T19883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2187.451089][T19883] Call Trace: [ 2187.454452][T19883] [ 2187.457375][T19883] dump_stack_lvl+0x188/0x250 [ 2187.462148][T19883] ? show_regs_print_info+0x20/0x20 [ 2187.467342][T19883] ? load_image+0x400/0x400 [ 2187.471834][T19883] ? __lock_acquire+0x7d10/0x7d10 [ 2187.476862][T19883] ? vfs_write+0x8b2/0xd60 [ 2187.481285][T19883] should_fail+0x38c/0x4c0 [ 2187.485697][T19883] _copy_from_user+0x2e/0x170 [ 2187.490606][T19883] __sys_bpf+0x26d/0x6f0 [ 2187.494941][T19883] ? bpf_link_show_fdinfo+0x380/0x380 [ 2187.500309][T19883] ? vtime_user_exit+0x2c8/0x3e0 [ 2187.505240][T19883] __x64_sys_bpf+0x78/0x90 [ 2187.509649][T19883] do_syscall_64+0x4c/0xa0 [ 2187.514054][T19883] ? clear_bhb_loop+0x30/0x80 [ 2187.518718][T19883] ? clear_bhb_loop+0x30/0x80 [ 2187.523381][T19883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2187.529282][T19883] RIP: 0033:0x7f6fa8d10799 [ 2187.533685][T19883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2187.553283][T19883] RSP: 002b:00007f6fa6f6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2187.561692][T19883] RAX: ffffffffffffffda RBX: 00007f6fa8f89fa0 RCX: 00007f6fa8d10799 [ 2187.569677][T19883] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 2187.577644][T19883] RBP: 00007f6fa6f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2187.585603][T19883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2187.593558][T19883] R13: 00007f6fa8f8a038 R14: 00007f6fa8f89fa0 R15: 00007ffcbe3fa418 [ 2187.601531][T19883] [ 2187.732324][T19896] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2187.952846][T19904] validate_nla: 6 callbacks suppressed [ 2187.952882][T19904] netlink: 'syz.3.16760': attribute type 21 has an invalid length. [ 2187.986512][T19904] __nla_validate_parse: 15 callbacks suppressed [ 2187.986557][T19904] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16760'. [ 2188.303859][T19913] device veth1_macvtap left promiscuous mode [ 2188.341086][T19913] device macsec0 entered promiscuous mode [ 2188.748740][T19921] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.16764'. [ 2188.792432][T19921] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2188.904023][T19928] netlink: 830 bytes leftover after parsing attributes in process `syz.5.16764'. [ 2189.015042][T19927] device macvlan1 entered promiscuous mode [ 2189.168310][T19935] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16769'. [ 2189.203178][T19941] netlink: 'syz.1.16771': attribute type 10 has an invalid length. [ 2189.219302][T19947] FAULT_INJECTION: forcing a failure. [ 2189.219302][T19947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2189.237207][T19935] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2189.253675][T19947] CPU: 1 PID: 19947 Comm: syz.5.16773 Not tainted syzkaller #0 [ 2189.261432][T19947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2189.271584][T19947] Call Trace: [ 2189.274862][T19947] [ 2189.277780][T19947] dump_stack_lvl+0x188/0x250 [ 2189.282455][T19947] ? show_regs_print_info+0x20/0x20 [ 2189.287651][T19947] ? load_image+0x400/0x400 [ 2189.292328][T19947] ? __lock_acquire+0x7d10/0x7d10 [ 2189.297491][T19947] should_fail+0x38c/0x4c0 [ 2189.301996][T19947] _copy_from_user+0x2e/0x170 [ 2189.306665][T19947] __copy_msghdr_from_user+0x48a/0x630 [ 2189.312132][T19947] ? verify_lock_unused+0x140/0x140 [ 2189.317505][T19947] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 2189.322803][T19947] ___sys_sendmsg+0x19a/0x2e0 [ 2189.327473][T19947] ? __sys_sendmsg+0x2a0/0x2a0 [ 2189.332409][T19947] ? trace_event_raw_event_lock+0x270/0x270 [ 2189.338305][T19947] ? vfs_write+0x8b2/0xd60 [ 2189.342737][T19947] __se_sys_sendmsg+0x1af/0x290 [ 2189.347683][T19947] ? __x64_sys_sendmsg+0x80/0x80 [ 2189.352613][T19947] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2189.358789][T19947] ? lockdep_hardirqs_on+0x94/0x140 [ 2189.363978][T19947] do_syscall_64+0x4c/0xa0 [ 2189.368379][T19947] ? clear_bhb_loop+0x30/0x80 [ 2189.373218][T19947] ? clear_bhb_loop+0x30/0x80 [ 2189.378083][T19947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2189.384429][T19947] RIP: 0033:0x7f86557b4799 [ 2189.388841][T19947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2189.408786][T19947] RSP: 002b:00007f8653a0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2189.417397][T19947] RAX: ffffffffffffffda RBX: 00007f8655a2dfa0 RCX: 00007f86557b4799 [ 2189.425722][T19947] RDX: 0000000000040000 RSI: 0000200000007940 RDI: 0000000000000003 [ 2189.433858][T19947] RBP: 00007f8653a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 2189.441906][T19947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2189.450041][T19947] R13: 00007f8655a2e038 R14: 00007f8655a2dfa0 R15: 00007fffc9455178 [ 2189.458107][T19947] [ 2189.622411][T19950] netlink: 830 bytes leftover after parsing attributes in process `syz.3.16769'. [ 2189.656764][T19953] FAULT_INJECTION: forcing a failure. [ 2189.656764][T19953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2189.694724][T19953] CPU: 1 PID: 19953 Comm: syz.1.16775 Not tainted syzkaller #0 [ 2189.702491][T19953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2189.712730][T19953] Call Trace: [ 2189.716010][T19953] [ 2189.719073][T19953] dump_stack_lvl+0x188/0x250 [ 2189.723753][T19953] ? show_regs_print_info+0x20/0x20 [ 2189.729036][T19953] ? load_image+0x400/0x400 [ 2189.733632][T19953] ? __lock_acquire+0x7d10/0x7d10 [ 2189.738733][T19953] ? mark_lock+0x94/0x320 [ 2189.743064][T19953] should_fail+0x38c/0x4c0 [ 2189.747559][T19953] prepare_alloc_pages+0x1e4/0x5f0 [ 2189.752770][T19953] __alloc_pages+0x11b/0x480 [ 2189.757359][T19953] ? zone_statistics+0x170/0x170 [ 2189.762377][T19953] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2189.768613][T19953] alloc_pages_vma+0x393/0x7c0 [ 2189.773373][T19953] wp_page_copy+0x21e/0x2050 [ 2189.778132][T19953] ? do_wp_page+0x902/0xad0 [ 2189.782659][T19953] ? insert_page_into_pte_locked+0x480/0x480 [ 2189.788630][T19953] ? do_raw_spin_unlock+0x11d/0x230 [ 2189.793931][T19953] ? _raw_spin_unlock+0x24/0x40 [ 2189.798775][T19953] ? do_wp_page+0x902/0xad0 [ 2189.803301][T19953] handle_mm_fault+0x1f06/0x4410 [ 2189.808246][T19953] ? get_page+0xe0/0xe0 [ 2189.812401][T19953] ? vmacache_find+0x238/0x590 [ 2189.817336][T19953] ? find_vma+0xd2/0x230 [ 2189.821598][T19953] do_user_addr_fault+0x489/0xc80 [ 2189.826777][T19953] exc_page_fault+0x60/0x100 [ 2189.831466][T19953] asm_exc_page_fault+0x22/0x30 [ 2189.836314][T19953] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 2189.842986][T19953] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 2189.862855][T19953] RSP: 0018:ffffc9000318f738 EFLAGS: 00050206 [ 2189.868924][T19953] RAX: ffffffff83e1a101 RBX: 00000000000101d0 RCX: 000000000000a5d0 [ 2189.877210][T19953] RDX: 00000000000101d0 RSI: ffff88805a045ce8 RDI: 0000200000006000 [ 2189.885365][T19953] RBP: ffffc9000318f898 R08: ffff88805a0502b7 R09: 1ffff1100b40a056 [ 2189.893435][T19953] R10: dffffc0000000000 R11: ffffed100b40a057 R12: ffff88805a0400e8 [ 2189.901575][T19953] R13: dffffc00000000ff R14: 0000200000000400 R15: 0000000000000000 [ 2189.909551][T19953] ? _copy_to_iter+0x2b1/0x1180 [ 2189.914960][T19953] _copy_to_iter+0x318/0x1180 [ 2189.919901][T19953] ? __lock_acquire+0x7d10/0x7d10 [ 2189.925141][T19953] ? iov_iter_init+0x170/0x170 [ 2189.930092][T19953] ? __virt_addr_valid+0x3c6/0x470 [ 2189.935371][T19953] ? __phys_addr_symbol+0x2b/0x70 [ 2189.940661][T19953] __skb_datagram_iter+0xde/0x740 [ 2189.945857][T19953] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 2189.951863][T19953] skb_copy_datagram_iter+0xad/0x1f0 [ 2189.957376][T19953] tipc_recvstream+0x727/0xe70 [ 2189.962420][T19953] ? tipc_sendstream+0x70/0x70 [ 2189.967707][T19953] ____sys_recvmsg+0x2cd/0x5e0 [ 2189.973212][T19953] ? __might_fault+0xb3/0x110 [ 2189.978097][T19953] ? __sys_recvmsg_sock+0x40/0x40 [ 2189.983215][T19953] ? import_iovec+0x6f/0xa0 [ 2189.987729][T19953] ___sys_recvmsg+0x21a/0x5c0 [ 2189.992523][T19953] ? __sys_recvmsg+0x280/0x280 [ 2189.997285][T19953] ? trace_event_raw_event_lock+0x270/0x270 [ 2190.003195][T19953] __x64_sys_recvmsg+0x1f9/0x2c0 [ 2190.008200][T19953] ? ___sys_recvmsg+0x5c0/0x5c0 [ 2190.013086][T19953] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2190.019103][T19953] do_syscall_64+0x4c/0xa0 [ 2190.023652][T19953] ? clear_bhb_loop+0x30/0x80 [ 2190.028496][T19953] ? clear_bhb_loop+0x30/0x80 [ 2190.033276][T19953] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2190.039635][T19953] RIP: 0033:0x7faa221d1799 [ 2190.044382][T19953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2190.065030][T19953] RSP: 002b:00007faa2042b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2190.073834][T19953] RAX: ffffffffffffffda RBX: 00007faa2244afa0 RCX: 00007faa221d1799 [ 2190.081846][T19953] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000006 [ 2190.089815][T19953] RBP: 00007faa2042b090 R08: 0000000000000000 R09: 0000000000000000 [ 2190.097865][T19953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2190.106001][T19953] R13: 00007faa2244b038 R14: 00007faa2244afa0 R15: 00007ffc708a9248 [ 2190.113981][T19953] [ 2190.225220][T19967] netlink: 'syz.2.16779': attribute type 21 has an invalid length. [ 2190.247751][T19967] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16779'. [ 2190.477573][T19957] netlink: 'syz.5.16776': attribute type 15 has an invalid length. [ 2190.589445][T19973] netlink: 'syz.1.16781': attribute type 10 has an invalid length. [ 2190.952490][T19983] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16784'. [ 2191.040377][T19983] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2191.196734][T19984] netlink: 830 bytes leftover after parsing attributes in process `syz.3.16784'. [ 2192.009190][T20012] FAULT_INJECTION: forcing a failure. [ 2192.009190][T20012] name failslab, interval 1, probability 0, space 0, times 0 [ 2192.032406][T20012] CPU: 1 PID: 20012 Comm: syz.2.16794 Not tainted syzkaller #0 [ 2192.040109][T20012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2192.050270][T20012] Call Trace: [ 2192.054007][T20012] [ 2192.056952][T20012] dump_stack_lvl+0x188/0x250 [ 2192.061804][T20012] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2192.068230][T20012] ? show_regs_print_info+0x20/0x20 [ 2192.073520][T20012] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2192.079890][T20012] should_fail+0x38c/0x4c0 [ 2192.084325][T20012] should_failslab+0x5/0x20 [ 2192.088841][T20012] slab_pre_alloc_hook+0x51/0xc0 [ 2192.093896][T20012] kmem_cache_alloc_node_trace+0x4a/0x300 [ 2192.099791][T20012] ? __get_vm_area_node+0x119/0x2d0 [ 2192.105357][T20012] __get_vm_area_node+0x119/0x2d0 [ 2192.110501][T20012] __vmalloc_node_range+0xef/0x8b0 [ 2192.115916][T20012] ? netlink_sendmsg+0x5ec/0xbe0 [ 2192.121114][T20012] ? netlink_data_ready+0x10/0x10 [ 2192.126441][T20012] ? netlink_sendmsg+0x5ec/0xbe0 [ 2192.131393][T20012] vmalloc+0x75/0x80 [ 2192.135288][T20012] ? netlink_sendmsg+0x5ec/0xbe0 [ 2192.140340][T20012] netlink_sendmsg+0x5ec/0xbe0 [ 2192.145547][T20012] ? lockdep_hardirqs_on+0x94/0x140 [ 2192.150843][T20012] ? netlink_getsockopt+0x570/0x570 [ 2192.156152][T20012] ? bpf_lsm_socket_accept+0x10/0x10 [ 2192.161448][T20012] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2192.166815][T20012] ? security_socket_sendmsg+0x7c/0xa0 [ 2192.172273][T20012] sock_write_iter+0x2a6/0x3a0 [ 2192.177134][T20012] ? sock_read_iter+0x380/0x380 [ 2192.182068][T20012] ? memset+0x1e/0x40 [ 2192.186047][T20012] ? iov_iter_init+0xb4/0x170 [ 2192.190982][T20012] vfs_write+0x745/0xd60 [ 2192.195218][T20012] ? file_end_write+0x250/0x250 [ 2192.200164][T20012] ? __fget_files+0x40f/0x480 [ 2192.205080][T20012] ? __fdget_pos+0x1e2/0x370 [ 2192.209809][T20012] ? ksys_write+0x71/0x260 [ 2192.214409][T20012] ksys_write+0x152/0x260 [ 2192.218839][T20012] ? __ia32_sys_read+0x80/0x80 [ 2192.223693][T20012] ? lockdep_hardirqs_on+0x94/0x140 [ 2192.229244][T20012] do_syscall_64+0x4c/0xa0 [ 2192.233743][T20012] ? clear_bhb_loop+0x30/0x80 [ 2192.238419][T20012] ? clear_bhb_loop+0x30/0x80 [ 2192.243105][T20012] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2192.249150][T20012] RIP: 0033:0x7f6fa8d10799 [ 2192.253651][T20012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2192.273743][T20012] RSP: 002b:00007f6fa6f6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2192.282161][T20012] RAX: ffffffffffffffda RBX: 00007f6fa8f89fa0 RCX: 00007f6fa8d10799 [ 2192.290262][T20012] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000007 [ 2192.298456][T20012] RBP: 00007f6fa6f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2192.306939][T20012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2192.315128][T20012] R13: 00007f6fa8f8a038 R14: 00007f6fa8f89fa0 R15: 00007ffcbe3fa418 [ 2192.323493][T20012] [ 2192.359319][T20012] syz.2.16794: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2192.376892][T20012] CPU: 1 PID: 20012 Comm: syz.2.16794 Not tainted syzkaller #0 [ 2192.384494][T20012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2192.394950][T20012] Call Trace: [ 2192.398498][T20012] [ 2192.401449][T20012] dump_stack_lvl+0x188/0x250 [ 2192.406545][T20012] ? rcu_lock_release+0x5/0x20 [ 2192.411439][T20012] ? show_regs_print_info+0x20/0x20 [ 2192.417013][T20012] ? load_image+0x400/0x400 [ 2192.421740][T20012] warn_alloc+0x243/0x320 [ 2192.426205][T20012] ? zone_watermark_ok_safe+0x240/0x240 [ 2192.431984][T20012] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 2192.438066][T20012] ? __get_vm_area_node+0x119/0x2d0 [ 2192.443308][T20012] __vmalloc_node_range+0x2b1/0x8b0 [ 2192.448497][T20012] ? netlink_data_ready+0x10/0x10 [ 2192.453623][T20012] ? netlink_sendmsg+0x5ec/0xbe0 [ 2192.458701][T20012] vmalloc+0x75/0x80 [ 2192.462621][T20012] ? netlink_sendmsg+0x5ec/0xbe0 [ 2192.467566][T20012] netlink_sendmsg+0x5ec/0xbe0 [ 2192.472517][T20012] ? lockdep_hardirqs_on+0x94/0x140 [ 2192.477920][T20012] ? netlink_getsockopt+0x570/0x570 [ 2192.483112][T20012] ? bpf_lsm_socket_accept+0x10/0x10 [ 2192.488772][T20012] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2192.494051][T20012] ? security_socket_sendmsg+0x7c/0xa0 [ 2192.499501][T20012] sock_write_iter+0x2a6/0x3a0 [ 2192.504365][T20012] ? sock_read_iter+0x380/0x380 [ 2192.509488][T20012] ? memset+0x1e/0x40 [ 2192.513492][T20012] ? iov_iter_init+0xb4/0x170 [ 2192.518189][T20012] vfs_write+0x745/0xd60 [ 2192.522817][T20012] ? file_end_write+0x250/0x250 [ 2192.527693][T20012] ? __fget_files+0x40f/0x480 [ 2192.532388][T20012] ? __fdget_pos+0x1e2/0x370 [ 2192.536968][T20012] ? ksys_write+0x71/0x260 [ 2192.541376][T20012] ksys_write+0x152/0x260 [ 2192.545902][T20012] ? __ia32_sys_read+0x80/0x80 [ 2192.550668][T20012] ? lockdep_hardirqs_on+0x94/0x140 [ 2192.555895][T20012] do_syscall_64+0x4c/0xa0 [ 2192.560310][T20012] ? clear_bhb_loop+0x30/0x80 [ 2192.565056][T20012] ? clear_bhb_loop+0x30/0x80 [ 2192.569891][T20012] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2192.576248][T20012] RIP: 0033:0x7f6fa8d10799 [ 2192.580874][T20012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2192.600963][T20012] RSP: 002b:00007f6fa6f6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2192.609546][T20012] RAX: ffffffffffffffda RBX: 00007f6fa8f89fa0 RCX: 00007f6fa8d10799 [ 2192.617985][T20012] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000007 [ 2192.626245][T20012] RBP: 00007f6fa6f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2192.634610][T20012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2192.642675][T20012] R13: 00007f6fa8f8a038 R14: 00007f6fa8f89fa0 R15: 00007ffcbe3fa418 [ 2192.650918][T20012] [ 2192.686418][T20012] Mem-Info: [ 2192.700416][T20012] active_anon:291 inactive_anon:7094 isolated_anon:0 [ 2192.700416][T20012] active_file:27177 inactive_file:36186 isolated_file:0 [ 2192.700416][T20012] unevictable:768 dirty:293 writeback:0 [ 2192.700416][T20012] slab_reclaimable:21198 slab_unreclaimable:93964 [ 2192.700416][T20012] mapped:30786 shmem:1642 pagetables:644 bounce:0 [ 2192.700416][T20012] kernel_misc_reclaimable:0 [ 2192.700416][T20012] free:1362334 free_pcp:10415 free_cma:0 [ 2192.746082][T20012] Node 0 active_anon:1132kB inactive_anon:27968kB active_file:108500kB inactive_file:144744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123144kB dirty:1172kB writeback:0kB shmem:4492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10152kB pagetables:2576kB all_unreclaimable? no [ 2192.801515][T20018] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16795'. [ 2192.869324][T20020] netlink: 830 bytes leftover after parsing attributes in process `syz.1.16795'. [ 2192.897648][T20018] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2192.907994][T20012] Node 1 active_anon:32kB inactive_anon:508kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 2192.910240][T20017] netlink: 'syz.5.16796': attribute type 10 has an invalid length. [ 2193.024787][T20012] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2193.166458][T20012] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 2193.172866][T20012] Node 0 DMA32 free:1516348kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1132kB inactive_anon:27968kB active_file:108500kB inactive_file:144744kB unevictable:1536kB writepending:1320kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:38552kB local_pcp:18920kB free_cma:0kB [ 2193.247176][T20024] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16798'. [ 2193.279495][T20012] lowmem_reserve[]: 0 0 0 0 0 [ 2193.284497][T20012] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 2193.336657][T20012] lowmem_reserve[]: 0 0 0 0 0 [ 2193.341611][T20012] Node 1 Normal free:3920580kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:2612kB local_pcp:1696kB free_cma:0kB [ 2193.402674][T20026] netlink: 'syz.0.16799': attribute type 21 has an invalid length. [ 2193.408168][T20012] lowmem_reserve[]: 0 0 0 0 0 [ 2193.415486][T20012] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2193.430292][T20012] Node 0 DMA32: 2985*4kB (UME) 2319*8kB (UME) 3146*16kB (UME) 895*32kB (UME) 1855*64kB (UME) 1151*128kB (UM) 410*256kB (UME) 133*512kB (UM) 66*1024kB (UM) 47*2048kB (UM) 196*4096kB (UME) = 1515228kB [ 2193.454749][T20026] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16799'. [ 2193.497594][T20012] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2193.538683][T20012] Node 1 Normal: 123*4kB (UME) 35*8kB (UME) 30*16kB (UME) 179*32kB (UME) 92*64kB (UME) 25*128kB (UE) 12*256kB (UME) 8*512kB (U) 2*1024kB (UE) 2*2048kB (UM) 950*4096kB (M) = 3920580kB [ 2193.542584][T20033] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16801'. [ 2193.587456][T20012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2193.604801][T20031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2193.621894][T20012] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2193.625810][T20033] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2193.646402][T20012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2193.666545][T20012] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2193.676000][T20012] 65007 total pagecache pages [ 2193.683221][T20012] 0 pages in swap cache [ 2193.690715][T20012] Swap cache stats: add 76, delete 76, find 8/18 [ 2193.703284][T20012] Free swap = 124728kB [ 2193.724672][T20033] netlink: 830 bytes leftover after parsing attributes in process `syz.3.16801'. [ 2193.747730][T20012] Total swap = 124996kB [ 2193.751958][T20012] 2097051 pages RAM [ 2193.755970][T20012] 0 pages HighMem/MovableOnly [ 2193.771379][T20012] 411490 pages reserved [ 2193.775595][T20012] 0 pages cma reserved [ 2193.958924][T20048] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.16806'. [ 2194.367310][T20061] netlink: 'syz.3.16811': attribute type 4 has an invalid length. [ 2194.375835][T20061] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16811'. [ 2194.389360][T20061] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2197.484835][T20078] device macvlan1 entered promiscuous mode [ 2197.664195][T20090] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16821'. [ 2197.677110][T20090] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2197.708550][T20091] netlink: 'syz.2.16820': attribute type 21 has an invalid length. [ 2197.825915][T20091] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16820'. [ 2197.929176][T20090] netlink: 830 bytes leftover after parsing attributes in process `syz.3.16821'. [ 2197.991649][T20105] tap0: tun_chr_ioctl cmd 1074025675 [ 2198.012093][T20105] tap0: persist disabled [ 2198.055387][T20097] tap0: tun_chr_ioctl cmd 1074025675 [ 2198.086980][T20097] tap0: persist enabled [ 2198.252939][T20115] netlink: 'syz.3.16828': attribute type 4 has an invalid length. [ 2198.276528][T20115] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16828'. [ 2198.310835][T20115] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2198.343283][T20118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2198.445104][T20118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2198.745332][T20118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2198.756669][T20118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2198.768554][T20118] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2198.786533][T20118] batman_adv: batadv0: Removing interface: veth0_vlan [ 2198.808133][T20118] bond0: (slave batadv0): Releasing backup interface [ 2198.826653][T20123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2198.837876][T20117] netlink: 'syz.1.16827': attribute type 10 has an invalid length. [ 2198.846132][T20117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16827'. [ 2198.869513][T20122] netlink: 'syz.5.16830': attribute type 10 has an invalid length. [ 2198.879640][T20122] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16830'. [ 2198.906128][T20122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2199.072723][T20134] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16836'. [ 2199.084463][T20134] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2199.125699][T20135] netlink: 'syz.5.16835': attribute type 21 has an invalid length. [ 2199.168633][T20135] netlink: 156 bytes leftover after parsing attributes in process `syz.5.16835'. [ 2199.201639][T20134] netlink: 830 bytes leftover after parsing attributes in process `syz.0.16836'. [ 2199.462971][T20148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16841'. [ 2199.488859][T20148] netlink: 'syz.1.16841': attribute type 12 has an invalid length. [ 2199.511191][T20148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16841'. [ 2199.621437][T20150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2199.685527][T20157] netlink: 'syz.1.16845': attribute type 10 has an invalid length. [ 2199.731494][T20157] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16845'. [ 2199.772692][T20155] netlink: 'syz.0.16843': attribute type 10 has an invalid length. [ 2199.849742][T20161] netlink: 'syz.5.16847': attribute type 4 has an invalid length. [ 2199.899957][T20161] netlink: 152 bytes leftover after parsing attributes in process `syz.5.16847'. [ 2199.928850][T20161] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2199.962832][T20153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2200.103053][T20175] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2200.227220][T20173] netlink: 'syz.3.16852': attribute type 21 has an invalid length. [ 2200.262530][T20169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2200.323560][T20169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2200.400369][T20169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2200.420143][T20169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2200.463962][T20169] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2200.476647][T20169] batman_adv: batadv0: Removing interface: veth0_vlan [ 2200.602557][T20185] netlink: 'syz.5.16855': attribute type 10 has an invalid length. [ 2200.622764][T20185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2200.770548][T20193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2200.788286][T20193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2201.015294][T20193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2201.025779][T20193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2201.046806][T20193] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2201.058374][T20193] batman_adv: batadv0: Removing interface: veth0_vlan [ 2201.079686][T20188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2201.162526][T20196] netlink: 'syz.2.16860': attribute type 10 has an invalid length. [ 2201.186660][T20196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2201.199447][T20196] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2201.425041][T20209] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2201.693747][T20201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2201.880098][T20224] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2201.950394][T20226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2202.149416][T20241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2202.177498][T20241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2202.195102][T20241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2202.205397][T20241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2202.225818][T20241] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2202.233696][T20234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2202.266688][T20241] batman_adv: batadv0: Removing interface: veth0_vlan [ 2202.375597][T20252] FAULT_INJECTION: forcing a failure. [ 2202.375597][T20252] name failslab, interval 1, probability 0, space 0, times 0 [ 2202.407970][T20252] CPU: 0 PID: 20252 Comm: syz.0.16881 Not tainted syzkaller #0 [ 2202.416213][T20252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2202.426288][T20252] Call Trace: [ 2202.429578][T20252] [ 2202.432522][T20252] dump_stack_lvl+0x188/0x250 [ 2202.437399][T20252] ? show_regs_print_info+0x20/0x20 [ 2202.442803][T20252] ? load_image+0x400/0x400 [ 2202.447419][T20252] ? __might_sleep+0xf0/0xf0 [ 2202.452288][T20252] ? __lock_acquire+0x7d10/0x7d10 [ 2202.457524][T20252] ? mark_lock+0x94/0x320 [ 2202.461956][T20252] should_fail+0x38c/0x4c0 [ 2202.466412][T20252] should_failslab+0x5/0x20 [ 2202.471110][T20252] slab_pre_alloc_hook+0x51/0xc0 [ 2202.476147][T20252] __kmalloc+0x6b/0x330 [ 2202.480423][T20252] ? tomoyo_realpath_from_path+0x118/0x610 [ 2202.486505][T20252] tomoyo_realpath_from_path+0x118/0x610 [ 2202.492254][T20252] tomoyo_path_number_perm+0x242/0x660 [ 2202.497823][T20252] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2202.503686][T20252] ? perf_trace_lock+0xe4/0x390 [ 2202.508541][T20252] ? perf_trace_lock+0xe4/0x390 [ 2202.513434][T20252] security_file_ioctl+0x6c/0xa0 [ 2202.518396][T20252] __se_sys_ioctl+0x48/0x170 [ 2202.522980][T20252] do_syscall_64+0x4c/0xa0 [ 2202.527568][T20252] ? clear_bhb_loop+0x30/0x80 [ 2202.532431][T20252] ? clear_bhb_loop+0x30/0x80 [ 2202.537099][T20252] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2202.543070][T20252] RIP: 0033:0x7fcdb3193799 [ 2202.547475][T20252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2202.567463][T20252] RSP: 002b:00007fcdb13ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2202.576151][T20252] RAX: ffffffffffffffda RBX: 00007fcdb340cfa0 RCX: 00007fcdb3193799 [ 2202.584327][T20252] RDX: 0000000000000000 RSI: 0000000000008919 RDI: 0000000000000003 [ 2202.592318][T20252] RBP: 00007fcdb13ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2202.600565][T20252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2202.608723][T20252] R13: 00007fcdb340d038 R14: 00007fcdb340cfa0 R15: 00007fff8d94e6b8 [ 2202.617012][T20252] [ 2202.623755][T20252] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2202.654064][T20257] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2205.857325][T20287] __nla_validate_parse: 13 callbacks suppressed [ 2205.857346][T20287] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.16894'. [ 2205.874898][T20289] validate_nla: 6 callbacks suppressed [ 2205.874916][T20289] netlink: 'syz.5.16895': attribute type 11 has an invalid length. [ 2205.899083][T20289] netlink: 'syz.5.16895': attribute type 5 has an invalid length. [ 2205.929694][T20296] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16898'. [ 2205.940502][T20296] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2205.957993][T20289] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16895'. [ 2205.974282][T20293] netlink: 'syz.2.16897': attribute type 10 has an invalid length. [ 2205.995262][T20293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16897'. [ 2206.028867][T20293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2206.042245][T20293] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2206.066338][T20296] netlink: 830 bytes leftover after parsing attributes in process `syz.3.16898'. [ 2206.096948][T20298] netlink: 'syz.0.16899': attribute type 10 has an invalid length. [ 2206.115376][T20298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16899'. [ 2206.159977][T20298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2206.181590][T20300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2206.191533][T20298] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2206.230417][T20304] netlink: 'syz.5.16901': attribute type 2 has an invalid length. [ 2206.253076][T20304] netlink: 'syz.5.16901': attribute type 8 has an invalid length. [ 2206.262823][T20304] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16901'. [ 2206.581281][T20315] netlink: 'syz.2.16902': attribute type 21 has an invalid length. [ 2206.594760][T20315] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16902'. [ 2206.741624][T20318] device wlan0 entered promiscuous mode [ 2206.774017][T20323] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.16909'. [ 2206.836730][T20314] netlink: 'syz.0.16906': attribute type 9 has an invalid length. [ 2206.856668][T20314] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.16906'. [ 2207.110714][T20333] netlink: 'syz.5.16912': attribute type 10 has an invalid length. [ 2207.223720][T20340] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2207.316897][T20343] netlink: 'syz.0.16926': attribute type 10 has an invalid length. [ 2207.521345][T20344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2207.541088][T20344] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2207.769663][T20364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2207.780243][T20364] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2207.854767][T20356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2207.937907][T20368] FAULT_INJECTION: forcing a failure. [ 2207.937907][T20368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2207.953759][T20368] CPU: 1 PID: 20368 Comm: syz.0.16927 Not tainted syzkaller #0 [ 2207.961874][T20368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2207.972848][T20368] Call Trace: [ 2207.976148][T20368] [ 2207.979269][T20368] dump_stack_lvl+0x188/0x250 [ 2207.984073][T20368] ? show_regs_print_info+0x20/0x20 [ 2207.989488][T20368] ? load_image+0x400/0x400 [ 2207.994452][T20368] ? __lock_acquire+0x7d10/0x7d10 [ 2207.999685][T20368] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2208.005594][T20368] should_fail+0x38c/0x4c0 [ 2208.010051][T20368] _copy_from_user+0x2e/0x170 [ 2208.014897][T20368] __copy_msghdr_from_user+0xc9/0x630 [ 2208.020657][T20368] ? verify_lock_unused+0x140/0x140 [ 2208.026265][T20368] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 2208.031862][T20368] ___sys_sendmsg+0x19a/0x2e0 [ 2208.036668][T20368] ? __sys_sendmsg+0x2a0/0x2a0 [ 2208.041554][T20368] ? vfs_write+0x8b2/0xd60 [ 2208.046220][T20368] __se_sys_sendmsg+0x1af/0x290 [ 2208.051184][T20368] ? __x64_sys_sendmsg+0x80/0x80 [ 2208.056552][T20368] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2208.064140][T20368] ? lockdep_hardirqs_on+0x94/0x140 [ 2208.069928][T20368] do_syscall_64+0x4c/0xa0 [ 2208.074481][T20368] ? clear_bhb_loop+0x30/0x80 [ 2208.079420][T20368] ? clear_bhb_loop+0x30/0x80 [ 2208.084141][T20368] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2208.090430][T20368] RIP: 0033:0x7fcdb3193799 [ 2208.095400][T20368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2208.115849][T20368] RSP: 002b:00007fcdb13ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2208.124960][T20368] RAX: ffffffffffffffda RBX: 00007fcdb340cfa0 RCX: 00007fcdb3193799 [ 2208.133927][T20368] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 2208.142802][T20368] RBP: 00007fcdb13ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2208.151085][T20368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2208.159930][T20368] R13: 00007fcdb340d038 R14: 00007fcdb340cfa0 R15: 00007fff8d94e6b8 [ 2208.168300][T20368] [ 2208.555028][T20392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2208.576117][T20392] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2208.649499][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2208.681949][T20397] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2209.020457][T20400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2209.147443][T20409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2209.170915][T20409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2209.187413][T20409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2209.196056][T20409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2209.210213][T20409] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2209.225809][T20409] batman_adv: batadv0: Removing interface: veth0_vlan [ 2209.316982][T20411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2209.330657][T20411] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2209.652093][T20434] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2210.939115][T20487] validate_nla: 13 callbacks suppressed [ 2210.939448][T20487] netlink: 'syz.2.16971': attribute type 21 has an invalid length. [ 2210.961880][T20487] __nla_validate_parse: 24 callbacks suppressed [ 2210.961923][T20487] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16971'. [ 2211.391359][T20502] netlink: 'syz.3.16973': attribute type 9 has an invalid length. [ 2211.426603][T20502] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.16973'. [ 2211.437389][T20497] device wlan0 entered promiscuous mode [ 2211.467848][T20494] netlink: 'syz.0.16975': attribute type 10 has an invalid length. [ 2211.478956][T20494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16975'. [ 2211.497926][T20494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2211.521519][T20494] net_ratelimit: 3 callbacks suppressed [ 2211.521534][T20494] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2211.601147][T20505] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.16976'. [ 2211.755937][T20515] FAULT_INJECTION: forcing a failure. [ 2211.755937][T20515] name failslab, interval 1, probability 0, space 0, times 0 [ 2211.769321][T20515] CPU: 1 PID: 20515 Comm: syz.1.16982 Not tainted syzkaller #0 [ 2211.777013][T20515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2211.787195][T20515] Call Trace: [ 2211.790696][T20515] [ 2211.793735][T20515] dump_stack_lvl+0x188/0x250 [ 2211.798475][T20515] ? show_regs_print_info+0x20/0x20 [ 2211.803723][T20515] ? load_image+0x400/0x400 [ 2211.808357][T20515] ? __might_sleep+0xf0/0xf0 [ 2211.813179][T20515] ? __lock_acquire+0x7d10/0x7d10 [ 2211.818551][T20515] ? mark_lock+0x94/0x320 [ 2211.823287][T20515] should_fail+0x38c/0x4c0 [ 2211.829207][T20515] should_failslab+0x5/0x20 [ 2211.833942][T20515] slab_pre_alloc_hook+0x51/0xc0 [ 2211.838931][T20515] __kmalloc+0x6b/0x330 [ 2211.843407][T20515] ? tomoyo_realpath_from_path+0x118/0x610 [ 2211.849265][T20515] tomoyo_realpath_from_path+0x118/0x610 [ 2211.854962][T20515] tomoyo_path_number_perm+0x242/0x660 [ 2211.860440][T20515] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2211.867183][T20515] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2211.873743][T20515] security_file_ioctl+0x6c/0xa0 [ 2211.879102][T20515] __se_sys_ioctl+0x48/0x170 [ 2211.884093][T20515] do_syscall_64+0x4c/0xa0 [ 2211.888719][T20515] ? clear_bhb_loop+0x30/0x80 [ 2211.893530][T20515] ? clear_bhb_loop+0x30/0x80 [ 2211.898224][T20515] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2211.904397][T20515] RIP: 0033:0x7faa221d1799 [ 2211.908961][T20515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2211.931668][T20515] RSP: 002b:00007faa2042b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2211.940737][T20515] RAX: ffffffffffffffda RBX: 00007faa2244afa0 RCX: 00007faa221d1799 [ 2211.949226][T20515] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000009 [ 2211.958183][T20515] RBP: 00007faa2042b090 R08: 0000000000000000 R09: 0000000000000000 [ 2211.966357][T20515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2211.975056][T20515] R13: 00007faa2244b038 R14: 00007faa2244afa0 R15: 00007ffc708a9248 [ 2211.983549][T20515] [ 2212.061540][T20510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2212.166768][T20515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2212.319661][T20528] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.16986'. [ 2212.510436][T20531] netlink: 'syz.1.16987': attribute type 21 has an invalid length. [ 2212.535095][T20536] FAULT_INJECTION: forcing a failure. [ 2212.535095][T20536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2212.563483][T20531] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16987'. [ 2212.575600][T20536] CPU: 1 PID: 20536 Comm: syz.2.16989 Not tainted syzkaller #0 [ 2212.583281][T20536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2212.593452][T20536] Call Trace: [ 2212.596776][T20536] [ 2212.600055][T20536] dump_stack_lvl+0x188/0x250 [ 2212.605383][T20536] ? show_regs_print_info+0x20/0x20 [ 2212.610633][T20536] ? load_image+0x400/0x400 [ 2212.615542][T20536] ? __might_sleep+0xf0/0xf0 [ 2212.620717][T20536] ? __lock_acquire+0x7d10/0x7d10 [ 2212.627174][T20536] should_fail+0x38c/0x4c0 [ 2212.632696][T20536] copy_page_from_iter+0x33c/0x760 [ 2212.637928][T20536] tun_get_user+0x1983/0x3a70 [ 2212.642730][T20536] ? tun_ring_recv+0xc40/0xc40 [ 2212.647624][T20536] ? rcu_lock_release+0x5/0x20 [ 2212.652408][T20536] ? __lock_acquire+0x7d10/0x7d10 [ 2212.657585][T20536] tun_chr_write_iter+0x112/0x1e0 [ 2212.662893][T20536] vfs_write+0x745/0xd60 [ 2212.667176][T20536] ? file_end_write+0x250/0x250 [ 2212.672593][T20536] ? __fget_files+0x40f/0x480 [ 2212.678384][T20536] ? __fdget_pos+0x1e2/0x370 [ 2212.683041][T20536] ? ksys_write+0x71/0x260 [ 2212.687791][T20536] ksys_write+0x152/0x260 [ 2212.692114][T20536] ? __ia32_sys_read+0x80/0x80 [ 2212.697194][T20536] ? lockdep_hardirqs_on+0x94/0x140 [ 2212.702656][T20536] do_syscall_64+0x4c/0xa0 [ 2212.707476][T20536] ? clear_bhb_loop+0x30/0x80 [ 2212.712392][T20536] ? clear_bhb_loop+0x30/0x80 [ 2212.717268][T20536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2212.723599][T20536] RIP: 0033:0x7f6fa8d10799 [ 2212.728294][T20536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2212.748144][T20536] RSP: 002b:00007f6fa6f6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2212.756844][T20536] RAX: ffffffffffffffda RBX: 00007f6fa8f89fa0 RCX: 00007f6fa8d10799 [ 2212.765338][T20536] RDX: 0000000000000017 RSI: 0000200000000040 RDI: 00000000000000c8 [ 2212.773607][T20536] RBP: 00007f6fa6f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2212.781859][T20536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2212.789844][T20536] R13: 00007f6fa8f8a038 R14: 00007f6fa8f89fa0 R15: 00007ffcbe3fa418 [ 2212.798228][T20536] [ 2212.854116][T20534] netlink: 'syz.5.16988': attribute type 10 has an invalid length. [ 2213.022739][T20545] netlink: 'syz.5.16991': attribute type 10 has an invalid length. [ 2213.046142][T20545] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16991'. [ 2213.088474][T20545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2213.111064][T20545] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2213.471516][T20551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2213.719123][T20562] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16998'. [ 2213.812920][T20562] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2213.902641][T20562] netlink: 830 bytes leftover after parsing attributes in process `syz.0.16998'. [ 2214.196905][T20553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2214.263467][T20568] netlink: 'syz.3.17000': attribute type 10 has an invalid length. [ 2214.284802][T20568] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17000'. [ 2214.295111][T20568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2214.304532][T20568] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2214.376829][T20571] netlink: 'syz.1.17001': attribute type 10 has an invalid length. [ 2214.644866][T20585] netlink: 'syz.0.17007': attribute type 10 has an invalid length. [ 2214.655625][T20585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2214.667208][T20585] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2214.851400][T20598] netlink: 'syz.0.17011': attribute type 10 has an invalid length. [ 2214.864067][T20598] device geneve0 entered promiscuous mode [ 2214.907758][T20598] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2214.920765][T20602] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2215.197857][T20604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2215.649786][T20599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2215.931464][T20613] device hsr_slave_1 left promiscuous mode [ 2216.133509][T20624] validate_nla: 1 callbacks suppressed [ 2216.133549][T20624] netlink: 'syz.5.17021': attribute type 10 has an invalid length. [ 2216.156583][T20624] __nla_validate_parse: 4 callbacks suppressed [ 2216.156624][T20624] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17021'. [ 2216.189481][T20624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2216.198817][T20624] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2216.355297][T20639] FAULT_INJECTION: forcing a failure. [ 2216.355297][T20639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2216.404965][T20639] CPU: 1 PID: 20639 Comm: syz.1.17028 Not tainted syzkaller #0 [ 2216.412757][T20639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2216.423793][T20639] Call Trace: [ 2216.427361][T20639] [ 2216.430331][T20639] dump_stack_lvl+0x188/0x250 [ 2216.435851][T20639] ? show_regs_print_info+0x20/0x20 [ 2216.441288][T20639] ? load_image+0x400/0x400 [ 2216.445969][T20639] ? __lock_acquire+0x7d10/0x7d10 [ 2216.451205][T20639] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2216.457100][T20639] should_fail+0x38c/0x4c0 [ 2216.461680][T20639] _copy_from_user+0x2e/0x170 [ 2216.466693][T20639] __copy_msghdr_from_user+0xc9/0x630 [ 2216.472194][T20639] ? verify_lock_unused+0x140/0x140 [ 2216.477712][T20639] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 2216.483165][T20639] ___sys_sendmsg+0x19a/0x2e0 [ 2216.488091][T20639] ? __sys_sendmsg+0x2a0/0x2a0 [ 2216.493339][T20639] ? vfs_write+0x8b2/0xd60 [ 2216.497917][T20639] __se_sys_sendmsg+0x1af/0x290 [ 2216.502996][T20639] ? __x64_sys_sendmsg+0x80/0x80 [ 2216.507963][T20639] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2216.514170][T20639] ? lockdep_hardirqs_on+0x94/0x140 [ 2216.519734][T20639] do_syscall_64+0x4c/0xa0 [ 2216.524273][T20639] ? clear_bhb_loop+0x30/0x80 [ 2216.529076][T20639] ? clear_bhb_loop+0x30/0x80 [ 2216.533782][T20639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2216.539783][T20639] RIP: 0033:0x7faa221d1799 [ 2216.544486][T20639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2216.564751][T20639] RSP: 002b:00007faa2042b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2216.573299][T20639] RAX: ffffffffffffffda RBX: 00007faa2244afa0 RCX: 00007faa221d1799 [ 2216.582007][T20639] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2216.590086][T20639] RBP: 00007faa2042b090 R08: 0000000000000000 R09: 0000000000000000 [ 2216.598186][T20639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2216.606206][T20639] R13: 00007faa2244b038 R14: 00007faa2244afa0 R15: 00007ffc708a9248 [ 2216.614310][T20639] [ 2216.667988][T20634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2216.709880][T20641] netlink: 'syz.5.17029': attribute type 10 has an invalid length. [ 2216.727432][T20641] device geneve0 entered promiscuous mode [ 2216.798890][T20647] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.17031'. [ 2216.816501][T20647] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2216.837803][T20641] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2216.859616][T20649] netlink: 'syz.1.17040': attribute type 4 has an invalid length. [ 2216.868643][T20649] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17040'. [ 2216.879307][T20649] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2216.953593][T20652] netlink: 830 bytes leftover after parsing attributes in process `syz.2.17031'. [ 2217.002812][T20650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2217.129629][T20658] netlink: 'syz.0.17032': attribute type 10 has an invalid length. [ 2217.549018][T20684] netlink: 'syz.0.17045': attribute type 4 has an invalid length. [ 2217.557759][T20684] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17045'. [ 2217.569010][T20684] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2217.664374][T20680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2218.071461][T20699] netlink: 'syz.0.17048': attribute type 10 has an invalid length. [ 2218.130808][T20697] netlink: 'syz.2.17047': attribute type 4 has an invalid length. [ 2218.149203][T20697] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17047'. [ 2218.166988][T20697] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2218.769284][T20714] FAULT_INJECTION: forcing a failure. [ 2218.769284][T20714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2218.856722][T20714] CPU: 0 PID: 20714 Comm: syz.5.17054 Not tainted syzkaller #0 [ 2218.864510][T20714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2218.874677][T20714] Call Trace: [ 2218.877965][T20714] [ 2218.880907][T20714] dump_stack_lvl+0x188/0x250 [ 2218.885593][T20714] ? show_regs_print_info+0x20/0x20 [ 2218.891199][T20714] ? load_image+0x400/0x400 [ 2218.895827][T20714] ? __lock_acquire+0x7d10/0x7d10 [ 2218.900853][T20714] should_fail+0x38c/0x4c0 [ 2218.905481][T20714] _copy_to_user+0x2e/0x130 [ 2218.910064][T20714] simple_read_from_buffer+0xe3/0x150 [ 2218.915427][T20714] proc_fail_nth_read+0x1a6/0x220 [ 2218.920571][T20714] ? proc_fault_inject_write+0x310/0x310 [ 2218.926571][T20714] ? fsnotify_perm+0x254/0x560 [ 2218.931523][T20714] ? proc_fault_inject_write+0x310/0x310 [ 2218.937544][T20714] vfs_read+0x301/0xd60 [ 2218.942040][T20714] ? kernel_read+0x1e0/0x1e0 [ 2218.946656][T20714] ? __fget_files+0x40f/0x480 [ 2218.951438][T20714] ? mutex_lock_nested+0x17/0x20 [ 2218.956382][T20714] ? __fdget_pos+0x2bf/0x370 [ 2218.960981][T20714] ? ksys_read+0x71/0x260 [ 2218.965632][T20714] ksys_read+0x152/0x260 [ 2218.969888][T20714] ? vfs_write+0xd60/0xd60 [ 2218.974393][T20714] ? lockdep_hardirqs_on+0x94/0x140 [ 2218.979792][T20714] do_syscall_64+0x4c/0xa0 [ 2218.984397][T20714] ? clear_bhb_loop+0x30/0x80 [ 2218.989353][T20714] ? clear_bhb_loop+0x30/0x80 [ 2218.994223][T20714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2219.000268][T20714] RIP: 0033:0x7f8655774fce [ 2219.004954][T20714] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2219.024946][T20714] RSP: 002b:00007f8653a0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2219.033947][T20714] RAX: ffffffffffffffda RBX: 00007f8653a0e6c0 RCX: 00007f8655774fce [ 2219.042747][T20714] RDX: 000000000000000f RSI: 00007f8653a0e0a0 RDI: 0000000000000004 [ 2219.050926][T20714] RBP: 00007f8653a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 2219.058913][T20714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2219.067347][T20714] R13: 00007f8655a2e038 R14: 00007f8655a2dfa0 R15: 00007fffc9455178 [ 2219.075827][T20714] [ 2219.150233][T20727] netlink: 'syz.2.17058': attribute type 3 has an invalid length. [ 2219.163113][T20727] netlink: 'syz.2.17058': attribute type 6 has an invalid length. [ 2219.196305][T20727] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.17058'. [ 2219.330845][T20734] netlink: 'syz.3.17061': attribute type 4 has an invalid length. [ 2219.347476][T20734] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17061'. [ 2219.357765][T20734] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2220.473036][T20777] netlink: 152 bytes leftover after parsing attributes in process `syz.5.17077'. [ 2220.492346][T20777] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2221.233582][T20823] validate_nla: 3 callbacks suppressed [ 2221.233607][T20823] netlink: 'syz.1.17094': attribute type 10 has an invalid length. [ 2221.418661][T20825] netlink: 'syz.0.17095': attribute type 4 has an invalid length. [ 2221.442560][T20825] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17095'. [ 2221.454703][T20825] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2221.471718][T20830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17097'. [ 2221.585457][T20836] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.17100'. [ 2221.852650][T20851] netlink: 'syz.2.17106': attribute type 10 has an invalid length. [ 2221.988613][T20859] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.17109'. [ 2222.072630][T20859] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2222.133143][T20860] netlink: 830 bytes leftover after parsing attributes in process `syz.5.17109'. [ 2222.206606][T20866] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.17111'. [ 2222.226933][T20866] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2222.295259][T20868] netlink: 14 bytes leftover after parsing attributes in process `syz.1.17112'. [ 2222.371881][T20870] netlink: 'syz.2.17113': attribute type 9 has an invalid length. [ 2222.384876][T20870] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.17113'. [ 2222.501842][T20868] device hsr_slave_1 left promiscuous mode [ 2222.539670][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.547528][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.842674][T20866] netlink: 830 bytes leftover after parsing attributes in process `syz.0.17111'. [ 2222.867507][T20877] netlink: 'syz.3.17115': attribute type 4 has an invalid length. [ 2222.875682][T20877] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17115'. [ 2222.889222][T20877] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2223.330275][T20889] netlink: 'syz.1.17120': attribute type 10 has an invalid length. [ 2223.478961][T20903] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2223.705479][T20907] netlink: 'syz.2.17128': attribute type 4 has an invalid length. [ 2223.715705][T20904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2223.733232][T20907] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2224.419266][T20928] netlink: 'syz.3.17135': attribute type 10 has an invalid length. [ 2224.639697][T20940] netlink: 'syz.3.17139': attribute type 10 has an invalid length. [ 2224.673414][T20940] device geneve0 entered promiscuous mode [ 2224.720219][T20945] FAULT_INJECTION: forcing a failure. [ 2224.720219][T20945] name failslab, interval 1, probability 0, space 0, times 0 [ 2224.737793][T20940] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2224.756609][T20945] CPU: 0 PID: 20945 Comm: syz.2.17141 Not tainted syzkaller #0 [ 2224.764500][T20945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2224.774761][T20945] Call Trace: [ 2224.778145][T20945] [ 2224.781087][T20945] dump_stack_lvl+0x188/0x250 [ 2224.785780][T20945] ? show_regs_print_info+0x20/0x20 [ 2224.791121][T20945] ? load_image+0x400/0x400 [ 2224.795929][T20945] ? __might_sleep+0xf0/0xf0 [ 2224.800609][T20945] ? __lock_acquire+0x7d10/0x7d10 [ 2224.805742][T20945] should_fail+0x38c/0x4c0 [ 2224.810182][T20945] should_failslab+0x5/0x20 [ 2224.814776][T20945] slab_pre_alloc_hook+0x51/0xc0 [ 2224.819726][T20945] __kmalloc+0x6b/0x330 [ 2224.823889][T20945] ? bpf_map_meta_alloc+0x1a4/0x7f0 [ 2224.829262][T20945] ? __fdget+0x18b/0x210 [ 2224.834128][T20945] bpf_map_meta_alloc+0x1a4/0x7f0 [ 2224.839249][T20945] htab_of_map_alloc+0x34/0xc0 [ 2224.844116][T20945] map_create+0x485/0x2350 [ 2224.848728][T20945] __sys_bpf+0x30a/0x6f0 [ 2224.853082][T20945] ? bpf_link_show_fdinfo+0x380/0x380 [ 2224.858471][T20945] ? rcu_nmi_exit+0x6f/0xf0 [ 2224.863080][T20945] ? vtime_user_exit+0x2c8/0x3e0 [ 2224.868297][T20945] __x64_sys_bpf+0x78/0x90 [ 2224.872729][T20945] do_syscall_64+0x4c/0xa0 [ 2224.877233][T20945] ? clear_bhb_loop+0x30/0x80 [ 2224.882110][T20945] ? clear_bhb_loop+0x30/0x80 [ 2224.887006][T20945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2224.892899][T20945] RIP: 0033:0x7f6fa8d10799 [ 2224.897501][T20945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2224.917849][T20945] RSP: 002b:00007f6fa6f6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2224.927037][T20945] RAX: ffffffffffffffda RBX: 00007f6fa8f89fa0 RCX: 00007f6fa8d10799 [ 2224.935746][T20945] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 2224.944219][T20945] RBP: 00007f6fa6f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2224.952549][T20945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2224.962088][T20945] R13: 00007f6fa8f8a038 R14: 00007f6fa8f89fa0 R15: 00007ffcbe3fa418 [ 2224.970362][T20945] [ 2225.002995][T20941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2225.197197][T20956] netlink: 'syz.2.17155': attribute type 10 has an invalid length. [ 2225.207382][T20956] device geneve0 entered promiscuous mode [ 2225.230793][T20956] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2225.444871][T20972] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2225.929597][T20979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2226.032770][T20979] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2226.135094][T20981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2226.480690][T20990] validate_nla: 4 callbacks suppressed [ 2226.480710][T20990] netlink: 'syz.3.17157': attribute type 10 has an invalid length. [ 2226.575846][T20990] __nla_validate_parse: 6 callbacks suppressed [ 2226.575865][T20990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17157'. [ 2226.622471][T20990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2226.697781][T20990] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2226.731757][T20999] netlink: 'syz.0.17161': attribute type 10 has an invalid length. [ 2226.836091][T21008] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.17164'. [ 2226.847537][T21008] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2226.957377][T21011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2227.163632][T21021] netlink: 'syz.0.17170': attribute type 10 has an invalid length. [ 2227.194213][T21021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17170'. [ 2227.215327][T21021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2227.235635][T21021] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2228.140701][T21044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2228.228947][T21049] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.17179'. [ 2228.296490][T21049] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2228.706563][T21066] netlink: 'syz.5.17186': attribute type 10 has an invalid length. [ 2228.726260][T21066] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17186'. [ 2228.748434][T21066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2228.768581][T21066] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2228.920343][T21075] bridge0: port 1(bridge_slave_0) entered disabled state [ 2229.028612][T21076] bridge0: port 1(bridge_slave_0) entered blocking state [ 2229.036029][T21076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2229.148319][T21083] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.17189'. [ 2229.163433][T21080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2229.201655][T21084] netlink: 'syz.2.17190': attribute type 10 has an invalid length. [ 2229.648756][T21099] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17198'. [ 2229.659797][T21099] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2229.788726][T21101] netlink: 'syz.5.17200': attribute type 10 has an invalid length. [ 2229.799802][T21101] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17200'. [ 2229.819779][T21101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2229.829402][T21101] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2229.930490][T21110] bridge0: port 1(bridge_slave_0) entered disabled state [ 2229.974100][T21115] FAULT_INJECTION: forcing a failure. [ 2229.974100][T21115] name failslab, interval 1, probability 0, space 0, times 0 [ 2229.987559][T21115] CPU: 0 PID: 21115 Comm: syz.1.17203 Not tainted syzkaller #0 [ 2229.995295][T21115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2230.005361][T21115] Call Trace: [ 2230.008830][T21115] [ 2230.011772][T21115] dump_stack_lvl+0x188/0x250 [ 2230.016645][T21115] ? show_regs_print_info+0x20/0x20 [ 2230.022111][T21115] ? load_image+0x400/0x400 [ 2230.026713][T21115] ? __might_sleep+0xf0/0xf0 [ 2230.031310][T21115] ? __lock_acquire+0x7d10/0x7d10 [ 2230.036368][T21115] should_fail+0x38c/0x4c0 [ 2230.040802][T21115] should_failslab+0x5/0x20 [ 2230.045326][T21115] slab_pre_alloc_hook+0x51/0xc0 [ 2230.050278][T21115] __kmalloc+0x6b/0x330 [ 2230.054646][T21115] ? tomoyo_encode+0x27e/0x540 [ 2230.059419][T21115] tomoyo_encode+0x27e/0x540 [ 2230.064114][T21115] tomoyo_realpath_from_path+0x5cd/0x610 [ 2230.069909][T21115] tomoyo_path_number_perm+0x242/0x660 [ 2230.075475][T21115] ? verify_lock_unused+0x140/0x140 [ 2230.080707][T21115] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2230.087207][T21115] ? ksys_write+0x1c6/0x260 [ 2230.091874][T21115] security_file_ioctl+0x6c/0xa0 [ 2230.096830][T21115] __se_sys_ioctl+0x48/0x170 [ 2230.101540][T21115] do_syscall_64+0x4c/0xa0 [ 2230.106065][T21115] ? clear_bhb_loop+0x30/0x80 [ 2230.110943][T21115] ? clear_bhb_loop+0x30/0x80 [ 2230.115715][T21115] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2230.121617][T21115] RIP: 0033:0x7faa221d1799 [ 2230.126129][T21115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2230.145870][T21115] RSP: 002b:00007faa2040a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2230.154911][T21115] RAX: ffffffffffffffda RBX: 00007faa2244b090 RCX: 00007faa221d1799 [ 2230.163417][T21115] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000007 [ 2230.171922][T21115] RBP: 00007faa2040a090 R08: 0000000000000000 R09: 0000000000000000 [ 2230.180068][T21115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2230.188128][T21115] R13: 00007faa2244b128 R14: 00007faa2244b090 R15: 00007ffc708a9248 [ 2230.196117][T21115] [ 2230.208400][T21108] netlink: 'syz.3.17202': attribute type 10 has an invalid length. [ 2230.226460][T21108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17202'. [ 2230.246895][T21108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2230.261004][T21108] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2230.281235][T21115] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2230.292552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2230.316943][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 2230.324161][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2230.356577][T21119] netlink: 1034 bytes leftover after parsing attributes in process `syz.5.17206'. [ 2230.449116][T21124] netlink: 'syz.3.17208': attribute type 10 has an invalid length. [ 2230.587722][T21135] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2230.806625][T21151] netlink: 'syz.2.17219': attribute type 10 has an invalid length. [ 2230.817218][T21151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2230.825958][T21151] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2230.890672][T21155] netlink: 'syz.0.17222': attribute type 10 has an invalid length. [ 2231.031477][T21166] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2231.299956][T21177] bridge0: port 2(bridge_slave_1) entered disabled state [ 2231.310516][T21177] bridge0: port 1(bridge_slave_0) entered disabled state [ 2231.464518][T21177] bridge0: port 2(bridge_slave_1) entered blocking state [ 2231.472493][T21177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2231.483606][T21177] bridge0: port 1(bridge_slave_0) entered blocking state [ 2231.492006][T21177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2231.527822][T21177] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2231.557266][T21191] validate_nla: 2 callbacks suppressed [ 2231.557302][T21191] netlink: 'syz.3.17235': attribute type 10 has an invalid length. [ 2231.592660][T21191] __nla_validate_parse: 6 callbacks suppressed [ 2231.592700][T21191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17235'. [ 2231.613397][T21191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2231.623921][T21191] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2231.645471][T21198] netlink: 'syz.1.17237': attribute type 10 has an invalid length. [ 2231.656945][T21198] device geneve0 entered promiscuous mode [ 2231.698000][T21198] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2231.980605][T21223] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.17246'. [ 2232.004621][T21221] device bridge_slave_0 left promiscuous mode [ 2232.043374][T21224] device bridge_slave_0 entered promiscuous mode [ 2232.343455][T21242] netlink: 'syz.5.17254': attribute type 2 has an invalid length. [ 2232.414472][T21242] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.17254'. [ 2232.477666][T21246] netlink: 'syz.1.17253': attribute type 10 has an invalid length. [ 2232.557851][T21246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17253'. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.