last executing test programs: 2m29.707442547s ago: executing program 1 (id=4177): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x5, 0x8000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x64, 0x0, 0x69, 0x11, 0xb9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m29.385857483s ago: executing program 1 (id=4178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b70400000000000085"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0xa, 0x0, 0x8, 0x8000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x7fffffff, 0x9, 0x3, 0x7fff, 0x7, 0x0, 0x8, 0x0, 0x100000001}, r1, 0x10, r2, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 2m23.794501755s ago: executing program 1 (id=4183): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x9, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000002000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60640c034002a10800feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1f, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x0, 0x17, 0x0, 0x0) 2m23.527964389s ago: executing program 1 (id=4186): socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x4, 0x7a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0xf74, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 2m23.406697866s ago: executing program 1 (id=4187): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5d35, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x800, 0x1, 0xfffffffe, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x800}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0xff88, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 2m23.12799815s ago: executing program 1 (id=4189): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e14060200000000", 0x20}], 0x1}, 0x40000) (fail_nth: 8) 2m7.942851203s ago: executing program 32 (id=4189): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e14060200000000", 0x20}], 0x1}, 0x40000) (fail_nth: 8) 10.208889788s ago: executing program 2 (id=4666): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000c80)={r1, &(0x7f0000000c00), &(0x7f0000000980)=""/55}, 0x20) (fail_nth: 5) 9.520260103s ago: executing program 2 (id=4669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0}, 0x24008000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x809, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x1f, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x7c, 0x0, 0x5, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3a66ef8d}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x7, 0x1, 0x2, 0x2, 0x4, 0x1, 0xffffffffffffffff}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x8f, &(0x7f00000005c0)=""/143, 0x40f00, 0x12, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[r3], &(0x7f00000006c0)=[{0x3, 0x3, 0x1, 0x6}, {0x3, 0x1, 0x0, 0x7}, {0x3, 0x3, 0x8, 0xa}, {0x5, 0x5, 0x1, 0xa}, {0x3, 0x2, 0x2, 0xf}, {0x3, 0x2, 0xd, 0x8}, {0x2, 0x2, 0x6, 0x8}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000300), &(0x7f0000000040)=r4}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000200)=0x7fff) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)="b563c4dc2f4c", 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) 7.674530299s ago: executing program 3 (id=4677): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x800}) close(0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x6c000000}, 0x0) socketpair(0x1, 0x803, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89fb, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) 5.879382403s ago: executing program 3 (id=4679): socket$kcm(0x2, 0x5, 0x84) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) unlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="de720586200901fcf6c2", 0xa}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r3 = socket$kcm(0x2, 0x3, 0x106) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394", 0xf}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000440)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000140)='6\'', 0x2}, {&(0x7f0000000940)="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", 0x780}, {0x0}, {&(0x7f00000002c0)="be7712921a73f89ff06805f21136f0cd3a2ca665378f549f70a30b2dc0c0065dfe0ec519f4670864ff4dcdd8e2c034a7b2d716827922ea0b37da1bc53d13915cc43bbe1c66c5006593e68aa95d829eaa635a2bd7c83ac43404513e6bb01eaa5a5b", 0x61}, {&(0x7f0000000700)="44dee6f86394ebd18eac5ca7dc0b8aaa1e6ddffc799920a2532d740a3a16663b41d1c4c58fe3ff499ddef77fd5668945c2f087c5766a6a9c6f5521998446328c6a5a3312fe178b8afab31abb23bedafbd7f8e6bb440b6b8ad28d2950c540bbe35e5d94", 0x63}, {&(0x7f0000000780)}], 0x6, &(0x7f0000000380)=[@ip_ttl={{0x14}}], 0x18}, 0x40800) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8915, &(0x7f00000001c0)={r3}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) 5.809021177s ago: executing program 2 (id=4681): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x4, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x12, 0x0, 0x129, 0x406}, 0x40020000) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000200)={r7, r0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x4, 0x3, 0xeb, 0x6, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x3}, 0xc00, 0x3, 0x7fff, 0x6, 0x100000000, 0x7fffffff, 0x7f, 0x0, 0x7fff, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000000000000000000020000000000000000000e42e10a764c32a07d56c"]) socket$kcm(0x10, 0x2, 0x0) 5.687911123s ago: executing program 4 (id=4683): r0 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01"], 0x48) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x595}], 0x1}, 0x4) 5.491401474s ago: executing program 4 (id=4685): socketpair(0x10, 0x3, 0x3, &(0x7f00000002c0)) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10007fffffffffffffff00e1050000e6ff000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1402000037000b0fd25a806c8c6f94f90524fc60", 0x14}, {&(0x7f0000000a00)="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", 0x200}], 0x2, 0x0, 0x0, 0x20000000}, 0x200000c0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x7ffffc, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001c40)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @map_fd={0x18, 0x2, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000000)="b9ff03318944268cb89914f00800", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.218333008s ago: executing program 3 (id=4686): socket$kcm(0xa, 0x922000000003, 0x11) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="76cecd75e9fa4b6ae0", 0x9}], 0x1}, 0x20004000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:2/2N'], 0x6a) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000000000000850000005000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000009b0000007d090200f0ffffff18150000", @ANYRES32=r0, @ANYBLOB="000000000900000018ff00000a00000000000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000095cdb1c1e66979e895e8240c8780001be7239cd8bf888e81d0fad62b50338bc622877225dec9991e2ac37a69e33bd008d404bc91a29717f72ec9b5ecdd673a40d5fefdace3d780d14693f449a0d5d7abdbf1bf6359b1ee8c490731da"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) socket$kcm(0x18, 0x0, 0x0) r6 = socket$kcm(0xa, 0x7, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000840000000000000072350f0000000000"], 0x38}, 0x41) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="fc", 0x1}], 0x1}, 0x20040d4) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000062c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)="f6", 0x1}], 0x1}, 0x4004045) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100fe2010ff"}) close(0xffffffffffffffff) 5.083947315s ago: executing program 2 (id=4687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x9, 0x4, 0x7, 0xc, 0x8}, @call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 4.80228242s ago: executing program 0 (id=4688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="070000000210"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x4002, 0x7, 0x0, 0x1, 0x400}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040001018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x6, 0x84) sendmsg$inet(r7, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="97cafebcb71250cb5d687d0009088fee", 0x10}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r7], 0x48}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xa, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xebd}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9d51}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x4f, &(0x7f00000000c0)=""/79, 0x41100, 0x12, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000280)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, r4, r4, r4, r4, r4], 0x0, 0x10, 0x9}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r4}, 0xc) 4.748322922s ago: executing program 2 (id=4689): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="110000000400000004000015e2fb3f1bcfa7be05fa6d8c85c091c049f10dc309fae3ad23c54a88e4981f17204ecb74f6ea4903244c009df7c5530001"], 0x48) r5 = socket$kcm(0x2c, 0x3, 0x0) socketpair(0x22, 0x800, 0x8, &(0x7f0000000080)) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000eeb60800000d0000007b8ade5c44dfde91930e000008000000b70400edff00000085df67928bad0fe1bcb79e2e516c38fbf0d9a576ee5d8b46e0807707377f3439a787bb41446219233a0dbaa3fb05cc8d930673b777af62bdfda2204c64bff5caaa5fcd453749d4ff23e609bec634a7edc70710142ab32b782857d6a30e997d392030bb816ae541"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f00000001c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x10, 0xdb, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108d000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x13, 0x6, &(0x7f0000000200)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @generic={0x10, 0x6, 0x6, 0x2, 0xa}, @generic={0xfc, 0xe, 0x0, 0x401}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000002c0)='GPL\x00', 0x3ff, 0xdf, &(0x7f0000000780)=""/223, 0x41100, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0xe, 0x7, 0x3ab2d49d}, 0x10, r8, r3, 0x1, &(0x7f0000000d00)=[r4, r5], &(0x7f0000000d40)=[{0x2, 0x5, 0x2, 0x9}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=r4, @ANYRES32=r5, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r9) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000000000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x80000, 0xca, 0x9, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='@\x00*\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r1], 0x9a) 4.430732999s ago: executing program 3 (id=4690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0}, 0x24008000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x809, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x1f, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x7c, 0x0, 0x5, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3a66ef8d}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x7, 0x1, 0x2, 0x2, 0x4, 0x1, 0xffffffffffffffff}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[r3], &(0x7f00000006c0)=[{0x3, 0x3, 0x1, 0x6}, {0x3, 0x1, 0x0, 0x7}, {0x3, 0x3, 0x8, 0xa}, {0x5, 0x5, 0x1, 0xa}, {0x3, 0x2, 0x2, 0xf}, {0x3, 0x2, 0xd, 0x8}, {0x2, 0x2, 0x6, 0x8}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000300), &(0x7f0000000040)=r4}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000200)=0x7fff) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)="b563c4dc2f4c", 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) 4.195536151s ago: executing program 4 (id=4691): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a", 0x19}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000003"], 0x48) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffc, 0x0, 0x1, 0x7}, {0x10000002}], 0x10, 0x316bb6af}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1000005580, 0x40}, 0x1c052, 0x1000000e, 0x7, 0x4, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000100) setsockopt$sock_attach_bpf(r4, 0x84, 0x25, &(0x7f0000000000)=r7, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000040729faa2131400000000000000000000000c200000400"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r9}, 0x18) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) 3.186589964s ago: executing program 0 (id=4692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3.161831595s ago: executing program 0 (id=4693): r0 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01"], 0x48) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x595}], 0x1}, 0x4) 3.129274837s ago: executing program 2 (id=4694): socket$kcm(0x2, 0x5, 0x84) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) unlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="de720586200901fcf6c2", 0xa}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r3 = socket$kcm(0x2, 0x3, 0x106) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394", 0xf}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000440)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8915, &(0x7f00000001c0)={r3}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) 3.06334055s ago: executing program 0 (id=4695): r0 = socket$kcm(0x10, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.06304581s ago: executing program 4 (id=4696): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000000)="b9ff03318944268cb89914f00800", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.86766334s ago: executing program 0 (id=4697): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x49a29a89}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105, 0x5, @perf_config_ext={0x8, 0x100000000}, 0x880, 0x800, 0x0, 0x4, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000005c0)='\x02;\xe5\b\xfd\x14\x96\x00\x00\x00\x00\x00\x00\x00\x02\fc\xe9\x00\x9c\x00\x00\x00\x1f\x00\x00G') sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x24000800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x2d, &(0x7f0000000680)=@raw=[@alu={0x7, 0x0, 0x9, 0x2, 0x7, 0xffffffffffffffce, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @ldst={0x0, 0x3, 0x4, 0x0, 0x6, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}, @map_fd={0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x597}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000000800)='syzkaller\x00', 0x8, 0xb1, &(0x7f0000000840)=""/177, 0x41000, 0x74, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0xa, 0x8, 0xf}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000980)=[r4], &(0x7f0000000a00)=[{0x2, 0x1, 0x7, 0x5}, {0x4, 0x5, 0x0, 0x8}, {0x3, 0x5, 0xe, 0xc}], 0x10, 0x4}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x4010744d, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x9}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1ff}}, @float={0x3, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x2e, 0x61, 0x5f, 0x5f]}}, 0x0, 0x5a, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.785280895s ago: executing program 4 (id=4698): socket$kcm(0xa, 0x922000000003, 0x11) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="76cecd75e9fa4b6ae0", 0x9}], 0x1}, 0x20004000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:2/2N'], 0x6a) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000000000000850000005000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000009b0000007d090200f0ffffff18150000", @ANYRES32=r0, @ANYBLOB="000000000900000018ff00000a00000000000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000095cdb1c1e66979e895e8240c8780001be7239cd8bf888e81d0fad62b50338bc622877225dec9991e2ac37a69e33bd008d404bc91a29717f72ec9b5ecdd673a40d5fefdace3d780d14693f449a0d5d7abdbf1bf6359b1ee8c490731da"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) socket$kcm(0x18, 0x0, 0x0) r6 = socket$kcm(0xa, 0x7, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000840000000000000072350f0000000000"], 0x38}, 0x41) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="fc", 0x1}], 0x1}, 0x20040d4) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000062c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)="f6", 0x1}], 0x1}, 0x4004045) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100fe2010ff"}) close(0xffffffffffffffff) 328.294563ms ago: executing program 4 (id=4700): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xa4, 0x8000}, 0x540c, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x6, 0x26, &(0x7f0000000180)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b10", @ANYRES32, @ANYRES8], 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 276.912405ms ago: executing program 3 (id=4701): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b70200000f000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab9988"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 195.676249ms ago: executing program 0 (id=4702): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x5}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000001480)="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"}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r4, &(0x7f0000000c40)={&(0x7f0000000580)=@ethernet={0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b40)="91de1b10ae95d2e7349b6cd5f99240e63041d680aa69a8972118ebed684a1c0f538a43b72141e92dd7e52735a80df76c4b3186fd0991febf1635fecebd3ad92a7e30fd7ac2655cdd446b7cfead3b5857736d9fa84b272dea73fdc18a778162e99ed54dda7d6b70d32ae9507bdd7cc6f0faa3f3a537c3493631aa8a93affce2d04ca2f82f79f5453e34b6e4c3bdbee752e6f1f97bc8e4f500a32f71de46afa15e65d1313acb03a95f8561c440dcfc021e97e28ece4e7ff7", 0xb7}], 0x1}, 0x4040000) sendmsg$kcm(r0, &(0x7f0000003140)={&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000240)="85b063a3885db644118c7c64757de6d323e8f67a1d6df928346f4c2b1e99e07a", 0x20}, {&(0x7f0000000780)="8689b0ee7e14b5c6d513c70fc4fd17be2044b88e4073d47a49e2a9ccf15e6e8accca2cd5aa2159f9887ced7754be42104602979eb66b1e132f9858b9d9cf124c9cbfeaaf1687880f1dabffc11672c838ea98ceab1a5bbc610ec321e068c4b46b2865e8efc3af2a4a466aff4bbc6f1a3a607bce2a45e8568616a962704e9a35e0eb4e7725f212acfa6ed9da6fd69fc3d07de315b4b5cc29473d57560cd45d10963d8c2a6d95069512", 0xa8}, {&(0x7f0000000840)="88f329a41908741bcbb751bab425bff1f3c02687642271f0cf63449e75d5cb00308d7e19ec4d376eaa14fe52132ab75fb77633392ddff6d2e5409e29e252fb53342079290086cd89297ae99c3a52369d4f745ad7d90265fad97fa4d90be304abaa04e0d408f951510898e937f50542619066b955058cf36ffbcc50d2526d8b82aa6b47ae0809e03b643cb659f22837fc15370729f6b0377d45aa964d", 0x9c}, {&(0x7f0000000a00)="2d549b311820bf0368520516f668154adda9335033c0462fc9102acfee2c0d3a09521a17c87942a9ab74a27e90ed96cac4feb9b61fa946f37eaad69382205b27d03fe4e448a3482f6e7e2f46ae6aae73c9d3f20c0540d0fc502fdc1537e0754114bf30208e517b801c1e1b7193945ae236fe51e951a0f0b5f4f7d6a7c4d48e22cd9cc24a6242de2ce175a1adbc7c59ce7653a08d04334de15365d0c8122e931c85c6370764aa4934", 0xa8}, {&(0x7f0000000ac0)="1fdda634331a51da7c084dd3bcce859d6976e8a28e8c754679e175a092ca1ebd6b5d5489e0ca4258cc87be779daa1addbc327f97878c55161a6e6ebd97f31abf154c6f56dfcea2", 0x47}, {&(0x7f0000000dc0)="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", 0x1000}], 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="b8000000000000000f01000000000000e172bfeec276f37f003a1adf020c056d653bd53963fbd20858d9788121218e4d1f744a97adfa5aa8daa9fffb003c243a44513921f909b45a0b39e22993f13a5fbce76c61486f5667a9e24133a037ed1bb143f9b778e940476840fd5512aa8b8a8c76b2657ad7a6bbfb1f4a41845147820c26bd5b949bfeb2088dee003745131efe9c69e3cf4260342b5983bdf9486e191d6ee47a1c4eee59f038436dd25d8b9d5056ce4fedd5000098000000000000000a01000009000000a16d7ad220e34788d6b613e456d4136b2c2e7c9dd39dd9a794e14ade0f2bc27a92ed08cbe61c77629c2d8ed16fe30aefc0d6a7635c91368bda649d609e1228cd8057ae5ceac824701a515d66b4ce95e015a8ca1c5d9b6f9b779a87b918f6fc95dd7efcee44802420ab65356543cdbf186d674847c56e7d7f7da1abf6f2a45c2e9dc5d3ff6500000010100000000000000c01000080000000b2daf71eb851af46f55ec37de9a7af268c0c8e10e9c70b1ce33bab8f5eec904b781b3f1444dd396a3e44fb4b98ccaba51a1b9db2456711b5848f2ac67e0f68bb70dd709a6f68b27e13da128a175e6cca5d2ad0efcfa28ab82b8facc1d8bf1accd8f60d76048cce9b8e49f732d4a6cc913f5ceefd5c8b8afb314b389de392fe3009d81322f7bb9a94a544042d0e5c8bbe0cd92f3cb6b3abed84b26976b3a003e56a352a887408f7f87d5ed1aeb8764a9cc5898b8bd0951d46424f7afe69f90edb770cb9aaccc26dc2a06d6091dee8a6988580eaccf00a78cbba9cd8611b32f87e27b60b7273da13402e5dfb081bdb5ebeab80505390e7f46afedd870b7931e1c219b58c0459c85c227fc0271b0dce469d17f6b6afd1b77d3b2ff2da252b908921e67bcf050469c74636c23eb794cb51cc21b27f3be64c3512e2c0651cd9e6ec1ff0b1c8970dee42bbb5809067ebb854b9f492d7794fc973eb613d6e04c5771b5336bf724046364c6cf95f2fe3aef4705ec58f6ff7b74cf50e98e45ca1be5f334344a5d7c6a41887a94672cf8ae5659e25ee656cae21aac32882a57b49412d5a2727efa8719ceadf047041abb2e4cdbe71cae4517876cef8303bea302f3a55c7a06b147661e11026b0972415869dee9a7c564a2d9df1559924d684c435a44a14d415225488a6989f591698ac042496c5e586f29c27e9d57740ceffccde120b9c34660fdce18a1bc259085f7b993447b1387075a05528cae3ae80e574f5b1eee3ef673353521f6c2e18c3e80ad022c06d071ed5bf4f2924152c7b9b060c77ad39b9156877edb866c9d6bed9b209790783b2f3ef163cc8e8bd931b6248afdc60960694ecb08fcbfe10694a25ba57ab759da860c5d05c0751522fa8a5ef8ed03f3fe97905a4b3d5f0b63453932ff46e69044d5ee2571d2eb5cd0c3970394d994e210f025effdb17d329d702953092a8aef7b851f8df781427a30b941d028471ff999668d85b550544698779331d05d506e706fd5a12d2ec6b0c57fbd0c2f8199c1fa4546a6d24588ce93e68dab2d2912f0821ae445f0b3c5285230c800f5fa5277b301ab17b1130e1cef49ea0ae84555ca861bdf29aad76a76204a8825ee49342232945291f6c17968c831ce17653dd578669705200435d9738e9b49b4926031a3f94be2947332a3c64448a76a321e7d56ce43965bc07d5acd0c8b445e52c3a5aca9d677ff37004250b3c53427d567e23fdaefc4b9c814749393f5b254be5e7349784232fcad4c6ce9789f2e65d835a210b619bf8408b000a0299f4b8b009db5a89f4ff2779650b7170838ccad72406ee0816a1d9d84fa48abf8a157199f50ac4022e78c43825af60949d6bc401b179e25e5f26d8cf12a2fa53016bd5d4db6409492babd420b6eb731552cacb5aa85eb7c10d09c0198fcf1cb46ce4e324f4ffec57301157b6fcf61b57f664b732f42c639945156c2af1df291109decfcfe8da1cfd137533537cbe9c58f929bd09fbd32ebe797472c711c2b1ba6208e0161b9ef22b9b8cc4daa6dcfcf14e81609f6ebcc800c5875b513108a17c33435755b62d830ad3f3164646239705d8272fdf1973ec933a1208d41c3ae8d38b21c8372e44621265e2509dbbee7561fc2766f66da6543cb559e37ff4f8dbfb1224f8f2d43193da20c912e6f8f1cae1c073a7c129115e0d7de41663424dc8048ce5d479b4849df59d025169a34db5f409b0cfc8456ba86c62f348213f77028f3c425a52d1f0b9cbd764cb8ca402582ea6959bca43456957a80d03f14e6cb97f4fc30319f4f77fc7c36b099b3063f8f3b7011476cca2f6a5a828f0cfcb239927eb14673ca3f4c6f9021d70c22f3648b08b3cfbd4a5efc122fa6d880640e7caf453caebb62398f3d212e4e2971f9dabef223dbab2a74ba613dae0eccf16f86120fdcf91c0449537f91b77026c8212d6951bd3f2dbaa12d5e4c8c68ec3bced859cad5b8614735b9616d8643274ecb2c76cef6c981b1486cbcb82b8e294fb52265e1698718cf988e5e9fadea117aa305d1f8589c819d9aa9d7714868519bca5c292950658d4fc84dbfc75fdd8866868580557ce632bf8d7824bf2e89ed3b0ec87f54f2efcb5af79022c9092bd1ce70e0e8b82239fdeacf3fc1a66d0a5568caf05f1235f46a5a59ece5e56d08768fdc0dd3c0c199b281fe20095689c445840bb228308289a0a8091a4241d6c60167e2bb83692af1518b586522520dbed82642a8a4a1c6111d739ae39edcece8e3ff2b4fd1dbe1f249415db5900dcd3fd71663c5218d40561aeb294a2d6243197e8c5324f5884b50185eda82f7d0e88a1f44cab24e074eaa3dab6c610e85afb190a8159457fc56b6581e8a11a108a4a2b44369e6c2974d083b3ba07b2665847928870f74475e07738df48c289ab715630d21f4cad9163dcde7e465db4706b2acccb3d54aa9bbac5e57147e817160f7dd1f4c1503ce4261f05916f5ae9e82e428659c2254d831cb524695c04b6b7867412b115c30a21af7a15741040ce1ce379b79d485691c665ca206fb604ab4c426d33cab6c6c46921e1934fadbdd79d98ba06e7a6f5af2b33d8f0df7528fe0617658ea08d80bbf479ed01e6086f512a8aec679285bc5931e0b82c551ca205e1fbd1c0ddabab344ce1c202000000000000006e2ed45e300919e87c2e50a83a4aff1501620c5f593b6cebf2a579b3a1319b7e4ad12b945caf1d70be48ca78e90a56e2025af24c4e9949b122881adb742df46ce24be1e28e8e672f832afe601b8c474416a981d218424471377d7580bba52274c2b2e5f6e2c86455b888911c427c36f9ed89b8c2f058f640d958cddeffef7a41f2bea788bc2b51bf3b1a183a266ca010d681ace984641c8e421ef241edb196288bbce273e38faa7794ef1eadb8e2a3699373420ae927ccbd9e1df3920020491bf49c320fcb1b37840c8b262f08c986368eb6d32deaff5a2f8ea05978558e99d58276af9b0c3d1718ccaeda0489b8fa2f43f3428aae7c90265dd2f3eb015cb1823abd9d89e740667cea58fa8b2a0abab03eaee9f6e13931b3f2fcbff5cd57b75f2b7f8ec495ecea8204a72bcbd9c20c8901aefcb6df78112f47f7f60366b7d9e522f40fef690db86d45376373dc5000f2de488833fa6294c8de35bfa1373fbdde2ddcdbd12a9cf746f62425a4fec92dc4680e5d09d756b307306f4fa1059d7850046fe3fe42b6c35bc2c2fae7ef893aa685295d14b231fcd472f522caa17eb333994679f15e64db546e8be07bec5e07c6faab099004476c88f6db4dd31e230d6f34d0c7eda5a3edb22ee6060ba90f9e1b0fb5ec6ef3f23a3d167ce61018360c0d9050dc21b107b57e99eaa4102fdc03ab879839b9bdbbb82d8cdceea8216d31b1cd8b4ad4501347b19614d69f3743cae54df08461f30922f9cb9815d228c2c5c098e4a49922151122936825bdfbe5bd4600b8004ab90edaec690c167df563ae741c866b55e8bf303d85639afce5618999c2cd9f433c4bcff185d0cc059049366f20b2a6b83d144a10f62fdef9ec3655be41393b350c9788e9eb70d8c7d69948779694a3b9b9f5c67150fae739ac5b807babf6bb31978b67e6e4dc9e6e15e4f61cf2670beba219607fff71563d56e9c3c9dc1b189133a3d513d1e40b9b210fd2ca78dfa2eb59689c251187f78f4f551dfaf9ed92b8459ce4c60bfbc505fb245190dab73da99a44b176572eb70d7cb847e28e3d396085cd96f79c8b2b91c1c5048e67690b1d4967334c1dab89a68bc4d6c524109633fb1dd1e6cf8aa7d7c0805ebe817fff4f7d2b8d2e85f2c81e9baff853766b128f997d45a0c2ede07a4c94ba3fbcaf540c88d027a69a4311a036f093f2685e111ad179e68e0f784e9b5997e4c45760578784a2c7ba49805cf6104af9741d0aa988f16fc83d0db524ab51a496803ed0fed122f71a8c91173bb189e3234926924b8332ca240e6947fe4ef18641a26fbae5243f4ff9ad1d47507abe16d6d4647a9b064d37e13eb4bf138e7d14c8f0a6b8ec432e2beacc38f6890a654ed43bd9d6e97a420c70cd946129fc2cc8a52169ddebd46e09f8a78905e3b48f35cad7b937cbefdb9619246b79f8598b2fece029082e98c4612205827d0718f0c88cff3a70fa0f64b6f029276a7ea8c998340b95ecfe3cd7e8cfffccd59550e75e9b6e746eeef342b868a4ab6b02e054a7bc89a3528cc3974efbde8a67fd10564f3f42d7f56911c840feb48288ec330d67a1617db232622e192b7ca2e61886df237c31b4dbc14a90a79b93535e5284b9d60a9159c2a4cc9d03915ba6327320900eea96393f1bb7e0fce38399a894311538583fd091e733436307a9710443e4af7b2003700ffe22700e407f7eea4ce1c3f585f7870b32d81a9847d86e92b8ffc5d2d2092ae2eef9dbb714d53c11bd60a4adc66ad07d90a26f097ec1c87c9ad658ac435117250e8360d6efdc842774f9988652bd3fc4226e093b151895c1b74f424ff9c8fb429a613c9a75f4ea8e192928c39305dfdc5c537700db02b11efacdfde7932ef928a443d8bcafdbfb92da907439ee7526b1178838f32ec0d262787f999c8a4bc6ddb212912e46986ab6f9bed55bdea7ace212b279fb8d1b5f0c2f77f8e42dc67214e62e7ffffffa0649bed8063ee1feb1b42b3f751dd521851b7cee34b12981fd6b523d49e2a3544887acbfb54b4ea6468e4ca38808a37dc7ab49ca21a92ac09de1abb9ac29f11622c0a09c7b943f7763c79683c437c98affdae05d2cbd69a30231932447e2d6548d923e09a35b5311da28b310f1f544a6ed78c34744c7f7ecfd1b00c26c9417e808c7ca8b5c994fb30bfd4a4dd359830d23d4a1330f6f5ab737dacb70a5ea7acad7a95034630a409f81e886c98c2667adea73987e77fdfe6cdbc8569f5fe8ce7063db1a2796a308fd0be5fd134dd06339e0df4769c63f11a7acf1a1f31f5117993acbbb04ae857cb453f5757774b434c81572cfe987625a1818a6f176686925b486ddb5f90f2df0c2b37050be174effcccf9b99a636a2ad556c9fa76df7dec2808c88fbd196f03bcdd38a2fe98b45c12ebc4697030ef58d259cafa014e486bc2606b3df5632c30ba873d044dad2d7a593fd3a467fbff8c6f4532512262a60ca1ce8525f9933364fc266a6fd3127d93e7c8700b2ce188ef28c50f5e0940dd479de4f81a9d9809c06c77ee44e4326733e89ec4bab7a067d9cbfc20a1fba5c13d801f770b565289567e2c26ab2e508edc2e85c90a8150636136a816fe26180a1fca4bfa8d43c2c3d67cfea6c6ac5a8dea996ecfeb273d4d9f420221a685de93dade76055d9dfef18fc506ccf5faa2e346aad5bf11bfd54a74e78f6ee57b112e9a81e572f9bf8ad1b6739f475f96977446bd6d380abb2e0a25be9ea57b4287ac729fb5ca92c0ddf2417d3078427df60259e95e30507946d213b01ab869dc018d2de2be5b5046d5eed9c3908af62191071a21b32362ad83b5f8a7dbc59ffc3d9d1d1abddbb134dbea1f677a87e658744ff8150376541934b5db84c2eb8e34714cb2d870334c0671a6634391b9d99689cb052408a984ccb82ab5ca4a92a9efb6d178a61498de8260f46f40086588de4f1269ed8dbd8cee12292386913568efac8de42507b9a9a4c705a48ee933580d357c548e91c82ef1803232a64eaea2ed75ac0c6b15eb7890f0c238c001d6c683bb76d4bd0bc0288e94f4acf332a373f0595a9ff4156ab257e079447cf607cb7e3d879979291efad12f5ac8742024b14595246b4cfb2eea84156e99fd80000000000000016010000c2260000c5a977473178bfd8609e0ab61aead58ff620fd11744c9bf49eb59e8ccfb905b5e0fa26cb82352629f8e82f39052b223ded0d181612d89da147766149ef6bf7631650eb5c6506800dd83336d883862b8bd75da26f8cd5faeacd9a37cf5ca88cd0e8bbb17def58d659f469ef7f8e8e53cf74ed0470d312ab879c900da81fd53a4726987fb744bc43862b3a72011871549e101188b6d3065bc9512d69b2da63e799e373c98da7d0a3976ac65b70b40aeba849392e544b9849b3fd0932908ca9e24f0a3d26c500000000a80000000000000029000000040000009edd1d48f358925cd2ffc02cb51bfec93f43de3885d41d563b662cda505d7b72ae6c11bc38fcdda1cd64617c1b4a09c1813746543fa6c56060b485030a494038932554a67c9b261aca7c9b5e5e6862cc7e4dd210fb1c6af22339ad4ca736f2fa2ada649d0fee0cf9aaa49b10db61150c95a13592dd3bd4fc4a7384416e073effe73e304c81039c6313e0c8a4f9be88d61174000000000000"], 0x12e0}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x2b, 0xa, 0x8, &(0x7f0000000400)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=4703): r0 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01"], 0x48) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x595}], 0x1}, 0x4) kernel console output (not intermixed with test programs): ibute type 2 has an invalid length. [ 1110.829942][T18234] netlink: 'syz.1.3840': attribute type 1 has an invalid length. [ 1110.872500][T18234] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3840'. [ 1111.992004][T18258] C: renamed from team_slave_0 [ 1112.062247][T18258] netlink: 'syz.0.3845': attribute type 3 has an invalid length. [ 1112.091036][T18258] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1112.115007][T18258] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1112.146646][T18269] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3847'. [ 1112.391722][T18266] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.3846'. [ 1112.479040][T18264] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1112.599769][T18264] syzkaller0: entered promiscuous mode [ 1112.613093][T18264] syzkaller0: entered allmulticast mode [ 1112.645215][T18275] netlink: 'syz.3.3850': attribute type 12 has an invalid length. [ 1112.656609][T18275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3850'. [ 1112.668779][T18266] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1115.924217][T18296] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3858'. [ 1116.112321][T18299] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.3858'. [ 1116.287603][T18302] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3859'. [ 1116.435353][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.443001][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.740613][T18311] netlink: 'syz.2.3863': attribute type 29 has an invalid length. [ 1119.826773][T18311] netlink: 'syz.2.3863': attribute type 29 has an invalid length. [ 1120.462902][T18321] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3866'. [ 1120.485080][T18321] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1120.988649][T18331] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3868'. [ 1121.021276][T18331] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1122.651649][T18348] pim6reg1: entered promiscuous mode [ 1122.660299][T18348] pim6reg1: entered allmulticast mode [ 1123.020235][T18363] FAULT_INJECTION: forcing a failure. [ 1123.020235][T18363] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.036853][T18363] CPU: 1 PID: 18363 Comm: syz.2.3879 Not tainted syzkaller #0 [ 1123.044904][T18363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1123.055280][T18363] Call Trace: [ 1123.058595][T18363] [ 1123.061576][T18363] dump_stack_lvl+0x18c/0x250 [ 1123.066402][T18363] ? show_regs_print_info+0x20/0x20 [ 1123.071670][T18363] ? load_image+0x420/0x420 [ 1123.076316][T18363] should_fail_ex+0x39d/0x4d0 [ 1123.081024][T18363] should_failslab+0x9/0x20 [ 1123.085729][T18363] slab_pre_alloc_hook+0x59/0x310 [ 1123.090969][T18363] ? __hw_addr_add_ex+0x202/0x710 [ 1123.096195][T18363] __kmem_cache_alloc_node+0x53/0x250 [ 1123.101768][T18363] ? __hw_addr_add_ex+0x202/0x710 [ 1123.106943][T18363] kmalloc_trace+0x2a/0xe0 [ 1123.111738][T18363] __hw_addr_add_ex+0x202/0x710 [ 1123.116731][T18363] dev_addr_init+0x15f/0x240 [ 1123.121533][T18363] ? dev_addr_flush+0x210/0x210 [ 1123.126424][T18363] alloc_netdev_mqs+0x2e4/0x1040 [ 1123.131475][T18363] ? udp_tunnel_nic_device_sync_work+0x890/0x890 [ 1123.137812][T18363] __ip_tunnel_create+0x303/0x4d0 [ 1123.143051][T18363] ? ip_tunnel_init_net+0x790/0x790 [ 1123.148577][T18363] ? security_capable+0x89/0xb0 [ 1123.153768][T18363] ip_tunnel_ctl+0x98c/0x1970 [ 1123.158578][T18363] vti_tunnel_ctl+0x1f9/0x390 [ 1123.163331][T18363] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 1123.169144][T18363] ? dev_ioctl+0x83c/0x1140 [ 1123.173658][T18363] ? ip_tunnel_update+0xb10/0xb10 [ 1123.178694][T18363] ? dev_ifsioc+0x958/0xc40 [ 1123.183205][T18363] dev_ioctl+0x84c/0x1140 [ 1123.187853][T18363] sock_ioctl+0x74c/0x7e0 [ 1123.192296][T18363] ? sock_poll+0x3e0/0x3e0 [ 1123.196773][T18363] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1123.202022][T18363] ? security_file_ioctl+0x80/0xa0 [ 1123.207285][T18363] ? sock_poll+0x3e0/0x3e0 [ 1123.211789][T18363] __se_sys_ioctl+0xfd/0x170 [ 1123.216610][T18363] do_syscall_64+0x55/0xa0 [ 1123.221283][T18363] ? clear_bhb_loop+0x40/0x90 [ 1123.226004][T18363] ? clear_bhb_loop+0x40/0x90 [ 1123.230737][T18363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1123.236855][T18363] RIP: 0033:0x7ff900d9c819 [ 1123.241590][T18363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.261332][T18363] RSP: 002b:00007ff901c6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1123.269849][T18363] RAX: ffffffffffffffda RBX: 00007ff901015fa0 RCX: 00007ff900d9c819 [ 1123.277862][T18363] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000f [ 1123.285857][T18363] RBP: 00007ff901c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.294022][T18363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.302205][T18363] R13: 00007ff901016038 R14: 00007ff901015fa0 R15: 00007ffd46ea8508 [ 1123.310230][T18363] [ 1125.421717][T18405] netlink: 'syz.0.3895': attribute type 10 has an invalid length. [ 1125.429795][T18405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3895'. [ 1126.056871][T18410] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3898'. [ 1127.201711][T18438] netlink: 'syz.1.3909': attribute type 10 has an invalid length. [ 1127.382788][T18448] FAULT_INJECTION: forcing a failure. [ 1127.382788][T18448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.432225][T18448] CPU: 0 PID: 18448 Comm: syz.3.3912 Not tainted syzkaller #0 [ 1127.439814][T18448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1127.450044][T18448] Call Trace: [ 1127.453392][T18448] [ 1127.456396][T18448] dump_stack_lvl+0x18c/0x250 [ 1127.461189][T18448] ? show_regs_print_info+0x20/0x20 [ 1127.466649][T18448] ? load_image+0x420/0x420 [ 1127.471344][T18448] ? __lock_acquire+0x7d40/0x7d40 [ 1127.476627][T18448] ? snprintf+0xe9/0x140 [ 1127.481224][T18448] should_fail_ex+0x39d/0x4d0 [ 1127.486095][T18448] _copy_to_user+0x2f/0xa0 [ 1127.490634][T18448] simple_read_from_buffer+0xe7/0x150 [ 1127.496191][T18448] proc_fail_nth_read+0x1e8/0x260 [ 1127.501652][T18448] ? proc_fault_inject_write+0x360/0x360 [ 1127.507706][T18448] ? fsnotify_perm+0x271/0x5e0 [ 1127.512744][T18448] ? proc_fault_inject_write+0x360/0x360 [ 1127.518568][T18448] vfs_read+0x28b/0x970 [ 1127.523004][T18448] ? kernel_read+0x1e0/0x1e0 [ 1127.527797][T18448] ? __fget_files+0x28/0x4b0 [ 1127.532568][T18448] ? __fget_files+0x28/0x4b0 [ 1127.537431][T18448] ? __fget_files+0x43d/0x4b0 [ 1127.542452][T18448] ? __fdget_pos+0x2a3/0x330 [ 1127.547122][T18448] ? ksys_read+0x75/0x260 [ 1127.551633][T18448] ksys_read+0x150/0x260 [ 1127.556243][T18448] ? vfs_write+0x990/0x990 [ 1127.560785][T18448] ? lockdep_hardirqs_on+0x98/0x150 [ 1127.566267][T18448] do_syscall_64+0x55/0xa0 [ 1127.570763][T18448] ? clear_bhb_loop+0x40/0x90 [ 1127.575615][T18448] ? clear_bhb_loop+0x40/0x90 [ 1127.580379][T18448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1127.586347][T18448] RIP: 0033:0x7f523915d04e [ 1127.590968][T18448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1127.611372][T18448] RSP: 002b:00007f5239fcbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1127.620061][T18448] RAX: ffffffffffffffda RBX: 00007f5239fcc6c0 RCX: 00007f523915d04e [ 1127.628196][T18448] RDX: 000000000000000f RSI: 00007f5239fcc0a0 RDI: 0000000000000005 [ 1127.636499][T18448] RBP: 00007f5239fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.644807][T18448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.652927][T18448] R13: 00007f5239416038 R14: 00007f5239415fa0 R15: 00007fff7efcfb18 [ 1127.661044][T18448] [ 1129.809502][T18478] FAULT_INJECTION: forcing a failure. [ 1129.809502][T18478] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.834992][T18478] CPU: 0 PID: 18478 Comm: syz.1.3924 Not tainted syzkaller #0 [ 1129.842992][T18478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1129.853309][T18478] Call Trace: [ 1129.856670][T18478] [ 1129.859822][T18478] dump_stack_lvl+0x18c/0x250 [ 1129.864651][T18478] ? show_regs_print_info+0x20/0x20 [ 1129.869897][T18478] ? load_image+0x420/0x420 [ 1129.874629][T18478] ? __might_sleep+0xe0/0xe0 [ 1129.879271][T18478] ? __lock_acquire+0x7d40/0x7d40 [ 1129.884626][T18478] should_fail_ex+0x39d/0x4d0 [ 1129.889553][T18478] should_failslab+0x9/0x20 [ 1129.894102][T18478] slab_pre_alloc_hook+0x59/0x310 [ 1129.899525][T18478] ? tomoyo_encode+0x28b/0x540 [ 1129.905121][T18478] ? tomoyo_encode+0x28b/0x540 [ 1129.910028][T18478] __kmem_cache_alloc_node+0x53/0x250 [ 1129.915717][T18478] ? tomoyo_encode+0x28b/0x540 [ 1129.920513][T18478] __kmalloc+0xa4/0x230 [ 1129.924720][T18478] tomoyo_encode+0x28b/0x540 [ 1129.929448][T18478] tomoyo_realpath_from_path+0x592/0x5d0 [ 1129.935164][T18478] tomoyo_path_number_perm+0x248/0x620 [ 1129.940858][T18478] ? tomoyo_path_number_perm+0x217/0x620 [ 1129.946821][T18478] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1129.952430][T18478] ? ksys_write+0x1c4/0x260 [ 1129.957072][T18478] ? __fget_files+0x28/0x4b0 [ 1129.961702][T18478] ? __fget_files+0x28/0x4b0 [ 1129.966482][T18478] security_file_ioctl+0x70/0xa0 [ 1129.971470][T18478] __se_sys_ioctl+0x48/0x170 [ 1129.976129][T18478] do_syscall_64+0x55/0xa0 [ 1129.980696][T18478] ? clear_bhb_loop+0x40/0x90 [ 1129.985501][T18478] ? clear_bhb_loop+0x40/0x90 [ 1129.990221][T18478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1129.996162][T18478] RIP: 0033:0x7f0eedf9c819 [ 1130.000618][T18478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.020691][T18478] RSP: 002b:00007f0eeee0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1130.029162][T18478] RAX: ffffffffffffffda RBX: 00007f0eee215fa0 RCX: 00007f0eedf9c819 [ 1130.037322][T18478] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000013 [ 1130.045614][T18478] RBP: 00007f0eeee0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.053742][T18478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.061759][T18478] R13: 00007f0eee216038 R14: 00007f0eee215fa0 R15: 00007fffed677968 [ 1130.069983][T18478] [ 1130.131776][T18478] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1130.276027][T18484] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1130.625373][T18496] netlink: 'syz.1.3932': attribute type 10 has an invalid length. [ 1130.644080][T18496] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1130.743853][T18496] batman_adv: batadv0: Removing interface: veth0_vlan [ 1133.694008][T18548] FAULT_INJECTION: forcing a failure. [ 1133.694008][T18548] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.709096][T18548] CPU: 0 PID: 18548 Comm: syz.1.3950 Not tainted syzkaller #0 [ 1133.716729][T18548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1133.727698][T18548] Call Trace: [ 1133.731004][T18548] [ 1133.733984][T18548] dump_stack_lvl+0x18c/0x250 [ 1133.738709][T18548] ? show_regs_print_info+0x20/0x20 [ 1133.744069][T18548] ? load_image+0x420/0x420 [ 1133.748699][T18548] ? __might_sleep+0xe0/0xe0 [ 1133.753398][T18548] ? __lock_acquire+0x7d40/0x7d40 [ 1133.758455][T18548] should_fail_ex+0x39d/0x4d0 [ 1133.763164][T18548] should_failslab+0x9/0x20 [ 1133.767694][T18548] slab_pre_alloc_hook+0x59/0x310 [ 1133.772745][T18548] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 1133.778253][T18548] __kmem_cache_alloc_node+0x53/0x250 [ 1133.783728][T18548] ? __asan_memset+0x22/0x40 [ 1133.788336][T18548] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 1133.793732][T18548] kmalloc_trace+0x2a/0xe0 [ 1133.798171][T18548] __xdp_reg_mem_model+0x1e4/0x5c0 [ 1133.803391][T18548] ? kvmalloc_node+0x70/0x180 [ 1133.808090][T18548] ? kvmalloc_node+0x70/0x180 [ 1133.812784][T18548] ? xdp_reg_mem_model+0x40/0x40 [ 1133.817835][T18548] xdp_reg_mem_model+0x22/0x40 [ 1133.822615][T18548] bpf_test_run_xdp_live+0x262/0x1b20 [ 1133.828008][T18548] ? 0xffffffffa0004740 [ 1133.832180][T18548] ? 0xffffffffa0004740 [ 1133.836345][T18548] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1133.842258][T18548] ? 0xffffffffa0004740 [ 1133.846517][T18548] ? xdp_convert_md_to_buff+0x330/0x330 [ 1133.852197][T18548] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1133.858729][T18548] ? _copy_from_user+0xa5/0xe0 [ 1133.863608][T18548] ? bpf_test_init+0x119/0x140 [ 1133.868588][T18548] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1133.874506][T18548] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1133.880079][T18548] ? dev_put+0x80/0x80 [ 1133.884266][T18548] ? dev_put+0x80/0x80 [ 1133.888355][T18548] bpf_prog_test_run+0x321/0x390 [ 1133.893413][T18548] __sys_bpf+0x49d/0x890 [ 1133.897766][T18548] ? bpf_link_show_fdinfo+0x390/0x390 [ 1133.903259][T18548] ? lock_chain_count+0x20/0x20 [ 1133.908129][T18548] __x64_sys_bpf+0x7c/0x90 [ 1133.912564][T18548] do_syscall_64+0x55/0xa0 [ 1133.917082][T18548] ? clear_bhb_loop+0x40/0x90 [ 1133.921779][T18548] ? clear_bhb_loop+0x40/0x90 [ 1133.926483][T18548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.932477][T18548] RIP: 0033:0x7f0eedf9c819 [ 1133.937004][T18548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.957541][T18548] RSP: 002b:00007f0eeee0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1133.966150][T18548] RAX: ffffffffffffffda RBX: 00007f0eee215fa0 RCX: 00007f0eedf9c819 [ 1133.974134][T18548] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1133.982315][T18548] RBP: 00007f0eeee0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.990415][T18548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.998517][T18548] R13: 00007f0eee216038 R14: 00007f0eee215fa0 R15: 00007fffed677968 [ 1134.006612][T18548] [ 1135.122523][T18567] netlink: 'syz.2.3956': attribute type 10 has an invalid length. [ 1135.221149][T18567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3956'. [ 1135.230559][T18567] macvlan1: entered promiscuous mode [ 1135.346108][T18567] batman_adv: batadv0: Adding interface: macvlan1 [ 1135.382127][T18567] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.432965][T18567] batman_adv: batadv0: Interface activated: macvlan1 [ 1135.859048][T18609] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3969'. [ 1135.926823][T18604] FAULT_INJECTION: forcing a failure. [ 1135.926823][T18604] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.951241][T18604] CPU: 1 PID: 18604 Comm: syz.0.3967 Not tainted syzkaller #0 [ 1135.958892][T18604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1135.969198][T18604] Call Trace: [ 1135.972716][T18604] [ 1135.975876][T18604] dump_stack_lvl+0x18c/0x250 [ 1135.980634][T18604] ? show_regs_print_info+0x20/0x20 [ 1135.985901][T18604] ? load_image+0x420/0x420 [ 1135.990474][T18604] ? verify_lock_unused+0x140/0x140 [ 1135.995822][T18604] ? perf_trace_lock+0x304/0x3b0 [ 1136.000845][T18604] should_fail_ex+0x39d/0x4d0 [ 1136.005690][T18604] should_failslab+0x9/0x20 [ 1136.010342][T18604] slab_pre_alloc_hook+0x59/0x310 [ 1136.015722][T18604] kmem_cache_alloc+0x5a/0x2d0 [ 1136.020551][T18604] ? skb_clone+0x1eb/0x370 [ 1136.025051][T18604] skb_clone+0x1eb/0x370 [ 1136.029630][T18604] __netlink_deliver_tap+0x41c/0x830 [ 1136.035554][T18604] ? netlink_deliver_tap+0x2e/0x1b0 [ 1136.040934][T18604] netlink_deliver_tap+0x19c/0x1b0 [ 1136.046301][T18604] netlink_unicast+0x72c/0x8d0 [ 1136.051245][T18604] netlink_sendmsg+0x8d0/0xbf0 [ 1136.056191][T18604] ? perf_trace_lock+0x304/0x3b0 [ 1136.061306][T18604] ? netlink_getsockopt+0x590/0x590 [ 1136.066672][T18604] ? aa_sock_msg_perm+0x94/0x150 [ 1136.071690][T18604] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1136.077207][T18604] ? security_socket_sendmsg+0x80/0xa0 [ 1136.082742][T18604] ? netlink_getsockopt+0x590/0x590 [ 1136.088272][T18604] ____sys_sendmsg+0x5ba/0x960 [ 1136.093533][T18604] ? __asan_memset+0x22/0x40 [ 1136.098165][T18604] ? __sys_sendmsg_sock+0x30/0x30 [ 1136.103406][T18604] ? __import_iovec+0x5f2/0x850 [ 1136.108381][T18604] ? import_iovec+0x73/0xa0 [ 1136.112916][T18604] ___sys_sendmsg+0x2a6/0x360 [ 1136.117639][T18604] ? __sys_sendmsg+0x2a0/0x2a0 [ 1136.122554][T18604] ? __lock_acquire+0x7d40/0x7d40 [ 1136.127654][T18604] __se_sys_sendmsg+0x1c2/0x2b0 [ 1136.132627][T18604] ? __x64_sys_sendmsg+0x80/0x80 [ 1136.137885][T18604] ? lockdep_hardirqs_on+0x98/0x150 [ 1136.143141][T18604] do_syscall_64+0x55/0xa0 [ 1136.147770][T18604] ? clear_bhb_loop+0x40/0x90 [ 1136.152666][T18604] ? clear_bhb_loop+0x40/0x90 [ 1136.157651][T18604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1136.163918][T18604] RIP: 0033:0x7fc369d9c819 [ 1136.168457][T18604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.188271][T18604] RSP: 002b:00007fc36ac04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.196979][T18604] RAX: ffffffffffffffda RBX: 00007fc36a015fa0 RCX: 00007fc369d9c819 [ 1136.205273][T18604] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1136.213267][T18604] RBP: 00007fc36ac04090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.221714][T18604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.229809][T18604] R13: 00007fc36a016038 R14: 00007fc36a015fa0 R15: 00007fff7c9c6bc8 [ 1136.237830][T18604] [ 1136.378833][T18617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3971'. [ 1136.386166][T18604] netlink: 'syz.0.3967': attribute type 10 has an invalid length. [ 1136.441399][T18604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3967'. [ 1136.469756][T18604] macvlan1: entered promiscuous mode [ 1136.528457][T18604] batman_adv: batadv0: Adding interface: macvlan1 [ 1136.538555][T18604] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.571377][T18604] batman_adv: batadv0: Interface activated: macvlan1 [ 1136.594630][T18617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3971'. [ 1136.605105][T18619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3971'. [ 1136.641068][T18624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3971'. [ 1137.435066][T18644] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1137.650667][T18644] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1137.664643][T18644] CPU: 1 PID: 18644 Comm: syz.1.3979 Not tainted syzkaller #0 [ 1137.672540][T18644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1137.682648][T18644] Call Trace: [ 1137.686237][T18644] [ 1137.689204][T18644] dump_stack_lvl+0x18c/0x250 [ 1137.694227][T18644] ? show_regs_print_info+0x20/0x20 [ 1137.699586][T18644] ? load_image+0x420/0x420 [ 1137.704341][T18644] sysfs_warn_dup+0x8e/0xa0 [ 1137.709045][T18644] sysfs_do_create_link_sd+0xc0/0x110 [ 1137.714564][T18644] device_add_class_symlinks+0x1cf/0x240 [ 1137.720387][T18644] device_add+0x507/0xc20 [ 1137.724763][T18644] wiphy_register+0x1dad/0x2ae0 [ 1137.729800][T18644] ? cfg80211_event_work+0x40/0x40 [ 1137.735087][T18644] ? minstrel_ht_alloc+0x88a/0x990 [ 1137.740284][T18644] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1137.746430][T18644] ieee80211_register_hw+0x3464/0x4250 [ 1137.752079][T18644] ? ieee80211_tasklet_handler+0x20/0x20 [ 1137.757877][T18644] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1137.763928][T18644] ? __debug_object_init+0xec/0x450 [ 1137.769212][T18644] ? __asan_memset+0x22/0x40 [ 1137.774036][T18644] ? __hrtimer_init+0x186/0x270 [ 1137.779242][T18644] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1137.785302][T18644] ? lock_chain_count+0x20/0x20 [ 1137.790499][T18644] ? mac80211_hwsim_free+0x220/0x220 [ 1137.795931][T18644] ? kstrndup+0xa4/0x140 [ 1137.800239][T18644] ? kstrndup+0xbd/0x140 [ 1137.804725][T18644] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1137.810068][T18644] ? __nla_validate+0x50/0x50 [ 1137.814990][T18644] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1137.821471][T18644] ? __asan_memcpy+0x70/0x70 [ 1137.826125][T18644] ? __nla_parse+0x40/0x50 [ 1137.830681][T18644] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1137.837248][T18644] genl_family_rcv_msg_doit+0x211/0x310 [ 1137.842867][T18644] ? end_current_label_crit_section+0x170/0x170 [ 1137.849436][T18644] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1137.855571][T18644] ? bpf_lsm_capable+0x9/0x10 [ 1137.860391][T18644] ? security_capable+0x89/0xb0 [ 1137.865389][T18644] genl_rcv_msg+0x619/0x7a0 [ 1137.869949][T18644] ? genl_bind+0x360/0x360 [ 1137.874409][T18644] ? perf_trace_lock+0xfc/0x3b0 [ 1137.879316][T18644] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1137.885788][T18644] ? perf_trace_lock+0xfc/0x3b0 [ 1137.890787][T18644] netlink_rcv_skb+0x241/0x4d0 [ 1137.895618][T18644] ? genl_bind+0x360/0x360 [ 1137.900177][T18644] ? netlink_ack+0x1180/0x1180 [ 1137.905116][T18644] ? __lock_acquire+0x7d40/0x7d40 [ 1137.910379][T18644] ? net_generic+0x1e/0x240 [ 1137.915046][T18644] ? down_read+0x1ac/0x2e0 [ 1137.919600][T18644] genl_rcv+0x28/0x40 [ 1137.923649][T18644] netlink_unicast+0x751/0x8d0 [ 1137.928484][T18644] netlink_sendmsg+0x8d0/0xbf0 [ 1137.933504][T18644] ? lockdep_hardirqs_on+0x98/0x150 [ 1137.938945][T18644] ? netlink_getsockopt+0x590/0x590 [ 1137.944231][T18644] ? aa_sock_msg_perm+0x94/0x150 [ 1137.949417][T18644] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1137.954931][T18644] ? security_socket_sendmsg+0x80/0xa0 [ 1137.960440][T18644] ? netlink_getsockopt+0x590/0x590 [ 1137.965877][T18644] ____sys_sendmsg+0x5ba/0x960 [ 1137.970706][T18644] ? lockdep_hardirqs_on+0x98/0x150 [ 1137.975969][T18644] ? __sys_sendmsg_sock+0x30/0x30 [ 1137.981058][T18644] ? ___sys_sendmsg+0x28b/0x360 [ 1137.985965][T18644] ___sys_sendmsg+0x2a6/0x360 [ 1137.990877][T18644] ? __sys_sendmsg+0x2a0/0x2a0 [ 1137.995811][T18644] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1138.002229][T18644] __se_sys_sendmsg+0x1c2/0x2b0 [ 1138.007389][T18644] ? __x64_sys_sendmsg+0x80/0x80 [ 1138.012405][T18644] ? lockdep_hardirqs_on+0x98/0x150 [ 1138.017758][T18644] do_syscall_64+0x55/0xa0 [ 1138.022254][T18644] ? clear_bhb_loop+0x40/0x90 [ 1138.027078][T18644] ? clear_bhb_loop+0x40/0x90 [ 1138.031815][T18644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1138.037928][T18644] RIP: 0033:0x7f0eedf9c819 [ 1138.042381][T18644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.062112][T18644] RSP: 002b:00007f0eeee0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1138.070570][T18644] RAX: ffffffffffffffda RBX: 00007f0eee215fa0 RCX: 00007f0eedf9c819 [ 1138.078748][T18644] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1138.086752][T18644] RBP: 00007f0eee032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1138.094931][T18644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.103019][T18644] R13: 00007f0eee216038 R14: 00007f0eee215fa0 R15: 00007fffed677968 [ 1138.111143][T18644] [ 1140.489410][T18682] netlink: 'syz.3.3991': attribute type 10 has an invalid length. [ 1140.512392][T18678] sctp: [Deprecated]: syz.3.3991 (pid 18678) Use of int in maxseg socket option. [ 1140.512392][T18678] Use struct sctp_assoc_value instead [ 1140.676589][T18685] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1140.690970][T18685] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1140.866447][T18682] macvlan1: entered allmulticast mode [ 1141.354388][T18698] netlink: 'syz.2.3997': attribute type 3 has an invalid length. [ 1141.404832][T18698] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3997'. [ 1141.538246][T18698] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3997'. [ 1141.698436][T18702] 6: renamed from veth0_vlan [ 1141.704915][T18697] delete_channel: no stack [ 1142.333157][T18725] netlink: 'syz.3.4008': attribute type 2 has an invalid length. [ 1142.358759][T18725] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.4008'. [ 1142.527563][T18731] netlink: 'syz.0.4010': attribute type 39 has an invalid length. [ 1143.561834][T18746] netlink: 'syz.2.4016': attribute type 21 has an invalid length. [ 1143.597763][T18746] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.090652][T18752] netlink: 'syz.2.4016': attribute type 21 has an invalid length. [ 1144.349320][T18763] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1144.422634][T18763] syzkaller0: entered promiscuous mode [ 1144.428464][T18763] syzkaller0: entered allmulticast mode [ 1145.222345][T18794] netlink: 'syz.2.4027': attribute type 8 has an invalid length. [ 1145.239089][T18794] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4027'. [ 1147.064207][T18774] netlink: 'syz.3.4021': attribute type 10 has an invalid length. [ 1147.072771][T18774] batman_adv: batadv0: Removing interface: veth0_vlan [ 1147.231628][T18801] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4029'. [ 1148.038065][T18826] netlink: 'syz.3.4039': attribute type 8 has an invalid length. [ 1148.051413][T18824] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1148.079596][T18826] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.4039'. [ 1148.227813][T18824] syzkaller0: entered promiscuous mode [ 1148.236707][T18824] syzkaller0: entered allmulticast mode [ 1148.252606][T18830] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4040'. [ 1150.902491][T18853] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4049'. [ 1151.000099][T18860] netlink: 'syz.0.4060': attribute type 12 has an invalid length. [ 1151.015042][T18860] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4060'. [ 1151.152101][T18865] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4055'. [ 1151.176503][T18868] netlink: 'syz.1.4054': attribute type 8 has an invalid length. [ 1151.193808][T18868] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.4054'. [ 1151.817821][T18877] syzkaller0: entered allmulticast mode [ 1151.897165][T18891] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4063'. [ 1151.924684][T18891] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4063'. [ 1151.955505][T18892] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4063'. [ 1152.073804][T18896] netlink: 'syz.1.4066': attribute type 12 has an invalid length. [ 1152.758159][T18926] netlink: 'syz.2.4076': attribute type 12 has an invalid length. [ 1152.766871][T18926] __nla_validate_parse: 2 callbacks suppressed [ 1152.766885][T18926] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4076'. [ 1152.774985][T18925] sctp: [Deprecated]: syz.1.4071 (pid 18925) Use of int in maxseg socket option. [ 1152.774985][T18925] Use struct sctp_assoc_value instead [ 1152.808295][T18928] netlink: 'syz.1.4071': attribute type 10 has an invalid length. [ 1152.839402][T18928] macvlan1: entered allmulticast mode [ 1152.917925][T18925] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4071'. [ 1152.941882][T18925] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1153.759069][T18938] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1153.950135][T18938] syzkaller0: entered promiscuous mode [ 1153.961650][T18938] syzkaller0: entered allmulticast mode [ 1154.004433][T18948] netlink: 'syz.3.4085': attribute type 12 has an invalid length. [ 1154.018283][T18948] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4085'. [ 1157.360352][T18972] netlink: 'syz.3.4095': attribute type 12 has an invalid length. [ 1157.373707][T18972] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4095'. [ 1157.468069][T18975] netlink: 'syz.2.4097': attribute type 8 has an invalid length. [ 1157.501002][T18975] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4097'. [ 1157.616797][T18981] sctp: [Deprecated]: syz.0.4093 (pid 18981) Use of int in maxseg socket option. [ 1157.616797][T18981] Use struct sctp_assoc_value instead [ 1157.648858][T18981] netlink: 'syz.0.4093': attribute type 10 has an invalid length. [ 1157.668981][T18981] batman_adv: batadv0: Interface deactivated: macvlan1 [ 1157.693173][T18981] macvlan1: left promiscuous mode [ 1157.706249][T18981] macvlan1: entered allmulticast mode [ 1157.735170][T18986] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4093'. [ 1157.748428][T18981] batman_adv: batadv0: Removing interface: macvlan1 [ 1157.779175][T18986] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1157.791062][T18983] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4099'. [ 1157.825613][T18983] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4099'. [ 1157.978642][T18989] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1158.045780][T18989] syzkaller0: entered promiscuous mode [ 1158.071510][T18989] syzkaller0: entered allmulticast mode [ 1158.994914][T19016] netlink: 'syz.2.4108': attribute type 8 has an invalid length. [ 1159.003255][T19016] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4108'. [ 1160.881332][T19005] netlink: 'syz.1.4106': attribute type 12 has an invalid length. [ 1160.891439][T19005] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4106'. [ 1160.981417][T19019] netlink: 'syz.2.4109': attribute type 3 has an invalid length. [ 1161.020957][T19019] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4109'. [ 1161.417701][T19039] netlink: 'syz.1.4117': attribute type 8 has an invalid length. [ 1161.426340][T19039] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.4117'. [ 1161.589830][T19045] netlink: 'syz.3.4119': attribute type 12 has an invalid length. [ 1161.602841][T19045] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4119'. [ 1161.622758][T19044] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1161.674536][T19044] syzkaller0: entered promiscuous mode [ 1161.701069][T19044] syzkaller0: entered allmulticast mode [ 1164.490846][T19071] netlink: 'syz.0.4126': attribute type 1 has an invalid length. [ 1164.594453][T19075] netlink: 'syz.3.4128': attribute type 8 has an invalid length. [ 1164.609329][T19075] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.4128'. [ 1164.714737][T19079] netlink: 'syz.2.4129': attribute type 12 has an invalid length. [ 1164.735958][T19079] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4129'. [ 1164.852816][T19083] netlink: 'syz.1.4130': attribute type 1 has an invalid length. [ 1164.880171][T19083] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.4130'. [ 1165.259279][T19095] FAULT_INJECTION: forcing a failure. [ 1165.259279][T19095] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.279574][T19095] CPU: 0 PID: 19095 Comm: syz.0.4135 Not tainted syzkaller #0 [ 1165.287213][T19095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1165.297580][T19095] Call Trace: [ 1165.301106][T19095] [ 1165.304344][T19095] dump_stack_lvl+0x18c/0x250 [ 1165.309186][T19095] ? show_regs_print_info+0x20/0x20 [ 1165.314535][T19095] ? load_image+0x420/0x420 [ 1165.319198][T19095] ? __might_sleep+0xe0/0xe0 [ 1165.323849][T19095] ? __lock_acquire+0x7d40/0x7d40 [ 1165.328963][T19095] ? perf_trace_lock+0xfc/0x3b0 [ 1165.333965][T19095] should_fail_ex+0x39d/0x4d0 [ 1165.338802][T19095] should_failslab+0x9/0x20 [ 1165.343537][T19095] slab_pre_alloc_hook+0x59/0x310 [ 1165.348726][T19095] ? __get_vm_area_node+0x125/0x370 [ 1165.353992][T19095] __kmem_cache_alloc_node+0x53/0x250 [ 1165.359726][T19095] ? __get_vm_area_node+0x125/0x370 [ 1165.364996][T19095] kmalloc_node_trace+0x26/0xe0 [ 1165.370137][T19095] __get_vm_area_node+0x125/0x370 [ 1165.375519][T19095] __vmalloc_node_range+0x36e/0x1330 [ 1165.380871][T19095] ? netlink_sendmsg+0x602/0xbf0 [ 1165.386054][T19095] ? netlink_insert+0x109f/0x13a0 [ 1165.391445][T19095] ? netlink_data_ready+0x10/0x10 [ 1165.396606][T19095] ? free_vm_area+0x50/0x50 [ 1165.401270][T19095] ? netlink_sendmsg+0x602/0xbf0 [ 1165.406517][T19095] vmalloc+0x79/0x90 [ 1165.410924][T19095] ? netlink_sendmsg+0x602/0xbf0 [ 1165.416131][T19095] netlink_sendmsg+0x602/0xbf0 [ 1165.421392][T19095] ? netlink_getsockopt+0x590/0x590 [ 1165.426694][T19095] ? aa_sock_msg_perm+0x94/0x150 [ 1165.431996][T19095] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1165.437712][T19095] ? security_socket_sendmsg+0x80/0xa0 [ 1165.443681][T19095] sock_write_iter+0x2df/0x420 [ 1165.448673][T19095] ? sock_read_iter+0x3e0/0x3e0 [ 1165.453870][T19095] ? common_file_perm+0x198/0x1f0 [ 1165.459051][T19095] vfs_write+0x46c/0x990 [ 1165.463477][T19095] ? file_end_write+0x250/0x250 [ 1165.468935][T19095] ? __fget_files+0x43d/0x4b0 [ 1165.474063][T19095] ? __fdget_pos+0x1d8/0x330 [ 1165.478982][T19095] ? ksys_write+0x75/0x260 [ 1165.483467][T19095] ksys_write+0x150/0x260 [ 1165.489327][T19095] ? __ia32_sys_read+0x90/0x90 [ 1165.494383][T19095] ? lockdep_hardirqs_on+0x98/0x150 [ 1165.499839][T19095] do_syscall_64+0x55/0xa0 [ 1165.504310][T19095] ? clear_bhb_loop+0x40/0x90 [ 1165.509289][T19095] ? clear_bhb_loop+0x40/0x90 [ 1165.514447][T19095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.520647][T19095] RIP: 0033:0x7fc369d9c819 [ 1165.525752][T19095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.546023][T19095] RSP: 002b:00007fc36ac04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1165.555014][T19095] RAX: ffffffffffffffda RBX: 00007fc36a015fa0 RCX: 00007fc369d9c819 [ 1165.563322][T19095] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000004 [ 1165.571898][T19095] RBP: 00007fc36ac04090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.580303][T19095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.588585][T19095] R13: 00007fc36a016038 R14: 00007fc36a015fa0 R15: 00007fff7c9c6bc8 [ 1165.596752][T19095] [ 1165.621260][T19100] netlink: 'syz.3.4137': attribute type 4 has an invalid length. [ 1165.631566][T19095] syz.0.4135: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1165.635476][T19100] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4137'. [ 1165.658424][T19095] CPU: 0 PID: 19095 Comm: syz.0.4135 Not tainted syzkaller #0 [ 1165.666038][T19095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1165.676562][T19095] Call Trace: [ 1165.679846][T19095] [ 1165.682786][T19095] dump_stack_lvl+0x18c/0x250 [ 1165.687488][T19095] ? show_regs_print_info+0x20/0x20 [ 1165.692741][T19095] ? load_image+0x420/0x420 [ 1165.697483][T19095] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1165.704143][T19095] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1165.710864][T19095] warn_alloc+0x246/0x340 [ 1165.715430][T19095] ? __get_vm_area_node+0x125/0x370 [ 1165.720764][T19095] ? zone_watermark_ok_safe+0x230/0x230 [ 1165.726799][T19095] ? rcu_is_watching+0x15/0xb0 [ 1165.731705][T19095] ? __get_vm_area_node+0x356/0x370 [ 1165.737476][T19095] __vmalloc_node_range+0x393/0x1330 [ 1165.742886][T19095] ? netlink_insert+0x109f/0x13a0 [ 1165.748038][T19095] ? netlink_data_ready+0x10/0x10 [ 1165.753186][T19095] ? free_vm_area+0x50/0x50 [ 1165.757846][T19095] ? netlink_sendmsg+0x602/0xbf0 [ 1165.763002][T19095] vmalloc+0x79/0x90 [ 1165.767019][T19095] ? netlink_sendmsg+0x602/0xbf0 [ 1165.772142][T19095] netlink_sendmsg+0x602/0xbf0 [ 1165.777489][T19095] ? netlink_getsockopt+0x590/0x590 [ 1165.782758][T19095] ? aa_sock_msg_perm+0x94/0x150 [ 1165.787908][T19095] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1165.793308][T19095] ? security_socket_sendmsg+0x80/0xa0 [ 1165.798787][T19095] sock_write_iter+0x2df/0x420 [ 1165.803748][T19095] ? sock_read_iter+0x3e0/0x3e0 [ 1165.808932][T19095] ? common_file_perm+0x198/0x1f0 [ 1165.814182][T19095] vfs_write+0x46c/0x990 [ 1165.818806][T19095] ? file_end_write+0x250/0x250 [ 1165.823771][T19095] ? __fget_files+0x43d/0x4b0 [ 1165.828682][T19095] ? __fdget_pos+0x1d8/0x330 [ 1165.833312][T19095] ? ksys_write+0x75/0x260 [ 1165.837848][T19095] ksys_write+0x150/0x260 [ 1165.842291][T19095] ? __ia32_sys_read+0x90/0x90 [ 1165.847166][T19095] ? lockdep_hardirqs_on+0x98/0x150 [ 1165.852476][T19095] do_syscall_64+0x55/0xa0 [ 1165.857113][T19095] ? clear_bhb_loop+0x40/0x90 [ 1165.861844][T19095] ? clear_bhb_loop+0x40/0x90 [ 1165.867223][T19095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.873676][T19095] RIP: 0033:0x7fc369d9c819 [ 1165.878548][T19095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.898970][T19095] RSP: 002b:00007fc36ac04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1165.907411][T19095] RAX: ffffffffffffffda RBX: 00007fc36a015fa0 RCX: 00007fc369d9c819 [ 1165.915402][T19095] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000004 [ 1165.923399][T19095] RBP: 00007fc36ac04090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.931473][T19095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.940070][T19095] R13: 00007fc36a016038 R14: 00007fc36a015fa0 R15: 00007fff7c9c6bc8 [ 1165.948240][T19095] [ 1165.977365][T19095] Mem-Info: [ 1165.980750][T19095] active_anon:5855 inactive_anon:0 isolated_anon:0 [ 1165.980750][T19095] active_file:19388 inactive_file:40342 isolated_file:0 [ 1165.980750][T19095] unevictable:768 dirty:168 writeback:0 [ 1165.980750][T19095] slab_reclaimable:10538 slab_unreclaimable:95042 [ 1165.980750][T19095] mapped:24967 shmem:1361 pagetables:542 [ 1165.980750][T19095] sec_pagetables:0 bounce:0 [ 1165.980750][T19095] kernel_misc_reclaimable:0 [ 1165.980750][T19095] free:1341364 free_pcp:9774 free_cma:0 [ 1166.027773][T19095] Node 0 active_anon:23420kB inactive_anon:0kB active_file:77552kB inactive_file:161164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99868kB dirty:672kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10540kB pagetables:2168kB sec_pagetables:0kB all_unreclaimable? no [ 1166.061637][T19095] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1166.125176][T19095] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1166.175972][T19095] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1166.188792][T19095] Node 0 DMA32 free:1441772kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23284kB inactive_anon:0kB active_file:77552kB inactive_file:160336kB unevictable:1536kB writepending:672kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:32192kB local_pcp:19796kB free_cma:0kB [ 1166.242141][T19106] netlink: 'syz.3.4139': attribute type 12 has an invalid length. [ 1166.243474][T19095] lowmem_reserve[]: 0 0 0 0 0 [ 1166.255217][T19095] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1166.284031][T19106] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4139'. [ 1166.295395][T19095] lowmem_reserve[]: 0 0 0 0 0 [ 1166.301255][T19095] Node 1 Normal free:3908316kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:7520kB local_pcp:4288kB free_cma:0kB [ 1166.336567][T19107] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1166.377983][T19107] syzkaller0: entered promiscuous mode [ 1166.378563][T19095] lowmem_reserve[]: [ 1166.384691][T19107] syzkaller0: entered allmulticast mode [ 1166.391070][T19095] 0 0 0 0 0 [ 1166.419228][T19095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1166.438882][T19095] Node 0 DMA32: 435*4kB (UM) 1526*8kB (UME) 1611*16kB (UME) 2123*32kB (UME) 1976*64kB (UME) 924*128kB (UM) 182*256kB (UME) 37*512kB (UME) 15*1024kB (UM) 8*2048kB (UM) 242*4096kB (UM) = 1440908kB [ 1166.474402][T19095] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1166.501408][T19110] netlink: 'syz.3.4140': attribute type 8 has an invalid length. [ 1166.509440][T19110] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.4140'. [ 1166.509442][T19095] Node 1 [ 1166.526331][T19095] Normal: 245*4kB (UME) 53*8kB (UME) 46*16kB (UME) 260*32kB (UME) 92*64kB (UME) 14*128kB (UME) 2*256kB (ME) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3908316kB [ 1166.557009][T19095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1166.572807][T19095] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1166.594612][T19095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1166.608515][T19095] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1166.619901][T19095] 61091 total pagecache pages [ 1166.625087][T19095] 0 pages in swap cache [ 1166.629446][T19095] Free swap = 124996kB [ 1166.643616][T19095] Total swap = 124996kB [ 1166.647927][T19095] 2097051 pages RAM [ 1166.658411][T19095] 0 pages HighMem/MovableOnly [ 1166.663443][T19095] 416927 pages reserved [ 1166.667732][T19095] 0 pages cma reserved [ 1169.785205][T19113] netlink: 'syz.1.4142': attribute type 27 has an invalid length. [ 1169.911697][T19146] netlink: 'syz.1.4148': attribute type 12 has an invalid length. [ 1169.931169][T19146] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4148'. [ 1170.033721][T19150] netlink: 'syz.2.4149': attribute type 8 has an invalid length. [ 1170.056001][T19150] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1170.129295][T19152] FAULT_INJECTION: forcing a failure. [ 1170.129295][T19152] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.163177][T19152] CPU: 0 PID: 19152 Comm: syz.0.4151 Not tainted syzkaller #0 [ 1170.170914][T19152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1170.181217][T19152] Call Trace: [ 1170.184547][T19152] [ 1170.187508][T19152] dump_stack_lvl+0x18c/0x250 [ 1170.192255][T19152] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1170.198259][T19152] ? show_regs_print_info+0x20/0x20 [ 1170.203659][T19152] ? load_image+0x420/0x420 [ 1170.208404][T19152] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1170.214434][T19152] should_fail_ex+0x39d/0x4d0 [ 1170.219239][T19152] should_failslab+0x9/0x20 [ 1170.223872][T19152] slab_pre_alloc_hook+0x59/0x310 [ 1170.229183][T19152] ? lockdep_hardirqs_on+0x98/0x150 [ 1170.234750][T19152] kmem_cache_alloc+0x5a/0x2d0 [ 1170.239657][T19152] ? skb_clone+0x1eb/0x370 [ 1170.244122][T19152] skb_clone+0x1eb/0x370 [ 1170.248414][T19152] __netlink_deliver_tap+0x41c/0x830 [ 1170.253763][T19152] ? netlink_deliver_tap+0x2e/0x1b0 [ 1170.259108][T19152] netlink_deliver_tap+0x19c/0x1b0 [ 1170.264367][T19152] netlink_unicast+0x72c/0x8d0 [ 1170.269444][T19152] netlink_sendmsg+0x8d0/0xbf0 [ 1170.274388][T19152] ? tomoyo_socket_sendmsg_permission+0xb9/0x2f0 [ 1170.280861][T19152] ? netlink_getsockopt+0x590/0x590 [ 1170.286207][T19152] ? aa_sock_msg_perm+0x94/0x150 [ 1170.291245][T19152] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1170.296595][T19152] ? security_socket_sendmsg+0x80/0xa0 [ 1170.302103][T19152] ? netlink_getsockopt+0x590/0x590 [ 1170.307377][T19152] ____sys_sendmsg+0x5ba/0x960 [ 1170.312202][T19152] ? __asan_memset+0x22/0x40 [ 1170.316846][T19152] ? __sys_sendmsg_sock+0x30/0x30 [ 1170.322084][T19152] ? __import_iovec+0x5f2/0x850 [ 1170.327030][T19152] ? import_iovec+0x73/0xa0 [ 1170.331739][T19152] ___sys_sendmsg+0x2a6/0x360 [ 1170.336522][T19152] ? get_pid_task+0x20/0x1e0 [ 1170.341270][T19152] ? __sys_sendmsg+0x2a0/0x2a0 [ 1170.346173][T19152] ? __lock_acquire+0x7d40/0x7d40 [ 1170.351613][T19152] __se_sys_sendmsg+0x1c2/0x2b0 [ 1170.357049][T19152] ? __x64_sys_sendmsg+0x80/0x80 [ 1170.362165][T19152] ? lockdep_hardirqs_on+0x98/0x150 [ 1170.367601][T19152] do_syscall_64+0x55/0xa0 [ 1170.372304][T19152] ? clear_bhb_loop+0x40/0x90 [ 1170.377250][T19152] ? clear_bhb_loop+0x40/0x90 [ 1170.382046][T19152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1170.388070][T19152] RIP: 0033:0x7fc369d9c819 [ 1170.392529][T19152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.413576][T19152] RSP: 002b:00007fc36ac04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1170.422372][T19152] RAX: ffffffffffffffda RBX: 00007fc36a015fa0 RCX: 00007fc369d9c819 [ 1170.430555][T19152] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1170.439343][T19152] RBP: 00007fc36ac04090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.447624][T19152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.455721][T19152] R13: 00007fc36a016038 R14: 00007fc36a015fa0 R15: 00007fff7c9c6bc8 [ 1170.464298][T19152] [ 1172.012280][T19178] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1172.077750][T19178] syzkaller0: entered promiscuous mode [ 1172.083724][T19178] syzkaller0: entered allmulticast mode [ 1172.325613][T19195] netlink: 'syz.3.4162': attribute type 8 has an invalid length. [ 1172.334329][T19195] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.4162'. [ 1174.606737][T19192] netlink: 'syz.0.4160': attribute type 12 has an invalid length. [ 1174.615063][T19192] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4160'. [ 1174.624688][T19193] netlink: 'syz.1.4161': attribute type 10 has an invalid length. [ 1174.640378][T19193] geneve0: entered promiscuous mode [ 1174.670008][T19193] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1174.694408][T19190] netlink: 'syz.1.4161': attribute type 10 has an invalid length. [ 1174.717240][T19197] netlink: 'syz.3.4163': attribute type 39 has an invalid length. [ 1175.530186][T19211] netlink: 'syz.2.4168': attribute type 8 has an invalid length. [ 1175.552336][T19212] netlink: 'syz.1.4167': attribute type 39 has an invalid length. [ 1175.593780][T19211] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4168'. [ 1175.809818][T19220] netlink: 'syz.2.4171': attribute type 8 has an invalid length. [ 1175.826444][T19220] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4171'. [ 1175.846198][T19222] netlink: 'syz.3.4172': attribute type 12 has an invalid length. [ 1175.854557][T19222] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1177.877990][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.901049][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.088314][T19231] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1180.113133][T19231] syzkaller0: entered promiscuous mode [ 1180.118778][T19231] syzkaller0: entered allmulticast mode [ 1182.931786][T19251] netlink: 'syz.1.4183': attribute type 8 has an invalid length. [ 1182.949765][T19251] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.4183'. [ 1182.953588][T19250] netlink: 'syz.0.4181': attribute type 8 has an invalid length. [ 1182.986369][T19250] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.4181'. [ 1183.533216][T19267] netlink: 'syz.0.4188': attribute type 2 has an invalid length. [ 1183.564602][T19267] netlink: 'syz.0.4188': attribute type 11 has an invalid length. [ 1183.582515][T19267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4188'. [ 1183.606605][T19270] FAULT_INJECTION: forcing a failure. [ 1183.606605][T19270] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.626818][T19270] CPU: 1 PID: 19270 Comm: syz.1.4189 Not tainted syzkaller #0 [ 1183.634463][T19270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1183.644922][T19270] Call Trace: [ 1183.647257][T19267] netlink: 150456 bytes leftover after parsing attributes in process `syz.0.4188'. [ 1183.648310][T19270] [ 1183.648358][T19270] dump_stack_lvl+0x18c/0x250 [ 1183.648402][T19270] ? show_regs_print_info+0x20/0x20 [ 1183.648431][T19270] ? load_image+0x420/0x420 [ 1183.648462][T19270] ? verify_lock_unused+0x140/0x140 [ 1183.648494][T19270] should_fail_ex+0x39d/0x4d0 [ 1183.648530][T19270] should_failslab+0x9/0x20 [ 1183.658385][T19267] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1183.661066][T19270] slab_pre_alloc_hook+0x59/0x310 [ 1183.661113][T19270] ? nsim_fib_event_nb+0x187/0x1080 [ 1183.661138][T19270] __kmem_cache_alloc_node+0x53/0x250 [ 1183.661172][T19270] ? nsim_fib_event_nb+0x187/0x1080 [ 1183.661195][T19270] kmalloc_trace+0x2a/0xe0 [ 1183.661228][T19270] nsim_fib_event_nb+0x187/0x1080 [ 1183.661253][T19270] ? read_lock_is_recursive+0x20/0x20 [ 1183.661285][T19270] notifier_call_chain+0x197/0x380 [ 1183.661313][T19270] ? atomic_notifier_call_chain+0x26/0x180 [ 1183.661342][T19270] atomic_notifier_call_chain+0xda/0x180 [ 1183.661370][T19270] call_fib_notifiers+0x31/0x60 [ 1183.661399][T19270] fib_table_flush+0xad9/0x12d0 [ 1183.661447][T19270] ? __node_free_rcu+0x80/0x80 [ 1183.661499][T19270] fib_disable_ip+0xfd/0x170 [ 1183.661527][T19270] fib_netdev_event+0x31f/0x490 [ 1183.661552][T19270] notifier_call_chain+0x197/0x380 [ 1183.661586][T19270] dev_close_many+0x2a9/0x410 [ 1183.661619][T19270] ? __dev_open+0x430/0x430 [ 1183.661642][T19270] ? perf_trace_lock+0xfc/0x3b0 [ 1183.661670][T19270] unregister_netdevice_many_notify+0x4c4/0x1900 [ 1183.661693][T19270] ? __nla_validate+0x50/0x50 [ 1183.661712][T19270] ? perf_trace_lock+0xfc/0x3b0 [ 1183.661746][T19270] ? unregister_netdevice_many+0x20/0x20 [ 1183.661771][T19270] ? unregister_netdevice_queue+0x1ae/0x370 [ 1183.661795][T19270] ? list_netdevice+0x730/0x730 [ 1183.831117][T19270] ? __nla_parse+0x40/0x50 [ 1183.835645][T19270] ? list_netdevice+0x730/0x730 [ 1183.840780][T19270] rtnl_dellink+0x500/0x7c0 [ 1183.845395][T19270] ? rtnl_newlink+0x20a0/0x20a0 [ 1183.850437][T19270] ? perf_trace_lock+0xfc/0x3b0 [ 1183.855390][T19270] ? trace_event_raw_event_lock+0x250/0x250 [ 1183.861443][T19270] ? mutex_lock_nested+0x20/0x20 [ 1183.866824][T19270] ? rtnl_newlink+0x20a0/0x20a0 [ 1183.872420][T19270] rtnetlink_rcv_msg+0x869/0xfa0 [ 1183.877483][T19270] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1183.882898][T19270] ? rtnetlink_bind+0x80/0x80 [ 1183.887597][T19270] ? mark_lock+0x94/0x320 [ 1183.892037][T19270] ? __lock_acquire+0x1273/0x7d40 [ 1183.897258][T19270] ? __kernel_text_address+0xd/0x30 [ 1183.902581][T19270] ? mark_lock+0x94/0x320 [ 1183.907026][T19270] ? mark_lock+0x94/0x320 [ 1183.911374][T19270] ? __lock_acquire+0x1273/0x7d40 [ 1183.916534][T19270] ? perf_trace_lock+0xfc/0x3b0 [ 1183.921571][T19270] ? verify_lock_unused+0x140/0x140 [ 1183.926793][T19270] ? verify_lock_unused+0x140/0x140 [ 1183.932025][T19270] ? perf_trace_lock+0xfc/0x3b0 [ 1183.937208][T19270] ? perf_trace_lock+0xfc/0x3b0 [ 1183.942212][T19270] netlink_rcv_skb+0x241/0x4d0 [ 1183.947162][T19270] ? rtnetlink_bind+0x80/0x80 [ 1183.952067][T19270] ? netlink_ack+0x1180/0x1180 [ 1183.957255][T19270] ? __lock_acquire+0x7d40/0x7d40 [ 1183.962387][T19270] ? net_generic+0x1e/0x240 [ 1183.967060][T19270] ? netlink_deliver_tap+0x2e/0x1b0 [ 1183.972645][T19270] netlink_unicast+0x751/0x8d0 [ 1183.977707][T19270] netlink_sendmsg+0x8d0/0xbf0 [ 1183.982507][T19270] ? netlink_getsockopt+0x590/0x590 [ 1183.987811][T19270] ? aa_sock_msg_perm+0x94/0x150 [ 1183.992888][T19270] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1183.998297][T19270] ? security_socket_sendmsg+0x80/0xa0 [ 1184.003861][T19270] ? netlink_getsockopt+0x590/0x590 [ 1184.009267][T19270] ____sys_sendmsg+0x5ba/0x960 [ 1184.014224][T19270] ? __asan_memset+0x22/0x40 [ 1184.019129][T19270] ? __sys_sendmsg_sock+0x30/0x30 [ 1184.024275][T19270] ? __import_iovec+0x5f2/0x850 [ 1184.029761][T19270] ? import_iovec+0x73/0xa0 [ 1184.034461][T19270] ___sys_sendmsg+0x2a6/0x360 [ 1184.039174][T19270] ? __sys_sendmsg+0x2a0/0x2a0 [ 1184.044070][T19270] ? __lock_acquire+0x7d40/0x7d40 [ 1184.049313][T19270] __se_sys_sendmsg+0x1c2/0x2b0 [ 1184.054272][T19270] ? __x64_sys_sendmsg+0x80/0x80 [ 1184.059243][T19270] ? lockdep_hardirqs_on+0x98/0x150 [ 1184.064491][T19270] do_syscall_64+0x55/0xa0 [ 1184.069077][T19270] ? clear_bhb_loop+0x40/0x90 [ 1184.074045][T19270] ? clear_bhb_loop+0x40/0x90 [ 1184.078831][T19270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1184.085094][T19270] RIP: 0033:0x7f0eedf9c819 [ 1184.089701][T19270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.109791][T19270] RSP: 002b:00007f0eeee0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1184.118748][T19270] RAX: ffffffffffffffda RBX: 00007f0eee215fa0 RCX: 00007f0eedf9c819 [ 1184.126914][T19270] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1184.135165][T19270] RBP: 00007f0eeee0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.143459][T19270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.151617][T19270] R13: 00007f0eee216038 R14: 00007f0eee215fa0 R15: 00007fffed677968 [ 1184.160226][T19270] [ 1184.790843][T19281] netlink: 'syz.0.4190': attribute type 2 has an invalid length. [ 1184.791049][T19278] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4190'. [ 1184.884106][T19281] netlink: 'syz.0.4190': attribute type 5 has an invalid length. [ 1184.965794][T19280] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1185.165594][T19280] syzkaller0: entered promiscuous mode [ 1185.185927][T19280] syzkaller0: entered allmulticast mode [ 1185.227627][T19288] netlink: 'syz.2.4196': attribute type 8 has an invalid length. [ 1185.245245][T19288] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4196'. [ 1187.463974][T19292] netlink: 'syz.2.4198': attribute type 4 has an invalid length. [ 1187.472388][T19292] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4198'. [ 1188.629940][T19314] netlink: 'syz.2.4205': attribute type 8 has an invalid length. [ 1188.638508][T19314] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4205'. [ 1188.788072][T19316] netpci0: tun_chr_ioctl cmd 2147767519 [ 1189.025128][T19320] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1189.069244][T19320] syzkaller0: entered promiscuous mode [ 1189.075120][T19320] syzkaller0: entered allmulticast mode [ 1191.686860][T19339] netlink: 'syz.3.4214': attribute type 8 has an invalid length. [ 1191.695836][T19339] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.4214'. [ 1195.030482][T19371] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1195.060082][T19371] syzkaller0: entered promiscuous mode [ 1195.066513][T19371] syzkaller0: entered allmulticast mode [ 1195.432749][T19373] netlink: 'syz.3.4224': attribute type 8 has an invalid length. [ 1195.441171][T19373] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.4224'. [ 1197.134743][T19375] netlink: 'syz.3.4225': attribute type 33 has an invalid length. [ 1197.142983][T19375] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4225'. [ 1197.338489][T19380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4227'. [ 1197.753309][T19393] netlink: 'syz.3.4231': attribute type 33 has an invalid length. [ 1197.767624][T19393] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4231'. [ 1198.012476][T19398] netlink: 'syz.2.4233': attribute type 8 has an invalid length. [ 1198.020298][T19398] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4233'. [ 1198.088729][T19400] FAULT_INJECTION: forcing a failure. [ 1198.088729][T19400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.103921][T19400] CPU: 0 PID: 19400 Comm: syz.2.4234 Not tainted syzkaller #0 [ 1198.111513][T19400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1198.122114][T19400] Call Trace: [ 1198.125521][T19400] [ 1198.128489][T19400] dump_stack_lvl+0x18c/0x250 [ 1198.133218][T19400] ? show_regs_print_info+0x20/0x20 [ 1198.138555][T19400] ? load_image+0x420/0x420 [ 1198.143183][T19400] ? __might_fault+0xaa/0x120 [ 1198.147999][T19400] ? __lock_acquire+0x7d40/0x7d40 [ 1198.153352][T19400] should_fail_ex+0x39d/0x4d0 [ 1198.158244][T19400] _copy_from_user+0x2f/0xe0 [ 1198.163043][T19400] generic_map_update_batch+0x54b/0x810 [ 1198.168704][T19400] ? rcu_read_unlock+0xa0/0xa0 [ 1198.173494][T19400] ? __fdget+0x180/0x210 [ 1198.178016][T19400] ? rcu_read_unlock+0xa0/0xa0 [ 1198.182890][T19400] bpf_map_do_batch+0x3d7/0x610 [ 1198.187930][T19400] __sys_bpf+0x381/0x890 [ 1198.192194][T19400] ? bpf_link_show_fdinfo+0x390/0x390 [ 1198.197875][T19400] ? lock_chain_count+0x20/0x20 [ 1198.202847][T19400] __x64_sys_bpf+0x7c/0x90 [ 1198.207400][T19400] do_syscall_64+0x55/0xa0 [ 1198.211833][T19400] ? clear_bhb_loop+0x40/0x90 [ 1198.216545][T19400] ? clear_bhb_loop+0x40/0x90 [ 1198.221258][T19400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1198.227448][T19400] RIP: 0033:0x7ff900d9c819 [ 1198.232132][T19400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.252808][T19400] RSP: 002b:00007ff901c6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1198.261265][T19400] RAX: ffffffffffffffda RBX: 00007ff901015fa0 RCX: 00007ff900d9c819 [ 1198.269275][T19400] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 1198.277968][T19400] RBP: 00007ff901c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.286211][T19400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1198.294291][T19400] R13: 00007ff901016038 R14: 00007ff901015fa0 R15: 00007ffd46ea8508 [ 1198.302305][T19400] [ 1198.669052][T19403] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1198.797650][T19403] syzkaller0: entered promiscuous mode [ 1198.815797][T19403] syzkaller0: entered allmulticast mode [ 1199.302442][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1199.330580][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1199.339416][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1199.351755][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1199.369172][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1199.387198][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1201.199001][T19423] netlink: 'syz.3.4242': attribute type 8 has an invalid length. [ 1201.212671][T19423] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.4242'. [ 1201.349052][T19425] netlink: 'syz.0.4243': attribute type 10 has an invalid length. [ 1201.531365][T19418] chnl_net:caif_netlink_parms(): no params data found [ 1201.552274][ T5784] Bluetooth: hci2: command tx timeout [ 1201.695598][T19418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.709612][T19418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.719202][T19418] bridge_slave_0: entered allmulticast mode [ 1201.727194][T19418] bridge_slave_0: entered promiscuous mode [ 1201.735374][T19418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.743098][T19418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.750387][T19418] bridge_slave_1: entered allmulticast mode [ 1201.797827][T19418] bridge_slave_1: entered promiscuous mode [ 1201.908408][T19418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.929616][T19418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.115610][T19418] team0: Port device team_slave_0 added [ 1202.149484][T19418] team0: Port device team_slave_1 added [ 1202.391549][T19418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.410353][T19418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.443920][T19418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.467645][T19447] FAULT_INJECTION: forcing a failure. [ 1202.467645][T19447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.501565][T19418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.531588][T19418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.558571][T19447] CPU: 1 PID: 19447 Comm: syz.3.4250 Not tainted syzkaller #0 [ 1202.566088][T19447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1202.576278][T19447] Call Trace: [ 1202.579695][T19447] [ 1202.582671][T19447] dump_stack_lvl+0x18c/0x250 [ 1202.587776][T19447] ? show_regs_print_info+0x20/0x20 [ 1202.593146][T19447] ? load_image+0x420/0x420 [ 1202.597899][T19447] ? __lock_acquire+0x7d40/0x7d40 [ 1202.603063][T19447] ? snprintf+0xe9/0x140 [ 1202.607359][T19447] should_fail_ex+0x39d/0x4d0 [ 1202.612286][T19447] _copy_to_user+0x2f/0xa0 [ 1202.616901][T19447] simple_read_from_buffer+0xe7/0x150 [ 1202.622605][T19447] proc_fail_nth_read+0x1e8/0x260 [ 1202.627866][T19447] ? proc_fault_inject_write+0x360/0x360 [ 1202.630925][T19418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.633720][T19447] ? fsnotify_perm+0x271/0x5e0 [ 1202.649298][T19447] ? proc_fault_inject_write+0x360/0x360 [ 1202.655070][T19447] vfs_read+0x28b/0x970 [ 1202.659307][T19447] ? kernel_read+0x1e0/0x1e0 [ 1202.663943][T19447] ? __fget_files+0x28/0x4b0 [ 1202.668580][T19447] ? __fget_files+0x28/0x4b0 [ 1202.673416][T19447] ? __fget_files+0x43d/0x4b0 [ 1202.678308][T19447] ? __fdget_pos+0x2a3/0x330 [ 1202.683017][T19447] ? ksys_read+0x75/0x260 [ 1202.687557][T19447] ksys_read+0x150/0x260 [ 1202.692098][T19447] ? vfs_write+0x990/0x990 [ 1202.696633][T19447] ? lockdep_hardirqs_on+0x98/0x150 [ 1202.701852][T19447] do_syscall_64+0x55/0xa0 [ 1202.706284][T19447] ? clear_bhb_loop+0x40/0x90 [ 1202.710994][T19447] ? clear_bhb_loop+0x40/0x90 [ 1202.715727][T19447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1202.721714][T19447] RIP: 0033:0x7f523915d04e [ 1202.726152][T19447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1202.746386][T19447] RSP: 002b:00007f5239fcbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1202.755003][T19447] RAX: ffffffffffffffda RBX: 00007f5239fcc6c0 RCX: 00007f523915d04e [ 1202.763343][T19447] RDX: 000000000000000f RSI: 00007f5239fcc0a0 RDI: 0000000000000005 [ 1202.771333][T19447] RBP: 00007f5239fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.779407][T19447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1202.787568][T19447] R13: 00007f5239416038 R14: 00007f5239415fa0 R15: 00007fff7efcfb18 [ 1202.795882][T19447] [ 1202.935717][T19418] hsr_slave_0: entered promiscuous mode [ 1202.949113][T19418] hsr_slave_1: entered promiscuous mode [ 1202.975065][T19418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1203.023103][T19418] Cannot create hsr debugfs directory [ 1203.041332][T19449] netlink: 'syz.2.4248': attribute type 21 has an invalid length. [ 1203.057972][T19456] netlink: 'syz.0.4253': attribute type 8 has an invalid length. [ 1203.066178][T19456] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.4253'. [ 1203.071214][T19449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1203.083076][T19449] IPv6: NLM_F_CREATE should be set when creating new route [ 1203.090465][T19449] IPv6: NLM_F_CREATE should be set when creating new route [ 1203.097818][T19449] IPv6: NLM_F_CREATE should be set when creating new route [ 1203.255628][T19459] syzkaller0: entered promiscuous mode [ 1203.271180][T19459] syzkaller0: entered allmulticast mode [ 1203.360796][T19461] FAULT_INJECTION: forcing a failure. [ 1203.360796][T19461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.374253][T19466] netlink: 'syz.2.4255': attribute type 10 has an invalid length. [ 1203.382668][T19466] batman_adv: batadv0: Interface deactivated: macvlan1 [ 1203.389669][T19461] CPU: 1 PID: 19461 Comm: syz.0.4254 Not tainted syzkaller #0 [ 1203.397172][T19461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1203.407441][T19461] Call Trace: [ 1203.410836][T19461] [ 1203.413787][T19461] dump_stack_lvl+0x18c/0x250 [ 1203.418753][T19461] ? show_regs_print_info+0x20/0x20 [ 1203.424077][T19461] ? load_image+0x420/0x420 [ 1203.428689][T19461] ? __might_fault+0xaa/0x120 [ 1203.433394][T19461] ? __lock_acquire+0x7d40/0x7d40 [ 1203.438788][T19461] ? __might_fault+0xaa/0x120 [ 1203.443574][T19461] should_fail_ex+0x39d/0x4d0 [ 1203.448280][T19461] _copy_from_iter+0x1d9/0x12e0 [ 1203.453253][T19461] ? __might_fault+0xaa/0x120 [ 1203.457954][T19461] ? _copy_from_iter+0x24e/0x12e0 [ 1203.463177][T19461] ? __virt_addr_valid+0x18c/0x540 [ 1203.468309][T19461] ? __lock_acquire+0x7d40/0x7d40 [ 1203.473374][T19461] ? copyout_mc+0x70/0x70 [ 1203.477905][T19461] ? copyout_mc+0x70/0x70 [ 1203.482258][T19461] ? __virt_addr_valid+0x18c/0x540 [ 1203.487578][T19461] ? page_copy_sane+0x16a/0x270 [ 1203.492628][T19461] copy_page_from_iter+0x7b/0x100 [ 1203.497894][T19461] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1203.503823][T19461] tun_get_user+0x15db/0x3ca0 [ 1203.508721][T19461] ? aa_file_perm+0x11b/0xee0 [ 1203.513419][T19461] ? rcu_read_unlock+0xa0/0xa0 [ 1203.518234][T19461] ? tun_get+0x1c/0x2e0 [ 1203.522403][T19461] ? __lock_acquire+0x7d40/0x7d40 [ 1203.527621][T19461] ? tun_get+0x1c/0x2e0 [ 1203.531791][T19461] tun_chr_write_iter+0x119/0x200 [ 1203.537110][T19461] vfs_write+0x46c/0x990 [ 1203.541549][T19461] ? file_end_write+0x250/0x250 [ 1203.546435][T19461] ? __fget_files+0x43d/0x4b0 [ 1203.551237][T19461] ? __fdget_pos+0x1d8/0x330 [ 1203.556018][T19461] ? ksys_write+0x75/0x260 [ 1203.560457][T19461] ksys_write+0x150/0x260 [ 1203.564932][T19461] ? __ia32_sys_read+0x90/0x90 [ 1203.569748][T19461] ? lockdep_hardirqs_on+0x98/0x150 [ 1203.574979][T19461] do_syscall_64+0x55/0xa0 [ 1203.579728][T19461] ? clear_bhb_loop+0x40/0x90 [ 1203.584605][T19461] ? clear_bhb_loop+0x40/0x90 [ 1203.589359][T19461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1203.595363][T19461] RIP: 0033:0x7fc369d9c819 [ 1203.599890][T19461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.619869][T19461] RSP: 002b:00007fc36ac04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1203.628325][T19461] RAX: ffffffffffffffda RBX: 00007fc36a015fa0 RCX: 00007fc369d9c819 [ 1203.636516][T19461] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000006 [ 1203.644610][T19461] RBP: 00007fc36ac04090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.652696][T19461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.660887][T19461] R13: 00007fc36a016038 R14: 00007fc36a015fa0 R15: 00007fff7c9c6bc8 [ 1203.669064][T19461] [ 1203.699362][ T5784] Bluetooth: hci2: command tx timeout [ 1203.718273][T19466] macvlan1: left promiscuous mode [ 1203.730949][T19466] macvlan1: entered allmulticast mode [ 1203.747299][T19466] batman_adv: batadv0: Removing interface: macvlan1 [ 1203.770028][T19466] veth1_vlan: entered allmulticast mode [ 1203.795754][T19466] team0: Port device macvlan1 added [ 1204.057942][T19463] syzkaller0: entered promiscuous mode [ 1204.073902][T19463] syzkaller0: entered allmulticast mode [ 1205.711339][ T5784] Bluetooth: hci2: command tx timeout [ 1207.800637][ T5784] Bluetooth: hci2: command tx timeout [ 1209.659661][T19476] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4259'. [ 1209.850337][T19485] netlink: 'syz.2.4261': attribute type 8 has an invalid length. [ 1209.888993][T19485] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4261'. [ 1210.335884][T19418] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1210.359274][T19418] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1210.373939][T19418] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1210.435104][T19418] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1210.602104][T19418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.631219][T19418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.707370][ T7628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.714844][ T7628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.732821][ T7628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.740531][ T7628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.762115][T19505] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4268'. [ 1211.196986][T19520] netlink: 'syz.2.4271': attribute type 10 has an invalid length. [ 1211.272276][T19526] netlink: 'syz.3.4272': attribute type 8 has an invalid length. [ 1211.280575][T19526] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.4272'. [ 1211.445270][T19520] team0 (unregistering): Port device team_slave_0 removed [ 1211.618083][T19520] team0 (unregistering): Port device team_slave_1 removed [ 1211.796106][T19520] team0 (unregistering): Port device wlan1 removed [ 1211.822534][T19520] veth1_vlan: left allmulticast mode [ 1211.920287][T19520] team0 (unregistering): Port device macvlan1 removed [ 1212.138977][T19418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.673239][T19418] veth0_vlan: entered promiscuous mode [ 1212.699893][T19418] veth1_vlan: entered promiscuous mode [ 1212.780892][T19418] veth0_macvtap: entered promiscuous mode [ 1212.806236][T19418] veth1_macvtap: entered promiscuous mode [ 1212.848963][T19418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.869980][T19418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.880630][T19418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.898382][T19418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.911674][T19418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1212.935802][T19418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.955281][T19418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.969893][T19418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.990748][T19418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.007730][T19418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.019179][T19418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.035973][T19418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.047721][T19418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.066767][T19418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.117087][T19418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.129008][T19418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.154150][T19418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.170270][T19418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.567411][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.591622][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.631321][T19556] netlink: 'syz.2.4278': attribute type 1 has an invalid length. [ 1213.639677][T19556] netlink: 'syz.2.4278': attribute type 2 has an invalid length. [ 1213.655198][ T7628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.663517][T19556] netlink: 'syz.2.4278': attribute type 2 has an invalid length. [ 1213.672939][ T7628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.680597][T19556] netlink: 'syz.2.4278': attribute type 3 has an invalid length. [ 1213.690473][T19556] netlink: 'syz.2.4278': attribute type 4 has an invalid length. [ 1213.700306][T19556] netlink: 'syz.2.4278': attribute type 5 has an invalid length. [ 1213.729879][T19556] netlink: 'syz.2.4278': attribute type 6 has an invalid length. [ 1213.766957][T19556] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.4278'. [ 1213.963438][T19567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1214.831329][ C0] icmp: detected local route for 172.20.20.22 during ICMP sending, src 10.1.1.2 [ 1215.182310][T19585] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1215.255259][T19585] syzkaller0: entered promiscuous mode [ 1215.270438][T19585] syzkaller0: entered allmulticast mode [ 1219.523348][T19598] netlink: 133 bytes leftover after parsing attributes in process `syz.2.4293'. [ 1219.829377][T19628] FAULT_INJECTION: forcing a failure. [ 1219.829377][T19628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1219.859726][T19628] CPU: 1 PID: 19628 Comm: syz.0.4302 Not tainted syzkaller #0 [ 1219.867905][T19628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1219.878107][T19628] Call Trace: [ 1219.881562][T19628] [ 1219.884550][T19628] dump_stack_lvl+0x18c/0x250 [ 1219.889292][T19628] ? show_regs_print_info+0x20/0x20 [ 1219.894755][T19628] ? load_image+0x420/0x420 [ 1219.899402][T19628] ? __might_fault+0xaa/0x120 [ 1219.904301][T19628] ? __lock_acquire+0x7d40/0x7d40 [ 1219.909560][T19628] should_fail_ex+0x39d/0x4d0 [ 1219.914481][T19628] _copy_from_user+0x2f/0xe0 [ 1219.919295][T19628] kstrtouint_from_user+0xde/0x170 [ 1219.924523][T19628] ? kstrtol_from_user+0x190/0x190 [ 1219.929853][T19628] proc_fail_nth_write+0x8f/0x250 [ 1219.934904][T19628] ? proc_fail_nth_read+0x260/0x260 [ 1219.940302][T19628] ? proc_fail_nth_read+0x260/0x260 [ 1219.945606][T19628] vfs_write+0x296/0x990 [ 1219.949974][T19628] ? file_end_write+0x250/0x250 [ 1219.954845][T19628] ? __fget_files+0x28/0x4b0 [ 1219.959463][T19628] ? __fget_files+0x28/0x4b0 [ 1219.964080][T19628] ? __fget_files+0x43d/0x4b0 [ 1219.968781][T19628] ? __fdget_pos+0x2a3/0x330 [ 1219.973478][T19628] ? ksys_write+0x75/0x260 [ 1219.978029][T19628] ksys_write+0x150/0x260 [ 1219.982505][T19628] ? __ia32_sys_read+0x90/0x90 [ 1219.987394][T19628] ? lockdep_hardirqs_on+0x98/0x150 [ 1219.992706][T19628] do_syscall_64+0x55/0xa0 [ 1219.997398][T19628] ? clear_bhb_loop+0x40/0x90 [ 1220.002188][T19628] ? clear_bhb_loop+0x40/0x90 [ 1220.007171][T19628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1220.013174][T19628] RIP: 0033:0x7fc369d5d04e [ 1220.017611][T19628] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1220.037773][T19628] RSP: 002b:00007fc36ac03fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1220.046222][T19628] RAX: ffffffffffffffda RBX: 00007fc36ac046c0 RCX: 00007fc369d5d04e [ 1220.054297][T19628] RDX: 0000000000000001 RSI: 00007fc36ac040a0 RDI: 0000000000000004 [ 1220.062631][T19628] RBP: 00007fc36ac04090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.070971][T19628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1220.079304][T19628] R13: 00007fc36a016038 R14: 00007fc36a015fa0 R15: 00007fff7c9c6bc8 [ 1220.087843][T19628] [ 1220.355617][T19640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4308'. [ 1222.220056][T19649] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1222.319655][T19649] syzkaller0: entered promiscuous mode [ 1222.329290][T19649] syzkaller0: entered allmulticast mode [ 1226.366844][T19693] validate_nla: 5 callbacks suppressed [ 1226.366874][T19693] netlink: 'syz.4.4326': attribute type 21 has an invalid length. [ 1226.388049][T19693] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4326'. [ 1226.430062][T19693] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4326'. [ 1226.504266][T19693] netlink: 'syz.4.4326': attribute type 10 has an invalid length. [ 1226.540224][T19693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4326'. [ 1226.552909][T19693] batadv0: entered promiscuous mode [ 1226.569923][T19693] batadv0: entered allmulticast mode [ 1226.616367][T19693] bridge0: port 3(batadv0) entered blocking state [ 1226.646482][T19693] bridge0: port 3(batadv0) entered disabled state [ 1226.734352][T19693] bridge0: port 3(batadv0) entered blocking state [ 1226.741451][T19693] bridge0: port 3(batadv0) entered forwarding state [ 1227.030584][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1227.041076][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1227.439341][T19697] syzkaller0: entered promiscuous mode [ 1227.498168][T19697] syzkaller0: entered allmulticast mode [ 1228.040459][T19718] netlink: 'syz.4.4331': attribute type 9 has an invalid length. [ 1228.050094][T19718] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4331'. [ 1228.147245][T19720] netlink: 204416 bytes leftover after parsing attributes in process `syz.4.4331'. [ 1228.537405][T19733] netlink: 'syz.3.4333': attribute type 29 has an invalid length. [ 1228.587369][T19734] netlink: 'syz.3.4333': attribute type 29 has an invalid length. [ 1230.540697][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4331'. [ 1230.558817][T19725] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1230.575992][T19725] syzkaller0: entered promiscuous mode [ 1230.582969][T19725] syzkaller0: entered allmulticast mode [ 1230.599864][T19733] netlink: 'syz.3.4333': attribute type 29 has an invalid length. [ 1233.750524][T19761] netlink: 'syz.0.4340': attribute type 4 has an invalid length. [ 1233.925992][T19768] netlink: 'syz.0.4342': attribute type 21 has an invalid length. [ 1233.952265][T19768] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4342'. [ 1233.988907][T19774] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4342'. [ 1234.253595][T19773] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1234.320737][T19773] syzkaller0: entered promiscuous mode [ 1234.327098][T19773] syzkaller0: entered allmulticast mode [ 1234.345510][T19774] netlink: 'syz.0.4342': attribute type 10 has an invalid length. [ 1234.353985][T19774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4342'. [ 1234.370294][T19774] batadv0: entered promiscuous mode [ 1234.375822][T19774] batadv0: entered allmulticast mode [ 1234.387994][T19774] bridge0: port 3(batadv0) entered blocking state [ 1234.400640][T19774] bridge0: port 3(batadv0) entered disabled state [ 1234.410427][T19774] bridge0: port 3(batadv0) entered blocking state [ 1234.417198][T19774] bridge0: port 3(batadv0) entered forwarding state [ 1234.828200][T18598] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1234.838094][T18598] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1237.410678][T19806] netlink: 'syz.4.4352': attribute type 4 has an invalid length. [ 1237.666382][T19809] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4355'. [ 1237.687660][T19804] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1237.802342][T19804] syzkaller0: entered promiscuous mode [ 1237.810059][T19804] syzkaller0: entered allmulticast mode [ 1239.315194][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.321884][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.708332][T19825] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4358'. [ 1240.718210][T19828] netlink: 'syz.3.4358': attribute type 10 has an invalid length. [ 1240.726724][T19828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4358'. [ 1240.736478][T19828] batadv0: entered promiscuous mode [ 1240.742068][T19828] batadv0: entered allmulticast mode [ 1240.748039][T19828] bridge0: port 3(batadv0) entered blocking state [ 1240.771544][T19828] bridge0: port 3(batadv0) entered disabled state [ 1240.779809][T19828] bridge0: port 3(batadv0) entered blocking state [ 1240.786797][T19828] bridge0: port 3(batadv0) entered forwarding state [ 1241.020258][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1241.029969][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1241.961972][T19850] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1242.180382][T19850] syzkaller0: entered promiscuous mode [ 1242.207744][T19850] syzkaller0: entered allmulticast mode [ 1242.266154][T19871] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4370'. [ 1244.898761][T19871] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4370'. [ 1245.439648][T19890] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1245.586601][T19890] netlink: 'syz.2.4374': attribute type 10 has an invalid length. [ 1245.620100][T19890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1245.644363][T19890] batadv0: entered promiscuous mode [ 1245.663338][T19890] batadv0: entered allmulticast mode [ 1245.747946][T19890] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1245.822255][T19900] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1245.945218][T19900] syzkaller0: entered promiscuous mode [ 1245.952580][T19900] syzkaller0: entered allmulticast mode [ 1248.111168][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.4 [ 1248.941750][T19946] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4389'. [ 1248.971077][T19946] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4389'. [ 1248.987926][T19946] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4389'. [ 1249.031560][T19946] netlink: 'syz.3.4389': attribute type 29 has an invalid length. [ 1249.059628][T19946] netlink: 'syz.3.4389': attribute type 29 has an invalid length. [ 1250.093120][T19969] netlink: 'syz.4.4396': attribute type 5 has an invalid length. [ 1250.632765][T19979] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1250.708698][T19979] syzkaller0: entered promiscuous mode [ 1250.720989][T19979] syzkaller0: entered allmulticast mode [ 1250.744584][T19984] netlink: 'syz.3.4402': attribute type 13 has an invalid length. [ 1250.760354][T19984] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4402'. [ 1250.787347][T19984] erspan0: refused to change device tx_queue_len [ 1253.293979][T19989] IPv6: NLM_F_CREATE should be specified when creating new route [ 1253.576636][T19999] netlink: 'syz.3.4409': attribute type 21 has an invalid length. [ 1253.815239][T20013] netlink: 'syz.3.4412': attribute type 1 has an invalid length. [ 1253.823238][T20013] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.4412'. [ 1254.441208][T20028] netlink: 'syz.2.4417': attribute type 11 has an invalid length. [ 1255.411681][T20030] delete_channel: no stack [ 1255.416569][T20030] delete_channel: no stack [ 1256.361568][T20035] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1256.394372][T20039] FAULT_INJECTION: forcing a failure. [ 1256.394372][T20039] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.456796][T20039] CPU: 1 PID: 20039 Comm: syz.0.4421 Not tainted syzkaller #0 [ 1256.464525][T20039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1256.474699][T20039] Call Trace: [ 1256.477997][T20039] [ 1256.481033][T20039] dump_stack_lvl+0x18c/0x250 [ 1256.485752][T20039] ? show_regs_print_info+0x20/0x20 [ 1256.491162][T20039] ? load_image+0x420/0x420 [ 1256.495715][T20039] ? __might_sleep+0xe0/0xe0 [ 1256.500413][T20039] ? __lock_acquire+0x7d40/0x7d40 [ 1256.505475][T20039] should_fail_ex+0x39d/0x4d0 [ 1256.510283][T20039] should_failslab+0x9/0x20 [ 1256.514934][T20039] slab_pre_alloc_hook+0x59/0x310 [ 1256.520101][T20039] ? __lock_acquire+0x7d40/0x7d40 [ 1256.525407][T20039] kmem_cache_alloc_node+0x60/0x320 [ 1256.530887][T20039] ? __alloc_skb+0x103/0x2c0 [ 1256.535511][T20039] __alloc_skb+0x103/0x2c0 [ 1256.539942][T20039] netlink_sendmsg+0x66a/0xbf0 [ 1256.544731][T20039] ? netlink_getsockopt+0x590/0x590 [ 1256.550040][T20039] ? aa_sock_msg_perm+0x94/0x150 [ 1256.555007][T20039] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1256.560396][T20039] ? security_socket_sendmsg+0x80/0xa0 [ 1256.565870][T20039] ? netlink_getsockopt+0x590/0x590 [ 1256.571180][T20039] ____sys_sendmsg+0x5ba/0x960 [ 1256.575975][T20039] ? __asan_memset+0x22/0x40 [ 1256.580585][T20039] ? __sys_sendmsg_sock+0x30/0x30 [ 1256.585822][T20039] ? __import_iovec+0x5f2/0x850 [ 1256.590956][T20039] ? import_iovec+0x73/0xa0 [ 1256.595671][T20039] ___sys_sendmsg+0x2a6/0x360 [ 1256.600451][T20039] ? get_pid_task+0x20/0x1e0 [ 1256.605153][T20039] ? __sys_sendmsg+0x2a0/0x2a0 [ 1256.609952][T20039] ? __lock_acquire+0x7d40/0x7d40 [ 1256.615098][T20039] __se_sys_sendmsg+0x1c2/0x2b0 [ 1256.620097][T20039] ? __x64_sys_sendmsg+0x80/0x80 [ 1256.625180][T20039] ? lockdep_hardirqs_on+0x98/0x150 [ 1256.630428][T20039] do_syscall_64+0x55/0xa0 [ 1256.634873][T20039] ? clear_bhb_loop+0x40/0x90 [ 1256.639827][T20039] ? clear_bhb_loop+0x40/0x90 [ 1256.644697][T20039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1256.650613][T20039] RIP: 0033:0x7fc369d9c819 [ 1256.655235][T20039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.675321][T20039] RSP: 002b:00007fc36ac04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.684188][T20039] RAX: ffffffffffffffda RBX: 00007fc36a015fa0 RCX: 00007fc369d9c819 [ 1256.692313][T20039] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000008 [ 1256.700311][T20039] RBP: 00007fc36ac04090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.708559][T20039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.716808][T20039] R13: 00007fc36a016038 R14: 00007fc36a015fa0 R15: 00007fff7c9c6bc8 [ 1256.724982][T20039] [ 1256.733331][T20035] syzkaller0: entered promiscuous mode [ 1256.739208][T20035] syzkaller0: entered allmulticast mode [ 1259.546394][T20068] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4427'. [ 1261.448025][T20083] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1261.580226][T20083] syzkaller0: entered promiscuous mode [ 1261.605523][T20083] syzkaller0: entered allmulticast mode [ 1264.280613][T20089] netlink: 'syz.4.4432': attribute type 41 has an invalid length. [ 1267.039318][T20148] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1267.169485][T20148] syzkaller0: entered promiscuous mode [ 1267.175920][T20148] syzkaller0: entered allmulticast mode [ 1271.199522][T20219] netlink: 'syz.4.4468': attribute type 1 has an invalid length. [ 1271.208951][T20219] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.4468'. [ 1271.869989][T20221] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1272.133164][T20221] syzkaller0: entered promiscuous mode [ 1272.153109][T20221] syzkaller0: entered allmulticast mode [ 1272.637224][T20231] delete_channel: no stack [ 1272.661498][T20231] delete_channel: no stack [ 1272.709554][T20242] FAULT_INJECTION: forcing a failure. [ 1272.709554][T20242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1272.734815][T20242] CPU: 0 PID: 20242 Comm: syz.3.4476 Not tainted syzkaller #0 [ 1272.742365][T20242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1272.752560][T20242] Call Trace: [ 1272.755898][T20242] [ 1272.758955][T20242] dump_stack_lvl+0x18c/0x250 [ 1272.763786][T20242] ? show_regs_print_info+0x20/0x20 [ 1272.769051][T20242] ? load_image+0x420/0x420 [ 1272.773872][T20242] ? __lock_acquire+0x7d40/0x7d40 [ 1272.779054][T20242] ? __virt_addr_valid+0x18c/0x540 [ 1272.784231][T20242] should_fail_ex+0x39d/0x4d0 [ 1272.789050][T20242] _copy_to_user+0x2f/0xa0 [ 1272.793733][T20242] map_lookup_elem+0x5cb/0x7c0 [ 1272.798615][T20242] __sys_bpf+0x438/0x890 [ 1272.802886][T20242] ? bpf_link_show_fdinfo+0x390/0x390 [ 1272.808815][T20242] ? lock_chain_count+0x20/0x20 [ 1272.813875][T20242] __x64_sys_bpf+0x7c/0x90 [ 1272.818482][T20242] do_syscall_64+0x55/0xa0 [ 1272.822912][T20242] ? clear_bhb_loop+0x40/0x90 [ 1272.827607][T20242] ? clear_bhb_loop+0x40/0x90 [ 1272.832305][T20242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1272.838242][T20242] RIP: 0033:0x7f523919c819 [ 1272.842858][T20242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.863069][T20242] RSP: 002b:00007f5239fcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1272.872048][T20242] RAX: ffffffffffffffda RBX: 00007f5239415fa0 RCX: 00007f523919c819 [ 1272.880237][T20242] RDX: 0000000000000020 RSI: 0000200000000c80 RDI: 0000000000000001 [ 1272.888321][T20242] RBP: 00007f5239fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 1272.896577][T20242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.905022][T20242] R13: 00007f5239416038 R14: 00007f5239415fa0 R15: 00007fff7efcfb18 [ 1272.913208][T20242] [ 1277.322108][T20283] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1277.389196][T20289] netlink: 'syz.2.4485': attribute type 1 has an invalid length. [ 1277.418390][T20289] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.4485'. [ 1277.428187][T20283] syzkaller0: entered promiscuous mode [ 1277.428253][T20283] syzkaller0: entered allmulticast mode [ 1277.800075][T20299] FAULT_INJECTION: forcing a failure. [ 1277.800075][T20299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1277.821364][T20299] CPU: 0 PID: 20299 Comm: syz.3.4489 Not tainted syzkaller #0 [ 1277.829283][T20299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1277.839503][T20299] Call Trace: [ 1277.842828][T20299] [ 1277.845896][T20299] dump_stack_lvl+0x18c/0x250 [ 1277.850741][T20299] ? show_regs_print_info+0x20/0x20 [ 1277.856020][T20299] ? load_image+0x420/0x420 [ 1277.860699][T20299] ? __might_fault+0xaa/0x120 [ 1277.865546][T20299] ? __lock_acquire+0x7d40/0x7d40 [ 1277.870791][T20299] should_fail_ex+0x39d/0x4d0 [ 1277.875724][T20299] _copy_from_user+0x2f/0xe0 [ 1277.880566][T20299] csum_and_copy_from_iter+0x476/0x14a0 [ 1277.886273][T20299] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1277.892335][T20299] ip_generic_getfrag+0x163/0x2f0 [ 1277.897573][T20299] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1277.902470][T20299] ? skb_put+0x11b/0x210 [ 1277.906748][T20299] __ip_append_data+0x2f11/0x3d40 [ 1277.911933][T20299] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1277.916837][T20299] ? mark_lock+0x94/0x320 [ 1277.921201][T20299] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1277.927339][T20299] ? ip_setup_cork+0x860/0x860 [ 1277.932322][T20299] ? ip_setup_cork+0x530/0x860 [ 1277.937485][T20299] ip_append_data+0x10d/0x180 [ 1277.942303][T20299] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1277.947361][T20299] udp_sendmsg+0x438/0x23b0 [ 1277.951921][T20299] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1277.956808][T20299] ? udp_cmsg_send+0x350/0x350 [ 1277.961614][T20299] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1277.967727][T20299] ? lock_chain_count+0x20/0x20 [ 1277.972715][T20299] ? inet_sendmsg+0x14b/0x2f0 [ 1277.977521][T20299] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1277.983181][T20299] ? _local_bh_enable+0xa0/0xa0 [ 1277.988326][T20299] ? do_raw_spin_unlock+0x121/0x230 [ 1277.993560][T20299] ? inet_sendmsg+0x14b/0x2f0 [ 1277.998263][T20299] ? inet_sendmsg+0x14b/0x2f0 [ 1278.003055][T20299] ? inet_send_prepare+0x260/0x260 [ 1278.008208][T20299] ____sys_sendmsg+0x5ba/0x960 [ 1278.013258][T20299] ? __lock_acquire+0x7d40/0x7d40 [ 1278.018408][T20299] ? __sys_sendmsg_sock+0x30/0x30 [ 1278.023455][T20299] ? __import_iovec+0x3fa/0x850 [ 1278.028344][T20299] ? import_iovec+0x73/0xa0 [ 1278.032886][T20299] ___sys_sendmsg+0x2a6/0x360 [ 1278.037595][T20299] ? get_pid_task+0x20/0x1e0 [ 1278.042237][T20299] ? __sys_sendmsg+0x2a0/0x2a0 [ 1278.047146][T20299] ? __lock_acquire+0x7d40/0x7d40 [ 1278.052426][T20299] __se_sys_sendmsg+0x1c2/0x2b0 [ 1278.057685][T20299] ? __x64_sys_sendmsg+0x80/0x80 [ 1278.062871][T20299] ? lockdep_hardirqs_on+0x98/0x150 [ 1278.068418][T20299] do_syscall_64+0x55/0xa0 [ 1278.073225][T20299] ? clear_bhb_loop+0x40/0x90 [ 1278.078016][T20299] ? clear_bhb_loop+0x40/0x90 [ 1278.082986][T20299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1278.089529][T20299] RIP: 0033:0x7f523919c819 [ 1278.093970][T20299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.114185][T20299] RSP: 002b:00007f5239fcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1278.122839][T20299] RAX: ffffffffffffffda RBX: 00007f5239415fa0 RCX: 00007f523919c819 [ 1278.131225][T20299] RDX: 000000000000e900 RSI: 0000200000000b40 RDI: 0000000000000006 [ 1278.139868][T20299] RBP: 00007f5239fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 1278.148328][T20299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1278.156595][T20299] R13: 00007f5239416038 R14: 00007f5239415fa0 R15: 00007fff7efcfb18 [ 1278.164716][T20299] [ 1278.367880][T20288] delete_channel: no stack [ 1278.373171][T20288] delete_channel: no stack [ 1281.490601][T20308] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1281.624876][T20308] syzkaller0: entered promiscuous mode [ 1281.630699][T20308] syzkaller0: entered allmulticast mode [ 1282.286590][T20339] netlink: 'syz.4.4500': attribute type 29 has an invalid length. [ 1284.400253][T20339] netlink: 'syz.4.4500': attribute type 29 has an invalid length. [ 1284.735376][T20348] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1284.869009][T20348] syzkaller0: entered promiscuous mode [ 1284.875221][T20348] syzkaller0: entered allmulticast mode [ 1288.364673][T20376] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.4513'. [ 1290.985288][T20425] FAULT_INJECTION: forcing a failure. [ 1290.985288][T20425] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.047312][T20425] CPU: 0 PID: 20425 Comm: syz.0.4530 Not tainted syzkaller #0 [ 1291.055129][T20425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1291.065500][T20425] Call Trace: [ 1291.068821][T20425] [ 1291.071878][T20425] dump_stack_lvl+0x18c/0x250 [ 1291.076620][T20425] ? show_regs_print_info+0x20/0x20 [ 1291.081869][T20425] ? load_image+0x420/0x420 [ 1291.086424][T20425] ? __lock_acquire+0x7d40/0x7d40 [ 1291.091492][T20425] should_fail_ex+0x39d/0x4d0 [ 1291.096200][T20425] should_failslab+0x9/0x20 [ 1291.100826][T20425] slab_pre_alloc_hook+0x59/0x310 [ 1291.105999][T20425] ? bpf_test_init+0x9f/0x140 [ 1291.110716][T20425] ? bpf_test_init+0x9f/0x140 [ 1291.115529][T20425] __kmem_cache_alloc_node+0x53/0x250 [ 1291.121611][T20425] ? bpf_test_init+0x9f/0x140 [ 1291.126670][T20425] __kmalloc+0xa4/0x230 [ 1291.131030][T20425] bpf_test_init+0x9f/0x140 [ 1291.135743][T20425] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 1291.141232][T20425] ? dev_put+0x80/0x80 [ 1291.145503][T20425] ? dev_put+0x80/0x80 [ 1291.149589][T20425] bpf_prog_test_run+0x321/0x390 [ 1291.154786][T20425] __sys_bpf+0x49d/0x890 [ 1291.159402][T20425] ? bpf_link_show_fdinfo+0x390/0x390 [ 1291.164890][T20425] ? lock_chain_count+0x20/0x20 [ 1291.169764][T20425] __x64_sys_bpf+0x7c/0x90 [ 1291.174301][T20425] do_syscall_64+0x55/0xa0 [ 1291.178729][T20425] ? clear_bhb_loop+0x40/0x90 [ 1291.183607][T20425] ? clear_bhb_loop+0x40/0x90 [ 1291.188298][T20425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1291.194381][T20425] RIP: 0033:0x7fc369d9c819 [ 1291.198829][T20425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.219350][T20425] RSP: 002b:00007fc36ac04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1291.227886][T20425] RAX: ffffffffffffffda RBX: 00007fc36a015fa0 RCX: 00007fc369d9c819 [ 1291.235973][T20425] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1291.244229][T20425] RBP: 00007fc36ac04090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.252656][T20425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.260989][T20425] R13: 00007fc36a016038 R14: 00007fc36a015fa0 R15: 00007fff7c9c6bc8 [ 1291.269079][T20425] [ 1291.275600][T20427] netlink: 'syz.4.4531': attribute type 10 has an invalid length. [ 1291.386884][T20427] team0: Port device syz_tun added [ 1291.810074][T20435] syzkaller0: entered promiscuous mode [ 1291.828525][T20435] syzkaller0: entered allmulticast mode [ 1291.874295][T20446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4537'. [ 1292.486090][T20446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4537'. [ 1292.510400][T20447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4537'. [ 1293.025849][T20450] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4537'. [ 1294.140283][T20485] netlink: 'syz.0.4548': attribute type 10 has an invalid length. [ 1295.187309][T20506] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4552'. [ 1295.434942][T20504] syzkaller0: entered promiscuous mode [ 1295.451151][T20504] syzkaller0: entered allmulticast mode [ 1295.784348][T20511] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4555'. [ 1296.374514][T20534] netlink: 'syz.3.4562': attribute type 10 has an invalid length. [ 1297.544152][T20561] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4571'. [ 1297.565213][T20561] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4571'. [ 1297.669931][T20561] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4571'. [ 1297.769106][T20569] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4574'. [ 1297.792515][T20569] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4574'. [ 1297.808779][T20569] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4574'. [ 1297.809308][T20573] netlink: 'syz.0.4575': attribute type 29 has an invalid length. [ 1297.852674][T20573] netlink: 'syz.0.4575': attribute type 29 has an invalid length. [ 1297.891260][T20574] netlink: 'syz.0.4575': attribute type 29 has an invalid length. [ 1297.925367][T20569] netlink: 190936 bytes leftover after parsing attributes in process `syz.2.4574'. [ 1297.944830][T20569] netlink: zone id is out of range [ 1297.950720][T20569] netlink: zone id is out of range [ 1297.960652][T20569] netlink: zone id is out of range [ 1297.967557][T20569] netlink: zone id is out of range [ 1297.976349][T20569] netlink: zone id is out of range [ 1298.003633][T20569] netlink: zone id is out of range [ 1298.035541][T20569] netlink: zone id is out of range [ 1298.077648][T20569] netlink: zone id is out of range [ 1298.084278][T20569] netlink: zone id is out of range [ 1298.090063][T20569] netlink: zone id is out of range [ 1299.090271][T20582] syzkaller0: entered promiscuous mode [ 1299.107794][T20582] syzkaller0: entered allmulticast mode [ 1300.040418][T20599] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4583'. [ 1300.272204][ T5784] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 1300.326287][T20603] __nla_validate_parse: 2 callbacks suppressed [ 1300.326315][T20603] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4585'. [ 1300.379552][T20603] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1300.754801][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.761971][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.004111][T20608] wg2: entered promiscuous mode [ 1301.010573][T20608] wg2: entered allmulticast mode [ 1301.096258][T20613] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4588'. [ 1301.110164][T20613] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4588'. [ 1301.122071][T20613] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4588'. [ 1301.132090][T20613] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4588'. [ 1301.465604][T20630] FAULT_INJECTION: forcing a failure. [ 1301.465604][T20630] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.508284][T20630] CPU: 1 PID: 20630 Comm: syz.3.4595 Not tainted syzkaller #0 [ 1301.515840][T20630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1301.526037][T20630] Call Trace: [ 1301.529355][T20630] [ 1301.532407][T20630] dump_stack_lvl+0x18c/0x250 [ 1301.537234][T20630] ? show_regs_print_info+0x20/0x20 [ 1301.542491][T20630] ? load_image+0x420/0x420 [ 1301.547148][T20630] ? __might_sleep+0xe0/0xe0 [ 1301.552164][T20630] ? __lock_acquire+0x7d40/0x7d40 [ 1301.557248][T20630] should_fail_ex+0x39d/0x4d0 [ 1301.562095][T20630] should_failslab+0x9/0x20 [ 1301.566667][T20630] slab_pre_alloc_hook+0x59/0x310 [ 1301.571770][T20630] kmem_cache_alloc+0x5a/0x2d0 [ 1301.576594][T20630] ? __anon_vma_prepare+0xbe/0x430 [ 1301.581763][T20630] __anon_vma_prepare+0xbe/0x430 [ 1301.586752][T20630] ? _raw_spin_unlock+0x28/0x40 [ 1301.591933][T20630] handle_mm_fault+0x401d/0x4c00 [ 1301.597170][T20630] ? handle_mm_fault+0xe7/0x4c00 [ 1301.602353][T20630] ? numa_migrate_prep+0x350/0x350 [ 1301.607549][T20630] ? lock_chain_count+0x20/0x20 [ 1301.612550][T20630] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1301.618228][T20630] do_user_addr_fault+0x730/0x12c0 [ 1301.623494][T20630] exc_page_fault+0x64/0x100 [ 1301.628304][T20630] asm_exc_page_fault+0x26/0x30 [ 1301.633282][T20630] RIP: 0010:__put_user_4+0x11/0x20 [ 1301.638609][T20630] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 1301.651770][T20626] can: request_module (can-proto-5) failed. [ 1301.658949][T20630] RSP: 0018:ffffc90004f3fe80 EFLAGS: 00050206 [ 1301.671121][T20630] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 00002000000003c0 [ 1301.679376][T20630] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8e60 [ 1301.687364][T20630] RBP: 0000000000000005 R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd [ 1301.695349][T20630] R10: dffffc0000000000 R11: fffffbfff1d162be R12: 0000000000000000 [ 1301.703332][T20630] R13: 00002000000003c0 R14: 000000000000001d R15: 0000000000000002 [ 1301.711416][T20630] __sys_socketpair+0xb8/0x550 [ 1301.716214][T20630] __x64_sys_socketpair+0x9b/0xb0 [ 1301.721349][T20630] do_syscall_64+0x55/0xa0 [ 1301.725863][T20630] ? clear_bhb_loop+0x40/0x90 [ 1301.730580][T20630] ? clear_bhb_loop+0x40/0x90 [ 1301.735652][T20630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1301.741755][T20630] RIP: 0033:0x7f523919c819 [ 1301.746190][T20630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.766011][T20630] RSP: 002b:00007f5239fcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1301.774633][T20630] RAX: ffffffffffffffda RBX: 00007f5239415fa0 RCX: 00007f523919c819 [ 1301.782618][T20630] RDX: 0000000000000005 RSI: 0000000000000002 RDI: 000000000000001d [ 1301.790777][T20630] RBP: 00007f5239fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.799209][T20630] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1301.807281][T20630] R13: 00007f5239416038 R14: 00007f5239415fa0 R15: 00007fff7efcfb18 [ 1301.815369][T20630] [ 1301.982033][T20641] netlink: 'syz.2.4597': attribute type 2 has an invalid length. [ 1302.000277][T20641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4597'. [ 1302.062707][T20640] netlink: 4067 bytes leftover after parsing attributes in process `syz.0.4596'. [ 1302.160539][T20651] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4600'. [ 1302.172085][T20651] netlink: 'syz.0.4600': attribute type 12 has an invalid length. [ 1302.180426][T20651] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4600'. [ 1302.351225][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 1303.000264][T20657] wg2: entered promiscuous mode [ 1303.005654][T20657] wg2: entered allmulticast mode [ 1303.025453][T20662] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4603'. [ 1303.404945][T20668] netlink: 'syz.2.4605': attribute type 1 has an invalid length. [ 1304.656695][T20687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1304.664347][T20687] IPv6: NLM_F_CREATE should be set when creating new route [ 1304.672045][T20687] IPv6: NLM_F_CREATE should be set when creating new route [ 1304.679605][T20687] IPv6: NLM_F_CREATE should be set when creating new route [ 1305.947778][T20711] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4619'. [ 1305.958487][T20711] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4619'. [ 1305.984736][T20711] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4619'. [ 1306.027001][T20710] FAULT_INJECTION: forcing a failure. [ 1306.027001][T20710] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.105447][T20711] netlink: 181524 bytes leftover after parsing attributes in process `syz.3.4619'. [ 1306.125447][T20710] CPU: 1 PID: 20710 Comm: syz.0.4617 Not tainted syzkaller #0 [ 1306.133597][T20710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1306.143884][T20710] Call Trace: [ 1306.147202][T20710] [ 1306.150168][T20710] dump_stack_lvl+0x18c/0x250 [ 1306.155055][T20710] ? sctp_sendmsg+0x1575/0x28c0 [ 1306.160013][T20710] ? ___sys_sendmsg+0x2a6/0x360 [ 1306.164914][T20710] ? show_regs_print_info+0x20/0x20 [ 1306.170225][T20710] ? load_image+0x420/0x420 [ 1306.174855][T20710] should_fail_ex+0x39d/0x4d0 [ 1306.179654][T20710] should_failslab+0x9/0x20 [ 1306.184301][T20710] slab_pre_alloc_hook+0x59/0x310 [ 1306.189527][T20710] ? sctp_add_bind_addr+0x8c/0x360 [ 1306.194856][T20710] __kmem_cache_alloc_node+0x53/0x250 [ 1306.200341][T20710] ? sctp_add_bind_addr+0x8c/0x360 [ 1306.205560][T20710] kmalloc_trace+0x2a/0xe0 [ 1306.210088][T20710] sctp_add_bind_addr+0x8c/0x360 [ 1306.215130][T20710] sctp_copy_local_addr_list+0x315/0x4f0 [ 1306.220976][T20710] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1306.226740][T20710] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1306.232844][T20710] ? sctp_v4_is_any+0x35/0x60 [ 1306.237795][T20710] ? sctp_copy_one_addr+0x8c/0x350 [ 1306.242927][T20710] sctp_bind_addr_copy+0xb3/0x3c0 [ 1306.248145][T20710] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1306.254592][T20710] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1306.259992][T20710] ? __sctp_connect+0xd80/0xd80 [ 1306.264868][T20710] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1306.270364][T20710] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1306.276049][T20710] ? security_sctp_bind_connect+0x89/0xb0 [ 1306.281885][T20710] sctp_sendmsg+0x1575/0x28c0 [ 1306.286771][T20710] ? sctp_getsockopt+0xb60/0xb60 [ 1306.291921][T20710] ? aa_sk_perm+0x83c/0x970 [ 1306.296523][T20710] ? aa_af_perm+0x330/0x330 [ 1306.301138][T20710] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1306.307930][T20710] ? sock_rps_record_flow+0x19/0x3f0 [ 1306.313261][T20710] ? inet_sendmsg+0xe9/0x2f0 [ 1306.317871][T20710] ? inet_send_prepare+0x260/0x260 [ 1306.323101][T20710] ____sys_sendmsg+0x5ba/0x960 [ 1306.328026][T20710] ? __lock_acquire+0x7d40/0x7d40 [ 1306.333082][T20710] ? __asan_memset+0x22/0x40 [ 1306.337709][T20710] ? __sys_sendmsg_sock+0x30/0x30 [ 1306.343199][T20710] ? __import_iovec+0x5f2/0x850 [ 1306.348357][T20710] ? import_iovec+0x73/0xa0 [ 1306.352942][T20710] ___sys_sendmsg+0x2a6/0x360 [ 1306.357783][T20710] ? __sys_sendmsg+0x2a0/0x2a0 [ 1306.362683][T20710] ? trace_call_bpf+0xc3/0x6c0 [ 1306.367499][T20710] __se_sys_sendmsg+0x1c2/0x2b0 [ 1306.372462][T20710] ? __x64_sys_sendmsg+0x80/0x80 [ 1306.377434][T20710] ? lockdep_hardirqs_on+0x98/0x150 [ 1306.382755][T20710] do_syscall_64+0x55/0xa0 [ 1306.387536][T20710] ? clear_bhb_loop+0x40/0x90 [ 1306.392346][T20710] ? clear_bhb_loop+0x40/0x90 [ 1306.397166][T20710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1306.403079][T20710] RIP: 0033:0x7fc369d9c819 [ 1306.407604][T20710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1306.427501][T20710] RSP: 002b:00007fc36ac04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1306.436377][T20710] RAX: ffffffffffffffda RBX: 00007fc36a015fa0 RCX: 00007fc369d9c819 [ 1306.444626][T20710] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 1306.452964][T20710] RBP: 00007fc36ac04090 R08: 0000000000000000 R09: 0000000000000000 [ 1306.461386][T20710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1306.469553][T20710] R13: 00007fc36a016038 R14: 00007fc36a015fa0 R15: 00007fff7c9c6bc8 [ 1306.477771][T20710] [ 1306.496445][T20711] net_ratelimit: 122 callbacks suppressed [ 1306.496467][T20711] netlink: zone id is out of range [ 1306.572023][T20711] netlink: zone id is out of range [ 1306.577611][T20711] netlink: zone id is out of range [ 1306.611705][T20711] netlink: zone id is out of range [ 1306.657083][T20711] netlink: zone id is out of range [ 1306.665857][T20711] netlink: zone id is out of range [ 1306.675847][T20711] netlink: zone id is out of range [ 1306.684864][T20711] netlink: zone id is out of range [ 1306.695855][T20711] netlink: zone id is out of range [ 1306.886842][T20711] netlink: zone id is out of range [ 1307.676277][T20730] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4623'. [ 1308.221564][T20749] netlink: 'syz.3.4628': attribute type 10 has an invalid length. [ 1309.291892][T20764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1309.299271][T20764] IPv6: NLM_F_CREATE should be set when creating new route [ 1309.306918][T20764] IPv6: NLM_F_CREATE should be set when creating new route [ 1309.314368][T20764] IPv6: NLM_F_CREATE should be set when creating new route [ 1310.320411][T20777] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4635'. [ 1310.361040][T20777] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4635'. [ 1310.373300][T20778] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4635'. [ 1310.539010][T20776] netlink: 190936 bytes leftover after parsing attributes in process `syz.4.4635'. [ 1311.014754][T20790] pim6reg1: entered promiscuous mode [ 1311.033181][T20790] pim6reg1: entered allmulticast mode [ 1312.661245][T20818] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1312.727730][T20818] syzkaller0: entered promiscuous mode [ 1312.754914][T20818] syzkaller0: entered allmulticast mode [ 1315.913964][T20851] FAULT_INJECTION: forcing a failure. [ 1315.913964][T20851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.941016][T20851] CPU: 1 PID: 20851 Comm: syz.4.4660 Not tainted syzkaller #0 [ 1315.948752][T20851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1315.958961][T20851] Call Trace: [ 1315.962370][T20851] [ 1315.965353][T20851] dump_stack_lvl+0x18c/0x250 [ 1315.970269][T20851] ? show_regs_print_info+0x20/0x20 [ 1315.975613][T20851] ? load_image+0x420/0x420 [ 1315.980167][T20851] ? __lock_acquire+0x7d40/0x7d40 [ 1315.985415][T20851] ? snprintf+0xe9/0x140 [ 1315.989711][T20851] should_fail_ex+0x39d/0x4d0 [ 1315.994533][T20851] _copy_to_user+0x2f/0xa0 [ 1315.999182][T20851] simple_read_from_buffer+0xe7/0x150 [ 1316.004616][T20851] proc_fail_nth_read+0x1e8/0x260 [ 1316.009773][T20851] ? proc_fault_inject_write+0x360/0x360 [ 1316.015438][T20851] ? fsnotify_perm+0x271/0x5e0 [ 1316.020226][T20851] ? proc_fault_inject_write+0x360/0x360 [ 1316.026053][T20851] vfs_read+0x28b/0x970 [ 1316.030330][T20851] ? kernel_read+0x1e0/0x1e0 [ 1316.035068][T20851] ? __fget_files+0x28/0x4b0 [ 1316.039765][T20851] ? __fget_files+0x28/0x4b0 [ 1316.044554][T20851] ? __fget_files+0x43d/0x4b0 [ 1316.049437][T20851] ? __fdget_pos+0x2a3/0x330 [ 1316.054111][T20851] ? ksys_read+0x75/0x260 [ 1316.058657][T20851] ksys_read+0x150/0x260 [ 1316.063037][T20851] ? vfs_write+0x990/0x990 [ 1316.067506][T20851] ? lockdep_hardirqs_on+0x98/0x150 [ 1316.072815][T20851] do_syscall_64+0x55/0xa0 [ 1316.077441][T20851] ? clear_bhb_loop+0x40/0x90 [ 1316.082325][T20851] ? clear_bhb_loop+0x40/0x90 [ 1316.087128][T20851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1316.093131][T20851] RIP: 0033:0x7f844655d04e [ 1316.097577][T20851] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1316.117467][T20851] RSP: 002b:00007f84474defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1316.126074][T20851] RAX: ffffffffffffffda RBX: 00007f84474df6c0 RCX: 00007f844655d04e [ 1316.134068][T20851] RDX: 000000000000000f RSI: 00007f84474df0a0 RDI: 0000000000000004 [ 1316.142147][T20851] RBP: 00007f84474df090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.150305][T20851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.158477][T20851] R13: 00007f8446816038 R14: 00007f8446815fa0 R15: 00007fff56f1aaf8 [ 1316.166569][T20851] [ 1316.614518][T20869] FAULT_INJECTION: forcing a failure. [ 1316.614518][T20869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.727332][T20869] CPU: 1 PID: 20869 Comm: syz.2.4666 Not tainted syzkaller #0 [ 1316.728737][T20871] net_ratelimit: 249 callbacks suppressed [ 1316.728764][T20871] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1316.734864][T20869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1316.734883][T20869] Call Trace: [ 1316.734894][T20869] [ 1316.734904][T20869] dump_stack_lvl+0x18c/0x250 [ 1316.734943][T20869] ? show_regs_print_info+0x20/0x20 [ 1316.734973][T20869] ? load_image+0x420/0x420 [ 1316.735010][T20869] ? __lock_acquire+0x7d40/0x7d40 [ 1316.735031][T20869] ? __virt_addr_valid+0x18c/0x540 [ 1316.741283][T20871] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1316.747753][T20869] should_fail_ex+0x39d/0x4d0 [ 1316.800341][T20869] _copy_to_user+0x2f/0xa0 [ 1316.804943][T20869] map_lookup_elem+0x5cb/0x7c0 [ 1316.809739][T20869] __sys_bpf+0x438/0x890 [ 1316.814093][T20869] ? bpf_link_show_fdinfo+0x390/0x390 [ 1316.819963][T20869] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1316.826168][T20869] __x64_sys_bpf+0x7c/0x90 [ 1316.830699][T20869] do_syscall_64+0x55/0xa0 [ 1316.835308][T20869] ? clear_bhb_loop+0x40/0x90 [ 1316.840281][T20869] ? clear_bhb_loop+0x40/0x90 [ 1316.845009][T20869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1316.851233][T20869] RIP: 0033:0x7ff900d9c819 [ 1316.855886][T20869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.875961][T20869] RSP: 002b:00007ff901c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1316.884664][T20869] RAX: ffffffffffffffda RBX: 00007ff901016090 RCX: 00007ff900d9c819 [ 1316.892744][T20869] RDX: 0000000000000020 RSI: 0000200000000c80 RDI: 0000000000000001 [ 1316.900748][T20869] RBP: 00007ff901c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.909086][T20869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.917075][T20869] R13: 00007ff901016128 R14: 00007ff901016090 R15: 00007ffd46ea8508 [ 1316.925254][T20869] [ 1317.349054][T20876] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1317.456467][T20876] syzkaller0: entered promiscuous mode [ 1317.462796][T20876] syzkaller0: entered allmulticast mode [ 1317.572751][T20885] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4670'. [ 1317.683724][ T5784] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 1318.480246][T20897] FAULT_INJECTION: forcing a failure. [ 1318.480246][T20897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.510422][T20897] CPU: 0 PID: 20897 Comm: syz.3.4675 Not tainted syzkaller #0 [ 1318.517999][T20897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1318.528238][T20897] Call Trace: [ 1318.531634][T20897] [ 1318.534592][T20897] dump_stack_lvl+0x18c/0x250 [ 1318.539589][T20897] ? show_regs_print_info+0x20/0x20 [ 1318.545067][T20897] ? load_image+0x420/0x420 [ 1318.549802][T20897] should_fail_ex+0x39d/0x4d0 [ 1318.554608][T20897] copy_page_from_iter_atomic+0x2a8/0x1580 [ 1318.561091][T20897] ? shmem_get_folio_gfp+0x264a/0x2aa0 [ 1318.567165][T20897] ? iov_iter_zero+0x1170/0x1170 [ 1318.572250][T20897] ? shmem_write_begin+0x1cf/0x420 [ 1318.577573][T20897] generic_perform_write+0x353/0x5c0 [ 1318.582899][T20897] ? generic_file_direct_write+0x3e0/0x3e0 [ 1318.588736][T20897] ? file_update_time+0x192/0x1a0 [ 1318.593788][T20897] shmem_file_write_iter+0xfb/0x120 [ 1318.599015][T20897] vfs_write+0x46c/0x990 [ 1318.603319][T20897] ? file_end_write+0x250/0x250 [ 1318.608392][T20897] ? __fget_files+0x43d/0x4b0 [ 1318.613114][T20897] ? __fdget_pos+0x2a3/0x330 [ 1318.618017][T20897] ? ksys_write+0x75/0x260 [ 1318.622462][T20897] ksys_write+0x150/0x260 [ 1318.626827][T20897] ? __ia32_sys_read+0x90/0x90 [ 1318.631799][T20897] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1318.637837][T20897] do_syscall_64+0x55/0xa0 [ 1318.642486][T20897] ? clear_bhb_loop+0x40/0x90 [ 1318.647465][T20897] ? clear_bhb_loop+0x40/0x90 [ 1318.652271][T20897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.658229][T20897] RIP: 0033:0x7f523919c819 [ 1318.662675][T20897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.683010][T20897] RSP: 002b:00007f5239fcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1318.691540][T20897] RAX: ffffffffffffffda RBX: 00007f5239415fa0 RCX: 00007f523919c819 [ 1318.699625][T20897] RDX: 0000000000040001 RSI: 0000200000000180 RDI: 0000000000000006 [ 1318.707621][T20897] RBP: 00007f5239fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 1318.715788][T20897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.723858][T20897] R13: 00007f5239416038 R14: 00007f5239415fa0 R15: 00007fff7efcfb18 [ 1318.732149][T20897] [ 1319.720925][ T5784] Bluetooth: hci2: command tx timeout [ 1320.651612][T20885] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1320.847643][T20910] netlink: 'syz.4.4680': attribute type 49 has an invalid length. [ 1320.861155][T20910] netlink: 'syz.4.4680': attribute type 49 has an invalid length. [ 1322.034535][T20940] syzkaller0: entered promiscuous mode [ 1322.055840][T20940] syzkaller0: entered allmulticast mode [ 1322.358181][T20942] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4689'. [ 1322.734345][T20942] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1322.793759][T20942] CPU: 0 PID: 20942 Comm: syz.2.4689 Not tainted syzkaller #0 [ 1322.801851][T20942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1322.812055][T20942] Call Trace: [ 1322.815372][T20942] [ 1322.818343][T20942] dump_stack_lvl+0x18c/0x250 [ 1322.823091][T20942] ? show_regs_print_info+0x20/0x20 [ 1322.828343][T20942] ? load_image+0x420/0x420 [ 1322.832987][T20942] sysfs_warn_dup+0x8e/0xa0 [ 1322.837609][T20942] sysfs_do_create_link_sd+0xc0/0x110 [ 1322.843003][T20942] device_add_class_symlinks+0x1cf/0x240 [ 1322.848836][T20942] device_add+0x507/0xc20 [ 1322.853308][T20942] wiphy_register+0x1dad/0x2ae0 [ 1322.858318][T20942] ? cfg80211_event_work+0x40/0x40 [ 1322.863728][T20942] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1322.870192][T20942] ieee80211_register_hw+0x3464/0x4250 [ 1322.875699][T20942] ? ieee80211_tasklet_handler+0x20/0x20 [ 1322.881613][T20942] ? lockdep_hardirqs_on+0x98/0x150 [ 1322.886837][T20942] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1322.893139][T20942] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1322.899187][T20942] ? mac80211_hwsim_free+0x220/0x220 [ 1322.904576][T20942] ? rcu_is_watching+0x15/0xb0 [ 1322.909458][T20942] ? kstrndup+0xbd/0x140 [ 1322.913902][T20942] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1322.919167][T20942] ? mark_lock+0x94/0x320 [ 1322.923581][T20942] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1322.930030][T20942] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1322.936393][T20942] ? lockdep_hardirqs_on+0x98/0x150 [ 1322.941793][T20942] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1322.948029][T20942] genl_family_rcv_msg_doit+0x211/0x310 [ 1322.953603][T20942] ? end_current_label_crit_section+0x170/0x170 [ 1322.960226][T20942] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1322.966229][T20942] ? bpf_lsm_capable+0x9/0x10 [ 1322.970931][T20942] ? security_capable+0x89/0xb0 [ 1322.975812][T20942] genl_rcv_msg+0x619/0x7a0 [ 1322.980340][T20942] ? genl_bind+0x360/0x360 [ 1322.984782][T20942] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1322.991324][T20942] netlink_rcv_skb+0x241/0x4d0 [ 1322.996210][T20942] ? genl_bind+0x360/0x360 [ 1323.000649][T20942] ? netlink_ack+0x1180/0x1180 [ 1323.005465][T20942] ? down_read+0x1ac/0x2e0 [ 1323.010092][T20942] genl_rcv+0x28/0x40 [ 1323.014100][T20942] netlink_unicast+0x751/0x8d0 [ 1323.018983][T20942] netlink_sendmsg+0x8d0/0xbf0 [ 1323.023874][T20942] ? netlink_getsockopt+0x590/0x590 [ 1323.029100][T20942] ? aa_sock_msg_perm+0x94/0x150 [ 1323.034066][T20942] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1323.039457][T20942] ? security_socket_sendmsg+0x80/0xa0 [ 1323.045109][T20942] ? netlink_getsockopt+0x590/0x590 [ 1323.050428][T20942] ____sys_sendmsg+0x5ba/0x960 [ 1323.055305][T20942] ? __asan_memset+0x22/0x40 [ 1323.060099][T20942] ? __sys_sendmsg_sock+0x30/0x30 [ 1323.065167][T20942] ? __import_iovec+0x5f2/0x850 [ 1323.070168][T20942] ? import_iovec+0x73/0xa0 [ 1323.074693][T20942] ___sys_sendmsg+0x2a6/0x360 [ 1323.079408][T20942] ? __sys_sendmsg+0x2a0/0x2a0 [ 1323.084244][T20942] __se_sys_sendmsg+0x1c2/0x2b0 [ 1323.089211][T20942] ? __x64_sys_sendmsg+0x80/0x80 [ 1323.094193][T20942] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1323.100195][T20942] do_syscall_64+0x55/0xa0 [ 1323.104734][T20942] ? clear_bhb_loop+0x40/0x90 [ 1323.109537][T20942] ? clear_bhb_loop+0x40/0x90 [ 1323.114431][T20942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1323.120603][T20942] RIP: 0033:0x7ff900d9c819 [ 1323.125134][T20942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.145020][T20942] RSP: 002b:00007ff901c6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1323.153578][T20942] RAX: ffffffffffffffda RBX: 00007ff901015fa0 RCX: 00007ff900d9c819 [ 1323.161571][T20942] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1323.169557][T20942] RBP: 00007ff900e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1323.177627][T20942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1323.186080][T20942] R13: 00007ff901016038 R14: 00007ff901015fa0 R15: 00007ffd46ea8508 [ 1323.194176][T20942] [ 1323.323740][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 1323.341702][T20952] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.4691'. [ 1323.394677][T20947] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1323.551362][T20947] syzkaller0: entered promiscuous mode [ 1323.559164][T20947] syzkaller0: entered allmulticast mode [ 1326.630954][T19270] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 1326.640220][T19270] ref_tracker: syz_tun@ffff8880671045b8 has 1/2 users at [ 1326.640220][T19270] dst_init+0xd9/0x480 [ 1326.640220][T19270] dst_alloc+0x12e/0x170 [ 1326.640220][T19270] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 1326.640220][T19270] ip_route_output_key_hash+0x1f3/0x330 [ 1326.640220][T19270] ip_route_output_flow+0x2a/0x150 [ 1326.640220][T19270] geneve_link_config+0x1a6/0x670 [ 1326.640220][T19270] geneve_newlink+0x151/0x1c0 [ 1326.640220][T19270] rtnl_newlink+0x1542/0x20a0 [ 1326.640220][T19270] rtnetlink_rcv_msg+0x869/0xfa0 [ 1326.640220][T19270] netlink_rcv_skb+0x241/0x4d0 [ 1326.640220][T19270] netlink_unicast+0x751/0x8d0 [ 1326.640220][T19270] netlink_sendmsg+0x8d0/0xbf0 [ 1326.640220][T19270] __sys_sendto+0x4a9/0x6b0 [ 1326.640220][T19270] __x64_sys_sendto+0xde/0xf0 [ 1326.640220][T19270] do_syscall_64+0x55/0xa0 [ 1326.640220][T19270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1326.640220][T19270] [ 1326.733052][T19270] ref_tracker: syz_tun@ffff8880671045b8 has 1/2 users at [ 1326.733052][T19270] fib_check_nh+0xd23/0x1a70 [ 1326.733052][T19270] fib_create_info+0x142c/0x2460 [ 1326.733052][T19270] fib_table_insert+0xc6/0x1b20 [ 1326.733052][T19270] fib_magic+0x2e5/0x3c0 [ 1326.733052][T19270] fib_add_ifaddr+0x38d/0x5e0 [ 1326.733052][T19270] fib_netdev_event+0x389/0x490 [ 1326.733052][T19270] notifier_call_chain+0x197/0x380 [ 1326.733052][T19270] __dev_notify_flags+0x1aa/0x310 [ 1326.733052][T19270] dev_change_flags+0xe8/0x1a0 [ 1326.733052][T19270] do_setlink+0xc58/0x4130 [ 1326.733052][T19270] rtnl_newlink+0x17da/0x20a0 [ 1326.733052][T19270] rtnetlink_rcv_msg+0x869/0xfa0 [ 1326.733052][T19270] netlink_rcv_skb+0x241/0x4d0 [ 1326.733052][T19270] netlink_unicast+0x751/0x8d0 [ 1326.733052][T19270] netlink_sendmsg+0x8d0/0xbf0 [ 1326.733052][T19270] __sys_sendto+0x4a9/0x6b0 [ 1326.733052][T19270] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1326.922844][T20979] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1327.026609][T20979] CPU: 0 PID: 20979 Comm: syz-executor Not tainted syzkaller #0 [ 1327.034445][T20979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1327.044650][T20979] Call Trace: [ 1327.048074][T20979] [ 1327.051144][T20979] dump_stack_lvl+0x18c/0x250 [ 1327.055884][T20979] ? show_regs_print_info+0x20/0x20 [ 1327.061409][T20979] ? load_image+0x420/0x420 [ 1327.065975][T20979] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1327.072447][T20979] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1327.079008][T20979] warn_alloc+0x246/0x340 [ 1327.083412][T20979] ? zone_watermark_ok_safe+0x230/0x230 [ 1327.089025][T20979] ? _raw_spin_unlock+0x28/0x40 [ 1327.093933][T20979] __vmalloc_node_range+0x662/0x1330 [ 1327.099276][T20979] ? __asan_memset+0x22/0x40 [ 1327.103967][T20979] ? free_vm_area+0x50/0x50 [ 1327.108635][T20979] ? perf_trace_preemptirq_template+0xac/0x330 [ 1327.114821][T20979] ? kcov_remote_reset+0xc0/0xc0 [ 1327.119777][T20979] vmalloc_user+0x74/0x80 [ 1327.124139][T20979] ? kcov_ioctl+0x58/0x620 [ 1327.128570][T20979] kcov_ioctl+0x58/0x620 [ 1327.132834][T20979] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1327.137785][T20979] ? security_file_ioctl+0x80/0xa0 [ 1327.142907][T20979] ? kcov_remote_reset+0xc0/0xc0 [ 1327.147989][T20979] __se_sys_ioctl+0xfd/0x170 [ 1327.152712][T20979] do_syscall_64+0x55/0xa0 [ 1327.157163][T20979] ? clear_bhb_loop+0x40/0x90 [ 1327.161880][T20979] ? clear_bhb_loop+0x40/0x90 [ 1327.166791][T20979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1327.172769][T20979] RIP: 0033:0x7f324779c4ab [ 1327.177212][T20979] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1327.197379][T20979] RSP: 002b:00007ffd8d99d310 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1327.206017][T20979] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f324779c4ab [ 1327.214098][T20979] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000de [ 1327.222174][T20979] RBP: 00007f3247a165d8 R08: 0000000000000000 R09: 0000000000000000 [ 1327.230423][T20979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.238498][T20979] R13: 0000000000000003 R14: 00007ffd8d99d5c8 R15: 0000000000000000 [ 1327.246775][T20979] [ 1327.297605][T20979] Mem-Info: [ 1327.300947][T20979] active_anon:4463 inactive_anon:0 isolated_anon:0 [ 1327.300947][T20979] active_file:19561 inactive_file:40403 isolated_file:0 [ 1327.300947][T20979] unevictable:768 dirty:167 writeback:0 [ 1327.300947][T20979] slab_reclaimable:10535 slab_unreclaimable:97407 [ 1327.300947][T20979] mapped:21904 shmem:1361 pagetables:361 [ 1327.300947][T20979] sec_pagetables:0 bounce:0 [ 1327.300947][T20979] kernel_misc_reclaimable:0 [ 1327.300947][T20979] free:1330515 free_pcp:10485 free_cma:0 [ 1327.351706][T20979] Node 0 active_anon:17852kB inactive_anon:0kB active_file:78244kB inactive_file:161408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87616kB dirty:664kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10252kB pagetables:1444kB sec_pagetables:0kB all_unreclaimable? no [ 1327.403030][T20979] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1327.436622][T20979] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.481214][T20979] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1327.487157][T20979] Node 0 DMA32 free:1424132kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:17792kB inactive_anon:0kB active_file:78244kB inactive_file:160588kB unevictable:1536kB writepending:684kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:25328kB local_pcp:19540kB free_cma:0kB [ 1327.580875][T20979] lowmem_reserve[]: 0 0 0 0 0 [ 1327.591334][T20979] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.650852][T20979] lowmem_reserve[]: 0 0 0 0 0 [ 1327.670935][T20979] Node 1 Normal free:3909596kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:6240kB local_pcp:2720kB free_cma:0kB [ 1327.788841][T20979] lowmem_reserve[]: 0 0 0 0 0 [ 1327.798806][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.820928][T20979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1327.868289][T20979] Node 0 DMA32: 4625*4kB (UM) 2526*8kB (UME) 1945*16kB (UME) 1415*32kB (UME) 1991*64kB (UME) 1123*128kB (UM) 254*256kB (UM) 51*512kB (UME) 20*1024kB (UME) 6*2048kB (M) 238*4096kB (M) = 1485028kB [ 1327.910862][T20979] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1327.941760][T20979] Node 1 Normal: 245*4kB (UME) 53*8kB (UME) 46*16kB (UME) 272*32kB (UME) 98*64kB (UME) 16*128kB (UME) 3*256kB (UME) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3909596kB [ 1327.980980][T20979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.015655][T20979] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1328.069215][T20979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.101218][T20979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1328.110628][T20979] 61328 total pagecache pages [ 1328.118979][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.142128][T20979] 0 pages in swap cache [ 1328.146498][T20979] Free swap = 124996kB [ 1328.177970][T20979] Total swap = 124996kB [ 1328.182635][T20979] 2097051 pages RAM [ 1328.186572][T20979] 0 pages HighMem/MovableOnly [ 1328.194908][T20979] 416927 pages reserved [ 1328.202881][T20979] 0 pages cma reserved [ 1328.344927][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.444050][T20980] team0: Port device syz_tun removed [ 1328.548143][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.948468][ T31] hsr_slave_0: left promiscuous mode [ 1329.979928][ T31] hsr_slave_1: left promiscuous mode [ 1329.986759][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1329.994556][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.003277][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.010961][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.034750][ T31] veth1_macvtap: left promiscuous mode [ 1330.040591][ T31] veth0_macvtap: left promiscuous mode [ 1330.056880][ T31] veth1_vlan: left promiscuous mode [ 1330.062604][ T31] veth0_vlan: left promiscuous mode [ 1331.866200][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.958839][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.039183][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.147691][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.366814][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.479110][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.607547][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.690069][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.855366][ T31] hsr_slave_0: left promiscuous mode [ 1334.869765][ T31] hsr_slave_1: left promiscuous mode [ 1334.877016][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1334.889518][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.898888][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1334.914296][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.932142][ T31] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1334.939818][ T31] batman_adv: batadv0: Removing interface: veth0_vlan [ 1334.953367][ T31] bridge0: port 3(batadv0) entered disabled state [ 1334.966691][ T31] bridge_slave_1: left allmulticast mode [ 1334.972735][ T31] bridge_slave_1: left promiscuous mode [ 1334.978739][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.989648][ T31] bridge_slave_0: left allmulticast mode [ 1334.995680][ T31] bridge_slave_0: left promiscuous mode [ 1335.002916][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.017542][ T31] hsr_slave_0: left promiscuous mode [ 1335.024170][ T31] hsr_slave_1: left promiscuous mode [ 1335.030147][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1335.037861][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.046068][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.053727][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.063430][ T31] bridge0: port 3(batadv0) entered disabled state [ 1335.073007][ T31] bridge_slave_1: left allmulticast mode [ 1335.078723][ T31] bridge_slave_1: left promiscuous mode [ 1335.084845][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.094977][ T31] bridge_slave_0: left promiscuous mode [ 1335.100732][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.129328][ T31] veth1_macvtap: left promiscuous mode [ 1335.136185][ T31] veth0_macvtap: left promiscuous mode [ 1335.142155][ T31] veth1_vlan: left promiscuous mode [ 1335.147853][ T31] veth0_vlan: left promiscuous mode [ 1335.160447][ T31] veth1_macvtap: left promiscuous mode [ 1335.166168][ T31] veth1_vlan: left promiscuous mode [ 1335.954670][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.010271][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.367914][ T31] bond0 (unregistering): Released all slaves