last executing test programs: 28.026244167s ago: executing program 0 (id=2482): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xf, 0xe1bf}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00090000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 27.32911355s ago: executing program 0 (id=2483): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1c6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c0005000156016185750008af0180000000171300883795c04a00ba377a1b2cc32b38d3740000ff", 0x32}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x3, 0xd}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x8, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x7, 0x7f}, 0x8004, 0xd, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x1, 0x3, 0x9, 0x0, 0x10040000007feb, 0x4aad3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x7}, 0x14105, 0x32, 0xfffffbff, 0x6, 0xffff, 0x6, 0x7, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x18, 0x0}, 0x4000084) recvmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100) r8 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x10d, 0x43, &(0x7f0000000100), 0x4) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x100000010, 0x1d66ef49}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x32, 0x400c, 0x0, @void, @value=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004100)={0x6, 0xf, &(0x7f0000003e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ec0)='syzkaller\x00', 0x4000000, 0xb4, &(0x7f0000003f00)=""/180, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003fc0)={0x3, 0xf, 0xfb, 0x837}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000004080)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000040c0)=[{0x2, 0xe, 0x0, 0x8}], 0x10, 0x6}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x29, 0x2, 0x0) 26.555567506s ago: executing program 0 (id=2486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 26.319794397s ago: executing program 0 (id=2488): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000002000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7897, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x3, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8903, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) 23.225046172s ago: executing program 0 (id=2491): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x4}], 0x10, 0x1}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1, 0x0, 0x300}, 0x0) 22.983812043s ago: executing program 0 (id=2493): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1c6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c0005000156016185750008af0180000000171300883795c04a00ba377a1b2cc32b38d3740000ff", 0x32}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x3, 0xd}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x8, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x7, 0x7f}, 0x8004, 0xd, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x1, 0x3, 0x9, 0x0, 0x10040000007feb, 0x4aad3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x7}, 0x14105, 0x32, 0xfffffbff, 0x6, 0xffff, 0x6, 0x7, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x18, 0x0}, 0x4000084) recvmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100) r8 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x10d, 0x43, &(0x7f0000000100), 0x4) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x100000010, 0x1d66ef49}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x32, 0x400c, 0x0, @void, @value=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004100)={0x6, 0xf, &(0x7f0000003e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ec0)='syzkaller\x00', 0x4000000, 0xb4, &(0x7f0000003f00)=""/180, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003fc0)={0x3, 0xf, 0xfb, 0x837}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000004080)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000040c0)=[{0x2, 0xe, 0x0, 0x8}], 0x10, 0x6}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x29, 0x2, 0x0) 13.8821062s ago: executing program 3 (id=2536): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x44000080, &(0x7f0000000580)="5ea37407cd23a1773ce5a992e43dabfc6b4f039070e219cc1e77f2714860722f2843c90f2e620ce0ebadec9bb93d046961f78abb05a1912af0bc98d56082de7e18433a2274fc2dea17dd26e4fef9e3ee98fb5f3a827833cd02efb7ada3e6c631374bdf55e6ca9dcb5ea381222a437e7cb5ce4c30da80fbe0aa0c197c5b991cd1c3aeb25d6307c854cc0c71fbc576c20fe78c50217d4bd1f41f8b8e25235f8083faff02679657d85ce8925b83db5915101d14dd1c7374080d222ea8ff99f4a5686cacad9349bd8f49fcbd77e7d1c085c3c2c1865a", 0xd4, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="8057ceb7c8f0fb5d3aed832b8fb17c3ec298e5ac23b3f77674ec1196fe5ea177f503dcb120508434755103b836c0e09a912369bf9c") perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x2, 0xc0, 0x6, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x829ad33494642ace}, 0x8200, 0x2, 0x18, 0x8, 0x9, 0x7, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffc}, r0, 0x8, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r0, @ANYRESDEC], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x83d00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r0, @ANYRESDEC], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x83d00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000a00)="c18601aa1d1ac5fe15039600a6ee6f89ce6dd5cfea3fae844272c73a713e7bfc74b24239b3f63b0e3b2d0f5373826a1977d23b4d6fbebb78c0c70ab0f2c3bfb5ed22dfe462702891f79c328e03749538bd59ecb3ae6ae90abf0d4a1f71bd24680e146c08000000095d1ce8b6766ab561a496acf10600000000000000196cb1e5a38dffec2404cd8253dcf795e243e646c46dca3a1a611e76dbf2ea7b1825", 0x0, 0x778e, 0x0, 0x0, 0xfffffffffffffd31, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000a00)="c18601aa1d1ac5fe15039600a6ee6f89ce6dd5cfea3fae844272c73a713e7bfc74b24239b3f63b0e3b2d0f5373826a1977d23b4d6fbebb78c0c70ab0f2c3bfb5ed22dfe462702891f79c328e03749538bd59ecb3ae6ae90abf0d4a1f71bd24680e146c08000000095d1ce8b6766ab561a496acf10600000000000000196cb1e5a38dffec2404cd8253dcf795e243e646c46dca3a1a611e76dbf2ea7b1825", 0x0, 0x778e, 0x0, 0x0, 0xfffffffffffffd31, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0x2, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1a3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1c, 0x13, &(0x7f0000000200)=@raw=[@ldst={0x2, 0x2, 0x2, 0xb, 0xa, 0x50, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xb0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x59, &(0x7f0000000740)=""/89, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x0, 0x7, 0x1}, 0x10, r3, r4, 0x0, &(0x7f0000000900)=[r1, r5, r1], 0x0, 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1c, 0x13, &(0x7f0000000200)=@raw=[@ldst={0x2, 0x2, 0x2, 0xb, 0xa, 0x50, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xb0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x59, &(0x7f0000000740)=""/89, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x0, 0x7, 0x1}, 0x10, r3, r4, 0x0, &(0x7f0000000900)=[r1, r5, r1], 0x0, 0x10, 0x8}, 0x94) 4.327949618s ago: executing program 3 (id=2568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1}, 0x50) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 4.199273763s ago: executing program 2 (id=2569): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1c6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c0005000156016185750008af0180000000171300883795c04a00ba377a1b2cc32b38d3740000ffffffffffffff", 0x38}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x3, 0xd}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x8, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x7, 0x7f}, 0x8004, 0xd, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x1, 0x3, 0x9, 0x0, 0x10040000007feb, 0x4aad3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x7}, 0x14105, 0x32, 0xfffffbff, 0x6, 0xffff, 0x6, 0x7, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x18, 0x0}, 0x4000084) recvmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100) r8 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x10d, 0x43, &(0x7f0000000100), 0x4) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x100000010, 0x1d66ef49}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x32, 0x400c, 0x0, @void, @value=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004100)={0x6, 0xf, &(0x7f0000003e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ec0)='syzkaller\x00', 0x4000000, 0xb4, &(0x7f0000003f00)=""/180, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003fc0)={0x3, 0xf, 0xfb, 0x837}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000004080)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000040c0)=[{0x2, 0xe, 0x0, 0x8}], 0x10, 0x6}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x29, 0x2, 0x0) 4.089047979s ago: executing program 3 (id=2571): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000380)=0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_clone(0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r4, 0x5, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00fff5"], 0xcfa4) 3.924025146s ago: executing program 2 (id=2572): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000015c0)=@ll={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="77c0b5e26439"}, 0x80, &(0x7f0000001a00)}, 0x4005) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="d8000000140081054e81f782db44b9040a1d08020a000000040000a10d000200fec0000000000e1208000f0100810401a80016ea1f0006400303000806600cfac64dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a50b70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000640000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000500000000001d000000008041"], 0x50) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x5b, 0x1, 0xe, [{@private=0xa010101, 0x7}, {@multicast2, 0x9}, {@multicast1, 0x2}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xd}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x80b}, {@multicast2, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}]}]}}}], 0x88}, 0x20002800) 3.84788773s ago: executing program 1 (id=2573): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000002000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7897, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x3, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r4, r3}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0301683a267dab5696178137", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.884042785s ago: executing program 1 (id=2574): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00000fff04c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) 2.77853466s ago: executing program 1 (id=2575): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0xbc001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x6, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x77, &(0x7f0000000000)=r1, 0x62) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x64, 0x0, 0x0, 0x9e8}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) 1.488517541s ago: executing program 2 (id=2576): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000002000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7897, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x3, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8903, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) 1.487550001s ago: executing program 3 (id=2577): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300)=r0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x6f, 0xe61c, 0x7f, 0x6000, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xd8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800000000000000", 0x5c}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defc94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000280)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5950020", 0xd4}, {&(0x7f0000000380)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.356201407s ago: executing program 1 (id=2578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1}, 0x50) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 1.188634954s ago: executing program 2 (id=2579): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1c6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c0005000156016185750008af0180000000171300883795c04a00ba377a1b2cc32b38d3740000ffffffffffffff", 0x38}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x3, 0xd}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x8, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x7, 0x7f}, 0x8004, 0xd, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x1, 0x3, 0x9, 0x0, 0x10040000007feb, 0x4aad3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x7}, 0x14105, 0x32, 0xfffffbff, 0x6, 0xffff, 0x6, 0x7, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x18, 0x0}, 0x4000084) recvmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100) r8 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x10d, 0x43, &(0x7f0000000100), 0x4) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x100000010, 0x1d66ef49}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x32, 0x400c, 0x0, @void, @value=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004100)={0x6, 0xf, &(0x7f0000003e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ec0)='syzkaller\x00', 0x4000000, 0xb4, &(0x7f0000003f00)=""/180, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003fc0)={0x3, 0xf, 0xfb, 0x837}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000004080)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000040c0)=[{0x2, 0xe, 0x0, 0x8}], 0x10, 0x6}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x29, 0x2, 0x0) 1.110277088s ago: executing program 1 (id=2580): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0479e865c63100000008010021000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) 919.988397ms ago: executing program 3 (id=2581): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000002000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7897, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x3, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r4, r3}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0301683a267dab5696178137", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 877.758759ms ago: executing program 1 (id=2582): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cb, 0x0, @perf_config_ext={0x8, 0x75ac}, 0x15420, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800}, {0x1000000a, 0x4}], 0x10, 0x3ff}, 0x94) socket$kcm(0x2, 0x5, 0x84) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) close(0x3) socket$kcm(0xa, 0x5, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x8002, @dev={0xfe, 0x80, '\x00', 0x11}, 0x1000, 0x10000}, 0x80, 0x0}, 0x400d0a0) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffe30}, 0x140) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x1c) (async) recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000780), 0x5, &(0x7f0000000800)=""/62, 0x3e}, 0x40000000) (async) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)}, 0x20002800) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) close(0x3) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8040) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0xf7, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r8, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 801.079463ms ago: executing program 2 (id=2583): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x81, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x21, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x7, 0x31, &(0x7f0000000940)=""/49, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000009c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x4, 0x3, 0xf73}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000a40)=[r0], &(0x7f0000000a80)=[{0x3, 0x3, 0x2, 0x2}, {0x0, 0x3, 0x2, 0xc}, {0x2, 0x2, 0x2, 0x2}, {0x3, 0x2, 0x10, 0xb}, {0x4, 0x5, 0x6}, {0x4, 0x3, 0x4, 0x2}, {0x0, 0x3, 0x3, 0x1}, {0x2, 0x0, 0x1, 0xb}], 0x10, 0xffffff7f}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x3, 0x3a) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000080)={r1}) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'dvmrp1\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r6}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bfffffffd00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_subtree(r8, 0x0, 0x1e) 314.162635ms ago: executing program 3 (id=2584): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000002000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7897, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x3, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x80000000005}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) (fail_nth: 7) 0s ago: executing program 2 (id=2585): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000380)=0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_clone(0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r4, 0x5, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00fff5"], 0xcfa4) kernel console output (not intermixed with test programs): allowed=0-1 [ 241.357870][ T7429] CPU: 0 PID: 7429 Comm: syz.0.465 Not tainted syzkaller #0 [ 241.365223][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.375279][ T7429] Call Trace: [ 241.378561][ T7429] [ 241.381512][ T7429] dump_stack_lvl+0x18c/0x250 [ 241.386226][ T7429] ? show_regs_print_info+0x20/0x20 [ 241.391442][ T7429] ? load_image+0x420/0x420 [ 241.395957][ T7429] ? __rcu_read_unlock+0x7c/0xd0 [ 241.400894][ T7429] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.407359][ T7429] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 241.413916][ T7429] warn_alloc+0x246/0x340 [ 241.418254][ T7429] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.424410][ T7429] ? zone_watermark_ok_safe+0x230/0x230 [ 241.429975][ T7429] ? __get_vm_area_node+0x17b/0x370 [ 241.435202][ T7429] __vmalloc_node_range+0x394/0x1320 [ 241.440518][ T7429] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 241.446510][ T7429] ? lock_chain_count+0x20/0x20 [ 241.451385][ T7429] ? free_vm_area+0x50/0x50 [ 241.455889][ T7429] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.462051][ T7429] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 241.467600][ T7429] __vmalloc+0x7a/0x90 [ 241.471670][ T7429] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 241.477252][ T7429] bpf_prog_alloc_no_stats+0x46/0x430 [ 241.482647][ T7429] bpf_prog_alloc+0x3d/0x1a0 [ 241.487275][ T7429] bpf_prog_load+0x6b2/0x1610 [ 241.491965][ T7429] ? map_freeze+0x420/0x420 [ 241.496471][ T7429] ? __might_fault+0xaa/0x120 [ 241.501170][ T7429] ? __lock_acquire+0x7d80/0x7d80 [ 241.506201][ T7429] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 241.512032][ T7429] ? __might_fault+0xaa/0x120 [ 241.516731][ T7429] ? __might_fault+0xc6/0x120 [ 241.521416][ T7429] ? __might_fault+0xaa/0x120 [ 241.526115][ T7429] ? bpf_lsm_bpf+0x9/0x10 [ 241.530452][ T7429] ? security_bpf+0x7e/0xa0 [ 241.534960][ T7429] __sys_bpf+0x5ba/0x890 [ 241.539211][ T7429] ? bpf_link_show_fdinfo+0x560/0x560 [ 241.544591][ T7429] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.551199][ T7429] __x64_sys_bpf+0x7c/0x90 [ 241.555645][ T7429] do_syscall_64+0x55/0xb0 [ 241.560108][ T7429] ? clear_bhb_loop+0x40/0x90 [ 241.564846][ T7429] ? clear_bhb_loop+0x40/0x90 [ 241.569567][ T7429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.575487][ T7429] RIP: 0033:0x7f5994b9e159 [ 241.579911][ T7429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.599691][ T7429] RSP: 002b:00007f5995acc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.608123][ T7429] RAX: ffffffffffffffda RBX: 00007f5994e25fa0 RCX: 00007f5994b9e159 [ 241.616111][ T7429] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 241.624089][ T7429] RBP: 00007f5995acc090 R08: 0000000000000000 R09: 0000000000000000 [ 241.632065][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.640035][ T7429] R13: 00007f5994e26038 R14: 00007f5994e25fa0 R15: 00007ffd55e0a8d8 [ 241.648039][ T7429] [ 241.667414][ T7429] Mem-Info: [ 241.675948][ T7429] active_anon:5464 inactive_anon:0 isolated_anon:0 [ 241.675948][ T7429] active_file:16254 inactive_file:40013 isolated_file:0 [ 241.675948][ T7429] unevictable:768 dirty:136 writeback:0 [ 241.675948][ T7429] slab_reclaimable:9851 slab_unreclaimable:94878 [ 241.675948][ T7429] mapped:27384 shmem:1361 pagetables:558 [ 241.675948][ T7429] sec_pagetables:0 bounce:0 [ 241.675948][ T7429] kernel_misc_reclaimable:0 [ 241.675948][ T7429] free:1346224 free_pcp:7073 free_cma:0 [ 241.731465][ T7429] Node 0 active_anon:21856kB inactive_anon:0kB active_file:65016kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109536kB dirty:540kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10588kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no [ 241.764128][ T7429] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 241.803538][ T7429] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 241.831819][ T7429] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 241.837842][ T7429] Node 0 DMA32 free:1478868kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21816kB inactive_anon:0kB active_file:65016kB inactive_file:159036kB unevictable:1536kB writepending:540kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:11508kB local_pcp:6944kB free_cma:0kB [ 241.869795][ T7429] lowmem_reserve[]: 0 0 0 0 0 [ 241.874593][ T7429] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 241.902160][ T7429] lowmem_reserve[]: 0 0 0 0 0 [ 241.909371][ T7429] Node 1 Normal free:3890668kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16928kB local_pcp:4288kB free_cma:0kB [ 241.940339][ T7429] lowmem_reserve[]: 0 0 0 0 0 [ 241.945327][ T7429] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 241.958387][ T7429] Node 0 DMA32: 1183*4kB (UME) 955*8kB (UME) 988*16kB (UME) 1746*32kB (UME) 627*64kB (UME) 42*128kB (UME) 21*256kB (M) 8*512kB (M) 2*1024kB (M) 3*2048kB (UM) 325*4096kB (M) = 1478420kB [ 241.977084][ T7429] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 241.989071][ T7429] Node 1 Normal: 199*4kB (U) 40*8kB (UE) 37*16kB (UE) 68*32kB (UE) 27*64kB (UME) 6*128kB (UME) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890668kB [ 242.007414][ T7429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.017635][ T7429] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.027383][ T7429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.037119][ T7429] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.046931][ T7429] 57628 total pagecache pages [ 242.051655][ T7429] 0 pages in swap cache [ 242.055885][ T7429] Free swap = 124996kB [ 242.060156][ T7429] Total swap = 124996kB [ 242.064354][ T7429] 2097051 pages RAM [ 242.068509][ T7429] 0 pages HighMem/MovableOnly [ 242.073226][ T7429] 416965 pages reserved [ 242.077508][ T7429] 0 pages cma reserved [ 244.818692][ T7448] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 245.777784][ T7472] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 245.809433][ T7472] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 246.765682][ T7479] syzkaller0: entered promiscuous mode [ 246.790380][ T7479] syzkaller0: entered allmulticast mode [ 246.813121][ T1140] syzkaller0: tun_net_xmit 48 [ 247.197284][ T7491] wlan1: Trigger new scan to find an IBSS to join [ 247.546091][ T7500] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.489'. [ 250.238412][ T34] wlan1: Trigger new scan to find an IBSS to join [ 251.676526][ T7539] netlink: 'syz.3.502': attribute type 10 has an invalid length. [ 252.319625][ T7540] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 252.623078][ T7557] netlink: 'syz.3.507': attribute type 10 has an invalid length. [ 252.773556][ T7557] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.805366][ T7557] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 252.837175][ T7557] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 252.860162][ T7557] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 253.305428][ T7564] syzkaller0: entered promiscuous mode [ 253.323871][ T7564] syzkaller0: entered allmulticast mode [ 253.385991][ T3550] syzkaller0: tun_net_xmit 48 [ 255.464815][ T7587] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 256.102664][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.109219][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.240368][ T1140] wlan1: Trigger new scan to find an IBSS to join [ 257.877610][ T7620] syzkaller0: entered promiscuous mode [ 257.904944][ T7620] syzkaller0: entered allmulticast mode [ 261.132713][ T7662] netlink: 164 bytes leftover after parsing attributes in process `syz.1.544'. [ 261.283044][ T1129] wlan1: Trigger new scan to find an IBSS to join [ 261.543709][ T7666] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.546'. [ 261.749636][ T7673] netlink: 'syz.1.548': attribute type 4 has an invalid length. [ 261.767256][ T7673] netlink: 152 bytes leftover after parsing attributes in process `syz.1.548'. [ 261.911856][ T7679] netlink: 'syz.2.551': attribute type 21 has an invalid length. [ 262.002801][ T7683] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.553'. [ 262.184922][ T7688] syzkaller0: entered promiscuous mode [ 262.190787][ T7688] syzkaller0: entered allmulticast mode [ 262.201226][ T7685] netlink: 'syz.3.554': attribute type 21 has an invalid length. [ 262.214771][ T7685] netlink: 156 bytes leftover after parsing attributes in process `syz.3.554'. [ 262.240958][ T7688] syzkaller0: create flow: hash 913197319 index 1 [ 262.259212][ T1140] syzkaller0: tun_net_xmit 48 [ 262.283047][ T3550] wlan1: Creating new IBSS network, BSSID 1a:2d:c9:3f:e1:c8 [ 262.283976][ T7685] sit0: left promiscuous mode [ 262.366006][ T7689] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.553'. [ 262.376051][ T7689] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 262.556508][ T7693] sit0: entered promiscuous mode [ 262.682895][ T7687] syzkaller0: delete flow: hash 913197319 index 1 [ 265.040789][ T7736] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.567'. [ 265.050735][ T7736] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 265.146282][ T7733] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.567'. [ 265.659160][ T7751] netlink: 'syz.2.573': attribute type 8 has an invalid length. [ 265.674569][ T7751] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.573'. [ 265.725461][ T7751] netlink: 168 bytes leftover after parsing attributes in process `syz.2.573'. [ 266.481315][ T7771] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.579'. [ 266.636088][ T7776] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.579'. [ 266.672359][ T7776] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 269.787668][ T7836] netlink: 'syz.2.599': attribute type 10 has an invalid length. [ 275.092376][ T7896] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 275.152577][ T7896] team0: Device wg1 is of different type [ 275.579683][ T7909] syzkaller0: entered promiscuous mode [ 275.585246][ T7909] syzkaller0: entered allmulticast mode [ 278.083220][ T7919] syzkaller0: entered promiscuous mode [ 278.108630][ T7919] syzkaller0: entered allmulticast mode [ 280.330437][ T7953] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.640'. [ 284.677828][ T7957] C: renamed from team_slave_0 (while UP) [ 284.685286][ T7957] netlink: 152 bytes leftover after parsing attributes in process `syz.0.642'. [ 284.902033][ T7967] netlink: 'syz.2.646': attribute type 23 has an invalid length. [ 284.970544][ T7966] syzkaller0: entered promiscuous mode [ 284.976189][ T7966] syzkaller0: entered allmulticast mode [ 284.984490][ T7963] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 284.992815][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.644'. [ 285.003092][ T7963] bridge0: port 3(team0) entered blocking state [ 285.011068][ T7963] bridge0: port 3(team0) entered disabled state [ 285.019036][ T7963] team0: entered allmulticast mode [ 285.025089][ T7963] C: entered allmulticast mode [ 285.039011][ T7963] team_slave_1: entered allmulticast mode [ 285.076017][ T7963] team0: entered promiscuous mode [ 285.091346][ T7963] C: entered promiscuous mode [ 285.098195][ T7963] team_slave_1: entered promiscuous mode [ 285.114930][ T7963] bridge0: port 3(team0) entered blocking state [ 285.122276][ T7963] bridge0: port 3(team0) entered forwarding state [ 285.656373][ T7992] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.652'. [ 287.805066][ T8009] TCP: TCP_TX_DELAY enabled [ 288.952104][ T8028] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.663'. [ 289.035202][ T8030] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.664'. [ 289.364111][ T8034] syzkaller0: entered promiscuous mode [ 289.373619][ T8034] syzkaller0: entered allmulticast mode [ 289.392334][ T43] syzkaller0: tun_net_xmit 48 [ 289.525342][ T8045] syzkaller0: tun_net_xmit 1280 [ 289.554277][ T8045] syzkaller0: create flow: hash 1991066096 index 1 [ 289.583091][ T8043] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 289.593447][ T8043] netlink: 'syz.0.669': attribute type 3 has an invalid length. [ 289.609468][ T8043] netlink: 132 bytes leftover after parsing attributes in process `syz.0.669'. [ 289.637092][ T8043] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 289.656782][ T8043] netlink: 168 bytes leftover after parsing attributes in process `syz.0.669'. [ 289.770830][ T8033] syzkaller0: delete flow: hash 1991066096 index 1 [ 292.302560][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 292.770290][ T8060] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.676'. [ 292.779909][ T8060] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.676'. [ 292.798301][ T8061] netlink: 'syz.3.674': attribute type 10 has an invalid length. [ 292.821395][ T8061] team0: Port device netdevsim0 added [ 292.844613][ T8064] netlink: 'syz.3.674': attribute type 10 has an invalid length. [ 292.873196][ T8064] team0: Port device netdevsim0 removed [ 292.891173][ T8064] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 292.925198][ T8066] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 292.952401][ T8066] netlink: 'syz.3.674': attribute type 4 has an invalid length. [ 292.961704][ T8066] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.674'. [ 293.037422][ T8083] netlink: 156 bytes leftover after parsing attributes in process `syz.2.680'. [ 293.470316][ T8089] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.683'. [ 294.158905][ T8101] netlink: 'syz.1.686': attribute type 10 has an invalid length. [ 294.443743][ T8101] team0: Device vxcan1 is of different type [ 295.531808][ T5793] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 296.277598][ T8117] netlink: 'syz.2.688': attribute type 9 has an invalid length. [ 296.351762][ T8117] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.688'. [ 297.642226][ T8116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.716697][ T8123] netlink: 'syz.1.690': attribute type 10 has an invalid length. [ 297.769535][ T8123] bridge0: port 3(dummy0) entered disabled state [ 297.776181][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.785228][ T8123] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.832807][ T8123] bridge0: port 3(dummy0) entered blocking state [ 297.839406][ T8123] bridge0: port 3(dummy0) entered forwarding state [ 297.846285][ T8123] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.853823][ T8123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.861714][ T8123] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.869464][ T8123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.890943][ T8123] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 297.910356][ T8124] netlink: 'syz.1.690': attribute type 10 has an invalid length. [ 297.940256][ T8124] bridge0: port 3(dummy0) entered disabled state [ 297.946954][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.954237][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.222021][ T8137] netlink: 'syz.0.693': attribute type 3 has an invalid length. [ 298.252212][ T8137] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.693'. [ 299.025426][ T8147] netlink: 164 bytes leftover after parsing attributes in process `syz.2.696'. [ 299.746311][ T8164] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 299.754606][ T8164] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.702'. [ 299.869539][ T8165] netlink: 'syz.2.701': attribute type 4 has an invalid length. [ 299.895278][ T8165] netlink: 152 bytes leftover after parsing attributes in process `syz.2.701'. [ 304.984726][ T8231] netlink: 'syz.2.724': attribute type 2 has an invalid length. [ 305.255282][ T8269] netlink: 'syz.3.733': attribute type 3 has an invalid length. [ 305.269507][ T8269] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.733'. [ 305.304334][ T8262] netlink: 'syz.1.732': attribute type 4 has an invalid length. [ 305.324310][ T8262] netlink: 152 bytes leftover after parsing attributes in process `syz.1.732'. [ 306.177859][ T8299] delete_channel: no stack [ 306.182503][ T8299] delete_channel: no stack [ 307.263720][ T8319] netlink: 'syz.1.746': attribute type 10 has an invalid length. [ 307.595583][ T8323] syzkaller0: entered promiscuous mode [ 307.604588][ T8323] syzkaller0: entered allmulticast mode [ 307.618566][ T43] syzkaller0: tun_net_xmit 48 [ 308.404540][ T8340] netlink: 'syz.1.752': attribute type 3 has an invalid length. [ 308.467781][ T8340] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.752'. [ 310.038936][ T8336] netlink: 763 bytes leftover after parsing attributes in process `syz.3.751'. [ 310.763588][ T8352] veth0_to_bond: entered allmulticast mode [ 311.101678][ T8366] syzkaller0: entered promiscuous mode [ 311.107576][ T8366] syzkaller0: entered allmulticast mode [ 311.145121][ T8369] netlink: 'syz.2.764': attribute type 10 has an invalid length. [ 311.187200][ T8367] FAULT_INJECTION: forcing a failure. [ 311.187200][ T8367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.206077][ T8367] CPU: 1 PID: 8367 Comm: syz.1.762 Not tainted syzkaller #0 [ 311.213416][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.223609][ T8367] Call Trace: [ 311.226925][ T8367] [ 311.229889][ T8367] dump_stack_lvl+0x18c/0x250 [ 311.234619][ T8367] ? show_regs_print_info+0x20/0x20 [ 311.239869][ T8367] ? load_image+0x420/0x420 [ 311.244418][ T8367] ? __might_fault+0xaa/0x120 [ 311.249147][ T8367] ? __lock_acquire+0x7d80/0x7d80 [ 311.254227][ T8367] should_fail_ex+0x394/0x4c0 [ 311.258969][ T8367] _copy_from_iter+0x1cd/0x1290 [ 311.263887][ T8367] ? copyout_mc+0x70/0x70 [ 311.268295][ T8367] tun_get_user+0x38a/0x3d30 [ 311.272971][ T8367] ? aa_file_perm+0x3e3/0xee0 [ 311.277699][ T8367] ? rcu_read_unlock+0xa0/0xa0 [ 311.282532][ T8367] ? tun_get+0x1c/0x2e0 [ 311.286740][ T8367] ? __lock_acquire+0x7d80/0x7d80 [ 311.291827][ T8367] ? tun_get+0x1c/0x2e0 [ 311.296041][ T8367] tun_chr_write_iter+0x119/0x200 [ 311.301119][ T8367] vfs_write+0x474/0x9a0 [ 311.305443][ T8367] ? file_end_write+0x250/0x250 [ 311.310331][ T8367] ? __fget_files+0x3fc/0x460 [ 311.315021][ T8367] ? __fdget_pos+0x1d8/0x330 [ 311.319615][ T8367] ? ksys_write+0x74/0x260 [ 311.324057][ T8367] ksys_write+0x151/0x260 [ 311.328413][ T8367] ? __ia32_sys_read+0x90/0x90 [ 311.333231][ T8367] ? lockdep_hardirqs_on+0x98/0x150 [ 311.338482][ T8367] do_syscall_64+0x55/0xb0 [ 311.342950][ T8367] ? clear_bhb_loop+0x40/0x90 [ 311.347677][ T8367] ? clear_bhb_loop+0x40/0x90 [ 311.352433][ T8367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.358386][ T8367] RIP: 0033:0x7fbcf6b9e159 [ 311.362850][ T8367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.364580][ T8372] syzkaller0: entered promiscuous mode [ 311.382483][ T8367] RSP: 002b:00007fbcf7ac8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.382513][ T8367] RAX: ffffffffffffffda RBX: 00007fbcf6e26090 RCX: 00007fbcf6b9e159 [ 311.382527][ T8367] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000006 [ 311.382541][ T8367] RBP: 00007fbcf7ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 311.382553][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.382565][ T8367] R13: 00007fbcf6e26128 R14: 00007fbcf6e26090 R15: 00007ffcab423a28 [ 311.389610][ T8372] syzkaller0: entered allmulticast mode [ 311.396463][ T8367] [ 311.460535][ T7491] syzkaller0: tun_net_xmit 48 [ 316.966734][ T8440] netlink: 'syz.3.782': attribute type 10 has an invalid length. [ 316.975154][ T8440] veth1_vlan: entered allmulticast mode [ 317.030156][ T8440] team0: Device veth1_vlan failed to register rx_handler [ 317.548573][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.554990][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.323229][ T8463] syzkaller0: entered promiscuous mode [ 318.350878][ T8463] syzkaller0: entered allmulticast mode [ 318.417889][ T8466] netlink: 'syz.3.792': attribute type 2 has an invalid length. [ 318.467751][ T8473] netlink: 'syz.3.792': attribute type 2 has an invalid length. [ 319.041245][ T8484] netlink: 'syz.3.796': attribute type 1 has an invalid length. [ 319.058294][ T8484] netlink: 'syz.3.796': attribute type 3 has an invalid length. [ 319.075968][ T8484] netlink: 132 bytes leftover after parsing attributes in process `syz.3.796'. [ 321.222845][ T8488] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 321.230890][ T8488] netlink: 168 bytes leftover after parsing attributes in process `syz.3.796'. [ 321.439869][ T8502] netlink: 152 bytes leftover after parsing attributes in process `syz.1.801'. [ 322.673185][ T8530] syzkaller0: entered promiscuous mode [ 322.692881][ T8530] syzkaller0: entered allmulticast mode [ 322.733216][ T34] syzkaller0: tun_net_xmit 48 [ 323.106152][ T8536] delete_channel: no stack [ 323.226847][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 323.679344][ T8553] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.820'. [ 324.062553][ T8561] netlink: 'syz.1.821': attribute type 29 has an invalid length. [ 325.723821][ T8574] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 325.732540][ T8574] netlink: 'syz.2.824': attribute type 3 has an invalid length. [ 325.741448][ T8574] netlink: 132 bytes leftover after parsing attributes in process `syz.2.824'. [ 326.450984][ T8559] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 326.477777][ T8559] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 326.517479][ T8561] netlink: 'syz.1.821': attribute type 29 has an invalid length. [ 326.551663][ T8574] netlink: 'syz.2.824': attribute type 10 has an invalid length. [ 326.559896][ T8574] netlink: 168 bytes leftover after parsing attributes in process `syz.2.824'. [ 327.146309][ T8590] netlink: 'syz.1.832': attribute type 8 has an invalid length. [ 327.180872][ T8590] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.832'. [ 327.365925][ T8593] netlink: 60 bytes leftover after parsing attributes in process `syz.1.832'. [ 332.208846][ T8650] netlink: 'syz.3.854': attribute type 8 has an invalid length. [ 332.239563][ T8650] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.854'. [ 332.462773][ T8650] netlink: 60 bytes leftover after parsing attributes in process `syz.3.854'. [ 332.677306][ T8656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.856'. [ 333.261963][ T8666] netlink: 'syz.0.859': attribute type 4 has an invalid length. [ 333.376726][ T8666] netlink: 152 bytes leftover after parsing attributes in process `syz.0.859'. [ 334.759647][ T8682] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.866'. [ 334.925789][ T8685] syzkaller0: entered promiscuous mode [ 334.990260][ T8685] syzkaller0: entered allmulticast mode [ 335.046098][ T8694] netlink: 132 bytes leftover after parsing attributes in process `syz.2.869'. [ 335.067301][ T34] syzkaller0: tun_net_xmit 48 [ 335.188841][ T8685] syzkaller0: create flow: hash 2874185847 index 1 [ 335.376674][ T8680] syzkaller0: delete flow: hash 2874185847 index 1 [ 336.510644][ T8719] netlink: 'syz.2.875': attribute type 8 has an invalid length. [ 336.518600][ T8719] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.875'. [ 338.295029][ T8713] netlink: 128 bytes leftover after parsing attributes in process `syz.1.872'. [ 338.305971][ T8713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.325836][ T8714] tap0: tun_chr_ioctl cmd 1074025676 [ 338.333866][ T8714] tap0: owner set to 776 [ 338.339280][ T8720] netlink: 60 bytes leftover after parsing attributes in process `syz.2.875'. [ 339.314491][ T8752] netlink: 'syz.2.885': attribute type 21 has an invalid length. [ 339.360701][ T8749] syzkaller0: entered promiscuous mode [ 339.366239][ T8749] syzkaller0: entered allmulticast mode [ 339.495093][ T8763] pimreg: tun_chr_ioctl cmd 1074025677 [ 339.501100][ T8763] pimreg: linktype set to 774 [ 342.150183][ T8782] netlink: 128 bytes leftover after parsing attributes in process `syz.2.892'. [ 342.259227][ T8782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.281975][ T8785] tap0: tun_chr_ioctl cmd 1074025676 [ 342.316691][ T8785] tap0: owner set to 776 [ 342.426978][ T8803] netlink: 'syz.3.901': attribute type 21 has an invalid length. [ 342.435114][ T8803] netlink: 'syz.3.901': attribute type 12 has an invalid length. [ 342.446787][ T8803] netlink: 'syz.3.901': attribute type 13 has an invalid length. [ 342.460496][ T8803] netlink: 'syz.3.901': attribute type 14 has an invalid length. [ 342.470929][ T8803] netlink: 'syz.3.901': attribute type 15 has an invalid length. [ 342.481302][ T8805] netlink: 'syz.3.901': attribute type 153 has an invalid length. [ 342.489436][ T8805] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.901'. [ 342.500950][ T8803] netlink: 'syz.3.901': attribute type 16 has an invalid length. [ 342.507276][ T8782] syz.2.892 (8782) used greatest stack depth: 19352 bytes left [ 342.532530][ T8803] netlink: 12926 bytes leftover after parsing attributes in process `syz.3.901'. [ 343.235823][ T8834] netlink: 'syz.2.909': attribute type 10 has an invalid length. [ 343.904094][ T8846] netlink: 128 bytes leftover after parsing attributes in process `syz.0.912'. [ 343.911846][ C0] TCP: lo: Driver has suspect GRO implementation, TCP performance may be compromised. [ 343.947097][ T8846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.046292][ T8846] tap0: tun_chr_ioctl cmd 1074025676 [ 344.051969][ T8846] tap0: owner set to 776 [ 344.057239][ T8850] netlink: 'syz.2.914': attribute type 21 has an invalid length. [ 345.034838][ T8868] syzkaller0: entered promiscuous mode [ 345.047380][ T8868] syzkaller0: entered allmulticast mode [ 345.099368][ T3471] syzkaller0: tun_net_xmit 48 [ 345.275873][ T8875] syzkaller0: create flow: hash 2874185847 index 1 [ 345.766682][ T8867] syzkaller0: delete flow: hash 2874185847 index 1 [ 349.081459][ T8903] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 349.107369][ T8903] geneve1: entered promiscuous mode [ 349.112766][ T8903] geneve1: entered allmulticast mode [ 349.119944][ T8903] team0: Port device geneve1 added [ 349.779013][ T8939] syzkaller0: entered promiscuous mode [ 349.842905][ T8939] syzkaller0: entered allmulticast mode [ 350.019459][ T8939] syzkaller0: create flow: hash 2731021333 index 1 [ 350.612407][ T8937] syzkaller0: delete flow: hash 2731021333 index 1 [ 350.710647][ T8955] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.942'. [ 352.937145][ T8955] netlink: 'syz.1.942': attribute type 1 has an invalid length. [ 352.945073][ T8955] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.942'. [ 352.956743][ T8967] netlink: 184 bytes leftover after parsing attributes in process `syz.3.946'. [ 353.742963][ T8974] netlink: 'syz.1.947': attribute type 10 has an invalid length. [ 354.264538][ T3550] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 354.286347][ T8994] netlink: 'syz.0.955': attribute type 10 has an invalid length. [ 354.327097][ T8994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.955'. [ 357.128074][ T9049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.970'. [ 357.371800][ T9058] netlink: 'syz.0.974': attribute type 10 has an invalid length. [ 359.993682][ T9080] netlink: 'syz.0.982': attribute type 10 has an invalid length. [ 360.024749][ T9080] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 360.073275][ T9080] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 360.098610][ T9080] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 360.133748][ T9080] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 360.168830][ T9083] netlink: 'syz.1.983': attribute type 21 has an invalid length. [ 360.184415][ T9083] IPv6: NLM_F_CREATE should be specified when creating new route [ 360.323001][ T9086] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 360.331763][ T9089] netlink: 'syz.3.984': attribute type 10 has an invalid length. [ 360.344216][ T9089] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 360.353655][ T5814] syzkaller1: tun_net_xmit 90 [ 360.958272][ T9107] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.989'. [ 364.573780][ T9130] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 364.599672][ T9130] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.995'. [ 364.884700][ T9142] netlink: 'syz.1.998': attribute type 21 has an invalid length. [ 365.317856][ T9154] netlink: 'syz.3.1001': attribute type 4 has an invalid length. [ 365.353135][ T9154] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1001'. [ 365.753309][ T9168] netlink: set zone limit has 8 unknown bytes [ 365.930981][ T9173] netlink: 'syz.2.1010': attribute type 3 has an invalid length. [ 365.957214][ T9173] netlink: 'syz.2.1010': attribute type 1 has an invalid length. [ 366.005565][ T9173] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1010'. [ 366.404777][ T9197] netlink: 'syz.1.1018': attribute type 46 has an invalid length. [ 369.905369][ T9256] netlink: 'syz.1.1037': attribute type 4 has an invalid length. [ 369.949976][ T9256] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1037'. [ 373.353899][ T9278] netlink: 'syz.0.1046': attribute type 10 has an invalid length. [ 376.342251][ T9354] netlink: 'syz.3.1072': attribute type 1 has an invalid length. [ 376.350983][ T9354] netlink: 'syz.3.1072': attribute type 3 has an invalid length. [ 376.374596][ T9354] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1072'. [ 377.390493][ T9391] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1086'. [ 377.678454][ T9398] syzkaller0: entered promiscuous mode [ 377.714580][ T9398] syzkaller0: entered allmulticast mode [ 377.725561][ T3550] syzkaller0: tun_net_xmit 48 [ 378.960975][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.975699][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.094643][ T9426] netlink: 'syz.0.1095': attribute type 21 has an invalid length. [ 380.137619][ T9426] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1095'. [ 380.487620][ T9440] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 380.511994][ T9440] netlink: 'syz.0.1100': attribute type 3 has an invalid length. [ 380.520122][ T9440] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1100'. [ 381.405597][ T9456] syzkaller0: entered promiscuous mode [ 381.411274][ T9456] syzkaller0: entered allmulticast mode [ 381.418908][ T9459] FAULT_INJECTION: forcing a failure. [ 381.418908][ T9459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.436198][ T9459] CPU: 0 PID: 9459 Comm: syz.1.1107 Not tainted syzkaller #0 [ 381.443646][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.453734][ T9459] Call Trace: [ 381.457035][ T9459] [ 381.460010][ T9459] dump_stack_lvl+0x18c/0x250 [ 381.464852][ T9459] ? show_regs_print_info+0x20/0x20 [ 381.470083][ T9459] ? load_image+0x420/0x420 [ 381.474640][ T9459] ? __might_fault+0xaa/0x120 [ 381.479466][ T9459] ? __lock_acquire+0x7d80/0x7d80 [ 381.484550][ T9459] should_fail_ex+0x394/0x4c0 [ 381.489283][ T9459] _copy_from_iter+0x1cd/0x1290 [ 381.494144][ T9459] ? rep_movs_alternative+0x4a/0x90 [ 381.499374][ T9459] ? copyout_mc+0x70/0x70 [ 381.503734][ T9459] ? copyout_mc+0x70/0x70 [ 381.508072][ T9459] ? __virt_addr_valid+0x10c/0x380 [ 381.513211][ T9459] ? page_copy_sane+0x4e/0x270 [ 381.518001][ T9459] copy_page_from_iter+0x7b/0x100 [ 381.523059][ T9459] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 381.528951][ T9459] tun_get_user+0xc99/0x3d30 [ 381.533651][ T9459] ? aa_file_perm+0x3e3/0xee0 [ 381.538414][ T9459] ? rcu_read_unlock+0xa0/0xa0 [ 381.543226][ T9459] ? tun_get+0x1c/0x2e0 [ 381.547426][ T9459] ? __lock_acquire+0x7d80/0x7d80 [ 381.552487][ T9459] ? tun_get+0x1c/0x2e0 [ 381.556686][ T9459] tun_chr_write_iter+0x119/0x200 [ 381.561750][ T9459] vfs_write+0x474/0x9a0 [ 381.566086][ T9459] ? file_end_write+0x250/0x250 [ 381.570973][ T9459] ? __fget_files+0x3fc/0x460 [ 381.575708][ T9459] ? __fdget_pos+0x1d8/0x330 [ 381.580327][ T9459] ? ksys_write+0x74/0x260 [ 381.584779][ T9459] ksys_write+0x151/0x260 [ 381.589147][ T9459] ? __ia32_sys_read+0x90/0x90 [ 381.593953][ T9459] ? lockdep_hardirqs_on+0x98/0x150 [ 381.599335][ T9459] do_syscall_64+0x55/0xb0 [ 381.603783][ T9459] ? clear_bhb_loop+0x40/0x90 [ 381.608586][ T9459] ? clear_bhb_loop+0x40/0x90 [ 381.613299][ T9459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.619235][ T9459] RIP: 0033:0x7fbcf6b9e159 [ 381.623686][ T9459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.643337][ T9459] RSP: 002b:00007fbcf7ae9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 381.651785][ T9459] RAX: ffffffffffffffda RBX: 00007fbcf6e25fa0 RCX: 00007fbcf6b9e159 [ 381.659781][ T9459] RDX: 000000000000fdef RSI: 0000200000000780 RDI: 00000000000000c8 [ 381.667778][ T9459] RBP: 00007fbcf7ae9090 R08: 0000000000000000 R09: 0000000000000000 [ 381.675783][ T9459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.683793][ T9459] R13: 00007fbcf6e26038 R14: 00007fbcf6e25fa0 R15: 00007ffcab423a28 [ 381.691874][ T9459] [ 381.827821][ T9463] netlink: 'syz.2.1108': attribute type 49 has an invalid length. [ 381.889214][ T9463] netlink: set zone limit has 8 unknown bytes [ 383.119942][ T9489] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 384.349308][ T9476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1113'. [ 384.367576][ T9485] veth1_macvtap: left promiscuous mode [ 384.388031][ T9489] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1116'. [ 384.564030][ T9496] syzkaller0: entered promiscuous mode [ 384.574387][ T9496] syzkaller0: entered allmulticast mode [ 384.587586][ T3481] syzkaller0: tun_net_xmit 48 [ 384.937384][ T9497] syzkaller0: create flow: hash 2874185847 index 1 [ 385.122062][ T9495] syzkaller0: delete flow: hash 2874185847 index 1 [ 385.150195][ T9513] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1124'. [ 385.383506][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 387.451225][ T9525] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1129'. [ 387.460532][ T9521] netlink: 'syz.3.1128': attribute type 27 has an invalid length. [ 388.561477][ T9560] syzkaller0: entered promiscuous mode [ 388.576622][ T9560] syzkaller0: entered allmulticast mode [ 388.594726][ T59] syzkaller0: tun_net_xmit 48 [ 388.802556][ T9568] syzkaller0: create flow: hash 2874185847 index 1 [ 388.918978][ T9559] syzkaller0: delete flow: hash 2874185847 index 1 [ 390.449659][ T9605] syz.3.1158[9605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.449834][ T9605] syz.3.1158[9605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.654622][ T9621] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1164'. [ 393.679851][ T9628] netlink: 'syz.2.1167': attribute type 4 has an invalid length. [ 393.688117][ T9628] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1167'. [ 393.760526][ T9628] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 393.849347][ T9644] netlink: 'syz.3.1172': attribute type 3 has an invalid length. [ 393.881881][ T9644] netlink: 'syz.3.1172': attribute type 6 has an invalid length. [ 393.911806][ T9644] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1172'. [ 394.085566][ T9651] syzkaller0: entered promiscuous mode [ 394.135588][ T9651] syzkaller0: entered allmulticast mode [ 394.168256][ T9649] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 394.186744][ T9649] netlink: 54844 bytes leftover after parsing attributes in process `syz.0.1173'. [ 395.426842][ T9670] syzkaller0: entered promiscuous mode [ 395.432449][ T9670] syzkaller0: entered allmulticast mode [ 397.288774][ T59] syzkaller0: tun_net_xmit 48 [ 398.262195][ T9698] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 398.279262][ T9698] netlink: 54844 bytes leftover after parsing attributes in process `syz.3.1189'. [ 398.865594][ T9708] netlink: 'syz.1.1192': attribute type 3 has an invalid length. [ 398.876385][ T9708] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1192'. [ 398.936224][ T9709] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.1192'. [ 399.894324][ T9701] netlink: 'syz.3.1190': attribute type 21 has an invalid length. [ 399.902293][ T9701] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1190'. [ 399.913298][ T9701] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1190'. [ 399.932266][ T9703] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1190'. [ 399.959498][ T9703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.986672][ T9709] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1192'. [ 401.131030][ T9732] netlink: 'syz.2.1200': attribute type 1 has an invalid length. [ 401.145360][ T9732] netlink: 54844 bytes leftover after parsing attributes in process `syz.2.1200'. [ 401.419677][ T9739] netlink: 'syz.2.1204': attribute type 29 has an invalid length. [ 401.452951][ T9736] syzkaller0: entered promiscuous mode [ 401.476585][ T9736] syzkaller0: entered allmulticast mode [ 401.529596][ T9739] netlink: 'syz.2.1204': attribute type 29 has an invalid length. [ 401.714907][ T9739] netlink: 'syz.2.1204': attribute type 29 has an invalid length. [ 404.165537][ T9768] netlink: 'syz.2.1211': attribute type 10 has an invalid length. [ 404.413557][ T9772] syzkaller0: entered promiscuous mode [ 404.419307][ T9772] syzkaller0: entered allmulticast mode [ 404.432585][ T3550] syzkaller0: tun_net_xmit 48 [ 405.138845][ T9772] syzkaller0: create flow: hash 2874185847 index 1 [ 405.202250][ T9771] syzkaller0: delete flow: hash 2874185847 index 1 [ 408.825779][ T9786] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1216'. [ 410.114472][ T9855] syzkaller0: entered promiscuous mode [ 410.122171][ T9855] syzkaller0: entered allmulticast mode [ 410.138302][ T78] syzkaller0: tun_net_xmit 48 [ 410.436701][ T9864] syzkaller0: create flow: hash 2874185847 index 1 [ 410.533567][ T9854] syzkaller0: delete flow: hash 2874185847 index 1 [ 412.934640][ T9898] FAULT_INJECTION: forcing a failure. [ 412.934640][ T9898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.958546][ T9898] CPU: 1 PID: 9898 Comm: syz.0.1253 Not tainted syzkaller #0 [ 412.966015][ T9898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.976120][ T9898] Call Trace: [ 412.979447][ T9898] [ 412.982419][ T9898] dump_stack_lvl+0x18c/0x250 [ 412.987150][ T9898] ? show_regs_print_info+0x20/0x20 [ 412.992373][ T9898] ? load_image+0x420/0x420 [ 412.996895][ T9898] ? __lock_acquire+0x7d80/0x7d80 [ 413.001933][ T9898] ? snprintf+0xe9/0x140 [ 413.006191][ T9898] should_fail_ex+0x394/0x4c0 [ 413.010891][ T9898] _copy_to_user+0x2f/0xa0 [ 413.015325][ T9898] simple_read_from_buffer+0xe7/0x150 [ 413.020717][ T9898] proc_fail_nth_read+0x1e8/0x260 [ 413.025795][ T9898] ? proc_fault_inject_write+0x360/0x360 [ 413.031448][ T9898] ? fsnotify_perm+0x271/0x5e0 [ 413.036238][ T9898] ? proc_fault_inject_write+0x360/0x360 [ 413.041893][ T9898] vfs_read+0x298/0x990 [ 413.046076][ T9898] ? kernel_read+0x1e0/0x1e0 [ 413.050684][ T9898] ? __fget_files+0x28/0x460 [ 413.055288][ T9898] ? __fget_files+0x3fc/0x460 [ 413.059987][ T9898] ? __fdget_pos+0x2a3/0x330 [ 413.064594][ T9898] ? ksys_read+0x74/0x260 [ 413.068946][ T9898] ksys_read+0x151/0x260 [ 413.073212][ T9898] ? vfs_write+0x9a0/0x9a0 [ 413.077655][ T9898] ? lockdep_hardirqs_on+0x98/0x150 [ 413.082868][ T9898] do_syscall_64+0x55/0xb0 [ 413.087298][ T9898] ? clear_bhb_loop+0x40/0x90 [ 413.091991][ T9898] ? clear_bhb_loop+0x40/0x90 [ 413.096688][ T9898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.102601][ T9898] RIP: 0033:0x7f5994b5e98e [ 413.107028][ T9898] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 413.126656][ T9898] RSP: 002b:00007f5995acbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.135087][ T9898] RAX: ffffffffffffffda RBX: 00007f5995acc6c0 RCX: 00007f5994b5e98e [ 413.143075][ T9898] RDX: 000000000000000f RSI: 00007f5995acc0a0 RDI: 0000000000000005 [ 413.151063][ T9898] RBP: 00007f5995acc090 R08: 0000000000000000 R09: 0000000000000000 [ 413.159053][ T9898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.167034][ T9898] R13: 00007f5994e26038 R14: 00007f5994e25fa0 R15: 00007ffd55e0a8d8 [ 413.175041][ T9898] [ 413.543132][ T9911] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 413.555547][ T9911] netlink: 'syz.2.1257': attribute type 3 has an invalid length. [ 413.563960][ T9911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1257'. [ 413.579877][ T9911] netlink: 'syz.2.1257': attribute type 10 has an invalid length. [ 413.588017][ T9911] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1257'. [ 413.837121][ T9916] netlink: 'syz.3.1259': attribute type 10 has an invalid length. [ 413.845158][ T9916] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1259'. [ 413.857820][ T9916] bridge0: port 3(team0) entered blocking state [ 413.864327][ T9916] bridge0: port 3(team0) entered disabled state [ 413.875636][ T9916] team0: entered allmulticast mode [ 413.884442][ T9916] team_slave_0: entered allmulticast mode [ 413.893308][ T9916] team_slave_1: entered allmulticast mode [ 413.908115][ T9916] team0: entered promiscuous mode [ 413.913479][ T9916] team_slave_0: entered promiscuous mode [ 413.920304][ T9916] team_slave_1: entered promiscuous mode [ 413.935952][ T9916] bridge0: port 3(team0) entered blocking state [ 413.942852][ T9916] bridge0: port 3(team0) entered forwarding state [ 414.250630][ T9921] syzkaller0: entered promiscuous mode [ 414.260107][ T9921] syzkaller0: entered allmulticast mode [ 416.413562][ T9191] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 416.633014][ T9929] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1264'. [ 418.210589][ T9943] netlink: 'syz.0.1267': attribute type 28 has an invalid length. [ 423.282626][T10003] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1286'. [ 423.308010][T10003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.407530][T10001] syzkaller0: entered promiscuous mode [ 423.413083][T10001] syzkaller0: entered allmulticast mode [ 425.671386][T10029] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1293'. [ 425.927712][T10030] syzkaller0: entered promiscuous mode [ 425.933274][T10030] syzkaller0: entered allmulticast mode [ 425.992882][ T9191] syzkaller0: tun_net_xmit 48 [ 426.263889][T10035] syzkaller0: create flow: hash 2874185847 index 1 [ 426.392246][T10027] syzkaller0: delete flow: hash 2874185847 index 1 [ 428.566794][T10062] syzkaller0: entered promiscuous mode [ 428.596650][T10062] syzkaller0: entered allmulticast mode [ 431.815446][T10102] syzkaller0: entered promiscuous mode [ 431.826030][T10102] syzkaller0: entered allmulticast mode [ 434.601274][T10129] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1320'. [ 434.612065][T10131] netlink: 'syz.3.1320': attribute type 10 has an invalid length. [ 434.626045][T10131] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 434.635671][T10135] netlink: 'syz.2.1321': attribute type 10 has an invalid length. [ 434.648527][T10135] vxcan1: entered promiscuous mode [ 434.661510][T10135] vxcan1: entered allmulticast mode [ 434.667164][T10135] team0: Device vxcan1 is of different type [ 434.687495][T10139] netlink: 'syz.0.1322': attribute type 10 has an invalid length. [ 434.695419][T10139] hsr0: entered promiscuous mode [ 434.708757][T10139] hsr0: left allmulticast mode [ 434.715067][T10139] hsr_slave_0: left allmulticast mode [ 434.728807][T10139] hsr_slave_1: left allmulticast mode [ 434.734443][T10139] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 434.752696][T10139] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 434.765332][T10139] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 434.811953][T10139] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 435.668355][T10156] syzkaller0: entered promiscuous mode [ 435.673918][T10156] syzkaller0: entered allmulticast mode [ 438.185417][T10187] netlink: 'syz.0.1334': attribute type 4 has an invalid length. [ 438.227051][T10187] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1334'. [ 438.466846][T10196] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1340'. [ 438.524611][T10196] netlink: 'syz.2.1340': attribute type 10 has an invalid length. [ 439.005707][T10196] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 440.411154][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.417807][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.109507][T10216] netlink: 'syz.3.1344': attribute type 10 has an invalid length. [ 442.372724][T10216] bridge0: port 3(team0) entered disabled state [ 442.529017][T10216] team0 (unregistering): left allmulticast mode [ 442.535369][T10216] team_slave_0: left allmulticast mode [ 442.565895][T10216] team_slave_1: left allmulticast mode [ 442.572419][T10216] team0 (unregistering): left promiscuous mode [ 442.580619][T10216] team_slave_0: left promiscuous mode [ 442.589512][T10216] team_slave_1: left promiscuous mode [ 442.595365][T10216] bridge0: port 3(team0) entered disabled state [ 442.622055][T10216] team0 (unregistering): Port device team_slave_0 removed [ 442.670537][T10216] team0 (unregistering): Port device team_slave_1 removed [ 442.716324][T10237] netlink: 'syz.2.1352': attribute type 10 has an invalid length. [ 442.735461][T10237] geneve0: entered promiscuous mode [ 442.809217][T10237] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 446.145954][T10264] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1361'. [ 449.835179][T10345] netlink: 'syz.1.1390': attribute type 2 has an invalid length. [ 449.845988][T10345] netlink: 'syz.1.1390': attribute type 4 has an invalid length. [ 449.857489][T10345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1390'. [ 449.885175][T10347] netlink: 'syz.3.1391': attribute type 22 has an invalid length. [ 449.913638][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 450.035116][T10345] netlink: 'syz.1.1390': attribute type 14 has an invalid length. [ 450.126950][T10345] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1390'. [ 450.608590][T10359] netlink: 'syz.2.1393': attribute type 3 has an invalid length. [ 450.631487][T10359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1393'. [ 452.342336][T10377] syzkaller0: entered promiscuous mode [ 452.400047][T10377] syzkaller0: entered allmulticast mode [ 452.508465][ T3521] syzkaller0: tun_net_xmit 48 [ 452.524872][T10377] syzkaller0: create flow: hash 2731021333 index 1 [ 452.568583][T10390] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 452.583299][T10390] netlink: 'syz.1.1402': attribute type 3 has an invalid length. [ 452.609181][T10390] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1402'. [ 452.683147][T10393] netlink: 'syz.1.1402': attribute type 10 has an invalid length. [ 452.693269][T10393] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1402'. [ 452.706390][T10375] syzkaller0: delete flow: hash 2731021333 index 1 [ 454.873312][T10412] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1408'. [ 455.881094][T10432] syzkaller0: entered promiscuous mode [ 455.890219][T10432] syzkaller0: entered allmulticast mode [ 457.743509][T10471] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1429'. [ 459.085523][T10490] netlink: 'syz.0.1436': attribute type 3 has an invalid length. [ 459.095235][T10490] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1436'. [ 459.553869][T10492] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1437'. [ 459.912909][T10508] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1443'. [ 460.122411][T10513] syzkaller0: entered promiscuous mode [ 460.134397][T10513] syzkaller0: entered allmulticast mode [ 460.143417][ T3550] syzkaller0: tun_net_xmit 48 [ 460.319060][T10513] syzkaller0: create flow: hash 2874185847 index 1 [ 460.411171][T10512] syzkaller0: delete flow: hash 2874185847 index 1 [ 463.521209][T10563] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1463'. [ 463.535072][T10563] netlink: 'syz.2.1463': attribute type 3 has an invalid length. [ 463.543121][T10563] netlink: 'syz.2.1463': attribute type 1 has an invalid length. [ 463.551038][T10563] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1463'. [ 463.653757][T10565] netlink: 'syz.1.1464': attribute type 21 has an invalid length. [ 464.390983][T10576] syzkaller0: entered promiscuous mode [ 464.406709][T10576] syzkaller0: entered allmulticast mode [ 464.842569][T10592] netlink: 'syz.0.1473': attribute type 3 has an invalid length. [ 464.851218][T10592] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 464.867084][T10592] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1473'. [ 465.203124][T10594] netlink: 'syz.1.1477': attribute type 3 has an invalid length. [ 465.225702][T10594] netlink: 126576 bytes leftover after parsing attributes in process `syz.1.1477'. [ 466.783230][T10591] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1475'. [ 466.794131][T10590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1473'. [ 466.807073][T10600] netlink: 'syz.1.1479': attribute type 10 has an invalid length. [ 466.838006][T10600] team0: Device vxcan1 is of different type [ 466.987488][T10606] netlink: 'syz.2.1481': attribute type 10 has an invalid length. [ 467.024116][T10606] hsr0: entered promiscuous mode [ 467.048543][T10606] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 467.085179][T10606] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 467.208400][T10606] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 467.231376][T10606] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 467.772736][T10628] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1489'. [ 467.811331][T10628] netlink: 'syz.1.1489': attribute type 3 has an invalid length. [ 467.827205][T10628] netlink: 'syz.1.1489': attribute type 1 has an invalid length. [ 467.845339][T10628] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1489'. [ 468.523336][T10650] netlink: 'syz.0.1499': attribute type 12 has an invalid length. [ 468.557154][T10650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1499'. [ 468.688606][T10650] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 468.710393][T10650] netlink: 13854 bytes leftover after parsing attributes in process `syz.0.1499'. [ 470.252188][T10681] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 471.052439][T10708] netlink: 'syz.1.1516': attribute type 10 has an invalid length. [ 471.129051][T10708] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 472.710916][T10726] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 474.857801][T10769] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1540'. [ 475.432240][T10776] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1542'. [ 475.747285][T10785] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 475.755272][T10785] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1546'. [ 475.786955][T10785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.825982][T10785] bridge0: port 4(hsr0) entered blocking state [ 475.857005][T10785] bridge0: port 4(hsr0) entered disabled state [ 475.863766][T10785] hsr0: entered allmulticast mode [ 475.927106][T10785] hsr_slave_0: entered allmulticast mode [ 475.938844][T10785] hsr_slave_1: entered allmulticast mode [ 475.975838][T10789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1546'. [ 475.978768][T10785] bridge0: port 4(hsr0) entered blocking state [ 475.991964][T10785] bridge0: port 4(hsr0) entered forwarding state [ 476.059060][T10789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1546'. [ 476.100774][T10786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1546'. [ 476.128067][T10788] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1546'. [ 477.011117][T10807] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1554'. [ 477.148559][T10814] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1557'. [ 478.588699][T10835] netlink: 'syz.1.1563': attribute type 21 has an invalid length. [ 479.305480][T10850] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1568'. [ 479.328546][T10842] netlink: 'syz.1.1567': attribute type 4 has an invalid length. [ 484.608029][T10894] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1581'. [ 486.253921][T10919] syzkaller0: entered promiscuous mode [ 486.261890][T10919] syzkaller0: entered allmulticast mode [ 486.527164][T10929] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1595'. [ 489.865585][T10939] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1597'. [ 491.140309][T10967] netlink: 'syz.3.1606': attribute type 1 has an invalid length. [ 491.149874][T10967] netlink: 'syz.3.1606': attribute type 3 has an invalid length. [ 491.164051][T10967] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1606'. [ 491.207147][T10967] netlink: 'syz.3.1606': attribute type 10 has an invalid length. [ 491.217011][T10967] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1606'. [ 491.995565][T10990] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1612'. [ 494.074876][T11024] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1623'. [ 494.129828][T11028] netlink: 'syz.2.1624': attribute type 10 has an invalid length. [ 494.140218][T11028] team0: Device vxcan1 is of different type [ 494.425576][T11032] netlink: 'syz.0.1626': attribute type 10 has an invalid length. [ 494.460824][T11032] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 494.511058][T11032] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 494.543565][T11032] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 494.581418][T11032] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 499.751258][T11114] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.1649'. [ 501.588746][T11141] syzkaller0: entered promiscuous mode [ 501.617081][T11141] syzkaller0: entered allmulticast mode [ 501.634683][T11151] netlink: 'syz.0.1659': attribute type 15 has an invalid length. [ 502.027568][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.035317][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.672723][T11230] netlink: 'syz.1.1687': attribute type 10 has an invalid length. [ 506.729176][T11230] team0: Port device virt_wifi0 added [ 508.071520][T11252] syzkaller0: entered promiscuous mode [ 508.079843][T11252] syzkaller0: entered allmulticast mode [ 508.100461][T11250] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.155295][T11247] netlink: 'syz.0.1693': attribute type 1 has an invalid length. [ 508.161038][T11252] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1696'. [ 508.188215][T11247] netlink: 'syz.0.1693': attribute type 3 has an invalid length. [ 508.212599][T11247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1693'. [ 508.230537][T11250] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.240351][T11250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.391060][T11253] netlink: 'syz.0.1693': attribute type 10 has an invalid length. [ 508.402952][T11253] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1693'. [ 508.416125][T11254] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 508.434332][T11254] dvmrp1: persist disabled [ 511.476395][T11290] netlink: 'syz.1.1708': attribute type 10 has an invalid length. [ 511.495635][T11290] syz_tun: entered promiscuous mode [ 511.628885][T11290] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 512.494817][T11314] netlink: 'syz.3.1715': attribute type 10 has an invalid length. [ 512.741416][T11314] bond0: (slave netdevsim0): Releasing backup interface [ 512.982244][T11327] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1719'. [ 513.800854][T11345] syzkaller0: entered promiscuous mode [ 513.806418][T11345] syzkaller0: entered allmulticast mode [ 514.072476][T11351] netlink: 'syz.1.1724': attribute type 15 has an invalid length. [ 515.284261][T11383] netlink: 'syz.3.1733': attribute type 153 has an invalid length. [ 515.306510][T11383] netlink: 'syz.3.1733': attribute type 3 has an invalid length. [ 515.325505][T11383] netlink: 84356 bytes leftover after parsing attributes in process `syz.3.1733'. [ 517.567511][T11376] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1733'. [ 518.047751][T11416] netlink: 'syz.0.1745': attribute type 3 has an invalid length. [ 518.055669][T11416] netlink: 'syz.0.1745': attribute type 1 has an invalid length. [ 518.064766][T11416] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1745'. [ 518.193563][T11424] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1747'. [ 518.228952][T11423] FAULT_INJECTION: forcing a failure. [ 518.228952][T11423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.362054][T11423] CPU: 0 PID: 11423 Comm: syz.3.1746 Not tainted syzkaller #0 [ 518.369604][T11423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.379701][T11423] Call Trace: [ 518.383013][T11423] [ 518.385997][T11423] dump_stack_lvl+0x18c/0x250 [ 518.390723][T11423] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 518.396934][T11423] ? show_regs_print_info+0x20/0x20 [ 518.402181][T11423] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 518.408407][T11423] should_fail_ex+0x394/0x4c0 [ 518.413158][T11423] strncpy_from_user+0x36/0x2f0 [ 518.418062][T11423] strncpy_from_user_nofault+0x71/0x140 [ 518.423664][T11423] bpf_probe_read_user_str+0x2a/0x70 [ 518.429028][T11423] bpf_prog_82a7ed3c74f5657d+0x42/0x44 [ 518.434533][T11423] trace_call_bpf+0x333/0x6c0 [ 518.439263][T11423] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 518.445172][T11423] ? trace_call_bpf+0xc3/0x6c0 [ 518.450008][T11423] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 518.456148][T11423] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 518.461745][T11423] perf_trace_lock_acquire+0x342/0x400 [ 518.467234][T11423] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 518.473838][T11423] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 518.479658][T11423] ? get_pid_task+0x20/0x1e0 [ 518.484302][T11423] lock_acquire+0x3ef/0x420 [ 518.488836][T11423] ? fs_reclaim_acquire+0x7c/0x100 [ 518.493969][T11423] ? read_lock_is_recursive+0x20/0x20 [ 518.499358][T11423] ? ksys_write+0x1d2/0x260 [ 518.503888][T11423] ? __lock_acquire+0x7d80/0x7d80 [ 518.509106][T11423] ? __might_sleep+0xe0/0xe0 [ 518.513717][T11423] ? fs_reclaim_acquire+0x7c/0x100 [ 518.518848][T11423] fs_reclaim_acquire+0x98/0x100 [ 518.523800][T11423] ? fs_reclaim_acquire+0x7c/0x100 [ 518.528929][T11423] slab_pre_alloc_hook+0x2a/0x300 [ 518.533976][T11423] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 518.539703][T11423] kmem_cache_alloc_lru+0x4d/0x2b0 [ 518.544832][T11423] ? sock_alloc_inode+0x28/0xc0 [ 518.549742][T11423] sock_alloc_inode+0x28/0xc0 [ 518.554437][T11423] ? sockfs_init_fs_context+0xb0/0xb0 [ 518.559949][T11423] new_inode_pseudo+0x63/0x1d0 [ 518.564733][T11423] __sock_create+0x12d/0x940 [ 518.569339][T11423] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 518.575355][T11423] __sys_socket+0xd7/0x1b0 [ 518.579792][T11423] __x64_sys_socket+0x7a/0x90 [ 518.584507][T11423] do_syscall_64+0x55/0xb0 [ 518.588943][T11423] ? clear_bhb_loop+0x40/0x90 [ 518.593641][T11423] ? clear_bhb_loop+0x40/0x90 [ 518.598339][T11423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.604260][T11423] RIP: 0033:0x7f742d19e159 [ 518.608706][T11423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.628337][T11423] RSP: 002b:00007f742df98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 518.636778][T11423] RAX: ffffffffffffffda RBX: 00007f742d425fa0 RCX: 00007f742d19e159 [ 518.644763][T11423] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 518.652755][T11423] RBP: 00007f742df98090 R08: 0000000000000000 R09: 0000000000000000 [ 518.660740][T11423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.668725][T11423] R13: 00007f742d426038 R14: 00007f742d425fa0 R15: 00007ffc51bbab78 [ 518.676752][T11423] [ 519.181814][T11432] netlink: 'syz.2.1750': attribute type 10 has an invalid length. [ 519.226178][T11432] bridge0: port 4(hsr0) entered disabled state [ 519.253470][T11432] hsr0: left allmulticast mode [ 519.270996][T11432] hsr_slave_0: left allmulticast mode [ 519.287233][T11432] hsr_slave_1: left allmulticast mode [ 519.303960][T11432] bridge0: port 4(hsr0) entered disabled state [ 519.350493][T11432] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 519.368260][T11432] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 519.394529][T11432] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 519.435102][T11432] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 519.906888][T11440] netlink: 'syz.1.1754': attribute type 10 has an invalid length. [ 519.930718][T11440] team0: Device vxcan1 is of different type [ 520.335894][T11442] syzkaller0: entered promiscuous mode [ 520.364886][T11442] syzkaller0: entered allmulticast mode [ 520.400137][T11448] netlink: 'syz.3.1753': attribute type 15 has an invalid length. [ 523.163981][T11453] syzkaller0: entered promiscuous mode [ 523.169616][T11453] syzkaller0: entered allmulticast mode [ 525.996981][T11496] netlink: 'syz.1.1770': attribute type 10 has an invalid length. [ 527.068905][T11517] netlink: 'syz.2.1778': attribute type 10 has an invalid length. [ 527.217979][T11524] netlink: 'syz.1.1780': attribute type 21 has an invalid length. [ 527.286225][T11528] netlink: 'syz.0.1782': attribute type 10 has an invalid length. [ 527.310341][T11528] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 527.341642][T11528] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 527.386016][T11528] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 527.407169][T11528] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 527.415439][T11530] lo: entered promiscuous mode [ 527.429834][T11530] lo: entered allmulticast mode [ 527.813747][T11534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1784'. [ 529.525533][T11561] netlink: 'syz.1.1794': attribute type 39 has an invalid length. [ 530.148367][T11572] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 530.513953][T11583] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1801'. [ 530.661483][T11590] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.1803'. [ 531.051342][T11583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.691548][T11603] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1809'. [ 531.989027][T11606] netlink: 'syz.3.1810': attribute type 23 has an invalid length. [ 532.009580][T11606] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1810'. [ 532.029117][T11606] netlink: 'syz.3.1810': attribute type 4 has an invalid length. [ 532.937989][T11620] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1817'. [ 533.032150][T11620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.553119][T11651] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1826'. [ 535.708516][T11651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.252472][T11690] syzkaller0: entered promiscuous mode [ 538.258415][T11690] syzkaller0: entered allmulticast mode [ 540.580411][T11684] netlink: 'syz.1.1838': attribute type 10 has an invalid length. [ 540.588388][T11684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1838'. [ 540.599717][T11684] bridge0: port 4(team0) entered blocking state [ 540.606093][T11684] bridge0: port 4(team0) entered disabled state [ 540.612634][T11684] team0: entered allmulticast mode [ 540.621132][T11684] C: entered allmulticast mode [ 540.625962][T11684] team_slave_1: entered allmulticast mode [ 540.633333][T11684] virt_wifi0: entered allmulticast mode [ 540.642322][T11684] team0: entered promiscuous mode [ 540.647565][T11684] C: entered promiscuous mode [ 540.652388][T11684] team_slave_1: entered promiscuous mode [ 540.658441][T11684] virt_wifi0: entered promiscuous mode [ 540.722709][T11691] syzkaller0: entered promiscuous mode [ 540.728934][T11691] syzkaller0: entered allmulticast mode [ 540.986152][T11710] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1846'. [ 541.224441][T11716] netlink: 'syz.3.1847': attribute type 1 has an invalid length. [ 541.233208][T11716] netlink: 'syz.3.1847': attribute type 3 has an invalid length. [ 541.264662][T11716] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1847'. [ 543.123995][T11716] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 543.136803][T11716] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1847'. [ 543.999757][T11742] syzkaller0: entered promiscuous mode [ 544.005335][T11742] syzkaller0: entered allmulticast mode [ 547.392282][T11784] netlink: 'syz.2.1866': attribute type 10 has an invalid length. [ 547.650352][T11789] syzkaller0: entered promiscuous mode [ 547.698958][T11789] syzkaller0: entered allmulticast mode [ 549.914287][T11823] FAULT_INJECTION: forcing a failure. [ 549.914287][T11823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.944116][T11823] CPU: 1 PID: 11823 Comm: syz.2.1884 Not tainted syzkaller #0 [ 549.951663][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.961751][T11823] Call Trace: [ 549.965057][T11823] [ 549.968026][T11823] dump_stack_lvl+0x18c/0x250 [ 549.972747][T11823] ? show_regs_print_info+0x20/0x20 [ 549.977978][T11823] ? load_image+0x420/0x420 [ 549.982519][T11823] ? __might_fault+0xaa/0x120 [ 549.987226][T11823] ? __lock_acquire+0x7d80/0x7d80 [ 549.992290][T11823] should_fail_ex+0x394/0x4c0 [ 549.997007][T11823] _copy_from_iter+0x1cd/0x1290 [ 550.001902][T11823] ? copyout_mc+0x70/0x70 [ 550.006266][T11823] ? verify_lock_unused+0x140/0x140 [ 550.011501][T11823] ? __check_object_size+0x8a/0xa40 [ 550.016726][T11823] ? ping_common_sendmsg+0x97/0x2a0 [ 550.022013][T11823] ping_common_sendmsg+0xbc/0x2a0 [ 550.027070][T11823] ping_v6_sendmsg+0x1fd/0x1130 [ 550.032053][T11823] ? ping_v6_pre_connect+0x30/0x30 [ 550.037218][T11823] ? inet_sendmsg+0x10d/0x2a0 [ 550.041944][T11823] ? __local_bh_enable_ip+0x13a/0x1c0 [ 550.047346][T11823] ? lockdep_hardirqs_on+0x98/0x150 [ 550.052576][T11823] ? _local_bh_enable+0xa0/0xa0 [ 550.057459][T11823] ? do_raw_spin_unlock+0x121/0x230 [ 550.062692][T11823] ? inet_sendmsg+0x10d/0x2a0 [ 550.067397][T11823] ? inet_sendmsg+0x10d/0x2a0 [ 550.072107][T11823] sock_write_iter+0x2dc/0x420 [ 550.076918][T11823] ? sock_read_iter+0x3f0/0x3f0 [ 550.081816][T11823] ? common_file_perm+0x198/0x1f0 [ 550.086892][T11823] vfs_write+0x474/0x9a0 [ 550.091177][T11823] ? file_end_write+0x250/0x250 [ 550.096066][T11823] ? __fget_files+0x3fc/0x460 [ 550.100791][T11823] ? __fdget_pos+0x1d8/0x330 [ 550.105418][T11823] ? ksys_write+0x74/0x260 [ 550.109871][T11823] ksys_write+0x151/0x260 [ 550.114236][T11823] ? __ia32_sys_read+0x90/0x90 [ 550.119036][T11823] ? lockdep_hardirqs_on+0x98/0x150 [ 550.124269][T11823] do_syscall_64+0x55/0xb0 [ 550.128714][T11823] ? clear_bhb_loop+0x40/0x90 [ 550.133420][T11823] ? clear_bhb_loop+0x40/0x90 [ 550.138137][T11823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.144064][T11823] RIP: 0033:0x7f55d0f9e159 [ 550.148510][T11823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.168182][T11823] RSP: 002b:00007f55d1e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 550.176651][T11823] RAX: ffffffffffffffda RBX: 00007f55d1225fa0 RCX: 00007f55d0f9e159 [ 550.184661][T11823] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000005 [ 550.192655][T11823] RBP: 00007f55d1e67090 R08: 0000000000000000 R09: 0000000000000000 [ 550.200647][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.208646][T11823] R13: 00007f55d1226038 R14: 00007f55d1225fa0 R15: 00007ffd6a86d4e8 [ 550.216663][T11823] [ 551.368214][T11833] netlink: 'syz.1.1887': attribute type 1 has an invalid length. [ 551.386814][T11833] netlink: 'syz.1.1887': attribute type 3 has an invalid length. [ 551.395009][T11833] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1887'. [ 552.669561][T11833] netlink: 'syz.1.1887': attribute type 10 has an invalid length. [ 552.687936][T11833] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1887'. [ 552.912741][T11848] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1892'. [ 552.970338][T11847] netlink: 'syz.3.1894': attribute type 10 has an invalid length. [ 553.005114][T11847] hsr0: entered promiscuous mode [ 553.017631][T11847] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 553.078509][T11847] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 553.111310][T11847] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 553.156859][T11847] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 555.008408][T11872] netlink: 'syz.0.1901': attribute type 10 has an invalid length. [ 555.038793][T11872] vxcan1: entered promiscuous mode [ 555.044136][T11872] vxcan1: entered allmulticast mode [ 555.069886][T11872] team0: Device vxcan1 is of different type [ 555.717818][T11884] syzkaller0: entered promiscuous mode [ 555.731076][T11884] syzkaller0: entered allmulticast mode [ 560.335636][T11927] netlink: 'syz.1.1914': attribute type 4 has an invalid length. [ 560.343717][T11927] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1914'. [ 561.613228][T11959] syzkaller0: entered promiscuous mode [ 561.625073][T11959] syzkaller0: entered allmulticast mode [ 562.075899][ T5793] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 563.287074][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.293819][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.632266][T11970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 564.653589][T11989] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 564.659864][T11989] syzkaller1: linktype set to 769 [ 565.821799][T12029] syzkaller0: entered promiscuous mode [ 565.836535][T12029] syzkaller0: entered allmulticast mode [ 568.399092][T12041] ªªªªªª: renamed from vlan0 [ 569.390785][T12074] netlink: 'syz.3.1959': attribute type 1 has an invalid length. [ 569.407922][T12074] netlink: 'syz.3.1959': attribute type 3 has an invalid length. [ 569.428259][T12074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1959'. [ 569.490405][T12076] syzkaller0: entered promiscuous mode [ 569.495973][T12076] syzkaller0: entered allmulticast mode [ 569.510410][T12074] netlink: 'syz.3.1959': attribute type 10 has an invalid length. [ 569.527065][T12074] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1959'. [ 571.736171][T12083] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 571.744167][T12083] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1962'. [ 571.754714][T12084] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 571.762674][T12084] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1962'. [ 571.774130][T12089] netlink: 'syz.2.1963': attribute type 10 has an invalid length. [ 571.782346][T12089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1963'. [ 571.798094][T12089] lo: left promiscuous mode [ 571.802679][T12089] lo: left allmulticast mode [ 571.829255][T12089] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 571.881396][T12089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.634346][T12107] syzkaller0: entered promiscuous mode [ 572.641973][T12107] syzkaller0: entered allmulticast mode [ 575.052510][T12125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1974'. [ 575.347110][T12128] syzkaller0: entered promiscuous mode [ 575.352681][T12128] syzkaller0: entered allmulticast mode [ 578.754245][T12172] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1992'. [ 580.823576][T12199] syzkaller0: entered promiscuous mode [ 580.829395][T12199] syzkaller0: entered allmulticast mode [ 583.831292][T12203] netlink: 'syz.3.2001': attribute type 10 has an invalid length. [ 583.848481][T12211] @0Ù: renamed from bond_slave_1 (while UP) [ 584.231474][T12225] netlink: 'syz.3.2009': attribute type 21 has an invalid length. [ 584.677430][T12236] netlink: 'syz.0.2011': attribute type 21 has an invalid length. [ 584.890476][T12239] netlink: 'syz.1.2012': attribute type 2 has an invalid length. [ 584.899920][T12239] netlink: 'syz.1.2012': attribute type 1 has an invalid length. [ 584.910816][T12239] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2012'. [ 584.986521][T12240] netlink: 'syz.1.2012': attribute type 2 has an invalid length. [ 584.996056][T12240] netlink: 'syz.1.2012': attribute type 8 has an invalid length. [ 585.008556][T12240] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2012'. [ 587.459932][T12248] netlink: 'syz.3.2016': attribute type 10 has an invalid length. [ 587.484308][T12248] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 587.512501][T12250] netlink: 'syz.1.2017': attribute type 21 has an invalid length. [ 587.520741][T12250] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2017'. [ 587.619425][T12250] netlink: 'syz.1.2017': attribute type 4 has an invalid length. [ 587.639559][T12250] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2017'. [ 587.845312][T12259] syzkaller0: entered promiscuous mode [ 587.860175][T12259] syzkaller0: entered allmulticast mode [ 590.037341][T12275] vcan0: entered allmulticast mode [ 590.052823][T12280] netlink: 'syz.3.2026': attribute type 10 has an invalid length. [ 590.070050][T12280] veth0_macvtap: left promiscuous mode [ 592.359444][T12317] netlink: 'syz.1.2041': attribute type 27 has an invalid length. [ 592.429055][T12317] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2041'. [ 593.670175][T12336] netlink: 'syz.3.2046': attribute type 10 has an invalid length. [ 594.747357][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 594.787077][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 594.836868][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 594.844774][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 594.905491][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 594.937334][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 594.993311][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 595.026215][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 595.071206][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 595.080987][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 595.090592][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 595.104664][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 595.115502][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 595.132804][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 595.143096][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 595.151197][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 595.160518][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 595.168530][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 595.180689][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 595.191265][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 595.199871][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 595.215853][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 595.224297][T12351] netlink: 'syz.2.2049': attribute type 22 has an invalid length. [ 596.781384][T12384] bridge_slave_1: left allmulticast mode [ 596.848432][T12384] bridge_slave_1: left promiscuous mode [ 596.854785][T12384] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.110063][T12384] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 598.021993][T12404] __nla_validate_parse: 25 callbacks suppressed [ 598.022033][T12404] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2069'. [ 598.306348][T12419] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2073'. [ 600.411197][T12448] validate_nla: 23 callbacks suppressed [ 600.411218][T12448] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 600.447233][T12448] netlink: 'syz.0.2081': attribute type 3 has an invalid length. [ 600.455443][T12448] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2081'. [ 600.499561][T12448] netlink: 'syz.0.2081': attribute type 10 has an invalid length. [ 600.539644][T12448] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2081'. [ 602.074193][T12469] netlink: 'syz.2.2090': attribute type 27 has an invalid length. [ 602.083094][T12469] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2090'. [ 607.132990][T12487] vcan0: entered allmulticast mode [ 607.144608][T12490] netlink: 'syz.1.2097': attribute type 10 has an invalid length. [ 607.152784][T12493] netlink: 'syz.3.2098': attribute type 10 has an invalid length. [ 607.190668][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.226962][T12493] bridge_slave_1: left allmulticast mode [ 607.232711][T12493] bridge_slave_1: left promiscuous mode [ 607.276861][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.301559][T12493] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 607.336880][T12496] netlink: 'syz.2.2099': attribute type 21 has an invalid length. [ 607.356537][T12496] netlink: 'syz.2.2099': attribute type 1 has an invalid length. [ 607.386475][T12496] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.2099'. [ 607.403496][T12497] netlink: 'syz.2.2099': attribute type 29 has an invalid length. [ 607.713717][T12508] syzkaller0: entered promiscuous mode [ 607.726601][T12508] syzkaller0: entered allmulticast mode [ 607.782712][T12519] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2104'. [ 607.801209][T11315] syzkaller0: tun_net_xmit 48 [ 610.704012][T12548] netlink: 'syz.0.2111': attribute type 10 has an invalid length. [ 610.752101][T12548] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.784122][T12555] syz.3.2114[12555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.784430][T12555] syz.3.2114[12555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.844359][T12548] bridge_slave_1: left allmulticast mode [ 610.861738][T12548] bridge_slave_1: left promiscuous mode [ 610.868229][T12548] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.899664][T12548] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 610.916161][ T5793] Bluetooth: hci1: ACL packet for unknown connection handle 2816 [ 611.983802][T12577] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2120'. [ 612.008421][T12577] tc_dump_action: action bad kind [ 612.398557][T12584] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.2122'. [ 612.438064][T12585] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2123'. [ 612.473835][T12585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.495127][T12588] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2124'. [ 612.530898][T12583] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2123'. [ 612.618161][T12596] netlink: 'syz.0.2126': attribute type 10 has an invalid length. [ 612.631631][T12596] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 612.645712][T12596] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 612.729598][T12596] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 612.747129][T12596] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 614.759720][T12619] syzkaller0: entered promiscuous mode [ 614.766995][T12619] syzkaller0: entered allmulticast mode [ 614.928630][T12633] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2137'. [ 614.942093][T12632] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2137'. [ 618.013986][T12659] netlink: 'syz.2.2143': attribute type 21 has an invalid length. [ 618.022130][T12659] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2143'. [ 618.031344][T12659] netlink: 'syz.2.2143': attribute type 5 has an invalid length. [ 618.039817][T12659] netlink: 'syz.2.2143': attribute type 6 has an invalid length. [ 618.047641][T12659] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2143'. [ 618.350335][T12673] netlink: 'syz.0.2147': attribute type 39 has an invalid length. [ 619.120794][T12678] netlink: 'syz.0.2149': attribute type 1 has an invalid length. [ 619.135132][T12678] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2149'. [ 619.412119][T12691] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2154'. [ 619.434902][T12685] netlink: 'syz.1.2151': attribute type 21 has an invalid length. [ 619.842397][T12704] netlink: 'syz.0.2158': attribute type 10 has an invalid length. [ 619.984092][T12704] virt_wifi0: entered promiscuous mode [ 619.999736][T12704] virt_wifi0: entered allmulticast mode [ 620.042549][T12704] team0: Port device virt_wifi0 added [ 620.091753][T12706] netlink: 'syz.2.2167': attribute type 10 has an invalid length. [ 620.115887][T12706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.280268][T12706] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 620.344182][T12706] syz.2.2167 (12706) used greatest stack depth: 18344 bytes left [ 620.352445][T12710] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.2158'. [ 621.009120][T12715] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2160'. [ 621.052555][T12715] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2160'. [ 621.104445][T12714] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2160'. [ 621.170588][T12722] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2160'. [ 621.221939][T12714] netlink: 'syz.2.2160': attribute type 3 has an invalid length. [ 621.241422][T12723] netlink: 'syz.1.2162': attribute type 4 has an invalid length. [ 621.250317][T12714] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2160'. [ 621.367396][T12714] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 621.398579][T12714] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.487757][T12714] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 623.466774][T12760] validate_nla: 1 callbacks suppressed [ 623.466793][T12760] netlink: 'syz.2.2175': attribute type 10 has an invalid length. [ 624.478384][T12766] netlink: 'syz.1.2177': attribute type 10 has an invalid length. [ 624.720857][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.729428][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.953781][T12810] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 627.009725][T12810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 627.159961][T12810] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 629.370504][T12859] netlink: 'syz.3.2207': attribute type 21 has an invalid length. [ 629.422558][T12859] __nla_validate_parse: 2 callbacks suppressed [ 629.422575][T12859] netlink: 13070 bytes leftover after parsing attributes in process `syz.3.2207'. [ 629.904727][T12873] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2212'. [ 632.442269][T12902] netlink: 'syz.2.2224': attribute type 10 has an invalid length. [ 632.486850][T12902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2224'. [ 633.898897][T12938] netlink: 'syz.2.2235': attribute type 1 has an invalid length. [ 633.925036][T12938] netlink: 'syz.2.2235': attribute type 3 has an invalid length. [ 633.945661][T12938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2235'. [ 633.968020][T12943] netlink: 'syz.2.2235': attribute type 10 has an invalid length. [ 633.981437][T12943] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2235'. [ 634.973467][T12955] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2242'. [ 635.331067][T12957] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2243'. [ 638.371239][T12967] netlink: 'syz.2.2248': attribute type 10 has an invalid length. [ 638.446754][T12967] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2248'. [ 639.019753][T12984] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 639.077870][T12984] bond0: (slave netdevsim0): Releasing backup interface [ 639.587866][T12998] syzkaller0: entered promiscuous mode [ 639.635944][T12998] syzkaller0: entered allmulticast mode [ 640.786004][T13009] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2260'. [ 641.072937][T13008] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2259'. [ 645.732955][T13018] netlink: 'syz.1.2263': attribute type 21 has an invalid length. [ 645.740941][T13018] netlink: 'syz.1.2263': attribute type 1 has an invalid length. [ 645.748823][T13018] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.2263'. [ 645.761851][T13023] netlink: 'syz.1.2263': attribute type 29 has an invalid length. [ 647.339870][T13060] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2274'. [ 647.927538][T13078] syzkaller0: entered promiscuous mode [ 647.933101][T13078] syzkaller0: entered allmulticast mode [ 649.305513][T13093] FAULT_INJECTION: forcing a failure. [ 649.305513][T13093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.324859][T13093] CPU: 0 PID: 13093 Comm: syz.3.2284 Not tainted syzkaller #0 [ 649.332412][T13093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 649.342511][T13093] Call Trace: [ 649.345830][T13093] [ 649.348794][T13093] dump_stack_lvl+0x18c/0x250 [ 649.353547][T13093] ? show_regs_print_info+0x20/0x20 [ 649.358828][T13093] ? load_image+0x420/0x420 [ 649.363427][T13093] should_fail_ex+0x394/0x4c0 [ 649.368181][T13093] strncpy_from_user+0x36/0x2f0 [ 649.373093][T13093] strncpy_from_user_nofault+0x71/0x140 [ 649.378702][T13093] bpf_probe_read_user_str+0x2a/0x70 [ 649.384037][T13093] bpf_prog_82a7ed3c74f5657d+0x42/0x44 [ 649.389556][T13093] trace_call_bpf+0x333/0x6c0 [ 649.394282][T13093] ? trace_call_bpf+0xc3/0x6c0 [ 649.399110][T13093] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 649.405245][T13093] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 649.410859][T13093] perf_trace_lock_acquire+0x342/0x400 [ 649.416373][T13093] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 649.423016][T13093] lock_acquire+0x3ef/0x420 [ 649.427542][T13093] ? slab_pre_alloc_hook+0xb1/0x300 [ 649.432786][T13093] ? __lock_acquire+0x7d80/0x7d80 [ 649.437840][T13093] ? read_lock_is_recursive+0x20/0x20 [ 649.443260][T13093] ? percpu_ref_tryget+0x15/0x180 [ 649.448353][T13093] ? get_obj_cgroup_from_current+0xd4/0x280 [ 649.454298][T13093] ? get_obj_cgroup_from_current+0xd4/0x280 [ 649.460263][T13093] slab_pre_alloc_hook+0xd2/0x300 [ 649.465329][T13093] ? slab_pre_alloc_hook+0xb1/0x300 [ 649.470582][T13093] ? slab_pre_alloc_hook+0xb1/0x300 [ 649.475823][T13093] kmem_cache_alloc_lru+0x4d/0x2b0 [ 649.480965][T13093] ? sock_alloc_inode+0x28/0xc0 [ 649.485867][T13093] sock_alloc_inode+0x28/0xc0 [ 649.490582][T13093] ? sockfs_init_fs_context+0xb0/0xb0 [ 649.496003][T13093] new_inode_pseudo+0x63/0x1d0 [ 649.500802][T13093] __sock_create+0x12d/0x940 [ 649.505418][T13093] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 649.511438][T13093] __sys_socket+0xd7/0x1b0 [ 649.515893][T13093] __x64_sys_socket+0x7a/0x90 [ 649.520610][T13093] do_syscall_64+0x55/0xb0 [ 649.525058][T13093] ? clear_bhb_loop+0x40/0x90 [ 649.529788][T13093] ? clear_bhb_loop+0x40/0x90 [ 649.534586][T13093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.540507][T13093] RIP: 0033:0x7f742d19e159 [ 649.544955][T13093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.564591][T13093] RSP: 002b:00007f742df98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 649.573046][T13093] RAX: ffffffffffffffda RBX: 00007f742d425fa0 RCX: 00007f742d19e159 [ 649.581057][T13093] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 649.589060][T13093] RBP: 00007f742df98090 R08: 0000000000000000 R09: 0000000000000000 [ 649.597050][T13093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.605045][T13093] R13: 00007f742d426038 R14: 00007f742d425fa0 R15: 00007ffc51bbab78 [ 649.613088][T13093] [ 650.290320][ T5793] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 655.467486][T13118] netlink: 'syz.1.2293': attribute type 10 has an invalid length. [ 655.483652][T13118] vxcan1: entered promiscuous mode [ 655.489040][T13118] vxcan1: entered allmulticast mode [ 655.494353][T13118] team0: Device vxcan1 is of different type [ 655.512979][T13120] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2294'. [ 655.671064][T13121] syzkaller0: entered promiscuous mode [ 655.690100][T13121] syzkaller0: entered allmulticast mode [ 658.368815][T13147] netlink: 'syz.1.2304': attribute type 3 has an invalid length. [ 658.397178][T13147] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2304'. [ 658.778853][T13155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 658.790370][T13155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 658.801379][T13155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 658.812237][T13155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 658.821098][T13155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 658.829903][T13155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 660.025892][T13158] netlink: 'syz.0.2307': attribute type 10 has an invalid length. [ 660.110842][T13160] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 660.497472][T11312] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.672646][T11312] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.788041][T13152] chnl_net:caif_netlink_parms(): no params data found [ 660.878027][ T5793] Bluetooth: hci3: command tx timeout [ 660.903674][T11312] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.111588][T11312] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.590315][T13152] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.656858][T13152] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.664146][T13152] bridge_slave_0: entered allmulticast mode [ 661.693120][T13152] bridge_slave_0: entered promiscuous mode [ 661.838334][T13152] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.845614][T13152] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.892547][T13152] bridge_slave_1: entered allmulticast mode [ 661.911457][T13152] bridge_slave_1: entered promiscuous mode [ 662.047761][T13152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.126977][T13152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.210243][T13152] team0: Port device team_slave_0 added [ 662.442839][T13152] team0: Port device team_slave_1 added [ 662.689091][T13152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.696127][T13152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.801724][T13152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.875161][T13152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.891726][T13152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.956531][T13152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.968002][ T5793] Bluetooth: hci3: command tx timeout [ 663.877887][T13152] hsr_slave_0: entered promiscuous mode [ 663.928177][T13152] hsr_slave_1: entered promiscuous mode [ 663.957072][T13152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 663.964836][T13152] Cannot create hsr debugfs directory [ 665.020431][T11312] bond0: (slave wlan1): Releasing backup interface [ 665.036580][ T5793] Bluetooth: hci3: command tx timeout [ 665.515301][T11312] hsr_slave_0: left promiscuous mode [ 665.555525][T11312] hsr_slave_1: left promiscuous mode [ 665.570640][T11312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.590184][T11312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.648121][T11312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.676424][T11312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.691297][T11312] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 665.716775][T11312] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 665.749913][T11312] team0: left allmulticast mode [ 665.755245][T11312] team_slave_1: left allmulticast mode [ 665.776670][T11312] geneve1: left allmulticast mode [ 665.782025][T11312] team0: left promiscuous mode [ 665.804132][T11312] team_slave_1: left promiscuous mode [ 665.816818][T11312] geneve1: left promiscuous mode [ 665.823728][T11312] bridge0: port 3(team0) entered disabled state [ 665.859462][T11312] bridge_slave_1: left allmulticast mode [ 665.876857][T11312] bridge_slave_1: left promiscuous mode [ 665.894686][T11312] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.950699][T11312] bridge_slave_0: left allmulticast mode [ 665.977570][T11312] bridge_slave_0: left promiscuous mode [ 665.998310][T11312] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.117345][T11312] veth0_macvtap: left promiscuous mode [ 666.125498][T11312] veth1_vlan: left promiscuous mode [ 666.139873][T11312] veth0_vlan: left promiscuous mode [ 667.090656][T11312] team0 (unregistering): Port device geneve1 removed [ 667.117284][ T5793] Bluetooth: hci3: command tx timeout [ 667.312059][T11312] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 668.883244][T11312] team0 (unregistering): Port device team_slave_1 removed [ 669.025348][T11312] bond0 (unregistering): (slave 5@0Ù): Releasing backup interface [ 669.090480][T11312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.190586][T11312] bond0 (unregistering): Released all slaves [ 670.509016][T13250] netlink: 'syz.3.2331': attribute type 21 has an invalid length. [ 670.536819][T13250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 670.544187][T13250] IPv6: NLM_F_CREATE should be set when creating new route [ 670.551984][T13250] IPv6: NLM_F_CREATE should be set when creating new route [ 670.559528][T13250] IPv6: NLM_F_CREATE should be set when creating new route [ 670.600919][T13251] netlink: 'syz.3.2331': attribute type 21 has an invalid length. [ 670.627443][T13251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.467946][T13152] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 671.479456][T13152] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 671.494249][T13152] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 671.519900][T13152] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 671.659754][T13152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.686156][T13152] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.714313][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.721530][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.753442][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.760705][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.068669][T13152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.122548][T13152] veth0_vlan: entered promiscuous mode [ 672.146226][T13152] veth1_vlan: entered promiscuous mode [ 672.191366][T13152] veth0_macvtap: entered promiscuous mode [ 672.204340][T13152] veth1_macvtap: entered promiscuous mode [ 672.229721][T13152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.240761][T13152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.266903][T13152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.281143][T13152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.293303][T13152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.311744][T13152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.324877][T13152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.337257][T13152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.348947][T13152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.363479][T13152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.376280][T13152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.387784][T13152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.398972][T13152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.410774][T13152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.431622][T13152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.440599][T13152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.456549][T13152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.465326][T13152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.584597][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.611176][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.664653][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.681254][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.569093][T13349] syzkaller0: entered promiscuous mode [ 673.574753][T13349] syzkaller0: entered allmulticast mode [ 677.846045][T13395] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2361'. [ 679.591141][T13428] netlink: 'syz.2.2372': attribute type 21 has an invalid length. [ 681.817324][T13467] netlink: 'syz.0.2385': attribute type 7 has an invalid length. [ 682.517824][T13479] syzkaller0: entered promiscuous mode [ 682.543952][T13479] syzkaller0: entered allmulticast mode [ 683.130494][T13155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.164637][T13155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 683.174701][T13155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 683.183772][T13155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.217384][T13155] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 683.224986][T13155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 685.082464][T13488] netlink: 'syz.2.2390': attribute type 4 has an invalid length. [ 685.090523][T13488] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2390'. [ 685.132229][T13488] bond0: entered allmulticast mode [ 685.137994][T13488] bond_slave_0: entered allmulticast mode [ 685.144384][T13488] bond_slave_1: entered allmulticast mode [ 685.276932][T13498] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 685.287027][ T5793] Bluetooth: hci1: command tx timeout [ 685.441393][T11315] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.898877][T11315] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.093248][T11315] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.163831][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.171537][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.285230][T11315] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.567817][T13490] chnl_net:caif_netlink_parms(): no params data found [ 686.792072][T13490] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.812969][T13490] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.850944][T13490] bridge_slave_0: entered allmulticast mode [ 686.878337][T13490] bridge_slave_0: entered promiscuous mode [ 687.029564][T13517] syzkaller0: entered promiscuous mode [ 687.045627][T13517] syzkaller0: entered allmulticast mode [ 687.074991][T13490] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.082483][T13490] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.090221][T13490] bridge_slave_1: entered allmulticast mode [ 687.103409][T13490] bridge_slave_1: entered promiscuous mode [ 687.333179][T13532] netlink: 'syz.2.2403': attribute type 3 has an invalid length. [ 687.344319][T13532] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2403'. [ 687.378049][ T5793] Bluetooth: hci1: command tx timeout [ 689.436634][ T5793] Bluetooth: hci1: command tx timeout [ 690.122234][T13490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.162626][T13490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.505753][T13490] team0: Port device team_slave_0 added [ 690.634169][T13490] team0: Port device team_slave_1 added [ 690.662274][T13553] netlink: 'syz.2.2410': attribute type 10 has an invalid length. [ 690.684482][T13553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2410'. [ 690.708664][T13553] bridge0: port 3(team0) entered blocking state [ 690.727491][T13553] bridge0: port 3(team0) entered disabled state [ 690.735923][T13553] team0: entered allmulticast mode [ 690.756326][T13553] team_slave_0: entered allmulticast mode [ 690.766125][T13553] team_slave_1: entered allmulticast mode [ 690.797138][T13553] team0: entered promiscuous mode [ 690.802963][T13553] team_slave_0: entered promiscuous mode [ 690.816222][T13553] team_slave_1: entered promiscuous mode [ 690.897882][T13553] bridge0: port 3(team0) entered blocking state [ 690.905152][T13553] bridge0: port 3(team0) entered forwarding state [ 691.526835][ T5793] Bluetooth: hci1: command tx timeout [ 691.690501][T13490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.725461][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.799906][T13490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.830113][T13490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.851738][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.918706][T13490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.480282][T13490] hsr_slave_0: entered promiscuous mode [ 692.499836][T13490] hsr_slave_1: entered promiscuous mode [ 692.518807][T13490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.546554][T13490] Cannot create hsr debugfs directory [ 692.866125][T13597] syzkaller0: entered promiscuous mode [ 692.871817][T13597] syzkaller0: entered allmulticast mode [ 695.087846][T13641] netlink: 'syz.0.2432': attribute type 2 has an invalid length. [ 695.107252][T13641] netlink: 1045 bytes leftover after parsing attributes in process `syz.0.2432'. [ 696.141433][T13646] netlink: 'syz.0.2434': attribute type 3 has an invalid length. [ 696.160256][T13646] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2434'. [ 697.462402][T13645] netlink: 'syz.0.2434': attribute type 21 has an invalid length. [ 697.470536][T13645] netlink: 'syz.0.2434': attribute type 4 has an invalid length. [ 697.485589][T13645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2434'. [ 698.388417][T11315] bond0: (slave wlan1): Releasing backup interface [ 699.354266][T11315] hsr_slave_0: left promiscuous mode [ 699.388429][T11315] hsr_slave_1: left promiscuous mode [ 699.412896][T11315] batman_adv: : Interface deactivated: batadv_slave_0 [ 699.424352][T11315] batman_adv: : Removing interface: batadv_slave_0 [ 699.457537][T11315] batman_adv: : Interface deactivated: batadv_slave_1 [ 699.464606][T11315] batman_adv: : Removing interface: batadv_slave_1 [ 699.508105][T11315] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.574907][T11315] veth1_macvtap: left promiscuous mode [ 699.870404][T11315] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 701.064583][T13713] netlink: 'syz.0.2452': attribute type 1 has an invalid length. [ 701.073696][T13713] netlink: 'syz.0.2452': attribute type 3 has an invalid length. [ 701.082542][T13713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2452'. [ 701.237279][T11315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.290278][T11315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.340887][T11315] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 701.648629][T11315] bond0 (unregistering): Released all slaves [ 701.833120][T13680] syzkaller0: entered promiscuous mode [ 701.839035][T13680] syzkaller0: entered allmulticast mode [ 703.695028][T13713] netlink: 'syz.0.2452': attribute type 10 has an invalid length. [ 703.703053][T13713] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2452'. [ 705.206082][T13490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 705.231035][T13490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 705.328419][T13490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 705.355636][T13490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 705.581688][T13490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.791619][T13490] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.847895][T11312] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.855165][T11312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.909750][T11315] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.917015][T11315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.058023][T13747] syzkaller0: entered promiscuous mode [ 706.063593][T13747] syzkaller0: entered allmulticast mode [ 710.040281][T13812] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2482'. [ 710.851071][T13490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.998207][T13490] veth0_vlan: entered promiscuous mode [ 711.042987][T13490] veth1_vlan: entered promiscuous mode [ 711.165090][T13490] veth0_macvtap: entered promiscuous mode [ 711.197831][T13490] veth1_macvtap: entered promiscuous mode [ 711.382456][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.410245][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.441531][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.465491][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.499095][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.539306][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.593132][T13490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.723949][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.776607][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.816641][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.856569][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.890405][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.923018][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.977501][T13490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.070370][T13490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.116654][T13490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.127737][T13490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.166496][T13490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.639770][T13879] netlink: 'syz.1.2490': attribute type 28 has an invalid length. [ 713.667156][T13879] netlink: 'syz.1.2490': attribute type 3 has an invalid length. [ 713.675043][T13879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2490'. [ 714.118455][T13881] netlink: 'syz.1.2490': attribute type 39 has an invalid length. [ 714.503221][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.537492][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.625285][T11319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.634880][T11319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.859886][T13900] syzkaller0: entered promiscuous mode [ 714.865439][T13900] syzkaller0: entered allmulticast mode [ 715.898792][T13155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 715.913261][T13155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 715.921818][T13155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 715.958581][T13155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 715.982610][T13155] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 715.991569][T13155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 718.085888][T13155] Bluetooth: hci4: command tx timeout [ 719.053872][T11312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.114764][T13954] netlink: 'syz.2.2509': attribute type 10 has an invalid length. [ 719.162399][T13954] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 719.186223][T13954] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 719.297779][T11312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.052777][T13920] chnl_net:caif_netlink_parms(): no params data found [ 720.166672][T13155] Bluetooth: hci4: command tx timeout [ 720.219823][T11312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.301171][T13989] netlink: 'syz.1.2515': attribute type 4 has an invalid length. [ 720.356527][T13989] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2515'. [ 720.401415][T11312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.607533][T13994] syzkaller0: entered promiscuous mode [ 720.615524][T13994] syzkaller0: entered allmulticast mode [ 722.247866][T13155] Bluetooth: hci4: command tx timeout [ 724.317483][T13155] Bluetooth: hci4: command tx timeout [ 725.174464][T13920] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.185615][T13920] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.196298][T13920] bridge_slave_0: entered allmulticast mode [ 725.212593][T13920] bridge_slave_0: entered promiscuous mode [ 725.233828][T13920] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.324789][T13920] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.403466][T13920] bridge_slave_1: entered allmulticast mode [ 725.423787][T13920] bridge_slave_1: entered promiscuous mode [ 725.821471][T13920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.870943][T13920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.374857][T14098] netlink: 'syz.2.2548': attribute type 3 has an invalid length. [ 726.415767][T14098] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2548'. [ 726.530910][T13920] team0: Port device team_slave_0 added [ 726.690798][T13920] team0: Port device team_slave_1 added [ 727.054872][T14106] syzkaller0: entered promiscuous mode [ 727.060559][T14106] syzkaller0: entered allmulticast mode [ 727.339450][T14123] netlink: 'syz.2.2553': attribute type 9 has an invalid length. [ 727.352229][T14123] netlink: 'syz.2.2553': attribute type 23 has an invalid length. [ 727.360225][T14123] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.2553'. [ 729.207309][T13920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.214374][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.240904][T13920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.322367][T13920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.330224][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.359752][T13920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.549107][T13920] hsr_slave_0: entered promiscuous mode [ 729.571801][T13920] hsr_slave_1: entered promiscuous mode [ 730.561545][T11312] vlan0: left allmulticast mode [ 730.577890][T11312] veth0_vlan: left allmulticast mode [ 730.585570][T11312] vlan0: left promiscuous mode [ 730.596949][T11312] À: port 1(vlan0) entered disabled state [ 730.635204][T11312] hsr_slave_0: left promiscuous mode [ 730.662088][T11312] hsr_slave_1: left promiscuous mode [ 730.676195][T11312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.684135][T11312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.693727][T11312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.705354][T11312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.727372][T11312] team0: left allmulticast mode [ 730.732471][T11312] C: left allmulticast mode [ 730.743060][T11312] team_slave_1: left allmulticast mode [ 730.749948][T11312] virt_wifi0: left allmulticast mode [ 730.755621][T11312] team0: left promiscuous mode [ 730.768449][T11312] C: left promiscuous mode [ 730.773260][T11312] team_slave_1: left promiscuous mode [ 730.779978][T11312] virt_wifi0: left promiscuous mode [ 730.785729][T11312] bridge0: port 3(team0) entered disabled state [ 730.801822][T11312] bridge_slave_0: left allmulticast mode [ 730.808615][T11312] bridge_slave_0: left promiscuous mode [ 730.814475][T11312] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.849450][T11312] veth1_macvtap: left promiscuous mode [ 730.855218][T11312] veth0_macvtap: left promiscuous mode [ 730.862245][T11312] veth1_vlan: left promiscuous mode [ 730.869340][T11312] veth0_vlan: left promiscuous mode [ 731.382901][T11312] team0 (unregistering): Port device virt_wifi0 removed [ 731.640289][T11312] team0 (unregistering): Port device team_slave_1 removed [ 731.695843][T11312] team0 (unregistering): Port device C removed [ 731.747245][T11312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.797910][T11312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.849420][T11312] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 732.170530][T11312] bond0 (unregistering): Released all slaves [ 732.263173][T14162] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2560'. [ 733.149717][T13920] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 733.180493][T13920] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 733.235114][T13920] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 733.287784][T13920] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 733.540855][T13920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.599667][T13920] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.738822][T14210] syzkaller0: entered promiscuous mode [ 733.744391][T14210] syzkaller0: entered allmulticast mode [ 733.779310][T14217] netlink: 'syz.2.2572': attribute type 1 has an invalid length. [ 733.791106][T14217] netlink: 'syz.2.2572': attribute type 3 has an invalid length. [ 733.794785][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.800389][T14217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2572'. [ 733.807342][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.898668][T11315] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.905915][T11315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.915539][T14217] netlink: 'syz.2.2572': attribute type 10 has an invalid length. [ 735.924833][T14217] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2572'. [ 736.473037][T14244] netlink: 'syz.1.2580': attribute type 10 has an invalid length. [ 736.668808][T13920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.929794][T14257] netlink: 'syz.2.2583': attribute type 10 has an invalid length. [ 736.948282][T14257] macvlan0: entered promiscuous mode [ 737.050338][T14257] macvlan0: entered allmulticast mode [ 737.055864][T14257] veth1_vlan: entered allmulticast mode [ 737.086288][T14257] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 737.191850][T13920] veth0_vlan: entered promiscuous mode [ 737.277998][T13920] veth1_vlan: entered promiscuous mode [ 737.414188][T13920] veth0_macvtap: entered promiscuous mode [ 737.459815][T13920] veth1_macvtap: entered promiscuous mode [ 737.564374][T14264] FAULT_INJECTION: forcing a failure. [ 737.564374][T14264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.565536][T14264] [ 737.565543][T14264] ====================================================== [ 737.565550][T14264] WARNING: possible circular locking dependency detected [ 737.565556][T14264] syzkaller #0 Not tainted [ 737.565565][T14264] ------------------------------------------------------ [ 737.565571][T14264] syz.3.2584/14264 is trying to acquire lock: [ 737.565580][T14264] ffffffff8d1263e0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 737.565633][T14264] [ 737.565633][T14264] but task is already holding lock: [ 737.565638][T14264] ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 737.565687][T14264] [ 737.565687][T14264] which lock already depends on the new lock. [ 737.565687][T14264] [ 737.565692][T14264] [ 737.565692][T14264] the existing dependency chain (in reverse order) is: [ 737.565698][T14264] [ 737.565698][T14264] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 737.565723][T14264] _raw_spin_lock_nested+0x32/0x50 [ 737.565749][T14264] raw_spin_rq_lock_nested+0x29/0x130 [ 737.565774][T14264] task_fork_fair+0x62/0x1f0 [ 737.565792][T14264] sched_cgroup_fork+0x352/0x3e0 [ 737.565810][T14264] copy_process+0x21fd/0x3da0 [ 737.565829][T14264] kernel_clone+0x24b/0x8a0 [ 737.565848][T14264] user_mode_thread+0x111/0x180 [ 737.565867][T14264] rest_init+0x27/0x300 [ 737.565887][T14264] arch_call_rest_init+0xe/0x10 [ 737.565970][T14264] start_kernel+0x461/0x4e0 [ 737.565987][T14264] x86_64_start_reservations+0x2a/0x30 [ 737.566004][T14264] copy_bootdata+0x0/0xd0 [ 737.566028][T14264] secondary_startup_64_no_verify+0x179/0x17b [ 737.566065][T14264] [ 737.566065][T14264] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 737.566089][T14264] _raw_spin_lock_irqsave+0xb4/0x100 [ 737.566109][T14264] try_to_wake_up+0x5b/0x10e0 [ 737.566125][T14264] __wake_up_common+0x28e/0x4d0 [ 737.566146][T14264] __wake_up+0x125/0x1a0 [ 737.566164][T14264] tty_port_default_wakeup+0xa2/0xf0 [ 737.566202][T14264] serial8250_tx_chars+0x6a2/0x8b0 [ 737.566224][T14264] serial8250_handle_irq+0x567/0x730 [ 737.566247][T14264] serial8250_default_handle_irq+0xb8/0x1a0 [ 737.566271][T14264] serial8250_interrupt+0x9f/0x1c0 [ 737.566299][T14264] __handle_irq_event_percpu+0x271/0x940 [ 737.566323][T14264] handle_irq_event+0x8b/0x1e0 [ 737.566347][T14264] handle_edge_irq+0x246/0xb20 [ 737.566365][T14264] __common_interrupt+0x13b/0x230 [ 737.566400][T14264] common_interrupt+0xb4/0xd0 [ 737.566422][T14264] asm_common_interrupt+0x26/0x40 [ 737.566441][T14264] pv_native_safe_halt+0xf/0x10 [ 737.566454][T14264] default_idle+0x13/0x20 [ 737.566468][T14264] default_idle_call+0x6c/0xa0 [ 737.566482][T14264] do_idle+0x334/0x5c0 [ 737.566498][T14264] cpu_startup_entry+0x43/0x60 [ 737.566514][T14264] start_secondary+0xee/0xf0 [ 737.566529][T14264] secondary_startup_64_no_verify+0x179/0x17b [ 737.566546][T14264] [ 737.566546][T14264] -> #2 (&tty->write_wait){-...}-{2:2}: [ 737.566567][T14264] _raw_spin_lock_irqsave+0xb4/0x100 [ 737.566582][T14264] __wake_up+0x10b/0x1a0 [ 737.566596][T14264] tty_port_default_wakeup+0xa2/0xf0 [ 737.566611][T14264] serial8250_tx_chars+0x6a2/0x8b0 [ 737.566628][T14264] serial8250_handle_irq+0x567/0x730 [ 737.566645][T14264] serial8250_default_handle_irq+0xb8/0x1a0 [ 737.566665][T14264] serial8250_interrupt+0x9f/0x1c0 [ 737.566681][T14264] __handle_irq_event_percpu+0x271/0x940 [ 737.566701][T14264] handle_irq_event+0x8b/0x1e0 [ 737.566721][T14264] handle_edge_irq+0x246/0xb20 [ 737.566735][T14264] __common_interrupt+0x13b/0x230 [ 737.566751][T14264] common_interrupt+0xb4/0xd0 [ 737.566769][T14264] asm_common_interrupt+0x26/0x40 [ 737.566787][T14264] pv_native_safe_halt+0xf/0x10 [ 737.566800][T14264] default_idle+0x13/0x20 [ 737.566813][T14264] default_idle_call+0x6c/0xa0 [ 737.566827][T14264] do_idle+0x334/0x5c0 [ 737.566842][T14264] cpu_startup_entry+0x43/0x60 [ 737.566858][T14264] start_secondary+0xee/0xf0 [ 737.566872][T14264] secondary_startup_64_no_verify+0x179/0x17b [ 737.566889][T14264] [ 737.566889][T14264] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 737.566909][T14264] _raw_spin_lock_irqsave+0xb4/0x100 [ 737.566924][T14264] serial8250_console_write+0x181/0x18b0 [ 737.566943][T14264] console_flush_all+0x6ad/0xcf0 [ 737.566959][T14264] console_unlock+0xad/0x350 [ 737.566975][T14264] vprintk_emit+0x497/0x610 [ 737.566991][T14264] _printk+0xde/0x130 [ 737.567005][T14264] register_console+0xb96/0xf00 [ 737.567022][T14264] univ8250_console_init+0x45/0x50 [ 737.567043][T14264] console_init+0x17b/0x5d0 [ 737.567062][T14264] start_kernel+0x2c8/0x4e0 [ 737.567076][T14264] x86_64_start_reservations+0x2a/0x30 [ 737.567089][T14264] copy_bootdata+0x0/0xd0 [ 737.567107][T14264] secondary_startup_64_no_verify+0x179/0x17b [ 737.567125][T14264] [ 737.567125][T14264] -> #0 (console_owner){-.-.}-{0:0}: [ 737.567144][T14264] __lock_acquire+0x37ef/0x7d80 [ 737.567160][T14264] lock_acquire+0x19e/0x420 [ 737.567174][T14264] console_flush_all+0x676/0xcf0 [ 737.567191][T14264] console_unlock+0xad/0x350 [ 737.567206][T14264] vprintk_emit+0x497/0x610 [ 737.567228][T14264] _printk+0xde/0x130 [ 737.567242][T14264] should_fail_ex+0x375/0x4c0 [ 737.567260][T14264] strncpy_from_user+0x36/0x2f0 [ 737.567273][T14264] strncpy_from_user_nofault+0x71/0x140 [ 737.567298][T14264] bpf_probe_read_user_str+0x2a/0x70 [ 737.567311][T14264] bpf_prog_82a7ed3c74f5657d+0x42/0x44 [ 737.567327][T14264] trace_call_bpf+0x333/0x6c0 [ 737.567339][T14264] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 737.567356][T14264] perf_trace_lock_acquire+0x342/0x400 [ 737.567368][T14264] lock_acquire+0x3ef/0x420 [ 737.567383][T14264] psi_account_irqtime+0x236/0x810 [ 737.567400][T14264] __schedule+0x8c8/0x4660 [ 737.567419][T14264] preempt_schedule_irq+0xbf/0x150 [ 737.567438][T14264] irqentry_exit+0x67/0x70 [ 737.567451][T14264] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 737.567470][T14264] debug_lockdep_rcu_enabled+0x0/0x30 [ 737.567485][T14264] mem_cgroup_from_task+0x44/0x110 [ 737.567499][T14264] get_obj_cgroup_from_current+0x167/0x280 [ 737.567510][T14264] slab_pre_alloc_hook+0x8c/0x300 [ 737.567525][T14264] kmem_cache_alloc_lru+0x4d/0x2b0 [ 737.567540][T14264] sock_alloc_inode+0x28/0xc0 [ 737.567554][T14264] new_inode_pseudo+0x63/0x1d0 [ 737.567564][T14264] __sock_create+0x12d/0x940 [ 737.567575][T14264] __sys_socket+0xd7/0x1b0 [ 737.567585][T14264] __x64_sys_socket+0x7a/0x90 [ 737.567595][T14264] do_syscall_64+0x55/0xb0 [ 737.567607][T14264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.567620][T14264] [ 737.567620][T14264] other info that might help us debug this: [ 737.567620][T14264] [ 737.567623][T14264] Chain exists of: [ 737.567623][T14264] console_owner --> &p->pi_lock --> &rq->__lock [ 737.567623][T14264] [ 737.567638][T14264] Possible unsafe locking scenario: [ 737.567638][T14264] [ 737.567641][T14264] CPU0 CPU1 [ 737.567644][T14264] ---- ---- [ 737.567646][T14264] lock(&rq->__lock); [ 737.567652][T14264] lock(&p->pi_lock); [ 737.567659][T14264] lock(&rq->__lock); [ 737.567665][T14264] lock(console_owner); [ 737.567671][T14264] [ 737.567671][T14264] *** DEADLOCK *** [ 737.567671][T14264] [ 737.567673][T14264] 5 locks held by syz.3.2584/14264: [ 737.567680][T14264] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: get_obj_cgroup_from_current+0xd4/0x280 [ 737.567708][T14264] #1: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 737.567737][T14264] #2: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xc3/0x6c0 [ 737.567760][T14264] #3: ffffffff8d1264c0 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 737.567787][T14264] #4: ffffffff8d00dcd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 737.567814][T14264] [ 737.567814][T14264] stack backtrace: [ 737.567817][T14264] CPU: 0 PID: 14264 Comm: syz.3.2584 Not tainted syzkaller #0 [ 737.567828][T14264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 737.567834][T14264] Call Trace: [ 737.567839][T14264] [ 737.567844][T14264] dump_stack_lvl+0x18c/0x250 [ 737.567859][T14264] ? load_image+0x420/0x420 [ 737.567872][T14264] ? show_regs_print_info+0x20/0x20 [ 737.567892][T14264] ? print_circular_bug+0x12b/0x1a0 [ 737.567908][T14264] check_noncircular+0x2fc/0x400 [ 737.567926][T14264] ? print_deadlock_bug+0x5d0/0x5d0 [ 737.567938][T14264] ? lockdep_lock+0xf5/0x230 [ 737.567959][T14264] __lock_acquire+0x37ef/0x7d80 [ 737.567987][T14264] ? verify_lock_unused+0x140/0x140 [ 737.568014][T14264] lock_acquire+0x19e/0x420 [ 737.568026][T14264] ? console_flush_all+0x10b/0xcf0 [ 737.568044][T14264] ? __lock_acquire+0x7d80/0x7d80 [ 737.568056][T14264] ? do_raw_spin_lock+0x11f/0x2b0 [ 737.568070][T14264] ? read_lock_is_recursive+0x20/0x20 [ 737.568083][T14264] ? __rwlock_init+0x150/0x150 [ 737.568099][T14264] ? do_raw_spin_unlock+0x121/0x230 [ 737.568115][T14264] console_flush_all+0x676/0xcf0 [ 737.568128][T14264] ? console_flush_all+0x10b/0xcf0 [ 737.568143][T14264] ? console_flush_all+0x10b/0xcf0 [ 737.568161][T14264] ? is_console_locked+0x20/0x20 [ 737.568174][T14264] ? __lock_acquire+0x1262/0x7d80 [ 737.568194][T14264] console_unlock+0xad/0x350 [ 737.568209][T14264] ? other_cpu_in_panic+0xf0/0xf0 [ 737.568223][T14264] ? __lock_acquire+0x1262/0x7d80 [ 737.568241][T14264] vprintk_emit+0x497/0x610 [ 737.568255][T14264] ? printk_sprint+0x460/0x460 [ 737.568273][T14264] ? perf_trace_buf_alloc+0x131/0x290 [ 737.568298][T14264] _printk+0xde/0x130 [ 737.568313][T14264] ? load_image+0x420/0x420 [ 737.568326][T14264] ? exc_page_fault+0x8c/0x100 [ 737.568342][T14264] should_fail_ex+0x375/0x4c0 [ 737.568359][T14264] strncpy_from_user+0x36/0x2f0 [ 737.568373][T14264] strncpy_from_user_nofault+0x71/0x140 [ 737.568391][T14264] bpf_probe_read_user_str+0x2a/0x70 [ 737.568403][T14264] bpf_prog_82a7ed3c74f5657d+0x42/0x44 [ 737.568417][T14264] trace_call_bpf+0x333/0x6c0 [ 737.568427][T14264] ? trace_call_bpf+0xc3/0x6c0 [ 737.568436][T14264] ? __lock_acquire+0x1336/0x7d80 [ 737.568449][T14264] ? trace_call_bpf+0xc3/0x6c0 [ 737.568460][T14264] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 737.568478][T14264] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 737.568494][T14264] perf_trace_lock_acquire+0x342/0x400 [ 737.568509][T14264] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 737.568520][T14264] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 737.568532][T14264] ? rcu_qs+0xd4/0x170 [ 737.568546][T14264] ? rcu_softirq_qs+0x2e0/0x2e0 [ 737.568564][T14264] lock_acquire+0x3ef/0x420 [ 737.568575][T14264] ? __schedule+0x8c8/0x4660 [ 737.568596][T14264] ? read_lock_is_recursive+0x20/0x20 [ 737.568608][T14264] ? rcu_read_lock_sched_held+0x8a/0x110 [ 737.568620][T14264] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 737.568639][T14264] psi_account_irqtime+0x236/0x810 [ 737.568653][T14264] ? __schedule+0x8c8/0x4660 [ 737.568668][T14264] ? __schedule+0x8c8/0x4660 [ 737.568687][T14264] __schedule+0x8c8/0x4660 [ 737.568716][T14264] ? asan.module_dtor+0x20/0x20 [ 737.568734][T14264] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 737.568750][T14264] ? perf_trace_preemptirq_template+0x269/0x330 [ 737.568767][T14264] ? preempt_schedule_irq+0xb4/0x150 [ 737.568788][T14264] preempt_schedule_irq+0xbf/0x150 [ 737.568804][T14264] ? preempt_schedule_notrace+0x110/0x110 [ 737.568824][T14264] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 737.568841][T14264] irqentry_exit+0x67/0x70 [ 737.568850][T14264] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 737.568866][T14264] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x30 [ 737.568878][T14264] Code: 15 fb 03 00 75 e8 48 c7 c7 80 cb ca 8a 48 c7 c6 a0 ef ca 8a e8 81 fe bf f6 0f 0b eb d1 cc cc cc cc cc cc cc cc cc cc cc cc cc 0f 1e fa 31 c0 83 3d bf e1 fa 03 00 74 1d 83 3d 36 15 fb 03 00 [ 737.568888][T14264] RSP: 0018:ffffc90002e7fd08 EFLAGS: 00000246 [ 737.568897][T14264] RAX: 1ffff11004940daa RBX: ffff88805c61b800 RCX: dffffc0000000000 [ 737.568905][T14264] RDX: 0000000000000000 RSI: ffffffff8b1d3b80 RDI: ffff888024a05a00 [ 737.568913][T14264] RBP: 0000000000000cc0 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 737.568920][T14264] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: ffff88801ea62818 [ 737.568927][T14264] R13: 0000000000000004 R14: ffff888024a05a00 R15: dffffc0000000000 [ 737.568945][T14264] mem_cgroup_from_task+0x44/0x110 [ 737.568956][T14264] ? get_obj_cgroup_from_current+0xd4/0x280 [ 737.568969][T14264] get_obj_cgroup_from_current+0x167/0x280 [ 737.568983][T14264] slab_pre_alloc_hook+0x8c/0x300 [ 737.568998][T14264] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 737.569011][T14264] kmem_cache_alloc_lru+0x4d/0x2b0 [ 737.569026][T14264] ? sock_alloc_inode+0x28/0xc0 [ 737.569044][T14264] sock_alloc_inode+0x28/0xc0 [ 737.569057][T14264] ? sockfs_init_fs_context+0xb0/0xb0 [ 737.569071][T14264] new_inode_pseudo+0x63/0x1d0 [ 737.569085][T14264] __sock_create+0x12d/0x940 [ 737.569096][T14264] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 737.569114][T14264] __sys_socket+0xd7/0x1b0 [ 737.569129][T14264] __x64_sys_socket+0x7a/0x90 [ 737.569142][T14264] do_syscall_64+0x55/0xb0 [ 737.569155][T14264] ? clear_bhb_loop+0x40/0x90 [ 737.569169][T14264] ? clear_bhb_loop+0x40/0x90 [ 737.569184][T14264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.569198][T14264] RIP: 0033:0x7fadc039e159 [ 737.569207][T14264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.569216][T14264] RSP: 002b:00007fadc11d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 737.569226][T14264] RAX: ffffffffffffffda RBX: 00007fadc0625fa0 RCX: 00007fadc039e159 [ 737.569234][T14264] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 737.569240][T14264] RBP: 00007fadc11d8090 R08: 0000000000000000 R09: 0000000000000000 [ 737.569247][T14264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.569253][T14264] R13: 00007fadc0626038 R14: 00007fadc0625fa0 R15: 00007fff8643abe8 [ 737.569269][T14264] [ 738.957589][T14264] CPU: 0 PID: 14264 Comm: syz.3.2584 Not tainted syzkaller #0 [ 738.965044][T14264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.975105][T14264] Call Trace: [ 738.978383][T14264] [ 738.981312][T14264] dump_stack_lvl+0x18c/0x250 [ 738.985998][T14264] ? show_regs_print_info+0x20/0x20 [ 738.991192][T14264] ? load_image+0x420/0x420 [ 738.995698][T14264] ? exc_page_fault+0x8c/0x100 [ 739.000476][T14264] should_fail_ex+0x394/0x4c0 [ 739.005158][T14264] strncpy_from_user+0x36/0x2f0 [ 739.010004][T14264] strncpy_from_user_nofault+0x71/0x140 [ 739.015554][T14264] bpf_probe_read_user_str+0x2a/0x70 [ 739.020836][T14264] bpf_prog_82a7ed3c74f5657d+0x42/0x44 [ 739.026305][T14264] trace_call_bpf+0x333/0x6c0 [ 739.030975][T14264] ? trace_call_bpf+0xc3/0x6c0 [ 739.035730][T14264] ? __lock_acquire+0x1336/0x7d80 [ 739.040753][T14264] ? trace_call_bpf+0xc3/0x6c0 [ 739.045514][T14264] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 739.051579][T14264] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 739.057126][T14264] perf_trace_lock_acquire+0x342/0x400 [ 739.062586][T14264] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 739.069168][T14264] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 739.075749][T14264] ? rcu_qs+0xd4/0x170 [ 739.079814][T14264] ? rcu_softirq_qs+0x2e0/0x2e0 [ 739.084666][T14264] lock_acquire+0x3ef/0x420 [ 739.089161][T14264] ? __schedule+0x8c8/0x4660 [ 739.093757][T14264] ? read_lock_is_recursive+0x20/0x20 [ 739.099138][T14264] ? rcu_read_lock_sched_held+0x8a/0x110 [ 739.104766][T14264] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 739.110936][T14264] psi_account_irqtime+0x236/0x810 [ 739.116042][T14264] ? __schedule+0x8c8/0x4660 [ 739.120628][T14264] ? __schedule+0x8c8/0x4660 [ 739.125218][T14264] __schedule+0x8c8/0x4660 [ 739.129652][T14264] ? asan.module_dtor+0x20/0x20 [ 739.134503][T14264] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 739.140480][T14264] ? perf_trace_preemptirq_template+0x269/0x330 [ 739.146719][T14264] ? preempt_schedule_irq+0xb4/0x150 [ 739.152021][T14264] preempt_schedule_irq+0xbf/0x150 [ 739.157135][T14264] ? preempt_schedule_notrace+0x110/0x110 [ 739.162859][T14264] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 739.168664][T14264] irqentry_exit+0x67/0x70 [ 739.173081][T14264] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 739.179061][T14264] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x30 [ 739.185296][T14264] Code: 15 fb 03 00 75 e8 48 c7 c7 80 cb ca 8a 48 c7 c6 a0 ef ca 8a e8 81 fe bf f6 0f 0b eb d1 cc cc cc cc cc cc cc cc cc cc cc cc cc 0f 1e fa 31 c0 83 3d bf e1 fa 03 00 74 1d 83 3d 36 15 fb 03 00 [ 739.204922][T14264] RSP: 0018:ffffc90002e7fd08 EFLAGS: 00000246 [ 739.210991][T14264] RAX: 1ffff11004940daa RBX: ffff88805c61b800 RCX: dffffc0000000000 [ 739.218957][T14264] RDX: 0000000000000000 RSI: ffffffff8b1d3b80 RDI: ffff888024a05a00 [ 739.226922][T14264] RBP: 0000000000000cc0 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 739.234886][T14264] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: ffff88801ea62818 [ 739.242851][T14264] R13: 0000000000000004 R14: ffff888024a05a00 R15: dffffc0000000000 [ 739.250853][T14264] mem_cgroup_from_task+0x44/0x110 [ 739.255982][T14264] ? get_obj_cgroup_from_current+0xd4/0x280 [ 739.261869][T14264] get_obj_cgroup_from_current+0x167/0x280 [ 739.267685][T14264] slab_pre_alloc_hook+0x8c/0x300 [ 739.272711][T14264] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 739.278353][T14264] kmem_cache_alloc_lru+0x4d/0x2b0 [ 739.283467][T14264] ? sock_alloc_inode+0x28/0xc0 [ 739.288320][T14264] sock_alloc_inode+0x28/0xc0 [ 739.293005][T14264] ? sockfs_init_fs_context+0xb0/0xb0 [ 739.298375][T14264] new_inode_pseudo+0x63/0x1d0 [ 739.303135][T14264] __sock_create+0x12d/0x940 [ 739.307720][T14264] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 739.313703][T14264] __sys_socket+0xd7/0x1b0 [ 739.318118][T14264] __x64_sys_socket+0x7a/0x90 [ 739.322792][T14264] do_syscall_64+0x55/0xb0 [ 739.327207][T14264] ? clear_bhb_loop+0x40/0x90 [ 739.331884][T14264] ? clear_bhb_loop+0x40/0x90 [ 739.336560][T14264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 739.342451][T14264] RIP: 0033:0x7fadc039e159 [ 739.346862][T14264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.366459][T14264] RSP: 002b:00007fadc11d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 739.374866][T14264] RAX: ffffffffffffffda RBX: 00007fadc0625fa0 RCX: 00007fadc039e159 [ 739.382843][T14264] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 739.390822][T14264] RBP: 00007fadc11d8090 R08: 0000000000000000 R09: 0000000000000000 [ 739.398785][T14264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.406748][T14264] R13: 00007fadc0626038 R14: 00007fadc0625fa0 R15: 00007fff8643abe8 [ 739.414721][T14264] [ 739.579576][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.592437][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.649692][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.706425][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.736456][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.766705][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.799801][T13920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.849006][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.866020][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.884824][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.912356][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.933041][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.943942][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.955203][T13920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.999606][T14267] syzkaller0: entered promiscuous mode [ 740.005923][T14267] syzkaller0: entered allmulticast mode [ 740.018326][T13920] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.028079][T13920] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.037972][T13920] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.047107][T13920] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.153836][T13920] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 740.218799][T11315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.226165][T13920] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 740.236543][T11315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.263794][T11311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.276451][T11311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50