last executing test programs: 2.287832332s ago: executing program 1 (id=702): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000401d8f110df153e85a69022439e000000000000000000000000002e20c76ec17f48e92db5c3b28d77d2fcd920313257b50bd6ccc064cfd259e9010b5489eeb9ac5b30410b30ba2a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)}, 0x4040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0xf9c, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x110a1, 0x0, 0x3, 0x6, 0x100, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x13, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 2.176652561s ago: executing program 1 (id=703): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) sendmsg$sock(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8010) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001440)={&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000100)="a7a21248b454d5e9d80cb6ee512115c44cee0dd1b7587f4ec10efc6bc49e0e98efae41387c50f4270446cf23fe6f2b16742829bc95267059ed325a69b2598e83e01c333468bbfdacf3dcae158bdf00caad6eae056bd90c2be785e6b2f4ea406716bc00008ad4f4d7fb4681812a8c5b37b48b5a7310ebb7d5396a4acc34be908b6e891b424bd5733fb98c004c57619c7cbde3912ed6afc57681cd5cd2f3e15727cf2087", 0xa3}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="1c350255e834c8685a2657ff57eb1b04dcc08aa834e5b7f7da828736c7809536816be71f2e375e252daccf4ce2f45b5c10e6d4fb9f7e45119aef75b2421e9cca4c9d7a39c8a22b8d9d3d0b123c3b4ce63752419f9bfb7418bb81b60aa063a758a7080fe622245db0f4cab9dd2c439d6ea719cfc374f401eb4ae7f530f0bf34e6495ba448e03ab4b48b58602b089c39d3b63906ff6accff8082ba2ed9627ac80621a4e1fd0d9599f70a7bf4155c59b7a7863eb53e4e5dbc72ad71f453f8f81a86a0e5f96ed7", 0xc5}, {&(0x7f0000000300)}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)}], 0x6, &(0x7f0000001400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x23e5}}], 0x18}, 0x11) 2.121356341s ago: executing program 2 (id=704): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000000)='-\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r11 = gettid() syz_open_procfs$namespace(r11, &(0x7f0000000040)='ns/uts\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='-.\x8bW\x150/\x84/\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) 2.01200768s ago: executing program 1 (id=707): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61126f000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf670000000000001500fdff0fff52e84407000009300000240600000ee60000bf050000000000001c63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e71a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387bfa1bc9b49da28724ba9cd79fbee8f97af876d0e30c19555ffdd7d73815b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f42407107000cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08124d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cb003841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e75414c91fce6c86287945bd8d258442760000ff010000000000000000000000300807f2f3906c1d45d05ba9df828d35376fed399fa311ff63a34f0c0b82b4f2825e729eb9b7f4c9ab3be5bc011ff29904bbc424880247fabe7325a6e8d139e99d2b2fbf7e84fca3b21c78840b858ce900a4eb9c2b8b9b7fb664d2aeac991ca09b1afc0ef7aed4541a2f7275130a9fa3853481c81e919c000000000000000000000000b1e0e4b55e0d5d8c657b4853fc18ec43be33e5f971cceda04d95c87489910ce692ee55c536d1671bffd4c9b98efb741b13f0ab26ac191c74"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x2b, 'rdma'}, {0x2d, 'net_cls'}, {0x2b, 'cpuset'}, {0x2d, 'devices'}]}, 0x20) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff8880b8f0f000, 0x7}}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 1.765173553s ago: executing program 1 (id=718): socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x1d}, 0x20) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfdef) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000a208ea4d9c13f583827d1a5ec9d724a7d1d03cf1925bf4e633d56175951935b940ff440b000000000000000bab6092026e820626906ee4755852da033dbd60654ff3ff3d05cf8b6c"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x15, &(0x7f0000000040), 0x10) 1.517396967s ago: executing program 2 (id=712): socketpair(0x1, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1af06, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x8}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@phonet={0x23, 0x6, 0x7, 0xfa}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="93f6556354d8137f49dde2", 0xb}, {&(0x7f0000000240)="70182e485ce8a4218bd673aae3bdb9754aaadb49cb18a2134c94951895b5c3b0fe569b5206d06842ddc14fcbffb4492f9635d7d7854cd4e9b0667044de7ac5f71bf2b4bd59305b8aea9c6041cffb46ee13243da54680c508707cd19725daa8a192477992e48dd5fb04adb7499d823fcd1579611fe1ccec9c58ffaf1109f51439a538d9f369ceff136c4497c59cb1d701b3b94841644b83f343b98787c299b35e8628a64e7431e6a8f705f1ecec74af74f0d565708c254f036a21f79766224f8f4e1c3ee061fd73503c28", 0xca}], 0x2}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x4}, 0x19122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000140)=[{&(0x7f00000003c0)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121fb719b6", 0x31}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x29, 0xf, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000010000000002b70696473202b7065722b6465"], 0x29) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0xc1a2, 0x1000000, 0xc, 0x5, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2dfc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) 1.516408996s ago: executing program 1 (id=713): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0xfffffe51) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000009b000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100000fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003100000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00', 0x15820}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0xb, 0x0, 0x0, 0x0, 0x1ff, 0x8a0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x9}, 0x0, 0xffff, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xddbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111383bed3e60765273ce000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(r4) r8 = socket$kcm(0x2, 0x3, 0x2) r9 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r9, r1, 0x0, 0x2, &(0x7f00000000c0)='!\x00'}, 0x30) ioctl$SIOCSIFHWADDR(r8, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @local}) 1.499044463s ago: executing program 0 (id=714): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10061) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2122) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffff0000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x7f, 0x5}, 0x10, 0xffffffffffffffff}, 0x94) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 1.283445623s ago: executing program 3 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.144497646s ago: executing program 3 (id=716): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000340)=ANY=[], 0x0, 0x36, 0x0, 0x1}, 0x28) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800060000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.086435405s ago: executing program 2 (id=717): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd) 934.911257ms ago: executing program 3 (id=719): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000001000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 904.460841ms ago: executing program 2 (id=720): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000200081044e81f782db44b904021d48024c2d3bc2a796eae9180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f0000000100)) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) 888.052458ms ago: executing program 0 (id=721): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffdffffffffffffd, 0xffffffffffffffff, 0x3) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r1, 0x0, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x79, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) 677.791878ms ago: executing program 3 (id=722): socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x1d}, 0x20) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfdef) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000a208ea4d9c13f583827d1a5ec9d724a7d1d03cf1925bf4e633d56175951935b940ff440b000000000000000bab6092026e820626906ee4755852da033dbd60654ff3ff3d05cf8b6c"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x15, &(0x7f0000000040), 0x10) 673.989238ms ago: executing program 0 (id=723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000002e00000095"], &(0x7f0000000a00)='syzkaller\x00', 0x6, 0x92, &(0x7f0000002700)=""/146}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013e86bcd9e3fe3dc4e48a331086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040041) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x3c, 0x9c, &(0x7f0000000000)="d16a9e569901298661abf07d0efc48edb504c96c29407eafa2a1ccf8ea66748838d9e8aaa65cff873a10937375548b00"/60, &(0x7f0000000040)=""/156, 0x86f8, 0x0, 0x9d, 0x47, &(0x7f00000002c0)="dc9b750cc78ac601539c9e9b896c72dadea2d8b69b442adfb9f9c4a963963bdf4feeb4a9ec911608727be31d8026a808129a3ddd83bc54bbdd0fcd8bf729856fc3f4dfb15fedd1572d1b42380f9b5c945a8241451cca3eee00bfc87b540a172843cd2ee8632a5435a66a20e313ef5196d7f966504a5174b10bd4c2ba4c83192266b594e07b6327d36da2abcd9d271070c315fb48979855054740328e0f", &(0x7f0000000480)="0435e7ca2ce2814bf341720828d5195b3ccdb32c4c025ce8bca5d23d748f7d0544f8bdecc239dd6527a1433e593dc7766088c48d69bc7c6f010e61b2b880cd8d9d31f247de57ec", 0x6}, 0x50) 575.435809ms ago: executing program 2 (id=724): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x2, &(0x7f0000000400)=[{0x30, 0xff, 0x6, 0xfffff004}, {0x6, 0xff, 0x84, 0x1}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x1, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0280000000216149bf0000"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xfffffe8000000000, 0x200}, 0x200, 0x0, 0x0, 0x0, 0x1, 0x2, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af"], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7101}) write$cgroup_devices(r4, 0x0, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600290001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb79107005ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16ca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee7d", 0xb8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c080000000900"/35, 0x23}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x401) r8 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000280)={'veth1_to_team\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 495.889984ms ago: executing program 1 (id=725): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x36}, 0x28) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r0}, 0x36) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000340)=""/233}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 495.422404ms ago: executing program 0 (id=726): socketpair(0x1, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1af06, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x8}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@phonet={0x23, 0x6, 0x7, 0xfa}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="93f6556354d8137f49dde2", 0xb}, {&(0x7f0000000240)="70182e485ce8a4218bd673aae3bdb9754aaadb49cb18a2134c94951895b5c3b0fe569b5206d06842ddc14fcbffb4492f9635d7d7854cd4e9b0667044de7ac5f71bf2b4bd59305b8aea9c6041cffb46ee13243da54680c508707cd19725daa8a192477992e48dd5fb04adb7499d823fcd1579611fe1ccec9c58ffaf1109f51439a538d9f369ceff136c4497c59cb1d701b3b94841644b83f343b98787c299b35e8628a64e7431e6a8f705f1ecec74af74f0d565708c254f036a21f79766224f8f4e1c3ee061fd73503c28", 0xca}], 0x2}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x4}, 0x19122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000140)=[{&(0x7f00000003c0)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121fb719b6", 0x31}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x29, 0xf, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000010000000002b70696473202b7065722b6465"], 0x29) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0xc1a2, 0x1000000, 0xc, 0x5, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2dfc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) 451.066165ms ago: executing program 3 (id=727): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{}, {0x28}, {0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 196.703758ms ago: executing program 0 (id=728): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd) 138.802076ms ago: executing program 3 (id=729): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000000)='-\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r11 = gettid() syz_open_procfs$namespace(r11, &(0x7f0000000040)='ns/uts\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='-.\x8bW\x150/\x84/\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) 65.309153ms ago: executing program 2 (id=730): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3075e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x5e02, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0xa, 0x61}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, 0x0, &(0x7f0000000180)='%-010d \x00'}, 0x20) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4c20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0x24006990) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x3, &(0x7f0000000700)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) gettid() 0s ago: executing program 0 (id=731): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0x8, 0xb}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) setsockopt$sock_attach_bpf(r2, 0x1, 0x4b, &(0x7f0000000480), 0x63) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0200148800"}) kernel console output (not intermixed with test programs): 50][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.202923][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.215697][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.225437][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.256915][ T5766] veth1_macvtap: entered promiscuous mode [ 72.274395][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.290627][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.302266][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.313166][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.325364][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.355205][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.366712][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.379372][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.394884][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.405013][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.418021][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.430063][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.448020][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.461105][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.472500][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.486519][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.497651][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.526591][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.536890][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.547428][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 72.547637][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.572801][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.586841][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.599954][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.610287][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.621311][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.631315][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.641969][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.653482][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.665865][ T5835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.673989][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.682370][ T5835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.690679][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.742058][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.751694][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.760712][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.769590][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.825100][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.856054][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.911562][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.919999][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.972073][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.997840][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.081231][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.086784][ T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.089878][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.112367][ T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.144195][ C1] hrtimer: interrupt took 28314 ns [ 73.164595][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.189367][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.414445][ T5841] Zero length message leads to an empty skb [ 73.431850][ T5844] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6'. [ 73.456415][ T5845] netlink: 'syz.0.1': attribute type 16 has an invalid length. [ 73.472773][ T5845] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1'. [ 73.492699][ T5844] openvswitch: netlink: Flow actions attr not present in new flow. [ 73.928724][ T51] Bluetooth: hci2: command tx timeout [ 74.011195][ T5774] Bluetooth: hci3: command tx timeout [ 74.011417][ T5777] Bluetooth: hci0: command tx timeout [ 74.018253][ T51] Bluetooth: hci1: command tx timeout [ 76.008105][ T51] Bluetooth: hci2: command tx timeout [ 76.088642][ T5774] Bluetooth: hci3: command tx timeout [ 76.093619][ T5777] Bluetooth: hci0: command tx timeout [ 76.094099][ T51] Bluetooth: hci1: command tx timeout [ 76.670153][ T5857] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.109256][ T5859] netlink: 'syz.0.9': attribute type 10 has an invalid length. [ 78.120598][ T5859] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9'. [ 78.404108][ T5861] warning: `syz.2.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.721768][ T5870] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.13'. [ 81.770046][ T786] cfg80211: failed to load regulatory.db [ 81.873726][ T5884] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15'. [ 81.936138][ T5888] netlink: 'syz.3.15': attribute type 29 has an invalid length. [ 82.088215][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.581426][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.605090][ T5884] bond0 (unregistering): Released all slaves [ 82.632079][ T5888] netlink: 'syz.3.15': attribute type 29 has an invalid length. [ 82.686558][ T5884] syz.3.15 (5884) used greatest stack depth: 19952 bytes left [ 82.701455][ T5889] netlink: 'syz.3.15': attribute type 29 has an invalid length. [ 82.883625][ T5903] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.28'. [ 82.919481][ T5903] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 82.941990][ T5905] netlink: 14 bytes leftover after parsing attributes in process `syz.0.30'. [ 83.000334][ T5908] netlink: 'syz.0.30': attribute type 29 has an invalid length. [ 83.043336][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.112656][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.186524][ T5915] netlink: 'syz.1.23': attribute type 29 has an invalid length. [ 83.215683][ T5905] bond0 (unregistering): Released all slaves [ 83.341550][ T5907] netlink: 'syz.3.21': attribute type 10 has an invalid length. [ 83.349738][ T5907] netlink: 55 bytes leftover after parsing attributes in process `syz.3.21'. [ 83.746555][ T5908] netlink: 'syz.0.30': attribute type 29 has an invalid length. [ 83.770847][ T5913] netlink: 14 bytes leftover after parsing attributes in process `syz.1.23'. [ 83.894630][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.923522][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.957975][ T5913] bond0 (unregistering): Released all slaves [ 83.973472][ T5915] netlink: 'syz.1.23': attribute type 29 has an invalid length. [ 84.015785][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.024795][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.039838][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.068151][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.253483][ T5930] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.26'. [ 87.637271][ T5946] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.33'. [ 87.668938][ T5946] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 87.741979][ T5950] netlink: 'syz.0.35': attribute type 10 has an invalid length. [ 87.787413][ T5950] team0: Port device wlan1 added [ 87.894523][ T5952] netlink: 14 bytes leftover after parsing attributes in process `syz.1.36'. [ 87.916829][ T5952] netlink: 'syz.1.36': attribute type 29 has an invalid length. [ 87.925654][ T5952] netlink: 'syz.1.36': attribute type 29 has an invalid length. [ 87.943035][ T5952] netlink: 'syz.1.36': attribute type 29 has an invalid length. [ 87.954861][ T5952] netlink: 'syz.1.36': attribute type 29 has an invalid length. [ 88.055475][ T5954] netlink: 'syz.2.37': attribute type 10 has an invalid length. [ 88.077987][ T5954] netlink: 55 bytes leftover after parsing attributes in process `syz.2.37'. [ 88.304464][ T5956] netlink: 184 bytes leftover after parsing attributes in process `syz.0.45'. [ 88.495734][ T5966] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.39'. [ 88.611526][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.638008][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.670878][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.693131][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.857101][ T5968] syz.2.40 (5968) used greatest stack depth: 19632 bytes left [ 91.954190][ T5982] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.44'. [ 91.963840][ T5982] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 92.119366][ T5988] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.57'. [ 92.138354][ T5988] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 92.143087][ T5990] netlink: 14 bytes leftover after parsing attributes in process `syz.2.47'. [ 92.209228][ T5993] netlink: 'syz.2.47': attribute type 29 has an invalid length. [ 92.286452][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.349943][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.376618][ T5990] bond0 (unregistering): Released all slaves [ 92.399648][ T5993] netlink: 'syz.2.47': attribute type 29 has an invalid length. [ 92.407465][ T5996] netlink: 'syz.3.51': attribute type 12 has an invalid length. [ 92.415822][ T5996] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51'. [ 92.431731][ T5995] netlink: 'syz.2.47': attribute type 29 has an invalid length. [ 92.644039][ T6011] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.54'. [ 95.690999][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.698978][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.707670][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.716069][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.940185][ T6030] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.61'. [ 95.973574][ T6030] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 97.060500][ T6050] FAULT_INJECTION: forcing a failure. [ 97.060500][ T6050] name failslab, interval 1, probability 0, space 0, times 1 [ 97.108406][ T6050] CPU: 0 PID: 6050 Comm: syz.3.69 Not tainted syzkaller #0 [ 97.115663][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.125771][ T6050] Call Trace: [ 97.129074][ T6050] [ 97.132021][ T6050] dump_stack_lvl+0x18c/0x250 [ 97.136732][ T6050] ? show_regs_print_info+0x20/0x20 [ 97.141950][ T6050] ? load_image+0x400/0x400 [ 97.146467][ T6050] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 97.152469][ T6050] ? __tcp_transmit_skb+0x2086/0x33f0 [ 97.157867][ T6050] should_fail_ex+0x39d/0x4d0 [ 97.162575][ T6050] should_failslab+0x9/0x20 [ 97.167112][ T6050] slab_pre_alloc_hook+0x59/0x310 [ 97.172168][ T6050] kmem_cache_alloc_node+0x60/0x320 [ 97.177391][ T6050] ? __alloc_skb+0x103/0x2c0 [ 97.182013][ T6050] __alloc_skb+0x103/0x2c0 [ 97.186458][ T6050] tcp_stream_alloc_skb+0x3d/0x330 [ 97.191594][ T6050] tcp_write_xmit+0xe5f/0x62e0 [ 97.196420][ T6050] __tcp_push_pending_frames+0x97/0x340 [ 97.201986][ T6050] ? tcp_push+0x41f/0x660 [ 97.206337][ T6050] tcp_sendmsg_locked+0x436f/0x4bd0 [ 97.211557][ T6050] ? verify_lock_unused+0x140/0x140 [ 97.216822][ T6050] ? tcp_set_state+0x680/0x680 [ 97.221621][ T6050] tcp_sendmsg+0x2f/0x50 [ 97.225889][ T6050] ? inet_send_prepare+0x260/0x260 [ 97.231021][ T6050] ____sys_sendmsg+0x5ba/0x960 [ 97.235988][ T6050] ? __asan_memset+0x22/0x40 [ 97.240600][ T6050] ? __sys_sendmsg_sock+0x30/0x30 [ 97.245638][ T6050] ? __import_iovec+0x5f2/0x850 [ 97.250514][ T6050] ? import_iovec+0x73/0xa0 [ 97.255021][ T6050] ___sys_sendmsg+0x2a6/0x360 [ 97.259707][ T6050] ? get_pid_task+0x20/0x1e0 [ 97.264315][ T6050] ? __sys_sendmsg+0x2a0/0x2a0 [ 97.269110][ T6050] ? __lock_acquire+0x7d40/0x7d40 [ 97.274162][ T6050] __se_sys_sendmsg+0x1c2/0x2b0 [ 97.279022][ T6050] ? __x64_sys_sendmsg+0x80/0x80 [ 97.283979][ T6050] ? lockdep_hardirqs_on+0x98/0x150 [ 97.289205][ T6050] do_syscall_64+0x55/0xa0 [ 97.293643][ T6050] ? clear_bhb_loop+0x40/0x90 [ 97.298322][ T6050] ? clear_bhb_loop+0x40/0x90 [ 97.303003][ T6050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.308896][ T6050] RIP: 0033:0x7f962799c799 [ 97.313325][ T6050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.332931][ T6050] RSP: 002b:00007f96288c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.341352][ T6050] RAX: ffffffffffffffda RBX: 00007f9627c15fa0 RCX: 00007f962799c799 [ 97.349501][ T6050] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003 [ 97.357472][ T6050] RBP: 00007f96288c5090 R08: 0000000000000000 R09: 0000000000000000 [ 97.365457][ T6050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.373438][ T6050] R13: 00007f9627c16038 R14: 00007f9627c15fa0 R15: 00007ffd30f38d08 [ 97.381431][ T6050] [ 103.339023][ T6090] validate_nla: 1 callbacks suppressed [ 103.339133][ T6090] netlink: 'syz.0.78': attribute type 10 has an invalid length. [ 103.656619][ T6120] netlink: 'syz.2.83': attribute type 2 has an invalid length. [ 103.688257][ T6120] netlink: 'syz.2.83': attribute type 4 has an invalid length. [ 103.723722][ T6120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.83'. [ 103.739331][ T6122] Driver unsupported XDP return value 0 on prog (id 65) dev N/A, expect packet loss! [ 103.967978][ T6124] delete_channel: no stack [ 104.169410][ T6126] delete_channel: no stack [ 104.623974][ T6149] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.95'. [ 104.629226][ T6146] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.94'. [ 104.825955][ T6145] cgroup: fork rejected by pids controller in /syz2 [ 104.836401][ T6156] FAULT_INJECTION: forcing a failure. [ 104.836401][ T6156] name failslab, interval 1, probability 0, space 0, times 0 [ 104.857851][ T6156] CPU: 1 PID: 6156 Comm: syz.0.97 Not tainted syzkaller #0 [ 104.865078][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.875144][ T6156] Call Trace: [ 104.878447][ T6156] [ 104.881392][ T6156] dump_stack_lvl+0x18c/0x250 [ 104.886099][ T6156] ? show_regs_print_info+0x20/0x20 [ 104.891330][ T6156] ? load_image+0x400/0x400 [ 104.895857][ T6156] ? verify_lock_unused+0x140/0x140 [ 104.901078][ T6156] should_fail_ex+0x39d/0x4d0 [ 104.905759][ T6156] should_failslab+0x9/0x20 [ 104.910261][ T6156] slab_pre_alloc_hook+0x59/0x310 [ 104.915290][ T6156] kmem_cache_alloc+0x5a/0x2d0 [ 104.920056][ T6156] ? skb_clone+0x1eb/0x370 [ 104.924470][ T6156] skb_clone+0x1eb/0x370 [ 104.928709][ T6156] __netlink_deliver_tap+0x41c/0x830 [ 104.933998][ T6156] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.939199][ T6156] netlink_deliver_tap+0x19c/0x1b0 [ 104.944321][ T6156] netlink_sendskb+0x68/0x130 [ 104.948997][ T6156] netlink_ack+0xce1/0x1180 [ 104.953509][ T6156] ? netlink_dump+0xe50/0xe50 [ 104.958184][ T6156] ? ref_tracker_free+0x690/0x840 [ 104.963206][ T6156] netlink_rcv_skb+0x2c5/0x4d0 [ 104.967963][ T6156] ? rtnetlink_bind+0x80/0x80 [ 104.972636][ T6156] ? netlink_ack+0x1180/0x1180 [ 104.977406][ T6156] ? __lock_acquire+0x7d40/0x7d40 [ 104.982431][ T6156] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.987624][ T6156] netlink_unicast+0x751/0x8d0 [ 104.992389][ T6156] netlink_sendmsg+0x8d0/0xbf0 [ 104.997154][ T6156] ? netlink_getsockopt+0x590/0x590 [ 105.002346][ T6156] ? aa_sock_msg_perm+0x94/0x150 [ 105.007286][ T6156] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 105.012571][ T6156] ? security_socket_sendmsg+0x80/0xa0 [ 105.018018][ T6156] ? netlink_getsockopt+0x590/0x590 [ 105.023214][ T6156] ____sys_sendmsg+0x5ba/0x960 [ 105.027974][ T6156] ? __asan_memset+0x22/0x40 [ 105.032559][ T6156] ? __sys_sendmsg_sock+0x30/0x30 [ 105.037569][ T6156] ? __import_iovec+0x5f2/0x850 [ 105.042422][ T6156] ? import_iovec+0x73/0xa0 [ 105.046919][ T6156] ___sys_sendmsg+0x2a6/0x360 [ 105.051594][ T6156] ? get_pid_task+0x20/0x1e0 [ 105.056182][ T6156] ? __sys_sendmsg+0x2a0/0x2a0 [ 105.060958][ T6156] ? __lock_acquire+0x7d40/0x7d40 [ 105.065994][ T6156] __se_sys_sendmsg+0x1c2/0x2b0 [ 105.070837][ T6156] ? __x64_sys_sendmsg+0x80/0x80 [ 105.075775][ T6156] ? lockdep_hardirqs_on+0x98/0x150 [ 105.080965][ T6156] do_syscall_64+0x55/0xa0 [ 105.085373][ T6156] ? clear_bhb_loop+0x40/0x90 [ 105.090040][ T6156] ? clear_bhb_loop+0x40/0x90 [ 105.094707][ T6156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.100601][ T6156] RIP: 0033:0x7fb09919c799 [ 105.105005][ T6156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.124776][ T6156] RSP: 002b:00007fb09a14c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.133180][ T6156] RAX: ffffffffffffffda RBX: 00007fb099415fa0 RCX: 00007fb09919c799 [ 105.141148][ T6156] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 105.149123][ T6156] RBP: 00007fb09a14c090 R08: 0000000000000000 R09: 0000000000000000 [ 105.157084][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.165044][ T6156] R13: 00007fb099416038 R14: 00007fb099415fa0 R15: 00007fff5421bf18 [ 105.173018][ T6156] [ 106.041786][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.686709][ T6281] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.106'. [ 106.910497][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.924257][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.932068][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.948678][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.960807][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.968619][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.947488][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.081712][ T6286] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.107'. [ 108.124132][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.239341][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.424389][ T6283] chnl_net:caif_netlink_parms(): no params data found [ 108.685348][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.692743][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.700410][ T6283] bridge_slave_0: entered allmulticast mode [ 108.712853][ T6283] bridge_slave_0: entered promiscuous mode [ 108.722077][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.730269][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.737504][ T6283] bridge_slave_1: entered allmulticast mode [ 108.745443][ T6283] bridge_slave_1: entered promiscuous mode [ 108.746623][ T6312] netlink: 'syz.3.115': attribute type 29 has an invalid length. [ 108.771936][ T6314] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.116'. [ 108.782772][ T6310] netlink: 14 bytes leftover after parsing attributes in process `syz.3.115'. [ 108.803936][ T6312] netlink: 'syz.3.115': attribute type 29 has an invalid length. [ 108.812813][ T6310] netlink: 'syz.3.115': attribute type 29 has an invalid length. [ 108.834180][ T6283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.847405][ T6283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.861325][ T6310] netlink: 'syz.3.115': attribute type 29 has an invalid length. [ 108.927482][ T6283] team0: Port device team_slave_0 added [ 108.978597][ T6283] team0: Port device team_slave_1 added [ 109.049021][ T5774] Bluetooth: hci1: command tx timeout [ 109.050707][ T6316] netlink: 'syz.1.117': attribute type 8 has an invalid length. [ 109.067607][ T6316] netlink: 156 bytes leftover after parsing attributes in process `syz.1.117'. [ 109.112975][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.127464][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.155727][ T6283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.170351][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.180037][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.207202][ T6283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.797033][ T6283] hsr_slave_0: entered promiscuous mode [ 109.819548][ T6283] hsr_slave_1: entered promiscuous mode [ 109.832428][ T6283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.848355][ T6283] Cannot create hsr debugfs directory [ 109.893209][ T6342] netlink: 'syz.1.122': attribute type 17 has an invalid length. [ 109.901634][ T6342] netlink: 'syz.1.122': attribute type 16 has an invalid length. [ 109.913650][ T6342] netlink: 152 bytes leftover after parsing attributes in process `syz.1.122'. [ 110.037436][ T6339] tun0: tun_chr_ioctl cmd 1074025675 [ 110.043023][ T6339] tun0: persist enabled [ 110.067349][ T6345] tun0: tun_chr_ioctl cmd 1074025675 [ 110.073970][ T6345] tun0: persist disabled [ 110.142815][ T6352] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.125'. [ 110.401700][ T6360] netlink: 'syz.1.126': attribute type 29 has an invalid length. [ 110.443472][ T6356] netlink: 14 bytes leftover after parsing attributes in process `syz.1.126'. [ 110.519045][ T42] hsr_slave_0: left promiscuous mode [ 110.541550][ T42] hsr_slave_1: left promiscuous mode [ 110.553374][ T42] bridge_slave_1: left allmulticast mode [ 110.578647][ T42] bridge_slave_1: left promiscuous mode [ 110.608231][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.622465][ T42] bridge_slave_0: left allmulticast mode [ 110.628482][ T42] bridge_slave_0: left promiscuous mode [ 110.638864][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.683039][ T42] veth1_macvtap: left promiscuous mode [ 110.692586][ T42] veth0_macvtap: left promiscuous mode [ 111.132474][ T5774] Bluetooth: hci1: command tx timeout [ 111.222491][ T42] team0 (unregistering): Port device team_slave_1 removed [ 111.260214][ T42] team0 (unregistering): Port device team_slave_0 removed [ 111.619862][ T6360] netlink: 'syz.1.126': attribute type 29 has an invalid length. [ 112.271241][ T6409] netlink: 'syz.0.138': attribute type 11 has an invalid length. [ 112.280243][ T6409] netlink: 168 bytes leftover after parsing attributes in process `syz.0.138'. [ 112.294332][ T6410] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.137'. [ 112.548392][ T6283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.573776][ T6283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.621243][ T6283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.675943][ T6283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.724887][ T6422] netlink: 14 bytes leftover after parsing attributes in process `syz.1.142'. [ 112.915336][ T6283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.970575][ T6283] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.021623][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.028836][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.097275][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.104449][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.218230][ T5774] Bluetooth: hci1: command tx timeout [ 113.296219][ T6283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.625410][ T6439] netlink: 152 bytes leftover after parsing attributes in process `syz.0.147'. [ 113.776991][ T6439] validate_nla: 5 callbacks suppressed [ 113.777007][ T6439] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 113.894431][ T6453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.410107][ T6283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.506395][ T6469] netlink: 14 bytes leftover after parsing attributes in process `syz.3.154'. [ 114.541493][ T6283] veth0_vlan: entered promiscuous mode [ 114.553944][ T6469] netlink: 'syz.3.154': attribute type 29 has an invalid length. [ 114.569835][ T6469] netlink: 'syz.3.154': attribute type 29 has an invalid length. [ 114.586458][ T6472] netlink: 'syz.3.154': attribute type 29 has an invalid length. [ 114.597175][ T6469] netlink: 'syz.3.154': attribute type 29 has an invalid length. [ 114.636771][ T6283] veth1_vlan: entered promiscuous mode [ 114.736789][ T6283] veth0_macvtap: entered promiscuous mode [ 114.777426][ T6283] veth1_macvtap: entered promiscuous mode [ 114.829776][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.847427][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.871613][ T6283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.900802][ T6283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.919724][ T6283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.936694][ T6283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.092196][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.125329][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.251904][ T6490] netlink: 'syz.3.159': attribute type 10 has an invalid length. [ 115.270006][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.289260][ T5774] Bluetooth: hci1: command tx timeout [ 115.303658][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.504991][ T6509] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 115.530581][ T6509] FAULT_INJECTION: forcing a failure. [ 115.530581][ T6509] name failslab, interval 1, probability 0, space 0, times 0 [ 115.568907][ T6509] CPU: 0 PID: 6509 Comm: syz.1.162 Not tainted syzkaller #0 [ 115.576231][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.586300][ T6509] Call Trace: [ 115.589597][ T6509] [ 115.592710][ T6509] dump_stack_lvl+0x18c/0x250 [ 115.597421][ T6509] ? show_regs_print_info+0x20/0x20 [ 115.602640][ T6509] ? load_image+0x400/0x400 [ 115.607170][ T6509] ? verify_lock_unused+0x140/0x140 [ 115.612394][ T6509] should_fail_ex+0x39d/0x4d0 [ 115.617093][ T6509] should_failslab+0x9/0x20 [ 115.621610][ T6509] slab_pre_alloc_hook+0x59/0x310 [ 115.626661][ T6509] kmem_cache_alloc+0x5a/0x2d0 [ 115.631438][ T6509] ? skb_clone+0x1eb/0x370 [ 115.635873][ T6509] skb_clone+0x1eb/0x370 [ 115.640136][ T6509] __netlink_deliver_tap+0x41c/0x830 [ 115.645447][ T6509] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.650662][ T6509] netlink_deliver_tap+0x19c/0x1b0 [ 115.655799][ T6509] netlink_sendskb+0x68/0x130 [ 115.660495][ T6509] netlink_ack+0xce1/0x1180 [ 115.665037][ T6509] ? netlink_dump+0xe50/0xe50 [ 115.669730][ T6509] ? ref_tracker_free+0x690/0x840 [ 115.674791][ T6509] netlink_rcv_skb+0x2c5/0x4d0 [ 115.679571][ T6509] ? rtnetlink_bind+0x80/0x80 [ 115.684260][ T6509] ? netlink_ack+0x1180/0x1180 [ 115.689052][ T6509] ? __lock_acquire+0x7d40/0x7d40 [ 115.694101][ T6509] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.699332][ T6509] netlink_unicast+0x751/0x8d0 [ 115.704124][ T6509] netlink_sendmsg+0x8d0/0xbf0 [ 115.708908][ T6509] ? netlink_getsockopt+0x590/0x590 [ 115.714110][ T6509] ? aa_sock_msg_perm+0x94/0x150 [ 115.719050][ T6509] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 115.724330][ T6509] ? security_socket_sendmsg+0x80/0xa0 [ 115.729781][ T6509] ? netlink_getsockopt+0x590/0x590 [ 115.734971][ T6509] ____sys_sendmsg+0x5ba/0x960 [ 115.739730][ T6509] ? __asan_memset+0x22/0x40 [ 115.744315][ T6509] ? __sys_sendmsg_sock+0x30/0x30 [ 115.749327][ T6509] ? __import_iovec+0x5f2/0x850 [ 115.754177][ T6509] ? import_iovec+0x73/0xa0 [ 115.758669][ T6509] ___sys_sendmsg+0x2a6/0x360 [ 115.763336][ T6509] ? get_pid_task+0x20/0x1e0 [ 115.767930][ T6509] ? __sys_sendmsg+0x2a0/0x2a0 [ 115.772700][ T6509] ? __lock_acquire+0x7d40/0x7d40 [ 115.777739][ T6509] __se_sys_sendmsg+0x1c2/0x2b0 [ 115.782596][ T6509] ? __x64_sys_sendmsg+0x80/0x80 [ 115.787535][ T6509] ? lockdep_hardirqs_on+0x98/0x150 [ 115.792729][ T6509] do_syscall_64+0x55/0xa0 [ 115.797146][ T6509] ? clear_bhb_loop+0x40/0x90 [ 115.801904][ T6509] ? clear_bhb_loop+0x40/0x90 [ 115.806575][ T6509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.812460][ T6509] RIP: 0033:0x7fa11999c799 [ 115.816867][ T6509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.836462][ T6509] RSP: 002b:00007fa11a8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.844868][ T6509] RAX: ffffffffffffffda RBX: 00007fa119c15fa0 RCX: 00007fa11999c799 [ 115.852919][ T6509] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 115.860884][ T6509] RBP: 00007fa11a8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 115.868855][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.876821][ T6509] R13: 00007fa119c16038 R14: 00007fa119c15fa0 R15: 00007ffe503415f8 [ 115.884807][ T6509] [ 116.092548][ T6527] netlink: 14 bytes leftover after parsing attributes in process `syz.1.165'. [ 116.125194][ T6527] netlink: 'syz.1.165': attribute type 29 has an invalid length. [ 116.147631][ T6527] netlink: 'syz.1.165': attribute type 29 has an invalid length. [ 116.165627][ T6527] netlink: 'syz.1.165': attribute type 29 has an invalid length. [ 116.365689][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.375186][ T6534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.388455][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.408783][ T6534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.634488][ T6543] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 117.533026][ T6563] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.179'. [ 117.554810][ T6563] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 117.848482][ T5774] Bluetooth: hci0: ISO packet for unknown connection handle 55 [ 118.293596][ T6575] FAULT_INJECTION: forcing a failure. [ 118.293596][ T6575] name failslab, interval 1, probability 0, space 0, times 0 [ 118.322222][ T6575] CPU: 0 PID: 6575 Comm: syz.3.185 Not tainted syzkaller #0 [ 118.329563][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.339629][ T6575] Call Trace: [ 118.342911][ T6575] [ 118.345850][ T6575] dump_stack_lvl+0x18c/0x250 [ 118.350569][ T6575] ? show_regs_print_info+0x20/0x20 [ 118.355792][ T6575] ? load_image+0x400/0x400 [ 118.360320][ T6575] ? __might_sleep+0xe0/0xe0 [ 118.364987][ T6575] ? __lock_acquire+0x7d40/0x7d40 [ 118.370046][ T6575] should_fail_ex+0x39d/0x4d0 [ 118.374748][ T6575] should_failslab+0x9/0x20 [ 118.379274][ T6575] slab_pre_alloc_hook+0x59/0x310 [ 118.384328][ T6575] ? tomoyo_encode+0x28b/0x540 [ 118.389114][ T6575] ? tomoyo_encode+0x28b/0x540 [ 118.393891][ T6575] __kmem_cache_alloc_node+0x53/0x250 [ 118.399291][ T6575] ? tomoyo_encode+0x28b/0x540 [ 118.404076][ T6575] __kmalloc+0xa4/0x230 [ 118.408260][ T6575] tomoyo_encode+0x28b/0x540 [ 118.412874][ T6575] tomoyo_realpath_from_path+0x592/0x5d0 [ 118.418534][ T6575] tomoyo_path_number_perm+0x248/0x620 [ 118.424001][ T6575] ? tomoyo_path_number_perm+0x217/0x620 [ 118.429633][ T6575] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 118.435090][ T6575] ? ksys_write+0x1c4/0x260 [ 118.439613][ T6575] ? __fget_files+0x28/0x4b0 [ 118.444196][ T6575] ? __fget_files+0x28/0x4b0 [ 118.448796][ T6575] security_file_ioctl+0x70/0xa0 [ 118.453819][ T6575] __se_sys_ioctl+0x48/0x170 [ 118.458407][ T6575] do_syscall_64+0x55/0xa0 [ 118.462822][ T6575] ? clear_bhb_loop+0x40/0x90 [ 118.467497][ T6575] ? clear_bhb_loop+0x40/0x90 [ 118.472165][ T6575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.478049][ T6575] RIP: 0033:0x7f962799c799 [ 118.482463][ T6575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.502068][ T6575] RSP: 002b:00007f96288c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.510485][ T6575] RAX: ffffffffffffffda RBX: 00007f9627c15fa0 RCX: 00007f962799c799 [ 118.518449][ T6575] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000003 [ 118.526412][ T6575] RBP: 00007f96288c5090 R08: 0000000000000000 R09: 0000000000000000 [ 118.534371][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.542333][ T6575] R13: 00007f9627c16038 R14: 00007f9627c15fa0 R15: 00007ffd30f38d08 [ 118.550308][ T6575] [ 118.556134][ T6579] syz.1.184 uses obsolete (PF_INET,SOCK_PACKET) [ 118.588913][ T6575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 118.620038][ T6564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.839430][ T6587] FAULT_INJECTION: forcing a failure. [ 118.839430][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 118.849056][ T6585] netlink: 14 bytes leftover after parsing attributes in process `syz.1.189'. [ 118.886883][ T6585] validate_nla: 1 callbacks suppressed [ 118.886917][ T6585] netlink: 'syz.1.189': attribute type 29 has an invalid length. [ 118.919077][ T6585] netlink: 'syz.1.189': attribute type 29 has an invalid length. [ 118.926521][ T6587] CPU: 1 PID: 6587 Comm: syz.0.188 Not tainted syzkaller #0 [ 118.932536][ T6585] netlink: 'syz.1.189': attribute type 29 has an invalid length. [ 118.934292][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.934305][ T6587] Call Trace: [ 118.934312][ T6587] [ 118.934320][ T6587] dump_stack_lvl+0x18c/0x250 [ 118.934351][ T6587] ? show_regs_print_info+0x20/0x20 [ 118.934375][ T6587] ? load_image+0x400/0x400 [ 118.944263][ T6585] netlink: 'syz.1.189': attribute type 29 has an invalid length. [ 118.952239][ T6587] ? __might_sleep+0xe0/0xe0 [ 118.952265][ T6587] ? __lock_acquire+0x7d40/0x7d40 [ 118.952289][ T6587] should_fail_ex+0x39d/0x4d0 [ 118.952317][ T6587] should_failslab+0x9/0x20 [ 118.952338][ T6587] slab_pre_alloc_hook+0x59/0x310 [ 118.952362][ T6587] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 118.952380][ T6587] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 118.952397][ T6587] __kmem_cache_alloc_node+0x53/0x250 [ 118.952422][ T6587] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 118.952438][ T6587] __kmalloc+0xa4/0x230 [ 118.952461][ T6587] tomoyo_realpath_from_path+0xe3/0x5d0 [ 118.952491][ T6587] tomoyo_path_number_perm+0x248/0x620 [ 118.952515][ T6587] ? tomoyo_path_number_perm+0x217/0x620 [ 118.952537][ T6587] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 118.952561][ T6587] ? ksys_write+0x1c4/0x260 [ 118.952611][ T6587] ? __fget_files+0x28/0x4b0 [ 118.952630][ T6587] ? __fget_files+0x28/0x4b0 [ 118.952660][ T6587] security_file_ioctl+0x70/0xa0 [ 118.952686][ T6587] __se_sys_ioctl+0x48/0x170 [ 118.952708][ T6587] do_syscall_64+0x55/0xa0 [ 118.952729][ T6587] ? clear_bhb_loop+0x40/0x90 [ 118.952747][ T6587] ? clear_bhb_loop+0x40/0x90 [ 118.952765][ T6587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.952784][ T6587] RIP: 0033:0x7fb09919c799 [ 118.952800][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.952813][ T6587] RSP: 002b:00007fb09a14c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.952833][ T6587] RAX: ffffffffffffffda RBX: 00007fb099415fa0 RCX: 00007fb09919c799 [ 118.952845][ T6587] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000003 [ 118.952855][ T6587] RBP: 00007fb09a14c090 R08: 0000000000000000 R09: 0000000000000000 [ 118.952865][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.952876][ T6587] R13: 00007fb099416038 R14: 00007fb099415fa0 R15: 00007fff5421bf18 [ 118.952901][ T6587] [ 118.966209][ T6587] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.081151][ T6590] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.190'. [ 119.218409][ T6590] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 119.650897][ T6602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.195'. [ 119.670484][ T6602] netlink: 'syz.3.195': attribute type 15 has an invalid length. [ 119.678650][ T6602] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.195'. [ 119.691006][ T6602] netlink: 'syz.3.195': attribute type 11 has an invalid length. [ 119.699539][ T6602] netlink: 'syz.3.195': attribute type 15 has an invalid length. [ 119.707462][ T6602] netlink: 'syz.3.195': attribute type 16 has an invalid length. [ 119.733329][ T6602] netlink: 'syz.3.195': attribute type 21 has an invalid length. [ 119.743902][ T6602] netlink: 'syz.3.195': attribute type 25 has an invalid length. [ 119.798227][ T6591] FAULT_INJECTION: forcing a failure. [ 119.798227][ T6591] name fail_futex, interval 1, probability 0, space 0, times 1 [ 119.812160][ T6591] CPU: 0 PID: 6591 Comm: syz.2.191 Not tainted syzkaller #0 [ 119.819485][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.829556][ T6591] Call Trace: [ 119.832847][ T6591] [ 119.835785][ T6591] dump_stack_lvl+0x18c/0x250 [ 119.840485][ T6591] ? show_regs_print_info+0x20/0x20 [ 119.846226][ T6591] ? load_image+0x400/0x400 [ 119.850751][ T6591] ? __lock_acquire+0x1347/0x7d40 [ 119.855802][ T6591] ? verify_lock_unused+0x140/0x140 [ 119.861016][ T6591] should_fail_ex+0x39d/0x4d0 [ 119.865694][ T6591] get_futex_key+0x136/0x1010 [ 119.870374][ T6591] ? futex_setup_timer+0xc0/0xc0 [ 119.875314][ T6591] futex_wake+0x127/0x4f0 [ 119.879641][ T6591] ? futex_wake_mark+0x150/0x150 [ 119.884619][ T6591] do_futex+0x35d/0x3e0 [ 119.888765][ T6591] ? __might_fault+0xaa/0x120 [ 119.893445][ T6591] ? __ia32_sys_get_robust_list+0x110/0x110 [ 119.899338][ T6591] ? __might_fault+0xc6/0x120 [ 119.904010][ T6591] mm_release+0x184/0x3a0 [ 119.908334][ T6591] ? exit_mm_release+0x30/0x30 [ 119.913088][ T6591] ? lockdep_hardirqs_on+0x98/0x150 [ 119.918283][ T6591] exit_mm+0xa7/0x2c0 [ 119.922261][ T6591] ? do_exit+0x2460/0x2460 [ 119.926668][ T6591] ? taskstats_exit+0x35e/0x9e0 [ 119.931518][ T6591] do_exit+0x8dd/0x2460 [ 119.935675][ T6591] ? put_task_struct+0xc0/0xc0 [ 119.940433][ T6591] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 119.946403][ T6591] ? get_signal+0x1068/0x13f0 [ 119.951071][ T6591] ? lock_chain_count+0x20/0x20 [ 119.955911][ T6591] ? _raw_spin_lock_irq+0xbb/0xf0 [ 119.960929][ T6591] do_group_exit+0x21b/0x2d0 [ 119.965514][ T6591] ? lockdep_hardirqs_on+0x98/0x150 [ 119.970705][ T6591] get_signal+0x12fc/0x13f0 [ 119.975222][ T6591] arch_do_signal_or_restart+0xc2/0x800 [ 119.980778][ T6591] ? get_sigframe_size+0x20/0x20 [ 119.985721][ T6591] ? exit_to_user_mode_loop+0x3b/0x110 [ 119.991205][ T6591] exit_to_user_mode_loop+0x70/0x110 [ 119.996485][ T6591] exit_to_user_mode_prepare+0xee/0x180 [ 120.002047][ T6591] syscall_exit_to_user_mode+0x1a/0x50 [ 120.007505][ T6591] do_syscall_64+0x61/0xa0 [ 120.011931][ T6591] ? clear_bhb_loop+0x40/0x90 [ 120.016602][ T6591] ? clear_bhb_loop+0x40/0x90 [ 120.021275][ T6591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.027159][ T6591] RIP: 0033:0x7fe160d9c799 [ 120.031577][ T6591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.051182][ T6591] RSP: 002b:00007fe161cb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 120.059590][ T6591] RAX: fffffffffffffe00 RBX: 00007fe161015fa0 RCX: 00007fe160d9c799 [ 120.067555][ T6591] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 120.075515][ T6591] RBP: 00007fe161cb2090 R08: 0000000000000000 R09: 0000000000000000 [ 120.083474][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.091435][ T6591] R13: 00007fe161016038 R14: 00007fe161015fa0 R15: 00007ffec0e010f8 [ 120.099414][ T6591] [ 120.373814][ T5774] Bluetooth: hci1: ISO packet for unknown connection handle 55 [ 120.417463][ T6614] netlink: 14 bytes leftover after parsing attributes in process `syz.3.201'. [ 120.768613][ T6606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.797086][ T6624] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.205'. [ 120.838184][ T6624] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 120.910576][ T6627] Ÿë: port 1(syz_tun) entered blocking state [ 120.928040][ T6627] Ÿë: port 1(syz_tun) entered disabled state [ 120.934482][ T6627] syz_tun: entered allmulticast mode [ 120.948601][ T6627] syz_tun: entered promiscuous mode [ 120.974364][ T6631] FAULT_INJECTION: forcing a failure. [ 120.974364][ T6631] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.044313][ T6631] CPU: 1 PID: 6631 Comm: syz.1.208 Not tainted syzkaller #0 [ 121.051658][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.061722][ T6631] Call Trace: [ 121.065005][ T6631] [ 121.067941][ T6631] dump_stack_lvl+0x18c/0x250 [ 121.072734][ T6631] ? show_regs_print_info+0x20/0x20 [ 121.077952][ T6631] ? load_image+0x400/0x400 [ 121.082488][ T6631] ? __lock_acquire+0x7d40/0x7d40 [ 121.087536][ T6631] should_fail_ex+0x39d/0x4d0 [ 121.092229][ T6631] _copy_from_user+0x2f/0xe0 [ 121.096830][ T6631] __copy_msghdr+0x3bb/0x580 [ 121.101451][ T6631] ___sys_sendmsg+0x214/0x360 [ 121.106142][ T6631] ? get_pid_task+0x20/0x1e0 [ 121.110752][ T6631] ? __sys_sendmsg+0x2a0/0x2a0 [ 121.115552][ T6631] ? __lock_acquire+0x7d40/0x7d40 [ 121.120610][ T6631] __se_sys_sendmsg+0x1c2/0x2b0 [ 121.125471][ T6631] ? __x64_sys_sendmsg+0x80/0x80 [ 121.130426][ T6631] ? lockdep_hardirqs_on+0x98/0x150 [ 121.135634][ T6631] do_syscall_64+0x55/0xa0 [ 121.140057][ T6631] ? clear_bhb_loop+0x40/0x90 [ 121.144736][ T6631] ? clear_bhb_loop+0x40/0x90 [ 121.149422][ T6631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.155326][ T6631] RIP: 0033:0x7fa11999c799 [ 121.159751][ T6631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.179363][ T6631] RSP: 002b:00007fa11a8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.187782][ T6631] RAX: ffffffffffffffda RBX: 00007fa119c15fa0 RCX: 00007fa11999c799 [ 121.195760][ T6631] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000003 [ 121.203733][ T6631] RBP: 00007fa11a8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.211707][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.219676][ T6631] R13: 00007fa119c16038 R14: 00007fa119c15fa0 R15: 00007ffe503415f8 [ 121.227666][ T6631] [ 121.271891][ T6638] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.211'. [ 121.676785][ T6652] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.217'. [ 121.688455][ T6652] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 122.201279][ T6671] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.222'. [ 122.269443][ T6673] netlink: 60 bytes leftover after parsing attributes in process `syz.0.223'. [ 122.300964][ T6673] netlink: 60 bytes leftover after parsing attributes in process `syz.0.223'. [ 122.334094][ T6673] netlink: 60 bytes leftover after parsing attributes in process `syz.0.223'. [ 123.417034][ T6683] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 123.682433][ T6692] FAULT_INJECTION: forcing a failure. [ 123.682433][ T6692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.707864][ T6692] CPU: 0 PID: 6692 Comm: syz.1.231 Not tainted syzkaller #0 [ 123.715203][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.725272][ T6692] Call Trace: [ 123.728574][ T6692] [ 123.731521][ T6692] dump_stack_lvl+0x18c/0x250 [ 123.736225][ T6692] ? show_regs_print_info+0x20/0x20 [ 123.741443][ T6692] ? load_image+0x400/0x400 [ 123.745964][ T6692] ? __might_fault+0xaa/0x120 [ 123.750660][ T6692] ? __lock_acquire+0x7d40/0x7d40 [ 123.755710][ T6692] should_fail_ex+0x39d/0x4d0 [ 123.760412][ T6692] _copy_from_iter+0x1d9/0x12e0 [ 123.765273][ T6692] ? __virt_addr_valid+0x18c/0x540 [ 123.770385][ T6692] ? __lock_acquire+0x7d40/0x7d40 [ 123.775398][ T6692] ? copyout_mc+0x70/0x70 [ 123.779719][ T6692] ? __virt_addr_valid+0x18c/0x540 [ 123.784818][ T6692] ? __virt_addr_valid+0x18c/0x540 [ 123.789933][ T6692] ? __virt_addr_valid+0x469/0x540 [ 123.795042][ T6692] ? __check_object_size+0x506/0xa20 [ 123.800329][ T6692] kcm_sendmsg+0xd95/0x28b0 [ 123.804853][ T6692] ? kcm_getsockopt+0x280/0x280 [ 123.809702][ T6692] ? aa_sock_msg_perm+0x94/0x150 [ 123.814645][ T6692] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 123.819925][ T6692] ? security_socket_sendmsg+0x80/0xa0 [ 123.825378][ T6692] ? kcm_getsockopt+0x280/0x280 [ 123.830234][ T6692] ____sys_sendmsg+0x5ba/0x960 [ 123.834994][ T6692] ? __asan_memset+0x22/0x40 [ 123.839665][ T6692] ? __sys_sendmsg_sock+0x30/0x30 [ 123.844678][ T6692] ? __import_iovec+0x5f2/0x850 [ 123.849532][ T6692] ? import_iovec+0x73/0xa0 [ 123.854024][ T6692] ___sys_sendmsg+0x2a6/0x360 [ 123.858689][ T6692] ? lock_chain_count+0x20/0x20 [ 123.863531][ T6692] ? __sys_sendmsg+0x2a0/0x2a0 [ 123.868318][ T6692] __se_sys_sendmsg+0x1c2/0x2b0 [ 123.873162][ T6692] ? __x64_sys_sendmsg+0x80/0x80 [ 123.878100][ T6692] ? lockdep_hardirqs_on+0x98/0x150 [ 123.883300][ T6692] do_syscall_64+0x55/0xa0 [ 123.887724][ T6692] ? clear_bhb_loop+0x40/0x90 [ 123.892399][ T6692] ? clear_bhb_loop+0x40/0x90 [ 123.897074][ T6692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.902965][ T6692] RIP: 0033:0x7fa11999c799 [ 123.907371][ T6692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.926969][ T6692] RSP: 002b:00007fa11a8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.935379][ T6692] RAX: ffffffffffffffda RBX: 00007fa119c15fa0 RCX: 00007fa11999c799 [ 123.943353][ T6692] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000005 [ 123.951319][ T6692] RBP: 00007fa11a8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.959289][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.967258][ T6692] R13: 00007fa119c16038 R14: 00007fa119c15fa0 R15: 00007ffe503415f8 [ 123.975244][ T6692] [ 124.237898][ T6704] -1: renamed from syzkaller0 [ 124.392439][ T5774] Bluetooth: hci3: ISO packet for unknown connection handle 55 [ 124.752968][ T6717] __nla_validate_parse: 3 callbacks suppressed [ 124.752980][ T6717] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.239'. [ 124.839581][ T6700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.980350][ T6721] C: renamed from team_slave_0 (while UP) [ 125.023778][ T6721] validate_nla: 8 callbacks suppressed [ 125.023799][ T6721] netlink: 'syz.0.241': attribute type 3 has an invalid length. [ 125.039268][ T6721] netlink: 'syz.0.241': attribute type 4 has an invalid length. [ 125.047347][ T6721] netlink: 116 bytes leftover after parsing attributes in process `syz.0.241'. [ 125.059739][ T6721] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 125.087021][ T6727] bond_slave_1: entered promiscuous mode [ 125.095531][ T6727] bond_slave_1: entered allmulticast mode [ 125.105842][ T6732] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.246'. [ 125.207167][ T6735] netlink: 'syz.0.247': attribute type 3 has an invalid length. [ 125.228001][ T6735] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 125.240385][ T6735] netlink: 116 bytes leftover after parsing attributes in process `syz.0.247'. [ 125.671714][ T6754] FAULT_INJECTION: forcing a failure. [ 125.671714][ T6754] name failslab, interval 1, probability 0, space 0, times 0 [ 125.685701][ T6754] CPU: 1 PID: 6754 Comm: syz.0.255 Not tainted syzkaller #0 [ 125.693031][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.703106][ T6754] Call Trace: [ 125.706399][ T6754] [ 125.709340][ T6754] dump_stack_lvl+0x18c/0x250 [ 125.714043][ T6754] ? show_regs_print_info+0x20/0x20 [ 125.719261][ T6754] ? load_image+0x400/0x400 [ 125.723803][ T6754] should_fail_ex+0x39d/0x4d0 [ 125.728513][ T6754] should_failslab+0x9/0x20 [ 125.733041][ T6754] slab_pre_alloc_hook+0x59/0x310 [ 125.738093][ T6754] kmem_cache_alloc+0x5a/0x2d0 [ 125.742877][ T6754] ? inet_frag_find+0x8f8/0x1ec0 [ 125.747843][ T6754] inet_frag_find+0x8f8/0x1ec0 [ 125.752633][ T6754] ? ip6frag_obj_hashfn+0x20/0x20 [ 125.757681][ T6754] ? inet_frag_find+0x138/0x1ec0 [ 125.762644][ T6754] ? inet_frag_destroy_rcu+0xc0/0xc0 [ 125.767925][ T6754] ? nf_frag_pernet+0x23/0x230 [ 125.772683][ T6754] ? nf_frag_pernet+0x23/0x230 [ 125.777455][ T6754] nf_ct_frag6_gather+0x709/0x1eb0 [ 125.782563][ T6754] ? verify_lock_unused+0x140/0x140 [ 125.787860][ T6754] ? ipv6_defrag+0x3a0/0x3a0 [ 125.792459][ T6754] ipv6_defrag+0x2a9/0x3a0 [ 125.796882][ T6754] ? defrag6_net_exit+0xb0/0xb0 [ 125.801731][ T6754] nf_hook_slow+0xbd/0x200 [ 125.806142][ T6754] ? rawv6_send_hdrinc+0xb5a/0x1640 [ 125.811334][ T6754] rawv6_send_hdrinc+0x14f3/0x1640 [ 125.816448][ T6754] ? txopt_get+0x3f0/0x3f0 [ 125.820865][ T6754] ? txopt_get+0x344/0x3f0 [ 125.825274][ T6754] ? rawv6_push_pending_frames+0x8d0/0x8d0 [ 125.831075][ T6754] ? fl6_sock_lookup+0xc0/0xc0 [ 125.835840][ T6754] rawv6_sendmsg+0x12cc/0x1770 [ 125.840632][ T6754] ? compat_rawv6_ioctl+0x70/0x70 [ 125.845659][ T6754] ? aa_sk_perm+0x83c/0x970 [ 125.850165][ T6754] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 125.856577][ T6754] ? inet_sendmsg+0x7c/0x2f0 [ 125.861159][ T6754] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 125.866439][ T6754] ? security_socket_sendmsg+0x80/0xa0 [ 125.871889][ T6754] ? inet_send_prepare+0x260/0x260 [ 125.876992][ T6754] ____sys_sendmsg+0x5ba/0x960 [ 125.881746][ T6754] ? __lock_acquire+0x7d40/0x7d40 [ 125.886765][ T6754] ? __asan_memset+0x22/0x40 [ 125.891351][ T6754] ? __sys_sendmsg_sock+0x30/0x30 [ 125.896369][ T6754] ? __import_iovec+0x5f2/0x850 [ 125.901222][ T6754] ? import_iovec+0x73/0xa0 [ 125.905804][ T6754] ___sys_sendmsg+0x2a6/0x360 [ 125.910474][ T6754] ? get_pid_task+0x20/0x1e0 [ 125.915087][ T6754] ? __sys_sendmsg+0x2a0/0x2a0 [ 125.919879][ T6754] ? __lock_acquire+0x7d40/0x7d40 [ 125.924939][ T6754] __se_sys_sendmsg+0x1c2/0x2b0 [ 125.929805][ T6754] ? __x64_sys_sendmsg+0x80/0x80 [ 125.934770][ T6754] ? lockdep_hardirqs_on+0x98/0x150 [ 125.939977][ T6754] do_syscall_64+0x55/0xa0 [ 125.944408][ T6754] ? clear_bhb_loop+0x40/0x90 [ 125.949086][ T6754] ? clear_bhb_loop+0x40/0x90 [ 125.953757][ T6754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.959645][ T6754] RIP: 0033:0x7fb09919c799 [ 125.964059][ T6754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.983663][ T6754] RSP: 002b:00007fb09a14c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.992080][ T6754] RAX: ffffffffffffffda RBX: 00007fb099415fa0 RCX: 00007fb09919c799 [ 126.000048][ T6754] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 126.008011][ T6754] RBP: 00007fb09a14c090 R08: 0000000000000000 R09: 0000000000000000 [ 126.015974][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.023937][ T6754] R13: 00007fb099416038 R14: 00007fb099415fa0 R15: 00007fff5421bf18 [ 126.031914][ T6754] [ 126.079327][ T6752] netlink: 'syz.2.254': attribute type 21 has an invalid length. [ 126.118099][ T6752] netlink: 128 bytes leftover after parsing attributes in process `syz.2.254'. [ 126.127495][ T6752] netlink: 'syz.2.254': attribute type 4 has an invalid length. [ 126.163919][ T6752] netlink: 'syz.2.254': attribute type 5 has an invalid length. [ 126.186768][ T6752] netlink: 3 bytes leftover after parsing attributes in process `syz.2.254'. [ 126.204892][ T6762] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.256'. [ 126.215336][ T6763] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 126.222194][ T6760] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 126.222201][ T6763] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 126.306166][ T6760] team0: Port device dummy0 added [ 127.110336][ T6788] FAULT_INJECTION: forcing a failure. [ 127.110336][ T6788] name failslab, interval 1, probability 0, space 0, times 0 [ 127.183852][ T6788] CPU: 1 PID: 6788 Comm: syz.0.265 Not tainted syzkaller #0 [ 127.191205][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.201286][ T6788] Call Trace: [ 127.204591][ T6788] [ 127.207556][ T6788] dump_stack_lvl+0x18c/0x250 [ 127.212282][ T6788] ? show_regs_print_info+0x20/0x20 [ 127.217511][ T6788] ? load_image+0x400/0x400 [ 127.222033][ T6788] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 127.228217][ T6788] should_fail_ex+0x39d/0x4d0 [ 127.232943][ T6788] should_failslab+0x9/0x20 [ 127.237450][ T6788] slab_pre_alloc_hook+0x59/0x310 [ 127.242482][ T6788] ? bpf_test_init+0x9f/0x140 [ 127.247158][ T6788] ? bpf_test_init+0x9f/0x140 [ 127.251834][ T6788] __kmem_cache_alloc_node+0x53/0x250 [ 127.257215][ T6788] ? bpf_test_init+0x9f/0x140 [ 127.261890][ T6788] __kmalloc+0xa4/0x230 [ 127.266066][ T6788] bpf_test_init+0x9f/0x140 [ 127.270576][ T6788] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 127.275966][ T6788] ? dev_put+0x80/0x80 [ 127.280052][ T6788] ? dev_put+0x80/0x80 [ 127.284123][ T6788] bpf_prog_test_run+0x321/0x390 [ 127.289064][ T6788] __sys_bpf+0x49d/0x890 [ 127.293307][ T6788] ? bpf_link_show_fdinfo+0x390/0x390 [ 127.298698][ T6788] ? lock_chain_count+0x20/0x20 [ 127.303566][ T6788] __x64_sys_bpf+0x7c/0x90 [ 127.307981][ T6788] do_syscall_64+0x55/0xa0 [ 127.312399][ T6788] ? clear_bhb_loop+0x40/0x90 [ 127.317071][ T6788] ? clear_bhb_loop+0x40/0x90 [ 127.321750][ T6788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.327637][ T6788] RIP: 0033:0x7fb09919c799 [ 127.332067][ T6788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.351672][ T6788] RSP: 002b:00007fb09a14c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.360087][ T6788] RAX: ffffffffffffffda RBX: 00007fb099415fa0 RCX: 00007fb09919c799 [ 127.368066][ T6788] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 127.376035][ T6788] RBP: 00007fb09a14c090 R08: 0000000000000000 R09: 0000000000000000 [ 127.384012][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.391981][ T6788] R13: 00007fb099416038 R14: 00007fb099415fa0 R15: 00007fff5421bf18 [ 127.399973][ T6788] [ 127.485315][ T6794] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.268'. [ 128.497355][ T6818] FAULT_INJECTION: forcing a failure. [ 128.497355][ T6818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.513923][ T6816] C: renamed from team_slave_0 (while UP) [ 128.530492][ T6818] CPU: 0 PID: 6818 Comm: syz.1.278 Not tainted syzkaller #0 [ 128.537823][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.547894][ T6818] Call Trace: [ 128.551188][ T6818] [ 128.554132][ T6818] dump_stack_lvl+0x18c/0x250 [ 128.558833][ T6818] ? show_regs_print_info+0x20/0x20 [ 128.564053][ T6818] ? load_image+0x400/0x400 [ 128.568576][ T6818] ? __might_fault+0xaa/0x120 [ 128.573274][ T6818] ? __lock_acquire+0x7d40/0x7d40 [ 128.578412][ T6818] should_fail_ex+0x39d/0x4d0 [ 128.583118][ T6818] _copy_from_user+0x2f/0xe0 [ 128.587733][ T6818] __sys_bpf+0x23e/0x890 [ 128.592021][ T6818] ? bpf_link_show_fdinfo+0x390/0x390 [ 128.597431][ T6818] ? lock_chain_count+0x20/0x20 [ 128.602553][ T6818] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 128.608558][ T6818] __x64_sys_bpf+0x7c/0x90 [ 128.612988][ T6818] do_syscall_64+0x55/0xa0 [ 128.617414][ T6818] ? clear_bhb_loop+0x40/0x90 [ 128.622100][ T6818] ? clear_bhb_loop+0x40/0x90 [ 128.626884][ T6818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.632792][ T6818] RIP: 0033:0x7fa11999c799 [ 128.637220][ T6818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.656833][ T6818] RSP: 002b:00007fa11a8e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.665245][ T6818] RAX: ffffffffffffffda RBX: 00007fa119c15fa0 RCX: 00007fa11999c799 [ 128.673208][ T6818] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 128.681173][ T6818] RBP: 00007fa11a8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.689588][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.697578][ T6818] R13: 00007fa119c16038 R14: 00007fa119c15fa0 R15: 00007ffe503415f8 [ 128.705562][ T6818] [ 128.743127][ T6816] netlink: 'syz.3.276': attribute type 3 has an invalid length. [ 128.751345][ T6816] netlink: 'syz.3.276': attribute type 4 has an invalid length. [ 128.754809][ T6823] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.281'. [ 128.759226][ T6816] netlink: 116 bytes leftover after parsing attributes in process `syz.3.276'. [ 128.778572][ T6816] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 129.167555][ T6836] FAULT_INJECTION: forcing a failure. [ 129.167555][ T6836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.194785][ T6836] CPU: 0 PID: 6836 Comm: syz.2.286 Not tainted syzkaller #0 [ 129.202122][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.212201][ T6836] Call Trace: [ 129.215494][ T6836] [ 129.218440][ T6836] dump_stack_lvl+0x18c/0x250 [ 129.223141][ T6836] ? show_regs_print_info+0x20/0x20 [ 129.228360][ T6836] ? load_image+0x400/0x400 [ 129.232580][ T6834] syzkaller0: entered promiscuous mode [ 129.232876][ T6836] ? __might_fault+0xaa/0x120 [ 129.238406][ T6834] syzkaller0: entered allmulticast mode [ 129.243056][ T6836] ? __lock_acquire+0x7d40/0x7d40 [ 129.243082][ T6836] should_fail_ex+0x39d/0x4d0 [ 129.258395][ T6836] _copy_from_user+0x2f/0xe0 [ 129.263005][ T6836] generic_map_update_batch+0x54b/0x810 [ 129.268555][ T6836] ? rcu_read_unlock+0xa0/0xa0 [ 129.273317][ T6836] ? rcu_read_unlock+0xa0/0xa0 [ 129.278066][ T6836] bpf_map_do_batch+0x3d7/0x610 [ 129.282911][ T6836] __sys_bpf+0x381/0x890 [ 129.287145][ T6836] ? bpf_link_show_fdinfo+0x390/0x390 [ 129.292517][ T6836] ? lock_chain_count+0x20/0x20 [ 129.297364][ T6836] __x64_sys_bpf+0x7c/0x90 [ 129.301786][ T6836] do_syscall_64+0x55/0xa0 [ 129.306199][ T6836] ? clear_bhb_loop+0x40/0x90 [ 129.310869][ T6836] ? clear_bhb_loop+0x40/0x90 [ 129.315541][ T6836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.321426][ T6836] RIP: 0033:0x7fe160d9c799 [ 129.325835][ T6836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.345442][ T6836] RSP: 002b:00007fe161cb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.353848][ T6836] RAX: ffffffffffffffda RBX: 00007fe161015fa0 RCX: 00007fe160d9c799 [ 129.361821][ T6836] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 129.369783][ T6836] RBP: 00007fe161cb2090 R08: 0000000000000000 R09: 0000000000000000 [ 129.377748][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.385709][ T6836] R13: 00007fe161016038 R14: 00007fe161015fa0 R15: 00007ffec0e010f8 [ 129.393774][ T6836] [ 129.837396][ T6854] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.291'. [ 130.037506][ T6860] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 130.044105][ T6860] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 131.014846][ T6847] netlink: 14 bytes leftover after parsing attributes in process `syz.0.288'. [ 131.031251][ T6853] netlink: 'syz.1.289': attribute type 21 has an invalid length. [ 131.039126][ T6853] netlink: 128 bytes leftover after parsing attributes in process `syz.1.289'. [ 131.050853][ T6853] netlink: 'syz.1.289': attribute type 4 has an invalid length. [ 131.060104][ T6853] netlink: 'syz.1.289': attribute type 5 has an invalid length. [ 131.068426][ T6853] netlink: 3 bytes leftover after parsing attributes in process `syz.1.289'. [ 131.079018][ T6859] netlink: 46351 bytes leftover after parsing attributes in process `syz.2.292'. [ 131.236828][ T6864] netlink: 'syz.3.293': attribute type 10 has an invalid length. [ 131.283614][ T6864] team0: Device vxcan1 is of different type [ 131.397103][ T6869] netlink: 'syz.2.296': attribute type 21 has an invalid length. [ 131.416512][ T6869] netlink: 128 bytes leftover after parsing attributes in process `syz.2.296'. [ 131.426394][ T6869] netlink: 'syz.2.296': attribute type 4 has an invalid length. [ 131.434818][ T6869] netlink: 'syz.2.296': attribute type 5 has an invalid length. [ 131.444388][ T6869] netlink: 3 bytes leftover after parsing attributes in process `syz.2.296'. [ 131.662590][ T6882] netlink: 14 bytes leftover after parsing attributes in process `syz.3.300'. [ 131.679757][ T6885] netlink: 14 bytes leftover after parsing attributes in process `syz.0.301'. [ 131.711011][ T6882] netlink: 'syz.3.300': attribute type 29 has an invalid length. [ 131.719898][ T6885] netlink: 'syz.0.301': attribute type 29 has an invalid length. [ 131.741624][ T6885] netlink: 'syz.0.301': attribute type 29 has an invalid length. [ 133.038984][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.045324][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.283339][ T6901] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.307'. [ 133.702995][ T6908] team0: Device vxcan1 is of different type [ 133.818557][ T6911] netlink: set zone limit has 8 unknown bytes [ 134.228589][ T6908] syz.2.309 (6908) used greatest stack depth: 19568 bytes left [ 135.651117][ T6948] __nla_validate_parse: 3 callbacks suppressed [ 135.651147][ T6948] netlink: 14 bytes leftover after parsing attributes in process `syz.3.326'. [ 135.797705][ T6952] team0: Device vxcan1 is of different type [ 136.131972][ T6970] FAULT_INJECTION: forcing a failure. [ 136.131972][ T6970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.170065][ T6970] CPU: 0 PID: 6970 Comm: syz.0.333 Not tainted syzkaller #0 [ 136.177478][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.187543][ T6970] Call Trace: [ 136.190865][ T6970] [ 136.193808][ T6970] dump_stack_lvl+0x18c/0x250 [ 136.198515][ T6970] ? show_regs_print_info+0x20/0x20 [ 136.203732][ T6970] ? load_image+0x400/0x400 [ 136.208256][ T6970] ? __might_fault+0xaa/0x120 [ 136.212947][ T6970] should_fail_ex+0x39d/0x4d0 [ 136.217648][ T6970] copyin+0x1a/0x90 [ 136.221470][ T6970] _copy_from_iter+0x54f/0x12e0 [ 136.226338][ T6970] ? __virt_addr_valid+0x18c/0x540 [ 136.231472][ T6970] ? copyout_mc+0x70/0x70 [ 136.235824][ T6970] ? __virt_addr_valid+0x18c/0x540 [ 136.240954][ T6970] ? __virt_addr_valid+0x18c/0x540 [ 136.246080][ T6970] ? __virt_addr_valid+0x469/0x540 [ 136.251217][ T6970] ? __check_object_size+0x506/0xa20 [ 136.256525][ T6970] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 136.260653][ T6975] netlink: 14 bytes leftover after parsing attributes in process `syz.3.337'. [ 136.262346][ T6970] ? skb_put+0x11b/0x210 [ 136.262372][ T6970] packet_sendmsg+0x3566/0x4d70 [ 136.262413][ T6970] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 136.284102][ T6975] validate_nla: 15 callbacks suppressed [ 136.284141][ T6975] netlink: 'syz.3.337': attribute type 29 has an invalid length. [ 136.286026][ T6970] ? aa_sk_perm+0x83c/0x970 [ 136.286059][ T6970] ? packet_getsockopt+0xad0/0xad0 [ 136.293293][ T6975] netlink: 'syz.3.337': attribute type 29 has an invalid length. [ 136.299345][ T6970] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.299369][ T6970] ? aa_sock_msg_perm+0x94/0x150 [ 136.299389][ T6970] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 136.299408][ T6970] ? security_socket_sendmsg+0x80/0xa0 [ 136.299425][ T6970] ? packet_getsockopt+0xad0/0xad0 [ 136.299448][ T6970] ____sys_sendmsg+0x5ba/0x960 [ 136.299471][ T6970] ? __asan_memset+0x22/0x40 [ 136.299492][ T6970] ? __sys_sendmsg_sock+0x30/0x30 [ 136.299506][ T6970] ? __import_iovec+0x3fa/0x850 [ 136.310527][ T6975] netlink: 'syz.3.337': attribute type 29 has an invalid length. [ 136.316828][ T6970] ? import_iovec+0x73/0xa0 [ 136.316853][ T6970] ___sys_sendmsg+0x2a6/0x360 [ 136.316877][ T6970] ? __sys_sendmsg+0x2a0/0x2a0 [ 136.316912][ T6970] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 136.316954][ T6970] __se_sys_sendmsg+0x1c2/0x2b0 [ 136.342823][ T6975] netlink: 'syz.3.337': attribute type 29 has an invalid length. [ 136.343831][ T6970] ? __x64_sys_sendmsg+0x80/0x80 [ 136.408556][ T6970] ? lockdep_hardirqs_on+0x98/0x150 [ 136.413768][ T6970] do_syscall_64+0x55/0xa0 [ 136.418363][ T6970] ? clear_bhb_loop+0x40/0x90 [ 136.423039][ T6970] ? clear_bhb_loop+0x40/0x90 [ 136.427719][ T6970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.433613][ T6970] RIP: 0033:0x7fb09919c799 [ 136.438060][ T6970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.457667][ T6970] RSP: 002b:00007fb09a14c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.466088][ T6970] RAX: ffffffffffffffda RBX: 00007fb099415fa0 RCX: 00007fb09919c799 [ 136.474063][ T6970] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000007 [ 136.482035][ T6970] RBP: 00007fb09a14c090 R08: 0000000000000000 R09: 0000000000000000 [ 136.490005][ T6970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.497976][ T6970] R13: 00007fb099416038 R14: 00007fb099415fa0 R15: 00007fff5421bf18 [ 136.505964][ T6970] [ 136.562490][ T6979] netlink: 132 bytes leftover after parsing attributes in process `syz.1.338'. [ 136.621478][ T6979] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.338'. [ 136.869120][ T6990] FAULT_INJECTION: forcing a failure. [ 136.869120][ T6990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.888548][ T6990] CPU: 0 PID: 6990 Comm: syz.2.343 Not tainted syzkaller #0 [ 136.895868][ T6990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.905934][ T6990] Call Trace: [ 136.909222][ T6990] [ 136.912165][ T6990] dump_stack_lvl+0x18c/0x250 [ 136.916864][ T6990] ? show_regs_print_info+0x20/0x20 [ 136.918862][ T6993] netlink: 'syz.1.342': attribute type 10 has an invalid length. [ 136.922064][ T6990] ? load_image+0x400/0x400 [ 136.922094][ T6990] ? __might_fault+0xaa/0x120 [ 136.922112][ T6990] ? __lock_acquire+0x7d40/0x7d40 [ 136.922141][ T6990] should_fail_ex+0x39d/0x4d0 [ 136.922168][ T6990] _copy_from_user+0x2f/0xe0 [ 136.922189][ T6990] ___sys_sendmsg+0x1c7/0x360 [ 136.922206][ T6990] ? get_pid_task+0x20/0x1e0 [ 136.922232][ T6990] ? __sys_sendmsg+0x2a0/0x2a0 [ 136.967404][ T6990] ? __lock_acquire+0x7d40/0x7d40 [ 136.972434][ T6990] __se_sys_sendmsg+0x1c2/0x2b0 [ 136.977273][ T6990] ? __x64_sys_sendmsg+0x80/0x80 [ 136.982202][ T6990] ? lockdep_hardirqs_on+0x98/0x150 [ 136.987390][ T6990] do_syscall_64+0x55/0xa0 [ 136.991799][ T6990] ? clear_bhb_loop+0x40/0x90 [ 136.996498][ T6990] ? clear_bhb_loop+0x40/0x90 [ 137.001175][ T6990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.007061][ T6990] RIP: 0033:0x7fe160d9c799 [ 137.011477][ T6990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.031106][ T6990] RSP: 002b:00007fe161cb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.039538][ T6990] RAX: ffffffffffffffda RBX: 00007fe161015fa0 RCX: 00007fe160d9c799 [ 137.047497][ T6990] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 137.055470][ T6990] RBP: 00007fe161cb2090 R08: 0000000000000000 R09: 0000000000000000 [ 137.063435][ T6990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.071406][ T6990] R13: 00007fe161016038 R14: 00007fe161015fa0 R15: 00007ffec0e010f8 [ 137.079390][ T6990] [ 137.164254][ T6993] team0: Device vxcan1 is of different type [ 137.423904][ T6993] syz.1.342 (6993) used greatest stack depth: 19176 bytes left [ 137.672390][ T7021] netlink: 'syz.2.355': attribute type 11 has an invalid length. [ 137.680723][ T7020] netlink: 14 bytes leftover after parsing attributes in process `syz.1.357'. [ 137.731661][ T7020] netlink: 'syz.1.357': attribute type 29 has an invalid length. [ 137.755415][ T7020] netlink: 'syz.1.357': attribute type 29 has an invalid length. [ 137.786765][ T7020] netlink: 'syz.1.357': attribute type 29 has an invalid length. [ 137.816843][ T7020] netlink: 'syz.1.357': attribute type 29 has an invalid length. [ 138.068150][ T7035] netlink: 132 bytes leftover after parsing attributes in process `syz.2.363'. [ 138.138944][ T7035] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.363'. [ 138.211906][ T7037] netlink: 14 bytes leftover after parsing attributes in process `syz.1.371'. [ 138.633205][ T7045] FAULT_INJECTION: forcing a failure. [ 138.633205][ T7045] name failslab, interval 1, probability 0, space 0, times 0 [ 138.694678][ T7045] CPU: 0 PID: 7045 Comm: syz.0.367 Not tainted syzkaller #0 [ 138.702019][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.712254][ T7045] Call Trace: [ 138.715552][ T7045] [ 138.718494][ T7045] dump_stack_lvl+0x18c/0x250 [ 138.723202][ T7045] ? show_regs_print_info+0x20/0x20 [ 138.728419][ T7045] ? load_image+0x400/0x400 [ 138.732945][ T7045] ? __might_sleep+0xe0/0xe0 [ 138.737560][ T7045] ? __lock_acquire+0x7d40/0x7d40 [ 138.742625][ T7045] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 138.748369][ T7045] should_fail_ex+0x39d/0x4d0 [ 138.753079][ T7045] should_failslab+0x9/0x20 [ 138.757617][ T7045] slab_pre_alloc_hook+0x59/0x310 [ 138.762655][ T7045] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 138.768654][ T7045] kmem_cache_alloc_node+0x60/0x320 [ 138.773868][ T7045] ? __alloc_skb+0x103/0x2c0 [ 138.778477][ T7045] __alloc_skb+0x103/0x2c0 [ 138.782913][ T7045] netlink_dump+0x1ec/0xe50 [ 138.787431][ T7045] ? end_current_label_crit_section+0x170/0x170 [ 138.793688][ T7045] ? end_current_label_crit_section+0x170/0x170 [ 138.799945][ T7045] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 138.805419][ T7045] ? netlink_lookup+0x200/0x200 [ 138.810305][ T7045] ? ns_capable+0x89/0xe0 [ 138.814659][ T7045] ? __inet_diag_dump_start+0x886/0x9f0 [ 138.820231][ T7045] __netlink_dump_start+0x5f1/0x810 [ 138.825626][ T7045] inet_diag_rcv_msg_compat+0x215/0x440 [ 138.831197][ T7045] ? __inet_diag_dump+0x380/0x380 [ 138.836248][ T7045] ? sock_diag_rcv_msg+0xd1/0x600 [ 138.841282][ T7045] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 138.847103][ T7045] ? inet_diag_dump_start_compat+0x20/0x20 [ 138.852923][ T7045] ? inet_diag_dump+0x50/0x50 [ 138.857642][ T7045] ? __inet_diag_dump+0x380/0x380 [ 138.862771][ T7045] sock_diag_rcv_msg+0x3d8/0x600 [ 138.867729][ T7045] netlink_rcv_skb+0x241/0x4d0 [ 138.872550][ T7045] ? sock_diag_bind+0xb0/0xb0 [ 138.877236][ T7045] ? netlink_ack+0x1180/0x1180 [ 138.882036][ T7045] ? __lock_acquire+0x7d40/0x7d40 [ 138.887080][ T7045] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.892295][ T7045] sock_diag_rcv+0x2a/0x40 [ 138.896735][ T7045] netlink_unicast+0x751/0x8d0 [ 138.901523][ T7045] netlink_sendmsg+0x8d0/0xbf0 [ 138.906313][ T7045] ? netlink_getsockopt+0x590/0x590 [ 138.911526][ T7045] ? aa_sock_msg_perm+0x94/0x150 [ 138.916479][ T7045] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 138.921776][ T7045] ? security_socket_sendmsg+0x80/0xa0 [ 138.927245][ T7045] ? netlink_getsockopt+0x590/0x590 [ 138.932459][ T7045] ____sys_sendmsg+0x5ba/0x960 [ 138.937248][ T7045] ? __asan_memset+0x22/0x40 [ 138.941857][ T7045] ? __sys_sendmsg_sock+0x30/0x30 [ 138.946887][ T7045] ? __import_iovec+0x5f2/0x850 [ 138.951757][ T7045] ? import_iovec+0x73/0xa0 [ 138.956271][ T7045] ___sys_sendmsg+0x2a6/0x360 [ 138.960978][ T7045] ? __sys_sendmsg+0x2a0/0x2a0 [ 138.965779][ T7045] ? __lock_acquire+0x7d40/0x7d40 [ 138.970841][ T7045] __se_sys_sendmsg+0x1c2/0x2b0 [ 138.975706][ T7045] ? __x64_sys_sendmsg+0x80/0x80 [ 138.980670][ T7045] ? syscall_enter_from_user_mode+0x2e/0x80 [ 138.986609][ T7045] do_syscall_64+0x55/0xa0 [ 138.991043][ T7045] ? clear_bhb_loop+0x40/0x90 [ 138.995731][ T7045] ? clear_bhb_loop+0x40/0x90 [ 139.000422][ T7045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.006322][ T7045] RIP: 0033:0x7fb09919c799 [ 139.010842][ T7045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.030465][ T7045] RSP: 002b:00007fb09a14c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.038904][ T7045] RAX: ffffffffffffffda RBX: 00007fb099415fa0 RCX: 00007fb09919c799 [ 139.046980][ T7045] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 139.054968][ T7045] RBP: 00007fb09a14c090 R08: 0000000000000000 R09: 0000000000000000 [ 139.062972][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.070956][ T7045] R13: 00007fb099416038 R14: 00007fb099415fa0 R15: 00007fff5421bf18 [ 139.078950][ T7045] [ 139.990113][ T7066] netlink: 14 bytes leftover after parsing attributes in process `syz.2.375'. [ 140.391262][ T7066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.492392][ T7066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.546850][ T7066] bond0 (unregistering): Released all slaves [ 141.442530][ T7103] netlink: 14 bytes leftover after parsing attributes in process `syz.3.389'. [ 141.475482][ T7103] validate_nla: 8 callbacks suppressed [ 141.475512][ T7103] netlink: 'syz.3.389': attribute type 29 has an invalid length. [ 141.494523][ T7103] netlink: 'syz.3.389': attribute type 29 has an invalid length. [ 141.531537][ T7109] netlink: 'syz.3.389': attribute type 29 has an invalid length. [ 141.562042][ T7103] netlink: 'syz.3.389': attribute type 29 has an invalid length. [ 141.610763][ T7105] netlink: 'syz.1.390': attribute type 7 has an invalid length. [ 141.629433][ T7105] netlink: 'syz.1.390': attribute type 6 has an invalid length. [ 143.491611][ T7139] netlink: 14 bytes leftover after parsing attributes in process `syz.3.403'. [ 143.576734][ T7139] netlink: 'syz.3.403': attribute type 29 has an invalid length. [ 143.636687][ T7139] netlink: 'syz.3.403': attribute type 29 has an invalid length. [ 143.663164][ T7140] netlink: 'syz.3.403': attribute type 29 has an invalid length. [ 143.716673][ T7143] netlink: 'syz.3.403': attribute type 29 has an invalid length. [ 144.443500][ T7160] netlink: 132 bytes leftover after parsing attributes in process `syz.2.411'. [ 144.686908][ T7169] netlink: 14 bytes leftover after parsing attributes in process `syz.1.413'. [ 144.760311][ T7173] netlink: 14 bytes leftover after parsing attributes in process `syz.0.416'. [ 144.861518][ T7175] hsr0: entered promiscuous mode [ 145.074804][ T7179] netlink: 132 bytes leftover after parsing attributes in process `syz.0.420'. [ 145.898849][ T7200] syzkaller0: entered promiscuous mode [ 145.906375][ T7200] syzkaller0: entered allmulticast mode [ 146.104920][ T7211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.433'. [ 146.135598][ T7211] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.433'. [ 146.234458][ T7213] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.434'. [ 146.258448][ T7215] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.268695][ T7215] netlink: 1 bytes leftover after parsing attributes in process `syz.1.435'. [ 146.660892][ T7229] validate_nla: 13 callbacks suppressed [ 146.660938][ T7229] netlink: 'syz.1.440': attribute type 21 has an invalid length. [ 146.681645][ T7229] netlink: 156 bytes leftover after parsing attributes in process `syz.1.440'. [ 146.696089][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 146.737268][ T7229] netlink: 128 bytes leftover after parsing attributes in process `syz.1.440'. [ 146.798536][ T7232] netlink: 188 bytes leftover after parsing attributes in process `syz.0.442'. [ 146.926042][ T7237] netlink: 132 bytes leftover after parsing attributes in process `syz.2.444'. [ 146.977535][ T7237] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.444'. [ 147.154771][ T7241] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.445'. [ 147.208514][ T7241] bridge_slave_1: default FDB implementation only supports local addresses [ 147.315768][ T7246] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.448'. [ 147.630666][ T7259] netlink: 'syz.3.455': attribute type 21 has an invalid length. [ 147.675772][ T7259] netlink: 156 bytes leftover after parsing attributes in process `syz.3.455'. [ 147.688588][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 147.807175][ T7259] bridge_slave_0: mtu greater than device maximum [ 147.991350][ T7274] bridge_slave_1: default FDB implementation only supports local addresses [ 148.266801][ T7287] FAULT_INJECTION: forcing a failure. [ 148.266801][ T7287] name failslab, interval 1, probability 0, space 0, times 0 [ 148.283779][ T7287] CPU: 1 PID: 7287 Comm: syz.1.467 Not tainted syzkaller #0 [ 148.291115][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.301180][ T7287] Call Trace: [ 148.304459][ T7287] [ 148.307390][ T7287] dump_stack_lvl+0x18c/0x250 [ 148.312075][ T7287] ? show_regs_print_info+0x20/0x20 [ 148.317273][ T7287] ? load_image+0x400/0x400 [ 148.321778][ T7287] ? __might_sleep+0xe0/0xe0 [ 148.326361][ T7287] ? __lock_acquire+0x7d40/0x7d40 [ 148.331384][ T7287] should_fail_ex+0x39d/0x4d0 [ 148.336062][ T7287] should_failslab+0x9/0x20 [ 148.340571][ T7287] slab_pre_alloc_hook+0x59/0x310 [ 148.345597][ T7287] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 148.351139][ T7287] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 148.356673][ T7287] __kmem_cache_alloc_node+0x53/0x250 [ 148.362058][ T7287] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 148.367596][ T7287] __kmalloc+0xa4/0x230 [ 148.371839][ T7287] bpf_prog_test_run_skb+0x238/0x12b0 [ 148.377200][ T7287] ? __fget_files+0x28/0x4b0 [ 148.381818][ T7287] ? __fget_files+0x28/0x4b0 [ 148.386414][ T7287] ? __fget_files+0x43d/0x4b0 [ 148.391096][ T7287] ? cpu_online+0x60/0x60 [ 148.395419][ T7287] bpf_prog_test_run+0x321/0x390 [ 148.400354][ T7287] __sys_bpf+0x49d/0x890 [ 148.404589][ T7287] ? bpf_link_show_fdinfo+0x390/0x390 [ 148.409968][ T7287] ? lock_chain_count+0x20/0x20 [ 148.414819][ T7287] __x64_sys_bpf+0x7c/0x90 [ 148.419225][ T7287] do_syscall_64+0x55/0xa0 [ 148.423640][ T7287] ? clear_bhb_loop+0x40/0x90 [ 148.428312][ T7287] ? clear_bhb_loop+0x40/0x90 [ 148.432984][ T7287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.438867][ T7287] RIP: 0033:0x7fa11999c799 [ 148.443279][ T7287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.462875][ T7287] RSP: 002b:00007fa11a8e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.471287][ T7287] RAX: ffffffffffffffda RBX: 00007fa119c15fa0 RCX: 00007fa11999c799 [ 148.479266][ T7287] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 148.487232][ T7287] RBP: 00007fa11a8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.495285][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.503248][ T7287] R13: 00007fa119c16038 R14: 00007fa119c15fa0 R15: 00007ffe503415f8 [ 148.511229][ T7287] [ 148.660736][ T7293] netlink: 'syz.0.469': attribute type 1 has an invalid length. [ 148.912946][ T7297] netlink: 'syz.1.471': attribute type 29 has an invalid length. [ 148.937433][ T7297] netlink: 'syz.1.471': attribute type 29 has an invalid length. [ 150.143317][ T7304] bridge_slave_1: default FDB implementation only supports local addresses [ 150.691530][ T7329] bridge_slave_1: default FDB implementation only supports local addresses [ 151.119889][ T7344] netlink: 'syz.2.490': attribute type 29 has an invalid length. [ 151.136630][ T7344] netlink: 'syz.2.490': attribute type 29 has an invalid length. [ 151.146908][ T7344] netlink: 'syz.2.490': attribute type 29 has an invalid length. [ 151.156405][ T7344] netlink: 'syz.2.490': attribute type 29 has an invalid length. [ 151.241015][ T7352] netlink: 'syz.1.492': attribute type 12 has an invalid length. [ 151.321536][ T7355] bridge_slave_1: default FDB implementation only supports local addresses [ 154.511251][ T7363] __nla_validate_parse: 14 callbacks suppressed [ 154.511306][ T7363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.496'. [ 154.607531][ T7367] syz_tun: entered allmulticast mode [ 154.879901][ T7375] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.503'. [ 154.916519][ T7375] bridge_slave_1: default FDB implementation only supports local addresses [ 155.136769][ T7379] netlink: 14 bytes leftover after parsing attributes in process `syz.0.504'. [ 155.338065][ T7379] netlink: 'syz.0.504': attribute type 29 has an invalid length. [ 155.378999][ T7379] netlink: 'syz.0.504': attribute type 29 has an invalid length. [ 155.428112][ T7382] netlink: 'syz.0.504': attribute type 29 has an invalid length. [ 155.622853][ T7388] netlink: 'syz.3.507': attribute type 12 has an invalid length. [ 155.665021][ T7388] netlink: 120 bytes leftover after parsing attributes in process `syz.3.507'. [ 155.791382][ T7395] netlink: 132 bytes leftover after parsing attributes in process `syz.1.510'. [ 155.942522][ T7402] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.513'. [ 156.009352][ T7402] bridge_slave_1: default FDB implementation only supports local addresses [ 156.249700][ T7409] netlink: 180 bytes leftover after parsing attributes in process `syz.0.516'. [ 156.815149][ T7414] netlink: 'syz.3.517': attribute type 21 has an invalid length. [ 156.829169][ T7414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.517'. [ 156.848376][ T7414] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 156.857924][ T7418] netlink: 'syz.0.519': attribute type 29 has an invalid length. [ 156.879219][ T7418] netlink: 'syz.0.519': attribute type 29 has an invalid length. [ 157.017054][ T7421] netlink: 132 bytes leftover after parsing attributes in process `syz.0.520'. [ 157.084835][ T7421] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.520'. [ 157.241364][ T7429] netlink: 'syz.1.522': attribute type 10 has an invalid length. [ 157.265431][ T7429] FAULT_INJECTION: forcing a failure. [ 157.265431][ T7429] name failslab, interval 1, probability 0, space 0, times 0 [ 157.283964][ T7429] CPU: 0 PID: 7429 Comm: syz.1.522 Not tainted syzkaller #0 [ 157.291286][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.301355][ T7429] Call Trace: [ 157.304646][ T7429] [ 157.307589][ T7429] dump_stack_lvl+0x18c/0x250 [ 157.312293][ T7429] ? show_regs_print_info+0x20/0x20 [ 157.317509][ T7429] ? load_image+0x400/0x400 [ 157.322033][ T7429] ? __might_sleep+0xe0/0xe0 [ 157.326641][ T7429] ? __lock_acquire+0x7d40/0x7d40 [ 157.331686][ T7429] should_fail_ex+0x39d/0x4d0 [ 157.336386][ T7429] should_failslab+0x9/0x20 [ 157.340901][ T7429] slab_pre_alloc_hook+0x59/0x310 [ 157.345925][ T7429] ? ____ip_mc_inc_group+0x2ad/0xac0 [ 157.351208][ T7429] __kmem_cache_alloc_node+0x53/0x250 [ 157.356580][ T7429] ? ____ip_mc_inc_group+0x2ad/0xac0 [ 157.361856][ T7429] kmalloc_trace+0x2a/0xe0 [ 157.366267][ T7429] ____ip_mc_inc_group+0x2ad/0xac0 [ 157.371381][ T7429] ip_mc_up+0x125/0x300 [ 157.375542][ T7429] inetdev_event+0x1077/0x1630 [ 157.380315][ T7429] ? devinet_exit_net+0x220/0x220 [ 157.385341][ T7429] notifier_call_chain+0x197/0x380 [ 157.390491][ T7429] dev_open+0x110/0x190 [ 157.394639][ T7429] ? netdev_notify_peers+0x180/0x180 [ 157.399918][ T7429] ? rcu_is_watching+0x15/0xb0 [ 157.404677][ T7429] ? team_add_slave+0x2ce/0x29a0 [ 157.409701][ T7429] ? __kmalloc+0xe2/0x230 [ 157.414036][ T7429] team_add_slave+0x75f/0x29a0 [ 157.418811][ T7429] ? __dev_change_flags+0x6a0/0x6a0 [ 157.424002][ T7429] ? __dev_change_flags+0x4d4/0x6a0 [ 157.429196][ T7429] ? team_netpoll_cleanup+0xf0/0xf0 [ 157.434392][ T7429] ? vprintk_emit+0x53d/0x610 [ 157.439062][ T7429] ? dev_get_flags+0x1c0/0x1c0 [ 157.443819][ T7429] ? printk_sprint+0x460/0x460 [ 157.448575][ T7429] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 157.454459][ T7429] ? _raw_spin_unlock+0x40/0x40 [ 157.459304][ T7429] ? mutex_is_locked+0x12/0x40 [ 157.464058][ T7429] do_setlink+0xdfe/0x4130 [ 157.468467][ T7429] ? arch_stack_walk+0x160/0x190 [ 157.473405][ T7429] ? load_image+0x400/0x400 [ 157.477905][ T7429] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 157.484068][ T7429] ? stack_trace_save+0xaa/0x100 [ 157.489097][ T7429] ? __nla_validate_parse+0x2522/0x2ea0 [ 157.494648][ T7429] ? __nla_validate+0x50/0x50 [ 157.499343][ T7429] ? validate_linkmsg+0x719/0x910 [ 157.504369][ T7429] rtnl_newlink+0x17da/0x20a0 [ 157.509081][ T7429] ? rtnl_newlink+0x501/0x20a0 [ 157.513841][ T7429] ? rtnl_setlink+0x4e0/0x4e0 [ 157.518508][ T7429] ? trace_raw_output_contention_end+0xd0/0xd0 [ 157.524657][ T7429] ? rcu_is_watching+0x15/0xb0 [ 157.529417][ T7429] ? trace_contention_end+0x39/0xe0 [ 157.534605][ T7429] ? __mutex_lock+0x315/0xcc0 [ 157.539299][ T7429] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 157.544421][ T7429] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 157.549520][ T7429] ? rtnl_setlink+0x4e0/0x4e0 [ 157.554190][ T7429] rtnetlink_rcv_msg+0x869/0xfa0 [ 157.559123][ T7429] ? lockdep_hardirqs_on+0x98/0x150 [ 157.564313][ T7429] ? rtnetlink_bind+0x80/0x80 [ 157.568986][ T7429] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 157.574961][ T7429] ? lock_chain_count+0x20/0x20 [ 157.579811][ T7429] ? __local_bh_enable_ip+0x13a/0x1c0 [ 157.585172][ T7429] ? lockdep_hardirqs_on+0x98/0x150 [ 157.590364][ T7429] ? __local_bh_enable_ip+0x13a/0x1c0 [ 157.595733][ T7429] ? _local_bh_enable+0xa0/0xa0 [ 157.600576][ T7429] ? __dev_queue_xmit+0x265/0x3660 [ 157.605677][ T7429] ? __dev_queue_xmit+0x265/0x3660 [ 157.610787][ T7429] ? __dev_queue_xmit+0x1b2c/0x3660 [ 157.615989][ T7429] ? __dev_queue_xmit+0x265/0x3660 [ 157.621099][ T7429] ? ref_tracker_free+0x690/0x840 [ 157.626127][ T7429] netlink_rcv_skb+0x241/0x4d0 [ 157.630890][ T7429] ? rtnetlink_bind+0x80/0x80 [ 157.635558][ T7429] ? netlink_ack+0x1180/0x1180 [ 157.640325][ T7429] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 157.646484][ T7429] netlink_unicast+0x751/0x8d0 [ 157.651251][ T7429] netlink_sendmsg+0x8d0/0xbf0 [ 157.656016][ T7429] ? netlink_getsockopt+0x590/0x590 [ 157.661225][ T7429] ? aa_sock_msg_perm+0x94/0x150 [ 157.666156][ T7429] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 157.671432][ T7429] ? security_socket_sendmsg+0x80/0xa0 [ 157.676888][ T7429] ? netlink_getsockopt+0x590/0x590 [ 157.682086][ T7429] ____sys_sendmsg+0x5ba/0x960 [ 157.686847][ T7429] ? __asan_memset+0x22/0x40 [ 157.691431][ T7429] ? __sys_sendmsg_sock+0x30/0x30 [ 157.696441][ T7429] ? __import_iovec+0x5f2/0x850 [ 157.701295][ T7429] ? import_iovec+0x73/0xa0 [ 157.705790][ T7429] ___sys_sendmsg+0x2a6/0x360 [ 157.710456][ T7429] ? get_pid_task+0x20/0x1e0 [ 157.715040][ T7429] ? __sys_sendmsg+0x2a0/0x2a0 [ 157.719808][ T7429] ? __lock_acquire+0x7d40/0x7d40 [ 157.724853][ T7429] __se_sys_sendmsg+0x1c2/0x2b0 [ 157.729702][ T7429] ? __x64_sys_sendmsg+0x80/0x80 [ 157.734656][ T7429] ? lockdep_hardirqs_on+0x98/0x150 [ 157.739860][ T7429] do_syscall_64+0x55/0xa0 [ 157.744273][ T7429] ? clear_bhb_loop+0x40/0x90 [ 157.748942][ T7429] ? clear_bhb_loop+0x40/0x90 [ 157.753632][ T7429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.759530][ T7429] RIP: 0033:0x7fa11999c799 [ 157.764026][ T7429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.783627][ T7429] RSP: 002b:00007fa11a8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.792041][ T7429] RAX: ffffffffffffffda RBX: 00007fa119c15fa0 RCX: 00007fa11999c799 [ 157.800094][ T7429] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 0000000000000004 [ 157.808069][ T7429] RBP: 00007fa11a8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.816042][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.824030][ T7429] R13: 00007fa119c16038 R14: 00007fa119c15fa0 R15: 00007ffe503415f8 [ 157.832012][ T7429] [ 157.919396][ T7429] team0: Device vxcan1 is of different type [ 157.968499][ T7438] netlink: 'syz.3.525': attribute type 29 has an invalid length. [ 158.194735][ T7446] FAULT_INJECTION: forcing a failure. [ 158.194735][ T7446] name failslab, interval 1, probability 0, space 0, times 0 [ 158.229375][ T7446] CPU: 0 PID: 7446 Comm: syz.1.527 Not tainted syzkaller #0 [ 158.236708][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.246777][ T7446] Call Trace: [ 158.250074][ T7446] [ 158.253020][ T7446] dump_stack_lvl+0x18c/0x250 [ 158.257736][ T7446] ? show_regs_print_info+0x20/0x20 [ 158.262959][ T7446] ? load_image+0x400/0x400 [ 158.267493][ T7446] ? verify_lock_unused+0x140/0x140 [ 158.272716][ T7446] ? perf_trace_lock+0xfc/0x3b0 [ 158.277593][ T7446] should_fail_ex+0x39d/0x4d0 [ 158.282297][ T7446] should_failslab+0x9/0x20 [ 158.286830][ T7446] slab_pre_alloc_hook+0x59/0x310 [ 158.291884][ T7446] kmem_cache_alloc+0x5a/0x2d0 [ 158.296681][ T7446] ? skb_clone+0x1eb/0x370 [ 158.301119][ T7446] skb_clone+0x1eb/0x370 [ 158.305381][ T7446] __netlink_deliver_tap+0x41c/0x830 [ 158.310696][ T7446] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.315922][ T7446] netlink_deliver_tap+0x19c/0x1b0 [ 158.321058][ T7446] netlink_unicast+0x72c/0x8d0 [ 158.325846][ T7446] netlink_sendmsg+0x8d0/0xbf0 [ 158.330632][ T7446] ? netlink_getsockopt+0x590/0x590 [ 158.335851][ T7446] ? aa_sock_msg_perm+0x94/0x150 [ 158.340807][ T7446] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 158.346104][ T7446] ? security_socket_sendmsg+0x80/0xa0 [ 158.351590][ T7446] ? netlink_getsockopt+0x590/0x590 [ 158.356805][ T7446] ____sys_sendmsg+0x5ba/0x960 [ 158.361585][ T7446] ? __asan_memset+0x22/0x40 [ 158.366195][ T7446] ? __sys_sendmsg_sock+0x30/0x30 [ 158.371236][ T7446] ? __import_iovec+0x5f2/0x850 [ 158.376114][ T7446] ? import_iovec+0x73/0xa0 [ 158.380720][ T7446] ___sys_sendmsg+0x2a6/0x360 [ 158.385422][ T7446] ? __sys_sendmsg+0x2a0/0x2a0 [ 158.390251][ T7446] ? __lock_acquire+0x7d40/0x7d40 [ 158.395330][ T7446] __se_sys_sendmsg+0x1c2/0x2b0 [ 158.400202][ T7446] ? __x64_sys_sendmsg+0x80/0x80 [ 158.405169][ T7446] ? lockdep_hardirqs_on+0x98/0x150 [ 158.410390][ T7446] do_syscall_64+0x55/0xa0 [ 158.414881][ T7446] ? clear_bhb_loop+0x40/0x90 [ 158.419575][ T7446] ? clear_bhb_loop+0x40/0x90 [ 158.424273][ T7446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.430186][ T7446] RIP: 0033:0x7fa11999c799 [ 158.434615][ T7446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.454234][ T7446] RSP: 002b:00007fa11a8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.462759][ T7446] RAX: ffffffffffffffda RBX: 00007fa119c15fa0 RCX: 00007fa11999c799 [ 158.470740][ T7446] RDX: 0000000000040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 158.478721][ T7446] RBP: 00007fa11a8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.486713][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.494696][ T7446] R13: 00007fa119c16038 R14: 00007fa119c15fa0 R15: 00007ffe503415f8 [ 158.502711][ T7446] [ 158.519130][ T7449] team0: Device vxcan1 is of different type [ 158.665822][ T7452] wg2: entered allmulticast mode [ 159.463306][ T7478] syz_tun: refused to change device tx_queue_len [ 159.623288][ T7485] __nla_validate_parse: 7 callbacks suppressed [ 159.623331][ T7485] netlink: 14 bytes leftover after parsing attributes in process `syz.3.543'. [ 159.700588][ T7488] team0: Device vxcan1 is of different type [ 159.810976][ T7488] wg2: entered allmulticast mode [ 160.042564][ T7497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.548'. [ 160.070414][ T7497] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.548'. [ 160.375374][ T7508] validate_nla: 16 callbacks suppressed [ 160.375427][ T7508] netlink: 'syz.0.552': attribute type 10 has an invalid length. [ 160.428892][ T7508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.552'. [ 160.464899][ T7508] FAULT_INJECTION: forcing a failure. [ 160.464899][ T7508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.535259][ T7508] CPU: 0 PID: 7508 Comm: syz.0.552 Not tainted syzkaller #0 [ 160.542605][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.552676][ T7508] Call Trace: [ 160.555955][ T7508] [ 160.558886][ T7508] dump_stack_lvl+0x18c/0x250 [ 160.563766][ T7508] ? show_regs_print_info+0x20/0x20 [ 160.568985][ T7508] ? load_image+0x400/0x400 [ 160.573514][ T7508] ? __lock_acquire+0x7d40/0x7d40 [ 160.578563][ T7508] ? snprintf+0xe9/0x140 [ 160.582817][ T7508] should_fail_ex+0x39d/0x4d0 [ 160.587486][ T7508] _copy_to_user+0x2f/0xa0 [ 160.591903][ T7508] simple_read_from_buffer+0xe7/0x150 [ 160.597305][ T7508] proc_fail_nth_read+0x1e8/0x260 [ 160.602357][ T7508] ? proc_fault_inject_write+0x360/0x360 [ 160.608023][ T7508] ? fsnotify_perm+0x271/0x5e0 [ 160.612813][ T7508] ? proc_fault_inject_write+0x360/0x360 [ 160.618472][ T7508] vfs_read+0x28b/0x970 [ 160.622656][ T7508] ? kernel_read+0x1e0/0x1e0 [ 160.627263][ T7508] ? __fget_files+0x28/0x4b0 [ 160.631864][ T7508] ? __fget_files+0x28/0x4b0 [ 160.636467][ T7508] ? __fget_files+0x43d/0x4b0 [ 160.641174][ T7508] ? __fdget_pos+0x2a3/0x330 [ 160.645778][ T7508] ? ksys_read+0x75/0x260 [ 160.650131][ T7508] ksys_read+0x150/0x260 [ 160.654412][ T7508] ? vfs_write+0x990/0x990 [ 160.658844][ T7508] ? syscall_enter_from_user_mode+0x2e/0x80 [ 160.664729][ T7508] do_syscall_64+0x55/0xa0 [ 160.669150][ T7508] ? clear_bhb_loop+0x40/0x90 [ 160.673844][ T7508] ? clear_bhb_loop+0x40/0x90 [ 160.675120][ T7511] netlink: 14 bytes leftover after parsing attributes in process `syz.2.553'. [ 160.678522][ T7508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.678566][ T7508] RIP: 0033:0x7fb09915cfce [ 160.678584][ T7508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 160.678597][ T7508] RSP: 002b:00007fb09a14bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.678617][ T7508] RAX: ffffffffffffffda RBX: 00007fb09a14c6c0 RCX: 00007fb09915cfce [ 160.678629][ T7508] RDX: 000000000000000f RSI: 00007fb09a14c0a0 RDI: 0000000000000009 [ 160.705874][ T7511] netlink: 'syz.2.553': attribute type 29 has an invalid length. [ 160.717312][ T7508] RBP: 00007fb09a14c090 R08: 0000000000000000 R09: 0000000000000000 [ 160.717328][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.717338][ T7508] R13: 00007fb099416038 R14: 00007fb099415fa0 R15: 00007fff5421bf18 [ 160.717363][ T7508] [ 160.811653][ T7511] netlink: 'syz.2.553': attribute type 29 has an invalid length. [ 160.841084][ T7513] netlink: 'syz.2.553': attribute type 29 has an invalid length. [ 160.900071][ T7516] netlink: 'syz.2.553': attribute type 29 has an invalid length. [ 161.160227][ T7525] FAULT_INJECTION: forcing a failure. [ 161.160227][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.183718][ T7525] CPU: 1 PID: 7525 Comm: syz.1.558 Not tainted syzkaller #0 [ 161.191041][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.201104][ T7525] Call Trace: [ 161.204369][ T7525] [ 161.207286][ T7525] dump_stack_lvl+0x18c/0x250 [ 161.212043][ T7525] ? show_regs_print_info+0x20/0x20 [ 161.217230][ T7525] ? load_image+0x400/0x400 [ 161.221719][ T7525] ? __might_fault+0xaa/0x120 [ 161.226378][ T7525] ? __lock_acquire+0x7d40/0x7d40 [ 161.231396][ T7525] should_fail_ex+0x39d/0x4d0 [ 161.236065][ T7525] _copy_from_user+0x2f/0xe0 [ 161.240650][ T7525] ___sys_sendmsg+0x1c7/0x360 [ 161.245342][ T7525] ? __sys_sendmsg+0x2a0/0x2a0 [ 161.250127][ T7525] ? __lock_acquire+0x7d40/0x7d40 [ 161.255175][ T7525] __se_sys_sendmsg+0x1c2/0x2b0 [ 161.260023][ T7525] ? __x64_sys_sendmsg+0x80/0x80 [ 161.264957][ T7525] ? syscall_enter_from_user_mode+0x2e/0x80 [ 161.270841][ T7525] do_syscall_64+0x55/0xa0 [ 161.275248][ T7525] ? clear_bhb_loop+0x40/0x90 [ 161.279913][ T7525] ? clear_bhb_loop+0x40/0x90 [ 161.284578][ T7525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.290460][ T7525] RIP: 0033:0x7fa11999c799 [ 161.294860][ T7525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.314501][ T7525] RSP: 002b:00007fa11a8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.322924][ T7525] RAX: ffffffffffffffda RBX: 00007fa119c15fa0 RCX: 00007fa11999c799 [ 161.330888][ T7525] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d [ 161.338845][ T7525] RBP: 00007fa11a8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.346811][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.354765][ T7525] R13: 00007fa119c16038 R14: 00007fa119c15fa0 R15: 00007ffe503415f8 [ 161.362736][ T7525] [ 161.558701][ T7542] netlink: 48 bytes leftover after parsing attributes in process `syz.0.563'. [ 161.889730][ T7553] netlink: 'syz.2.567': attribute type 13 has an invalid length. [ 161.897983][ T7553] netlink: 164 bytes leftover after parsing attributes in process `syz.2.567'. [ 161.922070][ T7553] syz_tun: refused to change device tx_queue_len [ 161.952567][ T7556] netlink: 'syz.1.568': attribute type 10 has an invalid length. [ 162.016752][ T7556] team0: Device vxcan1 is of different type [ 162.037303][ T7564] wg2: entered allmulticast mode [ 162.042311][ T7566] netlink: 'syz.0.571': attribute type 5 has an invalid length. [ 162.042352][ T7566] netlink: 'syz.0.571': attribute type 1 has an invalid length. [ 162.042364][ T7566] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.571'. [ 162.083896][ T7553] netlink: 'syz.2.567': attribute type 2 has an invalid length. [ 162.105819][ T7553] netlink: 132 bytes leftover after parsing attributes in process `syz.2.567'. [ 162.418377][ T7576] netlink: 132 bytes leftover after parsing attributes in process `syz.3.575'. [ 162.466718][ T7576] team0: Device hsr_slave_0 failed to register rx_handler [ 163.383402][ T7608] FAULT_INJECTION: forcing a failure. [ 163.383402][ T7608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.407813][ T7608] CPU: 1 PID: 7608 Comm: syz.3.590 Not tainted syzkaller #0 [ 163.415147][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.425208][ T7608] Call Trace: [ 163.428489][ T7608] [ 163.431410][ T7608] dump_stack_lvl+0x18c/0x250 [ 163.436079][ T7608] ? show_regs_print_info+0x20/0x20 [ 163.441280][ T7608] ? load_image+0x400/0x400 [ 163.445807][ T7608] ? __lock_acquire+0x7d40/0x7d40 [ 163.450859][ T7608] should_fail_ex+0x39d/0x4d0 [ 163.455563][ T7608] prepare_alloc_pages+0x1e2/0x5f0 [ 163.460690][ T7608] __alloc_pages+0x134/0x460 [ 163.465283][ T7608] ? zone_statistics+0x170/0x170 [ 163.470224][ T7608] ? alloc_pages+0x4dc/0x740 [ 163.474805][ T7608] ? do_raw_spin_unlock+0x121/0x230 [ 163.479997][ T7608] __get_free_pages+0xc/0x30 [ 163.484577][ T7608] kasan_populate_vmalloc_pte+0x35/0x100 [ 163.490204][ T7608] __apply_to_page_range+0x860/0xdd0 [ 163.495496][ T7608] ? kasan_populate_vmalloc+0x70/0x70 [ 163.500868][ T7608] ? apply_to_page_range+0x50/0x50 [ 163.505991][ T7608] ? do_raw_spin_unlock+0x121/0x230 [ 163.511191][ T7608] alloc_vmap_area+0x1d0c/0x1e30 [ 163.516141][ T7608] ? vm_map_ram+0xcb0/0xcb0 [ 163.520646][ T7608] ? rcu_is_watching+0x15/0xb0 [ 163.525410][ T7608] __get_vm_area_node+0x162/0x370 [ 163.530432][ T7608] ? bpf_map_area_alloc+0x5e/0x110 [ 163.535539][ T7608] __vmalloc_node_range+0x36e/0x1330 [ 163.540905][ T7608] ? dev_map_create_hash+0x24/0x1d0 [ 163.546113][ T7608] ? free_vm_area+0x50/0x50 [ 163.550615][ T7608] ? __kmem_cache_alloc_node+0x13a/0x250 [ 163.556244][ T7608] bpf_map_area_alloc+0xf1/0x110 [ 163.561176][ T7608] ? dev_map_create_hash+0x24/0x1d0 [ 163.566365][ T7608] dev_map_create_hash+0x24/0x1d0 [ 163.571382][ T7608] ? bpf_map_init_from_attr+0x14a/0x340 [ 163.576923][ T7608] dev_map_alloc+0x277/0x4c0 [ 163.581506][ T7608] map_create+0x877/0x12f0 [ 163.585912][ T7608] ? bpf_lsm_bpf+0x9/0x10 [ 163.590236][ T7608] __sys_bpf+0x651/0x890 [ 163.594471][ T7608] ? bpf_link_show_fdinfo+0x390/0x390 [ 163.599842][ T7608] ? lock_chain_count+0x20/0x20 [ 163.604866][ T7608] __x64_sys_bpf+0x7c/0x90 [ 163.609282][ T7608] do_syscall_64+0x55/0xa0 [ 163.613693][ T7608] ? clear_bhb_loop+0x40/0x90 [ 163.618365][ T7608] ? clear_bhb_loop+0x40/0x90 [ 163.623039][ T7608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.628922][ T7608] RIP: 0033:0x7f962799c799 [ 163.633330][ T7608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.653009][ T7608] RSP: 002b:00007f96288a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.661413][ T7608] RAX: ffffffffffffffda RBX: 00007f9627c16090 RCX: 00007f962799c799 [ 163.669381][ T7608] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 163.677341][ T7608] RBP: 00007f96288a4090 R08: 0000000000000000 R09: 0000000000000000 [ 163.685388][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.693347][ T7608] R13: 00007f9627c16128 R14: 00007f9627c16090 R15: 00007ffd30f38d08 [ 163.701324][ T7608] [ 165.007272][ T7623] team0: Device ipvlan1 failed to register rx_handler [ 165.201453][ T7636] __nla_validate_parse: 5 callbacks suppressed [ 165.201467][ T7636] netlink: 48 bytes leftover after parsing attributes in process `syz.1.599'. [ 165.298184][ T7643] netlink: 2 bytes leftover after parsing attributes in process `syz.0.601'. [ 165.624473][ T5774] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 165.806538][ T7660] netlink: 14 bytes leftover after parsing attributes in process `syz.1.608'. [ 165.869649][ T7660] validate_nla: 6 callbacks suppressed [ 165.869688][ T7660] netlink: 'syz.1.608': attribute type 29 has an invalid length. [ 165.895893][ T7660] netlink: 'syz.1.608': attribute type 29 has an invalid length. [ 165.928222][ T7667] netlink: 'syz.1.608': attribute type 29 has an invalid length. [ 165.979300][ T7666] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.611'. [ 166.005064][ T7666] bridge_slave_1: default FDB implementation only supports local addresses [ 166.023646][ T7660] netlink: 'syz.1.608': attribute type 29 has an invalid length. [ 166.342411][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 166.532589][ T7670] netlink: 'syz.2.612': attribute type 10 has an invalid length. [ 166.566483][ T7670] team0: Device ipvlan1 failed to register rx_handler [ 166.767223][ T7689] delete_channel: no stack [ 166.973851][ T7697] delete_channel: no stack [ 167.020966][ T7700] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.623'. [ 167.030452][ T7700] bridge_slave_1: default FDB implementation only supports local addresses [ 167.272077][ T7712] netlink: 14 bytes leftover after parsing attributes in process `syz.0.627'. [ 167.321501][ T7712] netlink: 'syz.0.627': attribute type 29 has an invalid length. [ 167.342607][ T7712] netlink: 'syz.0.627': attribute type 29 has an invalid length. [ 167.391046][ T7712] netlink: 'syz.0.627': attribute type 29 has an invalid length. [ 167.405336][ T7712] netlink: 'syz.0.627': attribute type 29 has an invalid length. [ 167.493225][ T7717] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 167.501286][ T7717] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.630'. [ 167.688249][ T51] Bluetooth: hci3: command tx timeout [ 167.845470][ T7730] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.637'. [ 167.862306][ T7730] bridge_slave_1: default FDB implementation only supports local addresses [ 168.004540][ T7736] FAULT_INJECTION: forcing a failure. [ 168.004540][ T7736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.037781][ T7736] CPU: 0 PID: 7736 Comm: syz.3.640 Not tainted syzkaller #0 [ 168.045115][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.055356][ T7736] Call Trace: [ 168.058653][ T7736] [ 168.061602][ T7736] dump_stack_lvl+0x18c/0x250 [ 168.066305][ T7736] ? show_regs_print_info+0x20/0x20 [ 168.071536][ T7736] ? load_image+0x400/0x400 [ 168.076058][ T7736] ? __might_fault+0xaa/0x120 [ 168.080758][ T7736] ? __lock_acquire+0x7d40/0x7d40 [ 168.085812][ T7736] should_fail_ex+0x39d/0x4d0 [ 168.090522][ T7736] _copy_to_user+0x2f/0xa0 [ 168.094961][ T7736] bpf_verifier_vlog+0x2fa/0x870 [ 168.099929][ T7736] __btf_verifier_log+0xe3/0x140 [ 168.104899][ T7736] ? btf_check_sec_info+0x350/0x350 [ 168.110119][ T7736] ? perf_trace_lock+0xfc/0x3b0 [ 168.115013][ T7736] __btf_verifier_log_type+0x3c7/0x690 [ 168.120513][ T7736] ? btf_int_show+0x2890/0x2890 [ 168.125493][ T7736] btf_struct_check_meta+0x400/0xcf0 [ 168.130808][ T7736] btf_check_all_metas+0x373/0xb00 [ 168.135925][ T7736] ? sort_r+0x17f0/0x17f0 [ 168.140262][ T7736] btf_parse_type_sec+0xf9/0x1930 [ 168.145294][ T7736] ? btf_check_sec_info+0x29f/0x350 [ 168.150494][ T7736] ? btf_verifier_log+0x1a0/0x1a0 [ 168.155514][ T7736] ? btf_parse_str_sec+0x20d/0x2a0 [ 168.160619][ T7736] btf_new_fd+0x440/0x9f0 [ 168.164950][ T7736] ? bpf_btf_show_fdinfo+0x80/0x80 [ 168.170062][ T7736] ? capable+0x88/0xe0 [ 168.174131][ T7736] __sys_bpf+0x670/0x890 [ 168.178368][ T7736] ? bpf_link_show_fdinfo+0x390/0x390 [ 168.183833][ T7736] ? lock_chain_count+0x20/0x20 [ 168.188690][ T7736] __x64_sys_bpf+0x7c/0x90 [ 168.193099][ T7736] do_syscall_64+0x55/0xa0 [ 168.197528][ T7736] ? clear_bhb_loop+0x40/0x90 [ 168.202198][ T7736] ? clear_bhb_loop+0x40/0x90 [ 168.206867][ T7736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.212753][ T7736] RIP: 0033:0x7f962799c799 [ 168.217206][ T7736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.236832][ T7736] RSP: 002b:00007f96288c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.245239][ T7736] RAX: ffffffffffffffda RBX: 00007f9627c15fa0 RCX: 00007f962799c799 [ 168.253202][ T7736] RDX: 0000000000000028 RSI: 00002000000005c0 RDI: 0000000000000012 [ 168.261166][ T7736] RBP: 00007f96288c5090 R08: 0000000000000000 R09: 0000000000000000 [ 168.269129][ T7736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.277088][ T7736] R13: 00007f9627c16038 R14: 00007f9627c15fa0 R15: 00007ffd30f38d08 [ 168.285063][ T7736] [ 168.338674][ T7738] netlink: 2 bytes leftover after parsing attributes in process `syz.1.642'. [ 168.358553][ T7741] netlink: 14 bytes leftover after parsing attributes in process `syz.2.641'. [ 169.310775][ T7757] bridge_slave_1: default FDB implementation only supports local addresses [ 170.627093][ T7777] __nla_validate_parse: 2 callbacks suppressed [ 170.627136][ T7777] netlink: 14 bytes leftover after parsing attributes in process `syz.3.655'. [ 170.767267][ T7783] netlink: 2 bytes leftover after parsing attributes in process `syz.3.656'. [ 172.358641][ T7799] delete_channel: no stack [ 172.514026][ T7795] validate_nla: 15 callbacks suppressed [ 172.514040][ T7795] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 172.766316][ T7810] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.666'. [ 173.348679][ T7825] netlink: 'syz.2.671': attribute type 10 has an invalid length. [ 173.356682][ T7825] netlink: 2 bytes leftover after parsing attributes in process `syz.2.671'. [ 173.537592][ T7808] netlink: 'syz.3.665': attribute type 10 has an invalid length. [ 174.340832][ T7842] netlink: 'syz.1.677': attribute type 10 has an invalid length. [ 174.456761][ T7842] team0: Device ipvlan1 failed to register rx_handler [ 174.586375][ T7856] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.681'. [ 174.649921][ T51] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 175.082233][ T7874] netlink: 'syz.0.686': attribute type 33 has an invalid length. [ 175.115553][ T7874] netlink: 36 bytes leftover after parsing attributes in process `syz.0.686'. [ 175.362643][ T7874] netlink: 'syz.0.686': attribute type 3 has an invalid length. [ 175.383408][ T7874] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.686'. [ 175.785819][ T7891] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.692'. [ 175.804658][ T7891] bridge_slave_1: default FDB implementation only supports local addresses [ 175.816793][ T7894] FAULT_INJECTION: forcing a failure. [ 175.816793][ T7894] name failslab, interval 1, probability 0, space 0, times 0 [ 175.830907][ T7894] CPU: 0 PID: 7894 Comm: syz.1.693 Not tainted syzkaller #0 [ 175.838222][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.848280][ T7894] Call Trace: [ 175.851555][ T7894] [ 175.854485][ T7894] dump_stack_lvl+0x18c/0x250 [ 175.859173][ T7894] ? show_regs_print_info+0x20/0x20 [ 175.864385][ T7894] ? load_image+0x400/0x400 [ 175.868896][ T7894] ? __might_sleep+0xe0/0xe0 [ 175.873484][ T7894] ? __lock_acquire+0x7d40/0x7d40 [ 175.878509][ T7894] should_fail_ex+0x39d/0x4d0 [ 175.883196][ T7894] should_failslab+0x9/0x20 [ 175.887704][ T7894] slab_pre_alloc_hook+0x59/0x310 [ 175.892730][ T7894] ? bpf_ctx_init+0xbd/0x1a0 [ 175.897315][ T7894] ? bpf_ctx_init+0xbd/0x1a0 [ 175.901900][ T7894] __kmem_cache_alloc_node+0x53/0x250 [ 175.907284][ T7894] ? bpf_ctx_init+0xbd/0x1a0 [ 175.911957][ T7894] __kmalloc+0xa4/0x230 [ 175.916124][ T7894] bpf_ctx_init+0xbd/0x1a0 [ 175.920557][ T7894] bpf_prog_test_run_flow_dissector+0x2eb/0x640 [ 175.926832][ T7894] ? xdp_convert_buff_to_md+0x200/0x200 [ 175.932377][ T7894] ? __fget_files+0x28/0x4b0 [ 175.936994][ T7894] ? __fget_files+0x28/0x4b0 [ 175.941584][ T7894] ? __fget_files+0x43d/0x4b0 [ 175.946272][ T7894] ? xdp_convert_buff_to_md+0x200/0x200 [ 175.951814][ T7894] bpf_prog_test_run+0x321/0x390 [ 175.956751][ T7894] __sys_bpf+0x49d/0x890 [ 175.960992][ T7894] ? bpf_link_show_fdinfo+0x390/0x390 [ 175.966380][ T7894] ? lock_chain_count+0x20/0x20 [ 175.971240][ T7894] __x64_sys_bpf+0x7c/0x90 [ 175.975659][ T7894] do_syscall_64+0x55/0xa0 [ 175.980071][ T7894] ? clear_bhb_loop+0x40/0x90 [ 175.984742][ T7894] ? clear_bhb_loop+0x40/0x90 [ 175.989414][ T7894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.995299][ T7894] RIP: 0033:0x7fa11999c799 [ 175.999714][ T7894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.019416][ T7894] RSP: 002b:00007fa11a8e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.027833][ T7894] RAX: ffffffffffffffda RBX: 00007fa119c15fa0 RCX: 00007fa11999c799 [ 176.035799][ T7894] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 176.043763][ T7894] RBP: 00007fa11a8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.051728][ T7894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.059692][ T7894] R13: 00007fa119c16038 R14: 00007fa119c15fa0 R15: 00007ffe503415f8 [ 176.067681][ T7894] [ 176.128935][ T7880] delete_channel: no stack [ 176.133868][ T7880] FAULT_INJECTION: forcing a failure. [ 176.133868][ T7880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 176.159076][ T7880] CPU: 0 PID: 7880 Comm: syz.3.688 Not tainted syzkaller #0 [ 176.166394][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.171852][ T7897] syzkaller0: entered promiscuous mode [ 176.176441][ T7880] Call Trace: [ 176.176451][ T7880] [ 176.188179][ T7880] dump_stack_lvl+0x18c/0x250 [ 176.192970][ T7880] ? show_regs_print_info+0x20/0x20 [ 176.198176][ T7880] ? load_image+0x400/0x400 [ 176.202677][ T7880] ? __lock_acquire+0x1347/0x7d40 [ 176.207706][ T7880] ? verify_lock_unused+0x140/0x140 [ 176.213167][ T7880] should_fail_ex+0x39d/0x4d0 [ 176.217856][ T7880] get_futex_key+0x16f/0x1010 [ 176.222539][ T7880] ? futex_setup_timer+0xc0/0xc0 [ 176.227482][ T7880] futex_wake+0x127/0x4f0 [ 176.231825][ T7880] ? futex_wake_mark+0x150/0x150 [ 176.236763][ T7880] do_futex+0x35d/0x3e0 [ 176.240909][ T7880] ? __might_fault+0xaa/0x120 [ 176.245580][ T7880] ? __ia32_sys_get_robust_list+0x110/0x110 [ 176.251466][ T7880] ? __might_fault+0xc6/0x120 [ 176.256131][ T7880] mm_release+0x184/0x3a0 [ 176.260453][ T7880] ? exit_mm_release+0x30/0x30 [ 176.265210][ T7880] ? lockdep_hardirqs_on+0x98/0x150 [ 176.270411][ T7880] exit_mm+0xa7/0x2c0 [ 176.274391][ T7880] ? do_exit+0x2460/0x2460 [ 176.278799][ T7880] ? taskstats_exit+0x35e/0x9e0 [ 176.283651][ T7880] do_exit+0x8dd/0x2460 [ 176.287811][ T7880] ? put_task_struct+0xc0/0xc0 [ 176.292572][ T7880] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 176.298553][ T7880] ? get_signal+0x1068/0x13f0 [ 176.303220][ T7880] ? lock_chain_count+0x20/0x20 [ 176.308075][ T7880] ? _raw_spin_lock_irq+0xbb/0xf0 [ 176.313091][ T7880] do_group_exit+0x21b/0x2d0 [ 176.317676][ T7880] ? lockdep_hardirqs_on+0x98/0x150 [ 176.322874][ T7880] get_signal+0x12fc/0x13f0 [ 176.327379][ T7880] arch_do_signal_or_restart+0xc2/0x800 [ 176.332922][ T7880] ? get_sigframe_size+0x20/0x20 [ 176.337865][ T7880] ? exit_to_user_mode_loop+0x3b/0x110 [ 176.343321][ T7880] exit_to_user_mode_loop+0x70/0x110 [ 176.348603][ T7880] exit_to_user_mode_prepare+0xee/0x180 [ 176.354140][ T7880] syscall_exit_to_user_mode+0x1a/0x50 [ 176.359590][ T7880] do_syscall_64+0x61/0xa0 [ 176.364000][ T7880] ? clear_bhb_loop+0x40/0x90 [ 176.368669][ T7880] ? clear_bhb_loop+0x40/0x90 [ 176.373338][ T7880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.379225][ T7880] RIP: 0033:0x7f962799c799 [ 176.383633][ T7880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.403234][ T7880] RSP: 002b:00007f96288a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 176.413373][ T7880] RAX: fffffffffffffe00 RBX: 00007f9627c16090 RCX: 00007f962799c799 [ 176.421334][ T7880] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000004 [ 176.429292][ T7880] RBP: 00007f96288a4090 R08: 0000000000000000 R09: 0000000000000000 [ 176.437249][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.445209][ T7880] R13: 00007f9627c16128 R14: 00007f9627c16090 R15: 00007ffd30f38d08 [ 176.453183][ T7880] [ 176.457091][ T7897] syzkaller0: entered allmulticast mode [ 176.759526][ T7908] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.698'. [ 177.935706][ T7906] netlink: 132 bytes leftover after parsing attributes in process `syz.3.698'. [ 178.388355][ T7924] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.704'. [ 178.479481][ T7924] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 178.514659][ T7931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.708'. [ 178.583350][ T7934] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.708'. [ 178.983927][ T7945] netlink: 14 bytes leftover after parsing attributes in process `syz.2.712'. [ 179.024332][ T7945] netlink: 'syz.2.712': attribute type 29 has an invalid length. [ 179.047026][ T7951] pimreg: tun_chr_ioctl cmd 1074025677 [ 179.070245][ T7951] pimreg: linktype set to 1 [ 179.086558][ T7945] netlink: 'syz.2.712': attribute type 29 has an invalid length. [ 179.101359][ T7953] netlink: 'syz.2.712': attribute type 29 has an invalid length. [ 179.121296][ T7945] netlink: 'syz.2.712': attribute type 29 has an invalid length. [ 179.434852][ T7962] netlink: 'syz.3.719': attribute type 10 has an invalid length. [ 179.469084][ T7962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.719'. [ 179.523097][ T7962] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 179.567936][ T7965] netlink: 132 bytes leftover after parsing attributes in process `syz.2.720'. [ 179.642815][ T7965] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.720'. [ 179.963272][ T7975] netlink: 'syz.0.726': attribute type 29 has an invalid length. [ 180.055439][ T7975] netlink: 'syz.0.726': attribute type 29 has an invalid length. [ 180.064712][ T7979] netlink: 'syz.0.726': attribute type 29 has an invalid length. [ 180.073158][ T7971] delete_channel: no stack [ 180.090389][ T7982] netlink: 'syz.0.726': attribute type 29 has an invalid length. [ 180.474697][ T7986] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 180.517926][ T7986] CPU: 1 PID: 7986 Comm: syz.3.729 Not tainted syzkaller #0 [ 180.525266][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.535360][ T7986] Call Trace: [ 180.538662][ T7986] [ 180.541614][ T7986] dump_stack_lvl+0x18c/0x250 [ 180.546411][ T7986] ? show_regs_print_info+0x20/0x20 [ 180.551662][ T7986] ? load_image+0x400/0x400 [ 180.556200][ T7986] sysfs_warn_dup+0x8e/0xa0 [ 180.560746][ T7986] sysfs_do_create_link_sd+0xc0/0x110 [ 180.566134][ T7986] device_add_class_symlinks+0x1cf/0x240 [ 180.571792][ T7986] device_add+0x507/0xc20 [ 180.576149][ T7986] wiphy_register+0x1dad/0x2ae0 [ 180.581123][ T7986] ? cfg80211_event_work+0x40/0x40 [ 180.586246][ T7986] ? minstrel_ht_alloc+0x88a/0x990 [ 180.591394][ T7986] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 180.597485][ T7986] ieee80211_register_hw+0x3464/0x4250 [ 180.602978][ T7986] ? ieee80211_tasklet_handler+0x20/0x20 [ 180.608616][ T7986] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 180.614510][ T7986] ? __debug_object_init+0xec/0x450 [ 180.619714][ T7986] ? __asan_memset+0x22/0x40 [ 180.624302][ T7986] ? __hrtimer_init+0x186/0x270 [ 180.629153][ T7986] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 180.634892][ T7986] ? mac80211_hwsim_free+0x220/0x220 [ 180.640181][ T7986] ? rcu_is_watching+0x15/0xb0 [ 180.644940][ T7986] ? kstrndup+0xbd/0x140 [ 180.649188][ T7986] hwsim_new_radio_nl+0xdc9/0x1a90 [ 180.654311][ T7986] ? __nla_validate+0x50/0x50 [ 180.659006][ T7986] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 180.665341][ T7986] ? __nla_parse+0x40/0x50 [ 180.669756][ T7986] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 180.676088][ T7986] genl_family_rcv_msg_doit+0x211/0x310 [ 180.681635][ T7986] ? end_current_label_crit_section+0x170/0x170 [ 180.687879][ T7986] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 180.693782][ T7986] ? bpf_lsm_capable+0x9/0x10 [ 180.698455][ T7986] ? security_capable+0x89/0xb0 [ 180.703318][ T7986] genl_rcv_msg+0x619/0x7a0 [ 180.707824][ T7986] ? genl_bind+0x360/0x360 [ 180.712233][ T7986] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 180.718563][ T7986] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 180.724720][ T7986] ? lockdep_hardirqs_on+0x98/0x150 [ 180.729925][ T7986] netlink_rcv_skb+0x241/0x4d0 [ 180.734693][ T7986] ? genl_bind+0x360/0x360 [ 180.739109][ T7986] ? netlink_ack+0x1180/0x1180 [ 180.743914][ T7986] ? __lock_acquire+0x7d40/0x7d40 [ 180.748945][ T7986] ? down_read+0x1ac/0x2e0 [ 180.753355][ T7986] genl_rcv+0x28/0x40 [ 180.757329][ T7986] netlink_unicast+0x751/0x8d0 [ 180.762101][ T7986] netlink_sendmsg+0x8d0/0xbf0 [ 180.766873][ T7986] ? netlink_getsockopt+0x590/0x590 [ 180.772083][ T7986] ? aa_sock_msg_perm+0x94/0x150 [ 180.777018][ T7986] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 180.782298][ T7986] ? security_socket_sendmsg+0x80/0xa0 [ 180.787749][ T7986] ? netlink_getsockopt+0x590/0x590 [ 180.792943][ T7986] ____sys_sendmsg+0x5ba/0x960 [ 180.797713][ T7986] ? __asan_memset+0x22/0x40 [ 180.802303][ T7986] ? __sys_sendmsg_sock+0x30/0x30 [ 180.807325][ T7986] ? __import_iovec+0x5f2/0x850 [ 180.812184][ T7986] ? import_iovec+0x73/0xa0 [ 180.816684][ T7986] ___sys_sendmsg+0x2a6/0x360 [ 180.821361][ T7986] ? __sys_sendmsg+0x2a0/0x2a0 [ 180.826138][ T7986] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 180.832502][ T7986] __se_sys_sendmsg+0x1c2/0x2b0 [ 180.837349][ T7986] ? __x64_sys_sendmsg+0x80/0x80 [ 180.842293][ T7986] ? lockdep_hardirqs_on+0x98/0x150 [ 180.847491][ T7986] do_syscall_64+0x55/0xa0 [ 180.851907][ T7986] ? clear_bhb_loop+0x40/0x90 [ 180.856578][ T7986] ? clear_bhb_loop+0x40/0x90 [ 180.861253][ T7986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.867141][ T7986] RIP: 0033:0x7f962799c799 [ 180.871555][ T7986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.891160][ T7986] RSP: 002b:00007f96288c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.899569][ T7986] RAX: ffffffffffffffda RBX: 00007f9627c15fa0 RCX: 00007f962799c799 [ 180.907536][ T7986] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 180.915501][ T7986] RBP: 00007f9627a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 180.923465][ T7986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.931431][ T7986] R13: 00007f9627c16038 R14: 00007f9627c15fa0 R15: 00007ffd30f38d08 [ 180.939411][ T7986] [ 180.960286][ T7976] netlink: 'syz.1.725': attribute type 10 has an invalid length. [ 181.023839][ T7976] team0: Device ipvlan1 failed to register rx_handler [ 183.365515][ T7989] ------------[ cut here ]------------ [ 183.371390][ T7989] WARNING: CPU: 1 PID: 7989 at kernel/events/core.c:6806 perf_pending_task+0x35c/0x470 [ 183.381136][ T7989] Modules linked in: [ 183.385047][ T7989] CPU: 1 PID: 7989 Comm: syz.2.730 Not tainted syzkaller #0 [ 183.392399][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.402815][ T7989] RIP: 0010:perf_pending_task+0x35c/0x470 [ 183.409002][ T7989] Code: ff 84 db 75 14 e8 74 e0 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d5 ff e8 7b 61 4f ff eb e5 e8 54 e0 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e0 d5 ff 48 c7 c7 70 f3 1c 8d 4c 89 f6 [ 183.429306][ T7989] RSP: 0018:ffffc900197479c0 EFLAGS: 00010293 [ 183.435392][ T7989] RAX: ffffffff81b13c0c RBX: ffff88801b674d88 RCX: ffff888023830000 [ 183.443708][ T7989] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 183.451919][ T7989] RBP: 0000000000000001 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 183.460328][ T7989] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff888023830000 [ 183.468602][ T7989] R13: ffff88805d088930 R14: ffff88801b674b48 R15: 1ffff110036ce969 [ 183.476617][ T7989] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 183.485609][ T7989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.492241][ T7989] CR2: 000055558fffc4e8 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 183.500281][ T7989] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.508326][ T7989] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 183.516303][ T7989] Call Trace: [ 183.519648][ T7989] [ 183.522586][ T7989] task_work_run+0x1d4/0x260 [ 183.527184][ T7989] ? task_work_cancel+0x220/0x220 [ 183.532293][ T7989] do_exit+0x95a/0x2460 [ 183.536473][ T7989] ? put_task_struct+0xc0/0xc0 [ 183.541300][ T7989] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 183.547290][ T7989] ? get_signal+0x1068/0x13f0 [ 183.552006][ T7989] ? lock_chain_count+0x20/0x20 [ 183.556864][ T7989] ? _raw_spin_lock_irq+0xbb/0xf0 [ 183.561933][ T7989] do_group_exit+0x21b/0x2d0 [ 183.566531][ T7989] ? lockdep_hardirqs_on+0x98/0x150 [ 183.571757][ T7989] get_signal+0x12fc/0x13f0 [ 183.576277][ T7989] arch_do_signal_or_restart+0xc2/0x800 [ 183.581887][ T7989] ? __ia32_sys_get_robust_list+0x110/0x110 [ 183.587841][ T7989] ? get_sigframe_size+0x20/0x20 [ 183.592816][ T7989] ? exit_to_user_mode_loop+0x3b/0x110 [ 183.598346][ T7989] exit_to_user_mode_loop+0x70/0x110 [ 183.603650][ T7989] exit_to_user_mode_prepare+0xee/0x180 [ 183.609294][ T7989] syscall_exit_to_user_mode+0x1a/0x50 [ 183.614769][ T7989] do_syscall_64+0x61/0xa0 [ 183.619255][ T7989] ? clear_bhb_loop+0x40/0x90 [ 183.624459][ T7989] ? clear_bhb_loop+0x40/0x90 [ 183.629162][ T7989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.635059][ T7989] RIP: 0033:0x7fe160d9c799 [ 183.639511][ T7989] Code: Unable to access opcode bytes at 0x7fe160d9c76f. [ 183.646526][ T7989] RSP: 002b:00007fe161cb20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 183.655060][ T7989] RAX: fffffffffffffe00 RBX: 00007fe161015fa8 RCX: 00007fe160d9c799 [ 183.663075][ T7989] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe161015fa8 [ 183.671076][ T7989] RBP: 00007fe161015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 183.679079][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.687072][ T7989] R13: 00007fe161016038 R14: 00007ffec0e01010 R15: 00007ffec0e010f8 [ 183.695082][ T7989] [ 183.698157][ T7989] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.705438][ T7989] CPU: 1 PID: 7989 Comm: syz.2.730 Not tainted syzkaller #0 [ 183.712713][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.722758][ T7989] Call Trace: [ 183.726029][ T7989] [ 183.728954][ T7989] dump_stack_lvl+0x18c/0x250 [ 183.733633][ T7989] ? show_regs_print_info+0x20/0x20 [ 183.738827][ T7989] ? load_image+0x400/0x400 [ 183.743328][ T7989] panic+0x2dc/0x730 [ 183.747218][ T7989] ? bpf_jit_dump+0xd0/0xd0 [ 183.751723][ T7989] __warn+0x2e0/0x470 [ 183.755695][ T7989] ? perf_pending_task+0x35c/0x470 [ 183.760801][ T7989] ? perf_pending_task+0x35c/0x470 [ 183.765906][ T7989] report_bug+0x2be/0x4f0 [ 183.770238][ T7989] ? perf_pending_task+0x35c/0x470 [ 183.775350][ T7989] ? perf_pending_task+0x35c/0x470 [ 183.780464][ T7989] ? perf_pending_task+0x35e/0x470 [ 183.785592][ T7989] handle_bug+0xcf/0x120 [ 183.789846][ T7989] exc_invalid_op+0x1a/0x50 [ 183.794349][ T7989] asm_exc_invalid_op+0x1a/0x20 [ 183.799196][ T7989] RIP: 0010:perf_pending_task+0x35c/0x470 [ 183.804925][ T7989] Code: ff 84 db 75 14 e8 74 e0 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d5 ff e8 7b 61 4f ff eb e5 e8 54 e0 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e0 d5 ff 48 c7 c7 70 f3 1c 8d 4c 89 f6 [ 183.824532][ T7989] RSP: 0018:ffffc900197479c0 EFLAGS: 00010293 [ 183.830602][ T7989] RAX: ffffffff81b13c0c RBX: ffff88801b674d88 RCX: ffff888023830000 [ 183.838572][ T7989] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 183.846532][ T7989] RBP: 0000000000000001 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 183.854494][ T7989] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff888023830000 [ 183.862459][ T7989] R13: ffff88805d088930 R14: ffff88801b674b48 R15: 1ffff110036ce969 [ 183.870432][ T7989] ? perf_pending_task+0x35c/0x470 [ 183.875552][ T7989] task_work_run+0x1d4/0x260 [ 183.880145][ T7989] ? task_work_cancel+0x220/0x220 [ 183.885178][ T7989] do_exit+0x95a/0x2460 [ 183.889342][ T7989] ? put_task_struct+0xc0/0xc0 [ 183.894104][ T7989] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 183.900076][ T7989] ? get_signal+0x1068/0x13f0 [ 183.904742][ T7989] ? lock_chain_count+0x20/0x20 [ 183.909587][ T7989] ? _raw_spin_lock_irq+0xbb/0xf0 [ 183.914600][ T7989] do_group_exit+0x21b/0x2d0 [ 183.919183][ T7989] ? lockdep_hardirqs_on+0x98/0x150 [ 183.924373][ T7989] get_signal+0x12fc/0x13f0 [ 183.928976][ T7989] arch_do_signal_or_restart+0xc2/0x800 [ 183.934516][ T7989] ? __ia32_sys_get_robust_list+0x110/0x110 [ 183.940401][ T7989] ? get_sigframe_size+0x20/0x20 [ 183.945341][ T7989] ? exit_to_user_mode_loop+0x3b/0x110 [ 183.950800][ T7989] exit_to_user_mode_loop+0x70/0x110 [ 183.956077][ T7989] exit_to_user_mode_prepare+0xee/0x180 [ 183.961703][ T7989] syscall_exit_to_user_mode+0x1a/0x50 [ 183.967153][ T7989] do_syscall_64+0x61/0xa0 [ 183.971569][ T7989] ? clear_bhb_loop+0x40/0x90 [ 183.976238][ T7989] ? clear_bhb_loop+0x40/0x90 [ 183.980908][ T7989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.986789][ T7989] RIP: 0033:0x7fe160d9c799 [ 183.991191][ T7989] Code: Unable to access opcode bytes at 0x7fe160d9c76f. [ 183.998283][ T7989] RSP: 002b:00007fe161cb20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 184.006687][ T7989] RAX: fffffffffffffe00 RBX: 00007fe161015fa8 RCX: 00007fe160d9c799 [ 184.014648][ T7989] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe161015fa8 [ 184.022632][ T7989] RBP: 00007fe161015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 184.030618][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.038588][ T7989] R13: 00007fe161016038 R14: 00007ffec0e01010 R15: 00007ffec0e010f8 [ 184.046567][ T7989] [ 184.049904][ T7989] Kernel Offset: disabled [ 184.054219][ T7989] Rebooting in 86400 seconds..