last executing test programs: 4.141351943s ago: executing program 2 (id=2045): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x28) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x16a0}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (fail_nth: 6) 3.673245608s ago: executing program 2 (id=2048): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000000040)={'ip6gretap0\x00', @local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r4, r3}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 2.726865355s ago: executing program 2 (id=2056): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000000000003000000030000000300000004000000030000000000000000000005000000000000005f4f"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x7, 0xfffff018}, {0x6, 0x2, 0x4, 0x4}]}) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c34, 0x410, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x900c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000640)=ANY=[], 0x0, 0x32}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, r1, 0x0) socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000200)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f00000009c0)="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", 0x136}], 0x1}, 0x4c045) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x3, 0x0, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) close(r7) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x29, 0x35, 0x0, 0x42) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="9147", 0x2}, {&(0x7f00000007c0)="100e216b38ad6f119d2e4e70b5830842a9baaa2834e12cd3d053b3121b15a0e2e33fc2d0df58ba9023bd850f3280c356e4abb515dcdbe4381e2f05df74f28c4c8eae652ba40df22c86ffe50156222622dde78928d25b8cee125c8dfb8e9a4bc3139de863e87dc66e91e453fe4891ade4753db0de39ca7ad3146f282a1d82c7c1078604f4d72249088dafb33b0ce075b4c5064df8d09a4ef93758610381de8bca4cef1249312e8461b8808515c08f2eb4fdbd78846d90e0986ab7937a7e0d87ab5591068b530715c6ec3fda48e1b3f1bd691d5ac6cf47381d1aba284e1f099678bb", 0xe1}, {&(0x7f00000008c0)="71732625eeeb568ec49725c354a8b740e00ae2aafc7acb60fc8c91bcfa14ff85f1182e7e7059bd18c35310e1f5a7be26f320d458281607333175b941385942b00873ecdcd5db238af9fbe7923d428b12aaf94d330e76b5c225b907daeaf987bdf3c08471b63ff9d4e37e8ea950a1c8600a3c38779eb9f220aa", 0x79}, {&(0x7f0000000940)="5398e81b2d06067033c9e75ba8b8e286926a637b72fe2b169b367d841e8eaef057624d91ddb50789cb26f4dc60fc26a2c0", 0x31}], 0x4}, 0x3e11333f931dd343) 2.617484183s ago: executing program 0 (id=2058): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000600)="d220ddf8ff17ab96f0ded75d86ddce", 0x0, 0x287, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001c40)) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.617242583s ago: executing program 1 (id=2059): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006400000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2.541149198s ago: executing program 3 (id=2060): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80040000000, 0x10005}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000001d0000000b000000b648dc7c0000e0ff"], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="f4001100052b3325fe8007000046caf8a8e4080911a342d2ceeebc08368fcee37dc5934b", 0x24}], 0x1}, 0x20040010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffe38, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.450483779s ago: executing program 1 (id=2061): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001600)="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", 0x481}], 0x1, 0x0, 0x1d0}, 0x8811) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000940), 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x20000844) 2.387417936s ago: executing program 2 (id=2062): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/293], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x20003800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c000000420015000300000600000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x16c5, r3}, 0x38) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x9d, &(0x7f0000000240), 0x0, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0x86, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) write$cgroup_freezer_state(r4, 0x0, 0x71) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = getpid() r6 = perf_event_open(0x0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$kcm(0x15, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x5, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}, 0x8000) close(r7) 2.36095468s ago: executing program 0 (id=2063): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe04a1190008800d00000e03600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f00a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42abbcbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000000000000000", 0xd8}], 0x1}, 0x0) 2.324980203s ago: executing program 1 (id=2064): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) 2.322119833s ago: executing program 4 (id=2065): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x48a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000009c0)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000380)=""/186, 0xba}, {&(0x7f0000000440)=""/203, 0xcb}, {0x0}, {&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000600)=""/246, 0xf6}, {&(0x7f0000000700)=""/243, 0xf3}, {&(0x7f0000000800)=""/192, 0xc0}], 0x9, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x100) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000a00)='cpu.stat\x00', 0x0, 0x0) 2.083247934s ago: executing program 1 (id=2066): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000840)=ANY=[], 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000001c0)="348b0d15", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6b, 0x8, 0x3, 0x10000, r4, 0x2, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x5, @void, @value, @value=r5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000140), 0xca, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r6, &(0x7f0000001500)="04ba394fcff94d2dbdd0e6eede7d9fc12177009190d26f1c01da2c8683e573f4df42eddafd23b1eb4ac47d12d4de9f56a4d8ad8f64fdbbca7ab9208927c22037325524e02c1b8476393c7519377f1c590088a2903348169ccabd4e23e6be2f72c20eed5da0ecc100f14e1f0c8f034eea6698ecd6bfb6206e92e681a56211b329b72d43cfa481b60159cf8102ae0e971b5a839c35201e586114bd74978734ee3bb263ed1647e6a1cdcfa6c30b797255bf46883fab28f9039e", &(0x7f0000000200)=""/31}, 0x20) 2.083098414s ago: executing program 0 (id=2067): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000000040)={'ip6gretap0\x00', @local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r4, r3}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 2.039003715s ago: executing program 4 (id=2068): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r3, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000040)=0x1) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.990101095s ago: executing program 3 (id=2069): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000100)=""/255, 0xff, 0x0, &(0x7f0000000200)=""/81, 0x51}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r3, 0x0, 0x1ba8847c99}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000edf7e30000000000000095f6c4ba08d143"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) 1.893451825s ago: executing program 1 (id=2070): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000000000003000000030000000300000004000000030000000000000000000005000000000000005f4f"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x7, 0xfffff018}, {0x6, 0x2, 0x4, 0x4}]}) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c34, 0x410, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x900c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000640)=ANY=[], 0x0, 0x32}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, r1, 0x0) socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000200)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f00000009c0)="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", 0x136}], 0x1}, 0x4c045) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x3, 0x0, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) close(r7) close(r8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x29, 0x35, 0x0, 0x42) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="914781cb", 0x4}, {&(0x7f00000007c0)="100e216b38ad6f119d2e4e70b5830842a9baaa2834e12cd3d053b3121b15a0e2e33fc2d0df58ba9023bd850f3280c356e4abb515dcdbe4381e2f05df74f28c4c8eae652ba40df22c86ffe50156222622dde78928d25b8cee125c8dfb8e9a4bc3139de863e87dc66e91e453fe4891ade4753db0de39ca7ad3146f282a1d82c7c1078604f4d72249088dafb33b0ce075b4c5064df8d09a4ef93758610381de8bca4cef1249312e8461b8808515c08f2eb4fdbd78846d90e0986ab7937a7e0d87ab5591068b530715c6ec3fda48e1b3f1bd691d5ac6cf47381d1aba", 0xda}, {&(0x7f00000008c0)="71732625eeeb568ec49725c354a8b740e00ae2aafc7acb60fc8c91bcfa14ff85f1182e7e7059bd18c35310e1f5a7be26f320d458281607333175b941385942b00873ecdcd5db238af9fbe7923d428b12aaf94d330e76b5c225b907daeaf987bdf3c08471b63ff9d4e37e8ea950a1c8600a3c38779eb9f220aa", 0x79}, {&(0x7f0000000940)="5398e81b2d06067033c9e75ba8b8e286926a637b72fe2b169b367d841e8eaef057624d91ddb50789cb26f4dc60fc26a2c0", 0x31}], 0x4}, 0x3e11333f931dd343) 1.855830918s ago: executing program 4 (id=2071): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @broadcast}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe41, &(0x7f0000000940)}, 0x20040844) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.834048213s ago: executing program 3 (id=2072): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000000000003000000030000000300000004000000030000000000000000000005000000000000005f4f"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x7, 0xfffff018}, {0x6, 0x2, 0x4, 0x4}]}) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c34, 0x410, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x900c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000640)=ANY=[], 0x0, 0x32}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, r1, 0x0) socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000200)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f00000009c0)="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", 0x136}], 0x1}, 0x4c045) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x3, 0x0, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) close(r7) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x29, 0x35, 0x0, 0x42) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="9147", 0x2}, {&(0x7f00000007c0)="100e216b38ad6f119d2e4e70b5830842a9baaa2834e12cd3d053b3121b15a0e2e33fc2d0df58ba9023bd850f3280c356e4abb515dcdbe4381e2f05df74f28c4c8eae652ba40df22c86ffe50156222622dde78928d25b8cee125c8dfb8e9a4bc3139de863e87dc66e91e453fe4891ade4753db0de39ca7ad3146f282a1d82c7c1078604f4d72249088dafb33b0ce075b4c5064df8d09a4ef93758610381de8bca4cef1249312e8461b8808515c08f2eb4fdbd78846d90e0986ab7937a7e0d87ab5591068b530715c6ec3fda48e1b3f1bd691d5ac6cf47381d1aba284e1f099678bb", 0xe1}, {&(0x7f00000008c0)="71732625eeeb568ec49725c354a8b740e00ae2aafc7acb60fc8c91bcfa14ff85f1182e7e7059bd18c35310e1f5a7be26f320d458281607333175b941385942b00873ecdcd5db238af9fbe7923d428b12aaf94d330e76b5c225b907daeaf987bdf3c08471b63ff9d4e37e8ea950a1c8600a3c38779eb9f220aa", 0x79}, {&(0x7f0000000940)="5398e81b2d06067033c9e75ba8b8e286926a637b72fe2b169b367d841e8eaef057624d91ddb50789cb26f4dc60fc26a2c0", 0x31}], 0x4}, 0x3e11333f931dd343) 1.701615436s ago: executing program 4 (id=2073): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000840)=ANY=[], 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000001c0)="348b0d15", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) (fail_nth: 4) 1.693992894s ago: executing program 2 (id=2074): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000600)="d220ddf8ff17ab96f0ded75d86ddce", 0x0, 0x287, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001c40)) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.655441276s ago: executing program 0 (id=2075): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r0, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0], 0x0, 0xea, &(0x7f0000001840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x1a, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0xfffffffffffffeb8, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x20003800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, 0x0, 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001440)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r9) write$cgroup_freezer_state(r9, 0x0, 0x71) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001780)=r6, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="232f00000025ef034b220a8a941a5996c33b6df28d5ac17bb28949b7cdebd315d3ed15dffdf7d7b6b25a159937d15541eb", @ANYRES32=r9, @ANYBLOB='\t\x00'/20, @ANYRES32=r5, @ANYRES32=r10, @ANYBLOB="04000000020000000200"/28], 0x50) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_lsm={0x1d, 0xc, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x1, 0xb, 0xfd0e82a7c788b072, 0xb, 0x1, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffe00}, @jmp={0x5, 0x1, 0x1, 0x8, 0x6, 0x30, 0x1}]}, &(0x7f0000001500)='syzkaller\x00', 0xf, 0x6, &(0x7f0000001540)=""/6, 0x40f00, 0x50, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, 0x0, 0x7, &(0x7f00000015c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001600)=[{0x3, 0x1, 0x5, 0x6}, {0x1, 0x5, 0x1, 0x67d7d0e8207119de}, {0x4, 0x1, 0x8, 0x8}, {0x1, 0x5, 0x5, 0x1}, {0x2, 0x3, 0x1, 0xc}, {0x1, 0x3, 0x4, 0x7}, {0x0, 0x2, 0x7, 0x3}], 0x10, 0xa}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000001740)={r8, r11}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffff8fe, 0xfffffffe, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r12 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000007000000000000000002000006040000000000000000000000000000000000000000000000000000090000000000000000000009"], 0x0, 0x5a}, 0x20) setsockopt$sock_attach_bpf(r12, 0x84, 0x9, &(0x7f0000000380), 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) 1.37759175s ago: executing program 4 (id=2076): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) 1.370276499s ago: executing program 4 (id=2077): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x11b, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0x4, 0x5, 0x9, 0x0, 0x8, 0x82024, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0xb}, 0x105500, 0x8, 0x1f, 0x4, 0x2, 0x4000006, 0x2, 0x0, 0xf78, 0x0, 0x8}, r0, 0x2, r3, 0x9) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18121927830dcf3c07b7d2c6e6dc021e00000000009500"/45], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.356103866s ago: executing program 2 (id=2078): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008", @ANYBLOB], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1200, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0xdd86, 0x8}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f7000000", 0x2e}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12d25a80648c", 0xd}], 0x1}, 0x4000) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000009000000000000020000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="03000000040000000400000098000000000000002871b272ad6456248a7fb5cb1fba13e70b598d0d145e9721ecfdf2eb9343a8bc361847f7a154b6e26f7bdb9c185cfe94266092ec48dd4f5929dd804ec9c51e7b04a4e4c9c1ff58405fedc9d7bb736dccb7db49b573e6b264ab68cf366c64d470", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec2}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x1001a8, 0x0, 0x0, 0x4, 0x0, 0xffff0000, 0x9, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 1.304564125s ago: executing program 1 (id=2079): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80040000000, 0x10005}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000001d0000000b000000b648dc7c0000e0ff"], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="f4001100052b3325fe8007000046caf8a8e4080911a342d2ceeebc08368fcee37dc5934b", 0x24}], 0x1}, 0x20040010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffe38, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.304036496s ago: executing program 3 (id=2080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000840)=ANY=[], 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000001c0)="348b0d15", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16, 0x8000000}, 0x20) 1.291321853s ago: executing program 0 (id=2081): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a001505d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188006ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 989.406401ms ago: executing program 3 (id=2082): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48) 989.106741ms ago: executing program 0 (id=2083): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="5c00400112006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8004000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=2084): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(r0) kernel console output (not intermixed with test programs): irqs_on+0x94/0x140 [ 112.964980][ T5585] do_syscall_64+0x4c/0xa0 [ 112.969483][ T5585] ? clear_bhb_loop+0x30/0x80 [ 112.974160][ T5585] ? clear_bhb_loop+0x30/0x80 [ 112.978940][ T5585] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.985094][ T5585] RIP: 0033:0x7f21e52f3799 [ 112.989535][ T5585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.009240][ T5585] RSP: 002b:00007f21e354d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.017664][ T5585] RAX: ffffffffffffffda RBX: 00007f21e556cfa0 RCX: 00007f21e52f3799 [ 113.025640][ T5585] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003 [ 113.033619][ T5585] RBP: 00007f21e354d090 R08: 0000000000000000 R09: 0000000000000000 [ 113.041595][ T5585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.049700][ T5585] R13: 00007f21e556d038 R14: 00007f21e556cfa0 R15: 00007ffccaa455e8 [ 113.057687][ T5585] [ 113.070023][ T5583] netlink: 132 bytes leftover after parsing attributes in process `syz.3.441'. [ 113.146625][ T5587] netlink: 'syz.2.444': attribute type 21 has an invalid length. [ 113.408203][ T5599] tun0: tun_chr_ioctl cmd 1074025677 [ 113.414264][ T5599] tun0: linktype set to 768 [ 113.895936][ T5615] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 113.932884][ T5615] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.452'. [ 114.014546][ T5626] netlink: 132 bytes leftover after parsing attributes in process `syz.3.454'. [ 114.198456][ T5633] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 114.226638][ T5633] netlink: 'syz.1.457': attribute type 8 has an invalid length. [ 114.328587][ T5633] netlink: 132 bytes leftover after parsing attributes in process `syz.1.457'. [ 114.390443][ T5636] IPv6: Can't replace route, no match found [ 114.689949][ T5649] netlink: 'syz.0.462': attribute type 3 has an invalid length. [ 114.773616][ T5649] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.462'. [ 115.682374][ T5670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.468'. [ 115.871657][ T5681] device bridge_slave_1 left promiscuous mode [ 115.910691][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.035073][ T5681] device bridge_slave_0 left promiscuous mode [ 116.138518][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.540423][ T5688] netlink: 'syz.3.472': attribute type 2 has an invalid length. [ 116.553108][ T5688] netlink: 'syz.3.472': attribute type 8 has an invalid length. [ 116.573223][ T5688] netlink: 132 bytes leftover after parsing attributes in process `syz.3.472'. [ 116.633701][ T5696] netlink: 'syz.2.475': attribute type 39 has an invalid length. [ 116.976741][ T5700] netlink: 'syz.3.477': attribute type 10 has an invalid length. [ 117.781870][ T5702] pimreg: tun_chr_ioctl cmd 2147767521 [ 118.061043][ T5735] netlink: 'syz.2.489': attribute type 39 has an invalid length. [ 118.169266][ T5732] netlink: 'syz.3.488': attribute type 2 has an invalid length. [ 118.209255][ T5732] netlink: 'syz.3.488': attribute type 8 has an invalid length. [ 118.221868][ T5732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.488'. [ 118.450716][ T5743] netlink: 'syz.0.491': attribute type 2 has an invalid length. [ 118.530136][ T5743] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.491'. [ 118.859709][ T5761] netlink: 10 bytes leftover after parsing attributes in process `syz.2.495'. [ 118.946886][ T5763] netlink: 'syz.4.498': attribute type 12 has an invalid length. [ 118.967147][ T5763] netlink: 132 bytes leftover after parsing attributes in process `syz.4.498'. [ 118.997549][ T5766] netlink: 'syz.3.500': attribute type 39 has an invalid length. [ 119.471053][ T5776] netlink: 156 bytes leftover after parsing attributes in process `syz.1.501'. [ 119.626534][ T5773] netlink: 132 bytes leftover after parsing attributes in process `syz.0.502'. [ 120.295553][ T5794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.621426][ T5794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.654934][ T5794] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 120.857502][ T5818] netlink: 103332 bytes leftover after parsing attributes in process `syz.0.515'. [ 121.285328][ T5828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.519'. [ 122.353870][ T5858] validate_nla: 6 callbacks suppressed [ 122.353911][ T5858] netlink: 'syz.4.531': attribute type 19 has an invalid length. [ 122.415172][ T5858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.531'. [ 122.536713][ T5865] netlink: 'syz.2.534': attribute type 2 has an invalid length. [ 122.647122][ T5865] netlink: 'syz.2.534': attribute type 8 has an invalid length. [ 122.678841][ T5865] netlink: 132 bytes leftover after parsing attributes in process `syz.2.534'. [ 122.912671][ T5884] FAULT_INJECTION: forcing a failure. [ 122.912671][ T5884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.947477][ T5884] CPU: 0 PID: 5884 Comm: syz.4.538 Not tainted syzkaller #0 [ 122.954830][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.964923][ T5884] Call Trace: [ 122.968229][ T5884] [ 122.971215][ T5884] dump_stack_lvl+0x188/0x250 [ 122.975933][ T5884] ? show_regs_print_info+0x20/0x20 [ 122.981165][ T5884] ? load_image+0x400/0x400 [ 122.985711][ T5884] ? __lock_acquire+0x7d10/0x7d10 [ 122.990772][ T5884] should_fail+0x38c/0x4c0 [ 122.995222][ T5884] _copy_from_user+0x2e/0x170 [ 122.999924][ T5884] xsk_setsockopt+0x329/0x7e0 [ 123.004634][ T5884] ? xsk_poll+0x570/0x570 [ 123.008982][ T5884] ? __fget_files+0x40f/0x480 [ 123.013801][ T5884] ? aa_sock_opt_perm+0x74/0x100 [ 123.018767][ T5884] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 123.024326][ T5884] ? security_socket_setsockopt+0x7a/0xa0 [ 123.030154][ T5884] ? xsk_poll+0x570/0x570 [ 123.034506][ T5884] __sys_setsockopt+0x2bf/0x3d0 [ 123.039384][ T5884] __x64_sys_setsockopt+0xb1/0xc0 [ 123.044530][ T5884] do_syscall_64+0x4c/0xa0 [ 123.048964][ T5884] ? clear_bhb_loop+0x30/0x80 [ 123.053672][ T5884] ? clear_bhb_loop+0x30/0x80 [ 123.058365][ T5884] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.064275][ T5884] RIP: 0033:0x7f1dcfbeb799 [ 123.068714][ T5884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.088338][ T5884] RSP: 002b:00007f1dcde24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 123.096773][ T5884] RAX: ffffffffffffffda RBX: 00007f1dcfe65090 RCX: 00007f1dcfbeb799 [ 123.104765][ T5884] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 123.112750][ T5884] RBP: 00007f1dcde24090 R08: 0000000000000004 R09: 0000000000000000 [ 123.120728][ T5884] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 123.128697][ T5884] R13: 00007f1dcfe65128 R14: 00007f1dcfe65090 R15: 00007ffd44bae648 [ 123.136687][ T5884] [ 123.155991][ T5887] netlink: 'syz.1.540': attribute type 21 has an invalid length. [ 123.187714][ T5887] netlink: 'syz.1.540': attribute type 6 has an invalid length. [ 123.230801][ T5876] netlink: 103332 bytes leftover after parsing attributes in process `syz.3.536'. [ 123.242590][ T5887] netlink: 132 bytes leftover after parsing attributes in process `syz.1.540'. [ 123.938400][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 124.271781][ T5910] netlink: 'syz.0.547': attribute type 3 has an invalid length. [ 124.309263][ T5910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.547'. [ 124.609053][ T5902] netlink: 'syz.4.543': attribute type 6 has an invalid length. [ 124.796297][ T5917] netlink: 'syz.1.549': attribute type 2 has an invalid length. [ 124.954029][ T5917] netlink: 'syz.1.549': attribute type 8 has an invalid length. [ 125.036904][ T5917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.549'. [ 126.257497][ T5947] netlink: 'syz.3.562': attribute type 6 has an invalid length. [ 126.372828][ T5951] netlink: 103332 bytes leftover after parsing attributes in process `syz.1.561'. [ 127.133925][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 127.398340][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 127.424695][ T5964] validate_nla: 1 callbacks suppressed [ 127.424731][ T5964] netlink: 'syz.3.566': attribute type 17 has an invalid length. [ 127.444375][ T5964] netlink: 152 bytes leftover after parsing attributes in process `syz.3.566'. [ 127.489390][ T5964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.086835][ T5998] netlink: 'syz.2.578': attribute type 6 has an invalid length. [ 128.553951][ T6010] netlink: 'syz.0.582': attribute type 2 has an invalid length. [ 128.583655][ T6010] netlink: 'syz.0.582': attribute type 8 has an invalid length. [ 128.584922][ T6015] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.584'. [ 128.614800][ T6015] openvswitch: netlink: Message has 20476 unknown bytes. [ 128.626031][ T6010] netlink: 132 bytes leftover after parsing attributes in process `syz.0.582'. [ 128.719008][ T6024] netlink: 'syz.1.586': attribute type 153 has an invalid length. [ 128.730945][ T6024] netlink: 69544 bytes leftover after parsing attributes in process `syz.1.586'. [ 128.787398][ T6025] netlink: 'syz.3.588': attribute type 2 has an invalid length. [ 128.811395][ T6025] netlink: 'syz.3.588': attribute type 8 has an invalid length. [ 128.843813][ T6025] netlink: 132 bytes leftover after parsing attributes in process `syz.3.588'. [ 128.943736][ T6021] IPv6: Can't replace route, no match found [ 129.035081][ T6038] netlink: 132 bytes leftover after parsing attributes in process `syz.1.591'. [ 129.097631][ T6031] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 129.751784][ T6065] netlink: 'syz.4.600': attribute type 13 has an invalid length. [ 129.881804][ T6065] netlink: 164 bytes leftover after parsing attributes in process `syz.4.600'. [ 129.963305][ T6065] syz_tun: refused to change device tx_queue_len [ 129.992538][ T6059] netlink: 'syz.2.599': attribute type 2 has an invalid length. [ 130.006719][ T6059] netlink: 'syz.2.599': attribute type 8 has an invalid length. [ 130.058108][ T6059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.599'. [ 130.491636][ T6074] netlink: 132 bytes leftover after parsing attributes in process `syz.4.604'. [ 131.229011][ T6107] FAULT_INJECTION: forcing a failure. [ 131.229011][ T6107] name failslab, interval 1, probability 0, space 0, times 0 [ 131.272541][ T6107] CPU: 0 PID: 6107 Comm: syz.4.614 Not tainted syzkaller #0 [ 131.279888][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.290005][ T6107] Call Trace: [ 131.293294][ T6107] [ 131.296342][ T6107] dump_stack_lvl+0x188/0x250 [ 131.301218][ T6107] ? show_regs_print_info+0x20/0x20 [ 131.306507][ T6107] ? load_image+0x400/0x400 [ 131.311114][ T6107] ? __might_sleep+0xf0/0xf0 [ 131.315789][ T6107] ? __lock_acquire+0x7d10/0x7d10 [ 131.320830][ T6107] should_fail+0x38c/0x4c0 [ 131.325253][ T6107] should_failslab+0x5/0x20 [ 131.329760][ T6107] slab_pre_alloc_hook+0x51/0xc0 [ 131.334796][ T6107] ? bpf_insn_prepare_dump+0xad/0x840 [ 131.340217][ T6107] __kmalloc_track_caller+0x69/0x330 [ 131.345505][ T6107] ? bpf_insn_prepare_dump+0xad/0x840 [ 131.350886][ T6107] kmemdup+0x22/0x50 [ 131.354785][ T6107] bpf_insn_prepare_dump+0xad/0x840 [ 131.359992][ T6107] ? attach_type_to_prog_type+0x70/0x70 [ 131.365637][ T6107] ? bpf_lsm_capable+0x5/0x10 [ 131.370318][ T6107] ? security_capable+0x85/0xb0 [ 131.375370][ T6107] bpf_obj_get_info_by_fd+0x1597/0x2dc0 [ 131.381214][ T6107] ? bpf_map_get_fd_by_id+0x310/0x310 [ 131.386715][ T6107] ? trace_event_raw_event_lock+0x270/0x270 [ 131.392643][ T6107] ? __might_fault+0xb3/0x110 [ 131.397328][ T6107] ? bpf_lsm_bpf+0x5/0x10 [ 131.401658][ T6107] ? security_bpf+0x7a/0xa0 [ 131.406253][ T6107] __sys_bpf+0x484/0x6f0 [ 131.410505][ T6107] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 131.416746][ T6107] ? bpf_link_show_fdinfo+0x380/0x380 [ 131.422126][ T6107] ? rcu_nmi_exit+0x6f/0xf0 [ 131.426648][ T6107] ? vtime_user_exit+0x2c8/0x3e0 [ 131.431874][ T6107] __x64_sys_bpf+0x78/0x90 [ 131.436383][ T6107] do_syscall_64+0x4c/0xa0 [ 131.440798][ T6107] ? clear_bhb_loop+0x30/0x80 [ 131.445470][ T6107] ? clear_bhb_loop+0x30/0x80 [ 131.450145][ T6107] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.456042][ T6107] RIP: 0033:0x7f1dcfbeb799 [ 131.460469][ T6107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.480270][ T6107] RSP: 002b:00007f1dcde45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.488774][ T6107] RAX: ffffffffffffffda RBX: 00007f1dcfe64fa0 RCX: 00007f1dcfbeb799 [ 131.497010][ T6107] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 131.504981][ T6107] RBP: 00007f1dcde45090 R08: 0000000000000000 R09: 0000000000000000 [ 131.513219][ T6107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.521277][ T6107] R13: 00007f1dcfe65038 R14: 00007f1dcfe64fa0 R15: 00007ffd44bae648 [ 131.529264][ T6107] [ 131.535873][ T6104] device ipvlan1 entered promiscuous mode [ 131.577587][ T6104] team0: Device ipvlan1 failed to register rx_handler [ 131.776826][ T6104] syz.1.613 (6104) used greatest stack depth: 19120 bytes left [ 131.856993][ T144] wlan1: Trigger new scan to find an IBSS to join [ 132.620059][ T6135] validate_nla: 3 callbacks suppressed [ 132.620095][ T6135] netlink: 'syz.3.624': attribute type 3 has an invalid length. [ 132.698405][ T6142] __nla_validate_parse: 1 callbacks suppressed [ 132.698424][ T6142] netlink: 160764 bytes leftover after parsing attributes in process `syz.3.624'. [ 132.743773][ T6137] À: port 1(vlan0) entered blocking state [ 132.776330][ T6137] À: port 1(vlan0) entered disabled state [ 132.777376][ T6135] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.624'. [ 132.819079][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.819343][ T6148] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.629'. [ 132.825472][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.857415][ T6137] device vlan0 entered promiscuous mode [ 133.432735][ T6166] sctp: [Deprecated]: syz.1.636 (pid 6166) Use of int in maxseg socket option. [ 133.432735][ T6166] Use struct sctp_assoc_value instead [ 134.274283][ T6194] device syzkaller0 entered promiscuous mode [ 134.851062][ T6222] netlink: 60 bytes leftover after parsing attributes in process `syz.1.653'. [ 134.948187][ T6218] netlink: 'syz.1.653': attribute type 2 has an invalid length. [ 135.107014][ T6218] netlink: 14 bytes leftover after parsing attributes in process `syz.1.653'. [ 135.430815][ T6244] FAULT_INJECTION: forcing a failure. [ 135.430815][ T6244] name failslab, interval 1, probability 0, space 0, times 0 [ 135.437759][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 135.496679][ T6244] CPU: 1 PID: 6244 Comm: syz.4.660 Not tainted syzkaller #0 [ 135.504287][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.514662][ T6244] Call Trace: [ 135.517971][ T6244] [ 135.520921][ T6244] dump_stack_lvl+0x188/0x250 [ 135.525799][ T6244] ? show_regs_print_info+0x20/0x20 [ 135.531025][ T6244] ? load_image+0x400/0x400 [ 135.535565][ T6244] ? __might_sleep+0xf0/0xf0 [ 135.540270][ T6244] ? __lock_acquire+0x7d10/0x7d10 [ 135.545341][ T6244] should_fail+0x38c/0x4c0 [ 135.549804][ T6244] should_failslab+0x5/0x20 [ 135.554337][ T6244] slab_pre_alloc_hook+0x51/0xc0 [ 135.559401][ T6244] kmem_cache_alloc_node+0x47/0x2d0 [ 135.564619][ T6244] ? __alloc_skb+0xf4/0x750 [ 135.569142][ T6244] __alloc_skb+0xf4/0x750 [ 135.573497][ T6244] sk_stream_alloc_skb+0x1fa/0xa60 [ 135.578647][ T6244] tcp_sendmsg_locked+0xc4e/0x35f0 [ 135.583801][ T6244] ? aa_sk_perm+0x910/0x910 [ 135.588361][ T6244] ? __lock_acquire+0x12e8/0x7d10 [ 135.593429][ T6244] ? mark_lock+0x94/0x320 [ 135.597790][ T6244] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 135.603822][ T6244] ? tcp_free_fastopen_req+0x70/0x70 [ 135.609152][ T6244] tcp_sendmsg+0x2b/0x40 [ 135.613430][ T6244] ? inet_send_prepare+0x260/0x260 [ 135.618566][ T6244] ____sys_sendmsg+0x5b7/0x8f0 [ 135.623545][ T6244] ? __sys_sendmsg_sock+0x30/0x30 [ 135.628604][ T6244] ? import_iovec+0x6f/0xa0 [ 135.633135][ T6244] ___sys_sendmsg+0x236/0x2e0 [ 135.637845][ T6244] ? __sys_sendmsg+0x2a0/0x2a0 [ 135.642658][ T6244] ? vfs_write+0x8b2/0xd60 [ 135.647129][ T6244] __se_sys_sendmsg+0x1af/0x290 [ 135.652011][ T6244] ? __x64_sys_sendmsg+0x80/0x80 [ 135.656971][ T6244] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 135.663001][ T6244] ? lockdep_hardirqs_on+0x94/0x140 [ 135.668235][ T6244] do_syscall_64+0x4c/0xa0 [ 135.672678][ T6244] ? clear_bhb_loop+0x30/0x80 [ 135.677379][ T6244] ? clear_bhb_loop+0x30/0x80 [ 135.682120][ T6244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.688129][ T6244] RIP: 0033:0x7f1dcfbeb799 [ 135.692577][ T6244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.712213][ T6244] RSP: 002b:00007f1dcde45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.720659][ T6244] RAX: ffffffffffffffda RBX: 00007f1dcfe64fa0 RCX: 00007f1dcfbeb799 [ 135.728674][ T6244] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000009 [ 135.736935][ T6244] RBP: 00007f1dcde45090 R08: 0000000000000000 R09: 0000000000000000 [ 135.744935][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.752933][ T6244] R13: 00007f1dcfe65038 R14: 00007f1dcfe64fa0 R15: 00007ffd44bae648 [ 135.760952][ T6244] [ 135.831164][ T6253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.861358][ T156] wlan1: Trigger new scan to find an IBSS to join [ 136.185430][ T6264] netlink: 'syz.2.667': attribute type 2 has an invalid length. [ 136.195710][ T6264] netlink: 'syz.2.667': attribute type 8 has an invalid length. [ 136.226243][ T6264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.667'. [ 136.934487][ T6297] netlink: 'syz.2.677': attribute type 10 has an invalid length. [ 137.009689][ T6290] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.674'. [ 137.059741][ T6297] team0: Device ipvlan1 failed to register rx_handler [ 137.523015][ T6313] netlink: 'syz.1.683': attribute type 2 has an invalid length. [ 137.545182][ T6313] netlink: 'syz.1.683': attribute type 8 has an invalid length. [ 137.583620][ T6313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.683'. [ 137.857470][ T144] wlan1: Creating new IBSS network, BSSID 32:56:94:d2:da:d5 [ 137.999115][ T6336] netlink: 175084 bytes leftover after parsing attributes in process `syz.2.689'. [ 138.043752][ T6336] netlink: 'syz.2.689': attribute type 6 has an invalid length. [ 138.085506][ T6333] netlink: 'syz.0.688': attribute type 8 has an invalid length. [ 138.122053][ T6333] netlink: 156 bytes leftover after parsing attributes in process `syz.0.688'. [ 138.380662][ T6343] FAULT_INJECTION: forcing a failure. [ 138.380662][ T6343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.416715][ T6343] CPU: 0 PID: 6343 Comm: syz.0.692 Not tainted syzkaller #0 [ 138.424065][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.434139][ T6343] Call Trace: [ 138.437436][ T6343] [ 138.440406][ T6343] dump_stack_lvl+0x188/0x250 [ 138.445145][ T6343] ? show_regs_print_info+0x20/0x20 [ 138.450393][ T6343] ? load_image+0x400/0x400 [ 138.454924][ T6343] ? __lock_acquire+0x7d10/0x7d10 [ 138.460053][ T6343] ? vfs_write+0x8b2/0xd60 [ 138.464508][ T6343] should_fail+0x38c/0x4c0 [ 138.469038][ T6343] _copy_from_user+0x2e/0x170 [ 138.473743][ T6343] __sys_bpf+0x26d/0x6f0 [ 138.478005][ T6343] ? bpf_link_show_fdinfo+0x380/0x380 [ 138.483513][ T6343] ? vtime_user_exit+0x2c8/0x3e0 [ 138.488473][ T6343] __x64_sys_bpf+0x78/0x90 [ 138.492912][ T6343] do_syscall_64+0x4c/0xa0 [ 138.497435][ T6343] ? clear_bhb_loop+0x30/0x80 [ 138.502173][ T6343] ? clear_bhb_loop+0x30/0x80 [ 138.506866][ T6343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.512866][ T6343] RIP: 0033:0x7f21e52f3799 [ 138.517312][ T6343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.536937][ T6343] RSP: 002b:00007f21e354d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.545389][ T6343] RAX: ffffffffffffffda RBX: 00007f21e556cfa0 RCX: 00007f21e52f3799 [ 138.553378][ T6343] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000004 [ 138.561372][ T6343] RBP: 00007f21e354d090 R08: 0000000000000000 R09: 0000000000000000 [ 138.569365][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.577442][ T6343] R13: 00007f21e556d038 R14: 00007f21e556cfa0 R15: 00007ffccaa455e8 [ 138.585460][ T6343] [ 139.201734][ T6321] À: port 1(vlan0) entered blocking state [ 139.217083][ T6321] À: port 1(vlan0) entered disabled state [ 139.900305][ T6321] device vlan0 entered promiscuous mode [ 139.953005][ T6358] netlink: 'syz.1.697': attribute type 2 has an invalid length. [ 139.976501][ T6358] netlink: 'syz.1.697': attribute type 8 has an invalid length. [ 139.985148][ T6358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.697'. [ 140.741867][ T6383] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.704'. [ 140.790833][ T6383] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.704'. [ 140.835988][ T6381] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.704'. [ 140.872174][ T6384] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.704'. [ 141.075989][ T6386] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.705'. [ 141.865787][ T6406] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.711'. [ 141.933481][ T6406] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.711'. [ 143.188021][ T6432] netlink: 'syz.1.718': attribute type 10 has an invalid length. [ 143.246994][ T6435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.718'. [ 143.749597][ T6452] netlink: 'syz.3.725': attribute type 2 has an invalid length. [ 143.791132][ T6452] netlink: 'syz.3.725': attribute type 8 has an invalid length. [ 143.813133][ T6452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.725'. [ 146.064044][ T6509] netlink: 'syz.3.745': attribute type 3 has an invalid length. [ 146.106858][ T6508] netlink: 'syz.3.745': attribute type 3 has an invalid length. [ 146.170119][ T6509] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.745'. [ 146.206656][ T6508] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.745'. [ 146.416273][ T6519] netlink: 'syz.2.747': attribute type 19 has an invalid length. [ 146.461900][ T6519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.747'. [ 146.995475][ T6538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.752'. [ 147.015445][ T6538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.752'. [ 147.560627][ T6559] netlink: 'syz.4.762': attribute type 19 has an invalid length. [ 147.575559][ T6559] netlink: 40 bytes leftover after parsing attributes in process `syz.4.762'. [ 147.978456][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 148.042699][ T6574] netlink: 'syz.0.768': attribute type 10 has an invalid length. [ 148.082925][ T6574] netlink: 40 bytes leftover after parsing attributes in process `syz.0.768'. [ 148.221685][ T6574] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 148.834208][ T6589] FAULT_INJECTION: forcing a failure. [ 148.834208][ T6589] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 148.956683][ T6589] CPU: 1 PID: 6589 Comm: syz.3.773 Not tainted syzkaller #0 [ 148.964019][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.974363][ T6589] Call Trace: [ 148.977852][ T6589] [ 148.980892][ T6589] dump_stack_lvl+0x188/0x250 [ 148.985591][ T6589] ? show_regs_print_info+0x20/0x20 [ 148.990805][ T6589] ? load_image+0x400/0x400 [ 148.995340][ T6589] should_fail+0x38c/0x4c0 [ 148.999964][ T6589] prepare_alloc_pages+0x1e4/0x5f0 [ 149.005208][ T6589] __alloc_pages+0x11b/0x480 [ 149.009917][ T6589] ? zone_statistics+0x170/0x170 [ 149.015230][ T6589] ? alloc_pages+0x438/0x550 [ 149.020017][ T6589] skb_page_frag_refill+0x225/0x4c0 [ 149.025366][ T6589] sk_page_frag_refill+0x4a/0x200 [ 149.030424][ T6589] tcp_sendmsg_locked+0xed8/0x35f0 [ 149.035595][ T6589] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 149.041701][ T6589] ? tcp_free_fastopen_req+0x70/0x70 [ 149.047144][ T6589] tcp_sendmsg+0x2b/0x40 [ 149.051431][ T6589] ? inet_send_prepare+0x260/0x260 [ 149.056654][ T6589] ____sys_sendmsg+0x5b7/0x8f0 [ 149.061437][ T6589] ? __sys_sendmsg_sock+0x30/0x30 [ 149.066477][ T6589] ? import_iovec+0x6f/0xa0 [ 149.071179][ T6589] ___sys_sendmsg+0x236/0x2e0 [ 149.075872][ T6589] ? __sys_sendmsg+0x2a0/0x2a0 [ 149.080656][ T6589] ? vfs_write+0x8b2/0xd60 [ 149.085093][ T6589] __se_sys_sendmsg+0x1af/0x290 [ 149.089946][ T6589] ? __x64_sys_sendmsg+0x80/0x80 [ 149.094881][ T6589] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 149.100881][ T6589] ? lockdep_hardirqs_on+0x94/0x140 [ 149.106085][ T6589] do_syscall_64+0x4c/0xa0 [ 149.110500][ T6589] ? clear_bhb_loop+0x30/0x80 [ 149.115263][ T6589] ? clear_bhb_loop+0x30/0x80 [ 149.120066][ T6589] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.125958][ T6589] RIP: 0033:0x7f3f1ba04799 [ 149.130375][ T6589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.150245][ T6589] RSP: 002b:00007f3f19c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.158762][ T6589] RAX: ffffffffffffffda RBX: 00007f3f1bc7dfa0 RCX: 00007f3f1ba04799 [ 149.166931][ T6589] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003 [ 149.174934][ T6589] RBP: 00007f3f19c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 149.182945][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.191191][ T6589] R13: 00007f3f1bc7e038 R14: 00007f3f1bc7dfa0 R15: 00007ffe7115d708 [ 149.199217][ T6589] [ 149.410154][ T6600] netlink: 'syz.0.776': attribute type 29 has an invalid length. [ 149.452932][ T6600] netlink: 'syz.0.776': attribute type 29 has an invalid length. [ 149.519169][ T6601] netlink: 'syz.0.776': attribute type 29 has an invalid length. [ 149.620709][ T6606] sctp: [Deprecated]: syz.0.776 (pid 6606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.620709][ T6606] Use struct sctp_sack_info instead [ 149.886288][ T6609] netlink: 'syz.3.781': attribute type 21 has an invalid length. [ 149.957061][ T6615] IPv6: Can't replace route, no match found [ 150.245976][ T6620] netlink: 'syz.2.785': attribute type 3 has an invalid length. [ 150.339302][ T6620] netlink: 'syz.2.785': attribute type 4 has an invalid length. [ 150.416605][ T6620] netlink: 'syz.2.785': attribute type 6 has an invalid length. [ 150.426301][ T6630] netlink: 'syz.0.787': attribute type 19 has an invalid length. [ 150.477472][ T6620] netlink: 'syz.2.785': attribute type 15 has an invalid length. [ 150.544001][ T6620] netlink: 'syz.2.785': attribute type 16 has an invalid length. [ 150.573163][ T6630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.787'. [ 150.609063][ T6628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.788'. [ 150.870383][ T6645] sctp: [Deprecated]: syz.4.792 (pid 6645) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.870383][ T6645] Use struct sctp_sack_info instead [ 151.140227][ T6659] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.794'. [ 151.235224][ T6663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.797'. [ 151.274254][ T6659] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.794'. [ 152.328697][ T6686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.803'. [ 152.493307][ T6693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.805'. [ 152.666596][ T6700] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 152.727143][ T6704] sctp: [Deprecated]: syz.2.807 (pid 6704) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.727143][ T6704] Use struct sctp_sack_info instead [ 153.597724][ T6728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.816'. [ 153.936113][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.817'. [ 154.079687][ T6749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.823'. [ 154.205980][ T6762] netlink: set zone limit has 8 unknown bytes [ 154.447438][ T6768] validate_nla: 27 callbacks suppressed [ 154.447456][ T6768] netlink: 'syz.1.829': attribute type 21 has an invalid length. [ 154.518804][ T6771] netlink: 'syz.4.831': attribute type 2 has an invalid length. [ 154.537951][ T6771] netlink: 'syz.4.831': attribute type 8 has an invalid length. [ 155.092518][ T6794] netlink: 'syz.4.840': attribute type 21 has an invalid length. [ 155.538273][ T6810] netlink: 'syz.3.844': attribute type 2 has an invalid length. [ 155.659553][ T6810] netlink: 'syz.3.844': attribute type 8 has an invalid length. [ 155.683600][ T6810] __nla_validate_parse: 4 callbacks suppressed [ 155.683617][ T6810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.844'. [ 155.709627][ T6808] netlink: 'syz.2.843': attribute type 19 has an invalid length. [ 155.768069][ T6808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.843'. [ 157.631556][ T6861] netlink: 188 bytes leftover after parsing attributes in process `syz.4.859'. [ 157.895311][ T6869] netlink: 'syz.0.861': attribute type 2 has an invalid length. [ 157.976760][ T6869] netlink: 'syz.0.861': attribute type 8 has an invalid length. [ 158.050385][ T6869] netlink: 132 bytes leftover after parsing attributes in process `syz.0.861'. [ 158.435236][ T6889] netlink: 'syz.4.865': attribute type 19 has an invalid length. [ 158.563568][ T6889] netlink: 40 bytes leftover after parsing attributes in process `syz.4.865'. [ 158.741390][ T6899] FAULT_INJECTION: forcing a failure. [ 158.741390][ T6899] name failslab, interval 1, probability 0, space 0, times 0 [ 158.796030][ T6899] CPU: 1 PID: 6899 Comm: syz.3.869 Not tainted syzkaller #0 [ 158.803375][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.813543][ T6899] Call Trace: [ 158.816843][ T6899] [ 158.819786][ T6899] dump_stack_lvl+0x188/0x250 [ 158.824574][ T6899] ? show_regs_print_info+0x20/0x20 [ 158.829779][ T6899] ? load_image+0x400/0x400 [ 158.834290][ T6899] ? __might_sleep+0xf0/0xf0 [ 158.839062][ T6899] ? __lock_acquire+0x7d10/0x7d10 [ 158.844115][ T6899] should_fail+0x38c/0x4c0 [ 158.848537][ T6899] should_failslab+0x5/0x20 [ 158.853068][ T6899] slab_pre_alloc_hook+0x51/0xc0 [ 158.858033][ T6899] kmem_cache_alloc_trace+0x47/0x2a0 [ 158.863312][ T6899] ? xskq_create+0x53/0x160 [ 158.867817][ T6899] xskq_create+0x53/0x160 [ 158.872149][ T6899] xsk_init_queue+0xad/0x100 [ 158.876741][ T6899] xsk_setsockopt+0x4f4/0x7e0 [ 158.881420][ T6899] ? xsk_poll+0x570/0x570 [ 158.885753][ T6899] ? __fget_files+0x40f/0x480 [ 158.890529][ T6899] ? aa_sock_opt_perm+0x74/0x100 [ 158.895640][ T6899] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 158.901191][ T6899] ? security_socket_setsockopt+0x7a/0xa0 [ 158.907130][ T6899] ? xsk_poll+0x570/0x570 [ 158.911467][ T6899] __sys_setsockopt+0x2bf/0x3d0 [ 158.916331][ T6899] __x64_sys_setsockopt+0xb1/0xc0 [ 158.921361][ T6899] do_syscall_64+0x4c/0xa0 [ 158.925773][ T6899] ? clear_bhb_loop+0x30/0x80 [ 158.930445][ T6899] ? clear_bhb_loop+0x30/0x80 [ 158.935123][ T6899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.941113][ T6899] RIP: 0033:0x7f3f1ba04799 [ 158.945555][ T6899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.965990][ T6899] RSP: 002b:00007f3f19c5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.974682][ T6899] RAX: ffffffffffffffda RBX: 00007f3f1bc7dfa0 RCX: 00007f3f1ba04799 [ 158.982673][ T6899] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 158.990652][ T6899] RBP: 00007f3f19c5e090 R08: 0000000000000004 R09: 0000000000000000 [ 158.999060][ T6899] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 159.007144][ T6899] R13: 00007f3f1bc7e038 R14: 00007f3f1bc7dfa0 R15: 00007ffe7115d708 [ 159.015129][ T6899] [ 159.352296][ T6917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.876'. [ 159.633645][ T6926] validate_nla: 2 callbacks suppressed [ 159.633724][ T6926] netlink: 'syz.4.878': attribute type 10 has an invalid length. [ 159.717481][ T6926] netlink: 40 bytes leftover after parsing attributes in process `syz.4.878'. [ 159.881939][ T6926] batman_adv: batadv0: Adding interface: veth0_vlan [ 159.898123][ T6926] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.974573][ T6926] batman_adv: batadv0: Interface activated: veth0_vlan [ 160.192192][ T6942] netlink: 'syz.3.882': attribute type 19 has an invalid length. [ 160.214775][ T6942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.882'. [ 160.367640][ T6926] syz.4.878 (6926) used greatest stack depth: 18544 bytes left [ 160.462340][ T6952] netlink: 'syz.4.885': attribute type 21 has an invalid length. [ 160.657762][ T6954] netlink: 'syz.0.886': attribute type 39 has an invalid length. [ 162.106122][ T4226] wlan1: Created IBSS using preconfigured BSSID 00:00:00:ff:00:00 [ 162.106137][ T6996] netlink: 'syz.2.899': attribute type 21 has an invalid length. [ 162.126526][ T6993] netlink: 'syz.1.897': attribute type 19 has an invalid length. [ 162.243288][ T4226] wlan1: Creating new IBSS network, BSSID 00:00:00:ff:00:00 [ 162.252713][ T6993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.897'. [ 163.590328][ T7037] netlink: 'syz.1.912': attribute type 3 has an invalid length. [ 163.644450][ T7037] netlink: 132 bytes leftover after parsing attributes in process `syz.1.912'. [ 164.718133][ T7051] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.915'. [ 164.831920][ T7049] netlink: 132 bytes leftover after parsing attributes in process `syz.0.915'. [ 165.045263][ T7057] netlink: 'syz.2.916': attribute type 19 has an invalid length. [ 165.093841][ T7057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.916'. [ 165.581863][ T7081] netlink: 'syz.0.925': attribute type 21 has an invalid length. [ 166.125538][ T7092] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.929'. [ 166.184839][ T7092] openvswitch: netlink: Message has 20476 unknown bytes. [ 166.561579][ T7106] netlink: 'syz.1.933': attribute type 19 has an invalid length. [ 166.614323][ T7106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.933'. [ 167.177326][ T7124] netlink: 'syz.1.940': attribute type 21 has an invalid length. [ 167.229807][ T7128] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 168.158991][ T7141] FAULT_INJECTION: forcing a failure. [ 168.158991][ T7141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.186267][ T7141] CPU: 0 PID: 7141 Comm: syz.0.946 Not tainted syzkaller #0 [ 168.193613][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.203877][ T7141] Call Trace: [ 168.207184][ T7141] [ 168.210133][ T7141] dump_stack_lvl+0x188/0x250 [ 168.214860][ T7141] ? show_regs_print_info+0x20/0x20 [ 168.220084][ T7141] ? load_image+0x400/0x400 [ 168.224694][ T7141] ? __lock_acquire+0x7d10/0x7d10 [ 168.229734][ T7141] ? bpf_test_run+0x78e/0x800 [ 168.234432][ T7141] should_fail+0x38c/0x4c0 [ 168.238874][ T7141] _copy_to_user+0x2e/0x130 [ 168.243410][ T7141] bpf_test_finish+0x1e6/0x2f0 [ 168.248201][ T7141] ? convert_skb_to___skb+0x360/0x360 [ 168.253609][ T7141] ? __build_skb+0x1e2/0x2e0 [ 168.258231][ T7141] ? convert_skb_to___skb+0x1ff/0x360 [ 168.263702][ T7141] bpf_prog_test_run_skb+0xb8f/0x1180 [ 168.269192][ T7141] ? cpu_online+0x60/0x60 [ 168.273520][ T7141] bpf_prog_test_run+0x31e/0x390 [ 168.278464][ T7141] __sys_bpf+0x5a5/0x6f0 [ 168.282705][ T7141] ? bpf_link_show_fdinfo+0x380/0x380 [ 168.288081][ T7141] ? rcu_nmi_exit+0x6f/0xf0 [ 168.292684][ T7141] ? vtime_user_exit+0x2c8/0x3e0 [ 168.297718][ T7141] __x64_sys_bpf+0x78/0x90 [ 168.302227][ T7141] do_syscall_64+0x4c/0xa0 [ 168.306636][ T7141] ? clear_bhb_loop+0x30/0x80 [ 168.311401][ T7141] ? clear_bhb_loop+0x30/0x80 [ 168.316072][ T7141] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.322074][ T7141] RIP: 0033:0x7f21e52f3799 [ 168.326488][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.346090][ T7141] RSP: 002b:00007f21e354d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.354501][ T7141] RAX: ffffffffffffffda RBX: 00007f21e556cfa0 RCX: 00007f21e52f3799 [ 168.362473][ T7141] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 168.370456][ T7141] RBP: 00007f21e354d090 R08: 0000000000000000 R09: 0000000000000000 [ 168.378426][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.386409][ T7141] R13: 00007f21e556d038 R14: 00007f21e556cfa0 R15: 00007ffccaa455e8 [ 168.394477][ T7141] [ 168.469118][ T7146] netlink: 'syz.2.948': attribute type 19 has an invalid length. [ 168.492944][ T7146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.948'. [ 168.843322][ T7153] netlink: 60 bytes leftover after parsing attributes in process `syz.2.950'. [ 169.591628][ T7170] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.956'. [ 169.642672][ T7172] netlink: 'syz.1.957': attribute type 21 has an invalid length. [ 169.809309][ T7175] netlink: 'syz.0.958': attribute type 21 has an invalid length. [ 169.958017][ T7179] netlink: 'syz.1.960': attribute type 19 has an invalid length. [ 170.008302][ T7179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.960'. [ 170.444209][ T7194] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.965'. [ 170.571484][ T7198] IPv6: Can't replace route, no match found [ 170.753097][ T7198] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.937975][ T7214] netlink: 'syz.3.970': attribute type 21 has an invalid length. [ 171.022055][ T7217] netlink: 'syz.4.973': attribute type 21 has an invalid length. [ 171.035881][ T7222] FAULT_INJECTION: forcing a failure. [ 171.035881][ T7222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.097621][ T7222] CPU: 1 PID: 7222 Comm: syz.0.974 Not tainted syzkaller #0 [ 171.104970][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.115052][ T7222] Call Trace: [ 171.118360][ T7222] [ 171.121315][ T7222] dump_stack_lvl+0x188/0x250 [ 171.126022][ T7222] ? show_regs_print_info+0x20/0x20 [ 171.131252][ T7222] ? load_image+0x400/0x400 [ 171.135785][ T7222] ? __lock_acquire+0x7d10/0x7d10 [ 171.140835][ T7222] should_fail+0x38c/0x4c0 [ 171.145276][ T7222] _copy_to_user+0x2e/0x130 [ 171.149908][ T7222] bpf_obj_get_info_by_fd+0x15e7/0x2dc0 [ 171.155493][ T7222] ? bpf_map_get_fd_by_id+0x310/0x310 [ 171.160927][ T7222] ? __might_fault+0xb3/0x110 [ 171.165629][ T7222] ? bpf_lsm_bpf+0x5/0x10 [ 171.169985][ T7222] ? security_bpf+0x7a/0xa0 [ 171.174529][ T7222] __sys_bpf+0x484/0x6f0 [ 171.178799][ T7222] ? bpf_link_show_fdinfo+0x380/0x380 [ 171.184192][ T7222] ? rcu_nmi_exit+0x6f/0xf0 [ 171.188740][ T7222] ? vtime_user_exit+0x2c8/0x3e0 [ 171.193711][ T7222] __x64_sys_bpf+0x78/0x90 [ 171.198160][ T7222] do_syscall_64+0x4c/0xa0 [ 171.202679][ T7222] ? clear_bhb_loop+0x30/0x80 [ 171.207376][ T7222] ? clear_bhb_loop+0x30/0x80 [ 171.212112][ T7222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.218019][ T7222] RIP: 0033:0x7f21e52f3799 [ 171.222454][ T7222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.242422][ T7222] RSP: 002b:00007f21e354d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.250869][ T7222] RAX: ffffffffffffffda RBX: 00007f21e556cfa0 RCX: 00007f21e52f3799 [ 171.258859][ T7222] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 171.266851][ T7222] RBP: 00007f21e354d090 R08: 0000000000000000 R09: 0000000000000000 [ 171.274836][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.282824][ T7222] R13: 00007f21e556d038 R14: 00007f21e556cfa0 R15: 00007ffccaa455e8 [ 171.290842][ T7222] [ 171.311803][ T7225] netlink: 'syz.3.975': attribute type 19 has an invalid length. [ 171.340164][ T7225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.975'. [ 171.418938][ T7230] netlink: 'syz.1.977': attribute type 10 has an invalid length. [ 171.449737][ T7230] team0: Device ipvlan1 failed to register rx_handler [ 171.656739][ T7237] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 172.065660][ T7252] IPv6: Can't replace route, no match found [ 172.114540][ T7255] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 172.202029][ T7256] netlink: 'syz.4.985': attribute type 21 has an invalid length. [ 172.422605][ T7271] netlink: 'syz.4.991': attribute type 39 has an invalid length. [ 172.487465][ T7274] netlink: 'syz.2.990': attribute type 21 has an invalid length. [ 172.536709][ T7276] netlink: 'syz.1.992': attribute type 19 has an invalid length. [ 172.585635][ T7276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.992'. [ 172.979764][ T7301] netlink: 'syz.4.1001': attribute type 21 has an invalid length. [ 173.036420][ T7298] IPv6: Can't replace route, no match found [ 173.090612][ T7302] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 173.233199][ T7308] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1004'. [ 173.867011][ T4676] wlan1: Trigger new scan to find an IBSS to join [ 174.033373][ T7342] netlink: 'syz.3.1014': attribute type 21 has an invalid length. [ 174.110275][ T7343] device syzkaller0 entered promiscuous mode [ 174.146713][ T7346] IPv6: Can't replace route, no match found [ 174.168856][ T7349] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 174.178590][ T4676] wlan1: Created IBSS using preconfigured BSSID 00:00:00:ff:00:00 [ 174.194250][ T4676] wlan1: Creating new IBSS network, BSSID 00:00:00:ff:00:00 [ 174.930531][ T4868] wlan1: Trigger new scan to find an IBSS to join [ 175.525902][ T7387] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1028'. [ 175.612109][ T7387] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1028'. [ 175.807971][ T7391] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1028'. [ 175.851297][ T7391] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 175.867066][ T144] wlan1: Trigger new scan to find an IBSS to join [ 176.834796][ T7439] validate_nla: 4 callbacks suppressed [ 176.834814][ T7439] netlink: 'syz.2.1046': attribute type 21 has an invalid length. [ 177.857444][ T4676] wlan1: Trigger new scan to find an IBSS to join [ 178.009918][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 178.400759][ T7526] FAULT_INJECTION: forcing a failure. [ 178.400759][ T7526] name failslab, interval 1, probability 0, space 0, times 0 [ 178.577630][ T7526] CPU: 0 PID: 7526 Comm: syz.3.1057 Not tainted syzkaller #0 [ 178.585153][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.595236][ T7526] Call Trace: [ 178.598542][ T7526] [ 178.601496][ T7526] dump_stack_lvl+0x188/0x250 [ 178.606210][ T7526] ? show_regs_print_info+0x20/0x20 [ 178.611444][ T7526] ? load_image+0x400/0x400 [ 178.615992][ T7526] ? __lock_acquire+0x7d10/0x7d10 [ 178.621143][ T7526] should_fail+0x38c/0x4c0 [ 178.625595][ T7526] should_failslab+0x5/0x20 [ 178.630121][ T7526] slab_pre_alloc_hook+0x51/0xc0 [ 178.635098][ T7526] __kmalloc_node_track_caller+0x68/0x3a0 [ 178.640849][ T7526] ? sk_stream_alloc_skb+0x1fa/0xa60 [ 178.646163][ T7526] ? kmem_cache_alloc_node+0x162/0x2d0 [ 178.651651][ T7526] ? __alloc_skb+0xf4/0x750 [ 178.656279][ T7526] ? sk_stream_alloc_skb+0x1fa/0xa60 [ 178.661598][ T7526] __alloc_skb+0x22c/0x750 [ 178.666076][ T7526] sk_stream_alloc_skb+0x1fa/0xa60 [ 178.671227][ T7526] tcp_sendmsg_locked+0xc4e/0x35f0 [ 178.676370][ T7526] ? aa_sk_perm+0x910/0x910 [ 178.681018][ T7526] ? perf_trace_lock+0xe4/0x390 [ 178.685924][ T7526] ? mark_lock+0x94/0x320 [ 178.690276][ T7526] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 178.696300][ T7526] ? tcp_free_fastopen_req+0x70/0x70 [ 178.701630][ T7526] tcp_sendmsg+0x2b/0x40 [ 178.705918][ T7526] ? inet_send_prepare+0x260/0x260 [ 178.711059][ T7526] ____sys_sendmsg+0x5b7/0x8f0 [ 178.715897][ T7526] ? __sys_sendmsg_sock+0x30/0x30 [ 178.720978][ T7526] ? import_iovec+0x6f/0xa0 [ 178.725518][ T7526] ___sys_sendmsg+0x236/0x2e0 [ 178.730367][ T7526] ? __sys_sendmsg+0x2a0/0x2a0 [ 178.735162][ T7526] ? trace_event_raw_event_lock+0x270/0x270 [ 178.741074][ T7526] ? vfs_write+0x8b2/0xd60 [ 178.745523][ T7526] __se_sys_sendmsg+0x1af/0x290 [ 178.750385][ T7526] ? __x64_sys_sendmsg+0x80/0x80 [ 178.755327][ T7526] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 178.761320][ T7526] ? lockdep_hardirqs_on+0x94/0x140 [ 178.766607][ T7526] do_syscall_64+0x4c/0xa0 [ 178.771024][ T7526] ? clear_bhb_loop+0x30/0x80 [ 178.775798][ T7526] ? clear_bhb_loop+0x30/0x80 [ 178.780554][ T7526] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.786465][ T7526] RIP: 0033:0x7f3f1ba04799 [ 178.790896][ T7526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.810784][ T7526] RSP: 002b:00007f3f19c3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.819203][ T7526] RAX: ffffffffffffffda RBX: 00007f3f1bc7e090 RCX: 00007f3f1ba04799 [ 178.827174][ T7526] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000009 [ 178.835158][ T7526] RBP: 00007f3f19c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 178.843141][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.851203][ T7526] R13: 00007f3f1bc7e128 R14: 00007f3f1bc7e090 R15: 00007ffe7115d708 [ 178.859471][ T7526] [ 179.119710][ T7550] netlink: 'syz.0.1062': attribute type 21 has an invalid length. [ 179.372155][ T7556] netlink: 'syz.3.1065': attribute type 21 has an invalid length. [ 179.400230][ T7559] netlink: 'syz.0.1066': attribute type 21 has an invalid length. [ 179.419345][ T7563] netlink: 'syz.1.1068': attribute type 10 has an invalid length. [ 179.480549][ T7563] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1068'. [ 179.977380][ T7524] wlan1: Trigger new scan to find an IBSS to join [ 179.984213][ T7524] wlan1: Trigger new scan to find an IBSS to join [ 179.990914][ T7527] wlan1: Trigger new scan to find an IBSS to join [ 180.149690][ T7511] wlan1: Creating new IBSS network, BSSID f2:c6:b3:b7:d0:8f [ 180.157587][ T7524] wlan1: Creating new IBSS network, BSSID 9e:34:c4:dd:74:57 [ 180.846156][ T7610] netlink: 'syz.2.1084': attribute type 10 has an invalid length. [ 180.897171][ T7610] team0: Device ipvlan1 failed to register rx_handler [ 180.994655][ T7608] netlink: 'syz.3.1083': attribute type 21 has an invalid length. [ 181.056549][ T1111] Bluetooth: hci0: command 0x0406 tx timeout [ 181.056592][ T7511] wlan1: Creating new IBSS network, BSSID 82:07:99:38:1b:c2 [ 181.136655][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 181.178335][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 181.216822][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 181.256434][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 181.612698][ T7635] netlink: 'syz.4.1093': attribute type 19 has an invalid length. [ 181.756795][ T7635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1093'. [ 182.279582][ T7646] netlink: 'syz.3.1096': attribute type 8 has an invalid length. [ 182.325217][ T7646] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1096'. [ 182.503541][ T7653] netlink: 'syz.2.1101': attribute type 10 has an invalid length. [ 182.679701][ T7653] device geneve0 entered promiscuous mode [ 182.738125][ T7653] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 183.632453][ T7689] netlink: 'syz.2.1110': attribute type 19 has an invalid length. [ 183.691783][ T7689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1110'. [ 183.737791][ T7691] FAULT_INJECTION: forcing a failure. [ 183.737791][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 183.894687][ T7691] CPU: 1 PID: 7691 Comm: syz.1.1113 Not tainted syzkaller #0 [ 183.902125][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.912475][ T7691] Call Trace: [ 183.915874][ T7691] [ 183.918826][ T7691] dump_stack_lvl+0x188/0x250 [ 183.923554][ T7691] ? show_regs_print_info+0x20/0x20 [ 183.928789][ T7691] ? load_image+0x400/0x400 [ 183.933413][ T7691] ? __lock_acquire+0x7d10/0x7d10 [ 183.938475][ T7691] ? __lock_acquire+0x7d10/0x7d10 [ 183.943624][ T7691] should_fail+0x38c/0x4c0 [ 183.948072][ T7691] should_failslab+0x5/0x20 [ 183.952604][ T7691] slab_pre_alloc_hook+0x51/0xc0 [ 183.957571][ T7691] __kmalloc_node+0x6e/0x3b0 [ 183.962494][ T7691] ? vmemdup_user+0x45/0x170 [ 183.967206][ T7691] vmemdup_user+0x45/0x170 [ 183.971652][ T7691] map_get_next_key+0x225/0x5f0 [ 183.976832][ T7691] ? bpf_lsm_bpf+0x5/0x10 [ 183.981204][ T7691] __sys_bpf+0x3e5/0x6f0 [ 183.985476][ T7691] ? bpf_link_show_fdinfo+0x380/0x380 [ 183.990968][ T7691] ? rcu_nmi_exit+0x6f/0xf0 [ 183.995735][ T7691] ? vtime_user_exit+0x2c8/0x3e0 [ 184.000693][ T7691] __x64_sys_bpf+0x78/0x90 [ 184.005123][ T7691] do_syscall_64+0x4c/0xa0 [ 184.009547][ T7691] ? clear_bhb_loop+0x30/0x80 [ 184.014315][ T7691] ? clear_bhb_loop+0x30/0x80 [ 184.019010][ T7691] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.025020][ T7691] RIP: 0033:0x7f643cfba799 [ 184.029461][ T7691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.049661][ T7691] RSP: 002b:00007f643b214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.058189][ T7691] RAX: ffffffffffffffda RBX: 00007f643d233fa0 RCX: 00007f643cfba799 [ 184.066161][ T7691] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000004 [ 184.074221][ T7691] RBP: 00007f643b214090 R08: 0000000000000000 R09: 0000000000000000 [ 184.082193][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.090178][ T7691] R13: 00007f643d234038 R14: 00007f643d233fa0 R15: 00007ffdebab1dd8 [ 184.098212][ T7691] [ 184.649991][ T7716] netlink: 'syz.0.1120': attribute type 21 has an invalid length. [ 184.662738][ T7711] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1118'. [ 184.673055][ T7719] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1118'. [ 185.409112][ T7732] netlink: 'syz.4.1125': attribute type 41 has an invalid length. [ 185.456354][ T7732] netlink: 'syz.4.1125': attribute type 41 has an invalid length. [ 185.552526][ T7747] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1131'. [ 185.578830][ T7747] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1131'. [ 185.666235][ T7743] netlink: 'syz.3.1129': attribute type 19 has an invalid length. [ 185.681705][ T7743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1129'. [ 185.696298][ T7752] FAULT_INJECTION: forcing a failure. [ 185.696298][ T7752] name failslab, interval 1, probability 0, space 0, times 0 [ 185.709952][ T7746] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1131'. [ 185.731723][ T7748] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1131'. [ 185.763481][ T7752] CPU: 1 PID: 7752 Comm: syz.0.1142 Not tainted syzkaller #0 [ 185.770914][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 185.781101][ T7752] Call Trace: [ 185.784405][ T7752] [ 185.787361][ T7752] dump_stack_lvl+0x188/0x250 [ 185.792074][ T7752] ? show_regs_print_info+0x20/0x20 [ 185.797307][ T7752] ? load_image+0x400/0x400 [ 185.801839][ T7752] ? do_syscall_64+0x4c/0xa0 [ 185.806480][ T7752] should_fail+0x38c/0x4c0 [ 185.810939][ T7752] should_failslab+0x5/0x20 [ 185.815467][ T7752] slab_pre_alloc_hook+0x51/0xc0 [ 185.820439][ T7752] ? skb_clone+0x1bd/0x350 [ 185.824887][ T7752] kmem_cache_alloc+0x3d/0x290 [ 185.829681][ T7752] skb_clone+0x1bd/0x350 [ 185.833952][ T7752] __netlink_deliver_tap+0x3cd/0x7c0 [ 185.839265][ T7752] netlink_deliver_tap+0x16c/0x180 [ 185.844394][ T7752] netlink_sendskb+0x64/0x130 [ 185.849089][ T7752] netlink_ack+0x87d/0xb50 [ 185.853523][ T7752] ? netlink_dump+0xcf0/0xcf0 [ 185.858206][ T7752] ? __skb_clone+0x480/0x790 [ 185.862810][ T7752] netlink_rcv_skb+0x27a/0x440 [ 185.867582][ T7752] ? rtnetlink_bind+0x80/0x80 [ 185.872276][ T7752] ? netlink_ack+0xb50/0xb50 [ 185.876877][ T7752] netlink_unicast+0x774/0x920 [ 185.881662][ T7752] netlink_sendmsg+0x8ba/0xbe0 [ 185.886432][ T7752] ? netlink_getsockopt+0x570/0x570 [ 185.891731][ T7752] ? aa_sock_msg_perm+0x94/0x150 [ 185.896670][ T7752] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 185.902040][ T7752] ? security_socket_sendmsg+0x7c/0xa0 [ 185.907499][ T7752] ? netlink_getsockopt+0x570/0x570 [ 185.912781][ T7752] ____sys_sendmsg+0x5b7/0x8f0 [ 185.917563][ T7752] ? __sys_sendmsg_sock+0x30/0x30 [ 185.922593][ T7752] ? import_iovec+0x6f/0xa0 [ 185.927101][ T7752] ___sys_sendmsg+0x236/0x2e0 [ 185.931792][ T7752] ? __sys_sendmsg+0x2a0/0x2a0 [ 185.936590][ T7752] ? trace_event_raw_event_lock+0x270/0x270 [ 185.942489][ T7752] ? vfs_write+0x8b2/0xd60 [ 185.947016][ T7752] __se_sys_sendmsg+0x1af/0x290 [ 185.951968][ T7752] ? __x64_sys_sendmsg+0x80/0x80 [ 185.956905][ T7752] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 185.962897][ T7752] ? lockdep_hardirqs_on+0x94/0x140 [ 185.968189][ T7752] do_syscall_64+0x4c/0xa0 [ 185.972606][ T7752] ? clear_bhb_loop+0x30/0x80 [ 185.977538][ T7752] ? clear_bhb_loop+0x30/0x80 [ 185.982213][ T7752] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.988107][ T7752] RIP: 0033:0x7f21e52f3799 [ 185.992528][ T7752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.012137][ T7752] RSP: 002b:00007f21e354d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.020554][ T7752] RAX: ffffffffffffffda RBX: 00007f21e556cfa0 RCX: 00007f21e52f3799 [ 186.028526][ T7752] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 186.036499][ T7752] RBP: 00007f21e354d090 R08: 0000000000000000 R09: 0000000000000000 [ 186.044468][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.052438][ T7752] R13: 00007f21e556d038 R14: 00007f21e556cfa0 R15: 00007ffccaa455e8 [ 186.060423][ T7752] [ 186.092621][ T7758] netlink: 'syz.4.1133': attribute type 21 has an invalid length. [ 187.301594][ T7780] netlink: 'syz.2.1143': attribute type 17 has an invalid length. [ 187.326594][ T7780] netlink: 'syz.2.1143': attribute type 16 has an invalid length. [ 187.372687][ T7780] __nla_validate_parse: 2 callbacks suppressed [ 187.372726][ T7780] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1143'. [ 187.515645][ T7795] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.1146'. [ 188.183933][ T7787] netlink: 'syz.1.1141': attribute type 21 has an invalid length. [ 188.214158][ T7787] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1141'. [ 188.254099][ T7787] netlink: 'syz.1.1141': attribute type 4 has an invalid length. [ 188.316470][ T7800] netlink: 'syz.0.1147': attribute type 19 has an invalid length. [ 188.373826][ T7800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1147'. [ 188.501390][ T7810] netlink: 'syz.1.1152': attribute type 39 has an invalid length. [ 188.592747][ T7809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.605762][ T7809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.678947][ T7809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.805813][ T7809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.873995][ T7816] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1148'. [ 188.896288][ T7817] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1153'. [ 188.935750][ T7815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1153'. [ 189.211973][ T7840] netlink: 'syz.2.1161': attribute type 2 has an invalid length. [ 189.319217][ T7840] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1161'. [ 189.403814][ T7839] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1160'. [ 189.415070][ T7845] netlink: 'syz.1.1163': attribute type 19 has an invalid length. [ 189.433666][ T7845] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1163'. [ 190.804896][ T7880] netlink: 'syz.3.1173': attribute type 21 has an invalid length. [ 191.658689][ T7900] netlink: 'syz.4.1179': attribute type 19 has an invalid length. [ 192.598067][ T7933] FAULT_INJECTION: forcing a failure. [ 192.598067][ T7933] name failslab, interval 1, probability 0, space 0, times 0 [ 192.642468][ T7933] CPU: 0 PID: 7933 Comm: syz.3.1191 Not tainted syzkaller #0 [ 192.649910][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.660015][ T7933] Call Trace: [ 192.663337][ T7933] [ 192.666305][ T7933] dump_stack_lvl+0x188/0x250 [ 192.671041][ T7933] ? show_regs_print_info+0x20/0x20 [ 192.676291][ T7933] ? load_image+0x400/0x400 [ 192.680850][ T7933] ? __lock_acquire+0x7d10/0x7d10 [ 192.685943][ T7933] ? mark_lock+0x94/0x320 [ 192.690311][ T7933] should_fail+0x38c/0x4c0 [ 192.694770][ T7933] should_failslab+0x5/0x20 [ 192.699314][ T7933] slab_pre_alloc_hook+0x51/0xc0 [ 192.704292][ T7933] kmem_cache_alloc_node+0x47/0x2d0 [ 192.709515][ T7933] ? __alloc_skb+0xf4/0x750 [ 192.714056][ T7933] ? lockdep_hardirqs_on+0x94/0x140 [ 192.719291][ T7933] __alloc_skb+0xf4/0x750 [ 192.723663][ T7933] sock_wmalloc+0xa6/0x120 [ 192.728123][ T7933] l2tp_ip_sendmsg+0x1bf/0x1440 [ 192.733015][ T7933] ? sock_rps_record_flow+0x17/0x3b0 [ 192.738336][ T7933] ? inet_sendmsg+0x78/0x2f0 [ 192.742949][ T7933] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 192.748266][ T7933] ? security_socket_sendmsg+0x7c/0xa0 [ 192.753827][ T7933] ? inet_send_prepare+0x260/0x260 [ 192.759266][ T7933] ____sys_sendmsg+0x5b7/0x8f0 [ 192.764109][ T7933] ? __sys_sendmsg_sock+0x30/0x30 [ 192.769212][ T7933] ? import_iovec+0x6f/0xa0 [ 192.773941][ T7933] ___sys_sendmsg+0x236/0x2e0 [ 192.778683][ T7933] ? __sys_sendmsg+0x2a0/0x2a0 [ 192.783581][ T7933] __se_sys_sendmsg+0x1af/0x290 [ 192.788630][ T7933] ? __x64_sys_sendmsg+0x80/0x80 [ 192.793594][ T7933] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 192.799639][ T7933] ? lockdep_hardirqs_on+0x94/0x140 [ 192.804885][ T7933] do_syscall_64+0x4c/0xa0 [ 192.809335][ T7933] ? clear_bhb_loop+0x30/0x80 [ 192.814038][ T7933] ? clear_bhb_loop+0x30/0x80 [ 192.818911][ T7933] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.824837][ T7933] RIP: 0033:0x7f3f1ba04799 [ 192.829282][ T7933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.848913][ T7933] RSP: 002b:00007f3f19c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.857367][ T7933] RAX: ffffffffffffffda RBX: 00007f3f1bc7dfa0 RCX: 00007f3f1ba04799 [ 192.865367][ T7933] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 192.873365][ T7933] RBP: 00007f3f19c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 192.881488][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.889658][ T7933] R13: 00007f3f1bc7e038 R14: 00007f3f1bc7dfa0 R15: 00007ffe7115d708 [ 192.897774][ T7933] [ 193.095636][ T7950] __nla_validate_parse: 8 callbacks suppressed [ 193.095657][ T7950] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1197'. [ 193.177357][ T7950] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 193.314648][ T7961] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1194'. [ 193.358576][ T7961] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1194'. [ 193.392762][ T7959] validate_nla: 3 callbacks suppressed [ 193.392804][ T7959] netlink: 'syz.2.1198': attribute type 19 has an invalid length. [ 193.416114][ T7959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1198'. [ 193.440268][ T7964] netlink: 'syz.1.1199': attribute type 21 has an invalid length. [ 193.453717][ T7953] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1194'. [ 193.652343][ T7975] sctp: [Deprecated]: syz.1.1203 (pid 7975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.652343][ T7975] Use struct sctp_sack_info instead [ 193.734061][ T7980] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1204'. [ 193.868890][ T7991] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1206'. [ 193.874919][ T7973] netlink: 'syz.4.1202': attribute type 19 has an invalid length. [ 193.970863][ T7973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1202'. [ 193.989218][ T7985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1204'. [ 194.265455][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273998][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.374952][ T8009] netlink: 'syz.0.1213': attribute type 21 has an invalid length. [ 194.565876][ T8012] device bridge_slave_1 left promiscuous mode [ 194.609757][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.784996][ T8012] device bridge_slave_0 left promiscuous mode [ 194.867932][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.262769][ T8014] netlink: 'syz.0.1215': attribute type 19 has an invalid length. [ 195.272213][ T8014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1215'. [ 195.287735][ T8022] netlink: 'syz.3.1217': attribute type 10 has an invalid length. [ 195.297486][ T8022] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 195.611285][ T8036] netlink: 'syz.2.1222': attribute type 19 has an invalid length. [ 195.662585][ T8041] netlink: 'syz.0.1230': attribute type 19 has an invalid length. [ 196.134762][ T8058] netlink: 'syz.2.1225': attribute type 21 has an invalid length. [ 196.295982][ T8057] netlink: 'syz.1.1224': attribute type 2 has an invalid length. [ 196.446660][ T8070] device team0 entered promiscuous mode [ 196.468581][ T8070] device team_slave_1 entered promiscuous mode [ 196.503418][ T8075] FAULT_INJECTION: forcing a failure. [ 196.503418][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.521681][ T8070] bridge0: port 3(team0) entered blocking state [ 196.553898][ T8070] bridge0: port 3(team0) entered disabled state [ 196.572845][ T8075] CPU: 1 PID: 8075 Comm: syz.1.1233 Not tainted syzkaller #0 [ 196.580361][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.590584][ T8075] Call Trace: [ 196.593868][ T8075] [ 196.596800][ T8075] dump_stack_lvl+0x188/0x250 [ 196.601496][ T8075] ? show_regs_print_info+0x20/0x20 [ 196.606808][ T8075] ? load_image+0x400/0x400 [ 196.611316][ T8075] ? __lock_acquire+0x7d10/0x7d10 [ 196.616354][ T8075] should_fail+0x38c/0x4c0 [ 196.620791][ T8075] _copy_from_user+0x2e/0x170 [ 196.625473][ T8075] ___sys_recvmsg+0x173/0x5c0 [ 196.630179][ T8075] ? __sys_recvmsg+0x280/0x280 [ 196.634952][ T8075] ? __lock_acquire+0x7d10/0x7d10 [ 196.640094][ T8075] __x64_sys_recvmsg+0x1f9/0x2c0 [ 196.645122][ T8075] ? ___sys_recvmsg+0x5c0/0x5c0 [ 196.649970][ T8075] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 196.656178][ T8075] ? lockdep_hardirqs_on+0x94/0x140 [ 196.661391][ T8075] do_syscall_64+0x4c/0xa0 [ 196.665819][ T8075] ? clear_bhb_loop+0x30/0x80 [ 196.670580][ T8075] ? clear_bhb_loop+0x30/0x80 [ 196.675857][ T8075] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.681750][ T8075] RIP: 0033:0x7f643cfba799 [ 196.686260][ T8075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.705865][ T8075] RSP: 002b:00007f643b214028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 196.714365][ T8075] RAX: ffffffffffffffda RBX: 00007f643d233fa0 RCX: 00007f643cfba799 [ 196.722427][ T8075] RDX: 0000000000000042 RSI: 0000200000000680 RDI: 0000000000000003 [ 196.730583][ T8075] RBP: 00007f643b214090 R08: 0000000000000000 R09: 0000000000000000 [ 196.738641][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.746611][ T8075] R13: 00007f643d234038 R14: 00007f643d233fa0 R15: 00007ffdebab1dd8 [ 196.754603][ T8075] [ 196.802800][ T8070] bridge0: port 3(team0) entered blocking state [ 196.809189][ T8070] bridge0: port 3(team0) entered forwarding state [ 197.043551][ T8083] bridge_slave_1: default FDB implementation only supports local addresses [ 198.712573][ T8133] IPv6: Can't replace route, no match found [ 199.293383][ T8145] validate_nla: 5 callbacks suppressed [ 199.293403][ T8145] netlink: 'syz.3.1256': attribute type 21 has an invalid length. [ 199.411576][ T8139] netlink: 'syz.4.1253': attribute type 19 has an invalid length. [ 199.432631][ T8139] __nla_validate_parse: 12 callbacks suppressed [ 199.432669][ T8139] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1253'. [ 199.869979][ T8168] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1263'. [ 200.884455][ T8188] netlink: 'syz.1.1269': attribute type 21 has an invalid length. [ 200.907066][ T8189] device lo entered promiscuous mode [ 201.173553][ T8210] netlink: 'syz.4.1274': attribute type 19 has an invalid length. [ 201.262214][ T8210] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1274'. [ 201.382284][ T8217] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.1278'. [ 201.474221][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.536501][ T8221] netlink: 'syz.2.1278': attribute type 21 has an invalid length. [ 201.569583][ T8221] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.864575][ T8231] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1281'. [ 201.984122][ T8243] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.1284'. [ 202.026625][ T8243] netlink: 8454 bytes leftover after parsing attributes in process `syz.4.1284'. [ 202.090584][ T8245] netlink: 'syz.3.1286': attribute type 21 has an invalid length. [ 202.227580][ T8243] netlink: 'syz.4.1284': attribute type 10 has an invalid length. [ 202.530419][ T8250] netlink: 'syz.4.1284': attribute type 2 has an invalid length. [ 202.544269][ T8250] netlink: 'syz.4.1284': attribute type 8 has an invalid length. [ 202.569460][ T8250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1284'. [ 202.592747][ T8253] netlink: 'syz.3.1288': attribute type 21 has an invalid length. [ 203.181858][ T8277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1294'. [ 203.404826][ T8290] netlink: zone id is out of range [ 203.436611][ T8290] netlink: set zone limit has 8 unknown bytes [ 203.560112][ T8292] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1301'. [ 204.344918][ T8329] validate_nla: 5 callbacks suppressed [ 204.344944][ T8329] netlink: 'syz.4.1314': attribute type 12 has an invalid length. [ 204.615355][ T8330] netlink: 'syz.3.1315': attribute type 19 has an invalid length. [ 204.697587][ T8330] __nla_validate_parse: 2 callbacks suppressed [ 204.697625][ T8330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1315'. [ 205.288403][ T8363] netlink: 'syz.1.1325': attribute type 10 has an invalid length. [ 205.698606][ T8378] netlink: 177048 bytes leftover after parsing attributes in process `syz.1.1330'. [ 206.090543][ T8391] netlink: 'syz.2.1336': attribute type 19 has an invalid length. [ 206.130899][ T8391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1336'. [ 206.468558][ T8408] netlink: 'syz.4.1341': attribute type 3 has an invalid length. [ 206.514141][ T8408] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1341'. [ 206.844898][ T8418] netlink: 'syz.0.1345': attribute type 1 has an invalid length. [ 206.993402][ T8418] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1345'. [ 207.011299][ T8418] netlink: 'syz.0.1345': attribute type 1 has an invalid length. [ 207.065660][ T8418] netlink: 'syz.0.1345': attribute type 21 has an invalid length. [ 207.117447][ T8418] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1345'. [ 207.937120][ T8440] netlink: 'syz.4.1353': attribute type 19 has an invalid length. [ 207.955707][ T8440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1353'. [ 208.285218][ T8457] netlink: 'syz.0.1361': attribute type 3 has an invalid length. [ 208.330694][ T8457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1361'. [ 208.538169][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1363'. [ 209.202221][ T8483] device wlan1 entered promiscuous mode [ 209.488867][ T8497] FAULT_INJECTION: forcing a failure. [ 209.488867][ T8497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.654555][ T8497] CPU: 1 PID: 8497 Comm: syz.4.1375 Not tainted syzkaller #0 [ 209.662010][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.672372][ T8497] Call Trace: [ 209.675747][ T8497] [ 209.678708][ T8497] dump_stack_lvl+0x188/0x250 [ 209.683436][ T8497] ? show_regs_print_info+0x20/0x20 [ 209.688767][ T8497] ? load_image+0x400/0x400 [ 209.693324][ T8497] ? __lock_acquire+0x7d10/0x7d10 [ 209.698429][ T8497] should_fail+0x38c/0x4c0 [ 209.702915][ T8497] _copy_from_user+0x2e/0x170 [ 209.707653][ T8497] iovec_from_user+0x142/0x370 [ 209.712476][ T8497] __import_iovec+0x70/0x490 [ 209.717137][ T8497] import_iovec+0x6f/0xa0 [ 209.721546][ T8497] ___sys_sendmsg+0x1fd/0x2e0 [ 209.726295][ T8497] ? __sys_sendmsg+0x2a0/0x2a0 [ 209.731132][ T8497] ? vfs_write+0x8b2/0xd60 [ 209.735677][ T8497] __se_sys_sendmsg+0x1af/0x290 [ 209.740612][ T8497] ? __x64_sys_sendmsg+0x80/0x80 [ 209.745596][ T8497] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 209.751785][ T8497] ? lockdep_hardirqs_on+0x94/0x140 [ 209.757106][ T8497] do_syscall_64+0x4c/0xa0 [ 209.761565][ T8497] ? clear_bhb_loop+0x30/0x80 [ 209.766274][ T8497] ? clear_bhb_loop+0x30/0x80 [ 209.771002][ T8497] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.776946][ T8497] RIP: 0033:0x7f1dcfbeb799 [ 209.781407][ T8497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.801063][ T8497] RSP: 002b:00007f1dcde45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.809532][ T8497] RAX: ffffffffffffffda RBX: 00007f1dcfe64fa0 RCX: 00007f1dcfbeb799 [ 209.817541][ T8497] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000a [ 209.825733][ T8497] RBP: 00007f1dcde45090 R08: 0000000000000000 R09: 0000000000000000 [ 209.833740][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.841749][ T8497] R13: 00007f1dcfe65038 R14: 00007f1dcfe64fa0 R15: 00007ffd44bae648 [ 209.849807][ T8497] [ 209.940818][ T8501] validate_nla: 1 callbacks suppressed [ 209.940948][ T8501] netlink: 'syz.2.1377': attribute type 19 has an invalid length. [ 210.016130][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1377'. [ 210.274718][ T8507] netlink: 'syz.0.1378': attribute type 21 has an invalid length. [ 210.325356][ T8510] netlink: 'syz.0.1378': attribute type 21 has an invalid length. [ 210.509476][ T8518] netlink: 'syz.1.1380': attribute type 39 has an invalid length. [ 210.606148][ T8517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1381'. [ 210.995565][ T8533] netlink: 'syz.2.1385': attribute type 16 has an invalid length. [ 211.071553][ T8533] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1385'. [ 211.099591][ T4868] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 211.619092][ T8552] netlink: 'syz.0.1391': attribute type 39 has an invalid length. [ 212.133887][ T8554] netlink: 'syz.3.1393': attribute type 19 has an invalid length. [ 212.153017][ T8554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1393'. [ 214.155632][ T8595] FAULT_INJECTION: forcing a failure. [ 214.155632][ T8595] name failslab, interval 1, probability 0, space 0, times 0 [ 214.257838][ T8595] CPU: 0 PID: 8595 Comm: syz.4.1408 Not tainted syzkaller #0 [ 214.265488][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.275596][ T8595] Call Trace: [ 214.279007][ T8595] [ 214.282067][ T8595] dump_stack_lvl+0x188/0x250 [ 214.286801][ T8595] ? show_regs_print_info+0x20/0x20 [ 214.292043][ T8595] ? load_image+0x400/0x400 [ 214.296603][ T8595] ? __might_sleep+0xf0/0xf0 [ 214.301249][ T8595] ? __lock_acquire+0x7d10/0x7d10 [ 214.306315][ T8595] ? mark_lock+0x94/0x320 [ 214.310704][ T8595] should_fail+0x38c/0x4c0 [ 214.315191][ T8595] should_failslab+0x5/0x20 [ 214.319815][ T8595] slab_pre_alloc_hook+0x51/0xc0 [ 214.324798][ T8595] __kmalloc+0x6b/0x330 [ 214.328998][ T8595] ? tomoyo_realpath_from_path+0x118/0x610 [ 214.334967][ T8595] tomoyo_realpath_from_path+0x118/0x610 [ 214.340801][ T8595] tomoyo_path_number_perm+0x242/0x660 [ 214.346327][ T8595] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 214.351824][ T8595] ? perf_trace_lock+0xe4/0x390 [ 214.356733][ T8595] ? ktime_get+0x7b/0x270 [ 214.361303][ T8595] security_file_ioctl+0x6c/0xa0 [ 214.366317][ T8595] __se_sys_ioctl+0x48/0x170 [ 214.370974][ T8595] do_syscall_64+0x4c/0xa0 [ 214.375433][ T8595] ? clear_bhb_loop+0x30/0x80 [ 214.380143][ T8595] ? clear_bhb_loop+0x30/0x80 [ 214.384880][ T8595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.390826][ T8595] RIP: 0033:0x7f1dcfbeb799 [ 214.395290][ T8595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.415040][ T8595] RSP: 002b:00007f1dcde45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.423515][ T8595] RAX: ffffffffffffffda RBX: 00007f1dcfe64fa0 RCX: 00007f1dcfbeb799 [ 214.431533][ T8595] RDX: 0000200000000900 RSI: 0000000000008992 RDI: 0000000000000007 [ 214.439632][ T8595] RBP: 00007f1dcde45090 R08: 0000000000000000 R09: 0000000000000000 [ 214.447641][ T8595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.455646][ T8595] R13: 00007f1dcfe65038 R14: 00007f1dcfe64fa0 R15: 00007ffd44bae648 [ 214.463718][ T8595] [ 214.555009][ T8588] device sit0 entered promiscuous mode [ 214.710169][ T8604] netlink: 'syz.1.1410': attribute type 19 has an invalid length. [ 214.735335][ T8604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1410'. [ 214.819982][ T8595] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.696804][ T4868] tipc: Subscription rejected, illegal request [ 216.451911][ T8644] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1422'. [ 216.723292][ T8660] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 216.753711][ T8656] netlink: 'syz.3.1426': attribute type 19 has an invalid length. [ 216.787314][ T8656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1426'. [ 216.806291][ T8660] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1429'. [ 216.843577][ T8666] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 216.867825][ T8666] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1430'. [ 217.086266][ T8675] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.111520][ T8675] IPv6: Can't replace route, no match found [ 217.144556][ T8680] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 217.958856][ T8701] device syzkaller0 entered promiscuous mode [ 218.496496][ T8715] netlink: 'syz.0.1447': attribute type 19 has an invalid length. [ 218.504844][ T8715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1447'. [ 218.717834][ T8723] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1448'. [ 218.766762][ T8727] netlink: 'syz.3.1450': attribute type 6 has an invalid length. [ 218.844475][ T8716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1448'. [ 219.868344][ T7527] wlan1: Trigger new scan to find an IBSS to join [ 220.133980][ T8750] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 220.236875][ T8754] netlink: 'syz.0.1460': attribute type 39 has an invalid length. [ 220.291656][ T8754] device veth0_macvtap left promiscuous mode [ 220.641548][ T8771] netlink: 'syz.3.1467': attribute type 19 has an invalid length. [ 220.718788][ T8771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1467'. [ 220.760239][ T8773] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1468'. [ 220.882508][ T8775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1468'. [ 221.302855][ T8799] netlink: 'syz.0.1474': attribute type 10 has an invalid length. [ 221.380722][ T8799] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 221.813357][ T8817] device syzkaller0 entered promiscuous mode [ 222.073422][ T8827] __nla_validate_parse: 1 callbacks suppressed [ 222.073442][ T8827] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1484'. [ 222.091457][ T8827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1484'. [ 222.289639][ T8831] device syzkaller0 entered promiscuous mode [ 222.657274][ T8842] netlink: 'syz.1.1486': attribute type 19 has an invalid length. [ 222.667239][ T8842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1486'. [ 222.706049][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1490'. [ 222.934770][ T4868] wlan1: Trigger new scan to find an IBSS to join [ 223.856717][ T4868] wlan1: Trigger new scan to find an IBSS to join [ 225.431003][ T7522] wlan1: Creating new IBSS network, BSSID 62:4a:26:47:7c:94 [ 225.788973][ T8884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1499'. [ 225.848490][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 225.879593][ T8879] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1499'. [ 226.093402][ T8895] netlink: 'syz.0.1505': attribute type 49 has an invalid length. [ 226.440974][ T8905] netlink: 'syz.3.1509': attribute type 19 has an invalid length. [ 226.468813][ T8905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1509'. [ 227.197806][ T8934] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1518'. [ 227.257365][ T8928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1518'. [ 227.283066][ T8926] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 227.313731][ T8926] netlink: 63743 bytes leftover after parsing attributes in process `syz.1.1517'. [ 227.473819][ T8947] FAULT_INJECTION: forcing a failure. [ 227.473819][ T8947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.520220][ T8942] netlink: 'syz.2.1522': attribute type 19 has an invalid length. [ 227.552297][ T8947] CPU: 1 PID: 8947 Comm: syz.3.1525 Not tainted syzkaller #0 [ 227.559856][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.564530][ T8942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1522'. [ 227.570023][ T8947] Call Trace: [ 227.570039][ T8947] [ 227.570050][ T8947] dump_stack_lvl+0x188/0x250 [ 227.570083][ T8947] ? show_regs_print_info+0x20/0x20 [ 227.570105][ T8947] ? load_image+0x400/0x400 [ 227.570129][ T8947] ? __lock_acquire+0x7d10/0x7d10 [ 227.570161][ T8947] should_fail+0x38c/0x4c0 [ 227.570189][ T8947] _copy_from_user+0x2e/0x170 [ 227.570212][ T8947] __sys_bpf+0x26d/0x6f0 [ 227.570237][ T8947] ? bpf_link_show_fdinfo+0x380/0x380 [ 227.570270][ T8947] ? vtime_user_exit+0x2c8/0x3e0 [ 227.570298][ T8947] __x64_sys_bpf+0x78/0x90 [ 227.570320][ T8947] do_syscall_64+0x4c/0xa0 [ 227.570337][ T8947] ? clear_bhb_loop+0x30/0x80 [ 227.570355][ T8947] ? clear_bhb_loop+0x30/0x80 [ 227.570374][ T8947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.570393][ T8947] RIP: 0033:0x7f3f1ba04799 [ 227.570412][ T8947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.570428][ T8947] RSP: 002b:00007f3f19c5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.570451][ T8947] RAX: ffffffffffffffda RBX: 00007f3f1bc7dfa0 RCX: 00007f3f1ba04799 [ 227.570466][ T8947] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001b [ 227.570478][ T8947] RBP: 00007f3f19c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 227.570491][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.570503][ T8947] R13: 00007f3f1bc7e038 R14: 00007f3f1bc7dfa0 R15: 00007ffe7115d708 [ 227.570534][ T8947] [ 227.867644][ T7513] wlan1: Trigger new scan to find an IBSS to join [ 227.920266][ T7522] wlan1: Creating new IBSS network, BSSID be:08:ee:f6:bb:c3 [ 227.994635][ T8963] netlink: 'syz.3.1528': attribute type 19 has an invalid length. [ 228.037026][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1528'. [ 228.262655][ T8982] netlink: 'syz.4.1537': attribute type 8 has an invalid length. [ 228.294512][ T8982] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1537'. [ 228.382475][ T8990] netlink: 'syz.4.1538': attribute type 39 has an invalid length. [ 228.391626][ T8990] device veth0_macvtap left promiscuous mode [ 228.508486][ T8992] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1536'. [ 228.616258][ T8985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1536'. [ 228.849757][ T8997] netlink: 15926 bytes leftover after parsing attributes in process `syz.4.1541'. [ 229.009463][ T9003] netlink: 'syz.1.1542': attribute type 19 has an invalid length. [ 229.023039][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1542'. [ 229.036423][ T8980] delete_channel: no stack [ 229.192356][ T9008] netlink: 'syz.4.1546': attribute type 19 has an invalid length. [ 229.370374][ T9028] FAULT_INJECTION: forcing a failure. [ 229.370374][ T9028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.384591][ T9028] CPU: 1 PID: 9028 Comm: syz.1.1551 Not tainted syzkaller #0 [ 229.392007][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.402092][ T9028] Call Trace: [ 229.405394][ T9028] [ 229.408331][ T9028] dump_stack_lvl+0x188/0x250 [ 229.413031][ T9028] ? show_regs_print_info+0x20/0x20 [ 229.418246][ T9028] ? load_image+0x400/0x400 [ 229.422763][ T9028] ? __lock_acquire+0x7d10/0x7d10 [ 229.427806][ T9028] should_fail+0x38c/0x4c0 [ 229.432244][ T9028] _copy_from_user+0x2e/0x170 [ 229.436928][ T9028] vmemdup_user+0xa4/0x170 [ 229.441349][ T9028] map_get_next_key+0x225/0x5f0 [ 229.446218][ T9028] ? bpf_lsm_bpf+0x5/0x10 [ 229.450550][ T9028] __sys_bpf+0x3e5/0x6f0 [ 229.454795][ T9028] ? bpf_link_show_fdinfo+0x380/0x380 [ 229.460183][ T9028] ? vtime_user_exit+0x2c8/0x3e0 [ 229.465302][ T9028] __x64_sys_bpf+0x78/0x90 [ 229.469716][ T9028] do_syscall_64+0x4c/0xa0 [ 229.474137][ T9028] ? clear_bhb_loop+0x30/0x80 [ 229.478899][ T9028] ? clear_bhb_loop+0x30/0x80 [ 229.483580][ T9028] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.489479][ T9028] RIP: 0033:0x7f643cfba799 [ 229.493991][ T9028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.513599][ T9028] RSP: 002b:00007f643b214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.522015][ T9028] RAX: ffffffffffffffda RBX: 00007f643d233fa0 RCX: 00007f643cfba799 [ 229.529992][ T9028] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000004 [ 229.537984][ T9028] RBP: 00007f643b214090 R08: 0000000000000000 R09: 0000000000000000 [ 229.545970][ T9028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.554122][ T9028] R13: 00007f643d234038 R14: 00007f643d233fa0 R15: 00007ffdebab1dd8 [ 229.562112][ T9028] [ 230.417032][ T9046] delete_channel: no stack [ 230.844887][ T9069] netlink: 'syz.2.1565': attribute type 19 has an invalid length. [ 231.391587][ T9098] netlink: 'syz.0.1574': attribute type 17 has an invalid length. [ 231.508990][ T9098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.168942][ T9126] __nla_validate_parse: 7 callbacks suppressed [ 233.168962][ T9126] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1583'. [ 233.206745][ T9126] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1583'. [ 233.217950][ T9123] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1583'. [ 233.228743][ T9126] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1583'. [ 233.402426][ T9132] netlink: 'syz.3.1584': attribute type 19 has an invalid length. [ 233.430248][ T9132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1584'. [ 233.480162][ T9141] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1586'. [ 233.614348][ T9139] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1586'. [ 234.000183][ T9160] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1593'. [ 234.051864][ T9165] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1593'. [ 235.129253][ T9184] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.1600'. [ 235.554632][ T9198] netlink: 'syz.2.1606': attribute type 19 has an invalid length. [ 235.805202][ T9215] netlink: 'syz.1.1612': attribute type 39 has an invalid length. [ 236.114595][ T9217] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 236.794958][ T9247] FAULT_INJECTION: forcing a failure. [ 236.794958][ T9247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.824682][ T9247] CPU: 1 PID: 9247 Comm: syz.3.1625 Not tainted syzkaller #0 [ 236.832123][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.842293][ T9247] Call Trace: [ 236.845589][ T9247] [ 236.848554][ T9247] dump_stack_lvl+0x188/0x250 [ 236.853260][ T9247] ? show_regs_print_info+0x20/0x20 [ 236.858648][ T9247] ? load_image+0x400/0x400 [ 236.863179][ T9247] ? __lock_acquire+0x7d10/0x7d10 [ 236.868224][ T9247] ? perf_trace_lock+0xe4/0x390 [ 236.873210][ T9247] should_fail+0x38c/0x4c0 [ 236.877652][ T9247] _copy_from_user+0x2e/0x170 [ 236.882351][ T9247] ___sys_recvmsg+0x173/0x5c0 [ 236.887059][ T9247] ? __sys_recvmsg+0x280/0x280 [ 236.891848][ T9247] ? trace_event_raw_event_lock+0x270/0x270 [ 236.897887][ T9247] __x64_sys_recvmsg+0x1f9/0x2c0 [ 236.902862][ T9247] ? ___sys_recvmsg+0x5c0/0x5c0 [ 236.907847][ T9247] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 236.913879][ T9247] ? lockdep_hardirqs_on+0x94/0x140 [ 236.919119][ T9247] do_syscall_64+0x4c/0xa0 [ 236.923646][ T9247] ? clear_bhb_loop+0x30/0x80 [ 236.928353][ T9247] ? clear_bhb_loop+0x30/0x80 [ 236.933062][ T9247] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.938976][ T9247] RIP: 0033:0x7f3f1ba04799 [ 236.943418][ T9247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.963353][ T9247] RSP: 002b:00007f3f19c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 236.971986][ T9247] RAX: ffffffffffffffda RBX: 00007f3f1bc7dfa0 RCX: 00007f3f1ba04799 [ 236.979991][ T9247] RDX: 0000000000000042 RSI: 0000200000000680 RDI: 0000000000000003 [ 236.987990][ T9247] RBP: 00007f3f19c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 236.995981][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.003967][ T9247] R13: 00007f3f1bc7e038 R14: 00007f3f1bc7dfa0 R15: 00007ffe7115d708 [ 237.011982][ T9247] [ 237.320193][ T9254] netlink: 'syz.3.1627': attribute type 19 has an invalid length. [ 238.006834][ T9285] netlink: 'syz.0.1637': attribute type 2 has an invalid length. [ 238.015862][ T9285] netlink: 'syz.0.1637': attribute type 8 has an invalid length. [ 238.419568][ T9304] device syzkaller0 entered promiscuous mode [ 238.578762][ T9307] netlink: 'syz.2.1645': attribute type 19 has an invalid length. [ 238.593514][ T9307] __nla_validate_parse: 15 callbacks suppressed [ 238.593552][ T9307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1645'. [ 239.671084][ T9324] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.1648'. [ 239.705628][ T9327] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1648'. [ 239.756566][ T9337] netlink: 'syz.3.1651': attribute type 2 has an invalid length. [ 239.788818][ T9337] netlink: 'syz.3.1651': attribute type 8 has an invalid length. [ 239.810432][ T9337] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1651'. [ 239.840057][ T9336] netlink: 'syz.1.1652': attribute type 10 has an invalid length. [ 239.853366][ T9336] bond0: (slave bond_slave_0): Releasing backup interface [ 240.211377][ T9351] netlink: 'syz.2.1659': attribute type 19 has an invalid length. [ 240.226611][ T9351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1659'. [ 240.726976][ T9372] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1664'. [ 241.402393][ T9396] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1671'. [ 241.609542][ T9397] netlink: 'syz.4.1673': attribute type 19 has an invalid length. [ 241.624430][ T9397] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1673'. [ 242.115515][ T9421] FAULT_INJECTION: forcing a failure. [ 242.115515][ T9421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 242.196741][ T9421] CPU: 1 PID: 9421 Comm: syz.0.1681 Not tainted syzkaller #0 [ 242.204187][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.214274][ T9421] Call Trace: [ 242.217574][ T9421] [ 242.220527][ T9421] dump_stack_lvl+0x188/0x250 [ 242.225241][ T9421] ? show_regs_print_info+0x20/0x20 [ 242.230563][ T9421] ? load_image+0x400/0x400 [ 242.235101][ T9421] ? __lock_acquire+0x7d10/0x7d10 [ 242.240295][ T9421] ? slab_post_alloc_hook+0x4c/0x380 [ 242.245617][ T9421] ? __alloc_skb+0xf4/0x750 [ 242.250144][ T9421] ? sock_wmalloc+0xa6/0x120 [ 242.254757][ T9421] ? l2tp_ip_sendmsg+0x1bf/0x1440 [ 242.259919][ T9421] should_fail+0x38c/0x4c0 [ 242.264375][ T9421] prepare_alloc_pages+0x1e4/0x5f0 [ 242.269549][ T9421] __alloc_pages+0x11b/0x480 [ 242.274171][ T9421] ? zone_statistics+0x170/0x170 [ 242.279170][ T9421] kmalloc_large_node+0x7d/0x190 [ 242.284150][ T9421] __kmalloc_node_track_caller+0x22e/0x3a0 [ 242.289989][ T9421] ? sock_wmalloc+0xa6/0x120 [ 242.294753][ T9421] ? kmem_cache_alloc_node+0x162/0x2d0 [ 242.300236][ T9421] ? __alloc_skb+0xf4/0x750 [ 242.304769][ T9421] ? sock_wmalloc+0xa6/0x120 [ 242.309391][ T9421] __alloc_skb+0x22c/0x750 [ 242.313854][ T9421] sock_wmalloc+0xa6/0x120 [ 242.318308][ T9421] l2tp_ip_sendmsg+0x1bf/0x1440 [ 242.323197][ T9421] ? sock_rps_record_flow+0x17/0x3b0 [ 242.328549][ T9421] ? inet_sendmsg+0x78/0x2f0 [ 242.333172][ T9421] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 242.338571][ T9421] ? security_socket_sendmsg+0x7c/0xa0 [ 242.344067][ T9421] ? inet_send_prepare+0x260/0x260 [ 242.349216][ T9421] ____sys_sendmsg+0x5b7/0x8f0 [ 242.354128][ T9421] ? __sys_sendmsg_sock+0x30/0x30 [ 242.359199][ T9421] ? import_iovec+0x6f/0xa0 [ 242.363735][ T9421] ___sys_sendmsg+0x236/0x2e0 [ 242.368471][ T9421] ? __sys_sendmsg+0x2a0/0x2a0 [ 242.373291][ T9421] ? vfs_write+0x8b2/0xd60 [ 242.377873][ T9421] __se_sys_sendmsg+0x1af/0x290 [ 242.382757][ T9421] ? __x64_sys_sendmsg+0x80/0x80 [ 242.387722][ T9421] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 242.393767][ T9421] ? lockdep_hardirqs_on+0x94/0x140 [ 242.399006][ T9421] do_syscall_64+0x4c/0xa0 [ 242.403518][ T9421] ? clear_bhb_loop+0x30/0x80 [ 242.408228][ T9421] ? clear_bhb_loop+0x30/0x80 [ 242.412939][ T9421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.418866][ T9421] RIP: 0033:0x7f21e52f3799 [ 242.423314][ T9421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.443042][ T9421] RSP: 002b:00007f21e354d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.451495][ T9421] RAX: ffffffffffffffda RBX: 00007f21e556cfa0 RCX: 00007f21e52f3799 [ 242.459489][ T9421] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 242.467565][ T9421] RBP: 00007f21e354d090 R08: 0000000000000000 R09: 0000000000000000 [ 242.475550][ T9421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.483745][ T9421] R13: 00007f21e556d038 R14: 00007f21e556cfa0 R15: 00007ffccaa455e8 [ 242.491788][ T9421] [ 242.767484][ T9437] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1688'. [ 242.830554][ T9437] team0: Port device team_slave_0 removed [ 242.849834][ T9437] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 243.236221][ T9450] netlink: 'syz.2.1692': attribute type 19 has an invalid length. [ 243.244894][ T9450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1692'. [ 243.829574][ T9465] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1697'. [ 243.928505][ T9464] netlink: 'syz.1.1696': attribute type 19 has an invalid length. [ 243.946539][ T9464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1696'. [ 244.057267][ T9468] : port 1(gretap0) entered blocking state [ 244.071108][ T9468] : port 1(gretap0) entered disabled state [ 244.154692][ T9468] device gretap0 entered promiscuous mode [ 244.540584][ T9487] netlink: 'syz.0.1705': attribute type 19 has an invalid length. [ 244.551946][ T9487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1705'. [ 245.056479][ T9505] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1710'. [ 245.323474][ T9512] netlink: 'syz.2.1713': attribute type 19 has an invalid length. [ 245.346597][ T9512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1713'. [ 245.914071][ T9529] netlink: 143108 bytes leftover after parsing attributes in process `syz.1.1718'. [ 245.954095][ T9519] netlink: 'syz.0.1715': attribute type 3 has an invalid length. [ 245.968503][ T9529] netlink: 'syz.1.1718': attribute type 1 has an invalid length. [ 245.969288][ T9519] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1715'. [ 246.067263][ T9533] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1718'. [ 246.183247][ T9535] netlink: 'syz.4.1720': attribute type 19 has an invalid length. [ 246.230335][ T9535] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1720'. [ 246.923879][ T9564] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1732'. [ 246.940717][ T9567] FAULT_INJECTION: forcing a failure. [ 246.940717][ T9567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.962092][ T9567] CPU: 0 PID: 9567 Comm: syz.3.1733 Not tainted syzkaller #0 [ 246.964570][ T9569] netlink: 'syz.0.1730': attribute type 19 has an invalid length. [ 246.969513][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.969530][ T9567] Call Trace: [ 246.969539][ T9567] [ 246.969546][ T9567] dump_stack_lvl+0x188/0x250 [ 246.969577][ T9567] ? show_regs_print_info+0x20/0x20 [ 246.969600][ T9567] ? load_image+0x400/0x400 [ 246.969624][ T9567] ? __lock_acquire+0x7d10/0x7d10 [ 246.969652][ T9567] should_fail+0x38c/0x4c0 [ 246.969680][ T9567] _copy_from_user+0x2e/0x170 [ 246.969711][ T9567] iovec_from_user+0x142/0x370 [ 246.969739][ T9567] __import_iovec+0x70/0x490 [ 246.969768][ T9567] import_iovec+0x6f/0xa0 [ 246.969791][ T9567] ___sys_recvmsg+0x4e9/0x5c0 [ 246.969819][ T9567] ? __sys_recvmsg+0x280/0x280 [ 246.969844][ T9567] ? __lock_acquire+0x7d10/0x7d10 [ 246.969891][ T9567] __x64_sys_recvmsg+0x1f9/0x2c0 [ 246.969914][ T9567] ? ___sys_recvmsg+0x5c0/0x5c0 [ 246.969933][ T9567] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 246.969965][ T9567] ? lockdep_hardirqs_on+0x94/0x140 [ 246.969989][ T9567] do_syscall_64+0x4c/0xa0 [ 246.970006][ T9567] ? clear_bhb_loop+0x30/0x80 [ 246.970023][ T9567] ? clear_bhb_loop+0x30/0x80 [ 246.970043][ T9567] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.970061][ T9567] RIP: 0033:0x7f3f1ba04799 [ 246.970080][ T9567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.970097][ T9567] RSP: 002b:00007f3f19c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 246.970120][ T9567] RAX: ffffffffffffffda RBX: 00007f3f1bc7dfa0 RCX: 00007f3f1ba04799 [ 246.970134][ T9567] RDX: 0000000000000042 RSI: 0000200000000680 RDI: 0000000000000003 [ 246.970148][ T9567] RBP: 00007f3f19c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 246.970160][ T9567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.970172][ T9567] R13: 00007f3f1bc7e038 R14: 00007f3f1bc7dfa0 R15: 00007ffe7115d708 [ 246.970201][ T9567] [ 247.257867][ T9578] netlink: 'syz.2.1734': attribute type 19 has an invalid length. [ 247.577462][ T9595] netlink: 'syz.3.1741': attribute type 17 has an invalid length. [ 247.611755][ T9595] netlink: 'syz.3.1741': attribute type 16 has an invalid length. [ 248.077358][ T9614] FAULT_INJECTION: forcing a failure. [ 248.077358][ T9614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.125400][ T9614] CPU: 1 PID: 9614 Comm: syz.3.1748 Not tainted syzkaller #0 [ 248.133112][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.143351][ T9614] Call Trace: [ 248.146641][ T9614] [ 248.149566][ T9614] dump_stack_lvl+0x188/0x250 [ 248.154245][ T9614] ? show_regs_print_info+0x20/0x20 [ 248.159455][ T9614] ? load_image+0x400/0x400 [ 248.163977][ T9614] ? __lock_acquire+0x7d10/0x7d10 [ 248.169210][ T9614] should_fail+0x38c/0x4c0 [ 248.173651][ T9614] _copy_from_user+0x2e/0x170 [ 248.178373][ T9614] __copy_msghdr_from_user+0xc9/0x630 [ 248.183785][ T9614] ? verify_lock_unused+0x140/0x140 [ 248.189012][ T9614] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 248.194338][ T9614] ___sys_sendmsg+0x19a/0x2e0 [ 248.199040][ T9614] ? __sys_sendmsg+0x2a0/0x2a0 [ 248.203842][ T9614] ? trace_event_raw_event_lock+0x270/0x270 [ 248.209844][ T9614] ? vfs_write+0x8b2/0xd60 [ 248.214291][ T9614] __se_sys_sendmsg+0x1af/0x290 [ 248.219173][ T9614] ? __x64_sys_sendmsg+0x80/0x80 [ 248.224137][ T9614] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 248.230138][ T9614] ? lockdep_hardirqs_on+0x94/0x140 [ 248.235381][ T9614] do_syscall_64+0x4c/0xa0 [ 248.239852][ T9614] ? clear_bhb_loop+0x30/0x80 [ 248.244556][ T9614] ? clear_bhb_loop+0x30/0x80 [ 248.249361][ T9614] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.255301][ T9614] RIP: 0033:0x7f3f1ba04799 [ 248.259755][ T9614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.279570][ T9614] RSP: 002b:00007f3f19c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.288118][ T9614] RAX: ffffffffffffffda RBX: 00007f3f1bc7dfa0 RCX: 00007f3f1ba04799 [ 248.296120][ T9614] RDX: 000000003000c0c0 RSI: 0000200000000080 RDI: 0000000000000004 [ 248.304210][ T9614] RBP: 00007f3f19c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 248.312306][ T9614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.320495][ T9614] R13: 00007f3f1bc7e038 R14: 00007f3f1bc7dfa0 R15: 00007ffe7115d708 [ 248.328513][ T9614] [ 248.617949][ T9636] IPv6: Can't replace route, no match found [ 249.105613][ T9639] sctp: [Deprecated]: syz.2.1754 (pid 9639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.105613][ T9639] Use struct sctp_sack_info instead [ 249.186727][ T9648] validate_nla: 2 callbacks suppressed [ 249.186815][ T9648] netlink: 'syz.4.1758': attribute type 2 has an invalid length. [ 249.215203][ T9648] netlink: 'syz.4.1758': attribute type 8 has an invalid length. [ 249.236754][ T9648] __nla_validate_parse: 6 callbacks suppressed [ 249.236803][ T9648] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1758'. [ 249.509333][ T9660] netlink: 'syz.2.1760': attribute type 21 has an invalid length. [ 249.530123][ T9660] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1760'. [ 249.778914][ T9669] netlink: 'syz.4.1763': attribute type 19 has an invalid length. [ 249.797469][ T9669] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1763'. [ 249.871050][ T9670] netlink: 'syz.2.1764': attribute type 21 has an invalid length. [ 249.918983][ T9670] netlink: 'syz.2.1764': attribute type 6 has an invalid length. [ 249.966907][ T9670] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1764'. [ 250.067871][ T9681] netlink: 'syz.2.1764': attribute type 10 has an invalid length. [ 250.172109][ T9681] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1764'. [ 250.554751][ T9699] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1772'. [ 250.653704][ T9697] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1772'. [ 250.768956][ T9702] netlink: 'syz.4.1773': attribute type 2 has an invalid length. [ 250.864088][ T9702] netlink: 'syz.4.1773': attribute type 8 has an invalid length. [ 250.910148][ T9702] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1773'. [ 251.521112][ T9733] netlink: 'syz.4.1783': attribute type 19 has an invalid length. [ 251.567610][ T9733] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1783'. [ 252.137532][ T9759] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.1790'. [ 252.195795][ T9761] openvswitch: netlink: Tunnel attr 8692 out of range max 16 [ 254.439238][ T9839] __nla_validate_parse: 11 callbacks suppressed [ 254.439256][ T9839] netlink: 124112 bytes leftover after parsing attributes in process `syz.4.1816'. [ 254.512154][ T9846] validate_nla: 6 callbacks suppressed [ 254.512172][ T9846] netlink: 'syz.3.1819': attribute type 12 has an invalid length. [ 254.586224][ T9846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1819'. [ 254.849137][ T9858] netlink: 'syz.0.1820': attribute type 19 has an invalid length. [ 254.937049][ T9858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1820'. [ 255.016181][ T9856] netlink: 'syz.3.1821': attribute type 2 has an invalid length. [ 255.034125][ T9856] netlink: 'syz.3.1821': attribute type 8 has an invalid length. [ 255.107168][ T9856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1821'. [ 255.156933][ T9859] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1822'. [ 255.382817][ T9870] netlink: zone id is out of range [ 255.436799][ T9870] netlink: set zone limit has 8 unknown bytes [ 255.700304][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.706845][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.839475][ T9887] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.1831'. [ 256.467974][ T9904] netlink: 'syz.4.1836': attribute type 16 has an invalid length. [ 256.508701][ T9904] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1836'. [ 256.561387][ T9899] netlink: 'syz.2.1834': attribute type 2 has an invalid length. [ 256.584387][ T9899] netlink: 'syz.2.1834': attribute type 8 has an invalid length. [ 256.638191][ T9899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1834'. [ 257.632876][ T9940] netlink: 'syz.0.1851': attribute type 10 has an invalid length. [ 257.656371][ T9940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.664728][ T9940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.761556][ T9946] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1852'. [ 258.945560][ T9989] netlink: 'syz.1.1865': attribute type 3 has an invalid length. [ 259.018464][ T9989] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1865'. [ 259.080318][ T9991] netlink: 'syz.2.1862': attribute type 3 has an invalid length. [ 260.375287][T10037] device macvlan1 entered promiscuous mode [ 262.141237][T10083] netlink: 'syz.2.1897': attribute type 3 has an invalid length. [ 262.188725][T10083] __nla_validate_parse: 2 callbacks suppressed [ 262.188744][T10083] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1897'. [ 263.057016][T10089] netlink: 'syz.4.1899': attribute type 3 has an invalid length. [ 263.064808][T10089] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1899'. [ 263.427389][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1905'. [ 263.956742][T10127] netlink: 'syz.4.1910': attribute type 39 has an invalid length. [ 264.250451][T10139] netlink: 'syz.4.1917': attribute type 19 has an invalid length. [ 264.277124][T10139] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1917'. [ 264.376107][T10140] FAULT_INJECTION: forcing a failure. [ 264.376107][T10140] name failslab, interval 1, probability 0, space 0, times 0 [ 264.561262][T10140] CPU: 1 PID: 10140 Comm: syz.3.1916 Not tainted syzkaller #0 [ 264.568875][T10140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.578941][T10140] Call Trace: [ 264.582222][T10140] [ 264.585162][T10140] dump_stack_lvl+0x188/0x250 [ 264.589853][T10140] ? show_regs_print_info+0x20/0x20 [ 264.595070][T10140] ? load_image+0x400/0x400 [ 264.599577][T10140] ? __might_sleep+0xf0/0xf0 [ 264.604256][T10140] ? __lock_acquire+0x7d10/0x7d10 [ 264.609366][T10140] ? netlink_insert+0xe95/0x11f0 [ 264.614306][T10140] should_fail+0x38c/0x4c0 [ 264.618837][T10140] should_failslab+0x5/0x20 [ 264.623339][T10140] slab_pre_alloc_hook+0x51/0xc0 [ 264.628283][T10140] kmem_cache_alloc_node+0x47/0x2d0 [ 264.633480][T10140] ? __alloc_skb+0xf4/0x750 [ 264.637990][T10140] __alloc_skb+0xf4/0x750 [ 264.642385][T10140] netlink_sendmsg+0x654/0xbe0 [ 264.647170][T10140] ? netlink_getsockopt+0x570/0x570 [ 264.652392][T10140] ? aa_sock_msg_perm+0x94/0x150 [ 264.657333][T10140] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 264.662619][T10140] ? security_socket_sendmsg+0x7c/0xa0 [ 264.668077][T10140] ? netlink_getsockopt+0x570/0x570 [ 264.673357][T10140] ____sys_sendmsg+0x5b7/0x8f0 [ 264.678199][T10140] ? __sys_sendmsg_sock+0x30/0x30 [ 264.683234][T10140] ? import_iovec+0x6f/0xa0 [ 264.687750][T10140] ___sys_sendmsg+0x236/0x2e0 [ 264.692438][T10140] ? __sys_sendmsg+0x2a0/0x2a0 [ 264.697302][T10140] ? vfs_write+0x8b2/0xd60 [ 264.701739][T10140] __se_sys_sendmsg+0x1af/0x290 [ 264.706605][T10140] ? __x64_sys_sendmsg+0x80/0x80 [ 264.711551][T10140] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 264.717549][T10140] ? lockdep_hardirqs_on+0x94/0x140 [ 264.722750][T10140] do_syscall_64+0x4c/0xa0 [ 264.727267][T10140] ? clear_bhb_loop+0x30/0x80 [ 264.732147][T10140] ? clear_bhb_loop+0x30/0x80 [ 264.736846][T10140] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.742769][T10140] RIP: 0033:0x7f3f1ba04799 [ 264.747195][T10140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.766895][T10140] RSP: 002b:00007f3f19c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.775318][T10140] RAX: ffffffffffffffda RBX: 00007f3f1bc7dfa0 RCX: 00007f3f1ba04799 [ 264.783289][T10140] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000a [ 264.791263][T10140] RBP: 00007f3f19c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 264.799431][T10140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.808181][T10140] R13: 00007f3f1bc7e038 R14: 00007f3f1bc7dfa0 R15: 00007ffe7115d708 [ 264.816171][T10140] [ 265.225557][T10152] netlink: 'syz.2.1919': attribute type 39 has an invalid length. [ 265.827213][T10185] netlink: 'syz.3.1928': attribute type 7 has an invalid length. [ 265.835024][T10185] netlink: 'syz.3.1928': attribute type 1 has an invalid length. [ 265.928122][T10185] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1928'. [ 266.194920][T10194] netlink: 'syz.2.1932': attribute type 19 has an invalid length. [ 266.217639][T10194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1932'. [ 266.287029][T10197] netlink: 'syz.1.1933': attribute type 10 has an invalid length. [ 266.728329][T10220] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1937'. [ 269.878402][T10289] IPv6: NLM_F_CREATE should be specified when creating new route [ 269.958061][T10289] IPv6: Can't replace route, no match found [ 269.971801][T10299] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 270.687750][T10324] netlink: 'syz.1.1974': attribute type 10 has an invalid length. [ 270.755764][T10325] netlink: 'syz.3.1973': attribute type 10 has an invalid length. [ 270.837923][T10328] bridge0: port 3(team0) entered disabled state [ 271.681333][T10339] raw_sendmsg: syz.0.1979 forgot to set AF_INET. Fix it! [ 271.792715][T10328] device bridge_slave_1 left promiscuous mode [ 271.811055][T10328] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.197782][T10328] device bridge_slave_0 left promiscuous mode [ 272.204051][T10328] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.289490][T10337] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 272.305620][T10344] IPv6: Can't replace route, no match found [ 272.486947][T10357] FAULT_INJECTION: forcing a failure. [ 272.486947][T10357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.521474][T10357] CPU: 0 PID: 10357 Comm: syz.0.1985 Not tainted syzkaller #0 [ 272.529000][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.539170][T10357] Call Trace: [ 272.542554][T10357] [ 272.545503][T10357] dump_stack_lvl+0x188/0x250 [ 272.550202][T10357] ? show_regs_print_info+0x20/0x20 [ 272.555416][T10357] ? load_image+0x400/0x400 [ 272.559945][T10357] ? __lock_acquire+0x7d10/0x7d10 [ 272.565142][T10357] ? vfs_write+0x8b2/0xd60 [ 272.569595][T10357] should_fail+0x38c/0x4c0 [ 272.574028][T10357] _copy_from_user+0x2e/0x170 [ 272.578734][T10357] __sys_bpf+0x26d/0x6f0 [ 272.583001][T10357] ? bpf_link_show_fdinfo+0x380/0x380 [ 272.588418][T10357] ? vtime_user_exit+0x2c8/0x3e0 [ 272.593384][T10357] __x64_sys_bpf+0x78/0x90 [ 272.597938][T10357] do_syscall_64+0x4c/0xa0 [ 272.602379][T10357] ? clear_bhb_loop+0x30/0x80 [ 272.607116][T10357] ? clear_bhb_loop+0x30/0x80 [ 272.611816][T10357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.617713][T10357] RIP: 0033:0x7f21e52f3799 [ 272.622130][T10357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.641821][T10357] RSP: 002b:00007f21e354d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.650350][T10357] RAX: ffffffffffffffda RBX: 00007f21e556cfa0 RCX: 00007f21e52f3799 [ 272.658326][T10357] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 272.666299][T10357] RBP: 00007f21e354d090 R08: 0000000000000000 R09: 0000000000000000 [ 272.674293][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.682291][T10357] R13: 00007f21e556d038 R14: 00007f21e556cfa0 R15: 00007ffccaa455e8 [ 272.690299][T10357] [ 272.804590][T10367] netlink: 'syz.1.1988': attribute type 40 has an invalid length. [ 273.003264][T10371] netlink: 'syz.4.1989': attribute type 39 has an invalid length. [ 273.427394][T10393] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2000'. [ 273.856585][ T7513] wlan1: Trigger new scan to find an IBSS to join [ 273.985176][T10418] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2008'. [ 273.999501][T10418] netlink: 'syz.3.2008': attribute type 39 has an invalid length. [ 274.554132][T10429] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2012'. [ 274.632492][T10427] device syzkaller0 entered promiscuous mode [ 274.816646][ T7520] wlan1: Trigger new scan to find an IBSS to join [ 274.860292][T10443] netlink: 'syz.1.2019': attribute type 10 has an invalid length. [ 274.888757][T10443] team0: Device ipvlan1 failed to register rx_handler [ 275.495857][T10475] netlink: 'syz.1.2031': attribute type 10 has an invalid length. [ 275.513415][T10475] device geneve0 entered promiscuous mode [ 275.706707][T10475] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 276.119989][T10498] netlink: 'syz.3.2042': attribute type 19 has an invalid length. [ 276.147171][T10498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2042'. [ 276.169241][T10502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2043'. [ 276.199274][T10502] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2043'. [ 276.287982][T10502] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2043'. [ 276.318656][T10511] FAULT_INJECTION: forcing a failure. [ 276.318656][T10511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.345899][T10502] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2043'. [ 276.352969][T10509] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2044'. [ 276.360569][T10511] CPU: 1 PID: 10511 Comm: syz.2.2045 Not tainted syzkaller #0 [ 276.371471][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.381726][T10511] Call Trace: [ 276.385035][T10511] [ 276.388067][T10511] dump_stack_lvl+0x188/0x250 [ 276.392784][T10511] ? show_regs_print_info+0x20/0x20 [ 276.398088][T10511] ? load_image+0x400/0x400 [ 276.402690][T10511] ? __lock_acquire+0x7d10/0x7d10 [ 276.407728][T10511] should_fail+0x38c/0x4c0 [ 276.412153][T10511] _copy_to_user+0x2e/0x130 [ 276.416748][T10511] simple_read_from_buffer+0xe3/0x150 [ 276.422125][T10511] proc_fail_nth_read+0x1a6/0x220 [ 276.427163][T10511] ? proc_fault_inject_write+0x310/0x310 [ 276.432886][T10511] ? fsnotify_perm+0x254/0x560 [ 276.437657][T10511] ? proc_fault_inject_write+0x310/0x310 [ 276.443292][T10511] vfs_read+0x301/0xd60 [ 276.447462][T10511] ? kernel_read+0x1e0/0x1e0 [ 276.452056][T10511] ? __fget_files+0x40f/0x480 [ 276.456737][T10511] ? mutex_lock_nested+0x17/0x20 [ 276.461763][T10511] ? __fdget_pos+0x2bf/0x370 [ 276.466352][T10511] ? ksys_read+0x71/0x260 [ 276.470680][T10511] ksys_read+0x152/0x260 [ 276.474922][T10511] ? vfs_write+0xd60/0xd60 [ 276.479338][T10511] ? lockdep_hardirqs_on+0x94/0x140 [ 276.484590][T10511] do_syscall_64+0x4c/0xa0 [ 276.489004][T10511] ? clear_bhb_loop+0x30/0x80 [ 276.493705][T10511] ? clear_bhb_loop+0x30/0x80 [ 276.498414][T10511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.504328][T10511] RIP: 0033:0x7f555eeb6fce [ 276.508751][T10511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 276.528553][T10511] RSP: 002b:00007f555d14ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 276.536980][T10511] RAX: ffffffffffffffda RBX: 00007f555d1506c0 RCX: 00007f555eeb6fce [ 276.544953][T10511] RDX: 000000000000000f RSI: 00007f555d1500a0 RDI: 000000000000000c [ 276.553032][T10511] RBP: 00007f555d150090 R08: 0000000000000000 R09: 0000000000000000 [ 276.561006][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.568994][T10511] R13: 00007f555f170038 R14: 00007f555f16ffa0 R15: 00007fff1eb57cc8 [ 276.576985][T10511] [ 276.622412][T10509] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2044'. [ 276.755204][T10520] netlink: 'syz.0.2047': attribute type 21 has an invalid length. [ 276.853073][T10521] netlink: 'syz.2.2048': attribute type 10 has an invalid length. [ 276.863183][ T4868] wlan1: Trigger new scan to find an IBSS to join [ 276.936504][T10528] FAULT_INJECTION: forcing a failure. [ 276.936504][T10528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 277.008039][T10528] CPU: 1 PID: 10528 Comm: syz.1.2051 Not tainted syzkaller #0 [ 277.015569][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.025650][T10528] Call Trace: [ 277.028936][T10528] [ 277.031967][T10528] dump_stack_lvl+0x188/0x250 [ 277.036649][T10528] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 277.042830][T10528] ? show_regs_print_info+0x20/0x20 [ 277.048050][T10528] ? load_image+0x400/0x400 [ 277.052565][T10528] should_fail+0x38c/0x4c0 [ 277.056996][T10528] prepare_alloc_pages+0x1e4/0x5f0 [ 277.062131][T10528] __alloc_pages+0x11b/0x480 [ 277.066715][T10528] ? zone_statistics+0x170/0x170 [ 277.071652][T10528] ? lockdep_hardirqs_on+0x94/0x140 [ 277.076849][T10528] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 277.083037][T10528] kmalloc_large_node+0x7d/0x190 [ 277.088100][T10528] __kmalloc_node+0x232/0x3b0 [ 277.092820][T10528] kvmalloc_node+0x84/0x130 [ 277.097353][T10528] generic_map_delete_batch+0x22d/0x660 [ 277.103032][T10528] ? __fget_files+0x40f/0x480 [ 277.107734][T10528] ? bpf_map_inc_not_zero+0x100/0x100 [ 277.113126][T10528] ? __fdget+0x18b/0x210 [ 277.117383][T10528] ? bpf_map_inc_not_zero+0x100/0x100 [ 277.122768][T10528] bpf_map_do_batch+0x466/0x600 [ 277.127640][T10528] __sys_bpf+0x671/0x6f0 [ 277.131901][T10528] ? bpf_link_show_fdinfo+0x380/0x380 [ 277.137300][T10528] ? vtime_user_exit+0x2c8/0x3e0 [ 277.142258][T10528] __x64_sys_bpf+0x78/0x90 [ 277.146707][T10528] do_syscall_64+0x4c/0xa0 [ 277.151157][T10528] ? clear_bhb_loop+0x30/0x80 [ 277.155871][T10528] ? clear_bhb_loop+0x30/0x80 [ 277.160566][T10528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.166474][T10528] RIP: 0033:0x7f643cfba799 [ 277.170913][T10528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.190735][T10528] RSP: 002b:00007f643b214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.199173][T10528] RAX: ffffffffffffffda RBX: 00007f643d233fa0 RCX: 00007f643cfba799 [ 277.207976][T10528] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001b [ 277.215957][T10528] RBP: 00007f643b214090 R08: 0000000000000000 R09: 0000000000000000 [ 277.223937][T10528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.231917][T10528] R13: 00007f643d234038 R14: 00007f643d233fa0 R15: 00007ffdebab1dd8 [ 277.239929][T10528] [ 277.254396][ T7520] wlan1: Creating new IBSS network, BSSID 2a:1f:8a:ec:bb:61 [ 277.861516][ T7520] wlan1: Trigger new scan to find an IBSS to join [ 277.961804][T10558] netlink: 'syz.3.2060': attribute type 19 has an invalid length. [ 278.083913][T10565] netlink: 'syz.0.2063': attribute type 8 has an invalid length. [ 278.310612][T10575] netlink: 'syz.0.2067': attribute type 10 has an invalid length. [ 278.336216][T10576] netlink: 'syz.1.2066': attribute type 1 has an invalid length. [ 278.361100][T10575] device geneve0 entered promiscuous mode [ 278.493460][T10580] sock: sock_timestamping_bind_phc: sock not bind to device [ 278.585220][T10575] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 278.688945][T10591] FAULT_INJECTION: forcing a failure. [ 278.688945][T10591] name failslab, interval 1, probability 0, space 0, times 0 [ 278.717288][T10591] CPU: 0 PID: 10591 Comm: syz.4.2073 Not tainted syzkaller #0 [ 278.724808][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.735058][T10591] Call Trace: [ 278.738357][T10591] [ 278.741380][T10591] dump_stack_lvl+0x188/0x250 [ 278.746147][T10591] ? show_regs_print_info+0x20/0x20 [ 278.751363][T10591] ? load_image+0x400/0x400 [ 278.755869][T10591] ? __lock_acquire+0x7d10/0x7d10 [ 278.760900][T10591] ? __might_fault+0xb7/0x110 [ 278.765591][T10591] should_fail+0x38c/0x4c0 [ 278.770024][T10591] should_failslab+0x5/0x20 [ 278.774526][T10591] slab_pre_alloc_hook+0x51/0xc0 [ 278.779472][T10591] __kmalloc_node+0x6e/0x3b0 [ 278.784270][T10591] ? kvmalloc_node+0x84/0x130 [ 278.788982][T10591] kvmalloc_node+0x84/0x130 [ 278.793518][T10591] map_get_next_key+0x292/0x5f0 [ 278.798410][T10591] __sys_bpf+0x3e5/0x6f0 [ 278.802682][T10591] ? bpf_link_show_fdinfo+0x380/0x380 [ 278.808091][T10591] ? vtime_user_exit+0x2c8/0x3e0 [ 278.813061][T10591] __x64_sys_bpf+0x78/0x90 [ 278.817502][T10591] do_syscall_64+0x4c/0xa0 [ 278.821940][T10591] ? clear_bhb_loop+0x30/0x80 [ 278.826719][T10591] ? clear_bhb_loop+0x30/0x80 [ 278.831409][T10591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 278.837407][T10591] RIP: 0033:0x7f1dcfbeb799 [ 278.841865][T10591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.861569][T10591] RSP: 002b:00007f1dcde45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.870003][T10591] RAX: ffffffffffffffda RBX: 00007f1dcfe64fa0 RCX: 00007f1dcfbeb799 [ 278.878084][T10591] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000004 [ 278.886264][T10591] RBP: 00007f1dcde45090 R08: 0000000000000000 R09: 0000000000000000 [ 278.894261][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.902252][T10591] R13: 00007f1dcfe65038 R14: 00007f1dcfe64fa0 R15: 00007ffd44bae648 [ 278.910258][T10591] [ 279.142421][T10603] netlink: 'syz.2.2078': attribute type 21 has an invalid length. [ 279.244127][T10603] netlink: 'syz.2.2078': attribute type 1 has an invalid length. [ 279.341264][T10603] __nla_validate_parse: 6 callbacks suppressed [ 279.341286][T10603] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2078'. [ 279.406868][T10613] netlink: 'syz.1.2079': attribute type 19 has an invalid length. [ 279.897505][T10613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2079'. [ 280.896590][ T4868] wlan1: Creating new IBSS network, BSSID 00:00:00:ff:00:00 [ 313.296637][ T7524] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.145607][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.152000][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 344.017500][ T7513] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.580815][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.588002][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.286292][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 385.293365][ C0] rcu: 1-....: (1 GPs behind) idle=aa5/1/0x4000000000000000 softirq=25580/25582 fqs=5244 [ 385.304792][ C0] (detected by 0, t=10502 jiffies, g=34253, q=464) [ 385.311417][ C0] Sending NMI from CPU 0 to CPUs 1: [ 385.316647][ C1] NMI backtrace for cpu 1 [ 385.316657][ C1] CPU: 1 PID: 10606 Comm: syz.4.2077 Not tainted syzkaller #0 [ 385.316673][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.316681][ C1] RIP: 0010:native_apic_msr_eoi_write+0xb/0x10 [ 385.316706][ C1] Code: 8b 06 bf f0 03 00 00 89 de 5b 41 5e 41 5f ff e0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b9 0b 08 00 00 31 c0 31 d2 0f 30 0f 1f 40 00 81 ff cf 00 00 00 7f 0c 83 ff 20 74 2a 83 ff 30 74 [ 385.316719][ C1] RSP: 0018:ffffc90000dd0560 EFLAGS: 00000046 [ 385.316733][ C1] RAX: 0000000000000000 RBX: ffffffff8be309c8 RCX: 000000000000080b [ 385.316744][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000b0 [ 385.316753][ C1] RBP: 0000000000000000 R08: ffffffff8f0e8048 R09: ffffffff8f0e8058 [ 385.316764][ C1] R10: ffffffff8f0e8050 R11: ffffffff8f0e8043 R12: 0000000000000000 [ 385.316774][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 385.316791][ C1] FS: 00007f1dcde456c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 385.316805][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.316816][ C1] CR2: 00007f3f1bc7fdac CR3: 0000000022ff7000 CR4: 00000000003506e0 [ 385.316831][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 385.316840][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 385.316850][ C1] Call Trace: [ 385.316857][ C1] [ 385.316862][ C1] __sysvec_irq_work+0x51/0x240 [ 385.316889][ C1] sysvec_irq_work+0x4a/0xc0 [ 385.316907][ C1] asm_sysvec_irq_work+0x16/0x20 [ 385.316923][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 385.316940][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 f0 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 385.316951][ C1] RSP: 0018:ffffc90000dd0640 EFLAGS: 00000206 [ 385.316963][ C1] RAX: c45bd6421b90ad00 RBX: 1ffff920001ba0cc RCX: c45bd6421b90ad00 [ 385.316973][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f800 [ 385.316983][ C1] RBP: ffffc90000dd0720 R08: ffffffff901d318f R09: 1ffffffff203a631 [ 385.316993][ C1] R10: dffffc0000000000 R11: fffffbfff203a632 R12: ffffffff8c322f00 [ 385.317003][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002 [ 385.317024][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 385.317036][ C1] ? ip_skb_dst_mtu+0x584/0x9b0 [ 385.317058][ C1] __rcu_read_unlock+0x78/0xd0 [ 385.317072][ C1] __ip_queue_xmit+0x1242/0x1c00 [ 385.317092][ C1] __tcp_transmit_skb+0x1d11/0x3200 [ 385.317119][ C1] ? __tcp_send_ack+0x5d0/0x5d0 [ 385.317142][ C1] __tcp_retransmit_skb+0x92c/0x1290 [ 385.317158][ C1] ? tcp_enter_loss+0xb7f/0x1180 [ 385.317174][ C1] tcp_retransmit_skb+0x2e/0x350 [ 385.317190][ C1] tcp_retransmit_timer+0x144b/0x2540 [ 385.317210][ C1] tcp_write_timer_handler+0x205/0x9a0 [ 385.317227][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 385.317242][ C1] tcp_write_timer+0x126/0x280 [ 385.317258][ C1] call_timer_fn+0x17b/0x540 [ 385.317273][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 385.317287][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 385.317302][ C1] ? __run_timers+0x800/0x800 [ 385.317322][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 385.317338][ C1] __run_timers+0x53e/0x800 [ 385.317358][ C1] ? detach_timer+0x2b0/0x2b0 [ 385.317380][ C1] run_timer_softirq+0x63/0xf0 [ 385.317395][ C1] handle_softirqs+0x339/0x830 [ 385.317411][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 385.317426][ C1] ? do_softirq+0x210/0x210 [ 385.317441][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 385.317457][ C1] __irq_exit_rcu+0x13b/0x230 [ 385.317470][ C1] ? irq_exit_rcu+0x20/0x20 [ 385.317488][ C1] irq_exit_rcu+0x5/0x20 [ 385.317499][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 385.317515][ C1] [ 385.317519][ C1] [ 385.317524][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 385.317538][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 385.317553][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 85 ee 8d f7 e8 f0 db ba f7 fb bf 01 00 00 00 65 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 385.317564][ C1] RSP: 0018:ffffc9000325f2c0 EFLAGS: 00000282 [ 385.317575][ C1] RAX: c45bd6421b90ad00 RBX: 0000000000000000 RCX: c45bd6421b90ad00 [ 385.317585][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 385.317594][ C1] RBP: ffffc9000325f360 R08: ffffffff901d30cf R09: 1ffffffff203a619 [ 385.317604][ C1] R10: dffffc0000000000 R11: fffffbfff203a61a R12: 0000000000000000 [ 385.317613][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200064be58 [ 385.317631][ C1] ? __cond_resched+0xd0/0xd0 [ 385.317646][ C1] ? rcu_is_watching+0x11/0xa0 [ 385.317660][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 385.317674][ C1] irqentry_exit+0x63/0x70 [ 385.317688][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 385.317701][ C1] RIP: 0010:unwind_get_return_address+0x0/0x80 [ 385.317717][ C1] Code: 46 ff ff ff 49 89 fe 48 89 f7 49 89 f7 e8 c8 22 89 00 4c 89 f7 4c 89 fe e9 2d ff ff ff e8 68 1d 87 08 0f 1f 84 00 00 00 00 00 <41> 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 [ 385.317728][ C1] RSP: 0018:ffffc9000325f420 EFLAGS: 00000202 [ 385.317738][ C1] RAX: 0000000080000001 RBX: ffffc9000325f4e0 RCX: 0000000080000000 [ 385.317748][ C1] RDX: ffffc9000325f401 RSI: ffffc9000325f7f8 RDI: ffffc9000325f428 [ 385.317758][ C1] RBP: ffffc9000325f4b0 R08: ffffc9000325f487 R09: ffffc9000325f478 [ 385.317767][ C1] R10: dffffc0000000000 R11: fffff5200064be91 R12: ffff88802aaf1dc0 [ 385.317778][ C1] R13: ffffffff8d5339b8 R14: ffffffff81679dc0 R15: ffffc9000325f428 [ 385.317788][ C1] ? stack_trace_save+0xf0/0xf0 [ 385.317807][ C1] arch_stack_walk+0xf2/0x140 [ 385.317825][ C1] ? ops_init+0x357/0x600 [ 385.317841][ C1] stack_trace_save+0xa6/0xf0 [ 385.317854][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 385.317867][ C1] ? __kasan_kmalloc+0xcc/0xf0 [ 385.317889][ C1] ? ops_init+0x357/0x600 [ 385.317905][ C1] __kasan_kmalloc+0xb5/0xf0 [ 385.317918][ C1] ? __kasan_kmalloc+0xb5/0xf0 [ 385.317931][ C1] ? kmemdup+0x22/0x50 [ 385.317942][ C1] ? addrconf_init_net+0x2c/0x5a0 [ 385.317978][ C1] kmemdup+0x22/0x50 [ 385.317991][ C1] addrconf_init_net+0x2c/0x5a0 [ 385.318007][ C1] ops_init+0x357/0x600 [ 385.318025][ C1] setup_net+0x39e/0xa10 [ 385.318040][ C1] ? copy_net_ns+0x5b0/0x5b0 [ 385.318055][ C1] ? copy_net_ns+0x32e/0x5b0 [ 385.318068][ C1] ? down_read_killable+0x1ce/0x340 [ 385.318085][ C1] copy_net_ns+0x348/0x5b0 [ 385.318101][ C1] create_new_namespaces+0x3d3/0x6f0 [ 385.318122][ C1] copy_namespaces+0x37d/0x3e0 [ 385.318138][ C1] copy_process+0x1834/0x3e20 [ 385.318162][ C1] ? rcu_lock_release+0x5/0x20 [ 385.318178][ C1] ? __pidfd_prepare+0x140/0x140 [ 385.318193][ C1] ? migrate_enable+0x13e/0x200 [ 385.318211][ C1] kernel_clone+0x23f/0x990 [ 385.318224][ C1] ? trace_event_raw_event_lock+0x270/0x270 [ 385.318242][ C1] ? create_io_thread+0x180/0x180 [ 385.318264][ C1] __x64_sys_clone+0x19a/0x210 [ 385.318279][ C1] ? __ia32_sys_vfork+0x130/0x130 [ 385.318300][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 385.318316][ C1] do_syscall_64+0x4c/0xa0 [ 385.318329][ C1] ? clear_bhb_loop+0x30/0x80 [ 385.318342][ C1] ? clear_bhb_loop+0x30/0x80 [ 385.318355][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 385.318369][ C1] RIP: 0033:0x7f1dcfbeb799 [ 385.318384][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.318395][ C1] RSP: 002b:00007f1dcde44fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 385.318408][ C1] RAX: ffffffffffffffda RBX: 00007f1dcfe64fa0 RCX: 00007f1dcfbeb799 [ 385.318418][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000400 [ 385.318427][ C1] RBP: 00007f1dcfc81bd9 R08: 0000000000000000 R09: 0000000000000000 [ 385.318436][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 385.318444][ C1] R13: 00007f1dcfe65038 R14: 00007f1dcfe64fa0 R15: 00007ffd44bae648 [ 385.318462][ C1] [ 388.816518][ T1335] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-... } 10923 jiffies s: 17881 root: 0x2/. [ 388.843401][ T1335] rcu: blocking rcu_node structures (internal RCU debug): [ 388.864608][ T1335] Task dump for CPU 1: [ 388.869393][ T1335] task:syz.4.2077 state:R running task stack:23568 pid:10606 ppid: 4187 flags:0x0000400c [ 388.880674][ T1335] Call Trace: [ 388.884060][ T1335] [ 388.887144][ T1335] ? mark_lock+0x94/0x320 [ 388.891627][ T1335] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 388.897842][ T1335] ? lock_chain_count+0x20/0x20 [ 388.903071][ T1335] ? rcu_is_watching+0x11/0xa0 [ 388.908112][ T1335] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 388.913971][ T1335] ? sysvec_apic_timer_interrupt+0x80/0xc0 [ 388.919872][ T1335] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 388.926068][ T1335] ? preempt_schedule_irq+0xb6/0x160 [ 388.931414][ T1335] ? __cond_resched+0xd0/0xd0 [ 388.936116][ T1335] ? rcu_is_watching+0x11/0xa0 [ 388.940992][ T1335] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 388.946875][ T1335] ? irqentry_exit+0x63/0x70 [ 388.951499][ T1335] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 388.957731][ T1335] ? stack_trace_save+0xf0/0xf0 [ 388.962707][ T1335] ? orc_sort_swap+0x130/0x130 [ 388.967595][ T1335] ? arch_stack_walk+0xf2/0x140 [ 388.972982][ T1335] ? ops_init+0x357/0x600 [ 388.977428][ T1335] ? stack_trace_save+0xa6/0xf0 [ 388.982318][ T1335] ? stack_trace_snprint+0xf0/0xf0 [ 388.987482][ T1335] ? __kasan_kmalloc+0xcc/0xf0 [ 388.992274][ T1335] ? ops_init+0x357/0x600 [ 388.996699][ T1335] ? __kasan_kmalloc+0xb5/0xf0 [ 389.001487][ T1335] ? __kasan_kmalloc+0xb5/0xf0 [ 389.006312][ T1335] ? kmemdup+0x22/0x50 [ 389.010506][ T1335] ? addrconf_init_net+0x2c/0x5a0 [ 389.015631][ T1335] ? kmemdup+0x22/0x50 [ 389.019878][ T1335] ? addrconf_init_net+0x2c/0x5a0 [ 389.024951][ T1335] ? ops_init+0x357/0x600 [ 389.029361][ T1335] ? setup_net+0x39e/0xa10 [ 389.033811][ T1335] ? copy_net_ns+0x5b0/0x5b0 [ 389.038485][ T1335] ? copy_net_ns+0x32e/0x5b0 [ 389.043096][ T1335] ? down_read_killable+0x1ce/0x340 [ 389.048552][ T1335] ? copy_net_ns+0x348/0x5b0 [ 389.053172][ T1335] ? create_new_namespaces+0x3d3/0x6f0 [ 389.058912][ T1335] ? copy_namespaces+0x37d/0x3e0 [ 389.063890][ T1335] ? copy_process+0x1834/0x3e20 [ 389.068829][ T1335] ? rcu_lock_release+0x5/0x20 [ 389.073678][ T1335] ? __pidfd_prepare+0x140/0x140 [ 389.078870][ T1335] ? migrate_enable+0x13e/0x200 [ 389.083914][ T1335] ? kernel_clone+0x23f/0x990 [ 389.088649][ T1335] ? trace_event_raw_event_lock+0x270/0x270 [ 389.094582][ T1335] ? create_io_thread+0x180/0x180 [ 389.099685][ T1335] ? __x64_sys_clone+0x19a/0x210 [ 389.104659][ T1335] ? __ia32_sys_vfork+0x130/0x130 [ 389.109757][ T1335] ? lockdep_hardirqs_on+0x94/0x140 [ 389.114993][ T1335] ? do_syscall_64+0x4c/0xa0 [ 389.119638][ T1335] ? clear_bhb_loop+0x30/0x80 [ 389.124344][ T1335] ? clear_bhb_loop+0x30/0x80 [ 389.129074][ T1335] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 389.135181][ T1335]