last executing test programs: 3.744056495s ago: executing program 0 (id=4076): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x8}, 0x18) 3.535868745s ago: executing program 0 (id=4081): r0 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={r0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)="d80000001c0081054e81f782db4402000a0008040e000000040d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24000814) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000980), 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x11, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x8100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="0d00ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.969220854s ago: executing program 2 (id=4088): socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x22) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$LINK_DETACH(0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2002) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x8, 0x0, 0x0) 2.955385934s ago: executing program 0 (id=4089): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x310) close(r1) 2.734507005s ago: executing program 2 (id=4090): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.517405816s ago: executing program 2 (id=4091): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001c40)=""/4065, 0xfe1}], 0x1}, 0x20) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x80000, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 2.340062804s ago: executing program 0 (id=4094): socket$kcm(0x10, 0x2, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x85}, 0x0, 0xffffffffffffffff, r0, 0x8) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b31"], 0x10b8}, 0x106) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020e000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 2.24245673s ago: executing program 3 (id=4095): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000740)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.171985573s ago: executing program 1 (id=4096): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0xffffff4b, &(0x7f0000001380)={0x0, 0x0}}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x8, &(0x7f0000000100), 0x120) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000", @ANYRES32=0x0, @ANYRESOCT=r1], 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 2.171808493s ago: executing program 2 (id=4097): ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x1, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2.078335097s ago: executing program 3 (id=4098): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 2.072611598s ago: executing program 4 (id=4099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'veth1_to_bridge\x00', 0x1000}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00s/\x8br\bc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x90ih\xecd\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60) r1 = socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f0000000580)=""/247, 0x0, 0xf7, 0x1}, 0x28) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000000), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b0000000000000000"], 0xfdef) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f00000009c0)='syzkaller\x00', 0x5, 0x3c, &(0x7f0000000d80)=""/60, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), &(0x7f0000000440)='%ps \x00'}, 0x20) 1.950960234s ago: executing program 3 (id=4100): r0 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={r0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)="d80000001c0081054e81f782db4402000a0008040e000000040d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24000814) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000980), 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x11, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x8100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="0d00ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.920244125s ago: executing program 0 (id=4101): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000000c0), 0x66) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) close(0xffffffffffffffff) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f0000000200), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x38000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff07ffd4060000200000006a0200000ee60000bf050000000000003d35f3ff000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d5301000000000084040000000000007372000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1.918175866s ago: executing program 1 (id=4103): sendmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="761f8c09e3190ca83e238eb123a7283ae0486324ea", 0x15}], 0x1}, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x4}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0xf}, {0x0, 0x0, 0x0, 0x81}]}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 1.784565542s ago: executing program 2 (id=4104): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.707922236s ago: executing program 1 (id=4105): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1, 0x106) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"}) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r0, 0x4, r1}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.707619996s ago: executing program 4 (id=4106): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) 1.603329021s ago: executing program 3 (id=4107): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 1.534186865s ago: executing program 4 (id=4108): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @tracing=0x1a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) 1.339128274s ago: executing program 4 (id=4109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) 1.198829421s ago: executing program 4 (id=4110): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='(/\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x100, 0x4}, 0x4869, 0x6, 0x0, 0xf, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) 488.937636ms ago: executing program 1 (id=4111): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r0], 0x9a) 465.967988ms ago: executing program 4 (id=4112): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91424fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x18, &(0x7f0000000000), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) r5 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x43, 0x6, 0x4, 0x8, 0x0, 0x1, 0x40000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x3}, 0x480, 0x1, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x0, 0x13e, 0x0, 0x20}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x400000000000000, 0x3}, 0x100c0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xfffe, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dd77000000b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb79164639b5bc347fec73a5ee4b11602b2a10c11ce1b14d6d930dfe1100000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f0000", 0xd8}], 0x1}, 0x20048812) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xc0280, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_pid(r7, &(0x7f00000007c0), 0x12) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x7, 0x4, 0x1, 0x4, 0x0, 0x5, 0x4bf1654ed2df1988, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x2}, 0x6a08, 0x1, 0x9, 0x5, 0x6, 0x7, 0xfffa, 0x0, 0x3, 0x0, 0xcb3}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb32", 0x800, r4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 408.956601ms ago: executing program 3 (id=4113): r0 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x5b, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x20100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 407.031621ms ago: executing program 2 (id=4123): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000000000000000000000000181200", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, 0x0, &(0x7f0000000300)}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) close(r2) close(0x4) 344.087303ms ago: executing program 0 (id=4114): ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x1, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 304.056776ms ago: executing program 1 (id=4115): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001400604040006040400", 0x58}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) 122.729805ms ago: executing program 1 (id=4116): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300"], 0x0, 0x42}, 0x28) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca0d"], 0x9a) 0s ago: executing program 3 (id=4117): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0xdd86, 0x3}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f70000008864110300b8bf4a31accb", 0x39}, {&(0x7f0000000240)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c9404b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f01b8a0e45f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362e401d3", 0xee}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="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", 0x17f}, {&(0x7f0000002400)="e20650bb69f596a001a9396df3e895da88d97ebd178d47b9119f9232ea20b1637429669dc4d0c0cf864240df51aff34230940425976a91424886f7569ab0a0ed75f495341eee79791236e5437400cf79a8e84ed65e993f6897444bb5d86d94215b781ae9918681a67968825e9f5fed8e3cf996d276f78c75101b6e188cc3b29c44b07b85c76fe40f20727d081a440ce84ced2c1d50c6879b422b03412a20f6d2d4b9226a87c0fe4de731da5c6a6edb4972a2f3e7966db1e8ff048f5b61600611bbbc0905a9a9c23fa6db92243e178f7793e83e82ead265afe54086", 0xdb}, {&(0x7f0000002a00)="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", 0xb24}], 0x6}, 0x40810) kernel console output (not intermixed with test programs): 9][T12435] ? mark_lock+0x94/0x320 [ 308.061292][T12435] should_fail+0x38c/0x4c0 [ 308.065745][T12435] should_failslab+0x5/0x20 [ 308.070292][T12435] slab_pre_alloc_hook+0x51/0xc0 [ 308.075261][T12435] __kmalloc+0x6b/0x330 [ 308.079435][T12435] ? tomoyo_realpath_from_path+0x118/0x610 [ 308.085467][T12435] tomoyo_realpath_from_path+0x118/0x610 [ 308.091337][T12435] tomoyo_path_number_perm+0x242/0x660 [ 308.096839][T12435] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 308.103477][T12435] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 308.109131][T12435] security_file_ioctl+0x6c/0xa0 [ 308.114121][T12435] __se_sys_ioctl+0x48/0x170 [ 308.118751][T12435] do_syscall_64+0x4c/0xa0 [ 308.123279][T12435] ? clear_bhb_loop+0x30/0x80 [ 308.127977][T12435] ? clear_bhb_loop+0x30/0x80 [ 308.132686][T12435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.138597][T12435] RIP: 0033:0x7fbe0083b799 [ 308.143057][T12435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.162804][T12435] RSP: 002b:00007fbdfea95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.171258][T12435] RAX: ffffffffffffffda RBX: 00007fbe00ab4fa0 RCX: 00007fbe0083b799 [ 308.179261][T12435] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 000000000000000c [ 308.187254][T12435] RBP: 00007fbdfea95090 R08: 0000000000000000 R09: 0000000000000000 [ 308.195602][T12435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.203819][T12435] R13: 00007fbe00ab5038 R14: 00007fbe00ab4fa0 R15: 00007ffe9e00c6d8 [ 308.211954][T12435] [ 308.364883][T12446] netlink: 'syz.1.3177': attribute type 10 has an invalid length. [ 308.403135][T12446] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3177'. [ 308.527795][T12435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.574532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.593785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.666121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.675461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.728672][T12170] device veth0_vlan entered promiscuous mode [ 308.761129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.785736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.828307][T12170] device veth1_vlan entered promiscuous mode [ 308.936425][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 308.982311][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 309.006804][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.032944][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.048137][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 309.070406][T12170] device veth0_macvtap entered promiscuous mode [ 309.088967][T12471] netlink: 'syz.0.3187': attribute type 10 has an invalid length. [ 309.112052][T12471] team0: Device wg1 is of different type [ 309.147820][T12469] netlink: 'syz.2.3185': attribute type 21 has an invalid length. [ 309.198543][T12170] device veth1_macvtap entered promiscuous mode [ 309.271958][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.322575][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.383692][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.402585][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.414726][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.438650][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.460676][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.473280][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.489193][T12170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.505872][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.537593][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 309.614900][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.651789][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.666755][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.686185][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.705589][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.730503][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.791363][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.805804][T12489] FAULT_INJECTION: forcing a failure. [ 309.805804][T12489] name failslab, interval 1, probability 0, space 0, times 0 [ 309.807996][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.829348][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.840537][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.851527][ T155] wlan1: Trigger new scan to find an IBSS to join [ 309.867678][T12489] CPU: 1 PID: 12489 Comm: syz.0.3193 Not tainted syzkaller #0 [ 309.875184][T12489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.877221][T12170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.885242][T12489] Call Trace: [ 309.885273][T12489] [ 309.885281][T12489] dump_stack_lvl+0x188/0x250 [ 309.903515][T12489] ? show_regs_print_info+0x20/0x20 [ 309.908736][T12489] ? load_image+0x400/0x400 [ 309.913245][T12489] ? __lock_acquire+0x7d10/0x7d10 [ 309.914638][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.918542][T12489] should_fail+0x38c/0x4c0 [ 309.918576][T12489] should_failslab+0x5/0x20 [ 309.918593][T12489] slab_pre_alloc_hook+0x51/0xc0 [ 309.918613][T12489] __kmalloc+0x6b/0x330 [ 309.944924][T12489] ? kernfs_fop_write_iter+0x155/0x4c0 [ 309.946473][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.950400][T12489] ? end_current_label_crit_section+0x14b/0x170 [ 309.950429][T12489] kernfs_fop_write_iter+0x155/0x4c0 [ 309.950450][T12489] ? iov_iter_init+0xb4/0x170 [ 309.972997][T12170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.974779][T12489] vfs_write+0x745/0xd60 [ 309.987708][T12489] ? file_end_write+0x250/0x250 [ 309.992594][T12489] ? __fget_files+0x40f/0x480 [ 309.997399][T12489] ? mutex_lock_nested+0x17/0x20 [ 310.002370][T12489] ? __fdget_pos+0x2bf/0x370 [ 310.006983][T12489] ? ksys_write+0x71/0x260 [ 310.011416][T12489] ksys_write+0x152/0x260 [ 310.015765][T12489] ? __ia32_sys_read+0x80/0x80 [ 310.020537][T12489] ? lockdep_hardirqs_on+0x94/0x140 [ 310.025761][T12489] do_syscall_64+0x4c/0xa0 [ 310.025969][T12170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.030478][T12489] ? clear_bhb_loop+0x30/0x80 [ 310.030505][T12489] ? clear_bhb_loop+0x30/0x80 [ 310.030522][T12489] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.030541][T12489] RIP: 0033:0x7fbe0083b799 [ 310.048728][T12170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.048829][T12489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.054885][T12170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.059105][T12489] RSP: 002b:00007fbdfea74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 310.059127][T12489] RAX: ffffffffffffffda RBX: 00007fbe00ab5090 RCX: 00007fbe0083b799 [ 310.059140][T12489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 310.059150][T12489] RBP: 00007fbdfea74090 R08: 0000000000000000 R09: 0000000000000000 [ 310.059161][T12489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.137216][T12489] R13: 00007fbe00ab5128 R14: 00007fbe00ab5090 R15: 00007ffe9e00c6d8 [ 310.145218][T12489] [ 310.233442][T12491] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3194'. [ 310.403885][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.440986][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.490245][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 310.565181][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.585276][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.631124][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.878442][T10553] wlan1: Creating new IBSS network, BSSID 82:03:b2:9c:89:14 [ 311.112138][T12519] netlink: 'syz.3.3204': attribute type 10 has an invalid length. [ 311.124137][T12519] team0: Device wg1 is of different type [ 311.473552][T12525] netlink: 'syz.3.3206': attribute type 10 has an invalid length. [ 311.518196][T12525] team0: Device wg1 is of different type [ 312.030558][T12534] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3210'. [ 312.192866][T12544] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3212'. [ 312.484455][T12535] chnl_net:caif_netlink_parms(): no params data found [ 312.592413][T12559] netlink: 'syz.1.3217': attribute type 10 has an invalid length. [ 312.609228][T12559] team0: Device wg1 is of different type [ 312.649416][T12535] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.674223][T12535] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.715169][T12535] device bridge_slave_0 entered promiscuous mode [ 312.753130][T10542] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.774108][T12563] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3219'. [ 312.806947][T12535] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.814149][T12535] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.863168][T12535] device bridge_slave_1 entered promiscuous mode [ 312.916785][T10542] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.029017][T12571] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3223'. [ 313.140739][T10542] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.201657][T12535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.231730][T12535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.244046][T12582] netlink: 'syz.0.3228': attribute type 21 has an invalid length. [ 313.265919][T10542] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.359690][T12535] team0: Port device team_slave_0 added [ 313.369218][T12535] team0: Port device team_slave_1 added [ 313.402330][T12587] netlink: 'syz.3.3229': attribute type 10 has an invalid length. [ 313.454831][T12587] team0: Device wg1 is of different type [ 313.495337][T12535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.504496][T12535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.543343][T12535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.577527][T12594] netlink: 'syz.0.3231': attribute type 39 has an invalid length. [ 313.610307][T12535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.629094][T12535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.717381][T12535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.820800][T12607] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3237'. [ 313.881907][T12535] device hsr_slave_0 entered promiscuous mode [ 313.908897][T12535] device hsr_slave_1 entered promiscuous mode [ 313.917688][T12535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.941932][T12535] Cannot create hsr debugfs directory [ 314.101444][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 314.164549][T12622] netlink: 'syz.1.3240': attribute type 10 has an invalid length. [ 314.193305][T12622] team0: Device wg1 is of different type [ 314.229861][T12623] FAULT_INJECTION: forcing a failure. [ 314.229861][T12623] name failslab, interval 1, probability 0, space 0, times 0 [ 314.255053][T12623] CPU: 0 PID: 12623 Comm: syz.4.3241 Not tainted syzkaller #0 [ 314.262574][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.272826][T12623] Call Trace: [ 314.276126][T12623] [ 314.279077][T12623] dump_stack_lvl+0x188/0x250 [ 314.283776][T12623] ? show_regs_print_info+0x20/0x20 [ 314.288998][T12623] ? load_image+0x400/0x400 [ 314.293531][T12623] ? __lock_acquire+0x7d10/0x7d10 [ 314.298595][T12623] should_fail+0x38c/0x4c0 [ 314.303043][T12623] should_failslab+0x5/0x20 [ 314.307562][T12623] slab_pre_alloc_hook+0x51/0xc0 [ 314.312533][T12623] __kmalloc+0x6b/0x330 [ 314.316712][T12623] ? ioctl_standard_iw_point+0x516/0xcf0 [ 314.322387][T12623] ioctl_standard_iw_point+0x516/0xcf0 [ 314.327901][T12623] ? cfg80211_rehash_bss+0x530/0x530 [ 314.333211][T12623] ? iw_handler_get_iwstats+0x240/0x240 [ 314.338792][T12623] ? mutex_lock_io_nested+0x60/0x60 [ 314.344028][T12623] ? apparmor_capable+0x12c/0x190 [ 314.349076][T12623] ? full_name_hash+0x8e/0xe0 [ 314.353785][T12623] ? cfg80211_rehash_bss+0x530/0x530 [ 314.359104][T12623] ioctl_standard_call+0xb3/0x2b0 [ 314.364156][T12623] ? cfg80211_rehash_bss+0x530/0x530 [ 314.369466][T12623] wext_ioctl_dispatch+0x3da/0x470 [ 314.374601][T12623] ? wext_ioctl_dispatch+0x470/0x470 [ 314.379916][T12623] ? iw_handler_get_private+0x1e0/0x1e0 [ 314.385493][T12623] wext_handle_ioctl+0x113/0x1d0 [ 314.390460][T12623] ? call_commit_handler+0xf0/0xf0 [ 314.395697][T12623] sock_ioctl+0x143/0x710 [ 314.400031][T12623] ? sock_poll+0x410/0x410 [ 314.404443][T12623] ? bpf_lsm_file_ioctl+0x5/0x10 [ 314.409372][T12623] ? security_file_ioctl+0x7c/0xa0 [ 314.414494][T12623] ? sock_poll+0x410/0x410 [ 314.418898][T12623] __se_sys_ioctl+0xfa/0x170 [ 314.423568][T12623] do_syscall_64+0x4c/0xa0 [ 314.428325][T12623] ? clear_bhb_loop+0x30/0x80 [ 314.433037][T12623] ? clear_bhb_loop+0x30/0x80 [ 314.437729][T12623] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.444704][T12623] RIP: 0033:0x7f3c72615799 [ 314.449139][T12623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.468966][T12623] RSP: 002b:00007f3c7086f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.477376][T12623] RAX: ffffffffffffffda RBX: 00007f3c7288efa0 RCX: 00007f3c72615799 [ 314.485337][T12623] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 000000000000000c [ 314.493313][T12623] RBP: 00007f3c7086f090 R08: 0000000000000000 R09: 0000000000000000 [ 314.501284][T12623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.509248][T12623] R13: 00007f3c7288f038 R14: 00007f3c7288efa0 R15: 00007ffd3353c9a8 [ 314.517264][T12623] [ 314.793273][T12641] netlink: 'syz.0.3245': attribute type 10 has an invalid length. [ 314.872697][T12641] team0: Device wg1 is of different type [ 315.041952][T12651] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.3248'. [ 315.457256][T12673] netlink: 'syz.4.3252': attribute type 39 has an invalid length. [ 315.654450][T10542] device vlan0 left promiscuous mode [ 315.696688][T10542] À: port 1(vlan0) entered disabled state [ 315.743869][T10542] device hsr_slave_0 left promiscuous mode [ 315.766144][T10542] device hsr_slave_1 left promiscuous mode [ 315.783890][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.795407][T10542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.819296][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.837224][T10542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.876600][T10542] device veth1_macvtap left promiscuous mode [ 315.882681][T10542] device veth0_macvtap left promiscuous mode [ 315.890821][T10542] device veth1_vlan left promiscuous mode [ 315.904692][T10542] device veth0_vlan left promiscuous mode [ 316.166701][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 316.212568][T10542] team0 (unregistering): Port device macvlan0 removed [ 316.257654][T10542] team0 (unregistering): Port device team_slave_1 removed [ 316.278499][T10542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.378023][T10542] bond0 (unregistering): Released all slaves [ 316.402783][T12689] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3258'. [ 316.472207][T12535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.506931][T12696] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3260'. [ 316.545491][T12535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.573629][T12535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.614908][T12535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.619044][T12700] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3262'. [ 316.911039][T12535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.973816][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.025422][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.049172][T12535] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.096104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.114456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.128967][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.135421][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.138865][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.148864][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.260103][T12732] FAULT_INJECTION: forcing a failure. [ 317.260103][T12732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.274213][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.306288][T12732] CPU: 0 PID: 12732 Comm: syz.1.3271 Not tainted syzkaller #0 [ 317.313875][T12732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.324066][T12732] Call Trace: [ 317.327355][T12732] [ 317.330286][T12732] dump_stack_lvl+0x188/0x250 [ 317.335105][T12732] ? show_regs_print_info+0x20/0x20 [ 317.340328][T12732] ? load_image+0x400/0x400 [ 317.344847][T12732] ? __lock_acquire+0x7d10/0x7d10 [ 317.349891][T12732] should_fail+0x38c/0x4c0 [ 317.354327][T12732] _copy_from_user+0x2e/0x170 [ 317.359014][T12732] __copy_msghdr_from_user+0xc9/0x630 [ 317.364462][T12732] ? verify_lock_unused+0x140/0x140 [ 317.369664][T12732] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 317.374955][T12732] ___sys_sendmsg+0x19a/0x2e0 [ 317.379628][T12732] ? __sys_sendmsg+0x2a0/0x2a0 [ 317.384388][T12732] ? trace_event_raw_event_lock+0x270/0x270 [ 317.390268][T12732] ? vfs_write+0x8b2/0xd60 [ 317.394704][T12732] __se_sys_sendmsg+0x1af/0x290 [ 317.399546][T12732] ? __x64_sys_sendmsg+0x80/0x80 [ 317.404471][T12732] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 317.410456][T12732] ? lockdep_hardirqs_on+0x94/0x140 [ 317.415747][T12732] do_syscall_64+0x4c/0xa0 [ 317.420171][T12732] ? clear_bhb_loop+0x30/0x80 [ 317.424833][T12732] ? clear_bhb_loop+0x30/0x80 [ 317.429500][T12732] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.435381][T12732] RIP: 0033:0x7facb6373799 [ 317.439785][T12732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.459471][T12732] RSP: 002b:00007facb45cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.467871][T12732] RAX: ffffffffffffffda RBX: 00007facb65ecfa0 RCX: 00007facb6373799 [ 317.475872][T12732] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 317.483827][T12732] RBP: 00007facb45cd090 R08: 0000000000000000 R09: 0000000000000000 [ 317.491874][T12732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.499833][T12732] R13: 00007facb65ed038 R14: 00007facb65ecfa0 R15: 00007ffe62cf2148 [ 317.507812][T12732] [ 317.551683][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.573423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.583755][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.590982][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.601926][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.611638][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.626248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.639824][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.690301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.706782][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.718729][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.728210][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.737443][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.771390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.787896][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.798939][T12740] netlink: 'syz.3.3272': attribute type 39 has an invalid length. [ 317.926233][T12535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.008558][T12753] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3273'. [ 318.090470][T12752] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.3275'. [ 318.245850][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 318.492974][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.531211][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.592714][T12535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.680678][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.699835][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.796897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.856089][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.911224][T12535] device veth0_vlan entered promiscuous mode [ 318.921908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.960081][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.993698][T12535] device veth1_vlan entered promiscuous mode [ 319.099591][T12798] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3289'. [ 319.109568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 319.128534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 319.153761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.176763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.238689][T12535] device veth0_macvtap entered promiscuous mode [ 319.291569][T12535] device veth1_macvtap entered promiscuous mode [ 319.341528][T12808] FAULT_INJECTION: forcing a failure. [ 319.341528][T12808] name failslab, interval 1, probability 0, space 0, times 0 [ 319.383100][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.409133][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.413321][T12808] CPU: 0 PID: 12808 Comm: syz.3.3292 Not tainted syzkaller #0 [ 319.426434][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.429420][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.436531][T12808] Call Trace: [ 319.436547][T12808] [ 319.436556][T12808] dump_stack_lvl+0x188/0x250 [ 319.436582][T12808] ? show_regs_print_info+0x20/0x20 [ 319.436603][T12808] ? load_image+0x400/0x400 [ 319.436627][T12808] ? __might_sleep+0xf0/0xf0 [ 319.436645][T12808] ? __lock_acquire+0x7d10/0x7d10 [ 319.436669][T12808] should_fail+0x38c/0x4c0 [ 319.436696][T12808] should_failslab+0x5/0x20 [ 319.436712][T12808] slab_pre_alloc_hook+0x51/0xc0 [ 319.469848][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.472562][T12808] kmem_cache_alloc_node+0x47/0x2d0 [ 319.472589][T12808] ? __alloc_skb+0xf4/0x750 [ 319.486604][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.491490][T12808] __alloc_skb+0xf4/0x750 [ 319.491523][T12808] tcp_send_active_reset+0x82/0x6f0 [ 319.491552][T12808] tcp_disconnect+0x1cb/0x1d20 [ 319.505384][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.506513][T12808] __tcp_close+0xc83/0xfa0 [ 319.506540][T12808] ? do_raw_spin_unlock+0x11d/0x230 [ 319.506565][T12808] tcp_close+0x24/0x110 [ 319.506581][T12808] inet_release+0x139/0x180 [ 319.506603][T12808] sock_release+0x7b/0x140 [ 319.506631][T12808] smc_clcsock_release+0xc5/0xe0 [ 319.512866][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.521512][T12808] __smc_release+0x398/0x500 [ 319.521544][T12808] smc_release+0x2ca/0x530 [ 319.521566][T12808] sock_close+0xd5/0x240 [ 319.521585][T12808] ? sock_mmap+0x90/0x90 [ 319.521601][T12808] __fput+0x234/0x930 [ 319.526735][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.531098][T12808] task_work_run+0x125/0x1a0 [ 319.538425][T12535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.545820][T12808] exit_to_user_mode_loop+0x10f/0x130 [ 319.545850][T12808] exit_to_user_mode_prepare+0xee/0x180 [ 319.545867][T12808] syscall_exit_to_user_mode+0x16/0x40 [ 319.545887][T12808] do_syscall_64+0x58/0xa0 [ 319.545903][T12808] ? clear_bhb_loop+0x30/0x80 [ 319.545919][T12808] ? clear_bhb_loop+0x30/0x80 [ 319.545937][T12808] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.545954][T12808] RIP: 0033:0x7fe99b071799 [ 319.545974][T12808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.572789][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.573549][T12808] RSP: 002b:00007fe9992cb028 EFLAGS: 00000246 [ 319.615483][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.615823][T12808] ORIG_RAX: 0000000000000003 [ 319.615835][T12808] RAX: 0000000000000000 RBX: 00007fe99b2eafa0 RCX: 00007fe99b071799 [ 319.615847][T12808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 319.615857][T12808] RBP: 00007fe9992cb090 R08: 0000000000000000 R09: 0000000000000000 [ 319.615868][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.615878][T12808] R13: 00007fe99b2eb038 R14: 00007fe99b2eafa0 R15: 00007ffda3fd6a38 [ 319.615907][T12808] [ 319.773572][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.784292][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.794520][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.815311][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.825838][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.847502][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.900888][T12535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.945841][T12816] netlink: 'syz.1.3293': attribute type 39 has an invalid length. [ 320.057755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 320.076394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 320.084589][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.104913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 320.129613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 320.164708][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 320.194414][T12535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.218469][T12535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.236445][T12535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.255657][T12535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.326764][ T8419] Bluetooth: hci3: command 0x0419 tx timeout [ 320.488324][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.504333][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.524232][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 320.585485][T10555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.626016][T10555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.633702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 320.691251][T12853] netlink: 'syz.3.3304': attribute type 39 has an invalid length. [ 320.759140][T12853] netlink: 'syz.3.3304': attribute type 10 has an invalid length. [ 320.792288][T12853] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3304'. [ 321.191449][T12875] netlink: 'syz.2.3309': attribute type 39 has an invalid length. [ 321.513577][T12880] FAULT_INJECTION: forcing a failure. [ 321.513577][T12880] name failslab, interval 1, probability 0, space 0, times 0 [ 321.526915][T12880] CPU: 1 PID: 12880 Comm: syz.4.3313 Not tainted syzkaller #0 [ 321.534412][T12880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.544512][T12880] Call Trace: [ 321.547816][T12880] [ 321.550777][T12880] dump_stack_lvl+0x188/0x250 [ 321.555493][T12880] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 321.562117][T12880] ? show_regs_print_info+0x20/0x20 [ 321.567358][T12880] ? load_image+0x400/0x400 [ 321.572205][T12880] should_fail+0x38c/0x4c0 [ 321.576667][T12880] should_failslab+0x5/0x20 [ 321.581197][T12880] slab_pre_alloc_hook+0x51/0xc0 [ 321.586255][T12880] ? skb_clone+0x1bd/0x350 [ 321.590710][T12880] kmem_cache_alloc+0x3d/0x290 [ 321.595529][T12880] skb_clone+0x1bd/0x350 [ 321.599803][T12880] ? dev_queue_xmit_nit+0x1df/0xb00 [ 321.605043][T12880] dev_queue_xmit_nit+0x2cc/0xb00 [ 321.610121][T12880] ? validate_xmit_skb+0x7b3/0xe40 [ 321.615627][T12880] dev_hard_start_xmit+0x13e/0x7e0 [ 321.620826][T12880] __dev_queue_xmit+0x1a9b/0x2f80 [ 321.625942][T12880] ? dev_queue_xmit+0x20/0x20 [ 321.630737][T12880] ? memcpy+0x3c/0x60 [ 321.634753][T12880] ? __copy_skb_header+0x3ba/0x4f0 [ 321.639921][T12880] ? __skb_clone+0x480/0x790 [ 321.644582][T12880] ? skb_clone+0x1f1/0x350 [ 321.649054][T12880] __netlink_deliver_tap+0x53e/0x7c0 [ 321.654433][T12880] netlink_deliver_tap+0x16c/0x180 [ 321.659581][T12880] netlink_unicast+0x74f/0x920 [ 321.664421][T12880] netlink_sendmsg+0x8ba/0xbe0 [ 321.669340][T12880] ? netlink_getsockopt+0x570/0x570 [ 321.674650][T12880] ? aa_sock_msg_perm+0x94/0x150 [ 321.679636][T12880] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 321.684941][T12880] ? security_socket_sendmsg+0x7c/0xa0 [ 321.690468][T12880] ? netlink_getsockopt+0x570/0x570 [ 321.695707][T12880] ____sys_sendmsg+0x5b7/0x8f0 [ 321.700798][T12880] ? __sys_sendmsg_sock+0x30/0x30 [ 321.705890][T12880] ? import_iovec+0x6f/0xa0 [ 321.710454][T12880] ___sys_sendmsg+0x236/0x2e0 [ 321.715415][T12880] ? __sys_sendmsg+0x2a0/0x2a0 [ 321.720255][T12880] ? trace_event_raw_event_lock+0x270/0x270 [ 321.726180][T12880] ? vfs_write+0x8b2/0xd60 [ 321.730805][T12880] __se_sys_sendmsg+0x1af/0x290 [ 321.735705][T12880] ? __x64_sys_sendmsg+0x80/0x80 [ 321.740681][T12880] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 321.746750][T12880] ? lockdep_hardirqs_on+0x94/0x140 [ 321.751995][T12880] do_syscall_64+0x4c/0xa0 [ 321.756441][T12880] ? clear_bhb_loop+0x30/0x80 [ 321.761145][T12880] ? clear_bhb_loop+0x30/0x80 [ 321.765850][T12880] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.771741][T12880] RIP: 0033:0x7f3c72615799 [ 321.776169][T12880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.795805][T12880] RSP: 002b:00007f3c7086f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.804248][T12880] RAX: ffffffffffffffda RBX: 00007f3c7288efa0 RCX: 00007f3c72615799 [ 321.812224][T12880] RDX: 0000000020004800 RSI: 0000200000000080 RDI: 000000000000000b [ 321.820198][T12880] RBP: 00007f3c7086f090 R08: 0000000000000000 R09: 0000000000000000 [ 321.828181][T12880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.836181][T12880] R13: 00007f3c7288f038 R14: 00007f3c7288efa0 R15: 00007ffd3353c9a8 [ 321.844223][T12880] [ 322.013095][T12880] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3313'. [ 322.221866][T12890] netlink: 'syz.3.3314': attribute type 10 has an invalid length. [ 322.288328][T12890] team0: Device wg1 is of different type [ 322.422322][T12892] netlink: 'syz.1.3316': attribute type 33 has an invalid length. [ 322.445813][T12892] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3316'. [ 322.753989][T12882] chnl_net:caif_netlink_parms(): no params data found [ 322.778316][T10542] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.261213][T12904] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3320'. [ 323.345215][T12911] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3322'. [ 323.448015][T10542] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.647852][T10542] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.724324][T12882] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.740560][T12882] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.767394][T12882] device bridge_slave_0 entered promiscuous mode [ 323.972941][T12928] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3328'. [ 323.973337][T12930] netlink: 'syz.1.3327': attribute type 29 has an invalid length. [ 324.005821][ T8419] Bluetooth: hci4: command 0x0409 tx timeout [ 325.330254][T10542] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.531644][T12882] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.550386][T12882] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.601503][T12882] device bridge_slave_1 entered promiscuous mode [ 325.628243][T12925] netlink: 'syz.4.3325': attribute type 39 has an invalid length. [ 325.657656][T12929] netlink: 'syz.4.3325': attribute type 10 has an invalid length. [ 325.665522][T12929] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3325'. [ 325.687462][T12935] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3330'. [ 325.782953][T12930] netlink: 'syz.1.3327': attribute type 29 has an invalid length. [ 325.811252][T12937] netlink: 'syz.2.3329': attribute type 39 has an invalid length. [ 325.821013][T12938] netlink: 'syz.2.3329': attribute type 10 has an invalid length. [ 325.831949][T12938] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3329'. [ 325.908702][T12941] netlink: 'syz.3.3331': attribute type 39 has an invalid length. [ 325.942794][T12882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.040019][T12882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.090143][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 326.181142][T12882] team0: Port device team_slave_0 added [ 326.203312][T12882] team0: Port device team_slave_1 added [ 326.330020][T12948] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3334'. [ 326.370605][T12882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.381493][T12882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.418175][T12882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.443696][T12882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.453816][T12882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.530949][T12882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.631941][T12882] device hsr_slave_0 entered promiscuous mode [ 326.646171][T12882] device hsr_slave_1 entered promiscuous mode [ 326.666286][T12882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.714161][T12882] Cannot create hsr debugfs directory [ 326.781309][T12957] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.3337'. [ 326.964223][T12962] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3338'. [ 327.029937][T12978] netlink: 'syz.4.3339': attribute type 10 has an invalid length. [ 327.084913][T12978] team0: Device wg1 is of different type [ 327.499690][T12987] netlink: 'syz.3.3342': attribute type 39 has an invalid length. [ 327.624471][T12987] netlink: 'syz.3.3342': attribute type 10 has an invalid length. [ 327.643851][T12987] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3342'. [ 327.906454][T12882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 327.981977][T12882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.002683][T12882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.066443][T10542] device vlan0 left promiscuous mode [ 328.093194][T10542] À: port 1(vlan0) entered disabled state [ 328.128254][T10542] device hsr_slave_0 left promiscuous mode [ 328.150110][T10542] device hsr_slave_1 left promiscuous mode [ 328.165760][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 328.182209][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.204703][T10542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.230871][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.251777][T10542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.281425][T10542] device veth1_macvtap left promiscuous mode [ 328.291839][T10542] device veth0_macvtap left promiscuous mode [ 328.302086][T10542] device veth1_vlan left promiscuous mode [ 328.312733][T10542] device veth0_vlan left promiscuous mode [ 328.792410][T10542] team0 (unregistering): Port device team_slave_1 removed [ 328.812406][T10542] team0 (unregistering): Port device team_slave_0 removed [ 328.828105][T10542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.843846][T10542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.931749][T10542] bond0 (unregistering): Released all slaves [ 328.948793][T12882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 328.957990][T13018] __nla_validate_parse: 1 callbacks suppressed [ 328.958008][T13018] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3350'. [ 329.112997][T13040] validate_nla: 1 callbacks suppressed [ 329.113017][T13040] netlink: 'syz.4.3359': attribute type 10 has an invalid length. [ 329.187348][T13040] team0: Device wg1 is of different type [ 329.224161][T13044] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3358'. [ 329.236210][T13047] netlink: 'syz.3.3356': attribute type 39 has an invalid length. [ 329.305300][T13048] netlink: 'syz.3.3356': attribute type 10 has an invalid length. [ 329.341949][T13048] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3356'. [ 329.411136][T13055] FAULT_INJECTION: forcing a failure. [ 329.411136][T13055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.445404][T12882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.459319][T13055] CPU: 0 PID: 13055 Comm: syz.4.3362 Not tainted syzkaller #0 [ 329.466830][T13055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.477431][T13055] Call Trace: [ 329.480818][T13055] [ 329.483770][T13055] dump_stack_lvl+0x188/0x250 [ 329.488475][T13055] ? show_regs_print_info+0x20/0x20 [ 329.493719][T13055] ? load_image+0x400/0x400 [ 329.498264][T13055] ? __lock_acquire+0x7d10/0x7d10 [ 329.502255][T12882] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.503417][T13055] should_fail+0x38c/0x4c0 [ 329.514524][T13055] _copy_to_user+0x2e/0x130 [ 329.519069][T13055] netns_bpf_prog_query+0x268/0x510 [ 329.524497][T13055] ? rcu_lock_release+0x20/0x20 [ 329.529825][T13055] __sys_bpf+0x382/0x6f0 [ 329.534117][T13055] ? bpf_link_show_fdinfo+0x380/0x380 [ 329.539627][T13055] ? vtime_user_exit+0x2c8/0x3e0 [ 329.544618][T13055] __x64_sys_bpf+0x78/0x90 [ 329.549072][T13055] do_syscall_64+0x4c/0xa0 [ 329.553510][T13055] ? clear_bhb_loop+0x30/0x80 [ 329.558300][T13055] ? clear_bhb_loop+0x30/0x80 [ 329.563006][T13055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 329.569019][T13055] RIP: 0033:0x7f3c72615799 [ 329.573462][T13055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.583055][T12882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.593177][T13055] RSP: 002b:00007f3c7086f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.593203][T13055] RAX: ffffffffffffffda RBX: 00007f3c7288efa0 RCX: 00007f3c72615799 [ 329.593216][T13055] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 329.593228][T13055] RBP: 00007f3c7086f090 R08: 0000000000000000 R09: 0000000000000000 [ 329.593240][T13055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.593250][T13055] R13: 00007f3c7288f038 R14: 00007f3c7288efa0 R15: 00007ffd3353c9a8 [ 329.593289][T13055] [ 329.683856][T12882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.697363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.758992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.773521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.813108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.858961][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.866127][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.892549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.920439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.951895][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.959089][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.028080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.047054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.063733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.087381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.109542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.154160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.180885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.191460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.201365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.211637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.229894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.245933][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 330.246344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.292512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.324305][T13077] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3368'. [ 330.363294][T13095] netlink: 'syz.3.3372': attribute type 10 has an invalid length. [ 330.378029][T13095] team0: Device wg1 is of different type [ 330.425382][T13100] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3373'. [ 330.523123][T13108] FAULT_INJECTION: forcing a failure. [ 330.523123][T13108] name failslab, interval 1, probability 0, space 0, times 0 [ 330.591198][T13108] CPU: 1 PID: 13108 Comm: syz.4.3375 Not tainted syzkaller #0 [ 330.598711][T13108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.608783][T13108] Call Trace: [ 330.612083][T13108] [ 330.615020][T13108] dump_stack_lvl+0x188/0x250 [ 330.619804][T13108] ? show_regs_print_info+0x20/0x20 [ 330.625022][T13108] ? load_image+0x400/0x400 [ 330.626854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.629549][T13108] should_fail+0x38c/0x4c0 [ 330.629577][T13108] ? bpf_clone_redirect+0x1bb/0x470 [ 330.646553][T13108] should_failslab+0x5/0x20 [ 330.648149][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.651066][T13108] slab_pre_alloc_hook+0x51/0xc0 [ 330.651090][T13108] ? bpf_clone_redirect+0x1bb/0x470 [ 330.651110][T13108] __kmalloc_node_track_caller+0x68/0x3a0 [ 330.674537][T13108] ? bpf_clone_redirect+0x1bb/0x470 [ 330.679758][T13108] ? bpf_clone_redirect+0x1bb/0x470 [ 330.685072][T13108] pskb_expand_head+0x127/0x10f0 [ 330.685110][T12882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.690118][T13108] bpf_clone_redirect+0x1bb/0x470 [ 330.690147][T13108] bpf_prog_64e505a7b7f97a05+0x55/0x4a8 [ 330.690165][T13108] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 330.714126][T13108] ? lock_chain_count+0x20/0x20 [ 330.719072][T13108] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 330.726088][T13108] ? lockdep_hardirqs_on+0x94/0x140 [ 330.731394][T13108] ? ktime_get+0x7b/0x270 [ 330.735733][T13108] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 330.742191][T13108] ? ktime_get_real_ts64+0x440/0x440 [ 330.747501][T13108] ? read_lock_is_recursive+0x10/0x10 [ 330.752902][T13108] ? __cant_sleep+0x220/0x220 [ 330.757617][T13108] ? bpf_test_timer_continue+0x13d/0x380 [ 330.763278][T13108] bpf_test_run+0x2a8/0x800 [ 330.767818][T13108] ? convert___skb_to_skb+0x4c0/0x4c0 [ 330.773210][T13108] ? eth_get_headlen+0x200/0x200 [ 330.774100][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.778157][T13108] ? __build_skb+0x1e2/0x2e0 [ 330.778184][T13108] ? bpf_prog_test_run_skb+0x63c/0x1180 [ 330.778202][T13108] ? convert___skb_to_skb+0x3d/0x4c0 [ 330.801034][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.802037][T13108] bpf_prog_test_run_skb+0x9cc/0x1180 [ 330.802078][T13108] ? cpu_online+0x60/0x60 [ 330.819822][T13108] bpf_prog_test_run+0x31e/0x390 [ 330.825031][T13108] __sys_bpf+0x5a5/0x6f0 [ 330.829302][T13108] ? bpf_link_show_fdinfo+0x380/0x380 [ 330.834709][T13108] ? vtime_user_exit+0x2c8/0x3e0 [ 330.840195][T13108] __x64_sys_bpf+0x78/0x90 [ 330.845008][T13108] do_syscall_64+0x4c/0xa0 [ 330.849437][T13108] ? clear_bhb_loop+0x30/0x80 [ 330.854213][T13108] ? clear_bhb_loop+0x30/0x80 [ 330.858907][T13108] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 330.859287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.864811][T13108] RIP: 0033:0x7f3c72615799 [ 330.864833][T13108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.864847][T13108] RSP: 002b:00007f3c7086f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.893184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.896486][T13108] RAX: ffffffffffffffda RBX: 00007f3c7288efa0 RCX: 00007f3c72615799 [ 330.896504][T13108] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 330.896515][T13108] RBP: 00007f3c7086f090 R08: 0000000000000000 R09: 0000000000000000 [ 330.896525][T13108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 330.896536][T13108] R13: 00007f3c7288f038 R14: 00007f3c7288efa0 R15: 00007ffd3353c9a8 [ 330.896562][T13108] [ 331.040107][T12882] device veth0_vlan entered promiscuous mode [ 331.059521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.081213][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.114926][T12882] device veth1_vlan entered promiscuous mode [ 331.184121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 331.193312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 331.207235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.226192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.248206][T12882] device veth0_macvtap entered promiscuous mode [ 331.257724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 331.279516][T12882] device veth1_macvtap entered promiscuous mode [ 331.322767][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.343641][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.371320][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.389754][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.404927][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.425950][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.441633][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.470770][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.497210][T12882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.538676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.626747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.676989][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.770944][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.808823][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.853326][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.878997][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.928909][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.953302][T13157] netlink: 'syz.3.3384': attribute type 4 has an invalid length. [ 331.968521][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.986552][T13157] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3384'. [ 332.017073][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.068604][T12882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.116730][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.150283][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.226396][T12882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.265919][T12882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.308485][T12882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.343578][T12882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.397523][T13165] netlink: 'syz.4.3386': attribute type 10 has an invalid length. [ 332.457433][T13165] team0: Device wg1 is of different type [ 332.587650][T13170] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3388'. [ 332.736456][T13173] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3389'. [ 332.746482][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.770781][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.798701][T10555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 332.887347][T10555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.895207][T10555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.950429][T10562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 332.969284][T13185] FAULT_INJECTION: forcing a failure. [ 332.969284][T13185] name failslab, interval 1, probability 0, space 0, times 0 [ 333.084027][T13185] CPU: 1 PID: 13185 Comm: syz.2.3395 Not tainted syzkaller #0 [ 333.091620][T13185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 333.101704][T13185] Call Trace: [ 333.105005][T13185] [ 333.107948][T13185] dump_stack_lvl+0x188/0x250 [ 333.112643][T13185] ? show_regs_print_info+0x20/0x20 [ 333.117863][T13185] ? load_image+0x400/0x400 [ 333.122473][T13185] ? __might_sleep+0xf0/0xf0 [ 333.127084][T13185] ? __lock_acquire+0x7d10/0x7d10 [ 333.132139][T13185] should_fail+0x38c/0x4c0 [ 333.136585][T13185] should_failslab+0x5/0x20 [ 333.141097][T13185] slab_pre_alloc_hook+0x51/0xc0 [ 333.146055][T13185] ? __alloc_file+0x25/0x240 [ 333.150657][T13185] kmem_cache_alloc+0x3d/0x290 [ 333.155454][T13185] __alloc_file+0x25/0x240 [ 333.159894][T13185] alloc_empty_file+0x90/0x180 [ 333.164675][T13185] path_openat+0x10f/0x2fa0 [ 333.169345][T13185] ? do_filp_open+0x410/0x410 [ 333.174051][T13185] ? perf_trace_lock+0x301/0x390 [ 333.179026][T13185] ? trace_event_raw_event_lock+0x270/0x270 [ 333.184968][T13185] do_filp_open+0x1e2/0x410 [ 333.189499][T13185] ? vfs_tmpfile+0x300/0x300 [ 333.194142][T13185] ? _raw_spin_unlock+0x24/0x40 [ 333.199004][T13185] ? alloc_fd+0x598/0x630 [ 333.203360][T13185] do_sys_openat2+0x150/0x4b0 [ 333.208051][T13185] ? __lock_acquire+0x7d10/0x7d10 [ 333.213097][T13185] ? do_sys_open+0xe0/0xe0 [ 333.217532][T13185] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 333.223530][T13185] ? lock_chain_count+0x20/0x20 [ 333.228396][T13185] ? vtime_user_exit+0x2c8/0x3e0 [ 333.233354][T13185] __x64_sys_openat+0x135/0x160 [ 333.238220][T13185] do_syscall_64+0x4c/0xa0 [ 333.242648][T13185] ? clear_bhb_loop+0x30/0x80 [ 333.247327][T13185] ? clear_bhb_loop+0x30/0x80 [ 333.252011][T13185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.257910][T13185] RIP: 0033:0x7ff522720799 [ 333.262330][T13185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.281945][T13185] RSP: 002b:00007ff52097a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 333.290389][T13185] RAX: ffffffffffffffda RBX: 00007ff522999fa0 RCX: 00007ff522720799 [ 333.298360][T13185] RDX: 000000000000275a RSI: 0000200000000040 RDI: 0000000000000003 [ 333.306343][T13185] RBP: 00007ff52097a090 R08: 0000000000000000 R09: 0000000000000000 [ 333.314311][T13185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.322275][T13185] R13: 00007ff52299a038 R14: 00007ff522999fa0 R15: 00007ffc9beba348 [ 333.330277][T13185] [ 333.416772][T13205] netlink: 'syz.3.3396': attribute type 10 has an invalid length. [ 333.564164][T13210] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3402'. [ 333.590843][T13212] netlink: 'syz.1.3401': attribute type 10 has an invalid length. [ 333.614750][T13212] team0: Device wg1 is of different type [ 333.644256][T13214] netlink: 'syz.2.3400': attribute type 10 has an invalid length. [ 333.743426][T13214] team0: Device wg1 is of different type [ 333.977607][T13230] netlink: 199576 bytes leftover after parsing attributes in process `syz.3.3410'. [ 334.025966][T13230] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3410'. [ 334.107142][T13232] netlink: 'syz.4.3412': attribute type 2 has an invalid length. [ 334.145869][T13232] netlink: 'syz.4.3412': attribute type 8 has an invalid length. [ 334.199402][T13232] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3412'. [ 335.770903][T13252] netlink: 'syz.3.3419': attribute type 2 has an invalid length. [ 335.796201][T13252] netlink: 'syz.3.3419': attribute type 8 has an invalid length. [ 335.820293][T13252] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3419'. [ 335.871158][T13257] netlink: 'syz.0.3421': attribute type 10 has an invalid length. [ 335.962122][T13257] team0: Device wg1 is of different type [ 336.028990][T13261] netlink: 'syz.2.3423': attribute type 39 has an invalid length. [ 336.070271][T13265] netlink: 'syz.2.3423': attribute type 10 has an invalid length. [ 336.106578][T13265] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3423'. [ 336.243386][T13273] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3427'. [ 336.662747][T13290] netlink: 'syz.2.3434': attribute type 28 has an invalid length. [ 336.671399][T13290] FAULT_INJECTION: forcing a failure. [ 336.671399][T13290] name failslab, interval 1, probability 0, space 0, times 0 [ 336.686622][T13290] CPU: 0 PID: 13290 Comm: syz.2.3434 Not tainted syzkaller #0 [ 336.694113][T13290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.704283][T13290] Call Trace: [ 336.707575][T13290] [ 336.710509][T13290] dump_stack_lvl+0x188/0x250 [ 336.715285][T13290] ? show_regs_print_info+0x20/0x20 [ 336.720482][T13290] ? load_image+0x400/0x400 [ 336.724988][T13290] ? __might_sleep+0xf0/0xf0 [ 336.729656][T13290] ? __lock_acquire+0x7d10/0x7d10 [ 336.734676][T13290] should_fail+0x38c/0x4c0 [ 336.739172][T13290] should_failslab+0x5/0x20 [ 336.743749][T13290] slab_pre_alloc_hook+0x51/0xc0 [ 336.748692][T13290] __kmalloc_node_track_caller+0x68/0x3a0 [ 336.754404][T13290] ? netlink_ack+0x372/0xb50 [ 336.759101][T13290] ? kmem_cache_alloc_node+0x162/0x2d0 [ 336.764568][T13290] ? __alloc_skb+0xf4/0x750 [ 336.769073][T13290] ? netlink_ack+0x372/0xb50 [ 336.773662][T13290] __alloc_skb+0x22c/0x750 [ 336.778075][T13290] netlink_ack+0x372/0xb50 [ 336.782483][T13290] ? __copy_skb_header+0x3ba/0x4f0 [ 336.787585][T13290] ? netlink_dump+0xcf0/0xcf0 [ 336.792251][T13290] ? __skb_clone+0x480/0x790 [ 336.796834][T13290] netlink_rcv_skb+0x27a/0x440 [ 336.801597][T13290] ? rtnetlink_bind+0x80/0x80 [ 336.806362][T13290] ? netlink_ack+0xb50/0xb50 [ 336.810947][T13290] netlink_unicast+0x774/0x920 [ 336.815708][T13290] netlink_sendmsg+0x8ba/0xbe0 [ 336.820469][T13290] ? netlink_getsockopt+0x570/0x570 [ 336.825656][T13290] ? aa_sock_msg_perm+0x94/0x150 [ 336.830581][T13290] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 336.835860][T13290] ? security_socket_sendmsg+0x7c/0xa0 [ 336.841318][T13290] ? netlink_getsockopt+0x570/0x570 [ 336.846504][T13290] ____sys_sendmsg+0x5b7/0x8f0 [ 336.851263][T13290] ? __sys_sendmsg_sock+0x30/0x30 [ 336.856281][T13290] ? import_iovec+0x6f/0xa0 [ 336.860787][T13290] ___sys_sendmsg+0x236/0x2e0 [ 336.865463][T13290] ? __sys_sendmsg+0x2a0/0x2a0 [ 336.870225][T13290] ? vfs_write+0x8b2/0xd60 [ 336.874644][T13290] __se_sys_sendmsg+0x1af/0x290 [ 336.879489][T13290] ? __x64_sys_sendmsg+0x80/0x80 [ 336.884414][T13290] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 336.890508][T13290] ? lockdep_hardirqs_on+0x94/0x140 [ 336.895717][T13290] do_syscall_64+0x4c/0xa0 [ 336.900139][T13290] ? clear_bhb_loop+0x30/0x80 [ 336.904854][T13290] ? clear_bhb_loop+0x30/0x80 [ 336.909544][T13290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 336.915460][T13290] RIP: 0033:0x7ff522720799 [ 336.919867][T13290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.939461][T13290] RSP: 002b:00007ff52097a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.947862][T13290] RAX: ffffffffffffffda RBX: 00007ff522999fa0 RCX: 00007ff522720799 [ 336.955929][T13290] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 336.963981][T13290] RBP: 00007ff52097a090 R08: 0000000000000000 R09: 0000000000000000 [ 336.971937][T13290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.979895][T13290] R13: 00007ff52299a038 R14: 00007ff522999fa0 R15: 00007ffc9beba348 [ 336.987868][T13290] [ 337.192007][T13300] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3436'. [ 337.283877][T13303] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3439'. [ 337.645241][T13313] netlink: 'syz.4.3441': attribute type 3 has an invalid length. [ 338.274708][T13334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3450'. [ 338.433229][T13340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3453'. [ 338.973787][T13351] netlink: 'syz.3.3458': attribute type 28 has an invalid length. [ 339.139884][T13360] netlink: 'syz.0.3460': attribute type 3 has an invalid length. [ 339.193129][T13356] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3461'. [ 339.255986][T13360] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3460'. [ 339.478613][T13373] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3467'. [ 339.885007][T13390] netlink: 'syz.4.3474': attribute type 10 has an invalid length. [ 339.928833][T13390] team0: Device wg1 is of different type [ 340.490048][T13398] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3477'. [ 340.714414][T13401] netlink: 'syz.2.3479': attribute type 1 has an invalid length. [ 340.723166][T13401] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3479'. [ 341.902593][T13423] netlink: 'syz.0.3487': attribute type 10 has an invalid length. [ 341.967251][T13423] team0: Device wg1 is of different type [ 342.097466][T13430] netlink: 'syz.4.3489': attribute type 39 has an invalid length. [ 342.353634][T13433] netlink: 'syz.3.3488': attribute type 3 has an invalid length. [ 342.625010][T13442] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3493'. [ 342.637418][T13440] FAULT_INJECTION: forcing a failure. [ 342.637418][T13440] name failslab, interval 1, probability 0, space 0, times 0 [ 342.654563][T13440] CPU: 0 PID: 13440 Comm: syz.3.3492 Not tainted syzkaller #0 [ 342.662064][T13440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.672129][T13440] Call Trace: [ 342.675426][T13440] [ 342.678411][T13440] dump_stack_lvl+0x188/0x250 [ 342.683109][T13440] ? show_regs_print_info+0x20/0x20 [ 342.688430][T13440] ? load_image+0x400/0x400 [ 342.692949][T13440] ? __might_sleep+0xf0/0xf0 [ 342.697551][T13440] ? __lock_acquire+0x7d10/0x7d10 [ 342.702590][T13440] ? netlink_insert+0xe95/0x11f0 [ 342.707548][T13440] should_fail+0x38c/0x4c0 [ 342.711990][T13440] should_failslab+0x5/0x20 [ 342.716508][T13440] slab_pre_alloc_hook+0x51/0xc0 [ 342.721463][T13440] kmem_cache_alloc_node+0x47/0x2d0 [ 342.726791][T13440] ? __alloc_skb+0xf4/0x750 [ 342.731327][T13440] __alloc_skb+0xf4/0x750 [ 342.735730][T13440] netlink_sendmsg+0x654/0xbe0 [ 342.740540][T13440] ? netlink_getsockopt+0x570/0x570 [ 342.745773][T13440] ? aa_sock_msg_perm+0x94/0x150 [ 342.750721][T13440] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 342.755998][T13440] ? security_socket_sendmsg+0x7c/0xa0 [ 342.761446][T13440] ? netlink_getsockopt+0x570/0x570 [ 342.766717][T13440] ____sys_sendmsg+0x5b7/0x8f0 [ 342.771479][T13440] ? __sys_sendmsg_sock+0x30/0x30 [ 342.777195][T13440] ? import_iovec+0x6f/0xa0 [ 342.781691][T13440] ___sys_sendmsg+0x236/0x2e0 [ 342.786362][T13440] ? __sys_sendmsg+0x2a0/0x2a0 [ 342.791144][T13440] __se_sys_sendmsg+0x1af/0x290 [ 342.795992][T13440] ? __x64_sys_sendmsg+0x80/0x80 [ 342.800928][T13440] ? __se_sys_sendmsg+0xd/0x290 [ 342.805782][T13440] do_syscall_64+0x4c/0xa0 [ 342.810196][T13440] ? clear_bhb_loop+0x30/0x80 [ 342.814863][T13440] ? clear_bhb_loop+0x30/0x80 [ 342.819529][T13440] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.825501][T13440] RIP: 0033:0x7fe99b071799 [ 342.829911][T13440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.849601][T13440] RSP: 002b:00007fe9992cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.858020][T13440] RAX: ffffffffffffffda RBX: 00007fe99b2eafa0 RCX: 00007fe99b071799 [ 342.866078][T13440] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 342.874340][T13440] RBP: 00007fe9992cb090 R08: 0000000000000000 R09: 0000000000000000 [ 342.882329][T13440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.890305][T13440] R13: 00007fe99b2eb038 R14: 00007fe99b2eafa0 R15: 00007ffda3fd6a38 [ 342.898364][T13440] [ 343.410784][T13457] netlink: 'syz.3.3499': attribute type 3 has an invalid length. [ 343.435749][T13457] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3499'. [ 343.500537][T13459] netlink: 'syz.2.3501': attribute type 39 has an invalid length. [ 343.575320][T13463] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.3500'. [ 343.632955][T13466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3504'. [ 344.034805][T13477] netlink: 'syz.0.3503': attribute type 3 has an invalid length. [ 344.219262][T13492] FAULT_INJECTION: forcing a failure. [ 344.219262][T13492] name failslab, interval 1, probability 0, space 0, times 0 [ 344.271554][T13492] CPU: 1 PID: 13492 Comm: syz.1.3512 Not tainted syzkaller #0 [ 344.279058][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.289121][T13492] Call Trace: [ 344.292410][T13492] [ 344.295439][T13492] dump_stack_lvl+0x188/0x250 [ 344.300130][T13492] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 344.306308][T13492] ? show_regs_print_info+0x20/0x20 [ 344.311531][T13492] ? load_image+0x400/0x400 [ 344.316059][T13492] ? _printk+0x1/0x130 [ 344.320247][T13492] should_fail+0x38c/0x4c0 [ 344.324701][T13492] should_failslab+0x5/0x20 [ 344.329219][T13492] slab_pre_alloc_hook+0x51/0xc0 [ 344.334181][T13492] ? skb_clone+0x1bd/0x350 [ 344.338621][T13492] kmem_cache_alloc+0x3d/0x290 [ 344.343406][T13492] skb_clone+0x1bd/0x350 [ 344.347672][T13492] bpf_clone_redirect+0x15f/0x470 [ 344.352729][T13492] bpf_prog_5e3b4e18def6d727+0x56/0x248 [ 344.358312][T13492] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 344.364322][T13492] ? lock_chain_count+0x20/0x20 [ 344.369211][T13492] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 344.375490][T13492] ? lockdep_hardirqs_on+0x94/0x140 [ 344.380708][T13492] ? ktime_get+0x7b/0x270 [ 344.385046][T13492] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 344.391316][T13492] ? ktime_get_real_ts64+0x440/0x440 [ 344.396621][T13492] ? read_lock_is_recursive+0x10/0x10 [ 344.402019][T13492] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 344.408023][T13492] ? __cant_sleep+0x220/0x220 [ 344.412738][T13492] ? ktime_get+0x247/0x270 [ 344.417184][T13492] bpf_test_run+0x2a8/0x800 [ 344.421723][T13492] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 344.428024][T13492] ? convert___skb_to_skb+0x4c0/0x4c0 [ 344.433421][T13492] ? eth_get_headlen+0x200/0x200 [ 344.438383][T13492] ? __build_skb+0x1e2/0x2e0 [ 344.442985][T13492] ? convert___skb_to_skb+0x3d/0x4c0 [ 344.448332][T13492] bpf_prog_test_run_skb+0x9cc/0x1180 [ 344.453821][T13492] ? cpu_online+0x60/0x60 [ 344.458175][T13492] bpf_prog_test_run+0x31e/0x390 [ 344.463116][T13492] __sys_bpf+0x5a5/0x6f0 [ 344.467350][T13492] ? bpf_link_show_fdinfo+0x380/0x380 [ 344.472731][T13492] ? vtime_user_exit+0x2c8/0x3e0 [ 344.478336][T13492] __x64_sys_bpf+0x78/0x90 [ 344.482871][T13492] do_syscall_64+0x4c/0xa0 [ 344.487305][T13492] ? clear_bhb_loop+0x30/0x80 [ 344.491988][T13492] ? clear_bhb_loop+0x30/0x80 [ 344.496653][T13492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.502542][T13492] RIP: 0033:0x7facb6373799 [ 344.506947][T13492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.526644][T13492] RSP: 002b:00007facb45cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.535053][T13492] RAX: ffffffffffffffda RBX: 00007facb65ecfa0 RCX: 00007facb6373799 [ 344.543029][T13492] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 000000000000000a [ 344.550999][T13492] RBP: 00007facb45cd090 R08: 0000000000000000 R09: 0000000000000000 [ 344.558957][T13492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.566911][T13492] R13: 00007facb65ed038 R14: 00007facb65ecfa0 R15: 00007ffe62cf2148 [ 344.574885][T13492] [ 344.926903][T13507] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3517'. [ 345.223397][T13510] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3519'. [ 345.258252][T13517] sctp: [Deprecated]: syz.0.3522 (pid 13517) Use of int in max_burst socket option deprecated. [ 345.258252][T13517] Use struct sctp_assoc_value instead [ 345.278039][T13519] netlink: 'syz.1.3521': attribute type 39 has an invalid length. [ 345.340588][T13517] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3522'. [ 345.358258][T13517] openvswitch: netlink: Key type 15645 is out of range max 29 [ 345.664319][T13530] netlink: 'syz.0.3526': attribute type 10 has an invalid length. [ 345.704906][T13530] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3526'. [ 346.082096][T13536] netlink: 'syz.2.3528': attribute type 10 has an invalid length. [ 346.109027][T13536] team0: Device wg1 is of different type [ 346.522486][T13551] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3533'. [ 346.641779][T13558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3536'. [ 346.941781][T13572] sctp: [Deprecated]: syz.4.3543 (pid 13572) Use of int in max_burst socket option deprecated. [ 346.941781][T13572] Use struct sctp_assoc_value instead [ 346.986983][T13579] netlink: 'syz.2.3544': attribute type 39 has an invalid length. [ 347.003507][T13574] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3542'. [ 347.067739][T13572] netlink: 668 bytes leftover after parsing attributes in process `syz.4.3543'. [ 347.092489][T13572] openvswitch: netlink: Key type 15645 is out of range max 29 [ 347.143367][T13584] netlink: 'syz.0.3546': attribute type 39 has an invalid length. [ 347.444514][T13594] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3550'. [ 347.614388][T13611] FAULT_INJECTION: forcing a failure. [ 347.614388][T13611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.676564][T13611] CPU: 0 PID: 13611 Comm: syz.2.3556 Not tainted syzkaller #0 [ 347.684073][T13611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.694136][T13611] Call Trace: [ 347.697421][T13611] [ 347.700404][T13611] dump_stack_lvl+0x188/0x250 [ 347.705108][T13611] ? show_regs_print_info+0x20/0x20 [ 347.710324][T13611] ? load_image+0x400/0x400 [ 347.714851][T13611] ? __lock_acquire+0x7d10/0x7d10 [ 347.720092][T13611] should_fail+0x38c/0x4c0 [ 347.724626][T13611] _copy_from_iter+0x22e/0x1170 [ 347.729504][T13611] ? __lock_acquire+0x7d10/0x7d10 [ 347.734814][T13611] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 347.740313][T13611] ? __virt_addr_valid+0x3c6/0x470 [ 347.745426][T13611] ? __phys_addr_symbol+0x2b/0x70 [ 347.750449][T13611] ? __check_object_size+0x30c/0x410 [ 347.756429][T13611] netlink_sendmsg+0x758/0xbe0 [ 347.761224][T13611] ? netlink_getsockopt+0x570/0x570 [ 347.766530][T13611] ? aa_sock_msg_perm+0x94/0x150 [ 347.771571][T13611] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 347.776868][T13611] ? security_socket_sendmsg+0x7c/0xa0 [ 347.782340][T13611] ? netlink_getsockopt+0x570/0x570 [ 347.787595][T13611] ____sys_sendmsg+0x5b7/0x8f0 [ 347.792383][T13611] ? __sys_sendmsg_sock+0x30/0x30 [ 347.797443][T13611] ? import_iovec+0x6f/0xa0 [ 347.801969][T13611] ___sys_sendmsg+0x236/0x2e0 [ 347.806674][T13611] ? __sys_sendmsg+0x2a0/0x2a0 [ 347.811558][T13611] ? ktime_get_real_ts64+0x440/0x440 [ 347.816873][T13611] __se_sys_sendmsg+0x1af/0x290 [ 347.821739][T13611] ? __x64_sys_sendmsg+0x80/0x80 [ 347.826718][T13611] ? syscall_enter_from_user_mode+0x2a/0x70 [ 347.832632][T13611] do_syscall_64+0x4c/0xa0 [ 347.837059][T13611] ? clear_bhb_loop+0x30/0x80 [ 347.841843][T13611] ? clear_bhb_loop+0x30/0x80 [ 347.846540][T13611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.852435][T13611] RIP: 0033:0x7ff522720799 [ 347.857028][T13611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.876821][T13611] RSP: 002b:00007ff52097a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.885248][T13611] RAX: ffffffffffffffda RBX: 00007ff522999fa0 RCX: 00007ff522720799 [ 347.893234][T13611] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000009 [ 347.901222][T13611] RBP: 00007ff52097a090 R08: 0000000000000000 R09: 0000000000000000 [ 347.909205][T13611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.917189][T13611] R13: 00007ff52299a038 R14: 00007ff522999fa0 R15: 00007ffc9beba348 [ 347.925198][T13611] [ 348.152908][T13628] sctp: [Deprecated]: syz.2.3560 (pid 13628) Use of int in max_burst socket option deprecated. [ 348.152908][T13628] Use struct sctp_assoc_value instead [ 348.228018][T13628] netlink: 668 bytes leftover after parsing attributes in process `syz.2.3560'. [ 348.279244][T13628] openvswitch: netlink: Key type 15645 is out of range max 29 [ 348.586223][T13644] netlink: 'syz.4.3567': attribute type 10 has an invalid length. [ 349.607040][T13684] netlink: 'syz.2.3583': attribute type 10 has an invalid length. [ 350.108107][T13706] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 350.142527][T13706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.209656][T13709] __nla_validate_parse: 8 callbacks suppressed [ 350.209692][T13709] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3595'. [ 350.352967][T13714] netlink: 'syz.1.3596': attribute type 10 has an invalid length. [ 350.383018][T13714] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3596'. [ 350.548378][T13722] netlink: 'syz.4.3598': attribute type 9 has an invalid length. [ 350.585679][T13722] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3598'. [ 351.068321][T13742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3607'. [ 351.310986][T13758] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3614'. [ 351.451944][T13765] FAULT_INJECTION: forcing a failure. [ 351.451944][T13765] name failslab, interval 1, probability 0, space 0, times 0 [ 351.488607][T13765] CPU: 1 PID: 13765 Comm: syz.2.3616 Not tainted syzkaller #0 [ 351.496112][T13765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.507490][T13765] Call Trace: [ 351.510777][T13765] [ 351.513710][T13765] dump_stack_lvl+0x188/0x250 [ 351.518387][T13765] ? verify_lock_unused+0x140/0x140 [ 351.523589][T13765] ? show_regs_print_info+0x20/0x20 [ 351.528778][T13765] ? load_image+0x400/0x400 [ 351.533272][T13765] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 351.539245][T13765] should_fail+0x38c/0x4c0 [ 351.543742][T13765] should_failslab+0x5/0x20 [ 351.548229][T13765] slab_pre_alloc_hook+0x51/0xc0 [ 351.553248][T13765] ? skb_clone+0x1bd/0x350 [ 351.557651][T13765] kmem_cache_alloc+0x3d/0x290 [ 351.562403][T13765] skb_clone+0x1bd/0x350 [ 351.566635][T13765] bpf_clone_redirect+0x15f/0x470 [ 351.571648][T13765] ? ktime_get+0x247/0x270 [ 351.576050][T13765] bpf_prog_5a852fc91b8e417a+0x19/0x4c8 [ 351.581678][T13765] bpf_test_run+0x2a8/0x800 [ 351.586173][T13765] ? lock_chain_count+0x20/0x20 [ 351.591021][T13765] ? convert___skb_to_skb+0x4c0/0x4c0 [ 351.596379][T13765] ? eth_get_headlen+0x200/0x200 [ 351.601392][T13765] ? __sanitizer_cov_trace_const_cmp4+0x13/0x80 [ 351.607617][T13765] ? convert___skb_to_skb+0x3d/0x4c0 [ 351.612892][T13765] bpf_prog_test_run_skb+0x9cc/0x1180 [ 351.618258][T13765] ? cpu_online+0x60/0x60 [ 351.622572][T13765] bpf_prog_test_run+0x31e/0x390 [ 351.627503][T13765] __sys_bpf+0x5a5/0x6f0 [ 351.631734][T13765] ? bpf_link_show_fdinfo+0x380/0x380 [ 351.637122][T13765] __x64_sys_bpf+0x78/0x90 [ 351.641553][T13765] do_syscall_64+0x4c/0xa0 [ 351.646410][T13765] ? clear_bhb_loop+0x30/0x80 [ 351.651108][T13765] ? clear_bhb_loop+0x30/0x80 [ 351.655874][T13765] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.661847][T13765] RIP: 0033:0x7ff522720799 [ 351.666256][T13765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.686146][T13765] RSP: 002b:00007ff520959028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.694551][T13765] RAX: ffffffffffffffda RBX: 00007ff52299a090 RCX: 00007ff522720799 [ 351.702613][T13765] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 351.710572][T13765] RBP: 00007ff520959090 R08: 0000000000000000 R09: 0000000000000000 [ 351.718531][T13765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.726590][T13765] R13: 00007ff52299a128 R14: 00007ff52299a090 R15: 00007ffc9beba348 [ 351.734568][T13765] [ 352.438131][T13776] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3617'. [ 352.459583][T13780] netlink: 'syz.3.3621': attribute type 10 has an invalid length. [ 352.509167][T13780] team0: Device wg1 is of different type [ 352.591254][T13782] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3622'. [ 352.758677][T13786] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3623'. [ 352.949272][T13795] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.3626'. [ 353.282246][T13815] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3633'. [ 353.622017][T13831] netlink: 'syz.1.3641': attribute type 10 has an invalid length. [ 354.968460][T13871] netlink: 'syz.2.3656': attribute type 10 has an invalid length. [ 355.050452][T13871] team0: Device wg1 is of different type [ 355.286523][T13880] FAULT_INJECTION: forcing a failure. [ 355.286523][T13880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.310038][T13880] CPU: 0 PID: 13880 Comm: syz.1.3660 Not tainted syzkaller #0 [ 355.317713][T13880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.327779][T13880] Call Trace: [ 355.331072][T13880] [ 355.334108][T13880] dump_stack_lvl+0x188/0x250 [ 355.338899][T13880] ? show_regs_print_info+0x20/0x20 [ 355.344130][T13880] ? load_image+0x400/0x400 [ 355.348647][T13880] ? __lock_acquire+0x7d10/0x7d10 [ 355.353878][T13880] should_fail+0x38c/0x4c0 [ 355.358844][T13880] _copy_from_user+0x2e/0x170 [ 355.363532][T13880] iovec_from_user+0x142/0x370 [ 355.368413][T13880] __import_iovec+0x70/0x490 [ 355.373146][T13880] import_iovec+0x6f/0xa0 [ 355.377749][T13880] ___sys_sendmsg+0x1fd/0x2e0 [ 355.382439][T13880] ? __sys_sendmsg+0x2a0/0x2a0 [ 355.387305][T13880] ? vfs_write+0x8b2/0xd60 [ 355.391742][T13880] __se_sys_sendmsg+0x1af/0x290 [ 355.396680][T13880] ? __x64_sys_sendmsg+0x80/0x80 [ 355.401611][T13880] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 355.407791][T13880] ? lockdep_hardirqs_on+0x94/0x140 [ 355.413002][T13880] do_syscall_64+0x4c/0xa0 [ 355.417406][T13880] ? clear_bhb_loop+0x30/0x80 [ 355.422064][T13880] ? clear_bhb_loop+0x30/0x80 [ 355.426736][T13880] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 355.432747][T13880] RIP: 0033:0x7facb6373799 [ 355.437169][T13880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.457059][T13880] RSP: 002b:00007facb45cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.465555][T13880] RAX: ffffffffffffffda RBX: 00007facb65ecfa0 RCX: 00007facb6373799 [ 355.473550][T13880] RDX: 0000000000004000 RSI: 0000200000000e40 RDI: 0000000000000003 [ 355.481512][T13880] RBP: 00007facb45cd090 R08: 0000000000000000 R09: 0000000000000000 [ 355.489477][T13880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.497566][T13880] R13: 00007facb65ed038 R14: 00007facb65ecfa0 R15: 00007ffe62cf2148 [ 355.505665][T13880] [ 355.735680][T13893] netlink: 'syz.3.3665': attribute type 39 has an invalid length. [ 355.762585][T13897] __nla_validate_parse: 7 callbacks suppressed [ 355.762622][T13897] netlink: 111 bytes leftover after parsing attributes in process `syz.0.3667'. [ 355.918588][T13901] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3669'. [ 355.980921][T13915] FAULT_INJECTION: forcing a failure. [ 355.980921][T13915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.988955][T13913] netlink: 'syz.1.3673': attribute type 10 has an invalid length. [ 356.031887][T13913] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3673'. [ 356.032467][T13915] CPU: 1 PID: 13915 Comm: syz.4.3674 Not tainted syzkaller #0 [ 356.048367][T13915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.058440][T13915] Call Trace: [ 356.061729][T13915] [ 356.064703][T13915] dump_stack_lvl+0x188/0x250 [ 356.069392][T13915] ? show_regs_print_info+0x20/0x20 [ 356.074610][T13915] ? load_image+0x400/0x400 [ 356.079125][T13915] ? __lock_acquire+0x7d10/0x7d10 [ 356.084145][T13915] ? vfs_write+0x8b2/0xd60 [ 356.088556][T13915] should_fail+0x38c/0x4c0 [ 356.093062][T13915] _copy_from_user+0x2e/0x170 [ 356.097729][T13915] __sys_bpf+0x26d/0x6f0 [ 356.101997][T13915] ? bpf_link_show_fdinfo+0x380/0x380 [ 356.107366][T13915] ? vtime_user_exit+0x2c8/0x3e0 [ 356.112387][T13915] __x64_sys_bpf+0x78/0x90 [ 356.116795][T13915] do_syscall_64+0x4c/0xa0 [ 356.121378][T13915] ? clear_bhb_loop+0x30/0x80 [ 356.126576][T13915] ? clear_bhb_loop+0x30/0x80 [ 356.131610][T13915] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 356.138034][T13915] RIP: 0033:0x7f3c72615799 [ 356.142533][T13915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.162129][T13915] RSP: 002b:00007f3c7086f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.171438][T13915] RAX: ffffffffffffffda RBX: 00007f3c7288efa0 RCX: 00007f3c72615799 [ 356.179437][T13915] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 000000000000001e [ 356.188205][T13915] RBP: 00007f3c7086f090 R08: 0000000000000000 R09: 0000000000000000 [ 356.196744][T13915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.204720][T13915] R13: 00007f3c7288f038 R14: 00007f3c7288efa0 R15: 00007ffd3353c9a8 [ 356.213303][T13915] [ 356.271727][T13921] netlink: 'syz.0.3675': attribute type 10 has an invalid length. [ 356.338881][T13921] team0: Device wg1 is of different type [ 356.373729][T13923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3677'. [ 356.583495][T13935] netlink: 'syz.2.3683': attribute type 39 has an invalid length. [ 356.861186][T13945] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3687'. [ 357.183676][T13961] netlink: 'syz.0.3693': attribute type 10 has an invalid length. [ 357.232756][T13961] team0: Device wg1 is of different type [ 357.340198][T13965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3695'. [ 357.611161][T13975] netlink: 'syz.2.3700': attribute type 39 has an invalid length. [ 357.801713][T13986] netlink: 'syz.4.3702': attribute type 39 has an invalid length. [ 357.893046][T13984] netlink: 'syz.0.3703': attribute type 39 has an invalid length. [ 358.011195][T13985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3705'. [ 358.036532][T13991] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3704'. [ 358.077062][T13988] netlink: 'syz.0.3703': attribute type 10 has an invalid length. [ 358.116326][T13988] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3703'. [ 358.437910][T13997] netlink: 'syz.3.3708': attribute type 10 has an invalid length. [ 358.474809][T13998] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3710'. [ 358.501976][T13997] team0: Device wg1 is of different type [ 358.994735][T14029] FAULT_INJECTION: forcing a failure. [ 358.994735][T14029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.027105][T14029] CPU: 0 PID: 14029 Comm: syz.0.3722 Not tainted syzkaller #0 [ 359.034602][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.044668][T14029] Call Trace: [ 359.047953][T14029] [ 359.050881][T14029] dump_stack_lvl+0x188/0x250 [ 359.055567][T14029] ? lock_chain_count+0x20/0x20 [ 359.060529][T14029] ? show_regs_print_info+0x20/0x20 [ 359.065757][T14029] ? load_image+0x400/0x400 [ 359.070288][T14029] ? lockdep_hardirqs_on+0x94/0x140 [ 359.075505][T14029] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 359.081670][T14029] should_fail+0x38c/0x4c0 [ 359.086112][T14029] _copy_from_iter+0x22e/0x1170 [ 359.090984][T14029] ? __lock_acquire+0x7d10/0x7d10 [ 359.096026][T14029] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 359.101410][T14029] ? __virt_addr_valid+0x3c6/0x470 [ 359.106522][T14029] ? __phys_addr_symbol+0x2b/0x70 [ 359.111547][T14029] ? __check_object_size+0x30c/0x410 [ 359.116836][T14029] netlink_sendmsg+0x758/0xbe0 [ 359.121635][T14029] ? netlink_getsockopt+0x570/0x570 [ 359.126839][T14029] ? aa_sock_msg_perm+0x94/0x150 [ 359.131786][T14029] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 359.137073][T14029] ? security_socket_sendmsg+0x7c/0xa0 [ 359.142531][T14029] ? netlink_getsockopt+0x570/0x570 [ 359.147731][T14029] ____sys_sendmsg+0x5b7/0x8f0 [ 359.152509][T14029] ? __sys_sendmsg_sock+0x30/0x30 [ 359.157549][T14029] ? import_iovec+0x6f/0xa0 [ 359.162069][T14029] ___sys_sendmsg+0x236/0x2e0 [ 359.166784][T14029] ? __sys_sendmsg+0x2a0/0x2a0 [ 359.171566][T14029] ? ktime_get_real_ts64+0x440/0x440 [ 359.176875][T14029] __se_sys_sendmsg+0x1af/0x290 [ 359.181735][T14029] ? __x64_sys_sendmsg+0x80/0x80 [ 359.186851][T14029] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 359.193128][T14029] ? lockdep_hardirqs_on+0x94/0x140 [ 359.198439][T14029] do_syscall_64+0x4c/0xa0 [ 359.202877][T14029] ? clear_bhb_loop+0x30/0x80 [ 359.207670][T14029] ? clear_bhb_loop+0x30/0x80 [ 359.212361][T14029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 359.218281][T14029] RIP: 0033:0x7fc6cf2e1799 [ 359.222709][T14029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.242324][T14029] RSP: 002b:00007fc6cd53b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.251039][T14029] RAX: ffffffffffffffda RBX: 00007fc6cf55afa0 RCX: 00007fc6cf2e1799 [ 359.259016][T14029] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000a [ 359.267078][T14029] RBP: 00007fc6cd53b090 R08: 0000000000000000 R09: 0000000000000000 [ 359.275228][T14029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.283204][T14029] R13: 00007fc6cf55b038 R14: 00007fc6cf55afa0 R15: 00007ffc9df95a58 [ 359.291203][T14029] [ 360.319831][T14045] team0: Device wg1 is of different type [ 360.923627][T14081] sctp: [Deprecated]: syz.0.3742 (pid 14081) Use of int in maxseg socket option. [ 360.923627][T14081] Use struct sctp_assoc_value instead [ 360.983108][T14081] __nla_validate_parse: 3 callbacks suppressed [ 360.983128][T14081] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3742'. [ 361.556218][T14089] validate_nla: 6 callbacks suppressed [ 361.556237][T14089] netlink: 'syz.4.3745': attribute type 39 has an invalid length. [ 364.081090][T14097] netlink: 'syz.4.3748': attribute type 10 has an invalid length. [ 364.091623][T14097] team0: Device wg1 is of different type [ 364.281115][T14102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3751'. [ 364.438248][T14116] netlink: 'syz.3.3756': attribute type 10 has an invalid length. [ 364.473215][T14116] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3756'. [ 364.736238][T14132] netlink: 'syz.3.3762': attribute type 10 has an invalid length. [ 364.765866][T14132] team0: Device wg1 is of different type [ 364.785994][T14134] sctp: [Deprecated]: syz.4.3763 (pid 14134) Use of int in maxseg socket option. [ 364.785994][T14134] Use struct sctp_assoc_value instead [ 364.817464][T14134] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3763'. [ 367.910376][T14149] netlink: 'syz.3.3769': attribute type 10 has an invalid length. [ 367.961652][T14149] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3769'. [ 368.124060][T14164] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3775'. [ 368.456925][T14179] netlink: 'syz.0.3780': attribute type 3 has an invalid length. [ 368.536540][T14184] sctp: [Deprecated]: syz.3.3784 (pid 14184) Use of int in maxseg socket option. [ 368.536540][T14184] Use struct sctp_assoc_value instead [ 368.610908][T14186] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3785'. [ 368.654119][T14184] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3784'. [ 368.685516][T14188] netlink: 'syz.4.3786': attribute type 10 has an invalid length. [ 368.696201][T14188] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3786'. [ 369.051861][T14209] netlink: 'syz.2.3796': attribute type 10 has an invalid length. [ 369.270536][T14216] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3798'. [ 369.304199][T14209] team0: Port device macvlan0 added [ 369.328717][T14218] netlink: 'syz.0.3800': attribute type 11 has an invalid length. [ 369.619007][T14228] netlink: 'syz.4.3802': attribute type 10 has an invalid length. [ 369.635289][T14228] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3802'. [ 370.151020][T14254] À: port 1(vlan0) entered blocking state [ 370.169211][T14254] À: port 1(vlan0) entered disabled state [ 370.191074][T14254] device vlan0 entered promiscuous mode [ 370.309271][T14264] netlink: 'syz.3.3817': attribute type 10 has an invalid length. [ 370.318547][T14264] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3817'. [ 370.485416][T14269] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3819'. [ 370.549109][T14272] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3821'. [ 370.816213][T14289] netlink: 'syz.1.3829': attribute type 2 has an invalid length. [ 370.988606][T14295] netlink: 'syz.3.3831': attribute type 10 has an invalid length. [ 371.677175][T14320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.684707][T14320] IPv6: NLM_F_CREATE should be set when creating new route [ 371.692493][T14320] IPv6: NLM_F_CREATE should be set when creating new route [ 371.699954][T14320] IPv6: NLM_F_CREATE should be set when creating new route [ 371.751968][T14323] netlink: 'syz.3.3844': attribute type 10 has an invalid length. [ 372.474700][T14362] device wlan1 entered promiscuous mode [ 372.921587][T14374] À: port 1(vlan0) entered blocking state [ 372.934380][T14374] À: port 1(vlan0) entered disabled state [ 372.968280][T14374] device vlan0 entered promiscuous mode [ 373.161285][T14383] __nla_validate_parse: 11 callbacks suppressed [ 373.161322][T14383] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3872'. [ 373.204840][T14383] netlink: get zone limit has 8 unknown bytes [ 373.355723][T14390] FAULT_INJECTION: forcing a failure. [ 373.355723][T14390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.407728][T14392] validate_nla: 2 callbacks suppressed [ 373.407760][T14392] netlink: 'syz.4.3876': attribute type 10 has an invalid length. [ 373.469258][T14395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3877'. [ 373.478763][T14390] CPU: 1 PID: 14390 Comm: syz.3.3874 Not tainted syzkaller #0 [ 373.486242][T14390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.496316][T14390] Call Trace: [ 373.499609][T14390] [ 373.502643][T14390] dump_stack_lvl+0x188/0x250 [ 373.507337][T14390] ? show_regs_print_info+0x20/0x20 [ 373.512550][T14390] ? load_image+0x400/0x400 [ 373.517072][T14390] ? __lock_acquire+0x7d10/0x7d10 [ 373.522201][T14390] should_fail+0x38c/0x4c0 [ 373.526637][T14390] _copy_from_user+0x2e/0x170 [ 373.531320][T14390] __copy_msghdr_from_user+0xc9/0x630 [ 373.536682][T14390] ? verify_lock_unused+0x140/0x140 [ 373.541882][T14390] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 373.547165][T14390] ___sys_sendmsg+0x19a/0x2e0 [ 373.551840][T14390] ? __sys_sendmsg+0x2a0/0x2a0 [ 373.556600][T14390] ? ktime_get_real_ts64+0x440/0x440 [ 373.561901][T14390] __se_sys_sendmsg+0x1af/0x290 [ 373.566749][T14390] ? __x64_sys_sendmsg+0x80/0x80 [ 373.571672][T14390] ? lockdep_hardirqs_on+0x94/0x140 [ 373.576869][T14390] do_syscall_64+0x4c/0xa0 [ 373.581270][T14390] ? clear_bhb_loop+0x30/0x80 [ 373.585933][T14390] ? clear_bhb_loop+0x30/0x80 [ 373.590595][T14390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 373.596472][T14390] RIP: 0033:0x7fe99b071799 [ 373.600873][T14390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.620464][T14390] RSP: 002b:00007fe9992cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.628866][T14390] RAX: ffffffffffffffda RBX: 00007fe99b2eafa0 RCX: 00007fe99b071799 [ 373.636915][T14390] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 373.645046][T14390] RBP: 00007fe9992cb090 R08: 0000000000000000 R09: 0000000000000000 [ 373.653098][T14390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.661054][T14390] R13: 00007fe99b2eb038 R14: 00007fe99b2eafa0 R15: 00007ffda3fd6a38 [ 373.669042][T14390] [ 373.683658][T14397] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3878'. [ 373.699354][T14397] netlink: get zone limit has 8 unknown bytes [ 373.711306][T14392] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3876'. [ 373.723718][T14400] netlink: 'syz.1.3878': attribute type 23 has an invalid length. [ 373.749826][T14401] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3879'. [ 373.763112][T14401] netlink: 'syz.0.3879': attribute type 2 has an invalid length. [ 373.949173][T14406] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3882'. [ 374.220462][T14406] can: request_module (can-proto-0) failed. [ 374.314228][T14418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.321774][T14418] IPv6: NLM_F_CREATE should be set when creating new route [ 374.329331][T14418] IPv6: NLM_F_CREATE should be set when creating new route [ 374.336708][T14418] IPv6: NLM_F_CREATE should be set when creating new route [ 374.432076][T14431] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3892'. [ 374.497487][T14435] FAULT_INJECTION: forcing a failure. [ 374.497487][T14435] name failslab, interval 1, probability 0, space 0, times 0 [ 374.577552][T14435] CPU: 1 PID: 14435 Comm: syz.0.3894 Not tainted syzkaller #0 [ 374.585689][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.595868][T14435] Call Trace: [ 374.599172][T14435] [ 374.602257][T14435] dump_stack_lvl+0x188/0x250 [ 374.607030][T14435] ? show_regs_print_info+0x20/0x20 [ 374.612367][T14435] ? load_image+0x400/0x400 [ 374.616906][T14435] ? memset+0x1e/0x40 [ 374.620926][T14435] should_fail+0x38c/0x4c0 [ 374.625418][T14435] should_failslab+0x5/0x20 [ 374.629966][T14435] slab_pre_alloc_hook+0x51/0xc0 [ 374.634940][T14435] ? __build_skb+0x26/0x2e0 [ 374.639669][T14435] kmem_cache_alloc+0x3d/0x290 [ 374.644484][T14435] __build_skb+0x26/0x2e0 [ 374.648965][T14435] build_skb+0x1e/0x170 [ 374.653161][T14435] bpf_prog_test_run_skb+0x260/0x1180 [ 374.658548][T14435] ? __fget_files+0x40f/0x480 [ 374.663269][T14435] ? cpu_online+0x60/0x60 [ 374.667796][T14435] bpf_prog_test_run+0x31e/0x390 [ 374.672749][T14435] __sys_bpf+0x5a5/0x6f0 [ 374.676997][T14435] ? bpf_link_show_fdinfo+0x380/0x380 [ 374.682690][T14435] ? vtime_user_exit+0x2c8/0x3e0 [ 374.687651][T14435] __x64_sys_bpf+0x78/0x90 [ 374.692072][T14435] do_syscall_64+0x4c/0xa0 [ 374.696484][T14435] ? clear_bhb_loop+0x30/0x80 [ 374.701155][T14435] ? clear_bhb_loop+0x30/0x80 [ 374.705982][T14435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.711891][T14435] RIP: 0033:0x7fc6cf2e1799 [ 374.716314][T14435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.736020][T14435] RSP: 002b:00007fc6cd53b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.744446][T14435] RAX: ffffffffffffffda RBX: 00007fc6cf55afa0 RCX: 00007fc6cf2e1799 [ 374.752513][T14435] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 374.761094][T14435] RBP: 00007fc6cd53b090 R08: 0000000000000000 R09: 0000000000000000 [ 374.769061][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.777118][T14435] R13: 00007fc6cf55b038 R14: 00007fc6cf55afa0 R15: 00007ffc9df95a58 [ 374.785308][T14435] [ 375.251753][T14461] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3903'. [ 375.366754][T14472] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3906'. [ 375.549169][T14471] can: request_module (can-proto-0) failed. [ 375.612255][T14476] netlink: 16182 bytes leftover after parsing attributes in process `syz.4.3909'. [ 375.702567][T14476] netlink: 'syz.4.3909': attribute type 10 has an invalid length. [ 376.205456][T14478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.213309][T14478] IPv6: NLM_F_CREATE should be set when creating new route [ 376.220907][T14478] IPv6: NLM_F_CREATE should be set when creating new route [ 376.230095][T14478] IPv6: NLM_F_CREATE should be set when creating new route [ 376.261100][T14502] tipc: Started in network mode [ 376.269947][T14502] tipc: Node identity 1a, cluster identity 4711 [ 376.283870][T14502] tipc: Node number set to 26 [ 376.816268][T14525] can: request_module (can-proto-0) failed. [ 376.941031][T14537] netlink: 'syz.3.3932': attribute type 2 has an invalid length. [ 376.983089][T14536] netlink: 'syz.1.3930': attribute type 10 has an invalid length. [ 377.066248][T14545] FAULT_INJECTION: forcing a failure. [ 377.066248][T14545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.126194][T14545] CPU: 0 PID: 14545 Comm: syz.3.3935 Not tainted syzkaller #0 [ 377.133781][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.144973][T14545] Call Trace: [ 377.148394][T14545] [ 377.151328][T14545] dump_stack_lvl+0x188/0x250 [ 377.156105][T14545] ? show_regs_print_info+0x20/0x20 [ 377.161429][T14545] ? load_image+0x400/0x400 [ 377.165947][T14545] ? __lock_acquire+0x7d10/0x7d10 [ 377.169749][T14536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.170990][T14545] ? perf_trace_lock_acquire+0xed/0x3e0 [ 377.171034][T14545] should_fail+0x38c/0x4c0 [ 377.171061][T14545] _copy_from_user+0x2e/0x170 [ 377.192532][T14545] iovec_from_user+0x142/0x370 [ 377.197316][T14545] __import_iovec+0x70/0x490 [ 377.199112][T14536] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 377.201927][T14545] import_iovec+0x6f/0xa0 [ 377.201959][T14545] ___sys_sendmsg+0x1fd/0x2e0 [ 377.201989][T14545] ? __sys_sendmsg+0x2a0/0x2a0 [ 377.202020][T14545] ? vfs_write+0x8b2/0xd60 [ 377.229177][T14545] __se_sys_sendmsg+0x1af/0x290 [ 377.231926][T14542] IPv6: Can't replace route, no match found [ 377.234057][T14545] ? __x64_sys_sendmsg+0x80/0x80 [ 377.234082][T14545] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 377.234118][T14545] ? lockdep_hardirqs_on+0x94/0x140 [ 377.234143][T14545] do_syscall_64+0x4c/0xa0 [ 377.240974][T14543] IPv6: Can't replace route, no match found [ 377.244955][T14545] ? clear_bhb_loop+0x30/0x80 [ 377.244978][T14545] ? clear_bhb_loop+0x30/0x80 [ 377.244998][T14545] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.245016][T14545] RIP: 0033:0x7fe99b071799 [ 377.245042][T14545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.305764][T14545] RSP: 002b:00007fe9992cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.314167][T14545] RAX: ffffffffffffffda RBX: 00007fe99b2eafa0 RCX: 00007fe99b071799 [ 377.322127][T14545] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 377.330084][T14545] RBP: 00007fe9992cb090 R08: 0000000000000000 R09: 0000000000000000 [ 377.338135][T14545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.346105][T14545] R13: 00007fe99b2eb038 R14: 00007fe99b2eafa0 R15: 00007ffda3fd6a38 [ 377.354096][T14545] [ 377.452569][T14555] tipc: Started in network mode [ 377.462988][T14555] tipc: Node identity 1a, cluster identity 4711 [ 377.469964][T14555] tipc: Node number set to 26 [ 377.923334][T14573] netlink: 'syz.3.3945': attribute type 2 has an invalid length. [ 378.234858][T14579] __nla_validate_parse: 11 callbacks suppressed [ 378.234892][T14579] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3956'. [ 378.284031][T14578] can: request_module (can-proto-0) failed. [ 378.568054][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.574515][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.785323][T14605] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3957'. [ 378.825751][T14605] netlink: 'syz.0.3957': attribute type 2 has an invalid length. [ 378.870818][T14599] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3954'. [ 378.916386][T14599] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.3954'. [ 378.932945][T14599] tipc: Started in network mode [ 378.938907][T14599] tipc: Node identity 1a, cluster identity 4711 [ 378.961742][T14611] FAULT_INJECTION: forcing a failure. [ 378.961742][T14611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.978863][T14599] tipc: Node number set to 26 [ 378.997829][T14611] CPU: 1 PID: 14611 Comm: syz.4.3958 Not tainted syzkaller #0 [ 378.998385][T14612] netlink: 'syz.1.3959': attribute type 15 has an invalid length. [ 379.005334][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.023340][T14611] Call Trace: [ 379.026622][T14611] [ 379.029556][T14611] dump_stack_lvl+0x188/0x250 [ 379.034317][T14611] ? show_regs_print_info+0x20/0x20 [ 379.039539][T14611] ? load_image+0x400/0x400 [ 379.044059][T14611] ? __lock_acquire+0x7d10/0x7d10 [ 379.049173][T14611] should_fail+0x38c/0x4c0 [ 379.053602][T14611] _copy_from_user+0x2e/0x170 [ 379.058293][T14611] iovec_from_user+0x142/0x370 [ 379.063072][T14611] __import_iovec+0x70/0x490 [ 379.067662][T14611] import_iovec+0x6f/0xa0 [ 379.072015][T14611] ___sys_sendmsg+0x1fd/0x2e0 [ 379.076795][T14611] ? __sys_sendmsg+0x2a0/0x2a0 [ 379.081744][T14611] __se_sys_sendmsg+0x1af/0x290 [ 379.086592][T14611] ? __x64_sys_sendmsg+0x80/0x80 [ 379.091521][T14611] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 379.097519][T14611] ? lockdep_hardirqs_on+0x94/0x140 [ 379.102754][T14611] do_syscall_64+0x4c/0xa0 [ 379.107165][T14611] ? clear_bhb_loop+0x30/0x80 [ 379.111829][T14611] ? clear_bhb_loop+0x30/0x80 [ 379.116605][T14611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 379.122505][T14611] RIP: 0033:0x7f3c72615799 [ 379.127012][T14611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.146881][T14611] RSP: 002b:00007f3c7084e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.155280][T14611] RAX: ffffffffffffffda RBX: 00007f3c7288f090 RCX: 00007f3c72615799 [ 379.163234][T14611] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 379.171199][T14611] RBP: 00007f3c7084e090 R08: 0000000000000000 R09: 0000000000000000 [ 379.179159][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.187114][T14611] R13: 00007f3c7288f128 R14: 00007f3c7288f090 R15: 00007ffd3353c9a8 [ 379.195081][T14611] [ 379.218909][T14612] netlink: 'syz.1.3959': attribute type 7 has an invalid length. [ 379.652289][T14629] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3964'. [ 380.625503][T14655] FAULT_INJECTION: forcing a failure. [ 380.625503][T14655] name failslab, interval 1, probability 0, space 0, times 0 [ 380.702070][T14655] CPU: 1 PID: 14655 Comm: syz.1.3975 Not tainted syzkaller #0 [ 380.709668][T14655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.719826][T14655] Call Trace: [ 380.723120][T14655] [ 380.726056][T14655] dump_stack_lvl+0x188/0x250 [ 380.730749][T14655] ? show_regs_print_info+0x20/0x20 [ 380.736052][T14655] ? load_image+0x400/0x400 [ 380.740575][T14655] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 380.746754][T14655] should_fail+0x38c/0x4c0 [ 380.751581][T14655] should_failslab+0x5/0x20 [ 380.756104][T14655] slab_pre_alloc_hook+0x51/0xc0 [ 380.761059][T14655] kmem_cache_alloc_trace+0x47/0x2a0 [ 380.766362][T14655] ? sctp_add_bind_addr+0x89/0x350 [ 380.771590][T14655] sctp_add_bind_addr+0x89/0x350 [ 380.776556][T14655] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 380.782236][T14655] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 380.788330][T14655] ? sctp_v6_is_any+0x60/0x70 [ 380.793032][T14655] ? sctp_copy_one_addr+0x93/0x660 [ 380.798170][T14655] sctp_bind_addr_copy+0xaf/0x3c0 [ 380.803217][T14655] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 380.809572][T14655] sctp_connect_new_asoc+0x2f5/0x6a0 [ 380.814897][T14655] ? __sctp_connect+0xd80/0xd80 [ 380.819775][T14655] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 380.825344][T14655] ? security_sctp_bind_connect+0x85/0xb0 [ 380.831099][T14655] sctp_sendmsg+0x158d/0x2900 [ 380.835819][T14655] ? aa_sk_perm+0x7dc/0x910 [ 380.840341][T14655] ? sctp_getsockopt+0x8a0/0x8a0 [ 380.845299][T14655] ? aa_af_perm+0x340/0x340 [ 380.849819][T14655] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 380.856246][T14655] ? sock_rps_record_flow+0x17/0x3b0 [ 380.861554][T14655] ? inet_sendmsg+0xe5/0x2f0 [ 380.866168][T14655] ? inet_send_prepare+0x260/0x260 [ 380.871337][T14655] ____sys_sendmsg+0x5b7/0x8f0 [ 380.876156][T14655] ? __sys_sendmsg_sock+0x30/0x30 [ 380.881254][T14655] ? import_iovec+0x6f/0xa0 [ 380.885789][T14655] ___sys_sendmsg+0x236/0x2e0 [ 380.890494][T14655] ? __sys_sendmsg+0x2a0/0x2a0 [ 380.895461][T14655] ? trace_event_raw_event_lock+0x270/0x270 [ 380.901370][T14655] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 380.907402][T14655] __se_sys_sendmsg+0x1af/0x290 [ 380.912281][T14655] ? __x64_sys_sendmsg+0x80/0x80 [ 380.917343][T14655] ? __x64_sys_sendmsg+0x4/0x80 [ 380.922217][T14655] do_syscall_64+0x4c/0xa0 [ 380.926647][T14655] ? clear_bhb_loop+0x30/0x80 [ 380.931344][T14655] ? clear_bhb_loop+0x30/0x80 [ 380.936039][T14655] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 380.941951][T14655] RIP: 0033:0x7facb6373799 [ 380.946397][T14655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.966015][T14655] RSP: 002b:00007facb45cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.974458][T14655] RAX: ffffffffffffffda RBX: 00007facb65ecfa0 RCX: 00007facb6373799 [ 380.982458][T14655] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 380.990454][T14655] RBP: 00007facb45cd090 R08: 0000000000000000 R09: 0000000000000000 [ 380.998439][T14655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.006423][T14655] R13: 00007facb65ed038 R14: 00007facb65ecfa0 R15: 00007ffe62cf2148 [ 381.014435][T14655] [ 381.055264][T14663] netlink: 'syz.0.3979': attribute type 10 has an invalid length. [ 381.089805][T14664] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3978'. [ 381.112172][T14663] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3979'. [ 381.270637][T14671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3982'. [ 381.354656][T14676] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3983'. [ 381.880586][T14696] FAULT_INJECTION: forcing a failure. [ 381.880586][T14696] name failslab, interval 1, probability 0, space 0, times 0 [ 381.958885][T14696] CPU: 0 PID: 14696 Comm: syz.1.3992 Not tainted syzkaller #0 [ 381.966388][T14696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.976447][T14696] Call Trace: [ 381.979730][T14696] [ 381.982679][T14696] dump_stack_lvl+0x188/0x250 [ 381.987374][T14696] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 381.993543][T14696] ? show_regs_print_info+0x20/0x20 [ 381.998754][T14696] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 382.005026][T14696] should_fail+0x38c/0x4c0 [ 382.009472][T14696] should_failslab+0x5/0x20 [ 382.013984][T14696] slab_pre_alloc_hook+0x51/0xc0 [ 382.018929][T14696] __kmalloc_node_track_caller+0x68/0x3a0 [ 382.024654][T14696] ? pfkey_spdflush+0xda/0x3b0 [ 382.029420][T14696] ? kmem_cache_alloc_node+0x162/0x2d0 [ 382.034868][T14696] ? __alloc_skb+0xf4/0x750 [ 382.039381][T14696] ? pfkey_spdflush+0xda/0x3b0 [ 382.044245][T14696] __alloc_skb+0x22c/0x750 [ 382.048671][T14696] pfkey_spdflush+0xda/0x3b0 [ 382.053347][T14696] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 382.059504][T14696] ? pfkey_spddump+0x260/0x260 [ 382.064267][T14696] pfkey_sendmsg+0xbeb/0x1080 [ 382.068940][T14696] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 382.075083][T14696] ? pfkey_release+0x310/0x310 [ 382.079852][T14696] ? aa_sock_msg_perm+0x94/0x150 [ 382.084782][T14696] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 382.090174][T14696] ? security_socket_sendmsg+0x7c/0xa0 [ 382.095619][T14696] ? pfkey_release+0x310/0x310 [ 382.100378][T14696] ____sys_sendmsg+0x5b7/0x8f0 [ 382.105149][T14696] ? __sys_sendmsg_sock+0x30/0x30 [ 382.110171][T14696] ? import_iovec+0x6f/0xa0 [ 382.114664][T14696] ___sys_sendmsg+0x236/0x2e0 [ 382.119363][T14696] ? __sys_sendmsg+0x2a0/0x2a0 [ 382.124337][T14696] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 382.130083][T14696] __se_sys_sendmsg+0x1af/0x290 [ 382.134951][T14696] ? __x64_sys_sendmsg+0x80/0x80 [ 382.139902][T14696] ? syscall_enter_from_user_mode+0x2a/0x70 [ 382.145801][T14696] do_syscall_64+0x4c/0xa0 [ 382.150317][T14696] ? clear_bhb_loop+0x30/0x80 [ 382.154985][T14696] ? clear_bhb_loop+0x30/0x80 [ 382.159912][T14696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.165794][T14696] RIP: 0033:0x7facb6373799 [ 382.170199][T14696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.189994][T14696] RSP: 002b:00007facb45cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.198397][T14696] RAX: ffffffffffffffda RBX: 00007facb65ecfa0 RCX: 00007facb6373799 [ 382.206368][T14696] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000006 [ 382.214330][T14696] RBP: 00007facb45cd090 R08: 0000000000000000 R09: 0000000000000000 [ 382.222374][T14696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.230332][T14696] R13: 00007facb65ed038 R14: 00007facb65ecfa0 R15: 00007ffe62cf2148 [ 382.238396][T14696] [ 382.285488][T14700] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3993'. [ 382.563844][T14714] FAULT_INJECTION: forcing a failure. [ 382.563844][T14714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.864912][T14714] CPU: 1 PID: 14714 Comm: syz.1.3999 Not tainted syzkaller #0 [ 382.872424][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.882586][T14714] Call Trace: [ 382.885890][T14714] [ 382.888840][T14714] dump_stack_lvl+0x188/0x250 [ 382.893537][T14714] ? show_regs_print_info+0x20/0x20 [ 382.898749][T14714] ? load_image+0x400/0x400 [ 382.903262][T14714] ? __lock_acquire+0x7d10/0x7d10 [ 382.908306][T14714] should_fail+0x38c/0x4c0 [ 382.912750][T14714] _copy_from_user+0x2e/0x170 [ 382.917443][T14714] perf_copy_attr+0x167/0x840 [ 382.922142][T14714] __se_sys_perf_event_open+0xf5/0x1bb0 [ 382.927722][T14714] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 382.933605][T14714] ? lockdep_hardirqs_on+0x94/0x140 [ 382.938828][T14714] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 382.944482][T14714] do_syscall_64+0x4c/0xa0 [ 382.948912][T14714] ? clear_bhb_loop+0x30/0x80 [ 382.953684][T14714] ? clear_bhb_loop+0x30/0x80 [ 382.958373][T14714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.964272][T14714] RIP: 0033:0x7facb6373799 [ 382.968695][T14714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.988403][T14714] RSP: 002b:00007facb45cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 382.996839][T14714] RAX: ffffffffffffffda RBX: 00007facb65ecfa0 RCX: 00007facb6373799 [ 383.004819][T14714] RDX: 0000400000000000 RSI: ffffffffffffffff RDI: 00002000000003c0 [ 383.012800][T14714] RBP: 00007facb45cd090 R08: 0000000000000009 R09: 0000000000000000 [ 383.020773][T14714] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 383.028751][T14714] R13: 00007facb65ed038 R14: 00007facb65ecfa0 R15: 00007ffe62cf2148 [ 383.036756][T14714] [ 383.675832][T14736] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4006'. [ 384.796556][T14774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4020'. [ 384.964387][T14777] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.4019'. [ 385.033616][T14777] netlink: 'syz.1.4019': attribute type 10 has an invalid length. [ 385.795752][T14795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.296398][T14816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4033'. [ 386.376617][T14818] FAULT_INJECTION: forcing a failure. [ 386.376617][T14818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.478465][T14818] CPU: 1 PID: 14818 Comm: syz.0.4034 Not tainted syzkaller #0 [ 386.485964][T14818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.496028][T14818] Call Trace: [ 386.499310][T14818] [ 386.502244][T14818] dump_stack_lvl+0x188/0x250 [ 386.506930][T14818] ? show_regs_print_info+0x20/0x20 [ 386.512143][T14818] ? load_image+0x400/0x400 [ 386.516666][T14818] ? __lock_acquire+0x7d10/0x7d10 [ 386.521708][T14818] should_fail+0x38c/0x4c0 [ 386.526143][T14818] _copy_from_iter+0x22e/0x1170 [ 386.531019][T14818] ? __lock_acquire+0x7d10/0x7d10 [ 386.536072][T14818] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 386.541473][T14818] ? __virt_addr_valid+0x3c6/0x470 [ 386.546602][T14818] ? __phys_addr_symbol+0x2b/0x70 [ 386.551654][T14818] ? __check_object_size+0x30c/0x410 [ 386.556970][T14818] netlink_sendmsg+0x758/0xbe0 [ 386.561761][T14818] ? netlink_getsockopt+0x570/0x570 [ 386.566987][T14818] ? aa_sock_msg_perm+0x94/0x150 [ 386.571967][T14818] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 386.577281][T14818] ? security_socket_sendmsg+0x7c/0xa0 [ 386.583033][T14818] ? netlink_getsockopt+0x570/0x570 [ 386.588253][T14818] ____sys_sendmsg+0x5b7/0x8f0 [ 386.593042][T14818] ? __sys_sendmsg_sock+0x30/0x30 [ 386.598270][T14818] ? import_iovec+0x6f/0xa0 [ 386.602804][T14818] ___sys_sendmsg+0x236/0x2e0 [ 386.607521][T14818] ? __sys_sendmsg+0x2a0/0x2a0 [ 386.612321][T14818] ? trace_event_raw_event_lock+0x270/0x270 [ 386.618242][T14818] ? vfs_write+0x8b2/0xd60 [ 386.622711][T14818] __se_sys_sendmsg+0x1af/0x290 [ 386.627606][T14818] ? __x64_sys_sendmsg+0x80/0x80 [ 386.632558][T14818] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 386.638570][T14818] ? lockdep_hardirqs_on+0x94/0x140 [ 386.643796][T14818] do_syscall_64+0x4c/0xa0 [ 386.648225][T14818] ? clear_bhb_loop+0x30/0x80 [ 386.653002][T14818] ? clear_bhb_loop+0x30/0x80 [ 386.657706][T14818] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 386.663607][T14818] RIP: 0033:0x7fc6cf2e1799 [ 386.668167][T14818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.687878][T14818] RSP: 002b:00007fc6cd53b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.696306][T14818] RAX: ffffffffffffffda RBX: 00007fc6cf55afa0 RCX: 00007fc6cf2e1799 [ 386.704386][T14818] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 386.712372][T14818] RBP: 00007fc6cd53b090 R08: 0000000000000000 R09: 0000000000000000 [ 386.720447][T14818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.728436][T14818] R13: 00007fc6cf55b038 R14: 00007fc6cf55afa0 R15: 00007ffc9df95a58 [ 386.736541][T14818] [ 386.874450][T14835] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.4038'. [ 388.151529][T14867] FAULT_INJECTION: forcing a failure. [ 388.151529][T14867] name failslab, interval 1, probability 0, space 0, times 0 [ 388.232787][T14867] CPU: 0 PID: 14867 Comm: syz.1.4051 Not tainted syzkaller #0 [ 388.240331][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.250604][T14867] Call Trace: [ 388.253922][T14867] [ 388.256883][T14867] dump_stack_lvl+0x188/0x250 [ 388.261616][T14867] ? show_regs_print_info+0x20/0x20 [ 388.266872][T14867] ? load_image+0x400/0x400 [ 388.271443][T14867] ? __might_sleep+0xf0/0xf0 [ 388.276090][T14867] ? __lock_acquire+0x7d10/0x7d10 [ 388.281173][T14867] ? memset+0x1e/0x40 [ 388.285328][T14867] should_fail+0x38c/0x4c0 [ 388.289834][T14867] should_failslab+0x5/0x20 [ 388.294382][T14867] slab_pre_alloc_hook+0x51/0xc0 [ 388.299463][T14867] ? security_inode_alloc+0x30/0x110 [ 388.304984][T14867] kmem_cache_alloc+0x3d/0x290 [ 388.309831][T14867] security_inode_alloc+0x30/0x110 [ 388.315022][T14867] inode_init_always+0x8f4/0xcb0 [ 388.320043][T14867] new_inode_pseudo+0x8e/0x210 [ 388.324871][T14867] __sock_create+0x129/0x900 [ 388.329505][T14867] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 388.335704][T14867] __sys_socket+0xe2/0x170 [ 388.340210][T14867] __x64_sys_socket+0x76/0x80 [ 388.345000][T14867] do_syscall_64+0x4c/0xa0 [ 388.349473][T14867] ? clear_bhb_loop+0x30/0x80 [ 388.354198][T14867] ? clear_bhb_loop+0x30/0x80 [ 388.358952][T14867] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 388.364888][T14867] RIP: 0033:0x7facb6373799 [ 388.369347][T14867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.388992][T14867] RSP: 002b:00007facb45cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 388.397460][T14867] RAX: ffffffffffffffda RBX: 00007facb65ecfa0 RCX: 00007facb6373799 [ 388.405481][T14867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000029 [ 388.413501][T14867] RBP: 00007facb45cd090 R08: 0000000000000000 R09: 0000000000000000 [ 388.421524][T14867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.429536][T14867] R13: 00007facb65ed038 R14: 00007facb65ecfa0 R15: 00007ffe62cf2148 [ 388.437626][T14867] [ 388.493668][T14867] socket: no more sockets [ 388.587853][T14876] device syzkaller0 entered promiscuous mode [ 388.604772][T14876] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 389.214948][T14893] FAULT_INJECTION: forcing a failure. [ 389.214948][T14893] name failslab, interval 1, probability 0, space 0, times 0 [ 389.271534][T14893] CPU: 0 PID: 14893 Comm: syz.1.4061 Not tainted syzkaller #0 [ 389.279047][T14893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.289220][T14893] Call Trace: [ 389.292599][T14893] [ 389.295538][T14893] dump_stack_lvl+0x188/0x250 [ 389.300240][T14893] ? show_regs_print_info+0x20/0x20 [ 389.305456][T14893] ? load_image+0x400/0x400 [ 389.310063][T14893] ? __might_sleep+0xf0/0xf0 [ 389.314650][T14893] ? __lock_acquire+0x7d10/0x7d10 [ 389.319666][T14893] ? netlink_insert+0xe95/0x11f0 [ 389.324685][T14893] should_fail+0x38c/0x4c0 [ 389.329100][T14893] should_failslab+0x5/0x20 [ 389.333590][T14893] slab_pre_alloc_hook+0x51/0xc0 [ 389.338516][T14893] kmem_cache_alloc_node+0x47/0x2d0 [ 389.343793][T14893] ? __alloc_skb+0xf4/0x750 [ 389.348297][T14893] __alloc_skb+0xf4/0x750 [ 389.352733][T14893] netlink_sendmsg+0x654/0xbe0 [ 389.357606][T14893] ? netlink_getsockopt+0x570/0x570 [ 389.362927][T14893] ? aa_sock_msg_perm+0x94/0x150 [ 389.367970][T14893] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 389.373267][T14893] ? security_socket_sendmsg+0x7c/0xa0 [ 389.378867][T14893] ? netlink_getsockopt+0x570/0x570 [ 389.384154][T14893] ____sys_sendmsg+0x5b7/0x8f0 [ 389.388927][T14893] ? __sys_sendmsg_sock+0x30/0x30 [ 389.393962][T14893] ? import_iovec+0x6f/0xa0 [ 389.398464][T14893] ___sys_sendmsg+0x236/0x2e0 [ 389.403147][T14893] ? __sys_sendmsg+0x2a0/0x2a0 [ 389.407911][T14893] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 389.413646][T14893] __se_sys_sendmsg+0x1af/0x290 [ 389.418487][T14893] ? __x64_sys_sendmsg+0x80/0x80 [ 389.423434][T14893] ? syscall_enter_from_user_mode+0x2a/0x70 [ 389.429323][T14893] do_syscall_64+0x4c/0xa0 [ 389.433722][T14893] ? clear_bhb_loop+0x30/0x80 [ 389.438402][T14893] ? clear_bhb_loop+0x30/0x80 [ 389.443067][T14893] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 389.448947][T14893] RIP: 0033:0x7facb6373799 [ 389.453351][T14893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.472949][T14893] RSP: 002b:00007facb45cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.481364][T14893] RAX: ffffffffffffffda RBX: 00007facb65ecfa0 RCX: 00007facb6373799 [ 389.489349][T14893] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 389.497740][T14893] RBP: 00007facb45cd090 R08: 0000000000000000 R09: 0000000000000000 [ 389.505804][T14893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.513776][T14893] R13: 00007facb65ed038 R14: 00007facb65ecfa0 R15: 00007ffe62cf2148 [ 389.521761][T14893] [ 390.686353][T14938] netlink: 'syz.0.4081': attribute type 12 has an invalid length. [ 390.705509][T14938] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4081'. [ 391.677952][T14964] netlink: 60759 bytes leftover after parsing attributes in process `syz.2.4091'. [ 392.187107][T14985] netlink: 'syz.3.4100': attribute type 12 has an invalid length. [ 392.222309][T14985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4100'. [ 393.721799][T15012] netlink: 'syz.4.4112': attribute type 3 has an invalid length. [ 393.776225][T15012] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4112'. [ 393.843608][T15019] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4115'. [ 393.874591][T15016] IPv6: Can't replace route, no match found [ 394.050458][ T4200] ================================================================== [ 394.058905][ T4200] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 394.066878][ T4200] Read of size 1 at addr ffff88805f41ee04 by task kworker/u5:7/4200 [ 394.074869][ T4200] [ 394.077200][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 394.084760][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.094849][ T4200] Workqueue: hci5 hci_rx_work [ 394.099551][ T4200] Call Trace: [ 394.102854][ T4200] [ 394.105795][ T4200] dump_stack_lvl+0x188/0x250 [ 394.110490][ T4200] ? show_regs_print_info+0x20/0x20 [ 394.115707][ T4200] ? load_image+0x400/0x400 [ 394.120220][ T4200] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 394.125689][ T4200] ? mutex_lock_io_nested+0x60/0x60 [ 394.130908][ T4200] print_address_description+0x60/0x2d0 [ 394.136444][ T4200] ? hci_le_meta_evt+0x133f/0x3c90 [ 394.141628][ T4200] kasan_report+0xdf/0x130 [ 394.146032][ T4200] ? hci_le_meta_evt+0x133f/0x3c90 [ 394.151133][ T4200] hci_le_meta_evt+0x133f/0x3c90 [ 394.156066][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 394.162121][ T4200] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 394.167746][ T4200] ? mark_lock+0x94/0x320 [ 394.172058][ T4200] ? mutex_unlock+0x10/0x10 [ 394.176544][ T4200] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 394.182688][ T4200] ? lock_chain_count+0x20/0x20 [ 394.187527][ T4200] ? __rwlock_init+0x140/0x140 [ 394.192282][ T4200] hci_event_packet+0xe48/0x1370 [ 394.197255][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 394.202465][ T4200] ? rcu_lock_release+0x20/0x20 [ 394.207312][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 394.212507][ T4200] hci_rx_work+0x255/0xa10 [ 394.217012][ T4200] process_one_work+0x85f/0x1010 [ 394.221984][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 394.227614][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 394.232937][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 394.237976][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 394.243514][ T4200] ? wq_worker_running+0x97/0x170 [ 394.248531][ T4200] worker_thread+0xaa6/0x1290 [ 394.253309][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 394.258498][ T4200] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 394.264389][ T4200] kthread+0x436/0x520 [ 394.268455][ T4200] ? rcu_lock_release+0x20/0x20 [ 394.273557][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 394.278133][ T4200] ret_from_fork+0x1f/0x30 [ 394.282575][ T4200] [ 394.285587][ T4200] [ 394.287990][ T4200] Allocated by task 15024: [ 394.292385][ T4200] __kasan_kmalloc+0xb5/0xf0 [ 394.297061][ T4200] __alloc_skb+0x22c/0x750 [ 394.301474][ T4200] vhci_write+0xbc/0x450 [ 394.305704][ T4200] vfs_write+0x745/0xd60 [ 394.309947][ T4200] ksys_write+0x152/0x260 [ 394.314281][ T4200] do_syscall_64+0x4c/0xa0 [ 394.318702][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.325102][ T4200] [ 394.327674][ T4200] Last potentially related work creation: [ 394.333366][ T4200] kasan_save_stack+0x35/0x60 [ 394.338034][ T4200] kasan_record_aux_stack+0xb8/0x100 [ 394.343307][ T4200] call_rcu+0x189/0x950 [ 394.347452][ T4200] ip6_route_info_create+0x9c5/0x1210 [ 394.352810][ T4200] ip6_route_add+0x24/0x130 [ 394.357298][ T4200] addrconf_add_dev+0x295/0x3c0 [ 394.362130][ T4200] inet6_addr_add+0x18d/0x9c0 [ 394.366790][ T4200] inet6_rtm_newaddr+0x64c/0x8f0 [ 394.371713][ T4200] rtnetlink_rcv_msg+0x844/0xf30 [ 394.376657][ T4200] netlink_rcv_skb+0x1f5/0x440 [ 394.381416][ T4200] netlink_unicast+0x774/0x920 [ 394.386160][ T4200] netlink_sendmsg+0x8ba/0xbe0 [ 394.390905][ T4200] __sys_sendto+0x46d/0x620 [ 394.395391][ T4200] __x64_sys_sendto+0xda/0xf0 [ 394.400052][ T4200] do_syscall_64+0x4c/0xa0 [ 394.404452][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.410333][ T4200] [ 394.412736][ T4200] Second to last potentially related work creation: [ 394.419451][ T4200] kasan_save_stack+0x35/0x60 [ 394.424128][ T4200] kasan_record_aux_stack+0xb8/0x100 [ 394.429402][ T4200] call_rcu+0x189/0x950 [ 394.433540][ T4200] perf_event_exit_task+0x763/0x960 [ 394.438721][ T4200] do_exit+0x5a4/0x20c0 [ 394.442944][ T4200] do_group_exit+0x12e/0x300 [ 394.447527][ T4200] get_signal+0x6ca/0x12c0 [ 394.452014][ T4200] arch_do_signal_or_restart+0xe7/0x12c0 [ 394.457638][ T4200] exit_to_user_mode_loop+0x9e/0x130 [ 394.462902][ T4200] exit_to_user_mode_prepare+0xee/0x180 [ 394.468428][ T4200] syscall_exit_to_user_mode+0x16/0x40 [ 394.473878][ T4200] do_syscall_64+0x58/0xa0 [ 394.478303][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.484202][ T4200] [ 394.486513][ T4200] The buggy address belongs to the object at ffff88805f41ec00 [ 394.486513][ T4200] which belongs to the cache kmalloc-512 of size 512 [ 394.500735][ T4200] The buggy address is located 4 bytes to the right of [ 394.500735][ T4200] 512-byte region [ffff88805f41ec00, ffff88805f41ee00) [ 394.514459][ T4200] The buggy address belongs to the page: [ 394.520129][ T4200] page:ffffea00017d0700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f41c [ 394.530388][ T4200] head:ffffea00017d0700 order:2 compound_mapcount:0 compound_pincount:0 [ 394.538818][ T4200] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 394.547030][ T4200] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41c80 [ 394.555615][ T4200] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 394.564234][ T4200] page dumped because: kasan: bad access detected [ 394.570641][ T4200] page_owner tracks the page as allocated [ 394.576338][ T4200] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4184, ts 53928698881, free_ts 53926722814 [ 394.595690][ T4200] get_page_from_freelist+0x1bbd/0x1ca0 [ 394.601402][ T4200] __alloc_pages+0x1ee/0x480 [ 394.605975][ T4200] new_slab+0xc0/0x4b0 [ 394.610026][ T4200] ___slab_alloc+0x80a/0xdd0 [ 394.614625][ T4200] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 394.620414][ T4200] __alloc_skb+0x22c/0x750 [ 394.624827][ T4200] netlink_ack+0x372/0xb50 [ 394.629321][ T4200] netlink_rcv_skb+0x27a/0x440 [ 394.634069][ T4200] netlink_unicast+0x774/0x920 [ 394.638846][ T4200] netlink_sendmsg+0x8ba/0xbe0 [ 394.643591][ T4200] __sys_sendto+0x46d/0x620 [ 394.648084][ T4200] __x64_sys_sendto+0xda/0xf0 [ 394.652742][ T4200] do_syscall_64+0x4c/0xa0 [ 394.657151][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.663050][ T4200] page last free stack trace: [ 394.667706][ T4200] free_unref_page_prepare+0x637/0x6c0 [ 394.673153][ T4200] free_unref_page+0x8f/0x2a0 [ 394.677817][ T4200] stack_depot_save+0x418/0x440 [ 394.682673][ T4200] kasan_save_stack+0x4b/0x60 [ 394.687332][ T4200] kasan_record_aux_stack+0xb8/0x100 [ 394.692604][ T4200] call_rcu+0x189/0x950 [ 394.696753][ T4200] __dev_queue_xmit+0x718/0x2f80 [ 394.701692][ T4200] br_dev_queue_push_xmit+0x692/0x850 [ 394.707063][ T4200] NF_HOOK+0x2f9/0x380 [ 394.711224][ T4200] br_forward_finish+0x74/0x80 [ 394.715989][ T4200] NF_HOOK+0x2f9/0x380 [ 394.720043][ T4200] __br_forward+0x433/0x610 [ 394.724537][ T4200] br_dev_xmit+0xf2c/0x14b0 [ 394.729021][ T4200] dev_hard_start_xmit+0x2a5/0x7e0 [ 394.734116][ T4200] __dev_queue_xmit+0x1a9b/0x2f80 [ 394.739123][ T4200] ip6_finish_output2+0x1051/0x1510 [ 394.744312][ T4200] [ 394.746619][ T4200] Memory state around the buggy address: [ 394.752406][ T4200] ffff88805f41ed00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.760536][ T4200] ffff88805f41ed80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.768580][ T4200] >ffff88805f41ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 394.776627][ T4200] ^ [ 394.780675][ T4200] ffff88805f41ee80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 394.788722][ T4200] ffff88805f41ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 394.796771][ T4200] ================================================================== [ 394.804820][ T4200] Disabling lock debugging due to kernel taint [ 394.813474][ T4200] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 394.820747][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 394.829678][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.839721][ T4200] Workqueue: hci5 hci_rx_work [ 394.844400][ T4200] Call Trace: [ 394.847672][ T4200] [ 394.850595][ T4200] dump_stack_lvl+0x188/0x250 [ 394.855267][ T4200] ? show_regs_print_info+0x20/0x20 [ 394.860455][ T4200] ? load_image+0x400/0x400 [ 394.865065][ T4200] panic+0x2e5/0x810 [ 394.868968][ T4200] ? bpf_jit_dump+0xd0/0xd0 [ 394.873498][ T4200] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 394.879479][ T4200] ? _raw_spin_unlock+0x40/0x40 [ 394.884530][ T4200] ? hci_le_meta_evt+0x133f/0x3c90 [ 394.889632][ T4200] check_panic_on_warn+0x80/0xa0 [ 394.894555][ T4200] ? hci_le_meta_evt+0x133f/0x3c90 [ 394.899684][ T4200] end_report+0x6d/0xf0 [ 394.903854][ T4200] kasan_report+0x102/0x130 [ 394.908337][ T4200] ? hci_le_meta_evt+0x133f/0x3c90 [ 394.913438][ T4200] hci_le_meta_evt+0x133f/0x3c90 [ 394.918491][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 394.924732][ T4200] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 394.930452][ T4200] ? mark_lock+0x94/0x320 [ 394.934782][ T4200] ? mutex_unlock+0x10/0x10 [ 394.939354][ T4200] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 394.945323][ T4200] ? lock_chain_count+0x20/0x20 [ 394.950432][ T4200] ? __rwlock_init+0x140/0x140 [ 394.955205][ T4200] hci_event_packet+0xe48/0x1370 [ 394.960134][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 394.965320][ T4200] ? rcu_lock_release+0x20/0x20 [ 394.970251][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 394.975559][ T4200] hci_rx_work+0x255/0xa10 [ 394.979978][ T4200] process_one_work+0x85f/0x1010 [ 394.984925][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 394.990551][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 394.995827][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 395.000841][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 395.006454][ T4200] ? wq_worker_running+0x97/0x170 [ 395.011551][ T4200] worker_thread+0xaa6/0x1290 [ 395.016225][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 395.021410][ T4200] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 395.027289][ T4200] kthread+0x436/0x520 [ 395.031340][ T4200] ? rcu_lock_release+0x20/0x20 [ 395.036269][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 395.041075][ T4200] ret_from_fork+0x1f/0x30 [ 395.045495][ T4200] [ 395.048813][ T4200] Kernel Offset: disabled [ 395.053130][ T4200] Rebooting in 86400 seconds..