last executing test programs: 7.884690692s ago: executing program 1 (id=7071): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000cc0)="2701000001f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4131accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003f21880b", 0x44}, {&(0x7f0000000200)="68af78cb67", 0x5}], 0x2}, 0x811) 7.719284667s ago: executing program 1 (id=7073): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{}], 0x1}, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xddf) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1, 0x0, 0x0, 0x300}, 0x80d1) (fail_nth: 7) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 7.128098745s ago: executing program 1 (id=7078): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, 0x0, 0xfdef) recvmsg(0xffffffffffffffff, 0x0, 0x10182) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600032fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 6.735980038s ago: executing program 1 (id=7081): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x2}, 0x8000, 0x5, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000814) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) close(r1) r2 = socket$kcm(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10140) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8902, &(0x7f00000005c0)={r4}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004085) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r6 = socket$kcm(0xa, 0x3, 0x73) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000108"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r7, @ANYRES8=r7], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10}, {0x18, 0x117, 0xb, '\x00'}], 0x28}, 0x0) 6.502887725s ago: executing program 1 (id=7083): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e7002f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.975533952s ago: executing program 1 (id=7084): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=r0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg(r1, &(0x7f0000000340)={&(0x7f00000001c0)=@can={0x1d, r2}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[{0xb8, 0x10c, 0x8, "1b23c83bc12e95484950469271831cc954dfc4b048011623aa4bb9f0295e66f3c0c328483e67aefac4f059fa1d1453ace50a1bcfa54ab51f22b5a6b8859ec6d49ab4e3b931335d4c0fc0ffc8cdd2c5b34be0397dbd4fdc5d022af7d6e9c6497f9e318e9ab2d0ef4dd2c7004ce30e5227bdeb04fe006677a7a5f519739721d6a6de39ff0200d4824f11f36122497952436b84fda8f22880773b16396c79a31bdf0f"}], 0xb8}, 0x20000000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@generic={0x6, 0x6, 0xa, 0xd, 0x8}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', r2, 0x1c, r1, 0x8, &(0x7f0000000400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x9, 0x1, 0x5ff90e32}, 0x10, 0x6def, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r3, 0x35, 0x1, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = syz_clone(0x80912200, &(0x7f0000000740)="acf80187fa1b6425ec6d9fe4327bb6579c072f3c528b1a225998da5e6a74f292978624bdfb4f3852bf0618720b964b62f88d595d6f761d97bf6c27e0cc86a0c1ea03c8dff1d123729210a959f558deb56c7eef400c96580282d1d78813b1e9ced61623aec7b887824da9683e117ce4556d3fdb58e18d925ba46955a0dc5a9b68181c5c72ea5405a0bcfc048339e8f245c9203b56162c52c623cc396ded9a810a3411cefddfcc6d64e63969785176c290e66826e154bda57a91c84b1cac5a0bab94d40b92c69e47d3488b4c5ce6bc73ba13c01dce3c1f9fbd6547b50db87cd0f416982ae1f5e5fdeb23be80638c357bfff08b", 0xf2, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="2defae6e37edcc6e98a7f239e70b0883bf") r6 = perf_event_open(&(0x7f00000006c0)={0x4, 0x80, 0x80, 0x8, 0xf8, 0x0, 0x0, 0x3, 0x21348, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f0000000680), 0x8}, 0x10001, 0x3, 0x4, 0x9, 0x0, 0x7, 0xa6a, 0x0, 0x7fffffff, 0x0, 0x5a}, r5, 0x1, r4, 0x9) write$cgroup_pid(r1, &(0x7f0000000900)=r5, 0x12) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', 0x0, 0xede44e0060c8b9be}, 0x18) sendmsg$inet(r1, &(0x7f0000001e80)={&(0x7f00000009c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000000a00)="50b7f1d9e067c82b94550fd14a9720a3adf28ff2cd8b7e12385d3742500b3696697637211e1f79e6b2a2fc8813fe7980b6712e6afbb9ec510aac2e6f31daba57cebfbfdad1b559082fc5c762bd954e92d8f59df9bbe1bef70a1c15017ffd3169a47668494195a387e464a42de209b1d6c2b3cfa907c641fc1a000d109fd6b63e3729409f44cd35547e93a16537ec06af9ecce7fe8fe485aa9af9bcd193a67517ffa059766669a8d651323d51c74ffb2c042a937f", 0xb4}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="c11d19d83fa2a1ecf6db6f47200b6fc76ca812e8f5b441784dd06efc5fae8f17d04ae4afb1574dac7f7b0146f5a3328e054c70457a57f822c23a824555d6a6ddf766166ff3aba8c3ed152d026f8de72d5e359e", 0x53}, {&(0x7f0000001b80)="6cbd42fec3e7f7a06e360d715fbd38ca566a31474f9a955d84ae318e2a9c03bc277aadfdb556e7863b1bf966ae16d0213e38ffe87110c69033ef26b97fc9fbd68b7ca64d2fe2f8879605b7bd582bba15b8181fd8687c185aaca527f9b684a5157b838dcbfa28cf112b76ac6ef2ff6c4744bced37fab440ec0f8ea3734b72757432fc6bfa9c08f20e397b4b507e9e69047bee9143087a875ac826483130e0ca74f36c6379962e3400c0b1775da173a4a0182651e47f798b3aa26ea97fa9a240d26a61a3abd0097e51ea101036ffd1bc9212842ac18ff3e0442fbe6471f876b53233772effd15351ab8b68b715613800fce8435a66a1fdda2a", 0xf8}, {&(0x7f0000001c80)="a784ea26e1b81f8eb7dc29353bafb12019f89efeb4a3b49060ee216b1ee325a83a067586e0f3d4853a6aef8daa343e113e86dbdc71b729083950d630e50a03ef1714feb8c8715e1b39e66f7916da822523ac71cb515f4e85e3339c93f125beef63ec35bfab525877c877a78481dffca1b090050ad880a0dc9044b5f3483f6837cdf4ca52af5e0a095f9c83d14ae2ea66410e2ddacd18ba2a842dba325166d9d63f163360d7d198a0be0d8fb68d97c7793e8c7d8e2ef507e3cbb7cd5b27ecbd64bc3b7208f6f8068e57e5c49cc4b422a7bb699a8200736ffeac4e60eb8a21772bb8aae93ebe45b720fe160b2ef71864ae3d2498e971efe141", 0xf8}, {&(0x7f0000001d80)="6bc5b35d7d07c96ccc46fc432b8a1c2ddc3e7d14cf1280c48dc8cdaefafdfefd34a4031b593202ee523f2df085ff5c4ecffb36b370", 0x35}], 0x7, &(0x7f0000001e40)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x1c, 0x1, 0x7, [{@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9c}, {@private=0xa010102, 0xcfd0}, {@multicast1, 0x100}, {@broadcast}]}]}}}], 0x40}, 0x4000000) openat$cgroup_procs(r1, &(0x7f0000001ec0)='tasks\x00', 0x2, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000001f00)) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000001f40)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002100)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x111, 0x111, 0x8, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0xa}, @struct={0x4, 0x2, 0x0, 0x4, 0x0, 0x12000, [{0xb, 0x2, 0x8}, {0xf, 0x5, 0x7}]}, @enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0x8, [{0x9, 0x6eae, 0x10}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}, @restrict={0x8, 0x0, 0x0, 0xb, 0x1}, @enum={0xf, 0x8, 0x0, 0x6, 0x4, [{0xd, 0x800}, {0xb, 0x5}, {0x1, 0x7}, {0xf, 0x4}, {0xa, 0x6}, {0xb, 0x5}, {0xd, 0x800}, {0x9, 0x239}]}, @datasec={0x9, 0x6, 0x0, 0xf, 0x1, [{0x2}, {0x5, 0x3, 0x5}, {0x3, 0x400, 0xfffff001}, {0x3, 0x5, 0x6}, {0x4, 0x2, 0x100}, {0x4, 0x2, 0xfff}], 'd'}, @float={0xb, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x61, 0x61, 0x6f, 0x30, 0x0, 0x61]}}, &(0x7f00000020c0)=""/59, 0x134, 0x3b, 0x0, 0x81, 0x10000, @value=r4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@base={0x15, 0x10000, 0xbc00, 0x7, 0x284, 0x1, 0x0, '\x00', r2, r7, 0x2, 0x2, 0x2}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000021c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r4, 0xffff, '\x00', r2, r1, 0x4, 0x1, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002500)={r0, 0xe0, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x63, &(0x7f0000002300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002340), &(0x7f0000002380), 0x8, 0x9d, 0x8, 0x8, &(0x7f00000023c0)}}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002540)=@bloom_filter={0x1e, 0xfffffff7, 0x5, 0x88, 0x840, r8, 0x1ff, '\x00', r9, r7, 0x2, 0x1, 0x3, 0xa}, 0x50) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000025c0)) write$cgroup_int(r4, &(0x7f0000002600)=0x4, 0x12) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003800)={&(0x7f0000002640)="ae582a2cdd1ae40baded11172afc49e4eb715bb9a837891454164888a8a2a0e7736c8d440d23229eb50e6a09c88af679098724c68ab479c3d50039327417704029c2414168ab068fd6", &(0x7f00000026c0)=""/4096, &(0x7f00000036c0)="305e02605e9acd34fa6aa32dd1243553b0f66427d52f03928fa4b5e2770ddc67198a4b5de64d691abc7d7116eb893c68d9fcf050783120c5009283d7e9ac1ca3a1550faeaf4a500bff06b159ead02c56f6eb6b5734ee945f1e11b6839956a7e5baaa56dec84512710f9a0c5dac741706df90e53787d679a5b2cfc79b53f242014c06b075553b4db443aa33e17cdbd91a01210b565701cff8d2d8b02bd05f1940c9fb8a01f749e600675a555cc8b9cc8e3a47b9cd6aa764c8b9d72f27ba6c5fdbedc542bf654f1c852cba9f60e5d9fc0f24e185641a9f8ecb9f03285ee4e2808d2ee48c28ef91e0520ae87334aa2c9420b885738b26ddf81aacbf159b", &(0x7f00000037c0)="c0d580bae0516f83a1bb58ad46ded4e6b7f42fbb44a9", 0x4, r11}, 0x38) openat$cgroup_type(r1, &(0x7f0000003840), 0x2, 0x0) r12 = perf_event_open(&(0x7f0000003880)={0x4, 0x80, 0xfa, 0xa, 0x4, 0x1, 0x0, 0x3, 0x882, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0x7, 0x8}, 0x100000, 0x8001, 0x765, 0x3, 0x200, 0x62a, 0x30, 0x0, 0xd, 0x0, 0x6}, r5, 0x2, r6, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003980)={{r11, 0xffffffffffffffff}, &(0x7f0000003900), &(0x7f0000003940)=r4}, 0x20) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000003b80)={0x20, 0x5, &(0x7f00000039c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}]}, &(0x7f0000003a00)='GPL\x00', 0xfff, 0x3, &(0x7f0000003a40)=""/3, 0x40f00, 0x3, '\x00', r9, @netfilter, r4, 0x8, &(0x7f0000003a80)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000003ac0)={0x2, 0xb, 0x1ff, 0x6cf}, 0x10, r10, r4, 0x3, &(0x7f0000003b00)=[r4, r8, r8, r1, r13, r4], &(0x7f0000003b40)=[{0x0, 0x5, 0x7, 0x7}, {0x2, 0x5, 0x8, 0x6}, {0x5, 0x4, 0x9, 0x11}], 0x10, 0x10001}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000003c40)=r4, 0x4) 3.752045681s ago: executing program 0 (id=7099): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000cdaf1d001d000000000000000785fc00000000fafffd00000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r3, 0x29, 0x43, 0x0, 0x0) close(r2) ioctl$TUNGETVNETLE(r2, 0x40107447, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x107, 0x13, &(0x7f0000000800)=r0, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117600000000008510000002000000c50000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.452432021s ago: executing program 0 (id=7100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES32, @ANYRESDEC], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x10101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5411, &(0x7f00000000c0)) r4 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x200000}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000001000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="3a000000000000001001000001000000dc00000081ea45bb82105fa3ba58a0ec0d5b00000000"], 0x18}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r8, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000680)=@framed={{}, [@map_fd={0x18, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r11, 0x0, 0x40002040) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000040)="cfdf855b2342d1be075aab45c93b3cb44b3cbdccacfa87ee154fb36c87cbe99e20ca4d3dabad995624df302041221902028ccfc5f5f11869a8e6dae0e4dc1d6ade8b9e", 0x43}, {&(0x7f00000000c0)="574acadc3405b12b9237dae3fcf0b8e66be6bbf494473caa68abf51ed4c0dbb7302e4daedc7a77e799", 0x29}, {&(0x7f0000000200)="b9d74e80efa2f775033819a5defb65a7e44ee2b508dd60aeef40a1fdc3ed67bf42d725349bc85f1adf0c6625c40b07067239537458d7e58d1b502f35e62262cbef18dcdd01db992454d1c3300ddb85619912500f2945728682dc2e34580a6f15f67c487c434fc40656b99c3b1892bf1745b107", 0x73}, {&(0x7f0000000300)="6fa6e3440b55e4c0a86f9c544a5ec8b87ae401272f6b7e212a1eac1ec64db67d6f8b62fc6bbd006bbcf1f10eb2710bb629132a0611d88d2081d50a288093b7c348882c8878871c0eb9ddd4adbbc75b1e903fe5473faf581e0d424df29828d783a1197ac04e004d10f371a8d0d5036f53256e8ccce7ff02bb2e941e6f72fa4ca13ed0d6e810ed3d20ea6971beaf200503e5922e72", 0x94}, {&(0x7f00000003c0)="ce9489efee5d01d089366efbc456861b9b8abb8f70703356e119bdbb4edc89", 0x1f}, {&(0x7f0000000540)="9fcc2514e1c48d57d296a5d642e8716ba5968f503ae8c193684a8d70a0f27984f79f8797f369063f00d3606903b300e76a6a531c933a5ba5f7dd7106a39e9431e09f52fdcb1cda4104cbdb7ccc12bea5785b9e5c9ab73fd939e11ff8", 0x5c}, {&(0x7f00000006c0)="06e741f29873cc79738b3f146ac74ca6e709104a274cd2a93be2dfce9ad577ad80f80f9d0c860f3ae4104cb8f37df8b19208e8fd48c6428febd965a4e2e6b8510ab46699914c0957abb2dceec82961eafb3108aef56a8668476a8606efb04657deedb321d9de14403f7a2fa3621f2fb8372b8b2035ec5a6a1d374f2b08f792cdb8387572a4ed9f6248e96b2ab558cc8ef6b7fcf9d0885d919e716f6a556087c005e2b80abc2515557cfa86f21ed1f3532b7880b9b3ac3387a60eab8ac3413283912a65ebe204956b0876", 0xca}, {&(0x7f00000007c0)="92ac3ebf14a41214889cc60e9e5c2f37d368f319b97156f84b8b07c0cbd863473f61156cd16145a3f7d94fa5097e82a387b5462543556d28bc1339cabb0496f1c40e684722f186665dccbd59d4e12dca24f694f7a2d616bed456db96719dc630045326f3e234c8447c5c376e94bc5c7d193fa8d6c82c1c1990507720efb727a617406f16ddee6642475e72d1f9e41826d2a9a2950d3efe4cc11b7a7e37bce3a08c3313818f132d5874c8e6e2d744807b06a4ba063ebaea469584220db24cebe9710815409848f82baa78485af60ed6e9e5441363bfc36dd723180850a616", 0xde}], 0x8, &(0x7f0000000a40)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private=0xa010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x70}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000100000d0000000000000000000009000000000000000003000074d0ec0000020000000300000000000000000000000100000d00"/93], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x20) close(r1) 3.345063374s ago: executing program 3 (id=7101): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.047680224s ago: executing program 3 (id=7103): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000080), 0x1f, &(0x7f0000000440)=[{&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f0000000240)=""/186, 0xba}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000380)=""/61, 0x3d}], 0x39, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x20021) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000000)=r3, 0x8) 2.999789465s ago: executing program 0 (id=7104): mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0x408) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~-0\t||') 2.906087318s ago: executing program 3 (id=7105): socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a0"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x6, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.814674631s ago: executing program 0 (id=7107): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000180)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000001c0)='y', 0x1}], 0x1}, 0x20004050) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000014006b03000000d86e6c1d00028409fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6aee6d700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x3fff8002}, 0x5025, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x80) recvmsg(r5, 0x0, 0x40012022) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182100", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b67d25a806f8c6394f96724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc9f}, 0x40002000) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@datasec={0x1, 0x0, 0x0, 0xf, 0x3, [], "1711eb"}, @datasec={0x3, 0x0, 0x0, 0xf, 0x1, [], "ea"}]}, {0x0, [0x61, 0x3e]}}, 0x0, 0x38, 0x0, 0x1, 0x8}, 0x28) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 2.406510874s ago: executing program 2 (id=7108): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @empty, 0x12000000}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 2.383056704s ago: executing program 3 (id=7109): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000180)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000001c0)='y', 0x1}], 0x1}, 0x20004050) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000014006b03000000d86e6c1d00028409fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6aee6d700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x3fff8002}, 0x5025, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x80) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc9f}, 0x40002000) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@datasec={0x1, 0x0, 0x0, 0xf, 0x3, [], "1711eb"}, @datasec={0x3, 0x0, 0x0, 0xf, 0x1, [], "ea"}]}, {0x0, [0x61, 0x3e]}}, 0x0, 0x38, 0x0, 0x1, 0x8}, 0x28) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 2.252010329s ago: executing program 2 (id=7110): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.19974546s ago: executing program 2 (id=7111): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES32, @ANYRESDEC], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x10101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5411, &(0x7f00000000c0)) r4 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x200000}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000001000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="3a000000000000001001000001000000dc00000081ea45bb82105fa3ba58a0ec0d5b00000000"], 0x18}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r8, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000680)=@framed={{}, [@map_fd={0x18, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r11, 0x0, 0x40002040) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000040)="cfdf855b2342d1be075aab45c93b3cb44b3cbdccacfa87ee154fb36c87cbe99e20ca4d3dabad995624df302041221902028ccfc5f5f11869a8e6dae0e4dc1d6ade8b9e", 0x43}, {&(0x7f00000000c0)="574acadc3405b12b9237dae3fcf0b8e66be6bbf494473caa68abf51ed4c0dbb7302e4daedc7a77e799", 0x29}, {&(0x7f0000000200)="b9d74e80efa2f775033819a5defb65a7e44ee2b508dd60aeef40a1fdc3ed67bf42d725349bc85f1adf0c6625c40b07067239537458d7e58d1b502f35e62262cbef18dcdd01db992454d1c3300ddb85619912500f2945728682dc2e34580a6f15f67c487c434fc40656b99c3b1892bf1745b107", 0x73}, {&(0x7f0000000300)="6fa6e3440b55e4c0a86f9c544a5ec8b87ae401272f6b7e212a1eac1ec64db67d6f8b62fc6bbd006bbcf1f10eb2710bb629132a0611d88d2081d50a288093b7c348882c8878871c0eb9ddd4adbbc75b1e903fe5473faf581e0d424df29828d783a1197ac04e004d10f371a8d0d5036f53256e8ccce7ff02bb2e941e6f72fa4ca13ed0d6e810ed3d20ea6971beaf200503e5922e72", 0x94}, {&(0x7f00000003c0)="ce9489efee5d01d089366efbc456861b9b8abb8f70703356e119bdbb4edc89", 0x1f}, {&(0x7f0000000540)="9fcc2514e1c48d57d296a5d642e8716ba5968f503ae8c193684a8d70a0f27984f79f8797f369063f00d3606903b300e76a6a531c933a5ba5f7dd7106a39e9431e09f52fdcb1cda4104cbdb7ccc12bea5785b9e5c9ab73fd939e11ff8", 0x5c}, {&(0x7f00000006c0)="06e741f29873cc79738b3f146ac74ca6e709104a274cd2a93be2dfce9ad577ad80f80f9d0c860f3ae4104cb8f37df8b19208e8fd48c6428febd965a4e2e6b8510ab46699914c0957abb2dceec82961eafb3108aef56a8668476a8606efb04657deedb321d9de14403f7a2fa3621f2fb8372b8b2035ec5a6a1d374f2b08f792cdb8387572a4ed9f6248e96b2ab558cc8ef6b7fcf9d0885d919e716f6a556087c005e2b80abc2515557cfa86f21ed1f3532b7880b9b3ac3387a60eab8ac3413283912a65ebe204956b0876", 0xca}, {&(0x7f00000007c0)="92ac3ebf14a41214889cc60e9e5c2f37d368f319b97156f84b8b07c0cbd863473f61156cd16145a3f7d94fa5097e82a387b5462543556d28bc1339cabb0496f1c40e684722f186665dccbd59d4e12dca24f694f7a2d616bed456db96719dc630045326f3e234c8447c5c376e94bc5c7d193fa8d6c82c1c1990507720efb727a617406f16ddee6642475e72d1f9e41826d2a9a2950d3efe4cc11b7a7e37bce3a08c3313818f132d5874c8e6e2d744807b06a4ba063ebaea469584220db24cebe9710815409848f82baa78485af60ed6e9e5441363bfc36dd723180850a616", 0xde}], 0x8, &(0x7f0000000a40)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private=0xa010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x70}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000100000d0000000000000000000009000000000000000003000074d0ec0000020000000300000000000000000000000100000d00"/93], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x20) close(r1) 1.8954813s ago: executing program 0 (id=7112): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x60cb01f8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x18114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2000000000c8, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x27, &(0x7f0000000040), 0x4) close(r0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xffffffffffffffef}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0xfd122f3cb48753c8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xeffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x22021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_bp={0x0, 0xc}, 0xc00, 0x10000, 0x10, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x6, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x20000840) socket$kcm(0x10, 0x2, 0x4) 1.768130464s ago: executing program 2 (id=7113): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e00806200060000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (fail_nth: 33) 1.433581524s ago: executing program 3 (id=7114): r0 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x1002, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) syz_clone(0x20102400, 0x0, 0x20200, 0x0, 0x0, 0x0) 1.096040205s ago: executing program 2 (id=7115): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) 824.442874ms ago: executing program 2 (id=7116): socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x6, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 729.366577ms ago: executing program 0 (id=7117): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8942, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000680)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000880), 0xde9}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x100000, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000080000000000fe00000200"/33], 0x20}, 0x41) (fail_nth: 6) 0s ago: executing program 3 (id=7118): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 1147.606242][T25083] netlink: 'syz.0.6427': attribute type 10 has an invalid length. [ 1147.660805][T25081] netlink: 'syz.2.6426': attribute type 10 has an invalid length. [ 1147.706680][T25081] team0: Device vxcan1 is of different type [ 1147.867115][T25089] netlink: 'syz.1.6429': attribute type 10 has an invalid length. [ 1148.201239][T25096] netlink: 'syz.3.6432': attribute type 3 has an invalid length. [ 1148.210799][T25096] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6432'. [ 1148.273684][T25096] netlink: 'syz.3.6432': attribute type 10 has an invalid length. [ 1148.311325][T25096] team0: Device vxcan1 is of different type [ 1148.373253][T25102] tc_dump_action: action bad kind [ 1148.387026][T25102] bridge0: entered allmulticast mode [ 1148.399022][T25102] bond0: left allmulticast mode [ 1148.404025][T25102] bond_slave_0: left allmulticast mode [ 1148.413447][T25102] bond_slave_1: left allmulticast mode [ 1148.421896][T25102] bridge0: port 3(bond0) entered disabled state [ 1148.434669][T25102] bridge_slave_1: left allmulticast mode [ 1148.434668][T25104] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6435'. [ 1148.452787][T25102] bridge_slave_1: left promiscuous mode [ 1148.459356][T25102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.471786][T25102] bridge_slave_0: left allmulticast mode [ 1148.480279][T25102] bridge_slave_0: left promiscuous mode [ 1148.489526][T25102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.527754][T25102] team0: Port device bridge0 removed [ 1148.651436][T25110] netlink: 'syz.2.6439': attribute type 10 has an invalid length. [ 1148.669836][T25112] netlink: 'syz.0.6438': attribute type 21 has an invalid length. [ 1148.961896][T25112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1148.973597][T25112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.045395][T25112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.054227][T25112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.624376][T25119] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6442'. [ 1149.669360][T25125] team0: Device vxcan1 is of different type [ 1149.817033][T25131] FAULT_INJECTION: forcing a failure. [ 1149.817033][T25131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1149.833966][T25131] CPU: 0 PID: 25131 Comm: syz.1.6444 Not tainted syzkaller #0 [ 1149.841475][T25131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1149.851562][T25131] Call Trace: [ 1149.854866][T25131] [ 1149.857807][T25131] dump_stack_lvl+0x18c/0x250 [ 1149.862491][T25131] ? show_regs_print_info+0x20/0x20 [ 1149.867692][T25131] ? load_image+0x420/0x420 [ 1149.872192][T25131] ? __might_fault+0xaa/0x120 [ 1149.876873][T25131] ? __lock_acquire+0x7d40/0x7d40 [ 1149.881896][T25131] should_fail_ex+0x39d/0x4d0 [ 1149.886580][T25131] _copy_from_iter+0x1d9/0x12e0 [ 1149.891431][T25131] ? __kmem_cache_alloc_node+0x13a/0x250 [ 1149.897079][T25131] ? __virt_addr_valid+0x18c/0x540 [ 1149.902201][T25131] ? __lock_acquire+0x7d40/0x7d40 [ 1149.907239][T25131] ? copyout_mc+0x70/0x70 [ 1149.911584][T25131] ? __virt_addr_valid+0x18c/0x540 [ 1149.916701][T25131] ? __virt_addr_valid+0x18c/0x540 [ 1149.921818][T25131] ? __virt_addr_valid+0x469/0x540 [ 1149.926931][T25131] ? __check_object_size+0x506/0xa20 [ 1149.932212][T25131] tipc_msg_build+0x861/0xee0 [ 1149.936900][T25131] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 1149.942974][T25131] ? tipc_group_bc_cong+0x15c/0x210 [ 1149.948172][T25131] tipc_send_group_bcast+0x7d8/0xad0 [ 1149.953466][T25131] ? tipc_wait_for_connect+0x650/0x650 [ 1149.958919][T25131] ? __lock_acquire+0x1273/0x7d40 [ 1149.963948][T25131] ? wait_woken+0x180/0x180 [ 1149.968455][T25131] __tipc_sendmsg+0x33c/0x2bb0 [ 1149.973226][T25131] ? __lock_acquire+0x7d40/0x7d40 [ 1149.978247][T25131] ? rht_unlock+0x1d0/0x1d0 [ 1149.982752][T25131] ? trace_call_bpf+0xc3/0x6c0 [ 1149.987516][T25131] ? trace_call_bpf+0xc3/0x6c0 [ 1149.992363][T25131] ? trace_call_bpf+0x5e9/0x6c0 [ 1149.997212][T25131] ? trace_call_bpf+0xc3/0x6c0 [ 1150.001969][T25131] ? mark_lock+0x94/0x320 [ 1150.006289][T25131] ? verify_lock_unused+0x140/0x140 [ 1150.011486][T25131] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1150.017563][T25131] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1150.023372][T25131] ? mark_lock+0x94/0x320 [ 1150.027701][T25131] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1150.033683][T25131] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1150.039052][T25131] ? lockdep_hardirqs_on+0x98/0x150 [ 1150.044255][T25131] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1150.049626][T25131] ? _local_bh_enable+0xa0/0xa0 [ 1150.054478][T25131] tipc_sendmsg+0x55/0x70 [ 1150.058810][T25131] sock_write_iter+0x2df/0x420 [ 1150.063577][T25131] ? sock_read_iter+0x3e0/0x3e0 [ 1150.068436][T25131] ? common_file_perm+0x198/0x1f0 [ 1150.073464][T25131] vfs_write+0x46c/0x990 [ 1150.077711][T25131] ? file_end_write+0x250/0x250 [ 1150.082565][T25131] ? __fget_files+0x43d/0x4b0 [ 1150.087255][T25131] ? __fdget_pos+0x1d8/0x330 [ 1150.091861][T25131] ? ksys_write+0x75/0x260 [ 1150.096298][T25131] ksys_write+0x150/0x260 [ 1150.100643][T25131] ? __ia32_sys_read+0x90/0x90 [ 1150.105413][T25131] ? lockdep_hardirqs_on+0x98/0x150 [ 1150.110623][T25131] do_syscall_64+0x55/0xb0 [ 1150.115034][T25131] ? clear_bhb_loop+0x40/0x90 [ 1150.119710][T25131] ? clear_bhb_loop+0x40/0x90 [ 1150.124386][T25131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1150.130279][T25131] RIP: 0033:0x7f71f199ce59 [ 1150.134694][T25131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.154304][T25131] RSP: 002b:00007f71f28e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1150.162716][T25131] RAX: ffffffffffffffda RBX: 00007f71f1c16090 RCX: 00007f71f199ce59 [ 1150.170689][T25131] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 1150.178654][T25131] RBP: 00007f71f28e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.186627][T25131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.194601][T25131] R13: 00007f71f1c16128 R14: 00007f71f1c16090 R15: 00007ffc2bd7b6c8 [ 1150.202581][T25131] [ 1150.313848][T25133] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1150.381597][T25142] team0: Device vxcan1 is of different type [ 1150.689618][T25149] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6451'. [ 1150.815290][T25149] team0: Device vxcan1 is of different type [ 1151.697320][T25182] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6466'. [ 1151.753321][T25182] team0: Device vxcan1 is of different type [ 1151.756117][T25188] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6468'. [ 1151.769337][T25188] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1152.245603][T25201] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6472'. [ 1152.357139][T25201] team0: Device vxcan1 is of different type [ 1152.888370][T25210] FAULT_INJECTION: forcing a failure. [ 1152.888370][T25210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.907449][T25210] CPU: 0 PID: 25210 Comm: syz.2.6475 Not tainted syzkaller #0 [ 1152.914960][T25210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1152.925042][T25210] Call Trace: [ 1152.928341][T25210] [ 1152.931288][T25210] dump_stack_lvl+0x18c/0x250 [ 1152.935994][T25210] ? show_regs_print_info+0x20/0x20 [ 1152.941196][T25210] ? load_image+0x420/0x420 [ 1152.945706][T25210] ? __lock_acquire+0x7d40/0x7d40 [ 1152.950742][T25210] ? __virt_addr_valid+0x18c/0x540 [ 1152.955863][T25210] should_fail_ex+0x39d/0x4d0 [ 1152.960570][T25210] _copy_from_user+0x2f/0xe0 [ 1152.965201][T25210] bpf_prog_test_run_skb+0x26c/0x18c0 [ 1152.970598][T25210] ? __fget_files+0x28/0x4b0 [ 1152.975191][T25210] ? __fget_files+0x28/0x4b0 [ 1152.979792][T25210] ? __fget_files+0x43d/0x4b0 [ 1152.984488][T25210] ? cpu_online+0x60/0x60 [ 1152.988817][T25210] bpf_prog_test_run+0x321/0x390 [ 1152.993760][T25210] __sys_bpf+0x49d/0x890 [ 1152.998018][T25210] ? bpf_link_show_fdinfo+0x390/0x390 [ 1153.003403][T25210] ? lock_chain_count+0x20/0x20 [ 1153.008265][T25210] __x64_sys_bpf+0x7c/0x90 [ 1153.012692][T25210] do_syscall_64+0x55/0xb0 [ 1153.017108][T25210] ? clear_bhb_loop+0x40/0x90 [ 1153.021778][T25210] ? clear_bhb_loop+0x40/0x90 [ 1153.026447][T25210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1153.032336][T25210] RIP: 0033:0x7f6398b9ce59 [ 1153.036778][T25210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.056383][T25210] RSP: 002b:00007f63999d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1153.064791][T25210] RAX: ffffffffffffffda RBX: 00007f6398e15fa0 RCX: 00007f6398b9ce59 [ 1153.072754][T25210] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1153.080716][T25210] RBP: 00007f63999d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.088681][T25210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.096644][T25210] R13: 00007f6398e16038 R14: 00007f6398e15fa0 R15: 00007ffdfdd229f8 [ 1153.104625][T25210] [ 1153.117512][T25212] validate_nla: 15 callbacks suppressed [ 1153.117529][T25212] netlink: 'syz.1.6476': attribute type 21 has an invalid length. [ 1153.133436][T25212] netlink: 'syz.1.6476': attribute type 1 has an invalid length. [ 1153.141555][T25212] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.6476'. [ 1153.242145][T25220] netlink: 'syz.2.6478': attribute type 10 has an invalid length. [ 1153.269469][T25224] netlink: 'syz.1.6480': attribute type 6 has an invalid length. [ 1153.294502][T25224] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6480'. [ 1153.318564][T25226] netlink: 'syz.3.6481': attribute type 29 has an invalid length. [ 1154.215165][T25226] netlink: 'syz.3.6481': attribute type 29 has an invalid length. [ 1154.412746][T25238] netlink: 'syz.0.6483': attribute type 6 has an invalid length. [ 1154.433638][T25238] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6483'. [ 1154.494841][T25240] netlink: 'syz.3.6484': attribute type 3 has an invalid length. [ 1154.503370][T25240] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6484'. [ 1154.595797][T25249] netlink: 'syz.3.6484': attribute type 10 has an invalid length. [ 1154.626408][T25249] team0: Device vxcan1 is of different type [ 1154.667944][T25247] netlink: 'syz.2.6487': attribute type 3 has an invalid length. [ 1154.700505][T25247] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6487'. [ 1154.737318][T25255] team0: Device vxcan1 is of different type [ 1154.989634][T25257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.706750][T25279] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6497'. [ 1155.913909][T25292] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6503'. [ 1155.982762][T25295] team0: Device vxcan1 is of different type [ 1156.092446][T25294] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6501'. [ 1156.205704][T25294] team0: Device vxcan1 is of different type [ 1156.797548][T25305] macvlan0: entered promiscuous mode [ 1156.830509][T25305] macvlan0: entered allmulticast mode [ 1156.876223][T25305] veth1_vlan: entered allmulticast mode [ 1156.905208][T25305] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1156.976365][T25313] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 1157.005165][T25313] FAULT_INJECTION: forcing a failure. [ 1157.005165][T25313] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.061602][T25313] CPU: 0 PID: 25313 Comm: syz.2.6510 Not tainted syzkaller #0 [ 1157.069118][T25313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1157.079172][T25313] Call Trace: [ 1157.082446][T25313] [ 1157.085372][T25313] dump_stack_lvl+0x18c/0x250 [ 1157.090051][T25313] ? show_regs_print_info+0x20/0x20 [ 1157.095244][T25313] ? load_image+0x420/0x420 [ 1157.099740][T25313] ? __might_sleep+0xe0/0xe0 [ 1157.104327][T25313] ? __lock_acquire+0x7d40/0x7d40 [ 1157.109348][T25313] should_fail_ex+0x39d/0x4d0 [ 1157.114029][T25313] should_failslab+0x9/0x20 [ 1157.118534][T25313] slab_pre_alloc_hook+0x59/0x310 [ 1157.123562][T25313] ? lockdep_hardirqs_on+0x98/0x150 [ 1157.128759][T25313] kmem_cache_alloc_node+0x60/0x320 [ 1157.133957][T25313] ? __alloc_skb+0x103/0x2c0 [ 1157.138547][T25313] __alloc_skb+0x103/0x2c0 [ 1157.142963][T25313] netlink_ack+0x376/0x1180 [ 1157.147466][T25313] ? __dev_queue_xmit+0x265/0x3660 [ 1157.152582][T25313] ? netlink_dump+0xe50/0xe50 [ 1157.157252][T25313] ? perf_trace_lock+0xfc/0x3b0 [ 1157.162104][T25313] netlink_rcv_skb+0x2c5/0x4d0 [ 1157.166862][T25313] ? rtnetlink_bind+0x80/0x80 [ 1157.171537][T25313] ? netlink_ack+0x1180/0x1180 [ 1157.176303][T25313] ? __lock_acquire+0x7d40/0x7d40 [ 1157.181327][T25313] ? netlink_deliver_tap+0x2e/0x1b0 [ 1157.186521][T25313] netlink_unicast+0x751/0x8d0 [ 1157.191304][T25313] netlink_sendmsg+0x8d0/0xbf0 [ 1157.196069][T25313] ? netlink_getsockopt+0x590/0x590 [ 1157.201258][T25313] ? aa_sock_msg_perm+0x94/0x150 [ 1157.206219][T25313] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1157.211497][T25313] ? security_socket_sendmsg+0x80/0xa0 [ 1157.216945][T25313] ? netlink_getsockopt+0x590/0x590 [ 1157.222134][T25313] ____sys_sendmsg+0x5ba/0x960 [ 1157.226894][T25313] ? __asan_memset+0x22/0x40 [ 1157.231480][T25313] ? __sys_sendmsg_sock+0x30/0x30 [ 1157.236497][T25313] ? __import_iovec+0x5f2/0x850 [ 1157.241346][T25313] ? import_iovec+0x73/0xa0 [ 1157.245844][T25313] ___sys_sendmsg+0x2a6/0x360 [ 1157.250519][T25313] ? __sys_sendmsg+0x2a0/0x2a0 [ 1157.255295][T25313] ? __lock_acquire+0x7d40/0x7d40 [ 1157.260352][T25313] __se_sys_sendmsg+0x1c2/0x2b0 [ 1157.265221][T25313] ? __x64_sys_sendmsg+0x80/0x80 [ 1157.270176][T25313] ? lockdep_hardirqs_on+0x98/0x150 [ 1157.275400][T25313] do_syscall_64+0x55/0xb0 [ 1157.279829][T25313] ? clear_bhb_loop+0x40/0x90 [ 1157.284501][T25313] ? clear_bhb_loop+0x40/0x90 [ 1157.289201][T25313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1157.295102][T25313] RIP: 0033:0x7f6398b9ce59 [ 1157.299516][T25313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.319152][T25313] RSP: 002b:00007f63999d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.327570][T25313] RAX: ffffffffffffffda RBX: 00007f6398e15fa0 RCX: 00007f6398b9ce59 [ 1157.335539][T25313] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 1157.343526][T25313] RBP: 00007f63999d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.351518][T25313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.359497][T25313] R13: 00007f6398e16038 R14: 00007f6398e15fa0 R15: 00007ffdfdd229f8 [ 1157.367490][T25313] [ 1157.453280][T25314] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6509'. [ 1157.491610][T25320] FAULT_INJECTION: forcing a failure. [ 1157.491610][T25320] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.496566][T25314] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1157.515695][T25320] CPU: 0 PID: 25320 Comm: syz.2.6512 Not tainted syzkaller #0 [ 1157.526929][T25320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1157.537007][T25320] Call Trace: [ 1157.540305][T25320] [ 1157.543256][T25320] dump_stack_lvl+0x18c/0x250 [ 1157.547960][T25320] ? sctp_sendmsg+0x15d2/0x2910 [ 1157.552838][T25320] ? ___sys_sendmsg+0x2a6/0x360 [ 1157.557711][T25320] ? show_regs_print_info+0x20/0x20 [ 1157.562920][T25320] ? load_image+0x420/0x420 [ 1157.567431][T25320] should_fail_ex+0x39d/0x4d0 [ 1157.572115][T25320] should_failslab+0x9/0x20 [ 1157.576625][T25320] slab_pre_alloc_hook+0x59/0x310 [ 1157.581654][T25320] ? sctp_add_bind_addr+0x8c/0x360 [ 1157.586764][T25320] __kmem_cache_alloc_node+0x53/0x250 [ 1157.592138][T25320] ? sctp_add_bind_addr+0x8c/0x360 [ 1157.597246][T25320] kmalloc_trace+0x2a/0xe0 [ 1157.601662][T25320] sctp_add_bind_addr+0x8c/0x360 [ 1157.606599][T25320] sctp_copy_local_addr_list+0x315/0x4f0 [ 1157.612236][T25320] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1157.617951][T25320] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1157.624019][T25320] ? sctp_v6_is_any+0x64/0x70 [ 1157.628694][T25320] ? sctp_copy_one_addr+0x8c/0x350 [ 1157.633802][T25320] sctp_bind_addr_copy+0xb3/0x3c0 [ 1157.638820][T25320] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1157.645154][T25320] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1157.650437][T25320] ? __sctp_connect+0xd80/0xd80 [ 1157.655281][T25320] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1157.660653][T25320] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1157.666202][T25320] ? security_sctp_bind_connect+0x89/0xb0 [ 1157.671923][T25320] sctp_sendmsg+0x15d2/0x2910 [ 1157.676606][T25320] ? sctp_getsockopt+0xb60/0xb60 [ 1157.681540][T25320] ? aa_sk_perm+0x83c/0x970 [ 1157.686039][T25320] ? aa_af_perm+0x330/0x330 [ 1157.690531][T25320] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1157.696943][T25320] ? sock_rps_record_flow+0x19/0x3f0 [ 1157.702229][T25320] ? inet_sendmsg+0xe9/0x2f0 [ 1157.706817][T25320] ? inet_send_prepare+0x260/0x260 [ 1157.711929][T25320] ____sys_sendmsg+0x5ba/0x960 [ 1157.716690][T25320] ? __lock_acquire+0x7d40/0x7d40 [ 1157.721715][T25320] ? __sys_sendmsg_sock+0x30/0x30 [ 1157.726730][T25320] ? __import_iovec+0x5f2/0x850 [ 1157.731580][T25320] ? import_iovec+0x73/0xa0 [ 1157.736079][T25320] ___sys_sendmsg+0x2a6/0x360 [ 1157.740756][T25320] ? get_pid_task+0x20/0x1e0 [ 1157.745345][T25320] ? __sys_sendmsg+0x2a0/0x2a0 [ 1157.750125][T25320] ? __lock_acquire+0x7d40/0x7d40 [ 1157.755162][T25320] __se_sys_sendmsg+0x1c2/0x2b0 [ 1157.760010][T25320] ? __x64_sys_sendmsg+0x80/0x80 [ 1157.764961][T25320] ? lockdep_hardirqs_on+0x98/0x150 [ 1157.770166][T25320] do_syscall_64+0x55/0xb0 [ 1157.774576][T25320] ? clear_bhb_loop+0x40/0x90 [ 1157.779244][T25320] ? clear_bhb_loop+0x40/0x90 [ 1157.783912][T25320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1157.789804][T25320] RIP: 0033:0x7f6398b9ce59 [ 1157.794212][T25320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.813814][T25320] RSP: 002b:00007f63999d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.822220][T25320] RAX: ffffffffffffffda RBX: 00007f6398e15fa0 RCX: 00007f6398b9ce59 [ 1157.830185][T25320] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000003 [ 1157.838147][T25320] RBP: 00007f63999d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.846114][T25320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.854076][T25320] R13: 00007f6398e16038 R14: 00007f6398e15fa0 R15: 00007ffdfdd229f8 [ 1157.862057][T25320] [ 1158.252278][T25322] syzkaller0: entered promiscuous mode [ 1158.259627][T25322] syzkaller0: entered allmulticast mode [ 1161.318323][T25333] validate_nla: 21 callbacks suppressed [ 1161.318334][T25333] netlink: 'syz.1.6516': attribute type 3 has an invalid length. [ 1161.331916][T25333] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6516'. [ 1161.342399][T25332] netlink: 'syz.2.6517': attribute type 3 has an invalid length. [ 1161.350377][T25332] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6517'. [ 1161.362587][T25336] netlink: 'syz.1.6516': attribute type 10 has an invalid length. [ 1161.373198][T25336] team0: Device vxcan1 is of different type [ 1161.383665][T25337] netlink: 'syz.2.6517': attribute type 10 has an invalid length. [ 1161.394188][T25337] team0: Device vxcan1 is of different type [ 1161.796826][T25354] FAULT_INJECTION: forcing a failure. [ 1161.796826][T25354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.811050][T25354] CPU: 1 PID: 25354 Comm: syz.2.6522 Not tainted syzkaller #0 [ 1161.818548][T25354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1161.828630][T25354] Call Trace: [ 1161.831948][T25354] [ 1161.834898][T25354] dump_stack_lvl+0x18c/0x250 [ 1161.839607][T25354] ? show_regs_print_info+0x20/0x20 [ 1161.844830][T25354] ? load_image+0x420/0x420 [ 1161.849350][T25354] ? __might_fault+0xaa/0x120 [ 1161.854020][T25354] ? __lock_acquire+0x7d40/0x7d40 [ 1161.859038][T25354] should_fail_ex+0x39d/0x4d0 [ 1161.863716][T25354] _copy_from_iter+0x1d9/0x12e0 [ 1161.868566][T25354] ? __virt_addr_valid+0x18c/0x540 [ 1161.873667][T25354] ? __lock_acquire+0x7d40/0x7d40 [ 1161.878680][T25354] ? rcu_is_watching+0x15/0xb0 [ 1161.883434][T25354] ? copyout_mc+0x70/0x70 [ 1161.887753][T25354] ? __virt_addr_valid+0x18c/0x540 [ 1161.892861][T25354] ? __virt_addr_valid+0x18c/0x540 [ 1161.897974][T25354] ? __virt_addr_valid+0x469/0x540 [ 1161.903109][T25354] ? __check_object_size+0x506/0xa20 [ 1161.908414][T25354] kcm_sendmsg+0xd95/0x28b0 [ 1161.912974][T25354] ? kcm_getsockopt+0x280/0x280 [ 1161.917844][T25354] ? aa_sock_msg_perm+0x94/0x150 [ 1161.922807][T25354] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1161.928113][T25354] ? security_socket_sendmsg+0x80/0xa0 [ 1161.933585][T25354] ? kcm_getsockopt+0x280/0x280 [ 1161.938455][T25354] ____sys_sendmsg+0x5ba/0x960 [ 1161.943246][T25354] ? __asan_memset+0x22/0x40 [ 1161.947903][T25354] ? __sys_sendmsg_sock+0x30/0x30 [ 1161.952945][T25354] ? __import_iovec+0x5f2/0x850 [ 1161.957827][T25354] ? import_iovec+0x73/0xa0 [ 1161.962352][T25354] ___sys_sendmsg+0x2a6/0x360 [ 1161.967047][T25354] ? get_pid_task+0x20/0x1e0 [ 1161.971658][T25354] ? __sys_sendmsg+0x2a0/0x2a0 [ 1161.976457][T25354] ? __lock_acquire+0x7d40/0x7d40 [ 1161.981528][T25354] __se_sys_sendmsg+0x1c2/0x2b0 [ 1161.986397][T25354] ? __x64_sys_sendmsg+0x80/0x80 [ 1161.991366][T25354] ? lockdep_hardirqs_on+0x98/0x150 [ 1161.996593][T25354] do_syscall_64+0x55/0xb0 [ 1162.001025][T25354] ? clear_bhb_loop+0x40/0x90 [ 1162.005713][T25354] ? clear_bhb_loop+0x40/0x90 [ 1162.010420][T25354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1162.016335][T25354] RIP: 0033:0x7f6398b9ce59 [ 1162.020783][T25354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.040409][T25354] RSP: 002b:00007f63999b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1162.048844][T25354] RAX: ffffffffffffffda RBX: 00007f6398e16090 RCX: 00007f6398b9ce59 [ 1162.056834][T25354] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 1162.064835][T25354] RBP: 00007f63999b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.072830][T25354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1162.080817][T25354] R13: 00007f6398e16128 R14: 00007f6398e16090 R15: 00007ffdfdd229f8 [ 1162.088827][T25354] [ 1163.198569][T25361] netlink: 'syz.0.6525': attribute type 10 has an invalid length. [ 1163.534608][T25372] netlink: 'syz.1.6528': attribute type 3 has an invalid length. [ 1163.544588][T25372] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6528'. [ 1163.643860][T25372] netlink: 'syz.1.6528': attribute type 10 has an invalid length. [ 1163.677816][T25372] team0: Device vxcan1 is of different type [ 1163.706331][T25375] netlink: 'syz.2.6531': attribute type 3 has an invalid length. [ 1163.716411][T25375] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6531'. [ 1163.751178][T25375] netlink: 'syz.2.6531': attribute type 10 has an invalid length. [ 1163.768521][T25375] team0: Device vxcan1 is of different type [ 1163.900507][T25381] netlink: 'syz.0.6532': attribute type 29 has an invalid length. [ 1163.993194][T25380] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.6532'. [ 1164.004041][T25380] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.6532'. [ 1166.015401][T25416] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6544'. [ 1166.114109][T25421] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6546'. [ 1166.162670][T25416] team0: Device vxcan1 is of different type [ 1166.220556][T25428] FAULT_INJECTION: forcing a failure. [ 1166.220556][T25428] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.235222][T25428] CPU: 1 PID: 25428 Comm: syz.2.6549 Not tainted syzkaller #0 [ 1166.242724][T25428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1166.252799][T25428] Call Trace: [ 1166.256097][T25428] [ 1166.259037][T25428] dump_stack_lvl+0x18c/0x250 [ 1166.263741][T25428] ? show_regs_print_info+0x20/0x20 [ 1166.268962][T25428] ? load_image+0x420/0x420 [ 1166.270287][T25421] team0: Device vxcan1 is of different type [ 1166.273473][T25428] ? __might_sleep+0xe0/0xe0 [ 1166.273503][T25428] ? __lock_acquire+0x7d40/0x7d40 [ 1166.273525][T25428] ? verify_lock_unused+0x140/0x140 [ 1166.273547][T25428] should_fail_ex+0x39d/0x4d0 [ 1166.298887][T25428] should_failslab+0x9/0x20 [ 1166.303404][T25428] slab_pre_alloc_hook+0x59/0x310 [ 1166.308427][T25428] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 1166.313969][T25428] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 1166.319508][T25428] __kmem_cache_alloc_node+0x53/0x250 [ 1166.324883][T25428] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 1166.330444][T25428] __kmalloc+0xa4/0x230 [ 1166.334620][T25428] bpf_prog_test_run_skb+0x245/0x18c0 [ 1166.340023][T25428] ? __fget_files+0x28/0x4b0 [ 1166.344621][T25428] ? __fget_files+0x28/0x4b0 [ 1166.349213][T25428] ? __fget_files+0x43d/0x4b0 [ 1166.353893][T25428] ? cpu_online+0x60/0x60 [ 1166.358223][T25428] bpf_prog_test_run+0x321/0x390 [ 1166.363205][T25428] __sys_bpf+0x49d/0x890 [ 1166.367447][T25428] ? bpf_link_show_fdinfo+0x390/0x390 [ 1166.372825][T25428] ? lock_chain_count+0x20/0x20 [ 1166.377677][T25428] __x64_sys_bpf+0x7c/0x90 [ 1166.382084][T25428] do_syscall_64+0x55/0xb0 [ 1166.386500][T25428] ? clear_bhb_loop+0x40/0x90 [ 1166.391166][T25428] ? clear_bhb_loop+0x40/0x90 [ 1166.395836][T25428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1166.401725][T25428] RIP: 0033:0x7f6398b9ce59 [ 1166.406140][T25428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.425744][T25428] RSP: 002b:00007f63999d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1166.434155][T25428] RAX: ffffffffffffffda RBX: 00007f6398e15fa0 RCX: 00007f6398b9ce59 [ 1166.442125][T25428] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1166.450086][T25428] RBP: 00007f63999d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.458054][T25428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.466016][T25428] R13: 00007f6398e16038 R14: 00007f6398e15fa0 R15: 00007ffdfdd229f8 [ 1166.473992][T25428] [ 1166.625400][T25432] validate_nla: 10 callbacks suppressed [ 1166.625424][T25432] netlink: 'syz.0.6551': attribute type 10 has an invalid length. [ 1166.732889][T25435] netlink: 'syz.2.6552': attribute type 11 has an invalid length. [ 1167.468847][T25458] netlink: 'syz.0.6560': attribute type 12 has an invalid length. [ 1167.487021][T25458] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6560'. [ 1168.467028][T25462] netlink: 'syz.3.6562': attribute type 3 has an invalid length. [ 1168.501617][T25462] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6562'. [ 1168.549692][T25466] netlink: 'syz.1.6564': attribute type 10 has an invalid length. [ 1168.847697][T25462] netlink: 'syz.3.6562': attribute type 10 has an invalid length. [ 1169.018865][T25462] team0: Device vxcan1 is of different type [ 1169.487138][T25477] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6566'. [ 1169.597763][T25479] netlink: 'syz.3.6567': attribute type 3 has an invalid length. [ 1169.645218][T25479] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6567'. [ 1169.696670][T25482] netlink: 'syz.3.6567': attribute type 10 has an invalid length. [ 1169.744129][T25482] team0: Device vxcan1 is of different type [ 1169.803307][T25486] netlink: 'syz.0.6568': attribute type 4 has an invalid length. [ 1169.827960][T25486] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6568'. [ 1170.389669][T25499] netlink: 'syz.1.6573': attribute type 21 has an invalid length. [ 1170.448549][T25499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6573'. [ 1170.510066][T25506] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6575'. [ 1170.596862][T25509] team0: Device vxcan1 is of different type [ 1170.702267][T25513] FAULT_INJECTION: forcing a failure. [ 1170.702267][T25513] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.715015][T25513] CPU: 0 PID: 25513 Comm: syz.1.6576 Not tainted syzkaller #0 [ 1170.722495][T25513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.732560][T25513] Call Trace: [ 1170.735839][T25513] [ 1170.738770][T25513] dump_stack_lvl+0x18c/0x250 [ 1170.743449][T25513] ? show_regs_print_info+0x20/0x20 [ 1170.748646][T25513] ? load_image+0x420/0x420 [ 1170.753153][T25513] should_fail_ex+0x39d/0x4d0 [ 1170.757832][T25513] should_failslab+0x9/0x20 [ 1170.762329][T25513] slab_pre_alloc_hook+0x59/0x310 [ 1170.767353][T25513] ? ip_finish_output2+0xb04/0x11e0 [ 1170.772560][T25513] kmem_cache_alloc_node+0x60/0x320 [ 1170.777756][T25513] ? __alloc_skb+0x103/0x2c0 [ 1170.782343][T25513] __alloc_skb+0x103/0x2c0 [ 1170.786754][T25513] ip_frag_next+0xd1/0xaf0 [ 1170.791180][T25513] ip_do_fragment+0x76f/0x1760 [ 1170.795952][T25513] ? __ip_local_out+0x5f0/0x5f0 [ 1170.800796][T25513] ? ip_fragment+0x210/0x210 [ 1170.805407][T25513] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 1170.810260][T25513] ip_output+0x2a1/0x3b0 [ 1170.814503][T25513] ? ip_output+0x60/0x3b0 [ 1170.818828][T25513] iptunnel_xmit+0x4f0/0x920 [ 1170.823436][T25513] ip_tunnel_xmit+0x1cbc/0x2410 [ 1170.828297][T25513] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1170.833320][T25513] ? gre_build_header+0x25b/0x990 [ 1170.838355][T25513] ipgre_xmit+0x7a6/0xb20 [ 1170.842683][T25513] dev_hard_start_xmit+0x246/0x740 [ 1170.847802][T25513] __dev_queue_xmit+0x19a3/0x3660 [ 1170.852838][T25513] ? __dev_queue_xmit+0x265/0x3660 [ 1170.857954][T25513] ? __kmem_cache_alloc_node+0x13a/0x250 [ 1170.863584][T25513] ? netdev_core_pick_tx+0x340/0x340 [ 1170.868872][T25513] ? skb_release_data+0x1d1/0x7b0 [ 1170.873907][T25513] __bpf_tx_skb+0x189/0x250 [ 1170.878409][T25513] bpf_clone_redirect+0x30f/0x4a0 [ 1170.883440][T25513] bpf_prog_208b094576c80b22+0x5e/0x63 [ 1170.888895][T25513] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1170.894873][T25513] ? perf_trace_preemptirq_template+0xac/0x330 [ 1170.901022][T25513] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1170.906995][T25513] ? lockdep_softirqs_on+0x580/0x580 [ 1170.912297][T25513] ? lock_chain_count+0x20/0x20 [ 1170.917153][T25513] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1170.923412][T25513] ? __local_bh_disable_ip+0x108/0x1a0 [ 1170.928875][T25513] ? __cant_sleep+0x220/0x220 [ 1170.933546][T25513] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1170.938910][T25513] ? _local_bh_enable+0xa0/0xa0 [ 1170.943755][T25513] ? bpf_test_timer_continue+0x135/0x380 [ 1170.949385][T25513] ? bpf_test_run+0x174/0x870 [ 1170.954054][T25513] bpf_test_run+0x2df/0x870 [ 1170.958561][T25513] ? bpf_test_run+0x174/0x870 [ 1170.963233][T25513] ? dst_hold+0x70/0x70 [ 1170.967385][T25513] ? eth_get_headlen+0x210/0x210 [ 1170.972326][T25513] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 1170.977710][T25513] ? cpu_online+0x60/0x60 [ 1170.982043][T25513] bpf_prog_test_run+0x321/0x390 [ 1170.986976][T25513] __sys_bpf+0x49d/0x890 [ 1170.991214][T25513] ? bpf_link_show_fdinfo+0x390/0x390 [ 1170.996588][T25513] ? lock_chain_count+0x20/0x20 [ 1171.001437][T25513] __x64_sys_bpf+0x7c/0x90 [ 1171.005846][T25513] do_syscall_64+0x55/0xb0 [ 1171.010259][T25513] ? clear_bhb_loop+0x40/0x90 [ 1171.014927][T25513] ? clear_bhb_loop+0x40/0x90 [ 1171.019599][T25513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1171.025490][T25513] RIP: 0033:0x7f71f199ce59 [ 1171.029906][T25513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.049510][T25513] RSP: 002b:00007f71f2905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1171.057918][T25513] RAX: ffffffffffffffda RBX: 00007f71f1c15fa0 RCX: 00007f71f199ce59 [ 1171.065884][T25513] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1171.073849][T25513] RBP: 00007f71f2905090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.081828][T25513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1171.089812][T25513] R13: 00007f71f1c16038 R14: 00007f71f1c15fa0 R15: 00007ffc2bd7b6c8 [ 1171.097802][T25513] [ 1171.432254][T25525] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6582'. [ 1171.530614][T25530] FAULT_INJECTION: forcing a failure. [ 1171.530614][T25530] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.533889][T25532] team0: Device vxcan1 is of different type [ 1171.592935][T25530] CPU: 0 PID: 25530 Comm: syz.1.6586 Not tainted syzkaller #0 [ 1171.600449][T25530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1171.610522][T25530] Call Trace: [ 1171.613823][T25530] [ 1171.616774][T25530] dump_stack_lvl+0x18c/0x250 [ 1171.621481][T25530] ? show_regs_print_info+0x20/0x20 [ 1171.626712][T25530] ? load_image+0x420/0x420 [ 1171.631251][T25530] ? __might_sleep+0xe0/0xe0 [ 1171.635868][T25530] ? __lock_acquire+0x7d40/0x7d40 [ 1171.640922][T25530] should_fail_ex+0x39d/0x4d0 [ 1171.645637][T25530] should_failslab+0x9/0x20 [ 1171.650173][T25530] slab_pre_alloc_hook+0x59/0x310 [ 1171.655227][T25530] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1171.660717][T25530] __kmem_cache_alloc_node+0x53/0x250 [ 1171.666210][T25530] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1171.671699][T25530] kmalloc_trace+0x2a/0xe0 [ 1171.676149][T25530] __inet_diag_dump_start+0x8b/0x9f0 [ 1171.681460][T25530] ? netlink_lookup+0x30/0x200 [ 1171.686248][T25530] ? netlink_lookup+0x30/0x200 [ 1171.691038][T25530] __netlink_dump_start+0x4a9/0x810 [ 1171.696271][T25530] inet_diag_rcv_msg_compat+0x215/0x440 [ 1171.701853][T25530] ? __inet_diag_dump+0x380/0x380 [ 1171.706913][T25530] ? sock_diag_rcv_msg+0xd1/0x600 [ 1171.711965][T25530] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 1171.717736][T25530] ? inet_diag_dump_start_compat+0x20/0x20 [ 1171.723570][T25530] ? inet_diag_dump+0x50/0x50 [ 1171.728285][T25530] ? __inet_diag_dump+0x380/0x380 [ 1171.733336][T25530] sock_diag_rcv_msg+0x3d8/0x600 [ 1171.738310][T25530] netlink_rcv_skb+0x241/0x4d0 [ 1171.743106][T25530] ? sock_diag_bind+0xb0/0xb0 [ 1171.747819][T25530] ? netlink_ack+0x1180/0x1180 [ 1171.752623][T25530] ? __lock_acquire+0x7d40/0x7d40 [ 1171.757696][T25530] ? netlink_deliver_tap+0x2e/0x1b0 [ 1171.762928][T25530] sock_diag_rcv+0x2a/0x40 [ 1171.767375][T25530] netlink_unicast+0x751/0x8d0 [ 1171.772174][T25530] netlink_sendmsg+0x8d0/0xbf0 [ 1171.776973][T25530] ? netlink_getsockopt+0x590/0x590 [ 1171.782198][T25530] ? aa_sock_msg_perm+0x94/0x150 [ 1171.787163][T25530] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1171.792473][T25530] ? security_socket_sendmsg+0x80/0xa0 [ 1171.797955][T25530] ? netlink_getsockopt+0x590/0x590 [ 1171.803189][T25530] ____sys_sendmsg+0x5ba/0x960 [ 1171.807988][T25530] ? __asan_memset+0x22/0x40 [ 1171.812607][T25530] ? __sys_sendmsg_sock+0x30/0x30 [ 1171.817661][T25530] ? __import_iovec+0x5f2/0x850 [ 1171.822542][T25530] ? import_iovec+0x73/0xa0 [ 1171.827075][T25530] ___sys_sendmsg+0x2a6/0x360 [ 1171.831797][T25530] ? __sys_sendmsg+0x2a0/0x2a0 [ 1171.836610][T25530] ? trace_call_bpf+0xc3/0x6c0 [ 1171.841430][T25530] __se_sys_sendmsg+0x1c2/0x2b0 [ 1171.846308][T25530] ? __x64_sys_sendmsg+0x80/0x80 [ 1171.851288][T25530] ? lockdep_hardirqs_on+0x98/0x150 [ 1171.856515][T25530] do_syscall_64+0x55/0xb0 [ 1171.860952][T25530] ? clear_bhb_loop+0x40/0x90 [ 1171.865653][T25530] ? clear_bhb_loop+0x40/0x90 [ 1171.870354][T25530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1171.876273][T25530] RIP: 0033:0x7f71f199ce59 [ 1171.880706][T25530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.900335][T25530] RSP: 002b:00007f71f2905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1171.908786][T25530] RAX: ffffffffffffffda RBX: 00007f71f1c15fa0 RCX: 00007f71f199ce59 [ 1171.916782][T25530] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000003 [ 1171.924774][T25530] RBP: 00007f71f2905090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.932769][T25530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.940758][T25530] R13: 00007f71f1c16038 R14: 00007f71f1c15fa0 R15: 00007ffc2bd7b6c8 [ 1171.948771][T25530] [ 1172.161977][T25536] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6587'. [ 1172.222059][T25539] validate_nla: 5 callbacks suppressed [ 1172.222102][T25539] netlink: 'syz.1.6588': attribute type 10 has an invalid length. [ 1172.787704][T25546] netlink: 'syz.3.6590': attribute type 3 has an invalid length. [ 1172.806033][T25546] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6590'. [ 1172.900856][T25546] netlink: 'syz.3.6590': attribute type 10 has an invalid length. [ 1173.030638][T25546] team0: Device vxcan1 is of different type [ 1173.916652][T25558] FAULT_INJECTION: forcing a failure. [ 1173.916652][T25558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.953831][T25558] CPU: 1 PID: 25558 Comm: syz.3.6594 Not tainted syzkaller #0 [ 1173.961369][T25558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1173.971458][T25558] Call Trace: [ 1173.974761][T25558] [ 1173.977714][T25558] dump_stack_lvl+0x18c/0x250 [ 1173.982427][T25558] ? show_regs_print_info+0x20/0x20 [ 1173.987657][T25558] ? load_image+0x420/0x420 [ 1173.992188][T25558] ? __lock_acquire+0x7d40/0x7d40 [ 1173.997248][T25558] ? snprintf+0xe9/0x140 [ 1174.001525][T25558] should_fail_ex+0x39d/0x4d0 [ 1174.006240][T25558] _copy_to_user+0x2f/0xa0 [ 1174.010691][T25558] simple_read_from_buffer+0xe7/0x150 [ 1174.016105][T25558] proc_fail_nth_read+0x1e8/0x260 [ 1174.021163][T25558] ? proc_fault_inject_write+0x360/0x360 [ 1174.026834][T25558] ? fsnotify_perm+0x271/0x5e0 [ 1174.031626][T25558] ? proc_fault_inject_write+0x360/0x360 [ 1174.037296][T25558] vfs_read+0x28b/0x970 [ 1174.041504][T25558] ? kernel_read+0x1e0/0x1e0 [ 1174.046126][T25558] ? __fget_files+0x28/0x4b0 [ 1174.050741][T25558] ? __fget_files+0x28/0x4b0 [ 1174.055366][T25558] ? __fget_files+0x43d/0x4b0 [ 1174.060081][T25558] ? __fdget_pos+0x2a3/0x330 [ 1174.064695][T25558] ? ksys_read+0x75/0x260 [ 1174.069051][T25558] ksys_read+0x150/0x260 [ 1174.073337][T25558] ? vfs_write+0x990/0x990 [ 1174.075324][T25566] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6593'. [ 1174.077765][T25558] ? lockdep_hardirqs_on+0x98/0x150 [ 1174.091993][T25558] do_syscall_64+0x55/0xb0 [ 1174.096433][T25558] ? clear_bhb_loop+0x40/0x90 [ 1174.101125][T25558] ? clear_bhb_loop+0x40/0x90 [ 1174.105823][T25558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1174.111744][T25558] RIP: 0033:0x7fa0eb95d68e [ 1174.116182][T25558] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1174.135821][T25558] RSP: 002b:00007fa0ec7d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1174.144261][T25558] RAX: ffffffffffffffda RBX: 00007fa0ec7d46c0 RCX: 00007fa0eb95d68e [ 1174.152263][T25558] RDX: 000000000000000f RSI: 00007fa0ec7d40a0 RDI: 0000000000000006 [ 1174.160264][T25558] RBP: 00007fa0ec7d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.168267][T25558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.176268][T25558] R13: 00007fa0ebc16038 R14: 00007fa0ebc15fa0 R15: 00007fff801fb8e8 [ 1174.184286][T25558] [ 1174.678628][T25573] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6597'. [ 1174.708340][T25573] batadv_slave_1: entered promiscuous mode [ 1174.728884][T25575] netlink: 'syz.3.6598': attribute type 3 has an invalid length. [ 1174.743883][T25575] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6598'. [ 1174.808380][T25575] netlink: 'syz.3.6598': attribute type 10 has an invalid length. [ 1174.843139][T25575] team0: Device vxcan1 is of different type [ 1174.947483][T25582] netlink: 'syz.2.6600': attribute type 10 has an invalid length. [ 1175.054115][T25585] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6602'. [ 1175.338756][T25587] netlink: 'syz.1.6603': attribute type 3 has an invalid length. [ 1175.347728][T25587] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6603'. [ 1175.398211][T25587] netlink: 'syz.1.6603': attribute type 10 has an invalid length. [ 1175.423657][T25587] team0: Device vxcan1 is of different type [ 1175.900388][T25606] netlink: 'syz.0.6611': attribute type 10 has an invalid length. [ 1175.908384][T25606] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6611'. [ 1176.032433][T25608] IPv6: Can't replace route, no match found [ 1176.049772][T25609] IPv6: Can't replace route, no match found [ 1176.076766][T25612] netlink: 'syz.3.6613': attribute type 10 has an invalid length. [ 1176.130453][T25615] sit0: entered promiscuous mode [ 1176.594098][ T5785] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 1176.693149][T25624] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6617'. [ 1176.718504][T25628] team0: Device vxcan1 is of different type [ 1176.867903][ T5785] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 1176.978830][T25643] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6624'. [ 1177.024200][T25647] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.6626'. [ 1177.058423][T25648] team0: Device vxcan1 is of different type [ 1177.216923][T25658] FAULT_INJECTION: forcing a failure. [ 1177.216923][T25658] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.220532][ T5785] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 1177.243614][T25658] CPU: 0 PID: 25658 Comm: syz.0.6631 Not tainted syzkaller #0 [ 1177.251123][T25658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1177.261202][T25658] Call Trace: [ 1177.264589][T25658] [ 1177.267537][T25658] dump_stack_lvl+0x18c/0x250 [ 1177.272238][T25658] ? show_regs_print_info+0x20/0x20 [ 1177.277448][T25658] ? load_image+0x420/0x420 [ 1177.281946][T25658] ? __might_sleep+0xe0/0xe0 [ 1177.286531][T25658] ? __lock_acquire+0x7d40/0x7d40 [ 1177.291572][T25658] should_fail_ex+0x39d/0x4d0 [ 1177.296273][T25658] should_failslab+0x9/0x20 [ 1177.300781][T25658] slab_pre_alloc_hook+0x59/0x310 [ 1177.305982][T25658] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1177.311711][T25658] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1177.314151][T25662] validate_nla: 5 callbacks suppressed [ 1177.314166][T25662] netlink: 'syz.2.6632': attribute type 1 has an invalid length. [ 1177.317434][T25658] __kmem_cache_alloc_node+0x53/0x250 [ 1177.317492][T25658] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1177.317512][T25658] __kmalloc+0xa4/0x230 [ 1177.345928][T25658] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1177.351519][T25658] tomoyo_path_number_perm+0x248/0x620 [ 1177.357002][T25658] ? tomoyo_path_number_perm+0x217/0x620 [ 1177.362662][T25658] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1177.368143][T25658] ? ksys_write+0x1c4/0x260 [ 1177.372709][T25658] ? __fget_files+0x28/0x4b0 [ 1177.377324][T25658] ? __fget_files+0x28/0x4b0 [ 1177.381956][T25658] security_file_ioctl+0x70/0xa0 [ 1177.387094][T25658] __se_sys_ioctl+0x48/0x170 [ 1177.391706][T25658] do_syscall_64+0x55/0xb0 [ 1177.396144][T25658] ? clear_bhb_loop+0x40/0x90 [ 1177.400832][T25658] ? clear_bhb_loop+0x40/0x90 [ 1177.405524][T25658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1177.411440][T25658] RIP: 0033:0x7f5964d9ce59 [ 1177.415867][T25658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.435498][T25658] RSP: 002b:00007f5965cd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1177.443936][T25658] RAX: ffffffffffffffda RBX: 00007f5965015fa0 RCX: 00007f5964d9ce59 [ 1177.451969][T25658] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 1177.459953][T25658] RBP: 00007f5965cd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.467952][T25658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.475932][T25658] R13: 00007f5965016038 R14: 00007f5965015fa0 R15: 00007ffe2bc77018 [ 1177.483930][T25658] [ 1177.501940][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.508449][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.517302][T25658] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1177.571982][T25665] netlink: 'syz.1.6633': attribute type 10 has an invalid length. [ 1178.644359][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 1178.799957][T25684] netlink: 'syz.3.6640': attribute type 3 has an invalid length. [ 1178.803979][T25687] FAULT_INJECTION: forcing a failure. [ 1178.803979][T25687] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.814479][T25684] __nla_validate_parse: 2 callbacks suppressed [ 1178.814495][T25684] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6640'. [ 1178.828889][T25687] CPU: 0 PID: 25687 Comm: syz.0.6641 Not tainted syzkaller #0 [ 1178.828915][T25687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1178.828925][T25687] Call Trace: [ 1178.828932][T25687] [ 1178.828940][T25687] dump_stack_lvl+0x18c/0x250 [ 1178.828969][T25687] ? show_regs_print_info+0x20/0x20 [ 1178.828989][T25687] ? load_image+0x420/0x420 [ 1178.829008][T25687] ? __might_sleep+0xe0/0xe0 [ 1178.829030][T25687] ? __lock_acquire+0x7d40/0x7d40 [ 1178.829051][T25687] ? lock_chain_count+0x20/0x20 [ 1178.829071][T25687] should_fail_ex+0x39d/0x4d0 [ 1178.829101][T25687] should_failslab+0x9/0x20 [ 1178.829125][T25687] slab_pre_alloc_hook+0x59/0x310 [ 1178.829150][T25687] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 1178.829173][T25687] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 1178.829201][T25687] __kmem_cache_alloc_node+0x53/0x250 [ 1178.829228][T25687] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 1178.829249][T25687] __kmalloc+0xa4/0x230 [ 1178.829274][T25687] bpf_prog_test_run_skb+0x245/0x18c0 [ 1178.829299][T25687] ? __fget_files+0x28/0x4b0 [ 1178.829319][T25687] ? __fget_files+0x28/0x4b0 [ 1178.829340][T25687] ? __fget_files+0x43d/0x4b0 [ 1178.829371][T25687] ? cpu_online+0x60/0x60 [ 1178.829393][T25687] bpf_prog_test_run+0x321/0x390 [ 1178.829417][T25687] __sys_bpf+0x49d/0x890 [ 1178.829438][T25687] ? bpf_link_show_fdinfo+0x390/0x390 [ 1178.829472][T25687] ? lock_chain_count+0x20/0x20 [ 1178.829500][T25687] __x64_sys_bpf+0x7c/0x90 [ 1178.829519][T25687] do_syscall_64+0x55/0xb0 [ 1178.829537][T25687] ? clear_bhb_loop+0x40/0x90 [ 1178.829553][T25687] ? clear_bhb_loop+0x40/0x90 [ 1178.829570][T25687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1178.829593][T25687] RIP: 0033:0x7f5964d9ce59 [ 1178.829609][T25687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.829625][T25687] RSP: 002b:00007f5965cd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1178.829645][T25687] RAX: ffffffffffffffda RBX: 00007f5965015fa0 RCX: 00007f5964d9ce59 [ 1178.829659][T25687] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1178.829671][T25687] RBP: 00007f5965cd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.829683][T25687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.829694][T25687] R13: 00007f5965016038 R14: 00007f5965015fa0 R15: 00007ffe2bc77018 [ 1178.829722][T25687] [ 1178.885910][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 1178.894228][T25688] netlink: 'syz.3.6640': attribute type 10 has an invalid length. [ 1179.125694][T25688] team0: Device vxcan1 is of different type [ 1179.171528][T25690] netlink: 'syz.2.6643': attribute type 3 has an invalid length. [ 1179.195791][T25690] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6643'. [ 1179.213699][T25697] netlink: 'syz.2.6643': attribute type 10 has an invalid length. [ 1179.233435][T25697] team0: Device vxcan1 is of different type [ 1179.286741][T25695] netlink: 'syz.0.6645': attribute type 10 has an invalid length. [ 1179.340021][T25695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6645'. [ 1179.498249][T25706] netlink: 'syz.0.6648': attribute type 10 has an invalid length. [ 1179.703684][T25712] netlink: 'syz.3.6650': attribute type 10 has an invalid length. [ 1179.720031][T25712] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1179.955773][T25721] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.6653'. [ 1180.114593][T25721] netlink: 'syz.0.6653': attribute type 21 has an invalid length. [ 1180.122473][T25721] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6653'. [ 1180.469878][T25732] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6658'. [ 1180.589944][T25732] team0: Device vxcan1 is of different type [ 1180.822404][T25741] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6662'. [ 1180.905653][T25743] team0: Device vxcan1 is of different type [ 1181.382967][T25755] team0: Port device wlan1 added [ 1181.810939][T25765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6670'. [ 1182.836137][T25786] validate_nla: 7 callbacks suppressed [ 1182.836276][T25786] netlink: 'syz.3.6675': attribute type 3 has an invalid length. [ 1182.863626][T25786] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6675'. [ 1182.937459][T25786] netlink: 'syz.3.6675': attribute type 10 has an invalid length. [ 1182.983359][T25786] team0: Device vxcan1 is of different type [ 1183.048045][T25792] netlink: 'syz.1.6677': attribute type 3 has an invalid length. [ 1183.059821][T25792] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6677'. [ 1183.137914][T25795] netlink: 'syz.1.6677': attribute type 10 has an invalid length. [ 1183.151030][T25795] team0: Device vxcan1 is of different type [ 1186.530696][T25811] netlink: 'syz.2.6684': attribute type 10 has an invalid length. [ 1187.049990][T25816] __nla_validate_parse: 1 callbacks suppressed [ 1187.050004][T25816] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6685'. [ 1187.251808][T25821] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1187.308185][T25826] netlink: 'syz.0.6690': attribute type 3 has an invalid length. [ 1187.327604][T25826] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6690'. [ 1187.433933][T25826] netlink: 'syz.0.6690': attribute type 10 has an invalid length. [ 1187.479730][T25826] team0: Device vxcan1 is of different type [ 1187.532066][T25833] netlink: 'syz.1.6692': attribute type 3 has an invalid length. [ 1187.547893][T25833] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6692'. [ 1187.614186][T25833] netlink: 'syz.1.6692': attribute type 10 has an invalid length. [ 1187.637677][T25833] team0: Device vxcan1 is of different type [ 1187.882111][T25840] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.6695'. [ 1187.907563][T25840] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.6695'. [ 1187.982556][T25845] netlink: 'syz.2.6697': attribute type 10 has an invalid length. [ 1188.129782][T25848] FAULT_INJECTION: forcing a failure. [ 1188.129782][T25848] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.155743][T25848] CPU: 0 PID: 25848 Comm: syz.3.6698 Not tainted syzkaller #0 [ 1188.163263][T25848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1188.173339][T25848] Call Trace: [ 1188.176628][T25848] [ 1188.179573][T25848] dump_stack_lvl+0x18c/0x250 [ 1188.184288][T25848] ? show_regs_print_info+0x20/0x20 [ 1188.189514][T25848] ? load_image+0x420/0x420 [ 1188.194047][T25848] ? __might_sleep+0xe0/0xe0 [ 1188.198663][T25848] ? __lock_acquire+0x7d40/0x7d40 [ 1188.203715][T25848] should_fail_ex+0x39d/0x4d0 [ 1188.208428][T25848] should_failslab+0x9/0x20 [ 1188.212953][T25848] slab_pre_alloc_hook+0x59/0x310 [ 1188.218001][T25848] ? tomoyo_encode+0x28b/0x540 [ 1188.222786][T25848] ? tomoyo_encode+0x28b/0x540 [ 1188.227570][T25848] __kmem_cache_alloc_node+0x53/0x250 [ 1188.232978][T25848] ? tomoyo_encode+0x28b/0x540 [ 1188.237773][T25848] __kmalloc+0xa4/0x230 [ 1188.241964][T25848] tomoyo_encode+0x28b/0x540 [ 1188.246588][T25848] tomoyo_realpath_from_path+0x592/0x5d0 [ 1188.252267][T25848] tomoyo_path_number_perm+0x248/0x620 [ 1188.257751][T25848] ? tomoyo_path_number_perm+0x217/0x620 [ 1188.263376][T25848] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1188.268832][T25848] ? trace_call_bpf+0xc3/0x6c0 [ 1188.273597][T25848] ? trace_call_bpf+0xc3/0x6c0 [ 1188.278355][T25848] ? trace_call_bpf+0x5e9/0x6c0 [ 1188.283218][T25848] ? __fget_files+0x28/0x4b0 [ 1188.287818][T25848] ? __fget_files+0x28/0x4b0 [ 1188.292416][T25848] security_file_ioctl+0x70/0xa0 [ 1188.297363][T25848] __se_sys_ioctl+0x48/0x170 [ 1188.301964][T25848] do_syscall_64+0x55/0xb0 [ 1188.306376][T25848] ? clear_bhb_loop+0x40/0x90 [ 1188.311044][T25848] ? clear_bhb_loop+0x40/0x90 [ 1188.315715][T25848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1188.321614][T25848] RIP: 0033:0x7fa0eb99ce59 [ 1188.326054][T25848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.345658][T25848] RSP: 002b:00007fa0ec7d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1188.354062][T25848] RAX: ffffffffffffffda RBX: 00007fa0ebc15fa0 RCX: 00007fa0eb99ce59 [ 1188.362028][T25848] RDX: 0000200000001200 RSI: 0000000000008b26 RDI: 0000000000000003 [ 1188.369996][T25848] RBP: 00007fa0ec7d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.377973][T25848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.385940][T25848] R13: 00007fa0ebc16038 R14: 00007fa0ebc15fa0 R15: 00007fff801fb8e8 [ 1188.393922][T25848] [ 1188.474356][T25848] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1188.665282][T25864] FAULT_INJECTION: forcing a failure. [ 1188.665282][T25864] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.684438][T25864] CPU: 1 PID: 25864 Comm: syz.2.6702 Not tainted syzkaller #0 [ 1188.688219][T25866] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6701'. [ 1188.691935][T25864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1188.691951][T25864] Call Trace: [ 1188.691959][T25864] [ 1188.691967][T25864] dump_stack_lvl+0x18c/0x250 [ 1188.691996][T25864] ? show_regs_print_info+0x20/0x20 [ 1188.692017][T25864] ? load_image+0x420/0x420 [ 1188.692034][T25864] ? __might_sleep+0xe0/0xe0 [ 1188.692056][T25864] ? __lock_acquire+0x7d40/0x7d40 [ 1188.692081][T25864] should_fail_ex+0x39d/0x4d0 [ 1188.692116][T25864] should_failslab+0x9/0x20 [ 1188.692138][T25864] slab_pre_alloc_hook+0x59/0x310 [ 1188.692164][T25864] ? kvmalloc_node+0x70/0x180 [ 1188.692185][T25864] ? kvmalloc_node+0x70/0x180 [ 1188.692204][T25864] __kmem_cache_alloc_node+0x53/0x250 [ 1188.736517][T25866] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1188.736634][T25864] ? kvmalloc_node+0x70/0x180 [ 1188.782930][T25864] __kmalloc_node+0xa4/0x230 [ 1188.787545][T25864] kvmalloc_node+0x70/0x180 [ 1188.792058][T25864] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 1188.797444][T25864] ? 0xffffffffa0004740 [ 1188.801597][T25864] ? 0xffffffffa0004740 [ 1188.805747][T25864] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1188.811638][T25864] ? 0xffffffffa0004740 [ 1188.815791][T25864] ? xdp_convert_md_to_buff+0x330/0x330 [ 1188.821359][T25864] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1188.827600][T25864] ? _copy_from_user+0xa5/0xe0 [ 1188.832366][T25864] ? bpf_test_init+0x119/0x140 [ 1188.837128][T25864] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1188.842593][T25864] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1188.847979][T25864] ? dev_put+0x80/0x80 [ 1188.852056][T25864] ? dev_put+0x80/0x80 [ 1188.856132][T25864] bpf_prog_test_run+0x321/0x390 [ 1188.861079][T25864] __sys_bpf+0x49d/0x890 [ 1188.865320][T25864] ? bpf_link_show_fdinfo+0x390/0x390 [ 1188.870703][T25864] ? lock_chain_count+0x20/0x20 [ 1188.875570][T25864] __x64_sys_bpf+0x7c/0x90 [ 1188.879983][T25864] do_syscall_64+0x55/0xb0 [ 1188.884394][T25864] ? clear_bhb_loop+0x40/0x90 [ 1188.889069][T25864] ? clear_bhb_loop+0x40/0x90 [ 1188.893742][T25864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1188.899639][T25864] RIP: 0033:0x7f6398b9ce59 [ 1188.904049][T25864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.923683][T25864] RSP: 002b:00007f63999d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1188.932146][T25864] RAX: ffffffffffffffda RBX: 00007f6398e15fa0 RCX: 00007f6398b9ce59 [ 1188.940129][T25864] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1188.948100][T25864] RBP: 00007f63999d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.956081][T25864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.964050][T25864] R13: 00007f6398e16038 R14: 00007f6398e15fa0 R15: 00007ffdfdd229f8 [ 1188.972038][T25864] [ 1189.410350][T25877] netlink: 'syz.0.6707': attribute type 3 has an invalid length. [ 1189.419506][T25877] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6707'. [ 1189.472608][T25880] netlink: 'syz.2.6709': attribute type 3 has an invalid length. [ 1189.496528][T25880] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1189.519213][T25877] netlink: 'syz.0.6707': attribute type 10 has an invalid length. [ 1189.576168][T25877] team0: Device vxcan1 is of different type [ 1189.621354][T25880] netlink: 'syz.2.6709': attribute type 10 has an invalid length. [ 1189.633847][T25880] team0: Device vxcan1 is of different type [ 1189.661214][T25888] netlink: 'syz.3.6710': attribute type 10 has an invalid length. [ 1189.972478][T25901] netlink: 'syz.1.6716': attribute type 16 has an invalid length. [ 1189.980959][T25901] netlink: 'syz.1.6716': attribute type 3 has an invalid length. [ 1189.989418][T25901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6716'. [ 1190.004942][T16378] wlan1: Trigger new scan to find an IBSS to join [ 1192.369917][T25919] netlink: 'syz.2.6724': attribute type 10 has an invalid length. [ 1192.666024][T25932] netlink: 'syz.3.6727': attribute type 3 has an invalid length. [ 1192.674087][T25932] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6727'. [ 1192.799282][T25932] team0: Device vxcan1 is of different type [ 1192.981369][T25949] team0: Device vxcan1 is of different type [ 1193.001291][T25945] validate_nla: 2 callbacks suppressed [ 1193.001314][T25945] netlink: 'syz.0.6733': attribute type 3 has an invalid length. [ 1193.015646][T25945] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6733'. [ 1193.137513][T25955] FAULT_INJECTION: forcing a failure. [ 1193.137513][T25955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1193.152726][T25955] CPU: 1 PID: 25955 Comm: syz.2.6737 Not tainted syzkaller #0 [ 1193.160220][T25955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1193.170274][T25955] Call Trace: [ 1193.173555][T25955] [ 1193.176479][T25955] dump_stack_lvl+0x18c/0x250 [ 1193.181163][T25955] ? show_regs_print_info+0x20/0x20 [ 1193.186353][T25955] ? load_image+0x420/0x420 [ 1193.190848][T25955] ? __might_fault+0xaa/0x120 [ 1193.195528][T25955] ? __lock_acquire+0x7d40/0x7d40 [ 1193.200551][T25955] should_fail_ex+0x39d/0x4d0 [ 1193.205232][T25955] _copy_from_user+0x2f/0xe0 [ 1193.209821][T25955] ____sys_sendmsg+0x2fd/0x960 [ 1193.214580][T25955] ? __lock_acquire+0x7d40/0x7d40 [ 1193.219600][T25955] ? __sys_sendmsg_sock+0x30/0x30 [ 1193.224614][T25955] ? __import_iovec+0x3fa/0x850 [ 1193.229470][T25955] ? import_iovec+0x73/0xa0 [ 1193.233974][T25955] ___sys_sendmsg+0x2a6/0x360 [ 1193.238653][T25955] ? get_pid_task+0x20/0x1e0 [ 1193.243240][T25955] ? __sys_sendmsg+0x2a0/0x2a0 [ 1193.248013][T25955] ? __lock_acquire+0x7d40/0x7d40 [ 1193.253048][T25955] __se_sys_sendmsg+0x1c2/0x2b0 [ 1193.257895][T25955] ? __x64_sys_sendmsg+0x80/0x80 [ 1193.262838][T25955] ? lockdep_hardirqs_on+0x98/0x150 [ 1193.268037][T25955] do_syscall_64+0x55/0xb0 [ 1193.272447][T25955] ? clear_bhb_loop+0x40/0x90 [ 1193.277114][T25955] ? clear_bhb_loop+0x40/0x90 [ 1193.281785][T25955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1193.287701][T25955] RIP: 0033:0x7f6398b9ce59 [ 1193.292149][T25955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.311776][T25955] RSP: 002b:00007f63999d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1193.320192][T25955] RAX: ffffffffffffffda RBX: 00007f6398e15fa0 RCX: 00007f6398b9ce59 [ 1193.328161][T25955] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000005 [ 1193.336145][T25955] RBP: 00007f63999d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.344106][T25955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1193.352090][T25955] R13: 00007f6398e16038 R14: 00007f6398e15fa0 R15: 00007ffdfdd229f8 [ 1193.360085][T25955] [ 1193.573044][T25964] netlink: 'syz.2.6741': attribute type 10 has an invalid length. [ 1194.073775][T25975] netlink: 'syz.0.6746': attribute type 3 has an invalid length. [ 1194.084489][T25975] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6746'. [ 1194.102348][T25973] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6745'. [ 1194.112198][T25973] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1194.154021][T25979] netlink: 'syz.0.6746': attribute type 10 has an invalid length. [ 1194.163837][T25979] team0: Device vxcan1 is of different type [ 1194.429327][T25987] netlink: 'syz.2.6750': attribute type 10 has an invalid length. [ 1194.441716][T25987] veth1_macvtap: left promiscuous mode [ 1194.571710][T25989] netlink: 'syz.3.6751': attribute type 3 has an invalid length. [ 1194.581903][T25989] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6751'. [ 1194.628355][T25989] netlink: 'syz.3.6751': attribute type 10 has an invalid length. [ 1194.641797][T25989] team0: Device vxcan1 is of different type [ 1194.762991][T25993] netlink: 'syz.2.6752': attribute type 10 has an invalid length. [ 1195.530373][T26022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1195.625028][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1195.633960][T26022] netlink: 33 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1195.685069][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1195.693983][T26022] netlink: 33 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1195.721665][T26025] mac80211_hwsim hwsim40 .3ãc¤±: renamed from wlan1 (while UP) [ 1195.742591][T26024] netlink: 'syz.2.6762': attribute type 3 has an invalid length. [ 1195.752843][T26029] netlink: 'syz.2.6762': attribute type 10 has an invalid length. [ 1195.762829][T26029] team0: Device vxcan1 is of different type [ 1196.015607][T22001] .3ãc¤±: Trigger new scan to find an IBSS to join [ 1196.208436][T26039] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1196.228386][T26042] €Â0: renamed from batadv_slave_1 (while UP) [ 1196.602153][T26055] team0: Device vxcan1 is of different type [ 1196.714066][T26059] FAULT_INJECTION: forcing a failure. [ 1196.714066][T26059] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.756177][T26059] CPU: 1 PID: 26059 Comm: syz.2.6772 Not tainted syzkaller #0 [ 1196.763705][T26059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1196.773773][T26059] Call Trace: [ 1196.777050][T26059] [ 1196.779978][T26059] dump_stack_lvl+0x18c/0x250 [ 1196.784667][T26059] ? show_regs_print_info+0x20/0x20 [ 1196.789861][T26059] ? load_image+0x420/0x420 [ 1196.794374][T26059] ? __lock_acquire+0x7d40/0x7d40 [ 1196.799409][T26059] should_fail_ex+0x39d/0x4d0 [ 1196.804092][T26059] should_failslab+0x9/0x20 [ 1196.808615][T26059] slab_pre_alloc_hook+0x59/0x310 [ 1196.813652][T26059] ? __lock_acquire+0x7d40/0x7d40 [ 1196.818684][T26059] kmem_cache_alloc+0x5a/0x2d0 [ 1196.823454][T26059] ? security_file_alloc+0x34/0x120 [ 1196.828659][T26059] security_file_alloc+0x34/0x120 [ 1196.833684][T26059] init_file+0x94/0x1f0 [ 1196.837841][T26059] alloc_empty_file+0xb7/0x1d0 [ 1196.842601][T26059] alloc_file+0x5c/0x600 [ 1196.846841][T26059] alloc_file_pseudo+0x184/0x210 [ 1196.851774][T26059] ? alloc_empty_backing_file+0xe0/0xe0 [ 1196.857322][T26059] ? _raw_spin_unlock+0x28/0x40 [ 1196.862174][T26059] anon_inode_getfile+0xc5/0x1a0 [ 1196.867122][T26059] __pidfd_prepare+0x7e/0x140 [ 1196.871794][T26059] scm_recv_unix+0x54a/0x840 [ 1196.876396][T26059] ? __unix_dgram_recvmsg+0xd90/0xd90 [ 1196.881769][T26059] ? scm_fp_dup+0x57/0x350 [ 1196.886180][T26059] ? rcu_is_watching+0x15/0xb0 [ 1196.890955][T26059] ? kmemdup+0x55/0x70 [ 1196.895025][T26059] ? __asan_memcpy+0x40/0x70 [ 1196.899614][T26059] ? scm_fp_dup+0x1e8/0x350 [ 1196.904111][T26059] __unix_dgram_recvmsg+0x9f8/0xd90 [ 1196.909310][T26059] ? unix_unhash+0x10/0x10 [ 1196.913731][T26059] ? aa_af_perm+0x330/0x330 [ 1196.918261][T26059] ? aa_sock_msg_perm+0x94/0x150 [ 1196.923226][T26059] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1196.928522][T26059] ? security_socket_recvmsg+0x89/0xb0 [ 1196.933992][T26059] ? unix_dgram_recvmsg+0xad/0xd0 [ 1196.939015][T26059] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 1196.944390][T26059] ____sys_recvmsg+0x2ce/0x5e0 [ 1196.949159][T26059] ? __sys_recvmsg_sock+0x50/0x50 [ 1196.954190][T26059] ? import_iovec+0x73/0xa0 [ 1196.958686][T26059] ___sys_recvmsg+0x216/0x590 [ 1196.963361][T26059] ? __sys_recvmsg+0x2a0/0x2a0 [ 1196.968123][T26059] ? trace_call_bpf+0xc3/0x6c0 [ 1196.972885][T26059] ? trace_call_bpf+0x5e9/0x6c0 [ 1196.977740][T26059] ? __fget_files+0x43d/0x4b0 [ 1196.982423][T26059] __x64_sys_recvmsg+0x20c/0x2e0 [ 1196.987360][T26059] ? ___sys_recvmsg+0x590/0x590 [ 1196.992215][T26059] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1196.998196][T26059] do_syscall_64+0x55/0xb0 [ 1197.002603][T26059] ? clear_bhb_loop+0x40/0x90 [ 1197.007271][T26059] ? clear_bhb_loop+0x40/0x90 [ 1197.011945][T26059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1197.017836][T26059] RIP: 0033:0x7f6398b9ce59 [ 1197.022242][T26059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.041840][T26059] RSP: 002b:00007f63999d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1197.050249][T26059] RAX: ffffffffffffffda RBX: 00007f6398e15fa0 RCX: 00007f6398b9ce59 [ 1197.058214][T26059] RDX: 0000000000000042 RSI: 0000200000000140 RDI: 0000000000000009 [ 1197.066192][T26059] RBP: 00007f63999d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.074174][T26059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.082149][T26059] R13: 00007f6398e16038 R14: 00007f6398e15fa0 R15: 00007ffdfdd229f8 [ 1197.090143][T26059] [ 1197.310411][T26067] FAULT_INJECTION: forcing a failure. [ 1197.310411][T26067] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.361864][T26067] CPU: 1 PID: 26067 Comm: syz.3.6776 Not tainted syzkaller #0 [ 1197.369464][T26067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1197.379632][T26067] Call Trace: [ 1197.383003][T26067] [ 1197.386027][T26067] dump_stack_lvl+0x18c/0x250 [ 1197.390840][T26067] ? show_regs_print_info+0x20/0x20 [ 1197.396153][T26067] ? load_image+0x420/0x420 [ 1197.400792][T26067] ? verify_lock_unused+0x140/0x140 [ 1197.406185][T26067] ? perf_trace_lock_acquire+0x34f/0x410 [ 1197.411985][T26067] should_fail_ex+0x39d/0x4d0 [ 1197.416817][T26067] should_failslab+0x9/0x20 [ 1197.421424][T26067] slab_pre_alloc_hook+0x59/0x310 [ 1197.426619][T26067] kmem_cache_alloc+0x5a/0x2d0 [ 1197.431494][T26067] ? skb_clone+0x1eb/0x370 [ 1197.436074][T26067] skb_clone+0x1eb/0x370 [ 1197.440454][T26067] __netlink_deliver_tap+0x41c/0x830 [ 1197.446003][T26067] ? netlink_deliver_tap+0x2e/0x1b0 [ 1197.451351][T26067] netlink_deliver_tap+0x19c/0x1b0 [ 1197.456672][T26067] netlink_unicast+0x72c/0x8d0 [ 1197.461637][T26067] netlink_sendmsg+0x8d0/0xbf0 [ 1197.466586][T26067] ? netlink_getsockopt+0x590/0x590 [ 1197.471911][T26067] ? aa_sock_msg_perm+0x94/0x150 [ 1197.476975][T26067] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1197.482358][T26067] ? security_socket_sendmsg+0x80/0xa0 [ 1197.487914][T26067] ? netlink_getsockopt+0x590/0x590 [ 1197.493234][T26067] ____sys_sendmsg+0x5ba/0x960 [ 1197.498159][T26067] ? __asan_memset+0x22/0x40 [ 1197.502861][T26067] ? __sys_sendmsg_sock+0x30/0x30 [ 1197.507980][T26067] ? __import_iovec+0x5f2/0x850 [ 1197.513041][T26067] ? import_iovec+0x73/0xa0 [ 1197.517688][T26067] ___sys_sendmsg+0x2a6/0x360 [ 1197.522528][T26067] ? __sys_sendmsg+0x2a0/0x2a0 [ 1197.527580][T26067] ? trace_call_bpf+0xc3/0x6c0 [ 1197.532668][T26067] __se_sys_sendmsg+0x1c2/0x2b0 [ 1197.537649][T26067] ? __x64_sys_sendmsg+0x80/0x80 [ 1197.542831][T26067] ? lockdep_hardirqs_on+0x98/0x150 [ 1197.548165][T26067] do_syscall_64+0x55/0xb0 [ 1197.552686][T26067] ? clear_bhb_loop+0x40/0x90 [ 1197.557442][T26067] ? clear_bhb_loop+0x40/0x90 [ 1197.562191][T26067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1197.568138][T26067] RIP: 0033:0x7fa0eb99ce59 [ 1197.572616][T26067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.592358][T26067] RSP: 002b:00007fa0ec7d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.600866][T26067] RAX: ffffffffffffffda RBX: 00007fa0ebc15fa0 RCX: 00007fa0eb99ce59 [ 1197.608886][T26067] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1197.616904][T26067] RBP: 00007fa0ec7d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.624918][T26067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.632930][T26067] R13: 00007fa0ebc16038 R14: 00007fa0ebc15fa0 R15: 00007fff801fb8e8 [ 1197.641046][T26067] [ 1197.827475][T22001] .3ãc¤±: Creating new IBSS network, BSSID 9a:44:ba:74:d0:bb [ 1198.140573][T26076] validate_nla: 5 callbacks suppressed [ 1198.140798][T26076] netlink: 'syz.1.6779': attribute type 3 has an invalid length. [ 1198.159956][T26076] __nla_validate_parse: 3 callbacks suppressed [ 1198.159974][T26076] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6779'. [ 1198.222171][T26076] netlink: 'syz.1.6779': attribute type 10 has an invalid length. [ 1198.255888][T26076] team0: Device vxcan1 is of different type [ 1198.889062][T26091] netlink: 'syz.2.6784': attribute type 7 has an invalid length. [ 1199.127710][T26095] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6786'. [ 1199.622190][T26105] netlink: 'syz.2.6789': attribute type 10 has an invalid length. [ 1199.670152][T26103] netlink: 'syz.3.6788': attribute type 3 has an invalid length. [ 1199.693682][T26103] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6788'. [ 1199.812337][T26103] netlink: 'syz.3.6788': attribute type 10 has an invalid length. [ 1199.834911][T26103] team0: Device vxcan1 is of different type [ 1200.232429][T26121] netlink: 'syz.0.6795': attribute type 3 has an invalid length. [ 1200.254589][T26121] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6795'. [ 1200.311385][T26121] netlink: 'syz.0.6795': attribute type 10 has an invalid length. [ 1200.361624][T26121] team0: Device vxcan1 is of different type [ 1201.629830][T26150] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1201.677816][T26152] netlink: 'syz.1.6802': attribute type 10 has an invalid length. [ 1201.820314][T26158] netlink: 'syz.2.6804': attribute type 33 has an invalid length. [ 1201.831668][T26158] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6804'. [ 1201.846163][T26158] `: renamed from syz_tun (while UP) [ 1202.098499][T26167] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6807'. [ 1202.223208][T26167] team0: Device vxcan1 is of different type [ 1202.477110][T26173] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6808'. [ 1202.500463][T26178] team0: Device vxcan1 is of different type [ 1203.174118][T26192] validate_nla: 4 callbacks suppressed [ 1203.174152][T26192] netlink: 'syz.1.6814': attribute type 10 has an invalid length. [ 1205.168634][T26197] FAULT_INJECTION: forcing a failure. [ 1205.168634][T26197] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.181515][T26197] CPU: 1 PID: 26197 Comm: syz.3.6816 Not tainted syzkaller #0 [ 1205.188999][T26197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1205.199083][T26197] Call Trace: [ 1205.202389][T26197] [ 1205.205337][T26197] dump_stack_lvl+0x18c/0x250 [ 1205.210042][T26197] ? show_regs_print_info+0x20/0x20 [ 1205.215266][T26197] ? load_image+0x420/0x420 [ 1205.219794][T26197] ? perf_tp_event+0x13d7/0x1520 [ 1205.224761][T26197] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1205.230591][T26197] should_fail_ex+0x39d/0x4d0 [ 1205.235280][T26197] should_failslab+0x9/0x20 [ 1205.239791][T26197] slab_pre_alloc_hook+0x59/0x310 [ 1205.244818][T26197] kmem_cache_alloc+0x5a/0x2d0 [ 1205.249576][T26197] ? skb_clone+0x1eb/0x370 [ 1205.254007][T26197] skb_clone+0x1eb/0x370 [ 1205.258258][T26197] bpf_clone_redirect+0x167/0x4a0 [ 1205.263288][T26197] bpf_prog_e97454e6a39c6b06+0x61/0x66 [ 1205.268747][T26197] ? perf_output_sample+0x220/0x2130 [ 1205.274033][T26197] ? perf_trace_preemptirq_template+0x269/0x330 [ 1205.280275][T26197] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1205.286264][T26197] ? lockdep_softirqs_on+0x580/0x580 [ 1205.291546][T26197] ? lock_chain_count+0x20/0x20 [ 1205.296390][T26197] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1205.302631][T26197] ? __local_bh_disable_ip+0x108/0x1a0 [ 1205.308082][T26197] ? __cant_sleep+0x220/0x220 [ 1205.312759][T26197] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1205.318124][T26197] ? _local_bh_enable+0xa0/0xa0 [ 1205.322966][T26197] ? bpf_test_timer_continue+0x135/0x380 [ 1205.328595][T26197] ? bpf_test_run+0x174/0x870 [ 1205.333291][T26197] bpf_test_run+0x2df/0x870 [ 1205.337793][T26197] ? lock_chain_count+0x20/0x20 [ 1205.342640][T26197] ? bpf_test_run+0x174/0x870 [ 1205.347314][T26197] ? dst_hold+0x70/0x70 [ 1205.351465][T26197] ? eth_get_headlen+0x210/0x210 [ 1205.356397][T26197] ? bpf_prog_test_run_skb+0x5e8/0x18c0 [ 1205.361940][T26197] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 1205.367322][T26197] ? cpu_online+0x60/0x60 [ 1205.371648][T26197] bpf_prog_test_run+0x321/0x390 [ 1205.376583][T26197] __sys_bpf+0x49d/0x890 [ 1205.380827][T26197] ? bpf_link_show_fdinfo+0x390/0x390 [ 1205.386206][T26197] ? lock_chain_count+0x20/0x20 [ 1205.391053][T26197] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1205.397036][T26197] __x64_sys_bpf+0x7c/0x90 [ 1205.401447][T26197] do_syscall_64+0x55/0xb0 [ 1205.405859][T26197] ? clear_bhb_loop+0x40/0x90 [ 1205.410529][T26197] ? clear_bhb_loop+0x40/0x90 [ 1205.415201][T26197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1205.421095][T26197] RIP: 0033:0x7fa0eb99ce59 [ 1205.425503][T26197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.445108][T26197] RSP: 002b:00007fa0ec7d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1205.453604][T26197] RAX: ffffffffffffffda RBX: 00007fa0ebc15fa0 RCX: 00007fa0eb99ce59 [ 1205.461655][T26197] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1205.469620][T26197] RBP: 00007fa0ec7d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.477585][T26197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.485551][T26197] R13: 00007fa0ebc16038 R14: 00007fa0ebc15fa0 R15: 00007fff801fb8e8 [ 1205.493534][T26197] [ 1205.862637][T26215] netlink: 'syz.3.6822': attribute type 3 has an invalid length. [ 1205.874480][T26215] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6822'. [ 1205.960910][T26214] netlink: 'syz.3.6822': attribute type 10 has an invalid length. [ 1205.976938][T26214] team0: Device vxcan1 is of different type [ 1206.488705][T26218] netlink: 'syz.2.6823': attribute type 3 has an invalid length. [ 1206.503050][T26218] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6823'. [ 1206.541464][T26222] netlink: 'syz.2.6823': attribute type 10 has an invalid length. [ 1206.562734][T26222] team0: Device vxcan1 is of different type [ 1207.565505][T26234] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6828'. [ 1207.592910][T26238] netlink: 'syz.2.6829': attribute type 10 has an invalid length. [ 1208.678802][T26254] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6835'. [ 1209.209584][T26258] netlink: 'syz.2.6836': attribute type 3 has an invalid length. [ 1209.240652][T26258] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6836'. [ 1209.309686][T26262] netlink: 'syz.1.6837': attribute type 3 has an invalid length. [ 1209.319855][T26262] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6837'. [ 1209.337510][T26258] netlink: 'syz.2.6836': attribute type 10 has an invalid length. [ 1209.436513][T26258] team0: Device vxcan1 is of different type [ 1209.472812][T26262] netlink: 'syz.1.6837': attribute type 10 has an invalid length. [ 1209.545201][T26262] team0: Device vxcan1 is of different type [ 1209.782430][T26271] syzkaller0: entered promiscuous mode [ 1209.789995][T26271] syzkaller0: entered allmulticast mode [ 1212.894312][T26282] netlink: 'syz.2.6842': attribute type 10 has an invalid length. [ 1212.902249][T26285] netlink: 'syz.3.6843': attribute type 2 has an invalid length. [ 1212.910146][T26285] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6843'. [ 1213.039686][T26297] netlink: 'syz.3.6846': attribute type 9 has an invalid length. [ 1213.064529][T26297] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1213.206557][T26297] netlink: 'syz.3.6846': attribute type 9 has an invalid length. [ 1213.215682][T26297] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1213.345118][T26307] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6850'. [ 1213.366022][T26307] netlink: 'syz.2.6850': attribute type 28 has an invalid length. [ 1213.395464][T26307] netlink: 'syz.2.6850': attribute type 29 has an invalid length. [ 1213.412028][T26307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6850'. [ 1213.491943][T26309] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6851'. [ 1213.539929][T26309] team0: Device vxcan1 is of different type [ 1213.571555][T26311] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6852'. [ 1213.650512][T26311] team0: Device vxcan1 is of different type [ 1213.837906][T26320] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6855'. [ 1214.012251][T26325] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.6856'. [ 1214.303887][T26334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6860'. [ 1216.521959][T26345] validate_nla: 7 callbacks suppressed [ 1216.521990][T26345] netlink: 'syz.3.6867': attribute type 10 has an invalid length. [ 1216.632293][T26355] netlink: 'syz.2.6868': attribute type 3 has an invalid length. [ 1216.793888][T26355] netlink: 'syz.2.6868': attribute type 10 has an invalid length. [ 1216.838400][T26355] team0: Device vxcan1 is of different type [ 1216.898077][T26357] netlink: 'syz.0.6869': attribute type 3 has an invalid length. [ 1216.941319][T26357] netlink: 'syz.0.6869': attribute type 10 has an invalid length. [ 1216.987808][T26357] team0: Device vxcan1 is of different type [ 1217.458705][T26385] FAULT_INJECTION: forcing a failure. [ 1217.458705][T26385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.472843][T26385] CPU: 0 PID: 26385 Comm: syz.1.6878 Not tainted syzkaller #0 [ 1217.480337][T26385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1217.490409][T26385] Call Trace: [ 1217.493697][T26385] [ 1217.496650][T26385] dump_stack_lvl+0x18c/0x250 [ 1217.501360][T26385] ? show_regs_print_info+0x20/0x20 [ 1217.506585][T26385] ? load_image+0x420/0x420 [ 1217.511101][T26385] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 1217.516564][T26385] ? __lock_acquire+0x7d40/0x7d40 [ 1217.521592][T26385] ? __rwlock_init+0x150/0x150 [ 1217.526357][T26385] should_fail_ex+0x39d/0x4d0 [ 1217.531048][T26385] copy_page_from_iter_atomic+0x2a8/0x1580 [ 1217.536848][T26385] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 1217.542313][T26385] ? iov_iter_zero+0x1170/0x1170 [ 1217.547250][T26385] ? shmem_write_begin+0x1cf/0x420 [ 1217.552356][T26385] generic_perform_write+0x353/0x5c0 [ 1217.557647][T26385] ? generic_file_direct_write+0x3e0/0x3e0 [ 1217.563443][T26385] ? down_write+0x16e/0x200 [ 1217.567950][T26385] ? file_update_time+0x98/0x1a0 [ 1217.572893][T26385] shmem_file_write_iter+0xfb/0x120 [ 1217.578089][T26385] vfs_write+0x46c/0x990 [ 1217.582333][T26385] ? file_end_write+0x250/0x250 [ 1217.587184][T26385] ? __fget_files+0x43d/0x4b0 [ 1217.591867][T26385] ? __fdget_pos+0x2a3/0x330 [ 1217.596539][T26385] ? ksys_write+0x75/0x260 [ 1217.600954][T26385] ksys_write+0x150/0x260 [ 1217.605288][T26385] ? __ia32_sys_read+0x90/0x90 [ 1217.610052][T26385] ? lockdep_hardirqs_on+0x98/0x150 [ 1217.615251][T26385] do_syscall_64+0x55/0xb0 [ 1217.619660][T26385] ? clear_bhb_loop+0x40/0x90 [ 1217.624326][T26385] ? clear_bhb_loop+0x40/0x90 [ 1217.628996][T26385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1217.634887][T26385] RIP: 0033:0x7f71f199ce59 [ 1217.639294][T26385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.658895][T26385] RSP: 002b:00007f71f2905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1217.667304][T26385] RAX: ffffffffffffffda RBX: 00007f71f1c15fa0 RCX: 00007f71f199ce59 [ 1217.675270][T26385] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000005 [ 1217.683755][T26385] RBP: 00007f71f2905090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.691809][T26385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1217.699774][T26385] R13: 00007f71f1c16038 R14: 00007f71f1c15fa0 R15: 00007ffc2bd7b6c8 [ 1217.707759][T26385] [ 1217.801089][T26388] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 1217.868840][T26391] FAULT_INJECTION: forcing a failure. [ 1217.868840][T26391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.895847][T26391] CPU: 1 PID: 26391 Comm: syz.0.6881 Not tainted syzkaller #0 [ 1217.903370][T26391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1217.913464][T26391] Call Trace: [ 1217.916778][T26391] [ 1217.919734][T26391] dump_stack_lvl+0x18c/0x250 [ 1217.924477][T26391] ? show_regs_print_info+0x20/0x20 [ 1217.929707][T26391] ? load_image+0x420/0x420 [ 1217.934229][T26391] ? __might_fault+0xaa/0x120 [ 1217.938919][T26391] ? __lock_acquire+0x7d40/0x7d40 [ 1217.943947][T26391] should_fail_ex+0x39d/0x4d0 [ 1217.948632][T26391] _copy_from_iter+0x1d9/0x12e0 [ 1217.953484][T26391] ? __might_fault+0xaa/0x120 [ 1217.958155][T26391] ? _copy_from_iter+0x24e/0x12e0 [ 1217.963187][T26391] ? __virt_addr_valid+0x18c/0x540 [ 1217.968297][T26391] ? __lock_acquire+0x7d40/0x7d40 [ 1217.973322][T26391] ? copyout_mc+0x70/0x70 [ 1217.977670][T26391] ? copyout_mc+0x70/0x70 [ 1217.982009][T26391] ? __virt_addr_valid+0x18c/0x540 [ 1217.987165][T26391] ? page_copy_sane+0x16a/0x270 [ 1217.992027][T26391] copy_page_from_iter+0x7b/0x100 [ 1217.997057][T26391] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1218.002880][T26391] tun_get_user+0x15db/0x3ca0 [ 1218.007572][T26391] ? aa_file_perm+0x11b/0xee0 [ 1218.012255][T26391] ? rcu_read_unlock+0xa0/0xa0 [ 1218.017026][T26391] ? tun_get+0x1c/0x2e0 [ 1218.021207][T26391] ? __lock_acquire+0x7d40/0x7d40 [ 1218.026256][T26391] ? tun_get+0x1c/0x2e0 [ 1218.030425][T26391] tun_chr_write_iter+0x119/0x200 [ 1218.035460][T26391] vfs_write+0x46c/0x990 [ 1218.039716][T26391] ? file_end_write+0x250/0x250 [ 1218.044573][T26391] ? __fget_files+0x43d/0x4b0 [ 1218.049285][T26391] ? __fdget_pos+0x1d8/0x330 [ 1218.053869][T26391] ? ksys_write+0x75/0x260 [ 1218.058285][T26391] ksys_write+0x150/0x260 [ 1218.062614][T26391] ? __ia32_sys_read+0x90/0x90 [ 1218.067378][T26391] ? lockdep_hardirqs_on+0x98/0x150 [ 1218.072579][T26391] do_syscall_64+0x55/0xb0 [ 1218.076990][T26391] ? clear_bhb_loop+0x40/0x90 [ 1218.081661][T26391] ? clear_bhb_loop+0x40/0x90 [ 1218.086334][T26391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1218.092227][T26391] RIP: 0033:0x7f5964d9ce59 [ 1218.096641][T26391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.116276][T26391] RSP: 002b:00007f5965cd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1218.124689][T26391] RAX: ffffffffffffffda RBX: 00007f5965015fa0 RCX: 00007f5964d9ce59 [ 1218.132655][T26391] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000003 [ 1218.140617][T26391] RBP: 00007f5965cd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.148583][T26391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.156550][T26391] R13: 00007f5965016038 R14: 00007f5965015fa0 R15: 00007ffe2bc77018 [ 1218.164529][T26391] [ 1218.181525][T26397] netlink: 'syz.3.6882': attribute type 10 has an invalid length. [ 1218.476275][T26411] netlink: 'syz.1.6888': attribute type 3 has an invalid length. [ 1218.486387][T26411] __nla_validate_parse: 3 callbacks suppressed [ 1218.486457][T26411] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6888'. [ 1218.524428][T26412] netlink: 'syz.3.6889': attribute type 3 has an invalid length. [ 1218.532344][T26412] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6889'. [ 1218.559028][T26413] netlink: 'syz.1.6888': attribute type 10 has an invalid length. [ 1218.568551][T26413] team0: Device vxcan1 is of different type [ 1218.612242][T26414] netlink: 'syz.3.6889': attribute type 10 has an invalid length. [ 1218.636504][T26414] team0: Device vxcan1 is of different type [ 1218.870175][T26420] FAULT_INJECTION: forcing a failure. [ 1218.870175][T26420] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.883585][T26420] CPU: 1 PID: 26420 Comm: syz.0.6892 Not tainted syzkaller #0 [ 1218.891106][T26420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1218.901199][T26420] Call Trace: [ 1218.904502][T26420] [ 1218.907450][T26420] dump_stack_lvl+0x18c/0x250 [ 1218.912150][T26420] ? show_regs_print_info+0x20/0x20 [ 1218.917361][T26420] ? load_image+0x420/0x420 [ 1218.921884][T26420] ? __might_sleep+0xe0/0xe0 [ 1218.926486][T26420] ? __lock_acquire+0x7d40/0x7d40 [ 1218.931526][T26420] should_fail_ex+0x39d/0x4d0 [ 1218.936226][T26420] should_failslab+0x9/0x20 [ 1218.940776][T26420] slab_pre_alloc_hook+0x59/0x310 [ 1218.945817][T26420] ? __get_vm_area_node+0x125/0x370 [ 1218.951026][T26420] __kmem_cache_alloc_node+0x53/0x250 [ 1218.956414][T26420] ? __get_vm_area_node+0x125/0x370 [ 1218.961619][T26420] kmalloc_node_trace+0x26/0xe0 [ 1218.966572][T26420] __get_vm_area_node+0x125/0x370 [ 1218.971617][T26420] __vmalloc_node_range+0x36e/0x1330 [ 1218.976921][T26420] ? netlink_sendmsg+0x602/0xbf0 [ 1218.981866][T26420] ? netlink_insert+0x109f/0x13a0 [ 1218.986926][T26420] ? netlink_data_ready+0x10/0x10 [ 1218.991959][T26420] ? free_vm_area+0x50/0x50 [ 1218.996513][T26420] ? netlink_sendmsg+0x602/0xbf0 [ 1219.001460][T26420] vmalloc+0x79/0x90 [ 1219.005457][T26420] ? netlink_sendmsg+0x602/0xbf0 [ 1219.010412][T26420] netlink_sendmsg+0x602/0xbf0 [ 1219.015214][T26420] ? netlink_getsockopt+0x590/0x590 [ 1219.020458][T26420] ? aa_sock_msg_perm+0x94/0x150 [ 1219.025427][T26420] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1219.030729][T26420] ? security_socket_sendmsg+0x80/0xa0 [ 1219.036202][T26420] ? netlink_getsockopt+0x590/0x590 [ 1219.041416][T26420] ____sys_sendmsg+0x5ba/0x960 [ 1219.046206][T26420] ? __asan_memset+0x22/0x40 [ 1219.050811][T26420] ? __sys_sendmsg_sock+0x30/0x30 [ 1219.055843][T26420] ? __import_iovec+0x5f2/0x850 [ 1219.060710][T26420] ? import_iovec+0x73/0xa0 [ 1219.065227][T26420] ___sys_sendmsg+0x2a6/0x360 [ 1219.069919][T26420] ? get_pid_task+0x20/0x1e0 [ 1219.074538][T26420] ? __sys_sendmsg+0x2a0/0x2a0 [ 1219.079367][T26420] ? __lock_acquire+0x7d40/0x7d40 [ 1219.084454][T26420] __se_sys_sendmsg+0x1c2/0x2b0 [ 1219.089416][T26420] ? __x64_sys_sendmsg+0x80/0x80 [ 1219.094394][T26420] ? lockdep_hardirqs_on+0x98/0x150 [ 1219.099614][T26420] do_syscall_64+0x55/0xb0 [ 1219.104043][T26420] ? clear_bhb_loop+0x40/0x90 [ 1219.108726][T26420] ? clear_bhb_loop+0x40/0x90 [ 1219.113410][T26420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1219.119314][T26420] RIP: 0033:0x7f5964d9ce59 [ 1219.123735][T26420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.143353][T26420] RSP: 002b:00007f5965cd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1219.151776][T26420] RAX: ffffffffffffffda RBX: 00007f5965015fa0 RCX: 00007f5964d9ce59 [ 1219.159753][T26420] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1219.167726][T26420] RBP: 00007f5965cd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.175699][T26420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.183674][T26420] R13: 00007f5965016038 R14: 00007f5965015fa0 R15: 00007ffe2bc77018 [ 1219.191681][T26420] [ 1219.199706][T26420] syz.0.6892: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1219.216475][T26420] CPU: 1 PID: 26420 Comm: syz.0.6892 Not tainted syzkaller #0 [ 1219.223988][T26420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1219.234070][T26420] Call Trace: [ 1219.237375][T26420] [ 1219.240323][T26420] dump_stack_lvl+0x18c/0x250 [ 1219.245024][T26420] ? show_regs_print_info+0x20/0x20 [ 1219.250281][T26420] ? load_image+0x420/0x420 [ 1219.254807][T26420] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1219.261232][T26420] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1219.267765][T26420] warn_alloc+0x246/0x340 [ 1219.272128][T26420] ? __get_vm_area_node+0x125/0x370 [ 1219.277362][T26420] ? zone_watermark_ok_safe+0x230/0x230 [ 1219.282925][T26420] ? rcu_is_watching+0x15/0xb0 [ 1219.287712][T26420] ? __get_vm_area_node+0x356/0x370 [ 1219.292934][T26420] __vmalloc_node_range+0x393/0x1330 [ 1219.298227][T26420] ? netlink_insert+0x109f/0x13a0 [ 1219.303286][T26420] ? netlink_data_ready+0x10/0x10 [ 1219.308335][T26420] ? free_vm_area+0x50/0x50 [ 1219.312864][T26420] ? netlink_sendmsg+0x602/0xbf0 [ 1219.317809][T26420] vmalloc+0x79/0x90 [ 1219.321715][T26420] ? netlink_sendmsg+0x602/0xbf0 [ 1219.326658][T26420] netlink_sendmsg+0x602/0xbf0 [ 1219.331445][T26420] ? netlink_getsockopt+0x590/0x590 [ 1219.336670][T26420] ? aa_sock_msg_perm+0x94/0x150 [ 1219.341653][T26420] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1219.346948][T26420] ? security_socket_sendmsg+0x80/0xa0 [ 1219.352418][T26420] ? netlink_getsockopt+0x590/0x590 [ 1219.357627][T26420] ____sys_sendmsg+0x5ba/0x960 [ 1219.362413][T26420] ? __asan_memset+0x22/0x40 [ 1219.367017][T26420] ? __sys_sendmsg_sock+0x30/0x30 [ 1219.372047][T26420] ? __import_iovec+0x5f2/0x850 [ 1219.376917][T26420] ? import_iovec+0x73/0xa0 [ 1219.381447][T26420] ___sys_sendmsg+0x2a6/0x360 [ 1219.386134][T26420] ? get_pid_task+0x20/0x1e0 [ 1219.390743][T26420] ? __sys_sendmsg+0x2a0/0x2a0 [ 1219.395546][T26420] ? __lock_acquire+0x7d40/0x7d40 [ 1219.400613][T26420] __se_sys_sendmsg+0x1c2/0x2b0 [ 1219.405478][T26420] ? __x64_sys_sendmsg+0x80/0x80 [ 1219.410460][T26420] ? lockdep_hardirqs_on+0x98/0x150 [ 1219.415679][T26420] do_syscall_64+0x55/0xb0 [ 1219.420102][T26420] ? clear_bhb_loop+0x40/0x90 [ 1219.424780][T26420] ? clear_bhb_loop+0x40/0x90 [ 1219.429461][T26420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1219.435364][T26420] RIP: 0033:0x7f5964d9ce59 [ 1219.439822][T26420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.459439][T26420] RSP: 002b:00007f5965cd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1219.467864][T26420] RAX: ffffffffffffffda RBX: 00007f5965015fa0 RCX: 00007f5964d9ce59 [ 1219.475843][T26420] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1219.483818][T26420] RBP: 00007f5965cd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.491819][T26420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.499794][T26420] R13: 00007f5965016038 R14: 00007f5965015fa0 R15: 00007ffe2bc77018 [ 1219.507805][T26420] [ 1219.521520][T26420] Mem-Info: [ 1219.526204][T26420] active_anon:12991 inactive_anon:0 isolated_anon:0 [ 1219.526204][T26420] active_file:19365 inactive_file:40403 isolated_file:0 [ 1219.526204][T26420] unevictable:768 dirty:117 writeback:0 [ 1219.526204][T26420] slab_reclaimable:10779 slab_unreclaimable:98814 [ 1219.526204][T26420] mapped:24920 shmem:1361 pagetables:566 [ 1219.526204][T26420] sec_pagetables:0 bounce:0 [ 1219.526204][T26420] kernel_misc_reclaimable:0 [ 1219.526204][T26420] free:1331917 free_pcp:5996 free_cma:0 [ 1219.593175][T26420] Node 0 active_anon:51764kB inactive_anon:0kB active_file:77460kB inactive_file:161412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99680kB dirty:468kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11240kB pagetables:2164kB sec_pagetables:0kB all_unreclaimable? no [ 1219.629819][T26420] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1219.640351][T26428] .`: left allmulticast mode [ 1219.661018][T26420] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1219.667951][T26428] bond_slave_1: left allmulticast mode [ 1219.692603][T26420] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1219.704025][T26420] Node 0 DMA32 free:1405228kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:51828kB inactive_anon:0kB active_file:77460kB inactive_file:160580kB unevictable:1536kB writepending:468kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:18136kB local_pcp:6692kB free_cma:0kB [ 1219.710332][T26429] netlink: 399 bytes leftover after parsing attributes in process `syz.1.6895'. [ 1219.735029][T26420] lowmem_reserve[]: 0 0 0 0 0 [ 1219.735078][T26420] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1219.735137][T26420] lowmem_reserve[]: 0 0 0 0 0 [ 1219.735178][T26420] Node 1 Normal free:3907076kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:6240kB local_pcp:0kB free_cma:0kB [ 1219.779174][T26428] bridge0: port 3(.`) entered disabled state [ 1219.799594][T26420] lowmem_reserve[]: 0 0 0 0 0 [ 1219.821727][T26420] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1219.834635][T26420] Node 0 DMA32: 705*4kB (UME) 935*8kB (UME) 741*16kB (UME) 1329*32kB (UME) 564*64kB (UME) 751*128kB (UME) 246*256kB (UME) 111*512kB (UM) 51*1024kB (UME) 12*2048kB (UME) 247*4096kB (UM) = 1405228kB [ 1219.856459][T26420] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1219.860439][T26428] bridge_slave_1: left allmulticast mode [ 1219.868721][T26420] Node 1 Normal: 243*4kB (UME) 49*8kB (UME) 27*16kB (UME) 220*32kB (UME) 86*64kB (UME) 16*128kB (UME) 2*256kB (UM) 2*512kB (UE) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3907076kB [ 1219.877135][T26428] bridge_slave_1: left promiscuous mode [ 1219.892236][T26420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1219.908497][T26420] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1219.916805][T26428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.918256][T26420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1219.938369][T26428] bridge_slave_0: left promiscuous mode [ 1219.944925][T26420] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1219.951263][T26428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.954707][T26420] 61129 total pagecache pages [ 1219.966536][T26420] 0 pages in swap cache [ 1219.971597][T26420] Free swap = 124996kB [ 1219.976506][T26420] Total swap = 124996kB [ 1219.980756][T26420] 2097051 pages RAM [ 1219.984951][T26420] 0 pages HighMem/MovableOnly [ 1219.989903][T26420] 416933 pages reserved [ 1219.994699][T26420] 0 pages cma reserved [ 1220.052620][T26428] team0: Port device bridge0 removed [ 1220.070069][T26433] netlink: 399 bytes leftover after parsing attributes in process `syz.2.6896'. [ 1220.100251][T26430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6894'. [ 1220.232665][T26439] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6899'. [ 1222.613142][T26454] validate_nla: 3 callbacks suppressed [ 1222.613159][T26454] netlink: 'syz.2.6902': attribute type 10 has an invalid length. [ 1222.636117][T26454] team0: Device vxcan1 is of different type [ 1222.664981][T26452] netlink: 'syz.0.6904': attribute type 3 has an invalid length. [ 1222.673149][T26452] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6904'. [ 1222.675933][T26450] netlink: 'syz.3.6903': attribute type 16 has an invalid length. [ 1222.694550][T26450] netlink: 'syz.3.6903': attribute type 3 has an invalid length. [ 1222.702323][T26450] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6903'. [ 1222.739193][T26452] netlink: 'syz.0.6904': attribute type 10 has an invalid length. [ 1222.751796][T26452] team0: Device vxcan1 is of different type [ 1222.982946][T26465] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6909'. [ 1223.081164][T26470] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6911'. [ 1223.128907][T26467] IPv6: Can't replace route, no match found [ 1223.321200][T26475] netlink: 'syz.1.6913': attribute type 10 has an invalid length. [ 1223.518398][T26482] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6916'. [ 1223.543324][T26482] IPv6: Can't replace route, no match found [ 1223.986023][T26500] netlink: 'syz.0.6922': attribute type 10 has an invalid length. [ 1223.996078][T26500] team0: Device vxcan1 is of different type [ 1224.108136][T26504] netlink: 'syz.1.6924': attribute type 3 has an invalid length. [ 1224.116656][T26504] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6924'. [ 1224.194810][T26509] netlink: 'syz.1.6924': attribute type 10 has an invalid length. [ 1224.208539][T26509] team0: Device vxcan1 is of different type [ 1224.335219][T26512] netlink: 'syz.2.6926': attribute type 10 has an invalid length. [ 1224.758254][T26525] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1224.895544][T26534] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1224.918037][T26534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1227.211634][T26557] team0: Device vxcan1 is of different type [ 1227.242790][T26556] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6940'. [ 1227.388343][T26561] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6942'. [ 1227.483602][T26561] team0: Device vxcan1 is of different type [ 1227.910388][T16375] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1228.693805][T26585] validate_nla: 6 callbacks suppressed [ 1228.693841][T26585] netlink: 'syz.0.6950': attribute type 10 has an invalid length. [ 1228.749308][T26587] netlink: 'syz.2.6951': attribute type 21 has an invalid length. [ 1229.257668][T26607] netlink: 'syz.2.6956': attribute type 10 has an invalid length. [ 1229.324894][T26607] team0: Device vxcan1 is of different type [ 1229.695813][T26606] netlink: 'syz.1.6958': attribute type 3 has an invalid length. [ 1229.729506][T26606] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6958'. [ 1229.748458][T26609] netlink: 'syz.1.6958': attribute type 10 has an invalid length. [ 1229.772063][T26609] team0: Device vxcan1 is of different type [ 1230.667047][T26625] netlink: 'syz.3.6964': attribute type 10 has an invalid length. [ 1234.086073][T26646] netlink: 'syz.2.6969': attribute type 10 has an invalid length. [ 1234.099594][T26646] team0: Device vxcan1 is of different type [ 1234.228705][T26644] netlink: 'syz.3.6971': attribute type 3 has an invalid length. [ 1234.245110][T26644] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6971'. [ 1234.267264][T26651] netlink: 'syz.3.6971': attribute type 10 has an invalid length. [ 1234.281688][T26651] team0: Device vxcan1 is of different type [ 1234.417604][T26656] netlink: 'syz.0.6975': attribute type 10 has an invalid length. [ 1234.612745][T26662] netlink: 'syz.0.6977': attribute type 10 has an invalid length. [ 1234.868607][T26671] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1234.875199][T26671] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1236.035384][T26683] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.6984'. [ 1237.009212][T26686] netlink: 'syz.2.6985': attribute type 10 has an invalid length. [ 1238.310844][T26703] netlink: 'syz.0.6989': attribute type 10 has an invalid length. [ 1238.320911][T26703] team0: Device vxcan1 is of different type [ 1238.355402][T26700] netlink: 'syz.2.6990': attribute type 3 has an invalid length. [ 1238.373270][T26700] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6990'. [ 1238.430078][T26700] netlink: 'syz.2.6990': attribute type 10 has an invalid length. [ 1238.451130][T26700] team0: Device vxcan1 is of different type [ 1238.719975][T26709] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6993'. [ 1238.888218][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.904514][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.327862][T26723] netlink: 'syz.0.6999': attribute type 10 has an invalid length. [ 1241.358363][T26725] wg2: entered promiscuous mode [ 1241.363806][T26725] wg2: entered allmulticast mode [ 1241.613632][T26746] netlink: 'syz.1.7004': attribute type 10 has an invalid length. [ 1241.637978][T26746] team0: Device vxcan1 is of different type [ 1241.688885][T26748] netlink: 'syz.2.7006': attribute type 9 has an invalid length. [ 1241.709529][T26748] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7006'. [ 1242.033285][T26751] netlink: 'syz.0.7007': attribute type 3 has an invalid length. [ 1242.057387][T26751] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7007'. [ 1242.158310][T26751] netlink: 'syz.0.7007': attribute type 10 has an invalid length. [ 1242.247955][T26751] team0: Device vxcan1 is of different type [ 1245.458694][T26764] netlink: 'syz.3.7012': attribute type 5 has an invalid length. [ 1245.473820][T26771] netlink: 'syz.2.7013': attribute type 10 has an invalid length. [ 1245.535883][T26771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.564803][T26771] bond0: (slave team0): Enslaving as an active interface with an up link [ 1245.653417][T26772] netlink: 'syz.1.7014': attribute type 10 has an invalid length. [ 1246.152666][T26788] netlink: 'syz.0.7017': attribute type 10 has an invalid length. [ 1246.163211][T26788] team0: Device vxcan1 is of different type [ 1246.328941][T26790] netlink: 'syz.3.7019': attribute type 3 has an invalid length. [ 1246.345082][T26790] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7019'. [ 1246.412870][T26790] netlink: 'syz.3.7019': attribute type 10 has an invalid length. [ 1246.448768][T26790] team0: Device vxcan1 is of different type [ 1246.976297][T26819] netlink: 'syz.0.7030': attribute type 10 has an invalid length. [ 1249.487336][T26836] netlink: 'syz.1.7035': attribute type 10 has an invalid length. [ 1249.506009][T26836] team0: Device vxcan1 is of different type [ 1249.727489][T26838] netlink: 'syz.3.7037': attribute type 9 has an invalid length. [ 1249.760202][T26838] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7037'. [ 1249.840664][T26838] netlink: 'syz.3.7037': attribute type 10 has an invalid length. [ 1250.353588][T26844] netlink: 'syz.3.7039': attribute type 10 has an invalid length. [ 1250.842674][T26844] bridge_slave_1: entered promiscuous mode [ 1250.863030][T26844] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1250.917820][T26848] netlink: 'syz.0.7040': attribute type 3 has an invalid length. [ 1250.939011][T26848] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7040'. [ 1251.007057][T26853] netlink: 'syz.0.7040': attribute type 10 has an invalid length. [ 1251.029627][T26853] team0: Device vxcan1 is of different type [ 1251.048162][T26854] netlink: 'syz.2.7042': attribute type 10 has an invalid length. [ 1251.072048][T26860] netlink: 'syz.3.7044': attribute type 4 has an invalid length. [ 1251.082575][T26860] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7044'. [ 1251.935172][T26874] netlink: 'syz.1.7049': attribute type 10 has an invalid length. [ 1251.955059][T26874] team0: Device vxcan1 is of different type [ 1252.015230][T26871] netlink: 'syz.0.7048': attribute type 1 has an invalid length. [ 1252.036325][T26871] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.7048'. [ 1252.383612][T26880] netlink: 'syz.2.7052': attribute type 2 has an invalid length. [ 1252.407234][T26880] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7052'. [ 1254.718451][T26888] netlink: 'syz.3.7054': attribute type 10 has an invalid length. [ 1254.939550][T26892] netlink: 'syz.1.7057': attribute type 3 has an invalid length. [ 1254.953888][T26892] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7057'. [ 1254.977880][T26905] netlink: 'syz.1.7057': attribute type 10 has an invalid length. [ 1255.004653][T26905] team0: Device vxcan1 is of different type [ 1255.210046][T26907] bridge_slave_0: left allmulticast mode [ 1255.478175][T26914] netlink: 'syz.3.7063': attribute type 10 has an invalid length. [ 1255.488184][T26914] team0: Device vxcan1 is of different type [ 1255.949813][T26927] netlink: 'syz.0.7069': attribute type 10 has an invalid length. [ 1256.216128][T26939] FAULT_INJECTION: forcing a failure. [ 1256.216128][T26939] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.232050][T26939] CPU: 1 PID: 26939 Comm: syz.1.7073 Not tainted syzkaller #0 [ 1256.239557][T26939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1256.249636][T26939] Call Trace: [ 1256.252940][T26939] [ 1256.255900][T26939] dump_stack_lvl+0x18c/0x250 [ 1256.260611][T26939] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1256.266799][T26939] ? show_regs_print_info+0x20/0x20 [ 1256.272026][T26939] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1256.278232][T26939] should_fail_ex+0x39d/0x4d0 [ 1256.282946][T26939] should_failslab+0x9/0x20 [ 1256.287483][T26939] slab_pre_alloc_hook+0x59/0x310 [ 1256.292543][T26939] ? sctp_transport_new+0x7e/0x630 [ 1256.297701][T26939] __kmem_cache_alloc_node+0x53/0x250 [ 1256.303111][T26939] ? sctp_transport_new+0x7e/0x630 [ 1256.308248][T26939] kmalloc_trace+0x2a/0xe0 [ 1256.312692][T26939] sctp_transport_new+0x7e/0x630 [ 1256.317678][T26939] sctp_assoc_add_peer+0x259/0x1390 [ 1256.322911][T26939] ? sctp_bind_addr_copy+0x37b/0x3c0 [ 1256.328232][T26939] sctp_connect_new_asoc+0x323/0x6a0 [ 1256.333552][T26939] ? __sctp_connect+0xd80/0xd80 [ 1256.338432][T26939] ? _local_bh_enable+0xa0/0xa0 [ 1256.343305][T26939] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1256.349143][T26939] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1256.354985][T26939] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1256.360557][T26939] ? security_sctp_bind_connect+0x89/0xb0 [ 1256.366315][T26939] sctp_sendmsg+0x15d2/0x2910 [ 1256.372873][T26939] ? sctp_getsockopt+0xb60/0xb60 [ 1256.377846][T26939] ? aa_sk_perm+0x83c/0x970 [ 1256.382390][T26939] ? aa_af_perm+0x330/0x330 [ 1256.386922][T26939] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1256.393381][T26939] ? sock_rps_record_flow+0x19/0x3f0 [ 1256.398711][T26939] ? inet_sendmsg+0x7c/0x2f0 [ 1256.403333][T26939] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1256.408644][T26939] ? security_socket_sendmsg+0x80/0xa0 [ 1256.414127][T26939] ? inet_send_prepare+0x260/0x260 [ 1256.419271][T26939] ____sys_sendmsg+0x5ba/0x960 [ 1256.424056][T26939] ? __lock_acquire+0x7d40/0x7d40 [ 1256.429106][T26939] ? __asan_memset+0x22/0x40 [ 1256.433718][T26939] ? __sys_sendmsg_sock+0x30/0x30 [ 1256.438767][T26939] ? __import_iovec+0x5f2/0x850 [ 1256.443649][T26939] ? import_iovec+0x73/0xa0 [ 1256.448178][T26939] ___sys_sendmsg+0x2a6/0x360 [ 1256.452894][T26939] ? __sys_sendmsg+0x2a0/0x2a0 [ 1256.457807][T26939] __se_sys_sendmsg+0x1c2/0x2b0 [ 1256.462709][T26939] ? __x64_sys_sendmsg+0x80/0x80 [ 1256.467688][T26939] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1256.473611][T26939] do_syscall_64+0x55/0xb0 [ 1256.478054][T26939] ? clear_bhb_loop+0x40/0x90 [ 1256.482749][T26939] ? clear_bhb_loop+0x40/0x90 [ 1256.487445][T26939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1256.493361][T26939] RIP: 0033:0x7f71f199ce59 [ 1256.497796][T26939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.517428][T26939] RSP: 002b:00007f71f2905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.525870][T26939] RAX: ffffffffffffffda RBX: 00007f71f1c15fa0 RCX: 00007f71f199ce59 [ 1256.533866][T26939] RDX: 00000000000080d1 RSI: 00002000000000c0 RDI: 000000000000000a [ 1256.541857][T26939] RBP: 00007f71f2905090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.549843][T26939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.557839][T26939] R13: 00007f71f1c16038 R14: 00007f71f1c15fa0 R15: 00007ffc2bd7b6c8 [ 1256.565852][T26939] [ 1256.810783][T26947] netlink: 'syz.2.7075': attribute type 3 has an invalid length. [ 1256.823558][T26947] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7075'. [ 1256.908185][T26947] netlink: 'syz.2.7075': attribute type 10 has an invalid length. [ 1256.930444][T26947] team0: Device vxcan1 is of different type [ 1257.509873][T26967] netlink: 'syz.3.7082': attribute type 10 has an invalid length. [ 1257.531544][T26967] team0: Device vxcan1 is of different type [ 1258.155288][T26973] netlink: 'syz.0.7086': attribute type 10 has an invalid length. [ 1258.812226][T26992] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1258.823599][T26992] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1258.838641][T26992] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1258.853604][T26992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1258.877139][T16378] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.887980][T26992] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1258.895513][T26992] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1258.913025][T26987] veth0_vlan: entered allmulticast mode [ 1258.935899][T16375] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1258.998411][T26995] veth0_vlan: left promiscuous mode [ 1259.016683][T26995] veth0_vlan: entered promiscuous mode [ 1259.191400][T16378] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.543293][T16378] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.580340][T27000] netlink: 'syz.0.7094': attribute type 3 has an invalid length. [ 1259.605914][T27000] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7094'. [ 1259.619798][T27004] netlink: 'syz.0.7094': attribute type 10 has an invalid length. [ 1259.652794][T27004] team0: Device vxcan1 is of different type [ 1259.751969][T16378] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.838013][T27012] netlink: 'syz.2.7096': attribute type 10 has an invalid length. [ 1259.865897][T27012] team0: Device vxcan1 is of different type [ 1260.097783][T26991] chnl_net:caif_netlink_parms(): no params data found [ 1260.319998][T26991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.365804][T26991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.392264][T26991] bridge_slave_0: entered allmulticast mode [ 1260.409187][T26991] bridge_slave_0: entered promiscuous mode [ 1260.427586][T26991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.447147][T26991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.466871][T26991] bridge_slave_1: entered allmulticast mode [ 1260.485883][T26991] bridge_slave_1: entered promiscuous mode [ 1260.735454][T27035] netlink: 'syz.0.7100': attribute type 10 has an invalid length. [ 1260.819646][T26991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.865797][T27045] netlink: 'syz.2.7102': attribute type 1 has an invalid length. [ 1260.878060][T26991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.889257][T27045] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.7102'. [ 1260.964520][ T5785] Bluetooth: hci1: command tx timeout [ 1261.111305][T26991] team0: Port device team_slave_0 added [ 1261.142307][T26991] team0: Port device team_slave_1 added [ 1261.360477][T27056] netlink: 'syz.0.7107': attribute type 3 has an invalid length. [ 1261.369117][T27056] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7107'. [ 1261.389037][T27062] netlink: 'syz.0.7107': attribute type 10 has an invalid length. [ 1261.399716][T27062] team0: Device vxcan1 is of different type [ 1261.462586][T26991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.477248][T26991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.509283][T26991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.524222][T26991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.532835][T26991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.559442][T26991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.649335][T27069] netlink: 'syz.3.7109': attribute type 10 has an invalid length. [ 1261.660643][T27069] team0: Device vxcan1 is of different type [ 1261.740327][T26991] hsr_slave_0: entered promiscuous mode [ 1261.747906][T26991] hsr_slave_1: entered promiscuous mode [ 1261.755359][T26991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1261.763213][T26991] Cannot create hsr debugfs directory [ 1262.183648][T27085] FAULT_INJECTION: forcing a failure. [ 1262.183648][T27085] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.196834][T27085] CPU: 1 PID: 27085 Comm: syz.2.7113 Not tainted syzkaller #0 [ 1262.204319][T27085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1262.214404][T27085] Call Trace: [ 1262.217707][T27085] [ 1262.220659][T27085] dump_stack_lvl+0x18c/0x250 [ 1262.225372][T27085] ? show_regs_print_info+0x20/0x20 [ 1262.230600][T27085] ? load_image+0x420/0x420 [ 1262.235135][T27085] ? mark_lock+0x94/0x320 [ 1262.239493][T27085] should_fail_ex+0x39d/0x4d0 [ 1262.244216][T27085] should_failslab+0x9/0x20 [ 1262.248743][T27085] slab_pre_alloc_hook+0x59/0x310 [ 1262.253805][T27085] kmem_cache_alloc_node+0x60/0x320 [ 1262.259035][T27085] ? __alloc_skb+0x103/0x2c0 [ 1262.263658][T27085] __alloc_skb+0x103/0x2c0 [ 1262.268110][T27085] alloc_skb_with_frags+0xca/0x7b0 [ 1262.273255][T27085] ? mark_lock+0x94/0x320 [ 1262.277613][T27085] ? __lock_acquire+0x1273/0x7d40 [ 1262.282665][T27085] sock_alloc_send_pskb+0x883/0x9a0 [ 1262.287907][T27085] ? sock_kzfree_s+0x50/0x50 [ 1262.292523][T27085] ? verify_lock_unused+0x140/0x140 [ 1262.297760][T27085] __ip6_append_data+0x2a8d/0x3cf0 [ 1262.302924][T27085] ? ip6_mtu+0x7d/0x3f0 [ 1262.307106][T27085] ? __in6_dev_get+0xd0/0xd0 [ 1262.311724][T27085] ? ip6_mtu+0x7d/0x3f0 [ 1262.315902][T27085] ? ip6_setup_cork+0xfe0/0xfe0 [ 1262.320792][T27085] ip6_append_data+0x1b0/0x350 [ 1262.325594][T27085] ? __in6_dev_get+0xd0/0xd0 [ 1262.330208][T27085] icmp6_send+0x136a/0x1b40 [ 1262.334740][T27085] ? icmp6_send+0x233/0x1b40 [ 1262.339374][T27085] ? icmpv6_push_pending_frames+0x400/0x400 [ 1262.345296][T27085] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1262.350691][T27085] ? lockdep_hardirqs_on+0x98/0x150 [ 1262.355950][T27085] icmpv6_ndo_send+0x1b9/0x520 [ 1262.360841][T27085] ? __asan_memset+0x22/0x40 [ 1262.365454][T27085] ? ip6_update_pmtu+0x360/0x360 [ 1262.370416][T27085] ? xfrm_lookup_with_ifid+0x17b2/0x1aa0 [ 1262.376156][T27085] ? udp6_set_csum+0xef0/0xef0 [ 1262.380966][T27085] ? ip6_rt_update_pmtu+0x35/0xc0 [ 1262.386019][T27085] tnl_update_pmtu+0xd33/0x1070 [ 1262.390905][T27085] ip_tunnel_xmit+0xd1d/0x2410 [ 1262.395721][T27085] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1262.400776][T27085] ? validate_xmit_xfrm+0xbc/0x12c0 [ 1262.406007][T27085] ? gre_build_header+0x25b/0x990 [ 1262.411064][T27085] ipgre_xmit+0x7a6/0xb20 [ 1262.415429][T27085] dev_hard_start_xmit+0x246/0x740 [ 1262.420593][T27085] __dev_queue_xmit+0x19a3/0x3660 [ 1262.425650][T27085] ? __dev_queue_xmit+0x265/0x3660 [ 1262.430799][T27085] ? __kmem_cache_alloc_node+0x13a/0x250 [ 1262.436464][T27085] ? netdev_core_pick_tx+0x340/0x340 [ 1262.441791][T27085] ? skb_release_data+0x1d1/0x7b0 [ 1262.446863][T27085] __bpf_tx_skb+0x189/0x250 [ 1262.451393][T27085] bpf_clone_redirect+0x30f/0x4a0 [ 1262.456464][T27085] bpf_prog_208b094576c80b22+0x5e/0x63 [ 1262.461963][T27085] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1262.467975][T27085] ? preempt_schedule+0xc0/0xd0 [ 1262.472848][T27085] ? perf_trace_preemptirq_template+0xac/0x330 [ 1262.479030][T27085] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1262.485040][T27085] ? lockdep_softirqs_on+0x580/0x580 [ 1262.490353][T27085] ? lock_chain_count+0x20/0x20 [ 1262.495230][T27085] ? __local_bh_disable_ip+0x108/0x1a0 [ 1262.500708][T27085] ? __cant_sleep+0x220/0x220 [ 1262.505407][T27085] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1262.510802][T27085] ? _local_bh_enable+0xa0/0xa0 [ 1262.515676][T27085] ? bpf_test_timer_continue+0x135/0x380 [ 1262.521339][T27085] ? bpf_test_run+0x174/0x870 [ 1262.526058][T27085] bpf_test_run+0x2df/0x870 [ 1262.530601][T27085] ? bpf_test_run+0x174/0x870 [ 1262.535306][T27085] ? dst_hold+0x70/0x70 [ 1262.539493][T27085] ? eth_get_headlen+0x210/0x210 [ 1262.544465][T27085] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 1262.549889][T27085] ? cpu_online+0x60/0x60 [ 1262.554251][T27085] bpf_prog_test_run+0x321/0x390 [ 1262.559211][T27085] __sys_bpf+0x49d/0x890 [ 1262.563487][T27085] ? bpf_link_show_fdinfo+0x390/0x390 [ 1262.568901][T27085] ? lock_chain_count+0x20/0x20 [ 1262.573794][T27085] __x64_sys_bpf+0x7c/0x90 [ 1262.578243][T27085] do_syscall_64+0x55/0xb0 [ 1262.582685][T27085] ? clear_bhb_loop+0x40/0x90 [ 1262.587384][T27085] ? clear_bhb_loop+0x40/0x90 [ 1262.592078][T27085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1262.597977][T27085] RIP: 0033:0x7f6398b9ce59 [ 1262.602386][T27085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.621997][T27085] RSP: 002b:00007f63999d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1262.630406][T27085] RAX: ffffffffffffffda RBX: 00007f6398e15fa0 RCX: 00007f6398b9ce59 [ 1262.638383][T27085] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1262.646367][T27085] RBP: 00007f63999d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.654344][T27085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1262.662339][T27085] R13: 00007f6398e16038 R14: 00007f6398e15fa0 R15: 00007ffdfdd229f8 [ 1262.670319][T27085] [ 1262.898981][T27099] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.7115'. [ 1263.054337][ T5785] Bluetooth: hci1: command tx timeout [ 1263.310679][T27105] FAULT_INJECTION: forcing a failure. [ 1263.310679][T27105] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.378904][T27105] CPU: 0 PID: 27105 Comm: syz.0.7117 Not tainted syzkaller #0 [ 1263.386435][T27105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1263.396508][T27105] Call Trace: [ 1263.399797][T27105] [ 1263.402734][T27105] dump_stack_lvl+0x18c/0x250 [ 1263.407434][T27105] ? show_regs_print_info+0x20/0x20 [ 1263.412651][T27105] ? load_image+0x420/0x420 [ 1263.417171][T27105] ? __might_sleep+0xe0/0xe0 [ 1263.421781][T27105] ? __lock_acquire+0x7d40/0x7d40 [ 1263.426831][T27105] should_fail_ex+0x39d/0x4d0 [ 1263.431541][T27105] should_failslab+0x9/0x20 [ 1263.436070][T27105] slab_pre_alloc_hook+0x59/0x310 [ 1263.441118][T27105] ? sctp_association_new+0x89/0x25c0 [ 1263.446514][T27105] __kmem_cache_alloc_node+0x53/0x250 [ 1263.451910][T27105] ? sctp_association_new+0x89/0x25c0 [ 1263.457303][T27105] kmalloc_trace+0x2a/0xe0 [ 1263.461742][T27105] sctp_association_new+0x89/0x25c0 [ 1263.466959][T27105] ? sctp_do_bind+0x6bd/0x990 [ 1263.471656][T27105] ? __ipv6_addr_type+0x242/0x2f0 [ 1263.476698][T27105] sctp_connect_new_asoc+0x2de/0x6a0 [ 1263.482010][T27105] ? __sctp_connect+0xd80/0xd80 [ 1263.486888][T27105] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1263.492288][T27105] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1263.497885][T27105] ? security_sctp_bind_connect+0x89/0xb0 [ 1263.503634][T27105] sctp_sendmsg+0x15d2/0x2910 [ 1263.508343][T27105] ? sctp_getsockopt+0xb60/0xb60 [ 1263.513306][T27105] ? aa_sk_perm+0x83c/0x970 [ 1263.517836][T27105] ? aa_af_perm+0x330/0x330 [ 1263.522442][T27105] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1263.528881][T27105] ? sock_rps_record_flow+0x19/0x3f0 [ 1263.534190][T27105] ? inet_sendmsg+0xe9/0x2f0 [ 1263.538800][T27105] ? inet_send_prepare+0x260/0x260 [ 1263.543943][T27105] ____sys_sendmsg+0x5ba/0x960 [ 1263.548731][T27105] ? __lock_acquire+0x7d40/0x7d40 [ 1263.553781][T27105] ? __sys_sendmsg_sock+0x30/0x30 [ 1263.558823][T27105] ? __import_iovec+0x5f2/0x850 [ 1263.563708][T27105] ? import_iovec+0x73/0xa0 [ 1263.568231][T27105] ___sys_sendmsg+0x2a6/0x360 [ 1263.572932][T27105] ? __sys_sendmsg+0x2a0/0x2a0 [ 1263.577778][T27105] ? trace_call_bpf+0xc3/0x6c0 [ 1263.582599][T27105] __se_sys_sendmsg+0x1c2/0x2b0 [ 1263.587468][T27105] ? __x64_sys_sendmsg+0x80/0x80 [ 1263.592413][T27105] ? lockdep_hardirqs_on+0x98/0x150 [ 1263.597609][T27105] do_syscall_64+0x55/0xb0 [ 1263.602021][T27105] ? clear_bhb_loop+0x40/0x90 [ 1263.606699][T27105] ? clear_bhb_loop+0x40/0x90 [ 1263.611368][T27105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1263.617258][T27105] RIP: 0033:0x7f5964d9ce59 [ 1263.621669][T27105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.641268][T27105] RSP: 002b:00007f5965cd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.649678][T27105] RAX: ffffffffffffffda RBX: 00007f5965015fa0 RCX: 00007f5964d9ce59 [ 1263.657644][T27105] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000006 [ 1263.665610][T27105] RBP: 00007f5965cd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.673572][T27105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.681534][T27105] R13: 00007f5965016038 R14: 00007f5965015fa0 R15: 00007ffe2bc77018 [ 1263.689514][T27105] [ 1263.891070][T16378] [ 1263.893445][T16378] ====================================================== [ 1263.900481][T16378] WARNING: possible circular locking dependency detected [ 1263.907532][T16378] syzkaller #0 Not tainted [ 1263.911955][T16378] ------------------------------------------------------ [ 1263.918972][T16378] kworker/u4:7/16378 is trying to acquire lock: [ 1263.925222][T16378] ffff88805f3fcd80 (team->team_lock_key#10){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1263.934959][T16378] [ 1263.934959][T16378] but task is already holding lock: [ 1263.942330][T16378] ffff888069668768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1263.952729][T16378] [ 1263.952729][T16378] which lock already depends on the new lock. [ 1263.952729][T16378] [ 1263.963161][T16378] [ 1263.963161][T16378] the existing dependency chain (in reverse order) is: [ 1263.972190][T16378] [ 1263.972190][T16378] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1263.979944][T16378] __mutex_lock+0x136/0xcc0 [ 1263.984991][T16378] ieee80211_open+0x144/0x200 [ 1263.990202][T16378] __dev_open+0x2cb/0x430 [ 1263.995072][T16378] dev_open+0xab/0x190 [ 1263.999676][T16378] team_add_slave+0x75f/0x29a0 [ 1264.004979][T16378] do_setlink+0xdfe/0x4130 [ 1264.009928][T16378] rtnl_newlink+0x17da/0x20a0 [ 1264.015138][T16378] rtnetlink_rcv_msg+0x869/0xfa0 [ 1264.020610][T16378] netlink_rcv_skb+0x241/0x4d0 [ 1264.025911][T16378] netlink_unicast+0x751/0x8d0 [ 1264.031215][T16378] netlink_sendmsg+0x8d0/0xbf0 [ 1264.036518][T16378] ____sys_sendmsg+0x5ba/0x960 [ 1264.041820][T16378] ___sys_sendmsg+0x2a6/0x360 [ 1264.047036][T16378] __se_sys_sendmsg+0x1c2/0x2b0 [ 1264.052424][T16378] do_syscall_64+0x55/0xb0 [ 1264.057378][T16378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1264.063848][T16378] [ 1264.063848][T16378] -> #0 (team->team_lock_key#10){+.+.}-{3:3}: [ 1264.072135][T16378] __lock_acquire+0x2df1/0x7d40 [ 1264.077526][T16378] lock_acquire+0x19e/0x420 [ 1264.082567][T16378] __mutex_lock+0x136/0xcc0 [ 1264.087607][T16378] team_del_slave+0x32/0x1c0 [ 1264.092735][T16378] team_device_event+0x28d/0xa20 [ 1264.098280][T16378] notifier_call_chain+0x197/0x380 [ 1264.103933][T16378] unregister_netdevice_many_notify+0x100d/0x1900 [ 1264.110886][T16378] unregister_netdevice_queue+0x32c/0x370 [ 1264.117150][T16378] _cfg80211_unregister_wdev+0x16b/0x580 [ 1264.123339][T16378] ieee80211_remove_interfaces+0x49e/0x690 [ 1264.129700][T16378] ieee80211_unregister_hw+0x5d/0x2a0 [ 1264.135612][T16378] mac80211_hwsim_del_radio+0x289/0x480 [ 1264.141699][T16378] hwsim_exit_net+0x58d/0x650 [ 1264.146916][T16378] cleanup_net+0x70a/0xbb0 [ 1264.151864][T16378] process_scheduled_works+0xa5d/0x15d0 [ 1264.157945][T16378] worker_thread+0xa55/0xfc0 [ 1264.163074][T16378] kthread+0x2fa/0x390 [ 1264.167675][T16378] ret_from_fork+0x48/0x80 [ 1264.172625][T16378] ret_from_fork_asm+0x11/0x20 [ 1264.177923][T16378] [ 1264.177923][T16378] other info that might help us debug this: [ 1264.177923][T16378] [ 1264.188160][T16378] Possible unsafe locking scenario: [ 1264.188160][T16378] [ 1264.195615][T16378] CPU0 CPU1 [ 1264.200992][T16378] ---- ---- [ 1264.206363][T16378] lock(&rdev->wiphy.mtx); [ 1264.210884][T16378] lock(team->team_lock_key#10); [ 1264.218450][T16378] lock(&rdev->wiphy.mtx); [ 1264.225484][T16378] lock(team->team_lock_key#10); [ 1264.230530][T16378] [ 1264.230530][T16378] *** DEADLOCK *** [ 1264.230530][T16378] [ 1264.238678][T16378] 5 locks held by kworker/u4:7/16378: [ 1264.244049][T16378] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1264.254956][T16378] #1: ffffc900056afd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1264.265522][T16378] #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1264.274959][T16378] #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1264.284829][T16378] #4: ffff888069668768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1264.295653][T16378] [ 1264.295653][T16378] stack backtrace: [ 1264.301550][T16378] CPU: 1 PID: 16378 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1264.309201][T16378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1264.319277][T16378] Workqueue: netns cleanup_net [ 1264.324068][T16378] Call Trace: [ 1264.327358][T16378] [ 1264.330309][T16378] dump_stack_lvl+0x18c/0x250 [ 1264.335009][T16378] ? load_image+0x420/0x420 [ 1264.339531][T16378] ? show_regs_print_info+0x20/0x20 [ 1264.344748][T16378] ? print_circular_bug+0x12b/0x1a0 [ 1264.349981][T16378] check_noncircular+0x2fc/0x400 [ 1264.354940][T16378] ? print_deadlock_bug+0x5d0/0x5d0 [ 1264.360150][T16378] ? lockdep_lock+0xf5/0x230 [ 1264.364757][T16378] ? __lock_acquire+0x1273/0x7d40 [ 1264.369791][T16378] ? _find_first_zero_bit+0xd3/0x100 [ 1264.375088][T16378] __lock_acquire+0x2df1/0x7d40 [ 1264.379963][T16378] ? verify_lock_unused+0x140/0x140 [ 1264.385179][T16378] ? verify_lock_unused+0x140/0x140 [ 1264.390399][T16378] lock_acquire+0x19e/0x420 [ 1264.394913][T16378] ? team_del_slave+0x32/0x1c0 [ 1264.399698][T16378] ? __might_sleep+0xe0/0xe0 [ 1264.404299][T16378] ? read_lock_is_recursive+0x20/0x20 [ 1264.409689][T16378] __mutex_lock+0x136/0xcc0 [ 1264.414213][T16378] ? team_del_slave+0x32/0x1c0 [ 1264.419010][T16378] ? __lock_acquire+0x7d40/0x7d40 [ 1264.424058][T16378] ? rcu_is_watching+0x15/0xb0 [ 1264.428855][T16378] ? trace_contention_end+0x39/0xe0 [ 1264.434079][T16378] ? __mutex_lock+0x315/0xcc0 [ 1264.438776][T16378] ? team_del_slave+0x32/0x1c0 [ 1264.443559][T16378] ? mutex_lock_nested+0x20/0x20 [ 1264.448517][T16378] ? bond_netdev_event+0xeb/0xf20 [ 1264.453566][T16378] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1264.459226][T16378] team_del_slave+0x32/0x1c0 [ 1264.463840][T16378] team_device_event+0x28d/0xa20 [ 1264.468803][T16378] notifier_call_chain+0x197/0x380 [ 1264.473935][T16378] unregister_netdevice_many_notify+0x100d/0x1900 [ 1264.480368][T16378] ? lock_chain_count+0x20/0x20 [ 1264.485241][T16378] ? unregister_netdevice_many+0x20/0x20 [ 1264.490897][T16378] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1264.496641][T16378] ? __lock_acquire+0x7d40/0x7d40 [ 1264.501681][T16378] unregister_netdevice_queue+0x32c/0x370 [ 1264.507412][T16378] ? list_netdevice+0x730/0x730 [ 1264.512253][T16378] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1264.517968][T16378] _cfg80211_unregister_wdev+0x16b/0x580 [ 1264.523593][T16378] ieee80211_remove_interfaces+0x49e/0x690 [ 1264.529395][T16378] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1264.534669][T16378] ? rcu_is_watching+0x15/0xb0 [ 1264.539424][T16378] ieee80211_unregister_hw+0x5d/0x2a0 [ 1264.544797][T16378] mac80211_hwsim_del_radio+0x289/0x480 [ 1264.550978][T16378] ? rhashtable_remove_fast+0xc00/0xc00 [ 1264.556518][T16378] hwsim_exit_net+0x58d/0x650 [ 1264.561184][T16378] ? hwsim_init_net+0x90/0x90 [ 1264.565861][T16378] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1264.571758][T16378] cleanup_net+0x70a/0xbb0 [ 1264.576185][T16378] ? ops_free_list+0x3b0/0x3b0 [ 1264.580961][T16378] ? _raw_spin_unlock_irq+0x23/0x50 [ 1264.586159][T16378] ? process_scheduled_works+0x96f/0x15d0 [ 1264.591884][T16378] ? process_scheduled_works+0x96f/0x15d0 [ 1264.597594][T16378] process_scheduled_works+0xa5d/0x15d0 [ 1264.603136][T16378] ? worker_attach_to_pool+0x380/0x380 [ 1264.608587][T16378] ? assign_work+0x3d2/0x5d0 [ 1264.613164][T16378] worker_thread+0xa55/0xfc0 [ 1264.617747][T16378] kthread+0x2fa/0x390 [ 1264.621800][T16378] ? pr_cont_work+0x560/0x560 [ 1264.626463][T16378] ? kthread_blkcg+0xd0/0xd0 [ 1264.631035][T16378] ret_from_fork+0x48/0x80 [ 1264.635441][T16378] ? kthread_blkcg+0xd0/0xd0 [ 1264.640019][T16378] ret_from_fork_asm+0x11/0x20 [ 1264.644784][T16378] [ 1264.655016][T16378] team0: Port device wlan1 removed [ 1264.805351][T26991] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1264.815332][T26991] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1264.826067][T26991] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1264.853650][T16378] veth0_to_team: left allmulticast mode [ 1264.859478][T16378] veth0_to_team: left promiscuous mode [ 1264.865274][T16378] Ÿë: port 1(veth0_to_team) entered disabled state [ 1264.878236][T16378] hsr_slave_0: left promiscuous mode [ 1264.884102][T16378] hsr_slave_1: left promiscuous mode [ 1264.898174][T16378] veth1_macvtap: left promiscuous mode [ 1264.903784][T16378] veth0_macvtap: left promiscuous mode [ 1264.910485][T16378] veth1_vlan: left allmulticast mode [ 1264.916093][T16378] veth1_vlan: left promiscuous mode [ 1264.921460][T16378] veth0_vlan: left promiscuous mode [ 1265.136936][ T5785] Bluetooth: hci1: command tx timeout [ 1265.158821][T16378] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1265.279436][T16378] team0 (unregistering): Port device team_slave_1 removed [ 1265.308530][T16378] team0 (unregistering): Port device C removed [ 1265.332401][T16378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.343306][T16378] bond_slave_1 (unregistering): left promiscuous mode [ 1265.370464][T16378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.380180][T16378] bond_slave_0 (unregistering): left promiscuous mode [ 1265.508420][T16378] bond0 (unregistering): Released all slaves [ 1265.519482][T26991] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1265.624031][T26991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.641607][T26991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.658833][T22001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.665982][T22001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.701440][T22000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.708633][T22000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.971069][T26991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.017250][T26991] veth0_vlan: entered promiscuous mode [ 1266.038210][T26991] veth1_vlan: entered promiscuous mode [ 1266.065241][T26991] veth0_macvtap: entered promiscuous mode [ 1266.074955][T26991] veth1_macvtap: entered promiscuous mode [ 1266.099756][T26991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1266.111743][T26991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.125718][T26991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.142117][T26991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 1266.152009][T26991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.163787][T26991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.182622][T26991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.191778][T26991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.201199][T26991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.212294][T26991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.260558][T26991] ieee80211 phy55: Selected rate control algorithm 'minstrel_ht' [ 1266.292540][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.309098][T26991] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 1266.319519][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.358386][T22000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.374568][T22000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.214394][ T5785] Bluetooth: hci1: command tx timeout