last executing test programs: 40.25601177s ago: executing program 3 (id=2862): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="c6", 0x1}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000340)={'syzkaller1\x00', @remote}) r2 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r2, &(0x7f0000000ac0)={&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f00000009c0)=""/242, 0xf2}, 0x20) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x235a03, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020019f9ccd97829570000000000000100"], 0x0, 0x5a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x100000000001}, 0x1001, 0x0, 0x1, 0x2, 0x0, 0x400, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000700)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="350795ae3d949420b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x2, 0x0, 0x0, 0x0, 0x80000000}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffede) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1e, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4806, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) socketpair(0x1e, 0x80000, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) 39.186356937s ago: executing program 3 (id=2869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r1, 0x3, 0x0, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 38.383252407s ago: executing program 3 (id=2875): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x5, 0xf, 0x5, 0x4, 0x0, 0xad5, 0x20, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7}, 0x10208, 0x6, 0x9b07, 0x4, 0xffff, 0x5, 0x6, 0x0, 0x89, 0x0, 0x9}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000040000000400000002000200000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000160000000000000000000000000000000000001300"], 0x50) socket$kcm(0x11, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180400000000000000000000009d313e33"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x3, 0x0, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x25, &(0x7f00000006c0)=ANY=[@ANYBLOB="18acceef227f8370b613d8e22e30dbae7d62ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000043aaf4ff0800000085000000cc000000180000000500000000000000ff7f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000327affff080000001867000004000000000000000400000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000800)='syzkaller\x00', 0x6, 0x2b, &(0x7f0000000840)=""/43, 0x40f00, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x4, 0x5, 0xac, 0xffffffff}, 0x10, 0x6f0b, r1, 0x5, &(0x7f0000000980), &(0x7f0000000a40)=[{0x1, 0x3, 0x7, 0x2}, {0x3, 0x1, 0x2, 0x3}, {0x4, 0x4, 0xa, 0x6}, {0x2, 0x4, 0x0, 0x4}, {0x4, 0x2, 0x5, 0x7}], 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a2075f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x91}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300"/16, 0x10}, {&(0x7f0000001480)="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", 0xeb6}], 0x5}, 0x40000) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4035ff857d58fc300000000190feafab7631943de930000de7800000000000002000000e60000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="996822ce3899d7", 0x7}], 0x1, &(0x7f0000000480)}, 0x844) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 37.487011748s ago: executing program 3 (id=2883): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x5, 0xf, 0x5, 0x4, 0x0, 0xad5, 0x20, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7}, 0x10208, 0x6, 0x9b07, 0x4, 0xffff, 0x5, 0x6, 0x0, 0x89, 0x0, 0x9}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB="00000000020000160000000000000000000000000000000000001300"], 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180400000000000000000000009d313e33"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x3, 0x0, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x25, &(0x7f00000006c0)=ANY=[@ANYBLOB="18acceef227f8370b613d8e22e30dbae7d62ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000043aaf4ff0800000085000000cc000000180000000500000000000000ff7f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000327affff080000001867000004000000000000000400000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000800)='syzkaller\x00', 0x6, 0x2b, &(0x7f0000000840)=""/43, 0x40f00, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x4, 0x5, 0xac, 0xffffffff}, 0x10, 0x6f0b, r2, 0x5, &(0x7f0000000980), &(0x7f0000000a40)=[{0x1, 0x3, 0x7, 0x2}, {0x3, 0x1, 0x2, 0x3}, {0x4, 0x4, 0xa, 0x6}, {0x2, 0x4, 0x0, 0x4}, {0x4, 0x2, 0x5, 0x7}], 0x10, 0x9}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a2075f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x91}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300"/16, 0x10}, {&(0x7f0000001480)="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", 0xeb6}], 0x5}, 0x40000) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="996822ce3899d7", 0x7}], 0x1, &(0x7f0000000480)}, 0x844) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) 36.478307493s ago: executing program 3 (id=2889): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000140)=ANY=[@ANYBLOB="030000000000f400000200"/20]) socket$kcm(0x29, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6879f}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x38}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[@ANYRESDEC=r1, @ANYRES64=r2, @ANYBLOB="fdffffff00000000000000000000010000000000d5573d27274c84cf68010ab1937b4c29d45311a51a59a1fd63", @ANYRES32=r2, @ANYRES32, @ANYRESHEX=r1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0x10f0, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/37}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600040001400600", 0x3a}], 0x1}, 0x8000) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef80"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e0309004d8871efa88562038270e7112f61d9605ccd2b07369bd10d0e05441c67861b3ef8181441eaba3bfd16eb458d1002", @ANYRESOCT], 0xee8a) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001980)="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", 0x14d}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}], 0x50}, 0x10) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x10000}, 0x28) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001840), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socket$kcm(0x23, 0x2, 0x0) 35.746641972s ago: executing program 3 (id=2894): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000200000000000000085000000760000009500000000000000454c5d86f016a6d06f53016a2a23a6afa079ebccdf76c2e4c79b27eb08ffa821636b2e8480f1b07eb87316a3c2f141deb03aaef4941f0a334f7422441c0134ee35d82402bf64ce6f73e94d27cb9c44"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x82b}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x3, 0xff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0xffffffffffffff56, &(0x7f0000000400)}, 0x10) setsockopt$sock_attach_bpf(r1, 0x29, 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 26.395586064s ago: executing program 1 (id=2928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 20.617286158s ago: executing program 32 (id=2894): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000200000000000000085000000760000009500000000000000454c5d86f016a6d06f53016a2a23a6afa079ebccdf76c2e4c79b27eb08ffa821636b2e8480f1b07eb87316a3c2f141deb03aaef4941f0a334f7422441c0134ee35d82402bf64ce6f73e94d27cb9c44"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x82b}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x3, 0xff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0xffffffffffffff56, &(0x7f0000000400)}, 0x10) setsockopt$sock_attach_bpf(r1, 0x29, 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 14.832977181s ago: executing program 4 (id=2962): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tww'], 0xa) 13.804931437s ago: executing program 4 (id=2964): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x20880}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 9.186987602s ago: executing program 1 (id=2935): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="c6", 0x1}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000340)={'syzkaller1\x00', @remote}) r2 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r2, &(0x7f0000000ac0)={&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f00000009c0)=""/242, 0xf2}, 0x20) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x235a03, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020019f9ccd97829570000000000000100000d00000000000000"], 0x0, 0x5a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x100000000001}, 0x1001, 0x0, 0x1, 0x2, 0x0, 0x400, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000700)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="350795ae3d949420b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x2, 0x0, 0x0, 0x0, 0x80000000}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffede) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1e, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4806, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) socketpair(0x1e, 0x80000, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) 9.160556502s ago: executing program 4 (id=2968): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x3}, 0x828, 0x4, 0x0, 0xc, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x200000000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x21, &(0x7f0000000040), 0x4) 8.345265743s ago: executing program 1 (id=2956): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x169ba}], 0x1}, 0x4001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d02409819180179714ed0a6e1f0f755d8583da60f27c162dbba0706002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cece48c38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5ff01000000000000b69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b4073f300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b87234a30900000000000068133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf11211"], 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000000000002cd6000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="0219000902ffe800e4a17c45c856", 0xe}, {&(0x7f00000001c0)="e491", 0x2}], 0x2}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002b00)={r3, &(0x7f0000000540)="1e4a7a733f2c0dbc45a12726eeaab636cc3d61faf90d02d783047750550462a1eb73c1bef859f4e0e366889696d95f86810e1f5bddabf1230a46bd01d91721b13480b4dce9", &(0x7f0000001b00)=""/4096, 0x4}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 8.344854033s ago: executing program 4 (id=2957): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x5, 0xf, 0x5, 0x4, 0x0, 0xad5, 0x20, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7}, 0x10208, 0x6, 0x9b07, 0x4, 0xffff, 0x5, 0x6, 0x0, 0x89, 0x0, 0x9}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200001600000000000000000000000000000000000013"], 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180400000000000000000000009d313e33"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x3, 0x0, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x25, &(0x7f00000006c0)=ANY=[@ANYBLOB="18acceef227f8370b613d8e22e30dbae7d62ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000043aaf4ff0800000085000000cc000000180000000500000000000000ff7f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000327affff080000001867000004000000000000000400000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000800)='syzkaller\x00', 0x6, 0x2b, &(0x7f0000000840)=""/43, 0x40f00, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x4, 0x5, 0xac, 0xffffffff}, 0x10, 0x6f0b, r2, 0x5, &(0x7f0000000980), &(0x7f0000000a40)=[{0x1, 0x3, 0x7, 0x2}, {0x3, 0x1, 0x2, 0x3}, {0x4, 0x4, 0xa, 0x6}, {0x2, 0x4, 0x0, 0x4}, {0x4, 0x2, 0x5, 0x7}], 0x10, 0x9}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a2075f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x91}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300"/16, 0x10}, {&(0x7f0000001480)="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", 0xeb6}], 0x5}, 0x40000) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="996822ce3899d7", 0x7}], 0x1, &(0x7f0000000480)}, 0x844) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) 8.339433023s ago: executing program 0 (id=2970): socket$kcm(0xa, 0x2, 0x73) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4116, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x101611, 0x0, 0xfffffffe, 0x2, 0x5, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018", @ANYBLOB], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 7.811533676s ago: executing program 2 (id=2960): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.63838027s ago: executing program 2 (id=2961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7.518337173s ago: executing program 0 (id=2963): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e000000000000000100100000e"], 0xf0}, 0xfc40) 7.412043236s ago: executing program 2 (id=2965): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff}, 0x50) 7.203582741s ago: executing program 0 (id=2969): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}, 0x30004040) 7.203383301s ago: executing program 2 (id=2971): r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x5, 0x0, 0x13, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x6}, 0x4, 0x3, 0x0, 0x6, 0x7, 0xffff, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 7.140375973s ago: executing program 1 (id=2972): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x35, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200", @ANYRES32], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 7.036626375s ago: executing program 0 (id=2973): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000200d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 6.927046158s ago: executing program 4 (id=2974): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0xfffffffc, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x3, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e45", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x2}, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x80040, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) r3 = openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x1ff) 6.655409125s ago: executing program 0 (id=2975): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001040400060404009bbc7a46e3988285dcdf12f213e6f768fec601955fd80009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 6.655245945s ago: executing program 1 (id=2976): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x800000, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000080)=r1, 0x4) 6.191359197s ago: executing program 2 (id=2977): socket$kcm(0xa, 0x2, 0x73) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4116, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x101611, 0x0, 0xfffffffe, 0x2, 0x5, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018", @ANYBLOB], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 6.165542627s ago: executing program 0 (id=2978): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x300, 0x32, 0x0, 0x0) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.315765908s ago: executing program 2 (id=2981): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000680)={0x7}, 0x8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0xc}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc6, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x2c, 0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) 5.315578438s ago: executing program 5 (id=2937): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=2982): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) kernel console output (not intermixed with test programs): ttribute type 10 has an invalid length. [ 319.936790][ T9348] syz.3.1610[9348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.990190][ T9356] netlink: 'syz.2.1611': attribute type 21 has an invalid length. [ 320.148399][ T9356] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1611'. [ 320.159119][ T9356] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1611'. [ 320.492342][ T9373] netlink: 'syz.0.1617': attribute type 10 has an invalid length. [ 320.950345][ T9386] netlink: 'syz.3.1621': attribute type 16 has an invalid length. [ 320.958234][ T9386] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1621'. [ 321.101755][ T9390] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1623'. [ 321.142947][ T9390] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 321.911937][ T9413] netlink: 'syz.3.1630': attribute type 10 has an invalid length. [ 322.050614][ T9419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.051400][ T9423] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1635'. [ 322.336276][ T9428] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1636'. [ 322.364879][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 322.400151][ T9428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.465898][ T9437] netlink: 'syz.1.1638': attribute type 16 has an invalid length. [ 322.510532][ T9437] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1638'. [ 322.879551][ T9435] device pim6reg1 entered promiscuous mode [ 323.283725][ T9445] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1640'. [ 323.800528][ T9454] netlink: 'syz.2.1643': attribute type 4 has an invalid length. [ 324.601715][ T9468] netlink: 'syz.4.1649': attribute type 10 has an invalid length. [ 324.663961][ T9473] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1650'. [ 325.751566][ T9496] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1661'. [ 326.546326][ T9510] netlink: 'syz.3.1665': attribute type 10 has an invalid length. [ 326.830259][ T9518] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1669'. [ 328.510325][ T9557] netlink: 'syz.3.1679': attribute type 10 has an invalid length. [ 328.669976][ T9561] netlink: 'syz.1.1682': attribute type 27 has an invalid length. [ 328.750857][ T9561] netlink: 'syz.1.1682': attribute type 25 has an invalid length. [ 329.816324][ T9583] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1690'. [ 329.845149][ T9583] netlink: 207220 bytes leftover after parsing attributes in process `syz.3.1690'. [ 330.180520][ T9593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1692'. [ 330.293903][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.373931][ T9599] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.1693'. [ 330.402201][ T9598] delete_channel: no stack [ 330.407479][ T9596] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.421555][ T9596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.494153][ T9596] device bridge0 entered promiscuous mode [ 330.786370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.162173][ T9609] netlink: 'syz.2.1697': attribute type 10 has an invalid length. [ 331.177105][ T9615] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.1700'. [ 331.223571][ T9613] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1700'. [ 331.282348][ T9617] device batadv0 left promiscuous mode [ 331.290493][ T9617] bridge0: port 3(batadv0) entered disabled state [ 331.313832][ T9617] bridge0: port 2(hsr0) entered disabled state [ 331.506273][ T9617] device bridge_slave_0 left promiscuous mode [ 331.577962][ T9617] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.317234][ T9650] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1709'. [ 332.971449][ T9676] netlink: 'syz.4.1717': attribute type 10 has an invalid length. [ 333.170214][ T9682] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1721'. [ 333.289163][ T9681] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 333.342276][ T9681] device syzkaller0 entered promiscuous mode [ 335.660782][ T9700] bridge0: port 3(batadv0) entered disabled state [ 335.667685][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.696671][ T9702] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1726'. [ 335.724046][ T9703] bridge0: port 3(batadv0) entered blocking state [ 335.730761][ T9703] bridge0: port 3(batadv0) entered forwarding state [ 335.737558][ T9703] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.744796][ T9703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.772795][ T9703] device bridge0 entered promiscuous mode [ 335.783922][ T9705] tap0: tun_chr_ioctl cmd 1074025675 [ 335.796005][ T9705] tap0: persist enabled [ 335.948785][ T9711] netlink: 'syz.1.1730': attribute type 30 has an invalid length. [ 335.959162][ T9711] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1730'. [ 336.678247][ T9734] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1737'. [ 336.735189][ T144] tipc: Subscription rejected, illegal request [ 336.843331][ T9736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.009299][ T9753] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.1742'. [ 337.115647][ T9755] device syzkaller0 entered promiscuous mode [ 337.151098][ T9755] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 338.147104][ T9779] FAULT_INJECTION: forcing a failure. [ 338.147104][ T9779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.167006][ T9779] CPU: 1 PID: 9779 Comm: syz.3.1750 Not tainted syzkaller #0 [ 338.174429][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.184481][ T9779] Call Trace: [ 338.187754][ T9779] [ 338.191121][ T9779] dump_stack_lvl+0x188/0x250 [ 338.195800][ T9779] ? show_regs_print_info+0x20/0x20 [ 338.201008][ T9779] ? load_image+0x410/0x410 [ 338.205596][ T9779] ? __lock_acquire+0x7b50/0x7b50 [ 338.210609][ T9779] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 338.216924][ T9779] ? ktime_get_real_ts64+0x440/0x440 [ 338.222197][ T9779] should_fail+0x383/0x4b0 [ 338.226608][ T9779] _copy_from_user+0x2e/0x170 [ 338.231295][ T9779] __sys_bpf+0x26d/0x6f0 [ 338.235536][ T9779] ? bpf_link_show_fdinfo+0x380/0x380 [ 338.240936][ T9779] __x64_sys_bpf+0x78/0x90 [ 338.245369][ T9779] do_syscall_64+0x4c/0xa0 [ 338.249777][ T9779] ? clear_bhb_loop+0x30/0x80 [ 338.254472][ T9779] ? clear_bhb_loop+0x30/0x80 [ 338.259158][ T9779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 338.265051][ T9779] RIP: 0033:0x7f06a79fd159 [ 338.269483][ T9779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.289105][ T9779] RSP: 002b:00007f06a5c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 338.297531][ T9779] RAX: ffffffffffffffda RBX: 00007f06a7c84fa0 RCX: 00007f06a79fd159 [ 338.305505][ T9779] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 338.313502][ T9779] RBP: 00007f06a5c55090 R08: 0000000000000000 R09: 0000000000000000 [ 338.321479][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.329490][ T9779] R13: 00007f06a7c85038 R14: 00007f06a7c84fa0 R15: 00007ffc0ee03f88 [ 338.337505][ T9779] [ 339.212342][ T9797] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1766'. [ 339.286621][ T9808] bridge0: port 3(hsr0) entered disabled state [ 339.293021][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.387809][ T9810] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1756'. [ 339.464039][ T9815] bridge0: port 3(hsr0) entered blocking state [ 339.470847][ T9815] bridge0: port 3(hsr0) entered forwarding state [ 339.479720][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.487903][ T9815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.517034][ T9815] device bridge0 entered promiscuous mode [ 340.071379][ T9827] netlink: 'syz.4.1763': attribute type 10 has an invalid length. [ 340.355686][ T9838] netlink: 'syz.2.1770': attribute type 21 has an invalid length. [ 340.919935][ T9855] netlink: 'syz.1.1783': attribute type 16 has an invalid length. [ 341.241544][ T9855] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1783'. [ 341.321445][ T9854] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1774'. [ 342.326054][ T9886] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 343.639591][ T9897] netlink: 'syz.3.1790': attribute type 16 has an invalid length. [ 343.647892][ T9897] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1790'. [ 343.832899][ T9904] device pim6reg1 entered promiscuous mode [ 344.572280][ T9898] netlink: 'syz.0.1789': attribute type 2 has an invalid length. [ 345.040296][ T9928] netlink: 'syz.0.1796': attribute type 27 has an invalid length. [ 345.081284][ T9928] netlink: 'syz.0.1796': attribute type 4 has an invalid length. [ 345.098567][ T9928] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1796'. [ 346.135804][ T9957] netlink: 'syz.3.1805': attribute type 30 has an invalid length. [ 347.034676][ T9983] netlink: 'syz.1.1813': attribute type 10 has an invalid length. [ 347.341823][ T9986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1814'. [ 347.404905][ T9983] team0: Device gre0 is of different type [ 348.017767][ T9991] device syzkaller0 entered promiscuous mode [ 348.175069][ T9983] syz.1.1813 (9983) used greatest stack depth: 18200 bytes left [ 349.557818][T10008] netlink: 'syz.4.1818': attribute type 16 has an invalid length. [ 349.565847][T10008] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1818'. [ 350.135362][T10029] netlink: 'syz.3.1824': attribute type 10 has an invalid length. [ 350.912321][T10044] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1829'. [ 351.088954][T10034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1826'. [ 351.840804][T10060] netlink: 'syz.3.1832': attribute type 10 has an invalid length. [ 352.105664][T10066] netlink: 'syz.2.1834': attribute type 16 has an invalid length. [ 352.182918][T10066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1834'. [ 352.447642][T10063] device pim6reg1 entered promiscuous mode [ 354.178343][T10091] netlink: 'syz.4.1842': attribute type 21 has an invalid length. [ 354.533133][T10095] sctp: [Deprecated]: syz.3.1845 (pid 10095) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.533133][T10095] Use struct sctp_sack_info instead [ 354.678508][T10102] netlink: 'syz.4.1846': attribute type 10 has an invalid length. [ 354.840362][T10098] netlink: 'syz.0.1844': attribute type 10 has an invalid length. [ 355.012935][T10110] FAULT_INJECTION: forcing a failure. [ 355.012935][T10110] name failslab, interval 1, probability 0, space 0, times 0 [ 355.219676][T10110] CPU: 1 PID: 10110 Comm: syz.1.1850 Not tainted syzkaller #0 [ 355.227283][T10110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.237345][T10110] Call Trace: [ 355.240627][T10110] [ 355.243561][T10110] dump_stack_lvl+0x188/0x250 [ 355.248302][T10110] ? show_regs_print_info+0x20/0x20 [ 355.253512][T10110] ? load_image+0x410/0x410 [ 355.258163][T10110] ? __might_sleep+0xf0/0xf0 [ 355.262799][T10110] ? __lock_acquire+0x7b50/0x7b50 [ 355.267865][T10110] should_fail+0x383/0x4b0 [ 355.272330][T10110] should_failslab+0x5/0x20 [ 355.276908][T10110] slab_pre_alloc_hook+0x51/0xc0 [ 355.281892][T10110] __kmalloc_node_track_caller+0x68/0x3a0 [ 355.287641][T10110] ? netlink_sendmsg+0x654/0xbe0 [ 355.292642][T10110] ? __alloc_skb+0xf4/0x750 [ 355.297157][T10110] ? netlink_sendmsg+0x654/0xbe0 [ 355.302102][T10110] __alloc_skb+0x22c/0x750 [ 355.306526][T10110] netlink_sendmsg+0x654/0xbe0 [ 355.311389][T10110] ? netlink_getsockopt+0x570/0x570 [ 355.316585][T10110] ? aa_sock_msg_perm+0x94/0x150 [ 355.321567][T10110] ? apparmor_socket_sendmsg+0x88/0x230 [ 355.327112][T10110] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 355.332424][T10110] ? security_socket_sendmsg+0x7c/0xa0 [ 355.337919][T10110] ? netlink_getsockopt+0x570/0x570 [ 355.343138][T10110] ____sys_sendmsg+0x5be/0x8f0 [ 355.347944][T10110] ? __sys_sendmsg_sock+0x30/0x30 [ 355.352979][T10110] ? import_iovec+0x6f/0xa0 [ 355.357582][T10110] ___sys_sendmsg+0x236/0x2e0 [ 355.362272][T10110] ? __sys_sendmsg+0x290/0x290 [ 355.367073][T10110] __se_sys_sendmsg+0x1b7/0x2a0 [ 355.371929][T10110] ? __x64_sys_sendmsg+0x80/0x80 [ 355.376878][T10110] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 355.382870][T10110] ? lockdep_hardirqs_on+0x94/0x140 [ 355.388112][T10110] do_syscall_64+0x4c/0xa0 [ 355.392616][T10110] ? clear_bhb_loop+0x30/0x80 [ 355.397349][T10110] ? clear_bhb_loop+0x30/0x80 [ 355.402030][T10110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 355.407938][T10110] RIP: 0033:0x7f5ae1a07159 [ 355.412363][T10110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.431970][T10110] RSP: 002b:00007f5adfc5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.440390][T10110] RAX: ffffffffffffffda RBX: 00007f5ae1c8efa0 RCX: 00007f5ae1a07159 [ 355.448450][T10110] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 355.456426][T10110] RBP: 00007f5adfc5f090 R08: 0000000000000000 R09: 0000000000000000 [ 355.464400][T10110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.472372][T10110] R13: 00007f5ae1c8f038 R14: 00007f5ae1c8efa0 R15: 00007ffec05117d8 [ 355.480400][T10110] [ 356.279091][T10134] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 356.344314][T10137] netlink: 'syz.4.1858': attribute type 16 has an invalid length. [ 356.373017][T10137] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1858'. [ 356.619018][T10137] device pim6reg1 entered promiscuous mode [ 357.385164][T10149] device sit0 left promiscuous mode [ 357.471702][T10153] device sit0 entered promiscuous mode [ 357.905515][T10159] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1863'. [ 358.072084][T10170] netlink: 'syz.2.1866': attribute type 10 has an invalid length. [ 358.208723][T10175] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1868'. [ 358.454444][T10184] netlink: 'syz.0.1872': attribute type 21 has an invalid length. [ 358.480359][T10184] netlink: 'syz.0.1872': attribute type 22 has an invalid length. [ 358.489052][T10184] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.1872'. [ 358.997500][T10192] netlink: 'syz.2.1875': attribute type 10 has an invalid length. [ 359.048464][T10192] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1875'. [ 359.079869][T10192] device batadv_slave_1 entered promiscuous mode [ 359.099357][T10192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.126979][T10192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.219623][T10201] netlink: 'syz.1.1878': attribute type 10 has an invalid length. [ 359.318066][T10203] device syzkaller0 entered promiscuous mode [ 360.024860][T10227] netlink: 'syz.1.1885': attribute type 10 has an invalid length. [ 360.050108][T10227] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1885'. [ 360.407201][T10234] tap0: tun_chr_ioctl cmd 1074025677 [ 360.480006][T10234] tap0: linktype set to 805 [ 361.787300][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'. [ 361.873221][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 361.966287][T10254] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1893'. [ 362.009833][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 362.089145][T10254] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1893'. [ 362.185139][T10268] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1896'. [ 362.355256][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 362.378964][T10254] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1893'. [ 363.045069][T10294] sctp: [Deprecated]: syz.1.1905 (pid 10294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.045069][T10294] Use struct sctp_sack_info instead [ 363.615313][T10316] FAULT_INJECTION: forcing a failure. [ 363.615313][T10316] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 363.661218][T10316] CPU: 1 PID: 10316 Comm: syz.1.1912 Not tainted syzkaller #0 [ 363.668744][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.678864][T10316] Call Trace: [ 363.682159][T10316] [ 363.685106][T10316] dump_stack_lvl+0x188/0x250 [ 363.689894][T10316] ? show_regs_print_info+0x20/0x20 [ 363.695118][T10316] ? load_image+0x410/0x410 [ 363.699646][T10316] ? __lock_acquire+0x7b50/0x7b50 [ 363.704778][T10316] ? slab_post_alloc_hook+0x4c/0x380 [ 363.710176][T10316] ? __alloc_skb+0xf4/0x750 [ 363.714809][T10316] ? alloc_skb_with_frags+0xa7/0x720 [ 363.720140][T10316] ? sock_alloc_send_pskb+0x87f/0x9a0 [ 363.725538][T10316] should_fail+0x383/0x4b0 [ 363.729988][T10316] prepare_alloc_pages+0x1e3/0x5b0 [ 363.735219][T10316] __alloc_pages+0x11b/0x480 [ 363.739831][T10316] ? zone_statistics+0x170/0x170 [ 363.744806][T10316] kmalloc_large_node+0x7d/0x1a0 [ 363.749850][T10316] __kmalloc_node_track_caller+0x219/0x3a0 [ 363.755679][T10316] ? alloc_skb_with_frags+0xa7/0x720 [ 363.761069][T10316] ? __alloc_skb+0xf4/0x750 [ 363.765616][T10316] ? alloc_skb_with_frags+0xa7/0x720 [ 363.770915][T10316] __alloc_skb+0x22c/0x750 [ 363.775358][T10316] alloc_skb_with_frags+0xa7/0x720 [ 363.780485][T10316] ? mark_lock+0x94/0x320 [ 363.784849][T10316] sock_alloc_send_pskb+0x87f/0x9a0 [ 363.790077][T10316] ? sock_kzfree_s+0x50/0x50 [ 363.794703][T10316] tun_get_user+0x8f7/0x3b60 [ 363.799378][T10316] ? tun_ring_recv+0xc90/0xc90 [ 363.804163][T10316] ? rcu_lock_release+0x5/0x20 [ 363.808944][T10316] ? __lock_acquire+0x7b50/0x7b50 [ 363.814100][T10316] tun_chr_write_iter+0x112/0x1e0 [ 363.819144][T10316] vfs_write+0x748/0xd70 [ 363.823454][T10316] ? file_end_write+0x250/0x250 [ 363.828324][T10316] ? __fget_files+0x402/0x470 [ 363.833042][T10316] ? __fdget_pos+0x1e2/0x370 [ 363.837649][T10316] ? ksys_write+0x70/0x260 [ 363.842253][T10316] ksys_write+0x153/0x260 [ 363.846627][T10316] ? __ia32_sys_read+0x80/0x80 [ 363.851407][T10316] ? lockdep_hardirqs_on+0x94/0x140 [ 363.856620][T10316] do_syscall_64+0x4c/0xa0 [ 363.861155][T10316] ? clear_bhb_loop+0x30/0x80 [ 363.865853][T10316] ? clear_bhb_loop+0x30/0x80 [ 363.870568][T10316] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.876504][T10316] RIP: 0033:0x7f5ae1a07159 [ 363.880938][T10316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.900567][T10316] RSP: 002b:00007f5adfc5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 363.909008][T10316] RAX: ffffffffffffffda RBX: 00007f5ae1c8efa0 RCX: 00007f5ae1a07159 [ 363.916990][T10316] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 363.925073][T10316] RBP: 00007f5adfc5f090 R08: 0000000000000000 R09: 0000000000000000 [ 363.933229][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.941391][T10316] R13: 00007f5ae1c8f038 R14: 00007f5ae1c8efa0 R15: 00007ffec05117d8 [ 363.949390][T10316] [ 364.215341][T10324] FAULT_INJECTION: forcing a failure. [ 364.215341][T10324] name failslab, interval 1, probability 0, space 0, times 0 [ 364.239574][T10324] CPU: 0 PID: 10324 Comm: syz.1.1914 Not tainted syzkaller #0 [ 364.247170][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.257238][T10324] Call Trace: [ 364.260520][T10324] [ 364.263552][T10324] dump_stack_lvl+0x188/0x250 [ 364.268243][T10324] ? show_regs_print_info+0x20/0x20 [ 364.273441][T10324] ? load_image+0x410/0x410 [ 364.278124][T10324] ? __might_sleep+0xf0/0xf0 [ 364.282715][T10324] ? __lock_acquire+0x7b50/0x7b50 [ 364.287833][T10324] should_fail+0x383/0x4b0 [ 364.292259][T10324] should_failslab+0x5/0x20 [ 364.296761][T10324] slab_pre_alloc_hook+0x51/0xc0 [ 364.301890][T10324] kmem_cache_alloc_trace+0x47/0x290 [ 364.307196][T10324] ? create_filter_start+0xb1/0x2c0 [ 364.312466][T10324] create_filter_start+0xb1/0x2c0 [ 364.317500][T10324] ftrace_profile_set_filter+0xc8/0x280 [ 364.323079][T10324] perf_ioctl+0xd8f/0x2300 [ 364.327522][T10324] ? perf_poll+0x1b0/0x1b0 [ 364.331983][T10324] ? bpf_lsm_file_ioctl+0x5/0x10 [ 364.336919][T10324] ? security_file_ioctl+0x7c/0xa0 [ 364.342029][T10324] ? perf_poll+0x1b0/0x1b0 [ 364.346467][T10324] __se_sys_ioctl+0xfa/0x170 [ 364.351102][T10324] do_syscall_64+0x4c/0xa0 [ 364.355518][T10324] ? clear_bhb_loop+0x30/0x80 [ 364.360197][T10324] ? clear_bhb_loop+0x30/0x80 [ 364.364877][T10324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 364.370778][T10324] RIP: 0033:0x7f5ae1a07159 [ 364.375199][T10324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.394892][T10324] RSP: 002b:00007f5adfc5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.403312][T10324] RAX: ffffffffffffffda RBX: 00007f5ae1c8efa0 RCX: 00007f5ae1a07159 [ 364.411289][T10324] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000003 [ 364.419262][T10324] RBP: 00007f5adfc5f090 R08: 0000000000000000 R09: 0000000000000000 [ 364.427236][T10324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.435217][T10324] R13: 00007f5ae1c8f038 R14: 00007f5ae1c8efa0 R15: 00007ffec05117d8 [ 364.443302][T10324] [ 364.705973][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1919'. [ 364.754321][T10330] netlink: 'syz.4.1917': attribute type 16 has an invalid length. [ 364.776529][T10330] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1917'. [ 366.577551][T10384] netlink: 'syz.2.1936': attribute type 16 has an invalid length. [ 366.686351][T10384] device pim6reg1 entered promiscuous mode [ 367.194423][T10406] __nla_validate_parse: 3 callbacks suppressed [ 367.194440][T10406] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1943'. [ 367.357013][T10400] device sit0 entered promiscuous mode [ 367.384066][T10400] FAULT_INJECTION: forcing a failure. [ 367.384066][T10400] name failslab, interval 1, probability 0, space 0, times 0 [ 367.428767][T10400] CPU: 1 PID: 10400 Comm: syz.0.1940 Not tainted syzkaller #0 [ 367.436299][T10400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.436678][T10421] FAULT_INJECTION: forcing a failure. [ 367.436678][T10421] name failslab, interval 1, probability 0, space 0, times 0 [ 367.446461][T10400] Call Trace: [ 367.446472][T10400] [ 367.446481][T10400] dump_stack_lvl+0x188/0x250 [ 367.446515][T10400] ? show_regs_print_info+0x20/0x20 [ 367.446538][T10400] ? load_image+0x410/0x410 [ 367.446576][T10400] should_fail+0x383/0x4b0 [ 367.446605][T10400] should_failslab+0x5/0x20 [ 367.446623][T10400] slab_pre_alloc_hook+0x51/0xc0 [ 367.446647][T10400] __kmalloc_node_track_caller+0x68/0x3a0 [ 367.446666][T10400] ? rtmsg_ifinfo_build_skb+0x80/0x180 [ 367.505417][T10400] ? __alloc_skb+0xf4/0x750 [ 367.509944][T10400] ? rtmsg_ifinfo_build_skb+0x80/0x180 [ 367.515441][T10400] __alloc_skb+0x22c/0x750 [ 367.519878][T10400] rtmsg_ifinfo_build_skb+0x80/0x180 [ 367.525204][T10400] rtmsg_ifinfo+0x71/0x120 [ 367.529742][T10400] __dev_notify_flags+0xdc/0x300 [ 367.534844][T10400] ? __dev_change_flags+0x6a0/0x6a0 [ 367.540146][T10400] ? __dev_change_flags+0x518/0x6a0 [ 367.545465][T10400] ? dev_get_flags+0x1c0/0x1c0 [ 367.550243][T10400] ? __mutex_lock_common+0x147b/0x2400 [ 367.555728][T10400] dev_change_flags+0xda/0x1a0 [ 367.560560][T10400] dev_ifsioc+0x130/0xd50 [ 367.564981][T10400] ? dev_ioctl+0xe30/0xe30 [ 367.569597][T10400] ? full_name_hash+0x8e/0xe0 [ 367.574305][T10400] dev_ioctl+0x545/0xe30 [ 367.578562][T10400] ? _copy_from_user+0x111/0x170 [ 367.583563][T10400] sock_do_ioctl+0x245/0x320 [ 367.588184][T10400] ? sock_show_fdinfo+0xb0/0xb0 [ 367.593079][T10400] sock_ioctl+0x48a/0x700 [ 367.597426][T10400] ? sock_poll+0x420/0x420 [ 367.601891][T10400] ? bpf_lsm_file_ioctl+0x5/0x10 [ 367.606840][T10400] ? security_file_ioctl+0x7c/0xa0 [ 367.611967][T10400] ? sock_poll+0x420/0x420 [ 367.616395][T10400] __se_sys_ioctl+0xfa/0x170 [ 367.621000][T10400] do_syscall_64+0x4c/0xa0 [ 367.625431][T10400] ? clear_bhb_loop+0x30/0x80 [ 367.630124][T10400] ? clear_bhb_loop+0x30/0x80 [ 367.634817][T10400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 367.640747][T10400] RIP: 0033:0x7fa4db7ec159 [ 367.645190][T10400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.665508][T10400] RSP: 002b:00007fa4d9a44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.673937][T10400] RAX: ffffffffffffffda RBX: 00007fa4dba73fa0 RCX: 00007fa4db7ec159 [ 367.681922][T10400] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000008 [ 367.689904][T10400] RBP: 00007fa4d9a44090 R08: 0000000000000000 R09: 0000000000000000 [ 367.698075][T10400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.706165][T10400] R13: 00007fa4dba74038 R14: 00007fa4dba73fa0 R15: 00007fffd38c2548 [ 367.714208][T10400] [ 367.717265][T10421] CPU: 0 PID: 10421 Comm: syz.3.1945 Not tainted syzkaller #0 [ 367.724752][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.734836][T10421] Call Trace: [ 367.738206][T10421] [ 367.741155][T10421] dump_stack_lvl+0x188/0x250 [ 367.745901][T10421] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 367.752065][T10421] ? show_regs_print_info+0x20/0x20 [ 367.757271][T10421] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 367.763443][T10421] should_fail+0x383/0x4b0 [ 367.767975][T10421] should_failslab+0x5/0x20 [ 367.772480][T10421] slab_pre_alloc_hook+0x51/0xc0 [ 367.777595][T10421] ? skb_clone+0x1bd/0x350 [ 367.782017][T10421] kmem_cache_alloc+0x3d/0x280 [ 367.786806][T10421] skb_clone+0x1bd/0x350 [ 367.791055][T10421] ? dev_queue_xmit_nit+0x1f2/0xae0 [ 367.796366][T10421] dev_queue_xmit_nit+0x2db/0xae0 [ 367.801413][T10421] dev_hard_start_xmit+0x140/0x7d0 [ 367.806546][T10421] __dev_queue_xmit+0x195d/0x2e50 [ 367.811588][T10421] ? dev_queue_xmit+0x20/0x20 [ 367.816357][T10421] ? memcpy+0x3c/0x60 [ 367.820394][T10421] ? __copy_skb_header+0x3ba/0x4f0 [ 367.825510][T10421] ? __skb_clone+0x446/0x6c0 [ 367.830106][T10421] ? skb_clone+0x1f1/0x350 [ 367.834545][T10421] __netlink_deliver_tap+0x522/0x7c0 [ 367.839873][T10421] netlink_deliver_tap+0x16c/0x180 [ 367.845006][T10421] netlink_unicast+0x759/0x940 [ 367.849808][T10421] netlink_sendmsg+0x8ba/0xbe0 [ 367.854591][T10421] ? netlink_getsockopt+0x570/0x570 [ 367.859799][T10421] ? aa_sock_msg_perm+0x94/0x150 [ 367.864742][T10421] ? apparmor_socket_sendmsg+0x88/0x230 [ 367.870289][T10421] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 367.875575][T10421] ? security_socket_sendmsg+0x7c/0xa0 [ 367.881043][T10421] ? netlink_getsockopt+0x570/0x570 [ 367.886246][T10421] ____sys_sendmsg+0x5be/0x8f0 [ 367.891020][T10421] ? __sys_sendmsg_sock+0x30/0x30 [ 367.896056][T10421] ? import_iovec+0x6f/0xa0 [ 367.900580][T10421] ___sys_sendmsg+0x236/0x2e0 [ 367.905292][T10421] ? __sys_sendmsg+0x290/0x290 [ 367.910105][T10421] __se_sys_sendmsg+0x1b7/0x2a0 [ 367.914971][T10421] ? __x64_sys_sendmsg+0x80/0x80 [ 367.919928][T10421] ? syscall_enter_from_user_mode+0x2a/0x70 [ 367.925922][T10421] do_syscall_64+0x4c/0xa0 [ 367.930336][T10421] ? clear_bhb_loop+0x30/0x80 [ 367.935012][T10421] ? clear_bhb_loop+0x30/0x80 [ 367.939697][T10421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 367.945590][T10421] RIP: 0033:0x7f06a79fd159 [ 367.950017][T10421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.969632][T10421] RSP: 002b:00007f06a5c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.978059][T10421] RAX: ffffffffffffffda RBX: 00007f06a7c84fa0 RCX: 00007f06a79fd159 [ 367.986118][T10421] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 367.994178][T10421] RBP: 00007f06a5c55090 R08: 0000000000000000 R09: 0000000000000000 [ 368.002177][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.010236][T10421] R13: 00007f06a7c85038 R14: 00007f06a7c84fa0 R15: 00007ffc0ee03f88 [ 368.018244][T10421] [ 369.748076][T10466] FAULT_INJECTION: forcing a failure. [ 369.748076][T10466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.768236][T10466] CPU: 1 PID: 10466 Comm: syz.2.1957 Not tainted syzkaller #0 [ 369.775761][T10466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.785941][T10466] Call Trace: [ 369.789252][T10466] [ 369.792207][T10466] dump_stack_lvl+0x188/0x250 [ 369.796919][T10466] ? show_regs_print_info+0x20/0x20 [ 369.802142][T10466] ? load_image+0x410/0x410 [ 369.806692][T10466] ? __lock_acquire+0x7b50/0x7b50 [ 369.811814][T10466] should_fail+0x383/0x4b0 [ 369.816267][T10466] _copy_from_iter+0x234/0x1160 [ 369.821156][T10466] ? __lock_acquire+0x7b50/0x7b50 [ 369.826232][T10466] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 369.831634][T10466] ? __virt_addr_valid+0x3c6/0x470 [ 369.836964][T10466] ? __phys_addr_symbol+0x2b/0x70 [ 369.842015][T10466] ? __check_object_size+0x30c/0x410 [ 369.847403][T10466] pfkey_sendmsg+0x1fc/0x1130 [ 369.852153][T10466] ? trace_event_raw_event_lock+0x250/0x250 [ 369.858085][T10466] ? pfkey_release+0x340/0x340 [ 369.862882][T10466] ? aa_sk_perm+0x7dc/0x910 [ 369.867415][T10466] ? aa_af_perm+0x340/0x340 [ 369.871949][T10466] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 369.878435][T10466] ? aa_sock_msg_perm+0x94/0x150 [ 369.883401][T10466] ? apparmor_socket_sendmsg+0x88/0x230 [ 369.888978][T10466] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 369.894290][T10466] ? security_socket_sendmsg+0x7c/0xa0 [ 369.899882][T10466] ? pfkey_release+0x340/0x340 [ 369.904676][T10466] ____sys_sendmsg+0x5be/0x8f0 [ 369.909477][T10466] ? __sys_sendmsg_sock+0x30/0x30 [ 369.914539][T10466] ? import_iovec+0x6f/0xa0 [ 369.919069][T10466] ___sys_sendmsg+0x236/0x2e0 [ 369.923790][T10466] ? __sys_sendmsg+0x290/0x290 [ 369.928867][T10466] ? trace_event_raw_event_lock+0x250/0x250 [ 369.934900][T10466] __se_sys_sendmsg+0x1b7/0x2a0 [ 369.939776][T10466] ? __x64_sys_sendmsg+0x80/0x80 [ 369.944754][T10466] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 369.950958][T10466] ? lockdep_hardirqs_on+0x94/0x140 [ 369.956376][T10466] do_syscall_64+0x4c/0xa0 [ 369.960814][T10466] ? clear_bhb_loop+0x30/0x80 [ 369.965598][T10466] ? clear_bhb_loop+0x30/0x80 [ 369.970299][T10466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 369.976526][T10466] RIP: 0033:0x7fe904d7b159 [ 369.981066][T10466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.001056][T10466] RSP: 002b:00007fe902fd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.009590][T10466] RAX: ffffffffffffffda RBX: 00007fe905002fa0 RCX: 00007fe904d7b159 [ 370.017761][T10466] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 370.025755][T10466] RBP: 00007fe902fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 370.033747][T10466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.041869][T10466] R13: 00007fe905003038 R14: 00007fe905002fa0 R15: 00007ffd391b0238 [ 370.050144][T10466] [ 370.238543][T10479] netlink: 'syz.1.1961': attribute type 9 has an invalid length. [ 371.315255][T10504] netlink: 'syz.3.1970': attribute type 3 has an invalid length. [ 371.359810][T10504] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1970'. [ 373.351750][T10613] netlink: 'syz.4.1985': attribute type 29 has an invalid length. [ 373.477057][T10613] netlink: 'syz.4.1985': attribute type 29 has an invalid length. [ 373.615904][T10616] netlink: 'syz.4.1985': attribute type 29 has an invalid length. [ 373.981083][T10617] netlink: 'syz.4.1985': attribute type 29 has an invalid length. [ 374.654332][T10629] netlink: 'syz.0.1990': attribute type 29 has an invalid length. [ 374.744820][T10629] netlink: 'syz.0.1990': attribute type 29 has an invalid length. [ 374.834466][T10633] netlink: 'syz.0.1990': attribute type 29 has an invalid length. [ 375.515457][T10664] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2001'. [ 375.574043][T10669] netlink: 'syz.0.2002': attribute type 1 has an invalid length. [ 375.590575][T10669] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2002'. [ 376.147974][T10692] netlink: 'syz.0.2006': attribute type 3 has an invalid length. [ 376.301771][T10692] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2006'. [ 376.935615][T10699] netlink: 'syz.3.2009': attribute type 16 has an invalid length. [ 377.160667][T10699] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2009'. [ 377.461225][T10716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2013'. [ 377.956539][T10734] netlink: 'syz.0.2019': attribute type 3 has an invalid length. [ 377.978172][T10734] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2019'. [ 378.198077][T10740] netlink: 195612 bytes leftover after parsing attributes in process `syz.4.2021'. [ 378.219594][T10740] netlink: 'syz.4.2021': attribute type 1 has an invalid length. [ 378.227444][T10740] netlink: 'syz.4.2021': attribute type 2 has an invalid length. [ 378.251521][T10740] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2021'. [ 378.547586][T10742] device syzkaller0 entered promiscuous mode [ 378.613372][T10747] netlink: 166 bytes leftover after parsing attributes in process `syz.2.2023'. [ 378.780871][T10754] device syzkaller0 entered promiscuous mode [ 379.045360][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.052134][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.375200][T10772] netlink: 'syz.2.2028': attribute type 16 has an invalid length. [ 379.390402][T10772] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2028'. [ 379.644529][T10768] device pim6reg1 entered promiscuous mode [ 379.672886][T10780] netlink: 'syz.3.2032': attribute type 3 has an invalid length. [ 380.191549][T10784] device syzkaller0 entered promiscuous mode [ 380.575412][T10797] netlink: 'syz.1.2038': attribute type 10 has an invalid length. [ 380.679029][T10799] netlink: 'syz.0.2037': attribute type 3 has an invalid length. [ 380.700452][T10799] __nla_validate_parse: 1 callbacks suppressed [ 380.700472][T10799] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2037'. [ 381.053045][ T3061] tipc: Subscription rejected, illegal request [ 381.735452][T10826] netlink: 'syz.1.2045': attribute type 3 has an invalid length. [ 381.791181][T10826] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2045'. [ 381.880624][T10832] FAULT_INJECTION: forcing a failure. [ 381.880624][T10832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.908871][T10832] CPU: 0 PID: 10832 Comm: syz.3.2049 Not tainted syzkaller #0 [ 381.916477][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.926554][T10832] Call Trace: [ 381.929856][T10832] [ 381.932800][T10832] dump_stack_lvl+0x188/0x250 [ 381.937509][T10832] ? show_regs_print_info+0x20/0x20 [ 381.942726][T10832] ? load_image+0x410/0x410 [ 381.947257][T10832] ? __lock_acquire+0x7b50/0x7b50 [ 381.952324][T10832] should_fail+0x383/0x4b0 [ 381.956893][T10832] _copy_from_user+0x2e/0x170 [ 381.961619][T10832] __copy_msghdr_from_user+0xc9/0x630 [ 381.967114][T10832] ? verify_lock_unused+0x140/0x140 [ 381.972629][T10832] ? mark_lock+0x94/0x320 [ 381.976995][T10832] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 381.982401][T10832] ? __lock_acquire+0x13dc/0x7b50 [ 381.987498][T10832] ___sys_sendmsg+0x19a/0x2e0 [ 381.992523][T10832] ? __sys_sendmsg+0x290/0x290 [ 381.997464][T10832] __se_sys_sendmsg+0x1b7/0x2a0 [ 382.002361][T10832] ? __x64_sys_sendmsg+0x80/0x80 [ 382.007542][T10832] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 382.013837][T10832] ? lockdep_hardirqs_on+0x94/0x140 [ 382.019346][T10832] do_syscall_64+0x4c/0xa0 [ 382.023786][T10832] ? clear_bhb_loop+0x30/0x80 [ 382.028495][T10832] ? clear_bhb_loop+0x30/0x80 [ 382.033454][T10832] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.039540][T10832] RIP: 0033:0x7f06a79fd159 [ 382.043978][T10832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.063852][T10832] RSP: 002b:00007f06a5c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.072493][T10832] RAX: ffffffffffffffda RBX: 00007f06a7c84fa0 RCX: 00007f06a79fd159 [ 382.080496][T10832] RDX: 0000000024040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 382.088621][T10832] RBP: 00007f06a5c55090 R08: 0000000000000000 R09: 0000000000000000 [ 382.093585][T10836] netlink: 166 bytes leftover after parsing attributes in process `syz.0.2051'. [ 382.096615][T10832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.096633][T10832] R13: 00007f06a7c85038 R14: 00007f06a7c84fa0 R15: 00007ffc0ee03f88 [ 382.096663][T10832] [ 382.284417][T10837] netlink: 'syz.2.2050': attribute type 10 has an invalid length. [ 382.554926][T10850] netlink: 'syz.1.2055': attribute type 3 has an invalid length. [ 382.640569][T10850] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2055'. [ 383.363924][T10873] netlink: 'syz.1.2061': attribute type 16 has an invalid length. [ 383.392287][T10873] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2061'. [ 383.415154][T10876] netlink: 'syz.2.2064': attribute type 1 has an invalid length. [ 383.457011][T10876] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2064'. [ 383.481222][T10868] device pim6reg1 entered promiscuous mode [ 383.774030][T10883] FAULT_INJECTION: forcing a failure. [ 383.774030][T10883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.799899][T10883] CPU: 0 PID: 10883 Comm: syz.4.2066 Not tainted syzkaller #0 [ 383.807515][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.817721][T10883] Call Trace: [ 383.821042][T10883] [ 383.824007][T10883] dump_stack_lvl+0x188/0x250 [ 383.828734][T10883] ? show_regs_print_info+0x20/0x20 [ 383.834130][T10883] ? load_image+0x410/0x410 [ 383.838694][T10883] ? __lock_acquire+0x7b50/0x7b50 [ 383.843775][T10883] should_fail+0x383/0x4b0 [ 383.848322][T10883] _copy_to_user+0x2e/0x130 [ 383.852860][T10883] simple_read_from_buffer+0xe3/0x150 [ 383.858341][T10883] proc_fail_nth_read+0x1a6/0x220 [ 383.863531][T10883] ? proc_fault_inject_write+0x310/0x310 [ 383.869204][T10883] ? fsnotify_perm+0x254/0x560 [ 383.874006][T10883] ? proc_fault_inject_write+0x310/0x310 [ 383.879664][T10883] vfs_read+0x2ff/0xd50 [ 383.883905][T10883] ? __lock_acquire+0x7b50/0x7b50 [ 383.889053][T10883] ? kernel_read+0x1e0/0x1e0 [ 383.893696][T10883] ? mutex_lock_nested+0x17/0x20 [ 383.898669][T10883] ? __fdget_pos+0x2bf/0x370 [ 383.903299][T10883] ? ksys_read+0x70/0x260 [ 383.907765][T10883] ksys_read+0x153/0x260 [ 383.912133][T10883] ? vfs_write+0xd70/0xd70 [ 383.916593][T10883] ? syscall_enter_from_user_mode+0x2a/0x70 [ 383.922528][T10883] do_syscall_64+0x4c/0xa0 [ 383.926973][T10883] ? clear_bhb_loop+0x30/0x80 [ 383.931683][T10883] ? clear_bhb_loop+0x30/0x80 [ 383.936391][T10883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 383.942315][T10883] RIP: 0033:0x7f3b2172a98e [ 383.946846][T10883] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 383.966607][T10883] RSP: 002b:00007f3b1f9c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.975068][T10883] RAX: ffffffffffffffda RBX: 00007f3b1f9c26c0 RCX: 00007f3b2172a98e [ 383.983151][T10883] RDX: 000000000000000f RSI: 00007f3b1f9c20a0 RDI: 000000000000000e [ 383.991280][T10883] RBP: 00007f3b1f9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 383.999281][T10883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.007552][T10883] R13: 00007f3b219f2038 R14: 00007f3b219f1fa0 R15: 00007ffe23fab4e8 [ 384.015578][T10883] [ 384.575982][T10903] netlink: 'syz.4.2069': attribute type 10 has an invalid length. [ 384.732594][T10904] netlink: 'syz.3.2071': attribute type 3 has an invalid length. [ 384.745288][T10904] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2071'. [ 385.005724][T10912] netlink: 'syz.4.2075': attribute type 13 has an invalid length. [ 386.121929][T10941] netlink: 'syz.3.2085': attribute type 10 has an invalid length. [ 386.426350][T10958] netlink: 'syz.2.2088': attribute type 3 has an invalid length. [ 386.460870][T10958] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2088'. [ 386.525836][T10950] netlink: 'syz.0.2097': attribute type 10 has an invalid length. [ 386.955840][T10978] netlink: 'syz.4.2094': attribute type 16 has an invalid length. [ 386.964418][T10978] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2094'. [ 387.032834][T10973] device pim6reg1 entered promiscuous mode [ 388.616237][T11016] netlink: 'syz.3.2107': attribute type 3 has an invalid length. [ 388.624073][T11014] netlink: 'syz.2.2108': attribute type 10 has an invalid length. [ 388.650758][T11016] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2107'. [ 388.805597][T11018] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2109'. [ 388.897184][T11018] netlink: 'syz.1.2109': attribute type 3 has an invalid length. [ 388.942030][T11018] netlink: 'syz.1.2109': attribute type 4 has an invalid length. [ 389.020029][T11018] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.2109'. [ 389.545673][T11023] netlink: 'syz.2.2110': attribute type 9 has an invalid length. [ 389.772125][T11023] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2110'. [ 390.230734][T11044] netlink: 'syz.0.2116': attribute type 16 has an invalid length. [ 390.325285][T11044] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2116'. [ 390.424094][T11048] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2118'. [ 390.533173][T11045] device pim6reg1 entered promiscuous mode [ 390.977595][T11065] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2121'. [ 391.825063][T11093] validate_nla: 2 callbacks suppressed [ 391.825103][T11093] netlink: 'syz.1.2130': attribute type 10 has an invalid length. [ 392.475405][T11093] team0: Device vxcan0 is of different type [ 392.662556][T11108] netlink: 195612 bytes leftover after parsing attributes in process `syz.1.2136'. [ 392.725559][T11108] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 392.803040][T11111] netlink: 12527 bytes leftover after parsing attributes in process `syz.1.2136'. [ 392.847717][T11108] netlink: 'syz.1.2136': attribute type 2 has an invalid length. [ 392.884763][T11118] netlink: 'syz.3.2137': attribute type 3 has an invalid length. [ 392.897335][T11119] netlink: 'syz.4.2140': attribute type 10 has an invalid length. [ 392.915153][T11108] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2136'. [ 392.920463][T11118] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2137'. [ 392.936874][T11119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2140'. [ 394.057420][T11136] netlink: 'syz.1.2145': attribute type 16 has an invalid length. [ 394.065725][T11136] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2145'. [ 394.697323][T11158] netlink: 'syz.1.2151': attribute type 3 has an invalid length. [ 394.728362][T11158] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2151'. [ 395.117789][T11168] netlink: 'syz.1.2155': attribute type 3 has an invalid length. [ 395.172912][T11168] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2155'. [ 395.964349][T11188] netlink: 'syz.3.2160': attribute type 16 has an invalid length. [ 395.987913][T11188] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2160'. [ 398.385097][T11231] netlink: 'syz.3.2175': attribute type 10 has an invalid length. [ 398.527068][T11238] device pim6reg1 entered promiscuous mode [ 399.253171][T11257] netlink: 'syz.0.2182': attribute type 3 has an invalid length. [ 399.329730][T11257] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2182'. [ 401.077292][T11293] netlink: 'syz.3.2195': attribute type 3 has an invalid length. [ 401.149645][T11293] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2195'. [ 401.280673][T11292] netlink: 65043 bytes leftover after parsing attributes in process `syz.1.2194'. [ 401.580560][T11308] netlink: 56731 bytes leftover after parsing attributes in process `syz.2.2199'. [ 402.134531][T11315] device pim6reg1 entered promiscuous mode [ 402.350654][T11322] netlink: 204476 bytes leftover after parsing attributes in process `syz.4.2204'. [ 402.693793][T11329] netlink: 'syz.2.2207': attribute type 10 has an invalid length. [ 403.019337][T11338] netlink: 'syz.2.2220': attribute type 10 has an invalid length. [ 403.404272][T11348] netlink: 'syz.0.2211': attribute type 3 has an invalid length. [ 403.455397][T11348] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2211'. [ 404.108177][T11370] mac80211_hwsim hwsim3 wlan1: refused to change device tx_queue_len [ 404.439947][T11376] netlink: 'syz.1.2223': attribute type 10 has an invalid length. [ 405.056555][T11393] device pim6reg1 entered promiscuous mode [ 405.284872][T11407] netlink: 'syz.0.2231': attribute type 3 has an invalid length. [ 405.395238][T11407] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2231'. [ 405.441969][T11409] netlink: 'syz.4.2234': attribute type 1 has an invalid length. [ 405.485102][T11409] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2234'. [ 406.618292][T11427] netlink: 'syz.2.2239': attribute type 3 has an invalid length. [ 406.664433][T11429] netlink: 'syz.3.2240': attribute type 10 has an invalid length. [ 406.681648][T11427] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2239'. [ 407.184024][T11445] netlink: 'syz.3.2245': attribute type 4 has an invalid length. [ 407.257930][T11445] netlink: 'syz.3.2245': attribute type 21 has an invalid length. [ 407.379421][T11447] netlink: 'syz.3.2245': attribute type 16 has an invalid length. [ 407.419942][T11445] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2245'. [ 407.430439][T11447] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2245'. [ 407.440193][T11445] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2245'. [ 407.502956][T11450] netlink: 'syz.1.2246': attribute type 3 has an invalid length. [ 407.613860][T11450] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2246'. [ 410.879215][T11473] netlink: 'syz.2.2254': attribute type 17 has an invalid length. [ 411.012861][T11476] netlink: 'syz.0.2255': attribute type 10 has an invalid length. [ 414.260453][T11491] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2260'. [ 414.754287][T11500] netlink: 'syz.3.2261': attribute type 3 has an invalid length. [ 414.784864][T11500] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2261'. [ 416.712822][T11548] netlink: 212832 bytes leftover after parsing attributes in process `syz.1.2277'. [ 416.853862][T11555] netlink: 'syz.4.2278': attribute type 3 has an invalid length. [ 416.874969][T11544] netlink: 'syz.2.2275': attribute type 10 has an invalid length. [ 416.919605][T11555] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2278'. [ 417.305205][T11556] device pim6reg1 entered promiscuous mode [ 417.568978][T11579] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2284'. [ 417.887740][T11581] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2285'. [ 417.971271][T11580] delete_channel: no stack [ 420.031879][T11599] netlink: 'syz.2.2290': attribute type 3 has an invalid length. [ 420.109982][T11599] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2290'. [ 420.239768][T11606] netlink: 'syz.0.2292': attribute type 10 has an invalid length. [ 421.148375][T11618] device pim6reg1 entered promiscuous mode [ 421.902390][T11645] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 422.095061][T11690] netlink: 'syz.0.2306': attribute type 3 has an invalid length. [ 422.289722][T11690] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2306'. [ 422.742877][T11717] netlink: 'syz.4.2311': attribute type 10 has an invalid length. [ 423.832947][T11755] netlink: 'syz.2.2319': attribute type 3 has an invalid length. [ 423.857058][T11755] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2319'. [ 423.935669][T11757] netlink: 'syz.0.2322': attribute type 11 has an invalid length. [ 425.126076][T11780] device syzkaller0 entered promiscuous mode [ 426.281427][T11811] netlink: 'syz.4.2335': attribute type 3 has an invalid length. [ 426.289215][T11811] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2335'. [ 426.385057][T11809] netlink: 'syz.3.2336': attribute type 10 has an invalid length. [ 427.234949][T11841] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 427.361282][T11839] netlink: 'syz.0.2346': attribute type 10 has an invalid length. [ 427.570282][T11848] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2350'. [ 427.958362][T11860] netlink: 'syz.3.2352': attribute type 3 has an invalid length. [ 428.034841][T11860] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2352'. [ 428.917147][T11878] netlink: 'syz.0.2360': attribute type 10 has an invalid length. [ 429.256027][T11886] netlink: 'syz.2.2363': attribute type 4 has an invalid length. [ 429.299027][T11886] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2363'. [ 429.334140][T11893] netlink: 'syz.4.2362': attribute type 21 has an invalid length. [ 429.395210][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'. [ 430.022539][T11910] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2369'. [ 430.057258][T11910] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 430.200054][T11910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.458348][T11922] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2374'. [ 430.678648][T11930] netlink: 'syz.0.2375': attribute type 10 has an invalid length. [ 431.110829][T11938] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2378'. [ 431.129943][T11938] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2378'. [ 432.531730][T11976] netlink: 'syz.1.2390': attribute type 10 has an invalid length. [ 434.137084][T12018] netlink: 'syz.4.2403': attribute type 10 has an invalid length. [ 434.648663][T12090] FAULT_INJECTION: forcing a failure. [ 434.648663][T12090] name failslab, interval 1, probability 0, space 0, times 0 [ 434.662703][T12090] CPU: 1 PID: 12090 Comm: syz.0.2412 Not tainted syzkaller #0 [ 434.670200][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.680285][T12090] Call Trace: [ 434.683591][T12090] [ 434.686640][T12090] dump_stack_lvl+0x188/0x250 [ 434.691363][T12090] ? show_regs_print_info+0x20/0x20 [ 434.696687][T12090] ? load_image+0x410/0x410 [ 434.701319][T12090] ? __might_sleep+0xf0/0xf0 [ 434.705938][T12090] ? __lock_acquire+0x7b50/0x7b50 [ 434.711049][T12090] should_fail+0x383/0x4b0 [ 434.715498][T12090] should_failslab+0x5/0x20 [ 434.720038][T12090] slab_pre_alloc_hook+0x51/0xc0 [ 434.725015][T12090] kmem_cache_alloc_trace+0x47/0x290 [ 434.730329][T12090] ? rxrpc_alloc_call+0x333/0xbf0 [ 434.735458][T12090] rxrpc_alloc_call+0x333/0xbf0 [ 434.740346][T12090] rxrpc_new_client_call+0xe7/0xe10 [ 434.745580][T12090] ? rxrpc_do_sendmsg+0xbc7/0x10c0 [ 434.750769][T12090] ? do_raw_read_unlock+0x39/0x70 [ 434.755822][T12090] ? _raw_read_unlock+0x24/0x40 [ 434.760705][T12090] rxrpc_do_sendmsg+0xbc7/0x10c0 [ 434.765671][T12090] ? rxrpc_process_local_events+0x920/0x920 [ 434.771615][T12090] ? rcu_lock_release+0x20/0x20 [ 434.776491][T12090] ? __local_bh_enable_ip+0x136/0x1c0 [ 434.781979][T12090] ? rxrpc_sendmsg+0x45b/0x890 [ 434.786808][T12090] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 434.792126][T12090] ? rxrpc_getsockopt+0x150/0x150 [ 434.797185][T12090] ____sys_sendmsg+0x5be/0x8f0 [ 434.801994][T12090] ? __sys_sendmsg_sock+0x30/0x30 [ 434.807064][T12090] ? import_iovec+0x6f/0xa0 [ 434.811866][T12090] ___sys_sendmsg+0x236/0x2e0 [ 434.816581][T12090] ? __sys_sendmsg+0x290/0x290 [ 434.821388][T12090] ? trace_event_raw_event_lock+0x250/0x250 [ 434.827350][T12090] __se_sys_sendmsg+0x1b7/0x2a0 [ 434.832235][T12090] ? __x64_sys_sendmsg+0x80/0x80 [ 434.837189][T12090] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 434.843213][T12090] ? lockdep_hardirqs_on+0x94/0x140 [ 434.848447][T12090] do_syscall_64+0x4c/0xa0 [ 434.852973][T12090] ? clear_bhb_loop+0x30/0x80 [ 434.857679][T12090] ? clear_bhb_loop+0x30/0x80 [ 434.862386][T12090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 434.868318][T12090] RIP: 0033:0x7fa4db7ec159 [ 434.872766][T12090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.892396][T12090] RSP: 002b:00007fa4d9a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.900832][T12090] RAX: ffffffffffffffda RBX: 00007fa4dba73fa0 RCX: 00007fa4db7ec159 [ 434.908826][T12090] RDX: 00000000000080fe RSI: 0000200000000080 RDI: 0000000000000005 [ 434.916817][T12090] RBP: 00007fa4d9a44090 R08: 0000000000000000 R09: 0000000000000000 [ 434.924809][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.932919][T12090] R13: 00007fa4dba74038 R14: 00007fa4dba73fa0 R15: 00007fffd38c2548 [ 434.941048][T12090] [ 435.301444][T12094] device pim6reg1 entered promiscuous mode [ 435.665024][T12117] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2422'. [ 435.674825][T12117] openvswitch: netlink: Duplicate key (type 0). [ 436.213270][T12123] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2421'. [ 437.012044][T12146] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2432'. [ 437.756924][T12162] netlink: 'syz.4.2435': attribute type 10 has an invalid length. [ 439.320162][T12201] netlink: 'syz.0.2450': attribute type 10 has an invalid length. [ 439.680755][T12217] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2454'. [ 440.062061][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.068422][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.470929][T12254] netlink: 'syz.1.2466': attribute type 10 has an invalid length. [ 442.137033][T12278] device pim6reg1 entered promiscuous mode [ 443.024943][T12307] netlink: 'syz.1.2483': attribute type 10 has an invalid length. [ 443.794143][T12322] device pim6reg1 entered promiscuous mode [ 445.009039][T12347] netlink: 'syz.4.2494': attribute type 12 has an invalid length. [ 445.025970][T12347] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2494'. [ 445.070038][T12351] netlink: 'syz.4.2494': attribute type 12 has an invalid length. [ 445.114839][T12351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2494'. [ 445.547967][T12370] netlink: 'syz.3.2504': attribute type 10 has an invalid length. [ 445.574088][T12370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2504'. [ 445.599716][T12370] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 445.639257][T12370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.769020][T12379] device syzkaller0 entered promiscuous mode [ 446.141758][T12389] device pim6reg1 entered promiscuous mode [ 446.785794][T12402] netlink: 'syz.4.2512': attribute type 10 has an invalid length. [ 446.958282][T12413] netlink: 'syz.2.2516': attribute type 2 has an invalid length. [ 446.998509][T12413] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2516'. [ 447.292991][T12416] netlink: 'syz.0.2517': attribute type 3 has an invalid length. [ 447.329322][T12416] netlink: 'syz.0.2517': attribute type 7 has an invalid length. [ 447.363572][T12416] netlink: 'syz.0.2517': attribute type 8 has an invalid length. [ 447.390301][T12416] netlink: 'syz.0.2517': attribute type 7 has an invalid length. [ 447.421187][T12416] netlink: 198948 bytes leftover after parsing attributes in process `syz.0.2517'. [ 447.887609][T12447] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2527'. [ 448.086777][T12451] validate_nla: 1 callbacks suppressed [ 448.086797][T12451] netlink: 'syz.1.2529': attribute type 10 has an invalid length. [ 448.433407][T12461] device pim6reg1 entered promiscuous mode [ 449.427913][T12485] netlink: 'syz.3.2541': attribute type 10 has an invalid length. [ 451.339853][T12556] netlink: 'syz.4.2563': attribute type 10 has an invalid length. [ 451.567753][T12569] FAULT_INJECTION: forcing a failure. [ 451.567753][T12569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.658313][T12569] CPU: 1 PID: 12569 Comm: syz.3.2567 Not tainted syzkaller #0 [ 451.665833][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.676076][T12569] Call Trace: [ 451.679360][T12569] [ 451.682294][T12569] dump_stack_lvl+0x188/0x250 [ 451.686987][T12569] ? show_regs_print_info+0x20/0x20 [ 451.692189][T12569] ? load_image+0x410/0x410 [ 451.696700][T12569] ? __lock_acquire+0x7b50/0x7b50 [ 451.701724][T12569] ? aa_label_sk_perm+0x3e6/0x540 [ 451.706801][T12569] should_fail+0x383/0x4b0 [ 451.711226][T12569] _copy_from_user+0x2e/0x170 [ 451.715931][T12569] tcp_setsockopt+0x645/0x1e60 [ 451.720721][T12569] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 451.726093][T12569] ? mutex_lock_io_nested+0x60/0x60 [ 451.731384][T12569] ? __lock_acquire+0x7b50/0x7b50 [ 451.736416][T12569] ? sock_common_setsockopt+0x32/0xb0 [ 451.741794][T12569] ? sock_common_recvmsg+0x1c0/0x1c0 [ 451.747106][T12569] smc_setsockopt+0x1b7/0xa30 [ 451.751833][T12569] ? smc_shutdown+0x5c0/0x5c0 [ 451.756512][T12569] ? aa_sock_opt_perm+0x74/0x100 [ 451.761462][T12569] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 451.767008][T12569] ? security_socket_setsockopt+0x7a/0xa0 [ 451.772862][T12569] ? smc_shutdown+0x5c0/0x5c0 [ 451.777542][T12569] __sys_setsockopt+0x2bf/0x3d0 [ 451.782434][T12569] __x64_sys_setsockopt+0xb1/0xc0 [ 451.787460][T12569] do_syscall_64+0x4c/0xa0 [ 451.791878][T12569] ? clear_bhb_loop+0x30/0x80 [ 451.796575][T12569] ? clear_bhb_loop+0x30/0x80 [ 451.801252][T12569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 451.807145][T12569] RIP: 0033:0x7f06a79fd159 [ 451.811577][T12569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.831183][T12569] RSP: 002b:00007f06a5c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 451.839598][T12569] RAX: ffffffffffffffda RBX: 00007f06a7c84fa0 RCX: 00007f06a79fd159 [ 451.847655][T12569] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000004 [ 451.855626][T12569] RBP: 00007f06a5c55090 R08: 0000000000000004 R09: 0000000000000000 [ 451.863596][T12569] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 451.871665][T12569] R13: 00007f06a7c85038 R14: 00007f06a7c84fa0 R15: 00007ffc0ee03f88 [ 451.879666][T12569] [ 452.995814][T12601] netlink: 'syz.0.2579': attribute type 10 has an invalid length. [ 454.756333][T12635] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2588'. [ 455.401327][T12645] netlink: 'syz.2.2592': attribute type 10 has an invalid length. [ 456.125744][T12665] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2600'. [ 456.186938][T12665] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 456.811786][T12674] FAULT_INJECTION: forcing a failure. [ 456.811786][T12674] name failslab, interval 1, probability 0, space 0, times 0 [ 456.887777][T12674] CPU: 1 PID: 12674 Comm: syz.2.2603 Not tainted syzkaller #0 [ 456.895342][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.905424][T12674] Call Trace: [ 456.908728][T12674] [ 456.911681][T12674] dump_stack_lvl+0x188/0x250 [ 456.916391][T12674] ? show_regs_print_info+0x20/0x20 [ 456.921627][T12674] ? load_image+0x410/0x410 [ 456.926158][T12674] ? perf_trace_lock_acquire+0xed/0x3f0 [ 456.931738][T12674] should_fail+0x383/0x4b0 [ 456.936210][T12674] should_failslab+0x5/0x20 [ 456.940844][T12674] slab_pre_alloc_hook+0x51/0xc0 [ 456.945827][T12674] ? skb_clone+0x1bd/0x350 [ 456.950283][T12674] kmem_cache_alloc+0x3d/0x280 [ 456.955081][T12674] skb_clone+0x1bd/0x350 [ 456.959354][T12674] __netlink_deliver_tap+0x3cb/0x7c0 [ 456.964681][T12674] netlink_deliver_tap+0x16c/0x180 [ 456.969836][T12674] netlink_unicast+0x759/0x940 [ 456.974641][T12674] netlink_sendmsg+0x8ba/0xbe0 [ 456.979430][T12674] ? netlink_getsockopt+0x570/0x570 [ 456.984646][T12674] ? aa_sock_msg_perm+0x94/0x150 [ 456.989596][T12674] ? apparmor_socket_sendmsg+0x88/0x230 [ 456.995153][T12674] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 457.000444][T12674] ? security_socket_sendmsg+0x7c/0xa0 [ 457.005904][T12674] ? netlink_getsockopt+0x570/0x570 [ 457.011109][T12674] ____sys_sendmsg+0x5be/0x8f0 [ 457.015974][T12674] ? __sys_sendmsg_sock+0x30/0x30 [ 457.021007][T12674] ? import_iovec+0x6f/0xa0 [ 457.025517][T12674] ___sys_sendmsg+0x236/0x2e0 [ 457.030204][T12674] ? __sys_sendmsg+0x290/0x290 [ 457.035014][T12674] __se_sys_sendmsg+0x1b7/0x2a0 [ 457.039875][T12674] ? __x64_sys_sendmsg+0x80/0x80 [ 457.044821][T12674] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 457.050839][T12674] ? lockdep_hardirqs_on+0x94/0x140 [ 457.056054][T12674] do_syscall_64+0x4c/0xa0 [ 457.060472][T12674] ? clear_bhb_loop+0x30/0x80 [ 457.065152][T12674] ? clear_bhb_loop+0x30/0x80 [ 457.069828][T12674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.075733][T12674] RIP: 0033:0x7fe904d7b159 [ 457.080154][T12674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.099847][T12674] RSP: 002b:00007fe902fd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.108272][T12674] RAX: ffffffffffffffda RBX: 00007fe905002fa0 RCX: 00007fe904d7b159 [ 457.116257][T12674] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 457.124259][T12674] RBP: 00007fe902fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 457.132237][T12674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.140219][T12674] R13: 00007fe905003038 R14: 00007fe905002fa0 R15: 00007ffd391b0238 [ 457.148213][T12674] [ 457.647423][T12687] netlink: 'syz.4.2607': attribute type 10 has an invalid length. [ 459.111087][T12721] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2616'. [ 459.190074][T12721] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 459.198024][T12721] CPU: 1 PID: 12721 Comm: syz.3.2616 Not tainted syzkaller #0 [ 459.205599][T12721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.215776][T12721] Call Trace: [ 459.219089][T12721] [ 459.222048][T12721] dump_stack_lvl+0x188/0x250 [ 459.226780][T12721] ? show_regs_print_info+0x20/0x20 [ 459.232019][T12721] ? load_image+0x410/0x410 [ 459.236570][T12721] sysfs_warn_dup+0x8a/0xa0 [ 459.241149][T12721] sysfs_do_create_link_sd+0xc0/0x110 [ 459.246622][T12721] device_add+0x83b/0x1050 [ 459.251188][T12721] wiphy_register+0x1e74/0x2c40 [ 459.256114][T12721] ? cfg80211_event_work+0x40/0x40 [ 459.261266][T12721] ? minstrel_ht_alloc+0x807/0x980 [ 459.266515][T12721] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 459.272653][T12721] ieee80211_register_hw+0x2a03/0x3a60 [ 459.278294][T12721] ? ieee80211_register_hw+0xa91/0x3a60 [ 459.283965][T12721] ? ieee80211_tasklet_handler+0x20/0x20 [ 459.289629][T12721] ? rcu_is_watching+0x11/0xa0 [ 459.294449][T12721] ? hrtimer_init+0x10c/0x220 [ 459.299186][T12721] mac80211_hwsim_new_radio+0x209d/0x4050 [ 459.304989][T12721] hwsim_new_radio_nl+0xa7d/0xc50 [ 459.310062][T12721] genl_rcv_msg+0xd0b/0xfa0 [ 459.314623][T12721] ? genl_bind+0x370/0x370 [ 459.319079][T12721] ? verify_lock_unused+0x140/0x140 [ 459.324462][T12721] ? perf_trace_lock_acquire+0xed/0x3f0 [ 459.330031][T12721] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 459.336653][T12721] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 459.343018][T12721] netlink_rcv_skb+0x1e9/0x430 [ 459.347792][T12721] ? genl_bind+0x370/0x370 [ 459.352218][T12721] ? netlink_ack+0xb10/0xb10 [ 459.356832][T12721] ? down_read+0x1aa/0x2e0 [ 459.361270][T12721] genl_rcv+0x24/0x40 [ 459.365257][T12721] netlink_unicast+0x78f/0x940 [ 459.370047][T12721] netlink_sendmsg+0x8ba/0xbe0 [ 459.374836][T12721] ? netlink_getsockopt+0x570/0x570 [ 459.380041][T12721] ? aa_sock_msg_perm+0x94/0x150 [ 459.384990][T12721] ? apparmor_socket_sendmsg+0x88/0x230 [ 459.390551][T12721] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 459.395842][T12721] ? security_socket_sendmsg+0x7c/0xa0 [ 459.401329][T12721] ? netlink_getsockopt+0x570/0x570 [ 459.406544][T12721] ____sys_sendmsg+0x5be/0x8f0 [ 459.411336][T12721] ? __sys_sendmsg_sock+0x30/0x30 [ 459.416382][T12721] ? import_iovec+0x6f/0xa0 [ 459.420898][T12721] ___sys_sendmsg+0x236/0x2e0 [ 459.425596][T12721] ? __sys_sendmsg+0x290/0x290 [ 459.430427][T12721] __se_sys_sendmsg+0x1b7/0x2a0 [ 459.435304][T12721] ? __x64_sys_sendmsg+0x80/0x80 [ 459.440247][T12721] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 459.446259][T12721] ? lockdep_hardirqs_on+0x94/0x140 [ 459.451573][T12721] do_syscall_64+0x4c/0xa0 [ 459.456017][T12721] ? clear_bhb_loop+0x30/0x80 [ 459.460699][T12721] ? clear_bhb_loop+0x30/0x80 [ 459.465387][T12721] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 459.471291][T12721] RIP: 0033:0x7f06a79fd159 [ 459.475978][T12721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.495688][T12721] RSP: 002b:00007f06a5c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.504201][T12721] RAX: ffffffffffffffda RBX: 00007f06a7c84fa0 RCX: 00007f06a79fd159 [ 459.512179][T12721] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 459.520270][T12721] RBP: 00007f06a7a94024 R08: 0000000000000000 R09: 0000000000000000 [ 459.528242][T12721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.536222][T12721] R13: 00007f06a7c85038 R14: 00007f06a7c84fa0 R15: 00007ffc0ee03f88 [ 459.544325][T12721] [ 460.090865][T12739] FAULT_INJECTION: forcing a failure. [ 460.090865][T12739] name failslab, interval 1, probability 0, space 0, times 0 [ 460.216452][T12739] CPU: 1 PID: 12739 Comm: syz.4.2620 Not tainted syzkaller #0 [ 460.224136][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.234396][T12739] Call Trace: [ 460.237701][T12739] [ 460.240655][T12739] dump_stack_lvl+0x188/0x250 [ 460.245366][T12739] ? show_regs_print_info+0x20/0x20 [ 460.250587][T12739] ? load_image+0x410/0x410 [ 460.255117][T12739] ? __might_sleep+0xf0/0xf0 [ 460.259728][T12739] ? __lock_acquire+0x7b50/0x7b50 [ 460.264790][T12739] should_fail+0x383/0x4b0 [ 460.269236][T12739] should_failslab+0x5/0x20 [ 460.273764][T12739] slab_pre_alloc_hook+0x51/0xc0 [ 460.278724][T12739] __kmalloc+0x6b/0x340 [ 460.282892][T12739] ? tomoyo_encode+0x28a/0x550 [ 460.287776][T12739] tomoyo_encode+0x28a/0x550 [ 460.292493][T12739] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 460.298174][T12739] tomoyo_path_number_perm+0x251/0x6b0 [ 460.303657][T12739] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 460.309139][T12739] ? ksys_write+0x1d4/0x260 [ 460.313764][T12739] security_file_ioctl+0x6c/0xa0 [ 460.318725][T12739] __se_sys_ioctl+0x48/0x170 [ 460.323337][T12739] do_syscall_64+0x4c/0xa0 [ 460.327778][T12739] ? clear_bhb_loop+0x30/0x80 [ 460.332469][T12739] ? clear_bhb_loop+0x30/0x80 [ 460.337185][T12739] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.343101][T12739] RIP: 0033:0x7f3b2176a159 [ 460.347534][T12739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.367161][T12739] RSP: 002b:00007f3b1f9a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.375598][T12739] RAX: ffffffffffffffda RBX: 00007f3b219f2090 RCX: 00007f3b2176a159 [ 460.383582][T12739] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000007 [ 460.391571][T12739] RBP: 00007f3b1f9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 460.399555][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.407542][T12739] R13: 00007f3b219f2128 R14: 00007f3b219f2090 R15: 00007ffe23fab4e8 [ 460.415577][T12739] [ 460.445010][T12739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 460.569561][T12748] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2623'. [ 460.572977][T12742] netlink: 'syz.3.2622': attribute type 10 has an invalid length. [ 460.620295][T12748] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 460.649563][T12748] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 460.873168][T12757] FAULT_INJECTION: forcing a failure. [ 460.873168][T12757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.926159][T12757] CPU: 1 PID: 12757 Comm: syz.1.2626 Not tainted syzkaller #0 [ 460.933684][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.944289][T12757] Call Trace: [ 460.947605][T12757] [ 460.950556][T12757] dump_stack_lvl+0x188/0x250 [ 460.955276][T12757] ? show_regs_print_info+0x20/0x20 [ 460.960516][T12757] ? load_image+0x410/0x410 [ 460.965091][T12757] ? __lock_acquire+0x7b50/0x7b50 [ 460.970240][T12757] should_fail+0x383/0x4b0 [ 460.974682][T12757] _copy_to_user+0x2e/0x130 [ 460.979204][T12757] simple_read_from_buffer+0xe3/0x150 [ 460.984685][T12757] proc_fail_nth_read+0x1a6/0x220 [ 460.989732][T12757] ? proc_fault_inject_write+0x310/0x310 [ 460.995395][T12757] ? fsnotify_perm+0x254/0x560 [ 461.000275][T12757] ? proc_fault_inject_write+0x310/0x310 [ 461.006006][T12757] vfs_read+0x2ff/0xd50 [ 461.010170][T12757] ? __lock_acquire+0x7b50/0x7b50 [ 461.015393][T12757] ? kernel_read+0x1e0/0x1e0 [ 461.020040][T12757] ? mutex_lock_nested+0x17/0x20 [ 461.024981][T12757] ? __fdget_pos+0x2bf/0x370 [ 461.029580][T12757] ? ksys_read+0x70/0x260 [ 461.033914][T12757] ksys_read+0x153/0x260 [ 461.038160][T12757] ? vfs_write+0xd70/0xd70 [ 461.042669][T12757] ? lockdep_hardirqs_on+0x94/0x140 [ 461.047880][T12757] do_syscall_64+0x4c/0xa0 [ 461.052386][T12757] ? clear_bhb_loop+0x30/0x80 [ 461.057063][T12757] ? clear_bhb_loop+0x30/0x80 [ 461.061741][T12757] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 461.067644][T12757] RIP: 0033:0x7f5ae19c798e [ 461.072065][T12757] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 461.091814][T12757] RSP: 002b:00007f5adfc5efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.100362][T12757] RAX: ffffffffffffffda RBX: 00007f5adfc5f6c0 RCX: 00007f5ae19c798e [ 461.108366][T12757] RDX: 000000000000000f RSI: 00007f5adfc5f0a0 RDI: 0000000000000006 [ 461.116356][T12757] RBP: 00007f5adfc5f090 R08: 0000000000000000 R09: 0000000000000000 [ 461.124345][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.132330][T12757] R13: 00007f5ae1c8f038 R14: 00007f5ae1c8efa0 R15: 00007ffec05117d8 [ 461.140333][T12757] [ 461.478251][T12773] netlink: 'syz.4.2632': attribute type 21 has an invalid length. [ 461.570014][T12778] netlink: 'syz.0.2633': attribute type 29 has an invalid length. [ 461.578213][T12778] netlink: 'syz.0.2633': attribute type 29 has an invalid length. [ 462.020942][T12782] netlink: 'syz.0.2633': attribute type 29 has an invalid length. [ 462.511267][T12795] netlink: 'syz.0.2638': attribute type 10 has an invalid length. [ 462.750042][T12816] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2647'. [ 463.614687][T12848] FAULT_INJECTION: forcing a failure. [ 463.614687][T12848] name failslab, interval 1, probability 0, space 0, times 0 [ 463.656307][T12848] CPU: 0 PID: 12848 Comm: syz.1.2656 Not tainted syzkaller #0 [ 463.663853][T12848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.673995][T12848] Call Trace: [ 463.677323][T12848] [ 463.680306][T12848] dump_stack_lvl+0x188/0x250 [ 463.685064][T12848] ? show_regs_print_info+0x20/0x20 [ 463.690328][T12848] ? load_image+0x410/0x410 [ 463.695414][T12848] should_fail+0x383/0x4b0 [ 463.700018][T12848] should_failslab+0x5/0x20 [ 463.704568][T12848] slab_pre_alloc_hook+0x51/0xc0 [ 463.709562][T12848] ? skb_clone+0x1bd/0x350 [ 463.714033][T12848] kmem_cache_alloc+0x3d/0x280 [ 463.718868][T12848] skb_clone+0x1bd/0x350 [ 463.723177][T12848] __netlink_deliver_tap+0x3cb/0x7c0 [ 463.728584][T12848] netlink_deliver_tap+0x16c/0x180 [ 463.733877][T12848] netlink_unicast+0x759/0x940 [ 463.738744][T12848] netlink_sendmsg+0x8ba/0xbe0 [ 463.743601][T12848] ? netlink_getsockopt+0x570/0x570 [ 463.748838][T12848] ? aa_sock_msg_perm+0x94/0x150 [ 463.753835][T12848] ? apparmor_socket_sendmsg+0x88/0x230 [ 463.759530][T12848] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 463.764868][T12848] ? security_socket_sendmsg+0x7c/0xa0 [ 463.770376][T12848] ? netlink_getsockopt+0x570/0x570 [ 463.775825][T12848] ____sys_sendmsg+0x5be/0x8f0 [ 463.780797][T12848] ? __sys_sendmsg_sock+0x30/0x30 [ 463.785921][T12848] ? import_iovec+0x6f/0xa0 [ 463.790490][T12848] ___sys_sendmsg+0x236/0x2e0 [ 463.795261][T12848] ? __sys_sendmsg+0x290/0x290 [ 463.800128][T12848] ? trace_event_raw_event_lock+0x250/0x250 [ 463.806207][T12848] __se_sys_sendmsg+0x1b7/0x2a0 [ 463.811218][T12848] ? __x64_sys_sendmsg+0x80/0x80 [ 463.816207][T12848] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 463.822307][T12848] ? lockdep_hardirqs_on+0x94/0x140 [ 463.827664][T12848] do_syscall_64+0x4c/0xa0 [ 463.832115][T12848] ? clear_bhb_loop+0x30/0x80 [ 463.836832][T12848] ? clear_bhb_loop+0x30/0x80 [ 463.841566][T12848] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 463.847594][T12848] RIP: 0033:0x7f5ae1a07159 [ 463.852063][T12848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.871806][T12848] RSP: 002b:00007f5adfc5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.880282][T12848] RAX: ffffffffffffffda RBX: 00007f5ae1c8efa0 RCX: 00007f5ae1a07159 [ 463.888298][T12848] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 463.896307][T12848] RBP: 00007f5adfc5f090 R08: 0000000000000000 R09: 0000000000000000 [ 463.904339][T12848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.912369][T12848] R13: 00007f5ae1c8f038 R14: 00007f5ae1c8efa0 R15: 00007ffec05117d8 [ 463.920484][T12848] [ 465.878697][T12872] device bridge0 left promiscuous mode [ 466.543003][T12897] device wlan0 entered promiscuous mode [ 466.919054][T12903] netlink: 'syz.2.2675': attribute type 1 has an invalid length. [ 466.946698][T12903] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.2675'. [ 467.181999][T12911] device pim6reg1 entered promiscuous mode [ 469.763997][T12978] FAULT_INJECTION: forcing a failure. [ 469.763997][T12978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.790537][T12978] CPU: 1 PID: 12978 Comm: syz.1.2698 Not tainted syzkaller #0 [ 469.798144][T12978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.808228][T12978] Call Trace: [ 469.811532][T12978] [ 469.814490][T12978] dump_stack_lvl+0x188/0x250 [ 469.819200][T12978] ? show_regs_print_info+0x20/0x20 [ 469.824422][T12978] ? load_image+0x410/0x410 [ 469.828967][T12978] ? __lock_acquire+0x7b50/0x7b50 [ 469.834023][T12978] should_fail+0x383/0x4b0 [ 469.838469][T12978] _copy_from_user+0x2e/0x170 [ 469.843180][T12978] __copy_msghdr_from_user+0x48a/0x630 [ 469.848666][T12978] ? verify_lock_unused+0x140/0x140 [ 469.854018][T12978] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 469.859367][T12978] ___sys_sendmsg+0x19a/0x2e0 [ 469.864090][T12978] ? __sys_sendmsg+0x290/0x290 [ 469.868912][T12978] ? trace_event_raw_event_lock+0x250/0x250 [ 469.874884][T12978] __se_sys_sendmsg+0x1b7/0x2a0 [ 469.879770][T12978] ? __x64_sys_sendmsg+0x80/0x80 [ 469.884728][T12978] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 469.890750][T12978] ? lockdep_hardirqs_on+0x94/0x140 [ 469.896144][T12978] do_syscall_64+0x4c/0xa0 [ 469.900598][T12978] ? clear_bhb_loop+0x30/0x80 [ 469.905301][T12978] ? clear_bhb_loop+0x30/0x80 [ 469.910014][T12978] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 469.915933][T12978] RIP: 0033:0x7f5ae1a07159 [ 469.920383][T12978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.939987][T12978] RSP: 002b:00007f5adfc5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.948398][T12978] RAX: ffffffffffffffda RBX: 00007f5ae1c8efa0 RCX: 00007f5ae1a07159 [ 469.956387][T12978] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 469.964355][T12978] RBP: 00007f5adfc5f090 R08: 0000000000000000 R09: 0000000000000000 [ 469.972321][T12978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.980298][T12978] R13: 00007f5ae1c8f038 R14: 00007f5ae1c8efa0 R15: 00007ffec05117d8 [ 469.988481][T12978] [ 470.081850][T12976] netlink: 'syz.4.2696': attribute type 10 has an invalid length. [ 470.263764][T12987] netlink: 'syz.1.2702': attribute type 29 has an invalid length. [ 470.304533][T12987] netlink: 'syz.1.2702': attribute type 29 has an invalid length. [ 470.314503][T12989] netlink: 'syz.1.2702': attribute type 29 has an invalid length. [ 470.323114][T12994] netlink: 'syz.1.2702': attribute type 29 has an invalid length. [ 470.704582][T13007] device pim6reg1 entered promiscuous mode [ 471.198261][T13022] netlink: 'syz.1.2714': attribute type 10 has an invalid length. [ 473.104873][T13040] FAULT_INJECTION: forcing a failure. [ 473.104873][T13040] name failslab, interval 1, probability 0, space 0, times 0 [ 473.189068][T13040] CPU: 0 PID: 13040 Comm: syz.1.2722 Not tainted syzkaller #0 [ 473.196729][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.206839][T13040] Call Trace: [ 473.210164][T13040] [ 473.213128][T13040] dump_stack_lvl+0x188/0x250 [ 473.217859][T13040] ? show_regs_print_info+0x20/0x20 [ 473.223105][T13040] ? load_image+0x410/0x410 [ 473.227668][T13040] ? __might_sleep+0xf0/0xf0 [ 473.232301][T13040] ? __lock_acquire+0x7b50/0x7b50 [ 473.237405][T13040] should_fail+0x383/0x4b0 [ 473.241966][T13040] should_failslab+0x5/0x20 [ 473.246515][T13040] slab_pre_alloc_hook+0x51/0xc0 [ 473.251587][T13040] __kmalloc_node+0x6d/0x3a0 [ 473.256309][T13040] ? vmemdup_user+0x45/0x170 [ 473.261025][T13040] vmemdup_user+0x45/0x170 [ 473.265491][T13040] map_lookup_elem+0x2c4/0x660 [ 473.270366][T13040] ? bpf_lsm_bpf+0x5/0x10 [ 473.274758][T13040] __sys_bpf+0x4c0/0x6f0 [ 473.279047][T13040] ? bpf_link_show_fdinfo+0x380/0x380 [ 473.284528][T13040] __x64_sys_bpf+0x78/0x90 [ 473.289096][T13040] do_syscall_64+0x4c/0xa0 [ 473.293553][T13040] ? clear_bhb_loop+0x30/0x80 [ 473.298260][T13040] ? clear_bhb_loop+0x30/0x80 [ 473.302985][T13040] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 473.308924][T13040] RIP: 0033:0x7f5ae1a07159 [ 473.313481][T13040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.333654][T13040] RSP: 002b:00007f5adfc5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.342102][T13040] RAX: ffffffffffffffda RBX: 00007f5ae1c8efa0 RCX: 00007f5ae1a07159 [ 473.350103][T13040] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000001 [ 473.358176][T13040] RBP: 00007f5adfc5f090 R08: 0000000000000000 R09: 0000000000000000 [ 473.366436][T13040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.374418][T13040] R13: 00007f5ae1c8f038 R14: 00007f5ae1c8efa0 R15: 00007ffec05117d8 [ 473.382454][T13040] [ 473.832221][T13057] netlink: 'syz.3.2726': attribute type 10 has an invalid length. [ 474.118110][T13074] device pim6reg1 entered promiscuous mode [ 475.345756][T13103] netlink: 'syz.0.2744': attribute type 10 has an invalid length. [ 476.885379][T13143] netlink: 'syz.0.2756': attribute type 21 has an invalid length. [ 476.925205][T13143] netlink: 'syz.0.2756': attribute type 7 has an invalid length. [ 477.299593][T13156] netlink: 'syz.3.2760': attribute type 21 has an invalid length. [ 477.325654][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2760'. [ 477.462272][T13162] device pim6reg1 entered promiscuous mode [ 478.689123][T13185] netlink: 'syz.1.2769': attribute type 39 has an invalid length. [ 478.927863][T13190] netlink: 'syz.3.2772': attribute type 46 has an invalid length. [ 478.936905][T13190] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2772'. [ 479.040768][T13195] FAULT_INJECTION: forcing a failure. [ 479.040768][T13195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.049355][T13192] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2771'. [ 479.084984][T13195] CPU: 1 PID: 13195 Comm: syz.0.2773 Not tainted syzkaller #0 [ 479.092519][T13195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.102610][T13195] Call Trace: [ 479.105927][T13195] [ 479.108884][T13195] dump_stack_lvl+0x188/0x250 [ 479.113600][T13195] ? show_regs_print_info+0x20/0x20 [ 479.118830][T13195] ? load_image+0x410/0x410 [ 479.123370][T13195] ? __lock_acquire+0x7b50/0x7b50 [ 479.128429][T13195] should_fail+0x383/0x4b0 [ 479.132876][T13195] _copy_from_user+0x2e/0x170 [ 479.137597][T13195] __copy_msghdr_from_user+0xc9/0x630 [ 479.143009][T13195] ? verify_lock_unused+0x140/0x140 [ 479.148258][T13195] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 479.153601][T13195] ___sys_sendmsg+0x19a/0x2e0 [ 479.158319][T13195] ? __sys_sendmsg+0x290/0x290 [ 479.163134][T13195] ? trace_event_raw_event_lock+0x250/0x250 [ 479.169105][T13195] __se_sys_sendmsg+0x1b7/0x2a0 [ 479.173991][T13195] ? __x64_sys_sendmsg+0x80/0x80 [ 479.179042][T13195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 479.185073][T13195] ? lockdep_hardirqs_on+0x94/0x140 [ 479.190306][T13195] do_syscall_64+0x4c/0xa0 [ 479.194751][T13195] ? clear_bhb_loop+0x30/0x80 [ 479.199452][T13195] ? clear_bhb_loop+0x30/0x80 [ 479.204155][T13195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 479.210071][T13195] RIP: 0033:0x7fa4db7ec159 [ 479.214510][T13195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.234153][T13195] RSP: 002b:00007fa4d9a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.242599][T13195] RAX: ffffffffffffffda RBX: 00007fa4dba73fa0 RCX: 00007fa4db7ec159 [ 479.250603][T13195] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000003 [ 479.258699][T13195] RBP: 00007fa4d9a44090 R08: 0000000000000000 R09: 0000000000000000 [ 479.266776][T13195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.274770][T13195] R13: 00007fa4dba74038 R14: 00007fa4dba73fa0 R15: 00007fffd38c2548 [ 479.282878][T13195] [ 479.516145][T13208] netlink: 'syz.2.2776': attribute type 46 has an invalid length. [ 479.621310][T13208] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2776'. [ 480.208447][T13219] netlink: 'syz.1.2781': attribute type 39 has an invalid length. [ 480.388493][T13222] netlink: 'syz.0.2780': attribute type 10 has an invalid length. [ 480.503490][T13227] device pim6reg1 entered promiscuous mode [ 481.459026][T13243] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2788'. [ 481.500972][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2788'. [ 483.731028][T13275] netlink: 'syz.4.2798': attribute type 10 has an invalid length. [ 486.438046][T13334] netlink: 'syz.1.2815': attribute type 10 has an invalid length. [ 487.096329][T13353] device syzkaller0 entered promiscuous mode [ 487.119048][T13351] device pim6reg1 entered promiscuous mode [ 487.164871][T13356] FAULT_INJECTION: forcing a failure. [ 487.164871][T13356] name failslab, interval 1, probability 0, space 0, times 0 [ 487.249095][T13356] CPU: 0 PID: 13356 Comm: syz.4.2823 Not tainted syzkaller #0 [ 487.256630][T13356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.266719][T13356] Call Trace: [ 487.270057][T13356] [ 487.273008][T13356] dump_stack_lvl+0x188/0x250 [ 487.278011][T13356] ? show_regs_print_info+0x20/0x20 [ 487.283240][T13356] ? load_image+0x410/0x410 [ 487.287763][T13356] ? __might_sleep+0xf0/0xf0 [ 487.292386][T13356] ? __lock_acquire+0x7b50/0x7b50 [ 487.297424][T13356] should_fail+0x383/0x4b0 [ 487.301850][T13356] should_failslab+0x5/0x20 [ 487.306356][T13356] slab_pre_alloc_hook+0x51/0xc0 [ 487.311296][T13356] kmem_cache_alloc_trace+0x47/0x290 [ 487.316579][T13356] ? allocate_cgrp_cset_links+0xaa/0x320 [ 487.322268][T13356] allocate_cgrp_cset_links+0xaa/0x320 [ 487.327736][T13356] find_css_set+0x9ec/0x1520 [ 487.332339][T13356] ? cgroup_migrate_prepare_dst+0xc10/0xc10 [ 487.338241][T13356] ? mark_lock+0x94/0x320 [ 487.342586][T13356] cgroup_migrate_prepare_dst+0x114/0xc10 [ 487.348316][T13356] cgroup_attach_task+0x55d/0x830 [ 487.353343][T13356] ? cgroup_migrate_execute+0xff0/0xff0 [ 487.358913][T13356] ? get_task_cred+0x2b6/0x330 [ 487.363733][T13356] __cgroup1_procs_write+0x2ea/0x3f0 [ 487.369036][T13356] ? cgroup_pidlist_destroy_work_fn+0x1f0/0x1f0 [ 487.375288][T13356] ? cgroup_pidlist_stop+0xf0/0xf0 [ 487.380404][T13356] cgroup_file_write+0x2c4/0x670 [ 487.385346][T13356] ? read_lock_is_recursive+0x10/0x10 [ 487.390724][T13356] ? cgroup_seqfile_stop+0xd0/0xd0 [ 487.395851][T13356] ? cgroup_seqfile_stop+0xd0/0xd0 [ 487.400984][T13356] kernfs_fop_write_iter+0x3a8/0x500 [ 487.406282][T13356] vfs_write+0x748/0xd70 [ 487.410537][T13356] ? file_end_write+0x250/0x250 [ 487.415411][T13356] ? mutex_lock_nested+0x17/0x20 [ 487.420466][T13356] ? __fdget_pos+0x2bf/0x370 [ 487.425080][T13356] ? ksys_write+0x70/0x260 [ 487.429497][T13356] ksys_write+0x153/0x260 [ 487.433843][T13356] ? __ia32_sys_read+0x80/0x80 [ 487.438699][T13356] ? lockdep_hardirqs_on+0x94/0x140 [ 487.443950][T13356] do_syscall_64+0x4c/0xa0 [ 487.448369][T13356] ? clear_bhb_loop+0x30/0x80 [ 487.453047][T13356] ? clear_bhb_loop+0x30/0x80 [ 487.457723][T13356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 487.463616][T13356] RIP: 0033:0x7f3b2176a159 [ 487.468052][T13356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.487760][T13356] RSP: 002b:00007f3b1f9c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 487.496264][T13356] RAX: ffffffffffffffda RBX: 00007f3b219f1fa0 RCX: 00007f3b2176a159 [ 487.504244][T13356] RDX: 0000000000000012 RSI: 0000200000000380 RDI: 0000000000000008 [ 487.512216][T13356] RBP: 00007f3b1f9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 487.520188][T13356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.528156][T13356] R13: 00007f3b219f2038 R14: 00007f3b219f1fa0 R15: 00007ffe23fab4e8 [ 487.536248][T13356] [ 488.242110][T13372] netlink: 'syz.4.2829': attribute type 10 has an invalid length. [ 488.363016][T13379] FAULT_INJECTION: forcing a failure. [ 488.363016][T13379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.455202][T13379] CPU: 0 PID: 13379 Comm: syz.0.2830 Not tainted syzkaller #0 [ 488.462721][T13379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.472805][T13379] Call Trace: [ 488.476112][T13379] [ 488.479071][T13379] dump_stack_lvl+0x188/0x250 [ 488.483794][T13379] ? show_regs_print_info+0x20/0x20 [ 488.489019][T13379] ? load_image+0x410/0x410 [ 488.493552][T13379] ? __lock_acquire+0x7b50/0x7b50 [ 488.498615][T13379] should_fail+0x383/0x4b0 [ 488.503069][T13379] _copy_from_user+0x2e/0x170 [ 488.507820][T13379] __copy_msghdr_from_user+0x48a/0x630 [ 488.513297][T13379] ? verify_lock_unused+0x140/0x140 [ 488.518529][T13379] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 488.523852][T13379] ___sys_sendmsg+0x19a/0x2e0 [ 488.528559][T13379] ? __sys_sendmsg+0x290/0x290 [ 488.533392][T13379] __se_sys_sendmsg+0x1b7/0x2a0 [ 488.538264][T13379] ? __x64_sys_sendmsg+0x80/0x80 [ 488.543221][T13379] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 488.549234][T13379] ? lockdep_hardirqs_on+0x94/0x140 [ 488.554454][T13379] do_syscall_64+0x4c/0xa0 [ 488.558884][T13379] ? clear_bhb_loop+0x30/0x80 [ 488.563670][T13379] ? clear_bhb_loop+0x30/0x80 [ 488.568367][T13379] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 488.574278][T13379] RIP: 0033:0x7fa4db7ec159 [ 488.578709][T13379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.598331][T13379] RSP: 002b:00007fa4d9a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.606768][T13379] RAX: ffffffffffffffda RBX: 00007fa4dba73fa0 RCX: 00007fa4db7ec159 [ 488.614754][T13379] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 488.622851][T13379] RBP: 00007fa4d9a44090 R08: 0000000000000000 R09: 0000000000000000 [ 488.630845][T13379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.638848][T13379] R13: 00007fa4dba74038 R14: 00007fa4dba73fa0 R15: 00007fffd38c2548 [ 488.646879][T13379] [ 489.270824][T13397] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2836'. [ 490.864264][T13425] netlink: 'syz.4.2843': attribute type 10 has an invalid length. [ 490.957124][T13428] netlink: 'syz.3.2844': attribute type 4 has an invalid length. [ 490.987717][T13428] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2844'. [ 492.547736][T13453] netlink: 'syz.3.2851': attribute type 7 has an invalid length. [ 492.754195][T13458] device pim6reg1 entered promiscuous mode [ 493.018916][T13446] chnl_net:caif_netlink_parms(): no params data found [ 493.037393][T13461] device wlan0 left promiscuous mode [ 493.127280][T13466] device wlan0 entered promiscuous mode [ 493.563580][T13469] device wlan0 left promiscuous mode [ 493.599563][T13470] device wlan0 entered promiscuous mode [ 494.000345][ T9996] Bluetooth: hci5: command 0x0409 tx timeout [ 494.021395][T13446] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.032614][T13446] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.072009][T13446] device bridge_slave_0 entered promiscuous mode [ 494.152077][T13478] netlink: 'syz.1.2858': attribute type 10 has an invalid length. [ 494.211207][T13446] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.228943][T13446] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.246120][T13446] device bridge_slave_1 entered promiscuous mode [ 494.326894][T13446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.382669][T13446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.414634][T13492] netlink: 'syz.4.2861': attribute type 21 has an invalid length. [ 494.435371][T13492] netlink: 'syz.4.2861': attribute type 1 has an invalid length. [ 494.458074][T13492] netlink: 16090 bytes leftover after parsing attributes in process `syz.4.2861'. [ 494.548128][T13446] team0: Port device team_slave_0 added [ 494.574706][T13446] team0: Port device team_slave_1 added [ 494.649122][T13446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.674986][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.757808][T13446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.797354][T13446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.815693][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.888752][T13446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.968075][T13506] netlink: 'syz.2.2866': attribute type 21 has an invalid length. [ 495.043434][T13506] netlink: 'syz.2.2866': attribute type 7 has an invalid length. [ 495.179191][T13446] device hsr_slave_0 entered promiscuous mode [ 495.246869][T13446] device hsr_slave_1 entered promiscuous mode [ 495.293367][T13446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.326724][T13446] Cannot create hsr debugfs directory [ 496.051402][T11683] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.062214][ T9996] Bluetooth: hci5: command 0x041b tx timeout [ 496.132160][T13523] netlink: 'syz.4.2872': attribute type 10 has an invalid length. [ 496.228293][T11683] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.347747][T11683] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.417424][T11683] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.360275][T13571] device pim6reg1 entered promiscuous mode [ 498.136313][T13446] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 498.139742][T11252] Bluetooth: hci5: command 0x040f tx timeout [ 498.203778][T13446] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 498.290449][T13446] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 498.328597][T13446] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 498.376904][T13585] netlink: 'syz.3.2889': attribute type 1 has an invalid length. [ 498.494096][T13585] device syzkaller0 entered promiscuous mode [ 498.855776][T11683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.878526][T11683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.901298][T11683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.935379][T11683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.973662][T11683] bridge0: port 2(team0) entered disabled state [ 499.023005][T11683] device bridge_slave_0 left promiscuous mode [ 499.033287][T11683] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.088519][T11683] device veth1_vlan left promiscuous mode [ 499.097294][T11683] device veth0_vlan left promiscuous mode [ 499.756087][T11683] device team_slave_1 left promiscuous mode [ 499.778063][T11683] team0 (unregistering): Port device team_slave_1 removed [ 499.822972][T11683] device team_slave_0 left promiscuous mode [ 499.835985][T11683] team0 (unregistering): Port device team_slave_0 removed [ 499.876599][T11683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.916971][T11683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.937808][T11683] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 500.022172][T11683] bond0 (unregistering): Released all slaves [ 500.299761][ T4231] Bluetooth: hci5: command 0x0419 tx timeout [ 501.103525][T13446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.413621][T13644] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2904'. [ 501.502035][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.504570][T13640] netlink: 'syz.4.2902': attribute type 10 has an invalid length. [ 501.508390][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.266646][T13446] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.290074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 502.309084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 502.356870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 502.373300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.386436][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.393581][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.519622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.537827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.557941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.568022][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.575175][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.619091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.628404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.988855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 503.017648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 503.035504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 503.048565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 503.071816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 503.087074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.131270][T13446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.142831][T13446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 503.153226][T13667] device pim6reg1 entered promiscuous mode [ 503.208895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 503.217455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 503.227221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 504.590781][T13685] FAULT_INJECTION: forcing a failure. [ 504.590781][T13685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.645330][T13685] CPU: 1 PID: 13685 Comm: syz.4.2914 Not tainted syzkaller #0 [ 504.652848][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.663012][T13685] Call Trace: [ 504.666337][T13685] [ 504.669283][T13685] dump_stack_lvl+0x188/0x250 [ 504.673993][T13685] ? show_regs_print_info+0x20/0x20 [ 504.679305][T13685] ? load_image+0x410/0x410 [ 504.683828][T13685] ? __lock_acquire+0x7b50/0x7b50 [ 504.688876][T13685] should_fail+0x383/0x4b0 [ 504.693354][T13685] _copy_from_user+0x2e/0x170 [ 504.698060][T13685] iovec_from_user+0x142/0x370 [ 504.702944][T13685] __import_iovec+0x70/0x490 [ 504.707591][T13685] ? __lock_acquire+0x13dc/0x7b50 [ 504.712651][T13685] import_iovec+0x6f/0xa0 [ 504.717100][T13685] ___sys_sendmsg+0x1fd/0x2e0 [ 504.721982][T13685] ? __sys_sendmsg+0x290/0x290 [ 504.726817][T13685] __se_sys_sendmsg+0x1b7/0x2a0 [ 504.731861][T13685] ? __x64_sys_sendmsg+0x80/0x80 [ 504.736820][T13685] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 504.742849][T13685] ? lockdep_hardirqs_on+0x94/0x140 [ 504.748074][T13685] do_syscall_64+0x4c/0xa0 [ 504.752680][T13685] ? clear_bhb_loop+0x30/0x80 [ 504.757375][T13685] ? clear_bhb_loop+0x30/0x80 [ 504.762189][T13685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 504.768107][T13685] RIP: 0033:0x7f3b2176a159 [ 504.772543][T13685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.792167][T13685] RSP: 002b:00007f3b1f9a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.800601][T13685] RAX: ffffffffffffffda RBX: 00007f3b219f2090 RCX: 00007f3b2176a159 [ 504.808589][T13685] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 504.816576][T13685] RBP: 00007f3b1f9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 504.824562][T13685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.832549][T13685] R13: 00007f3b219f2128 R14: 00007f3b219f2090 R15: 00007ffe23fab4e8 [ 504.840562][T13685] [ 504.883079][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.934683][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.960878][T13446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.059907][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 505.190265][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 505.865645][T13690] netlink: 'syz.4.2916': attribute type 10 has an invalid length. [ 505.878075][T13703] netlink: 'syz.1.2918': attribute type 7 has an invalid length. [ 505.901099][T13446] device veth0_vlan entered promiscuous mode [ 505.910080][T10594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 505.920454][T10594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 505.951794][T10594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 505.980035][T10594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 506.011968][T13446] device veth1_vlan entered promiscuous mode [ 506.517236][T10594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 506.536011][T10594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 506.561469][T13446] device veth0_macvtap entered promiscuous mode [ 506.615307][T13446] device veth1_macvtap entered promiscuous mode [ 506.839965][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.886784][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.912181][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.927610][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.955940][T13446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.969320][T10594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 506.986727][T10594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 506.995926][T10594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 507.023135][T10594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 507.044434][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.135876][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.204923][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.261604][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.321625][T13446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.441456][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 507.470456][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 507.502425][T13446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.520280][T13446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.529319][T13446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.544434][T13446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.372044][ T4521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.401837][ T4521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.476839][T13734] device pim6reg1 entered promiscuous mode [ 508.643769][T10594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 508.681474][T10594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.693567][T10594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.188847][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 509.221245][T13740] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2930'. [ 509.262907][T13743] netlink: 'syz.4.2930': attribute type 2 has an invalid length. [ 509.323928][T13743] netlink: 'syz.4.2930': attribute type 8 has an invalid length. [ 509.357736][T13743] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2930'. [ 509.936799][T13752] netlink: 'syz.0.2942': attribute type 10 has an invalid length. [ 510.129992][T13752] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.090139][T13752] device bridge_slave_1 left promiscuous mode [ 513.123840][T13752] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.152633][T13752] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 515.553959][T13782] chnl_net:caif_netlink_parms(): no params data found [ 516.401952][T13782] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.469543][T13782] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.554838][T13782] device bridge_slave_0 entered promiscuous mode [ 516.671971][T13782] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.707119][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.756299][T13782] device bridge_slave_1 entered promiscuous mode [ 517.039702][T13782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.110182][ T4228] Bluetooth: hci0: command 0x0409 tx timeout [ 517.134498][T13782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.643246][T12062] Bluetooth: hci1: command 0x0409 tx timeout [ 518.078353][T13788] chnl_net:caif_netlink_parms(): no params data found [ 518.127276][T13782] team0: Port device team_slave_0 added [ 518.228031][T13782] team0: Port device team_slave_1 added [ 518.734744][T13782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.749483][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.776633][T13782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.791476][T13782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.798532][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.825786][T13782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.118106][T13788] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.181267][T12062] Bluetooth: hci0: command 0x041b tx timeout [ 519.229881][T13788] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.238121][T13788] device bridge_slave_0 entered promiscuous mode [ 519.534159][T13782] device hsr_slave_0 entered promiscuous mode [ 519.601437][T13782] device hsr_slave_1 entered promiscuous mode [ 519.618131][T13782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.651310][T13782] Cannot create hsr debugfs directory [ 519.661999][T12062] Bluetooth: hci1: command 0x041b tx timeout [ 519.680302][T13788] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.687400][T13788] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.805476][T13788] device bridge_slave_1 entered promiscuous mode [ 520.087197][T13788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.100661][T13845] netlink: 'syz.0.2954': attribute type 3 has an invalid length. [ 520.252136][T13788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.339618][T13845] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2954'. [ 520.434039][T13788] team0: Port device team_slave_0 added [ 520.516370][T13788] team0: Port device team_slave_1 added [ 520.928459][T13782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.168988][T13788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.199639][T13788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.262025][T13788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.262848][T12073] Bluetooth: hci0: command 0x040f tx timeout [ 521.359355][T13782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.403378][T13788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.419750][T13788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.494467][T13788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.645977][T13782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.744046][T12073] Bluetooth: hci1: command 0x040f tx timeout [ 521.823551][T13782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.845466][T13788] device hsr_slave_0 entered promiscuous mode [ 521.852567][T13788] device hsr_slave_1 entered promiscuous mode [ 521.859210][T13788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.874321][T13788] Cannot create hsr debugfs directory [ 522.189970][T13782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 522.236303][T13782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 522.303088][T13782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 522.326305][T13782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 522.451215][T13788] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 522.498855][T13788] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 522.530242][T13788] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 522.578979][T13788] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 522.661251][T13782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.719037][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 522.737745][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.758096][T13782] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.798169][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 522.810395][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 522.825470][T10568] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.832581][T10568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.874764][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 522.894118][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 522.908226][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.925963][T10568] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.933112][T10568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.953550][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 522.997531][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 523.017246][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 523.036700][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 523.058698][T13782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 523.080865][T13782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.104327][T13788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.124110][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 523.138785][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 523.156764][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 523.167677][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 523.187299][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.206576][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 523.216397][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.259064][T13788] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.279990][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 523.297123][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.307017][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.336896][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.370717][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.409162][T10568] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.416299][T10568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.443636][T12062] Bluetooth: hci0: command 0x0419 tx timeout [ 523.448676][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 523.461074][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.477595][T10568] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.484725][T10568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.519326][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 523.537371][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 523.548911][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 523.602135][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 523.618929][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 523.641859][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 523.662110][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 523.689008][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 523.726999][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.771025][T13788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.792690][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 523.808067][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 523.818059][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 523.832870][T12062] Bluetooth: hci1: command 0x0419 tx timeout [ 523.835711][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.856781][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 523.865337][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 523.894757][T13782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.956264][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 523.977555][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 524.036533][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 524.054042][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 524.090392][T13782] device veth0_vlan entered promiscuous mode [ 524.120762][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 524.137638][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 524.164332][T13782] device veth1_vlan entered promiscuous mode [ 524.233032][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 524.260562][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 524.276695][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 524.305526][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 524.330576][T13782] device veth0_macvtap entered promiscuous mode [ 524.367396][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 524.377417][T13782] device veth1_macvtap entered promiscuous mode [ 524.466822][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.478191][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.498255][T13788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.516717][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.528412][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.551711][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.586528][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.611592][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.632020][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.653500][T13782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.689881][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 524.698973][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 524.742265][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.764251][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.783196][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.802646][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.818224][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.837800][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.857187][T13782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.877176][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 524.886984][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 524.909354][T13782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.927456][T13782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.937643][T13782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.957473][T13782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.171274][T10568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.183523][T10568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.210966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 525.230358][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.238337][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.272712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 525.337705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 525.360776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.617970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 525.647594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.694032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.724169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.775870][T13788] device veth0_vlan entered promiscuous mode [ 525.862202][T13788] device veth1_vlan entered promiscuous mode [ 526.113807][T13788] device veth0_macvtap entered promiscuous mode [ 526.126586][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 526.142685][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.176247][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 526.260479][T13788] device veth1_macvtap entered promiscuous mode [ 526.278464][T13788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.306216][T13788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.326669][T13788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.554893][T13788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.596021][T13788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.632991][T13788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.671601][T13788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.722485][T13788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.778494][T13788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.916119][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 526.941985][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.983669][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 527.030710][T13788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.083177][T13788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.136458][T13788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.159776][T13788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.170371][T13788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.180870][T13788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.190949][T13788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.211740][T13788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.228562][T13788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.245552][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 527.307980][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.388238][T13788] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.407892][T13788] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.487870][T13788] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.525853][T13788] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.642700][T13904] netlink: 'syz.0.2973': attribute type 12 has an invalid length. [ 527.715539][T13904] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2973'. [ 528.007133][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.039219][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.080162][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 528.153637][ T4521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.168987][ T4521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.193242][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 634.389365][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 634.396370][ C1] rcu: 0-....: (1 GPs behind) idle=8c7/1/0x4000000000000002 softirq=40238/40242 fqs=1379 [ 634.408931][ C1] (detected by 1, t=10505 jiffies, g=58953, q=779) [ 634.417319][ C1] Sending NMI from CPU 1 to CPUs 0: [ 634.423371][ C0] NMI backtrace for cpu 0 [ 634.423380][ C0] CPU: 0 PID: 13928 Comm: syz.2.2981 Not tainted syzkaller #0 [ 634.423395][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.423403][ C0] RIP: 0010:kasan_check_range+0xe/0x290 [ 634.423438][ C0] Code: 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 41 57 <41> 56 41 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 49 c1 [ 634.423451][ C0] RSP: 0018:ffffc90000006c48 EFLAGS: 00000002 [ 634.423465][ C0] RAX: 0000000000000001 RBX: 0000000000000015 RCX: ffffffff815d02e5 [ 634.423475][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901ef0c0 [ 634.423484][ C0] RBP: ffffc90000006e90 R08: dffffc0000000000 R09: 1ffffffff203de18 [ 634.423494][ C0] R10: dffffc0000000000 R11: fffffbfff203de19 R12: 00000000c4e6ccc5 [ 634.423505][ C0] R13: ffff88802a2b0000 R14: 00000000a1b9cfc9 R15: ffff88802a2b0b88 [ 634.423515][ C0] FS: 00007fe902fd36c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 634.423529][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.423539][ C0] CR2: 000000110c30c4d8 CR3: 0000000055968000 CR4: 00000000003506f0 [ 634.423556][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 634.423566][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 634.423575][ C0] Call Trace: [ 634.423581][ C0] [ 634.423589][ C0] __lock_acquire+0x1305/0x7b50 [ 634.423621][ C0] ? mark_lock+0x94/0x320 [ 634.423636][ C0] ? mark_lock+0x94/0x320 [ 634.423648][ C0] ? verify_lock_unused+0x140/0x140 [ 634.423663][ C0] ? __lock_acquire+0x1305/0x7b50 [ 634.423682][ C0] ? mark_lock+0x94/0x320 [ 634.423693][ C0] ? verify_lock_unused+0x140/0x140 [ 634.423710][ C0] lock_acquire+0x19e/0x400 [ 634.423725][ C0] ? rcu_lock_acquire+0x5/0x30 [ 634.423792][ C0] ? rcu_lock_release+0x5/0x40 [ 634.423805][ C0] ? read_lock_is_recursive+0x10/0x10 [ 634.423822][ C0] ? llist_add_batch+0x85/0xa0 [ 634.423845][ C0] rcu_lock_acquire+0x2a/0x30 [ 634.423858][ C0] ? rcu_lock_acquire+0x5/0x30 [ 634.423869][ C0] perf_output_begin_forward+0xa5/0xa30 [ 634.423882][ C0] ? kvm_is_in_guest+0x24/0x30 [ 634.423936][ C0] ? perf_prepare_sample+0x1690/0x1cb0 [ 634.423952][ C0] ? __perf_cgroup_move+0x140/0x140 [ 634.423966][ C0] ? perf_callchain+0x190/0x190 [ 634.423982][ C0] perf_event_output_forward+0x19b/0x2e0 [ 634.423997][ C0] ? perf_get_page_size+0x430/0x430 [ 634.424012][ C0] ? tracing_gen_ctx_irq_test+0xb3/0x130 [ 634.424067][ C0] ? perf_trace_buf_update+0xa8/0x230 [ 634.424087][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 634.424102][ C0] __perf_event_overflow+0x35f/0x550 [ 634.424119][ C0] perf_tp_event+0x324/0xbe0 [ 634.424134][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 634.424164][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 634.424181][ C0] perf_trace_preemptirq_template+0x2aa/0x360 [ 634.424197][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 634.424214][ C0] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 634.424230][ C0] ? __irq_exit_rcu+0x147/0x230 [ 634.424244][ C0] ? irq_exit_rcu+0x20/0x20 [ 634.424258][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 634.424272][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 634.424287][ C0] trace_hardirqs_on+0x57/0x80 [ 634.424301][ C0] asm_sysvec_irq_work+0x16/0x20 [ 634.424315][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 634.424337][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 f2 0f 9d 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 634.424348][ C0] RSP: 0018:ffffc90000007780 EFLAGS: 00000206 [ 634.424360][ C0] RAX: bad7bba26b4fd400 RBX: 1ffff92000000ef4 RCX: bad7bba26b4fd400 [ 634.424371][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4540 [ 634.424381][ C0] RBP: ffffc90000007860 R08: ffffffff901ef1c7 R09: 1ffffffff203de38 [ 634.424390][ C0] R10: dffffc0000000000 R11: fffffbfff203de39 R12: ffffffff8c323400 [ 634.424401][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 634.424419][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 634.424433][ C0] ? nf_hook+0x360/0x360 [ 634.424469][ C0] ? ip6_mtu+0x2fb/0x3d0 [ 634.424499][ C0] ? ip6_finish_output+0x627/0x790 [ 634.424515][ C0] __rcu_read_unlock+0x78/0xd0 [ 634.424529][ C0] ndisc_send_skb+0xd3b/0x1410 [ 634.424655][ C0] ? ndisc_alloc_skb+0x420/0x420 [ 634.424671][ C0] ? rcu_lock_release+0x20/0x20 [ 634.424690][ C0] ? ndisc_send_rs+0x524/0x700 [ 634.424707][ C0] addrconf_rs_timer+0x367/0x640 [ 634.424723][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 634.424742][ C0] ? kasan_check_range+0x62/0x290 [ 634.424761][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 634.424776][ C0] call_timer_fn+0x17b/0x540 [ 634.424801][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 634.424816][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 634.424831][ C0] ? __run_timers+0x810/0x810 [ 634.424850][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 634.424865][ C0] __run_timers+0x56c/0x810 [ 634.424884][ C0] ? detach_timer+0x2b0/0x2b0 [ 634.424905][ C0] run_timer_softirq+0x63/0xf0 [ 634.424921][ C0] handle_softirqs+0x336/0x830 [ 634.424937][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 634.424951][ C0] ? do_softirq+0x210/0x210 [ 634.424964][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 634.424982][ C0] __irq_exit_rcu+0x13b/0x230 [ 634.424995][ C0] ? irq_exit_rcu+0x20/0x20 [ 634.425012][ C0] irq_exit_rcu+0x5/0x20 [ 634.425025][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 634.425060][ C0] [ 634.425065][ C0] [ 634.425070][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 634.425086][ C0] RIP: 0010:preempt_schedule_common+0x1e/0xd0 [ 634.425104][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 57 41 56 53 49 bf 00 00 00 00 00 fc ff df eb 0d 48 f7 03 08 00 00 00 0f 84 a6 00 00 00 <65> ff 05 13 b3 39 76 65 8b 05 0c b3 39 76 25 ff ff ff 7f 83 f8 01 [ 634.425117][ C0] RSP: 0018:ffffc900045df9e0 EFLAGS: 00000202 [ 634.425132][ C0] RAX: 1ffff11005456000 RBX: ffff88802a2b0000 RCX: ffffffff89c8bd35 [ 634.425144][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802a2b0000 [ 634.425154][ C0] RBP: ffffc900045dfa78 R08: ffff88802a2b0007 R09: 1ffff11005456000 [ 634.425164][ C0] R10: dffffc0000000000 R11: ffffed1005456001 R12: ffff8880b903a340 [ 634.425175][ C0] R13: ffff8880b903b098 R14: ffff88802a2b14e8 R15: dffffc0000000000 [ 634.425189][ C0] ? preempt_schedule_common+0xa5/0xd0 [ 634.425208][ C0] preempt_schedule+0xbc/0xd0 [ 634.425223][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 634.425238][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 634.425253][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 634.425267][ C0] ? _raw_spin_unlock+0x40/0x40 [ 634.425280][ C0] preempt_schedule_thunk+0x16/0x18 [ 634.425314][ C0] try_to_wake_up+0x6cc/0x1020 [ 634.425343][ C0] wake_up_q+0x78/0xc0 [ 634.425358][ C0] futex_wake+0x4a9/0x540 [ 634.425430][ C0] ? futex_wait+0x680/0x680 [ 634.425448][ C0] do_futex+0xd83/0x12b0 [ 634.425468][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 634.425483][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 634.425498][ C0] ? futex_exit_release+0x1c0/0x1c0 [ 634.425515][ C0] ? __se_sys_futex+0xec/0x420 [ 634.425531][ C0] __se_sys_futex+0x389/0x420 [ 634.425545][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 634.425559][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 634.425574][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 634.425587][ C0] do_syscall_64+0x4c/0xa0 [ 634.425599][ C0] ? clear_bhb_loop+0x30/0x80 [ 634.425613][ C0] ? clear_bhb_loop+0x30/0x80 [ 634.425627][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 634.425642][ C0] RIP: 0033:0x7fe904d7b159 [ 634.425657][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.425669][ C0] RSP: 002b:00007fe902fd30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 634.425685][ C0] RAX: ffffffffffffffda RBX: 00007fe905002fa8 RCX: 00007fe904d7b159 [ 634.425695][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe905002fac [ 634.425705][ C0] RBP: 00007fe905002fa0 R08: 000d6e3a5d2784ca R09: 0000000000000000 [ 634.425715][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 634.425724][ C0] R13: 00007fe905003038 R14: 00007ffd391b0150 R15: 00007ffd391b0238 [ 634.425740][ C0] [ 637.170879][T12074] Bluetooth: hci6: command 0x0409 tx timeout [ 639.521104][T12074] Bluetooth: hci6: command 0x041b tx timeout [ 639.858599][T12062] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 11000 jiffies s: 32865 root: 0x1/. [ 640.078599][T12062] rcu: blocking rcu_node structures (internal RCU debug): [ 640.259435][T12062] Task dump for CPU 0: [ 640.263739][T12062] task:syz.2.2981 state:R running task stack:27248 pid:13928 ppid: 4196 flags:0x0000400c [ 640.274810][T12062] Call Trace: [ 640.278156][T12062] [ 640.281172][T12062] ? asm_sysvec_irq_work+0x16/0x20 [ 640.286532][T12062] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 640.293057][T12062] ? rcu_nmi_exit+0x6f/0xf0 [ 640.297710][T12062] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 640.304603][T12062] ? lock_chain_count+0x20/0x20 [ 640.309816][T12062] ? rcu_is_watching+0x11/0xa0 [ 640.314841][T12062] ? sysvec_apic_timer_interrupt+0x80/0xc0 [ 640.321311][T12062] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 640.329619][T12062] ? preempt_schedule_common+0xa5/0xd0 [ 640.335157][T12062] ? preempt_schedule_common+0x1e/0xd0 [ 640.340788][T12062] ? preempt_schedule+0xbc/0xd0 [ 640.345682][T12062] ? schedule_preempt_disabled+0x20/0x20 [ 640.351383][T12062] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 640.357391][T12062] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 640.363512][T12062] ? _raw_spin_unlock+0x40/0x40 [ 640.368661][T12062] ? preempt_schedule_thunk+0x16/0x18 [ 640.374286][T12062] ? try_to_wake_up+0x6cc/0x1020 [ 640.379455][T12062] ? wake_up_q+0x78/0xc0 [ 640.384105][T12062] ? futex_wake+0x4a9/0x540 [ 640.388834][T12062] ? futex_wait+0x680/0x680 [ 640.393401][T12062] ? do_futex+0xd83/0x12b0 [ 640.397854][T12062] ? asm_sysvec_irq_work+0x16/0x20 [ 640.403107][T12062] ? lockdep_hardirqs_on+0x94/0x140 [ 640.408583][T12062] ? futex_exit_release+0x1c0/0x1c0 [ 640.414161][T12062] ? __se_sys_futex+0xec/0x420 [ 640.419159][T12062] ? __se_sys_futex+0x389/0x420 [ 640.424090][T12062] ? lockdep_hardirqs_on+0x94/0x140 [ 640.429741][T12062] ? __x64_sys_futex+0xf0/0xf0 [ 640.434797][T12062] ? __x64_sys_futex+0x1d/0xf0 [ 640.439702][T12062] ? do_syscall_64+0x4c/0xa0 [ 640.445247][T12062] ? clear_bhb_loop+0x30/0x80 [ 640.450406][T12062] ? clear_bhb_loop+0x30/0x80 [ 640.457210][T12062] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 640.464761][T12062]