last executing test programs: 3.068168512s ago: executing program 3 (id=3335): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10b0c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0601005e140602000000000e000a00100000000a800000129481", 0x2f}], 0x1}, 0x0) 2.932356216s ago: executing program 3 (id=3338): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x11, 0x0, 0x40000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x6, 0x0, 0x0, 0x0, 0x20, 0x1a505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xb}, 0x7602, 0x5, 0x2, 0x9, 0x0, 0x8000006, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2404c880) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x830d}, 0x200, 0x2, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018005a00000000003000000030000000020000000000000000000006040000000000000001001a059506000000000000030000000000000000000000000000090100000000009c8d9f772bc538b068aaffff3b1364b1e87788c589a2f1f80e75f857956bc313cadf75e44b68fcd08d754c722d636482"], 0x0, 0x4a}, 0x28) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b1"], 0xfe33) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1ff, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006", 0x39}], 0x1}, 0x20000004) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209", 0x29}], 0x1}, 0x800) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3da9, 0x80100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x8010, 0x47c3, 0x0, 0x0, 0x3, 0x76, 0x0, 0x0, 0x84ed, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x80000000000dd, 0x708}, 0x0, 0x4, 0x80, 0x6, 0x52e0, 0x0, 0x0, 0x0, 0xc88}, 0x0, 0x10, 0xffffffffffffffff, 0x9) 2.372020732s ago: executing program 2 (id=3344): r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3fd, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r1, 0x6, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000355a622bf5000100000000000000", @ANYRESOCT=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES16=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r4, 0x0, 0x4, &(0x7f00000003c0)=')\xccO\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0xffffffffffffff9d}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000000000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3533, 0x100}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair(0x6, 0x1, 0x0, &(0x7f0000000180)) 2.300415059s ago: executing program 4 (id=3346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x2}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0xff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x7, 0xfffffffc, 0xe51}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000740)=0x78) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000001c0)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x2, 0x4, 0x3, 0x3ff}, {0x2, 0x5, 0x47, 0x2}, {0x200, 0x80, 0x51, 0x7}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x12, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x7, 0xb, 0x1, 0x100, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}, @generic={0x6, 0xc, 0x4, 0x7, 0x8f}, @ldst={0x1, 0x0, 0x2, 0x6, 0x4, 0xc, 0x10}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbc}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @generic={0x8f, 0x7, 0x9, 0x7ff, 0x4}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r5, r3, 0x0, 0x0, 0x0}, 0x30) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) sendmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x5, @private1, 0x5}}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)="4d9d8c8b51ef0d8e49e3c7daa449b3c3f6fdcf86b44973172263f15be725e1999a9e5ecb4cbc34bebe", 0x29}, {&(0x7f0000000900)="417bd74171401f6bc91a2846a81990ab9001a1f5147dcaa520483a0dab9c9d32cf87333d1bee2ebe43d4bf2edbc27cc4b870800e122a6d3e0203baa7f2618110a348bbf7a1d3bc8bb888f4bb", 0x4c}], 0x2, &(0x7f0000003940)=[{0xf8, 0x110, 0x1, "9a4bc397195b5932b22415b30a578beef2f652db49da81d0920b6a0eeddfb8c6243f8b8ba860a4cae31b8110baff10cb59e9958d5e605c7eb9fdbc54e729f1176e90cad9d18176a3c387296536789450e6bcc1f422f0b3a558fa9f27c20d3bac5f3a22ba5cd8614575e31a2ca0b145702b7b6d2102a66600e812890a204d55bc4c22af33ce5ed1b14bbe9724ad8987cfe8fc0a3ead7b1e5f523c1144fadf01d4d5156ee975b20ccc41523b3c915b06e15058e7f0cac118981cf7a4330902e8a9b1288efd6d8f658879f92bd80f0bb0eaeb4390f3c4870161203987166884797377782b45913ec794"}, {0x1010, 0x119, 0x4, "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"}], 0x1108}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f00000001c0)={0x0, 0xfffffffffffffe0f, &(0x7f00000001c0), 0x2}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) 2.196429119s ago: executing program 3 (id=3347): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x27, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0xfda7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xc, 0x31b, 0x564}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x3, 0x2, 0x3, 0x5}], 0x10, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000009c0)=""/129, 0x2e, 0x81, 0x1}, 0x28) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000001d80), 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r7, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000540)="ff27365368f55267622e01fb37b943d3b4923e95f5ce0a6bd5bec2e2bf9101c5984cdf84620767fb3574429798f9347204bfb2a5ac071e1f5b5d6a749af7f8051bd6b4e53fdbf07e0cde79076811829e0ea19434a9dace87cb78ea22c1abb4ce54c7d7b5c995567da64924edec853b82c946252a53316d7e602d47d19faf6c3367cd7506d0023d04f2e9074430bc7a75cba3eb7acaea649a022edf74105554b927e4b832e3964ff7b1c2096590ea95270ed8a4b513fa47de1321ea66e308e2d5f76f3d591f8b41155d6f362b0ddd4629adab4a99a4462f212ca843e464b724f8c3b0be35c6", 0xe5}, {&(0x7f0000000ac0)="9f735fe1f72de7d26ac19d0f39cc27425b98670af5d9242ee920bc6818ac4f8c6e731c76c67cea4b7f50ddd5fe4292ed1dcd8c5fdc460450dad19e15f8a032e85ef5d8213d44d5fa222aacc17e309e36f4e8b14011ff25c2ebdf56a1d295f3a3c50f70b06a466c4975a9e685417b396e363c4f17998f8d16dbfceb7d560c22d89b5fbd1f6fb1fc06d49a6d879b77a8a3a3bdb703dc48afd15053adc289103e69123eff8ba30b1ee1d671812198bc82c867640326609714502bffcce02e362c1272d37bf2933059174bd919811641b84df3bf8dca2b80dedd87c785201aeaeddbcb", 0xe1}], 0x2, &(0x7f0000000c40)=[@ip_retopts={{0x38, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x9c, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0x68, 0x1, 0x3, [{@loopback, 0x3}, {@broadcast, 0x10001}, {@multicast1, 0xffc}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3bb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @remote}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@end, @end, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0xf, 0x7f, [@multicast2, @broadcast, @local]}, @ssrr={0x89, 0xb, 0xa6, [@private=0xa010101, @broadcast]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x7, 0x0}}}}], 0xf8}, 0x40800) r9 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r9, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000540), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r10, &(0x7f00000000c0)='W', &(0x7f0000000400)=""/153}, 0x20) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r12 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r12, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000070000004404a60007036f001c000000000000000000000008000000", @ANYRESOCT], 0x38}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x13, &(0x7f0000000200)=r11, 0x4) sendmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x2a, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000001014000000000000000100070001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x20000085}, 0x400c044) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63ae", 0xb}], 0x1}, 0x0) 1.699884186s ago: executing program 4 (id=3351): r0 = syz_clone(0x8abebfbda2b56177, &(0x7f00000007c0), 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000a00)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000100)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000009c0)="5c00000012006bab9e3fe3d86e17aa310f6b876c1d0000007ea608641626f3650400410038000a007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xf}, 0x6303, 0xe8, 0x0, 0x4, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, r2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f", @ANYRESHEX=r1], 0x0, 0x34, 0x0, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xffffffffffffffd0}, 0x80) socketpair(0x26, 0x5, 0x400, &(0x7f0000000000)) socket$kcm(0x2, 0x922000000001, 0x106) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, 0x0, 0xcfa4) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r9, 0x0, 0x22, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000008007e227f3ad7a91ba78c185431cb8329614f78c7e6", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000002c0)={r6, r9}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000240), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000340), 0x2, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 1.683021673s ago: executing program 2 (id=3352): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000840)}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, @perf_bp={0x0, 0x3}, 0x10104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000084000000000100000100000000000000", @ANYRES32, @ANYBLOB="00000000fdfffffffffffffff62e", @ANYBLOB="e45f", @ANYRES8], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.651533328s ago: executing program 0 (id=3353): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4d, 0xffffffffffffffff, 0x0, 0x1c000000007400}, 0x38) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)=""/183}, 0xfffffef1) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async, rerun: 64) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc72}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) (async, rerun: 64) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x8, 0x0, 0x0}}, 0x10) (async) socketpair(0xf, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) (rerun: 32) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000500)={r0}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x98629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_config_ext={0x9, 0x80000000000}, 0x8004, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r5) (async) socket$kcm(0xa, 0x3, 0x3a) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000600)="43b3c9bde519acdf12bbf848ab13993648bc8488d043cfe96b49ded5210ec30138043c6f342db945f1f446278ba24cf0b4933e574e2025c0b2f60b1188e80e567d22eaa869d21e33579fe1c21741148460524ec3e157cf194d47956c08fe1f8b66e374b45929cf93d7f8e769e5cfeb6b2229642b8c7591814ca32d7d59bd920919cf59da918ecca45ea26fdc1596b8d53843b5b2183989946f222f8a3df29a2166e592c8", 0xa4}, {&(0x7f0000000900)="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", 0x1fd}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="faf9c0fc01207b09d45816962e3ab9d839b72c37f9aa730d10d3e81e9ef334a639d596aca07138cd18b8f75dc93b52f2a24a0def4f3a3876e5058e472f326e96d25e9071ea08e0aa98c2a59644a67c0727cc355453c5f72065ad9608ce2db880913007bffe0124c0291c61ae353715e0fb563dccc9bfc71a0dab480f121b11cd1596aad1ff7a501534e63b63b68d"], 0x28, 0x20000004}, 0x4810) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r7, &(0x7f0000000280)="0e56ce71572c2a7caf9cd52b6f52f995b9184055941d04e97bb6a4af40a4650ce7ab261eeb5a58110ac79a906be7f7703138b30aafeacfdf258bd9f3faef4ad64b40ea98e4b9f3cd27360645fac6aba523165194beb95454071f997abfe44beb54ed9394857b5e811db968894c45b38f9585930325ed10b9b6d4044ffb2046dd8c9da20036958db81f46959ff9f5474c7c55ecb8486f772c7bf23d16fc72aa69f0ee", &(0x7f0000000340)=""/22, 0x4}, 0x20) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r8 = openat$cgroup_ro(r7, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) 1.413750113s ago: executing program 1 (id=3355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90724fc60", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) getpid() 1.324639717s ago: executing program 0 (id=3356): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x840, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x6, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) recvmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000280)=@x25, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000380)=""/223, 0xdf}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x5, &(0x7f0000002100)=""/4096, 0x1000}, 0x40000001) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d11410", 0x3}], 0x1}, 0x4c081) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 1.204045164s ago: executing program 3 (id=3357): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x11, 0x0, 0x40000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x6, 0x0, 0x0, 0x0, 0x20, 0x1a505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xb}, 0x7602, 0x5, 0x2, 0x9, 0x0, 0x8000006, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2404c880) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x830d}, 0x200, 0x2, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018005a00000000003000000030000000020000000000000000000006040000000000000001001a059506000000000000030000000000000000000000000000090100000000009c8d9f772bc538b068aaffff3b1364b1e87788c589a2f1f80e75f857956bc313cadf75e44b68fcd08d754c722d636482"], 0x0, 0x4a}, 0x28) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b1"], 0xfe33) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1ff, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006", 0x39}], 0x1}, 0x20000004) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209", 0x29}], 0x1}, 0x800) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3da9, 0x80100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x8010, 0x47c3, 0x0, 0x0, 0x3, 0x76, 0x0, 0x0, 0x84ed, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x80000000000dd, 0x708}, 0x0, 0x4, 0x80, 0x6, 0x52e0, 0x0, 0x0, 0x0, 0xc88}, 0x0, 0x10, 0xffffffffffffffff, 0x9) 1.055738847s ago: executing program 0 (id=3358): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800dac0f0003ff", 0x33fe0}], 0x1, 0x0, 0x300, 0x8100000}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r2}) 905.624089ms ago: executing program 4 (id=3359): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x10220, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xffffffffffffffc0, 0x2}, 0x90020, 0x1, 0x1, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x483, 0x0, 0x20008}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x6, @perf_bp={0x0, 0x9}, 0x8000, 0x0, 0x0, 0xf17b17cb08554aef, 0x0, 0xfffffffd, 0xfffc}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x16, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 850.700769ms ago: executing program 3 (id=3360): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000100000000000000000000009500000000000000461d02562c3163536e83a7f6ac12a8b52f0d70aa97a91fa46cdcefe7534fda04c1ce6524e7e718c0b1da96d9c9fa8e9523840100cbac3c07a0bf00ff9513b150a632c33ca9a009870000000000000000000000000000002cd50db1486b80ee61ff6ddaa43468bf0609a8ef7fd07f4c556489cf61cfad63e826fff67d3299ca9f9b85cdcd75b85bb1775f4ff03b75aa7b6aa1a7e9a2b91d173d541bce370d9e6810dec2fe8300dc5edf3f6aa43810579aed4ee19fbacb5bd5e5337b507559ca6acc6471ecad2746ab01526ace07000000c1ea01c13a2406007dae5bf308287352cc53f035347270d076c93f1b1a810eb2c7d72ee9ce76e6da15600893bc36f6502f75a8acc045e2315b"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000180)="00f2565242fb0963a3bdb03926a27d5d41342721e5cc2217a94bc2e8cf268491c726a01bf8c7dd8c497f3719cd94476298db64295efbdd8312822de64afa9819bbd39994ed114495702063744c021703ca1fbba350ef7190b6cfeac6933f1a8d018238a96fae9b373313ded01d19b65c775c210139fa30d0af91e757198aa095bda404605f24ce13cfc4fa5643ccb023ef29332fb47eba34e9792f61daef501f8eb64978b9d334f0a81e8694691e8be9555bb0cf1aab3a8f5614aba23b4527dc89684b4ea0b69c592f129ac4ff20b7a474baa0bd46ae8ba7f6edf3e5f5b1f2b8ad4ccf", 0x0}, 0x48) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x11, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003b) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r1], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xd, &(0x7f0000000000), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r4, 0x400454cc, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800dac0f0003ff", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'veth1_to_bridge\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000100000000d300000000008500000005000000850000000e00000095000000000000003db388854e70bb5570ba004e5fc96bdc4970aeb95893da9deba156d1b02d798f7087a0b6d3de181267e708e1366de1f11a924de02cce5f025fe28290d037a1231b1ed4a18a953093a0905e6cd1572c085b2ab3f2edf5c5fbb56957c27b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000000c0)={r6}) 747.693049ms ago: executing program 4 (id=3361): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10b0c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a800000129481", 0x2f}], 0x1, 0x0, 0x106}, 0x0) 746.909109ms ago: executing program 1 (id=3362): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002285000000a800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x10000000000000, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd73"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x5fa8881abd17caf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x2ed}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x80000000, 0x0, 0xe}, 0x0, 0x20000000005, r1, 0x8) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0x8}, 0x12640, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000044000069118300000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3650c001ac008000a0004000900020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000400)="b9ff0300607692e28559da65620d698cb8e9505ad2001f00", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0xecc}, 0x14558, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) sendmsg$inet(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000) socketpair(0x27, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10, 0x0, r4}, 0x94) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) 744.175519ms ago: executing program 0 (id=3363): r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3fd, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r1, 0x6, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000355a622bf5000100000000000000", @ANYRESOCT=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES16=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r4, 0x0, 0x4, &(0x7f00000003c0)=')\xccO\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0xffffffffffffff9d}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000000000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3533, 0x100}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair(0x6, 0x1, 0x0, &(0x7f0000000180)) 660.097583ms ago: executing program 2 (id=3364): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b02d25a806f8c2d94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071113d00000000008510000002000000850000000500000095000000000000009500a505000000009d626e70e9673322c7b85ffaf65c66ad587d51e8e0c4dfe91759b3f0f9f5ae8e3f9b82270eae11be2c6b3322403a0e3a6ac538f90427f5672fe15e688d62cec17c4a6f411694008948951a47de9b1a3edb8696448c0169532ec1422053b8636554129da48fa59cffe396b8d33b1e214015bc797bea7bc32a0dd1b228af1f0a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x7d, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='GPL\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000380)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0x29, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x8}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}, @call={0x85, 0x0, 0x0, 0x58}, @map_fd={0x18, 0x4, 0x1, 0x0, r5}, @jmp={0x5, 0x0, 0xc, 0x9, 0x0, 0x2, 0xfffffffffffffff0}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0xd}]}, &(0x7f00000006c0)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x8, r7, 0x8, &(0x7f0000000740)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x5, 0x789, 0x4}, 0x10, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000880)=[r8], &(0x7f00000008c0)=[{0x4, 0x2, 0xa, 0xa}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 659.791253ms ago: executing program 4 (id=3365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x2}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0xff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x7, 0xfffffffc, 0xe51}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000740)=0x78) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000001c0)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x2, 0x4, 0x3, 0x3ff}, {0x2, 0x5, 0x47, 0x2}, {0x200, 0x80, 0x51, 0x7}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x12, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x7, 0xb, 0x1, 0x100, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}, @generic={0x6, 0xc, 0x4, 0x7, 0x8f}, @ldst={0x1, 0x0, 0x2, 0x6, 0x4, 0xc, 0x10}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbc}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @generic={0x8f, 0x7, 0x9, 0x7ff, 0x4}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r5, r3, 0x0, 0x0, 0x0}, 0x30) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) sendmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x5, @private1, 0x5}}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)="4d9d8c8b51ef0d8e49e3c7daa449b3c3f6fdcf86b44973172263f15be725e1999a9e5ecb4cbc34bebe", 0x29}, {&(0x7f0000000900)="417bd74171401f6bc91a2846a81990ab9001a1f5147dcaa520483a0dab9c9d32cf87333d1bee2ebe43d4bf2edbc27cc4b870800e122a6d3e0203baa7f2618110a348bbf7a1d3bc8bb888f4bb", 0x4c}], 0x2, &(0x7f0000003940)=[{0xf8, 0x110, 0x1, "9a4bc397195b5932b22415b30a578beef2f652db49da81d0920b6a0eeddfb8c6243f8b8ba860a4cae31b8110baff10cb59e9958d5e605c7eb9fdbc54e729f1176e90cad9d18176a3c387296536789450e6bcc1f422f0b3a558fa9f27c20d3bac5f3a22ba5cd8614575e31a2ca0b145702b7b6d2102a66600e812890a204d55bc4c22af33ce5ed1b14bbe9724ad8987cfe8fc0a3ead7b1e5f523c1144fadf01d4d5156ee975b20ccc41523b3c915b06e15058e7f0cac118981cf7a4330902e8a9b1288efd6d8f658879f92bd80f0bb0eaeb4390f3c4870161203987166884797377782b45913ec794"}, {0x1010, 0x119, 0x4, "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"}], 0x1108}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f00000001c0)={0x0, 0xfffffffffffffe0f, &(0x7f00000001c0), 0x2}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) 543.313121ms ago: executing program 2 (id=3366): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10b0c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0106005e140602000000000e000a00100000000a800000129481", 0x2f}], 0x1}, 0x0) 463.725846ms ago: executing program 2 (id=3367): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001e10000000000000000000ffffffff000000000000000000000000fb1e5ee4e3753404b03096316dc7ee2f0248320c3d2d86efbd080e2e1a949f53a1b4b9d299207aace68fef2c3f2ea86415d74bb516a0c60b82a00ba40c033ed19183ec7529e66f1440b49759"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_devices(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e0408003c5c980128876360864668f82ffdd569d2f6b9aa859f6e2ee7a7c5b1474ead5e30b5e033ff11edf1c5ffc733d2acb165fe"], 0xffdd) 391.420503ms ago: executing program 1 (id=3368): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x840, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x6, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) recvmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000280)=@x25, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000380)=""/223, 0xdf}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x5, &(0x7f0000002100)=""/4096, 0x1000}, 0x40000001) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d11410", 0x3}], 0x1}, 0x4c081) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 311.946978ms ago: executing program 1 (id=3369): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000005000000b705000008000000850000005e00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x3f) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 253.756168ms ago: executing program 0 (id=3370): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x1f}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000006e023bb13792d0c34e31123000000385c14f1c22b11b700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000080)=""/10, 0x2}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x894b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000400000000000000005000000185900000600000000f73bb7738133fedadb05f049d65a3828ffffffffffff9400000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x8, &(0x7f0000000240)=""/8, 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x7, 0x4, 0x1ac}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0x4, 0x1, 0x2, 0x2}, {0x3, 0x2, 0xf, 0x5}], 0x10, 0xfffffffa}, 0x94) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') ioctl$TUNSETIFF(r2, 0xb701, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000fdffffff850000002000000018010000646c000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000095000000700000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x29}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x7f7c2739efff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069108b000000000004000000000000069500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 172.234452ms ago: executing program 4 (id=3371): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x11, 0x0, 0x40000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x6, 0x0, 0x0, 0x0, 0x20, 0x1a505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xb}, 0x7602, 0x5, 0x2, 0x9, 0x0, 0x8000006, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2404c880) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x830d}, 0x200, 0x2, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018005a00000000003000000030000000020000000000000000000006040000000000000001001a059506000000000000030000000000000000000000000000090100000000009c8d9f772bc538b068aaffff3b1364b1e87788c589a2f1f80e75f857956bc313cadf75e44b68fcd08d754c722d636482"], 0x0, 0x4a}, 0x28) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b1"], 0xfe33) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1ff, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006", 0x39}], 0x1}, 0x20000004) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209", 0x29}], 0x1}, 0x800) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3da9, 0x80100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x8010, 0x47c3, 0x0, 0x0, 0x3, 0x76, 0x0, 0x0, 0x84ed, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x80000000000dd, 0x708}, 0x0, 0x4, 0x80, 0x6, 0x52e0, 0x0, 0x0, 0x0, 0xc88}, 0x0, 0x10, 0xffffffffffffffff, 0x9) 163.609571ms ago: executing program 1 (id=3372): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="a2ab67b13399c274e879d916b2a55fb0fd413fd389d26a3f7c79e3", 0x1b}], 0x1}, 0x400c000) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="e82f87c439d955ec1ac32a0e268ca0e30dd6838e5be27b6f", 0x18}, {&(0x7f00000001c0)="2a968fbfccbf1addc8e7303329157e0b8fb3c5642d7522f0310eb3baa61d30d12c8379b98fa79bc326ba530a91ffc94486300605fb7bfb6bb20228408f68e8340d5f2a9b5d62d6661fc5c0b9afe8974a259bdd9bbc75ed378faf7f9dd249abc98e60daaa91d5231388a4937ca1eb7f288b1351ff2c5801322b0163e1aac95b338309f6515d09a090292d7b14fdd20019f01bfb40b6ce26e9898d62db7964b81961c2ecd215928bfd1f430d06648975621421aa09cf2eee36cfe7ec57e3c2", 0xbe}], 0x2, &(0x7f00000002c0)=[@ip_retopts={{0x64, 0x0, 0x7, {[@cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x5, 0x8, "0ff8904aafcc"}, {0x1, 0x4, "ef26"}, {0x7, 0xb, "18f03b34ea6c75c35f"}]}, @generic={0x7, 0x7, "cc2079c775"}, @lsrr={0x83, 0x27, 0x45, [@private=0xa010101, @local, @empty, @remote, @local, @rand_addr=0x64010100, @local, @private=0xa010101, @broadcast]}, @rr={0x7, 0x7, 0xa6, [@local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xaa}}], 0x98}, 0x8008014) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000003c0)={r1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0xbf, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1c, 0x401, 0x1000, 0x6, 0x4808, 0x1, 0x10, '\x00', r4, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r7, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) sendmsg$sock(r0, &(0x7f0000000d00)={&(0x7f0000000b00)=@ax25={{0x3, @null, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="4d3dec8ef1ace5090d349ed53d223f519cf2d683cdb36c76e85d19", 0x1b}], 0x1, &(0x7f0000000c00)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x134000}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18}}], 0xd8}, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r6, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%+9llu \x00'}, 0x20) close(r9) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000e40)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x71, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2d593, r7, 0xa, &(0x7f0000000ec0)=[r6, r6, r9], &(0x7f0000000f00)=[{0x3, 0x3, 0xf, 0x5}, {0x2, 0x4, 0x9, 0x9}, {0x4, 0x2, 0x2, 0xa}, {0x3, 0x4, 0x8, 0xa}, {0x0, 0x5, 0x8}, {0x5, 0x2, 0x6, 0xb}, {0x4, 0x3, 0xc, 0x2}, {0x2, 0x1, 0xf, 0x4}, {0x0, 0x4, 0x3, 0xa}, {0x4, 0x4, 0xf, 0x2}], 0x10, 0xb7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r10, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0], 0x0, 0x68, &(0x7f0000001140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup/syz0\x00', 0x200002, 0x0) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001640)={0x0, 0x4, 0x8}, 0xc) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0xda, 0x0, r6, 0x8c, '\x00', r4, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001700)={r6, 0xffffffffffffffff}, 0x4) r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_lsm={0x1d, 0x1d, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000014c0)='syzkaller\x00', 0x10, 0xa6, &(0x7f0000001500)=""/166, 0x40f00, 0x1, '\x00', r11, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x7, 0xff, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001740)=[r6, r9, r13, r6, r14, r9, r15, r6, r9], &(0x7f0000001780)=[{0x2, 0x3, 0x1, 0xad91031ce571ca0e}], 0x10, 0xb6b}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001880)={@cgroup=r12, r10, 0x2, 0x20, 0x0, @void, @void, @void, @value=r3}, 0x20) sendmsg$unix(r2, &(0x7f0000001a80)={&(0x7f00000018c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001940)="75c3fc849a241009b58dc0cf65bffa05f2f55326cca66074445abe", 0x1b}, {&(0x7f0000001980)="77af616c0ffa5311710c1993ddd7e87aca93b363fcf2379f0cdc665b9960bb0d7f956af2d090d40e1a0991d08cfe59c9a34905f959887d961bc2924bebf9e9ea08a8b329775487557048c9090e43a52e49d6f2f671d89ace4d3ac0b7bea019bedad11788bc2ec3edc3108bb27f870f7fd35bcba0f4e60fdecbd627a5a6948b51585c7c0fe92a1d35b74db23ea54bcc42b6bce11612a04c3bc0d39eb7d9b12b27569e72c44bf9dd5885720c1f12206b9c9e54214c", 0xb4}], 0x2, 0x0, 0x0, 0x8010}, 0x880) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x2400, 0x3) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d00)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0xd, 0x34, &(0x7f0000001ac0)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}, @cb_func={0x18, 0xec77aa952e4746e4, 0x4, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa10, 0x0, 0x0, 0x0, 0xfffffffc}, @func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r14}], &(0x7f0000001c80)='GPL\x00', 0x5, 0x26, &(0x7f0000001cc0)=""/38, 0x41000, 0x22, '\x00', r4, @sock_ops, r17, 0x8, &(0x7f0000001d40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001d80)={0x5, 0xf, 0x5, 0x1}, 0x10, 0xffffffffffffffff, r16, 0x4, &(0x7f0000001dc0)=[r6, r15, 0xffffffffffffffff, r6, r6], &(0x7f0000001e00)=[{0x1, 0x5, 0x9}, {0x0, 0x1, 0x7, 0x5}, {0x0, 0x1, 0xb, 0x4}, {0x4, 0x1, 0x9, 0x1}], 0x10, 0x3}, 0x94) r18 = openat$cgroup_ro(r12, &(0x7f0000001f00)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=@bloom_filter={0x1e, 0x0, 0x1, 0x80, 0x1080, r15, 0x2, '\x00', 0x0, r18, 0x0, 0x0, 0x2, 0x6}, 0x50) sendmsg$inet(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000001fc0)="9a60a1cf71642797228f3bd4bb9d9a9894df50c60f896a83a0ee8180e1b3721786fb6a9476ec3b23f121c293d797b26323d18fe887960b1d57103cbaf4c5237d2dda3b0320470acbee3ba7aa31def908c8b36708a562540ba2aba2e1f481d554434348ef54483a3fa2d0b7ccd3ad5ed72b234b67a1a6aa248b0551aaf96e9ca2df2781b833e8ef71a6d3a4e40faaeea8c3feeb54283757f5c1dd5d73b2df32a322035cd7d6e80457f395b70d6c52c2cad6cade3c84f80f56bce30cfaf422eb57d7f1b49094f9b40b0053cf6715ccae62f15529be6dded3abd573ebd2d62890b2ffe7fc72a3b44567f6030dfad3e3462a0c76a781c444f7d114ad50a7260a29ff794c64c2a80e355961f9a1f88a9838b262653cd5adb000b30b0cccca9cf64816a9d385a9c07c6d3759a4794375401297132f8f673f95721ea6c708c1c7bb4d408d8678ba90b409b3494562470654b5aebd15c5503e7a7e7821490be7f19938adf9dd67df3748bcf901e9ba48308782331e5d432ce849b7ecd4a38896eabc8d0cb799ee6650cd9e334267ae1e2a685d61504156f74b2724ebdc778e41f0b2a60cef339984508e7a41dc2c67a092221a4088856dc12d683bbba383edad6e7f86def8d9dab16c945ef99bb6d24ccbee93d9b622fd06e40e1227d09b4632af27817dc2446b2f9b884db9a3009e0ac1289b8ea7736431cb8b7fdfc2041939210421f307a8bf48c2df97bc2b3c02ca48679c07ba3ee4db21b008e1b17ae6a5e034eba14c973f0033a924538e3135b0a63173a8509b2a3ea3062512d6ce60deb795c7c85b819c6e5ec70c7d7336bb01e0673ba223d9356b0f6825bbf7eeb1f86f7bff500f5fe537b56511a0075c1ec6858b32cc8d4aa47668a2cb5ce7826a9cfba39f082f88f2ba19236da80e96375f2e9d20b0dd468175fc5cebf6437f21a3e34ee58b3c8c45773f56f212278421c01fe9ba6ec0573c3ee6a5991cec7e0e5b2268775e83d175c10a67a7de8c5b4fc05bcd56b10144407b5817b9e9feec61ccbb6790730138da31eed47fb8fa747f56dd9dcf447cad989466f37e0e96017350eaf3ccbd92034b3a1acfe272757a12868ce3cef8bde5e54341d135549f3837f7ed33be74f86ecf79d4d6bb083580e1fc718e96ddf77655acdf0655fac679030bd836e372904d0dcef3e96e1b16e4c934c2fdc0d33e020361b35699212ac4dee20c0a66b5ef889bde7945c187b498e73c90a82e61b64b3492e7b5191dadd427babccda2dba012f464f3d6d9250161c6dfdc0d3ab238bef0314f8b41146f1758fe1a7bddae3655001229060f343ba5c727f899fca3a102dc83f2bdce145b326c135a5796b44c27377487a29e9a06a7c63ee3a49b95bbc7fd5d0bc1537c8114f13a7de8d90d4aefaa9149f64afb50ac0a8c3419c9e1b4572f265812c05c2f89b66f0883aabf781632e922e1345a3bfea206720533544300c578a3558b85f66228810613c1c6d2979751d89fcbd00b728402e5800d7596f675b487e7fd8ba47bb39023f30c592163a5f1352dbff9fb6583c53473c58ae6f47ed85972c93120301eea38e3f1c77bfd4bc5404a12c55e2d8f264aa91221f3d363bd8e812672029a3dc8717c497bf8f54c673c0c08a84fe384cdeb3076f276ca50976b19e9b0f4623f7e74a3d59534d52d4ef95c08b54a2b183966561e01876cc10f7a4fc10623ed9e36a2f7ea0c02863a92e9045ed67179f9f19f8c2424fef09ea01652fe861d7043c1e182adca1ead81168078696212b8741fd79e98b653cc64a7ed35ed8e7b7150eeda19a4066ef9cf6e7c4b25e7e15149d558c3f16a17b455188ebbfe21d84959c46ee963b725b8c1cfdf4b3317e04523834e5cc4c20a1313ef689188c9bd6d3e3f6a76f30eae7128638907a0f80023d1902ef3378907baf70be4b33b55fa6fb56eb80031588e322f98a73be43fab32b7abce06dcaead60408c96769fb2fd95257c59091d0b8fc34d3893498a5bf3e397af57085941f14da22c6e9106cf2153ef5d04cfa3063f83984481d9340095bd96017c347613983736e0a5927d3379280e2543cc0b0d89234a3a543cd7759f0b2a2fded158a0573719224703210caa9934b5be4268c437f3549177f07800e7e34f20cf1c35e5890fdfd1a2c28dd9796bb78e9bb54ccf0c54de8eaefc69293442994888d7bd45084b7dc12c4b60801a4d65a32def773e924f28dcbb2d5504c99f873d680a7f1e7e2315cd9033c7b52bd280a06c276a0fb2b5a45de6b38dd976c7f973593358a866de9780764964d081b692da13d9b3b09f3aa419ed190d76539c752873ec54755854aad2ee32c1dba2d4b3bdbe90cdae4644b2182b6147aa2582980bfc677fb3010578d41f90d52ed7a674baa264617ba4963fd7592d8a0134a51824d1ca5a8afabe5cf2b64a0a5430b3a8cee56dfcf211e3fc772bb757db61094e58ce55edffe1ede0d9bc7baed910dcd49bab284c5196a49e552e50ab70ef2f6720e63435df8f888abfaa60a16c622762c4c3a5b269bab75ed82dab78d70592a41de5b9b6d43bcd6359de70038d17d3783c3f72e3bfcc43dd67c58a21d1fa133e04305113762e30ef3f2fbab373740d6169bf16d59eccff3a9646fa96da6e9ff2573e05debedc165d9192d442084ac6b6d48dfd39c6a2354c14cb9b304521ca8ceb9d0543ca64f45233d4eb3ae6c0ad61e412d6a37a2e1a248a1e2249a120c558011a8252d8c25a331ba9b42b051763c20282f0752d252a6801dcc089d552a936a2addaed69359ba2238a94838571ea13d1240323e9bc2957032d9a89b687e75f76d5c21ba953527093eeca6a55718785a861eb607dc32e25742347d7a2bda78c2ba304693d9f39d00de7351fcdc4df8c6cf0893a746328cc0b98df60362af828def93ab94aa1f097036babdff20013b7e7eaf0c740f88608b895b5e6a2994102570d98133bf6e565256be697cc6b2fc9fc4698154a6983c2662fa7ba9a57c42d3185f4fb5fadabd1dc59d3d41045252e8d0d8bd4eb12bba50b8efcfd774ae40f3eab4a43421120f7795f2b1c4a92866ebada1543d6198dd00d602aef048648eacaef92f5229d44e8b5bde5d77573a166c4298592058d66b71acf368da1cd11d61b36da98dc0bbcaadf4a40900a8ce583497c608a8ca3d9b58f3c980bd722e61287be79787c3d66fc4535ee762b8b3aa51d06a27162ed066b9cf535758fd70992820fe09f62823b034505f876ae4831622f8f057f0ed4de10293b71375472dc035d364a133533bf1a8256a33491ead2c70e4bf52dca2e9e68c2bac38740fb4f6b863dd8efa82dd860c533448ef67f6dddae805ae9aadf953b9476175787fbd250af317b78a4d2f4436cc7d1141cc2b988f0d6385eb5160b84fe88d2abdaa2ea431347c45f10b97614837b918a154ac3204eb18e091086ef87bc0481fd175dd08b9e0bee8c720609ccffc8139e6411e7b1aae0c430c122d7db2eaf53c0451466f9a5ca08436e1bebf849ee123fd86883e5631870a13a1258d1757b7b86b1d518d0204fbf2bef81f60d8a7a777ecc8583cb255d62f4a79661f11a687f9096f1e33bbfa0597b33bc21221450213a8df2990c1572850dc48ceb3cdf058ecec8577fd4100a7d6fb5aa76019bbebef6a83e86ae28615a34d05e8ac2471de059bb7849499cd1669e811c9e32568d2518f9c880f7cd719e56b2d6534d830c0ae64c9e0b9981b2e99788e3afa222c996e41b66883e40396bf0dbcd9e00dc4c28083e15eb97812b8f82ffa6ad0ef0aa67c4abee5ad12e040e045797c12ea938613323574d1a2ee7c4ca00f5eb14f3a39b4d694727cdd2372139f6f6c86ffca782aef5283e18379fdb24dd6df3b434028464066b43f306309ff35629c0f68646ec8989bc77c190ad5cb2b35a09d131a197c5183843d2ab369295457d51046db46a7b0414704ebab7528491eb7f16ae003ff4043857a86544325e099a733cf24bddc2079ec9b442ef0a61198136cb872095985aaedbc950709509128f5f063e33ca96198f510d6ca2d9d671375ad0f836930ce4f51d674f3f42c88c87873a278b03b4ef025a0307ad1100d9eed999527c82b92f7e013b298632f86c66f4d9dd9400ea56f86ae6758b4ca0249ae721577f80b9f311dcf9e276585ab19d0e70c9b332a8c0fb59e00f06f4b73230f88762eec758b29134fb9a88d06fa996317f8a0afa22493b97d6fe4eafc60cea393537cebb9f70afb12eef6ffd903ae9f1f23c06ad5f06f0af573bcb90afadcd3e447217d002d34cddc6721fb76c38a2e2c6d5b29faf23e8c4e1de9ac2059c4e4951cc8052ce8cecc51b2e7fe814a669c6adc602c085096a31fc726d88a17af492bd2a048ab62b8b842dccb29145747152ac4602a6476e737efb18109c848a099ce980b6b2961c9c5a766ace96806dd328753877c72afdc831dd07a9ba7585aeaa9c8b49c690a6890f6f758cbbd58dc52ab99ee04a4b11af531145a6f6e8a2e26890979c8ba928dca69247cfbf1cffaf5d2f3e37d93c323c5a78ca4915d9764fd064feeecc2b7041f22652ad5da78d867e7c936cd414f7be2ab5ae842059525939534920ee1688d17ad70f6a3f8a93abeb15815fd6fab55b46335a7ef2fd37e8f8e19ca3cb594d61c2dd5b4acfe8476efbe87cd34af45920660bad37e9b86224b7d569700008f64ab59618ffd3b9fb64be46f84f2f48f7ca04fdba0aa4c6819a1efab04b66c6f14c5e372d1161dfcb3bea1804178d1472a24c14db296544a07e43844edec7bf80b1462a32aba6e101dc0d099eea31b6aa8cea152ebd53286cecead675786ccb62557197223a08c310f8ea9ce8680bce2f703d525f80eed457c490b2da3479a5f9ec78a482dab0097702e8a7c46133a4387aea123521a631535a805566d144be3150a4aab80d12a261fe8af8f002a2bc2dcb44fad463ae3695671fd0f816260492f8fa543ce07d8cc0473217e74a0a450ef3b7f0635c0b63257acc42950219c90b915529aab2d8a39b4559c195cf4b8b54a742d1e44f0102193ff65dd6442cfd858d1c01937ea6934f93a441df64924a448d21b4e4c8c6e0a3359af514b4ee9ff7a8f9f36cb79bdeaf728c5a015eaa6db7a0a39902bdc10eac097f5c2fd41961605068bf3493959ee683441937ed8deba8449324c4f5b142304b2eda8af1b9bea270a8199517d1fa91329ab1d935fe75359352e304aadb82b7a2b615a0731e3659b39d0a05f0c66346a971d7b4817ce71878e891b41e5f3b1213ec695d76f84f4093f155e1cba213047bcfb8cd2dfb4287632dab53728397500b9a1541b79349453d3bb9868f393bfbc021beb1436237b3e50940fa32c81f6e29d8cab373f33322b586fec022790a1383aa0a7a6f3e4b06650a2072bf8b4ff36ba958b061fabccd47ce957f41f68f8997bb89caab5823bcb043ca86b3d8f9ec88e7ed62ce7b1b1bbe65311e2352598b8f4b1b55eaafa3fa3edb53725eb4d2c7a75429fecdb7f8cf797effe4d2a5097da7f1fb307ac87281c75b16f61d4bf7c29d59ae8937f583365edbab2498aeaca7ee922729b939b089a76d622339de5294af2d4afd40fcf0c293cb7ff56589a7bda2bbba2d2d8791d9a6c879336a3566e1892ebfb57c40fc995ea21a3d5b006117201d8a548e2da3dc2ba9201235f30e00ef52453139f85d97f8fa4fe55c3693903ba7827e4d85c2ba828f9b39756490008c72fbf32be85b232c898c1aab3b402157d09c2ce7172bae0cc8bb206654cd6593d910dcbe2d709caa0fc22d8461ec4d", 0x1000}, {&(0x7f0000002fc0)="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", 0x1000}, {&(0x7f0000003fc0)="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", 0x1000}, {&(0x7f0000004fc0)="7f2e38045ba0c928450f4dccfa293d53bd", 0x11}], 0x4, &(0x7f0000005040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1800000}}], 0x68}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000005140)=@generic={&(0x7f0000005100)='./file0\x00'}, 0x18) sendmsg$inet(r1, &(0x7f0000005480)={&(0x7f0000005180)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000005400)=[{&(0x7f00000051c0)="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", 0xff}, {&(0x7f00000052c0)="88e402c64697a65ae3c3c19673aa689ec4c63e37d3db937ff12f5c27e840cdc97258c5e54a0ac90439c234fbf0fecdc8fa72ab662a8fc45f35cb96479e10747560a336a365983d93ca782cfbfbd43aeb829c9db0cd21da4dddf128c29bdf249a05548c45b49348671a51a3e64bb891cc6aed2bcbcefcfcb158198d506ac8c1bdc2359ece044cbcf1a2a859b3ef9112755d9f4de364457c362bc245ed81353a61523db326d0fbb1f425e21c71a77c3e7333689317634e651a85b232b340766a315d1ab76a46f53dc08dbd521bc0483aa47531e15fd78a79d6f49161e0d2cca3cfef2e3297", 0xe4}, {&(0x7f00000053c0)="cb1c68fe73d72f36e3568b947630a77a235aa1fd91667c0f9c3149a96fc9", 0x1e}], 0x3, &(0x7f0000005440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010101, @multicast2}}}], 0x20}, 0x44044) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 112.518681ms ago: executing program 2 (id=3373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r5 = socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90724fc60", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) getpid() 48.169349ms ago: executing program 0 (id=3374): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800dac0f0003ff", 0x33fe0}], 0x1, 0x0, 0x500, 0x8100000}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r2}) 47.330239ms ago: executing program 1 (id=3375): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10b0c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a800000129481", 0x2f}], 0x1, 0x0, 0x600}, 0x0) 0s ago: executing program 3 (id=3376): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000280)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000180)="cd91c0", 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0xa, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2e, &(0x7f0000000640)=r5, 0x4) recvmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000640)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000"], 0x0, 0x34}, 0x28) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r7) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c23003d) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xdf, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): msg_sock+0x30/0x30 [ 249.932244][ T8635] ? import_iovec+0x6f/0xa0 [ 249.936758][ T8635] ___sys_sendmsg+0x236/0x2e0 [ 249.941448][ T8635] ? __sys_sendmsg+0x2a0/0x2a0 [ 249.946232][ T8635] ? vfs_write+0x8b2/0xd60 [ 249.950685][ T8635] __se_sys_sendmsg+0x1af/0x290 [ 249.955539][ T8635] ? __x64_sys_sendmsg+0x80/0x80 [ 249.960485][ T8635] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 249.966500][ T8635] ? lockdep_hardirqs_on+0x94/0x140 [ 249.971713][ T8635] do_syscall_64+0x4c/0xa0 [ 249.976127][ T8635] ? clear_bhb_loop+0x30/0x80 [ 249.980808][ T8635] ? clear_bhb_loop+0x30/0x80 [ 249.985483][ T8635] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.991374][ T8635] RIP: 0033:0x7f68d2d9b799 [ 249.995788][ T8635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.015391][ T8635] RSP: 002b:00007f68d0ff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.023803][ T8635] RAX: ffffffffffffffda RBX: 00007f68d3014fa0 RCX: 00007f68d2d9b799 [ 250.031770][ T8635] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 250.039737][ T8635] RBP: 00007f68d0ff5090 R08: 0000000000000000 R09: 0000000000000000 [ 250.047705][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.055672][ T8635] R13: 00007f68d3015038 R14: 00007f68d3014fa0 R15: 00007ffe855ff158 [ 250.063661][ T8635] [ 250.885598][ T8655] netlink: 'syz.2.1271': attribute type 10 has an invalid length. [ 252.940707][ T8655] team0 (unregistering): Port device team_slave_0 removed [ 252.968322][ T8655] team0 (unregistering): Port device team_slave_1 removed [ 253.046449][ T8666] netlink: 'syz.3.1275': attribute type 10 has an invalid length. [ 253.146663][ T8666] team0: Device wg1 is of different type [ 253.418925][ T8679] netlink: 'syz.0.1276': attribute type 21 has an invalid length. [ 253.652763][ T8685] FAULT_INJECTION: forcing a failure. [ 253.652763][ T8685] name failslab, interval 1, probability 0, space 0, times 0 [ 253.680662][ T8685] CPU: 1 PID: 8685 Comm: syz.1.1282 Not tainted syzkaller #0 [ 253.688094][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.698168][ T8685] Call Trace: [ 253.701471][ T8685] [ 253.704412][ T8685] dump_stack_lvl+0x188/0x250 [ 253.709115][ T8685] ? show_regs_print_info+0x20/0x20 [ 253.714334][ T8685] ? load_image+0x400/0x400 [ 253.718864][ T8685] ? __might_sleep+0xf0/0xf0 [ 253.723567][ T8685] ? __lock_acquire+0x7d10/0x7d10 [ 253.728622][ T8685] should_fail+0x38c/0x4c0 [ 253.733077][ T8685] should_failslab+0x5/0x20 [ 253.737594][ T8685] slab_pre_alloc_hook+0x51/0xc0 [ 253.742551][ T8685] kmem_cache_alloc_trace+0x47/0x2a0 [ 253.747881][ T8685] ? rtnl_newlink+0x183/0x1a50 [ 253.752668][ T8685] rtnl_newlink+0x183/0x1a50 [ 253.757302][ T8685] ? mark_lock+0x94/0x320 [ 253.761645][ T8685] ? rtnl_setlink+0x500/0x500 [ 253.766339][ T8685] ? __lock_acquire+0x13bc/0x7d10 [ 253.771408][ T8685] ? finish_lock_switch+0x12f/0x280 [ 253.776625][ T8685] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 253.782367][ T8685] ? verify_lock_unused+0x140/0x140 [ 253.787583][ T8685] ? perf_trace_lock_acquire+0x340/0x3e0 [ 253.793230][ T8685] ? __switch_to_asm+0x34/0x60 [ 253.798016][ T8685] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 253.804621][ T8685] ? rcu_lock_acquire+0x30/0x30 [ 253.809600][ T8685] ? __mutex_lock_common+0x1552/0x2400 [ 253.815084][ T8685] ? __lock_acquire+0x7d10/0x7d10 [ 253.820122][ T8685] ? do_raw_spin_lock+0x128/0x2f0 [ 253.825169][ T8685] ? __rwlock_init+0x140/0x140 [ 253.829950][ T8685] ? do_raw_spin_unlock+0x11d/0x230 [ 253.835172][ T8685] ? __mutex_lock_common+0x155c/0x2400 [ 253.840718][ T8685] ? rtnetlink_rcv_msg+0x7ee/0xf30 [ 253.845851][ T8685] ? mutex_lock_io_nested+0x60/0x60 [ 253.851092][ T8685] ? rtnl_setlink+0x500/0x500 [ 253.855780][ T8685] rtnetlink_rcv_msg+0x844/0xf30 [ 253.860744][ T8685] ? rtnetlink_bind+0x80/0x80 [ 253.865436][ T8685] ? __local_bh_enable_ip+0x136/0x1c0 [ 253.870825][ T8685] ? lockdep_hardirqs_on+0x94/0x140 [ 253.876042][ T8685] ? __local_bh_enable_ip+0x136/0x1c0 [ 253.881427][ T8685] ? _local_bh_enable+0xa0/0xa0 [ 253.886309][ T8685] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 253.891555][ T8685] ? dev_queue_xmit+0x20/0x20 [ 253.896244][ T8685] ? memcpy+0x3c/0x60 [ 253.900241][ T8685] ? __copy_skb_header+0x3ba/0x4f0 [ 253.905373][ T8685] ? __skb_clone+0x480/0x790 [ 253.909997][ T8685] netlink_rcv_skb+0x1f5/0x440 [ 253.914774][ T8685] ? rtnetlink_bind+0x80/0x80 [ 253.919467][ T8685] ? netlink_ack+0xb50/0xb50 [ 253.924102][ T8685] netlink_unicast+0x774/0x920 [ 253.928899][ T8685] netlink_sendmsg+0x8ba/0xbe0 [ 253.933703][ T8685] ? netlink_getsockopt+0x570/0x570 [ 253.938927][ T8685] ? aa_sock_msg_perm+0x94/0x150 [ 253.943964][ T8685] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 253.949263][ T8685] ? security_socket_sendmsg+0x7c/0xa0 [ 253.954736][ T8685] ? netlink_getsockopt+0x570/0x570 [ 253.959950][ T8685] ____sys_sendmsg+0x5b7/0x8f0 [ 253.964850][ T8685] ? __sys_sendmsg_sock+0x30/0x30 [ 253.969906][ T8685] ? import_iovec+0x6f/0xa0 [ 253.974431][ T8685] ___sys_sendmsg+0x236/0x2e0 [ 253.979143][ T8685] ? __sys_sendmsg+0x2a0/0x2a0 [ 253.983948][ T8685] ? vfs_write+0x8b2/0xd60 [ 253.988429][ T8685] __se_sys_sendmsg+0x1af/0x290 [ 253.993417][ T8685] ? __x64_sys_sendmsg+0x80/0x80 [ 253.998363][ T8685] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 254.004384][ T8685] ? lockdep_hardirqs_on+0x94/0x140 [ 254.009602][ T8685] do_syscall_64+0x4c/0xa0 [ 254.014107][ T8685] ? clear_bhb_loop+0x30/0x80 [ 254.018809][ T8685] ? clear_bhb_loop+0x30/0x80 [ 254.023500][ T8685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.029403][ T8685] RIP: 0033:0x7ff6079bd799 [ 254.033831][ T8685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.053450][ T8685] RSP: 002b:00007ff605c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.061898][ T8685] RAX: ffffffffffffffda RBX: 00007ff607c36fa0 RCX: 00007ff6079bd799 [ 254.069884][ T8685] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 254.077870][ T8685] RBP: 00007ff605c17090 R08: 0000000000000000 R09: 0000000000000000 [ 254.085845][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.093834][ T8685] R13: 00007ff607c37038 R14: 00007ff607c36fa0 R15: 00007ffc271e52f8 [ 254.101846][ T8685] [ 255.811369][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.817982][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.409480][ T8712] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1289'. [ 256.515841][ T8720] netlink: 'syz.0.1291': attribute type 10 has an invalid length. [ 256.550622][ T8720] team0: Device wg1 is of different type [ 256.658258][ T8723] netlink: 'syz.1.1292': attribute type 10 has an invalid length. [ 256.693534][ T8723] netlink: 'syz.1.1292': attribute type 29 has an invalid length. [ 256.752752][ T8726] netlink: 'syz.2.1294': attribute type 10 has an invalid length. [ 256.805231][ T8731] netlink: 'syz.0.1296': attribute type 1 has an invalid length. [ 256.833957][ T8731] netlink: 'syz.0.1296': attribute type 3 has an invalid length. [ 256.840719][ T8728] netlink: 'syz.3.1295': attribute type 10 has an invalid length. [ 256.856966][ T8731] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1296'. [ 256.918344][ T8728] FAULT_INJECTION: forcing a failure. [ 256.918344][ T8728] name failslab, interval 1, probability 0, space 0, times 0 [ 256.975943][ T8728] CPU: 0 PID: 8728 Comm: syz.3.1295 Not tainted syzkaller #0 [ 256.983377][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.993446][ T8728] Call Trace: [ 256.996718][ T8728] [ 256.999648][ T8728] dump_stack_lvl+0x188/0x250 [ 257.004352][ T8728] ? show_regs_print_info+0x20/0x20 [ 257.009577][ T8728] ? load_image+0x400/0x400 [ 257.014095][ T8728] ? __might_sleep+0xf0/0xf0 [ 257.018695][ T8728] ? __lock_acquire+0x7d10/0x7d10 [ 257.023799][ T8728] should_fail+0x38c/0x4c0 [ 257.028244][ T8728] should_failslab+0x5/0x20 [ 257.032758][ T8728] slab_pre_alloc_hook+0x51/0xc0 [ 257.037701][ T8728] ? sockfs_init_fs_context+0xa0/0xa0 [ 257.043085][ T8728] ? sock_alloc_inode+0x17/0xb0 [ 257.047945][ T8728] kmem_cache_alloc+0x3d/0x290 [ 257.052720][ T8728] ? sockfs_init_fs_context+0xa0/0xa0 [ 257.058101][ T8728] sock_alloc_inode+0x17/0xb0 [ 257.062806][ T8728] ? sockfs_init_fs_context+0xa0/0xa0 [ 257.068192][ T8728] new_inode_pseudo+0x5f/0x210 [ 257.072974][ T8728] __sock_create+0x129/0x900 [ 257.077599][ T8728] udp_sock_create4+0xc7/0x480 [ 257.082391][ T8728] ? erspan_exit_batch_net+0x20/0x20 [ 257.087720][ T8728] wg_socket_init+0x4bf/0xa40 [ 257.092413][ T8728] ? wg_socket_clear_peer_endpoint_src+0x50/0x50 [ 257.098747][ T8728] ? __mutex_lock_common+0x465/0x2400 [ 257.104137][ T8728] ? wg_socket_init+0xa40/0xa40 [ 257.109069][ T8728] wg_open+0x24b/0x420 [ 257.113160][ T8728] ? wg_newlink+0x750/0x750 [ 257.117678][ T8728] __dev_open+0x2bf/0x430 [ 257.122029][ T8728] ? dev_open+0x180/0x180 [ 257.126396][ T8728] dev_open+0xa7/0x180 [ 257.130474][ T8728] ? netdev_notify_peers+0x170/0x170 [ 257.135792][ T8728] team_add_slave+0x692/0x2780 [ 257.140607][ T8728] ? __dev_notify_flags+0x1df/0x300 [ 257.145820][ T8728] ? __dev_change_flags+0x6a0/0x6a0 [ 257.151028][ T8728] ? __dev_change_flags+0x4d0/0x6a0 [ 257.156236][ T8728] ? team_netpoll_cleanup+0xf0/0xf0 [ 257.161448][ T8728] ? dev_get_flags+0x1c0/0x1c0 [ 257.166223][ T8728] ? preempt_schedule_common+0xa5/0xd0 [ 257.171697][ T8728] ? preempt_schedule+0xbc/0xd0 [ 257.176578][ T8728] ? mutex_is_locked+0xe/0x40 [ 257.181277][ T8728] do_setlink+0xe90/0x3d60 [ 257.185723][ T8728] ? vprintk_emit+0xf9/0x150 [ 257.190331][ T8728] ? _printk+0xda/0x130 [ 257.194525][ T8728] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 257.200698][ T8728] ? load_image+0x400/0x400 [ 257.205234][ T8728] ? __nla_validate_parse+0x1e23/0x2780 [ 257.210788][ T8728] ? rtnetlink_rcv_msg+0x844/0xf30 [ 257.215911][ T8728] ? netlink_rcv_skb+0x1f5/0x440 [ 257.220854][ T8728] ? netlink_unicast+0x774/0x920 [ 257.225843][ T8728] ? __nla_validate+0x50/0x50 [ 257.230581][ T8728] ? validate_linkmsg+0x3db/0x4c0 [ 257.235627][ T8728] rtnl_newlink+0x1658/0x1a50 [ 257.240448][ T8728] ? rtnl_newlink+0x401/0x1a50 [ 257.245226][ T8728] ? rtnl_setlink+0x500/0x500 [ 257.249907][ T8728] ? mark_lock+0x94/0x320 [ 257.254253][ T8728] ? __lock_acquire+0x13bc/0x7d10 [ 257.259379][ T8728] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 257.266149][ T8728] ? rtnl_setlink+0x500/0x500 [ 257.270842][ T8728] rtnetlink_rcv_msg+0x844/0xf30 [ 257.275901][ T8728] ? rtnetlink_bind+0x80/0x80 [ 257.280590][ T8728] ? __local_bh_enable_ip+0x136/0x1c0 [ 257.285974][ T8728] ? lockdep_hardirqs_on+0x94/0x140 [ 257.291195][ T8728] ? __local_bh_enable_ip+0x136/0x1c0 [ 257.296576][ T8728] ? _local_bh_enable+0xa0/0xa0 [ 257.301457][ T8728] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 257.306706][ T8728] ? dev_queue_xmit+0x20/0x20 [ 257.311391][ T8728] ? memcpy+0x3c/0x60 [ 257.315386][ T8728] ? __copy_skb_header+0x3ba/0x4f0 [ 257.320533][ T8728] ? __skb_clone+0x480/0x790 [ 257.325161][ T8728] netlink_rcv_skb+0x1f5/0x440 [ 257.329951][ T8728] ? rtnetlink_bind+0x80/0x80 [ 257.334665][ T8728] ? netlink_ack+0xb50/0xb50 [ 257.339318][ T8728] netlink_unicast+0x774/0x920 [ 257.344115][ T8728] netlink_sendmsg+0x8ba/0xbe0 [ 257.348904][ T8728] ? netlink_getsockopt+0x570/0x570 [ 257.354116][ T8728] ? aa_sock_msg_perm+0x94/0x150 [ 257.359064][ T8728] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 257.364357][ T8728] ? security_socket_sendmsg+0x7c/0xa0 [ 257.369834][ T8728] ? netlink_getsockopt+0x570/0x570 [ 257.375050][ T8728] ____sys_sendmsg+0x5b7/0x8f0 [ 257.379850][ T8728] ? __sys_sendmsg_sock+0x30/0x30 [ 257.384920][ T8728] ? import_iovec+0x6f/0xa0 [ 257.389457][ T8728] ___sys_sendmsg+0x236/0x2e0 [ 257.394168][ T8728] ? __sys_sendmsg+0x2a0/0x2a0 [ 257.398976][ T8728] ? vfs_write+0x8b2/0xd60 [ 257.403464][ T8728] __se_sys_sendmsg+0x1af/0x290 [ 257.408347][ T8728] ? __x64_sys_sendmsg+0x80/0x80 [ 257.413308][ T8728] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 257.419358][ T8728] ? lockdep_hardirqs_on+0x94/0x140 [ 257.424586][ T8728] do_syscall_64+0x4c/0xa0 [ 257.429018][ T8728] ? clear_bhb_loop+0x30/0x80 [ 257.433699][ T8728] ? clear_bhb_loop+0x30/0x80 [ 257.438390][ T8728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.444290][ T8728] RIP: 0033:0x7fd1ccc96799 [ 257.448716][ T8728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.468337][ T8728] RSP: 002b:00007fd1caef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.476772][ T8728] RAX: ffffffffffffffda RBX: 00007fd1ccf0ffa0 RCX: 00007fd1ccc96799 [ 257.484758][ T8728] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 257.492738][ T8728] RBP: 00007fd1caef0090 R08: 0000000000000000 R09: 0000000000000000 [ 257.500717][ T8728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.508696][ T8728] R13: 00007fd1ccf10038 R14: 00007fd1ccf0ffa0 R15: 00007ffdc80d25e8 [ 257.516711][ T8728] [ 257.547232][ T8728] socket: no more sockets [ 257.551769][ T8728] wireguard: wg1: Could not create IPv4 socket [ 257.764787][ T8748] netlink: 8210 bytes leftover after parsing attributes in process `syz.2.1298'. [ 259.496252][ T8740] netlink: 8210 bytes leftover after parsing attributes in process `syz.2.1298'. [ 260.655435][ T8763] netlink: 'syz.3.1307': attribute type 10 has an invalid length. [ 260.774770][ T8763] team0: Device wg1 is of different type [ 260.845149][ T8760] netlink: 'syz.0.1304': attribute type 3 has an invalid length. [ 260.919954][ T8760] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.1304'. [ 261.150344][ T8775] netlink: 'syz.3.1309': attribute type 1 has an invalid length. [ 261.212530][ T8775] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.1309'. [ 261.401325][ T8779] team0: Device wg1 is of different type [ 261.519472][ T8789] validate_nla: 1 callbacks suppressed [ 261.519486][ T8789] netlink: 'syz.0.1312': attribute type 10 has an invalid length. [ 261.598402][ T8789] FAULT_INJECTION: forcing a failure. [ 261.598402][ T8789] name failslab, interval 1, probability 0, space 0, times 0 [ 261.628168][ T8789] CPU: 0 PID: 8789 Comm: syz.0.1312 Not tainted syzkaller #0 [ 261.635726][ T8789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.645801][ T8789] Call Trace: [ 261.649098][ T8789] [ 261.652036][ T8789] dump_stack_lvl+0x188/0x250 [ 261.656732][ T8789] ? show_regs_print_info+0x20/0x20 [ 261.661950][ T8789] ? load_image+0x400/0x400 [ 261.666475][ T8789] ? __might_sleep+0xf0/0xf0 [ 261.671089][ T8789] ? __lock_acquire+0x7d10/0x7d10 [ 261.676181][ T8789] should_fail+0x38c/0x4c0 [ 261.680626][ T8789] should_failslab+0x5/0x20 [ 261.685144][ T8789] slab_pre_alloc_hook+0x51/0xc0 [ 261.690100][ T8789] ? sk_prot_alloc+0x57/0x210 [ 261.694814][ T8789] kmem_cache_alloc+0x3d/0x290 [ 261.699620][ T8789] sk_prot_alloc+0x57/0x210 [ 261.704146][ T8789] ? sk_alloc+0x1d/0x310 [ 261.708417][ T8789] sk_alloc+0x2f/0x310 [ 261.712494][ T8789] ? inet_create+0x70c/0xef0 [ 261.717106][ T8789] inet_create+0x728/0xef0 [ 261.721559][ T8789] __sock_create+0x47b/0x900 [ 261.726187][ T8789] udp_sock_create4+0xc7/0x480 [ 261.730987][ T8789] ? erspan_exit_batch_net+0x20/0x20 [ 261.736329][ T8789] wg_socket_init+0x4bf/0xa40 [ 261.741050][ T8789] ? wg_socket_clear_peer_endpoint_src+0x50/0x50 [ 261.747393][ T8789] ? __mutex_lock_common+0x465/0x2400 [ 261.752893][ T8789] ? wg_socket_init+0xa40/0xa40 [ 261.757851][ T8789] wg_open+0x24b/0x420 [ 261.761939][ T8789] ? wg_newlink+0x750/0x750 [ 261.766557][ T8789] __dev_open+0x2bf/0x430 [ 261.770915][ T8789] ? dev_open+0x180/0x180 [ 261.775289][ T8789] dev_open+0xa7/0x180 [ 261.779481][ T8789] ? netdev_notify_peers+0x170/0x170 [ 261.784810][ T8789] team_add_slave+0x692/0x2780 [ 261.789631][ T8789] ? __dev_notify_flags+0x1df/0x300 [ 261.794852][ T8789] ? __dev_change_flags+0x6a0/0x6a0 [ 261.800060][ T8789] ? __dev_change_flags+0x4d0/0x6a0 [ 261.805273][ T8789] ? team_netpoll_cleanup+0xf0/0xf0 [ 261.810488][ T8789] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 261.816485][ T8789] ? dev_get_flags+0x1c0/0x1c0 [ 261.821276][ T8789] ? preempt_schedule_common+0xa5/0xd0 [ 261.826765][ T8789] ? preempt_schedule+0xbc/0xd0 [ 261.831655][ T8789] ? mutex_is_locked+0xe/0x40 [ 261.836356][ T8789] do_setlink+0xe90/0x3d60 [ 261.840811][ T8789] ? vprintk_emit+0xf9/0x150 [ 261.845434][ T8789] ? _printk+0xda/0x130 [ 261.849614][ T8789] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 261.855807][ T8789] ? load_image+0x400/0x400 [ 261.860331][ T8789] ? perf_trace_lock+0xe4/0x390 [ 261.865220][ T8789] ? __nla_validate_parse+0x1e23/0x2780 [ 261.870782][ T8789] ? rtnetlink_rcv_msg+0x844/0xf30 [ 261.875908][ T8789] ? netlink_rcv_skb+0x1f5/0x440 [ 261.880857][ T8789] ? netlink_unicast+0x774/0x920 [ 261.885853][ T8789] ? __nla_validate+0x50/0x50 [ 261.890579][ T8789] ? validate_linkmsg+0x3db/0x4c0 [ 261.895626][ T8789] rtnl_newlink+0x1658/0x1a50 [ 261.900355][ T8789] ? rtnl_newlink+0x401/0x1a50 [ 261.905135][ T8789] ? rtnl_setlink+0x500/0x500 [ 261.909826][ T8789] ? __lock_acquire+0x13bc/0x7d10 [ 261.914952][ T8789] ? trace_event_raw_event_lock+0x270/0x270 [ 261.920988][ T8789] ? rtnetlink_rcv_msg+0x7ee/0xf30 [ 261.926164][ T8789] ? rtnl_setlink+0x500/0x500 [ 261.930859][ T8789] rtnetlink_rcv_msg+0x844/0xf30 [ 261.935831][ T8789] ? rtnetlink_bind+0x80/0x80 [ 261.940524][ T8789] ? __lock_acquire+0x12e8/0x7d10 [ 261.945605][ T8789] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 261.951525][ T8789] ? verify_lock_unused+0x140/0x140 [ 261.956736][ T8789] ? perf_trace_lock_acquire+0x340/0x3e0 [ 261.962403][ T8789] ? perf_trace_lock+0xe4/0x390 [ 261.967277][ T8789] ? trace_event_raw_event_lock+0x270/0x270 [ 261.973298][ T8789] netlink_rcv_skb+0x1f5/0x440 [ 261.978075][ T8789] ? rtnetlink_bind+0x80/0x80 [ 261.982777][ T8789] ? netlink_ack+0xb50/0xb50 [ 261.987405][ T8789] netlink_unicast+0x774/0x920 [ 261.992196][ T8789] netlink_sendmsg+0x8ba/0xbe0 [ 261.996992][ T8789] ? netlink_getsockopt+0x570/0x570 [ 262.002203][ T8789] ? aa_sock_msg_perm+0x94/0x150 [ 262.007157][ T8789] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 262.012451][ T8789] ? security_socket_sendmsg+0x7c/0xa0 [ 262.017932][ T8789] ? netlink_getsockopt+0x570/0x570 [ 262.023148][ T8789] ____sys_sendmsg+0x5b7/0x8f0 [ 262.028029][ T8789] ? __sys_sendmsg_sock+0x30/0x30 [ 262.033105][ T8789] ? import_iovec+0x6f/0xa0 [ 262.037628][ T8789] ___sys_sendmsg+0x236/0x2e0 [ 262.042335][ T8789] ? __sys_sendmsg+0x2a0/0x2a0 [ 262.047136][ T8789] ? trace_event_raw_event_lock+0x270/0x270 [ 262.053037][ T8789] ? vfs_write+0x8b2/0xd60 [ 262.057517][ T8789] __se_sys_sendmsg+0x1af/0x290 [ 262.062399][ T8789] ? __x64_sys_sendmsg+0x80/0x80 [ 262.067343][ T8789] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 262.073360][ T8789] ? lockdep_hardirqs_on+0x94/0x140 [ 262.078579][ T8789] do_syscall_64+0x4c/0xa0 [ 262.083005][ T8789] ? clear_bhb_loop+0x30/0x80 [ 262.087690][ T8789] ? clear_bhb_loop+0x30/0x80 [ 262.092390][ T8789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.098294][ T8789] RIP: 0033:0x7f82a878d799 [ 262.102722][ T8789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.122343][ T8789] RSP: 002b:00007f82a69e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.130776][ T8789] RAX: ffffffffffffffda RBX: 00007f82a8a06fa0 RCX: 00007f82a878d799 [ 262.138753][ T8789] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 262.146734][ T8789] RBP: 00007f82a69e7090 R08: 0000000000000000 R09: 0000000000000000 [ 262.154722][ T8789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.162700][ T8789] R13: 00007f82a8a07038 R14: 00007f82a8a06fa0 R15: 00007ffe64022098 [ 262.170716][ T8789] [ 262.179125][ T8789] wireguard: wg1: Could not create IPv4 socket [ 262.581148][ T8803] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1315'. [ 262.658321][ T8803] netlink: 18430 bytes leftover after parsing attributes in process `syz.3.1315'. [ 265.339664][ T8824] netlink: 'syz.3.1321': attribute type 10 has an invalid length. [ 265.375856][ T8824] team0: Device wg1 is of different type [ 265.416712][ T8839] netlink: 'syz.1.1325': attribute type 10 has an invalid length. [ 265.455122][ T8839] team0: Device wg1 is of different type [ 265.704426][ T8851] netlink: 'syz.0.1330': attribute type 11 has an invalid length. [ 266.754168][ T8875] netlink: 'syz.3.1336': attribute type 10 has an invalid length. [ 266.815408][ T8875] team0: Device wg1 is of different type [ 266.940413][ T8888] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 267.021358][ T8884] netlink: 'syz.4.1339': attribute type 10 has an invalid length. [ 267.159022][ T8888] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1340'. [ 267.439009][ T8884] team0: Device wg1 is of different type [ 267.677185][ T8902] bond0: (slave geneve0): Error: Slave device does not support XDP [ 267.847803][ T8921] netlink: 'syz.0.1348': attribute type 17 has an invalid length. [ 267.884030][ T8921] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1348'. [ 268.025715][ T8931] netlink: 'syz.3.1353': attribute type 7 has an invalid length. [ 268.085811][ T8931] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 268.126530][ T8929] netlink: 'syz.4.1352': attribute type 10 has an invalid length. [ 268.135067][ T8931] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1353'. [ 268.193380][ T8929] team0: Device wg1 is of different type [ 268.609103][ T8943] netlink: 'syz.4.1356': attribute type 21 has an invalid length. [ 268.617228][ T8943] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1356'. [ 268.785993][ T8948] netlink: 'syz.2.1357': attribute type 21 has an invalid length. [ 269.525609][ T8971] netlink: 'syz.1.1364': attribute type 1 has an invalid length. [ 269.585399][ T8971] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1364'. [ 271.766419][ T8980] netlink: 'syz.2.1366': attribute type 10 has an invalid length. [ 272.273420][ T9016] netlink: 'syz.3.1375': attribute type 10 has an invalid length. [ 272.307279][ T9016] team0: Device wg1 is of different type [ 272.462863][ T9025] netlink: 'syz.3.1379': attribute type 10 has an invalid length. [ 272.478139][ T9025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1379'. [ 272.487351][ T9025] device dummy0 entered promiscuous mode [ 272.505596][ T9025] bridge0: port 4(dummy0) entered blocking state [ 272.519878][ T9025] bridge0: port 4(dummy0) entered disabled state [ 273.046620][ T9056] netlink: 'syz.3.1387': attribute type 2 has an invalid length. [ 273.166940][ T9056] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1387'. [ 273.448307][ T9065] device syzkaller0 entered promiscuous mode [ 276.335857][ T9071] netlink: 'syz.2.1390': attribute type 10 has an invalid length. [ 276.811966][ T9111] netlink: 'syz.2.1402': attribute type 3 has an invalid length. [ 276.868245][ T9111] netlink: 'syz.2.1402': attribute type 1 has an invalid length. [ 277.359027][ T9141] netlink: 'syz.3.1410': attribute type 28 has an invalid length. [ 277.628732][ T9145] netlink: 'syz.3.1410': attribute type 9 has an invalid length. [ 277.636533][ T9145] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1410'. [ 277.762107][ T9153] netlink: 'syz.0.1412': attribute type 10 has an invalid length. [ 277.830007][ T9153] team0: Device wg1 is of different type [ 278.498267][ T9172] netlink: 'syz.4.1418': attribute type 39 has an invalid length. [ 278.892301][ T9172] device syz_tun left promiscuous mode [ 278.989221][ T9172] team0: Port device syz_tun removed [ 280.020679][ T9216] netlink: 'syz.4.1431': attribute type 10 has an invalid length. [ 280.107500][ T9216] team0: Device wg1 is of different type [ 280.251953][ T9230] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1437'. [ 280.336021][ T9239] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1439'. [ 280.387715][ T9242] netlink: 'syz.0.1441': attribute type 3 has an invalid length. [ 280.395787][ T9242] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1441'. [ 280.693161][ T9267] netlink: 'syz.1.1446': attribute type 29 has an invalid length. [ 280.742827][ T9267] netlink: 'syz.1.1446': attribute type 29 has an invalid length. [ 280.767185][ T9273] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.1448'. [ 280.950457][ T9284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1451'. [ 281.159405][ T9291] netlink: 194448 bytes leftover after parsing attributes in process `syz.1.1453'. [ 282.009666][ T9305] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1456'. [ 282.201062][ T9320] validate_nla: 9 callbacks suppressed [ 282.201080][ T9320] netlink: 'syz.0.1463': attribute type 2 has an invalid length. [ 282.221831][ T9320] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.1463'. [ 282.238891][ T9320] netlink: 'syz.0.1463': attribute type 10 has an invalid length. [ 282.282048][ T9320] team0: Device wg1 is of different type [ 282.465899][ T9339] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1466'. [ 282.539783][ T9339] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1466'. [ 282.561054][ T9331] netlink: 'syz.1.1466': attribute type 21 has an invalid length. [ 282.569104][ T9331] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 282.681804][ T9350] IPv6: Can't replace route, no match found [ 282.938911][ T9370] netlink: 'syz.2.1478': attribute type 10 has an invalid length. [ 285.622916][ T9402] __nla_validate_parse: 3 callbacks suppressed [ 285.622932][ T9402] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1487'. [ 285.862981][ T9415] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1491'. [ 285.957838][ T9422] netlink: 'syz.3.1493': attribute type 10 has an invalid length. [ 286.019992][ T9422] team0: Device wg1 is of different type [ 286.099578][ T9434] netlink: 'syz.2.1497': attribute type 27 has an invalid length. [ 286.107803][ T9434] C: renamed from team_slave_0 [ 286.309616][ T9427] delete_channel: no stack [ 286.391753][ T9439] netlink: 'syz.2.1499': attribute type 3 has an invalid length. [ 286.498447][ T9439] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1499'. [ 287.241426][ T9468] netlink: 'syz.4.1507': attribute type 1 has an invalid length. [ 287.262258][ T9468] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.1507'. [ 287.285799][ T9468] netlink: 'syz.4.1507': attribute type 29 has an invalid length. [ 287.302545][ T9472] netlink: 'syz.2.1508': attribute type 21 has an invalid length. [ 287.328224][ T9472] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1508'. [ 287.339316][ T9468] netlink: 'syz.4.1507': attribute type 29 has an invalid length. [ 287.356331][ T9475] netlink: 'syz.4.1507': attribute type 29 has an invalid length. [ 287.392629][ T9471] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1506'. [ 287.553351][ T9487] netlink: 'syz.1.1511': attribute type 4 has an invalid length. [ 287.562062][ T9487] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1511'. [ 287.611829][ T9487] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 287.862949][ T9512] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1520'. [ 288.502552][ T9528] netlink: 'syz.2.1526': attribute type 21 has an invalid length. [ 288.514757][ T9528] netlink: 'syz.2.1526': attribute type 10 has an invalid length. [ 288.535394][ T9541] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1531'. [ 288.549641][ T9543] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1531'. [ 288.690836][ T9546] sctp: [Deprecated]: syz.3.1532 (pid 9546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.690836][ T9546] Use struct sctp_sack_info instead [ 288.735995][ T9550] netlink: 'syz.4.1534': attribute type 10 has an invalid length. [ 288.749106][ T9549] delete_channel: no stack [ 288.933590][ T9561] netlink: 'syz.4.1536': attribute type 3 has an invalid length. [ 290.458796][ T9569] device macvlan1 entered promiscuous mode [ 290.918215][ T9593] __nla_validate_parse: 2 callbacks suppressed [ 290.918232][ T9593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1548'. [ 290.946407][ T9601] device macvlan1 entered promiscuous mode [ 293.186145][ T9642] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1562'. [ 293.233867][ T9644] device lo entered promiscuous mode [ 293.286531][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 295.523170][ T9657] validate_nla: 2 callbacks suppressed [ 295.523193][ T9657] netlink: 'syz.2.1566': attribute type 27 has an invalid length. [ 295.883905][ T9674] netlink: 'syz.4.1571': attribute type 10 has an invalid length. [ 295.926562][ T9674] device team0 left promiscuous mode [ 295.932471][ T9674] device team_slave_0 left promiscuous mode [ 295.939892][ T9674] device team_slave_1 left promiscuous mode [ 295.981571][ T9674] team0: Cannot enslave team device to itself [ 296.147054][ T9684] netlink: 'syz.0.1574': attribute type 7 has an invalid length. [ 296.172728][ T9689] netlink: 'syz.2.1576': attribute type 1 has an invalid length. [ 296.180269][ T9684] netlink: 'syz.0.1574': attribute type 1 has an invalid length. [ 296.190504][ T9689] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1576'. [ 296.228030][ T9684] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1574'. [ 296.286231][ T9684] netlink: 'syz.0.1574': attribute type 10 has an invalid length. [ 296.317353][ T9684] team0: Device wg1 is of different type [ 296.357557][ T9700] netlink: 'syz.4.1579': attribute type 1 has an invalid length. [ 296.370428][ T9700] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1579'. [ 296.400753][ T9700] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1579'. [ 296.844673][ T9725] FAULT_INJECTION: forcing a failure. [ 296.844673][ T9725] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 296.880295][ T9725] CPU: 1 PID: 9725 Comm: syz.3.1585 Not tainted syzkaller #0 [ 296.887712][ T9725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 296.897773][ T9725] Call Trace: [ 296.901056][ T9725] [ 296.903991][ T9725] dump_stack_lvl+0x188/0x250 [ 296.908689][ T9725] ? show_regs_print_info+0x20/0x20 [ 296.913906][ T9725] ? load_image+0x400/0x400 [ 296.918419][ T9725] ? __lock_acquire+0x7d10/0x7d10 [ 296.923452][ T9725] ? __lock_acquire+0x13bc/0x7d10 [ 296.928496][ T9725] should_fail+0x38c/0x4c0 [ 296.932932][ T9725] prepare_alloc_pages+0x1e4/0x5f0 [ 296.938061][ T9725] __alloc_pages+0x11b/0x480 [ 296.942663][ T9725] ? zone_statistics+0x170/0x170 [ 296.947637][ T9725] alloc_pages_vma+0x393/0x7c0 [ 296.952420][ T9725] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 296.958247][ T9725] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 296.963920][ T9725] ? shmem_swapin_page+0x2300/0x2300 [ 296.969241][ T9725] ? __lock_acquire+0x7d10/0x7d10 [ 296.974280][ T9725] ? xas_start+0x3d1/0x770 [ 296.978710][ T9725] ? xas_load+0x119/0x140 [ 296.983051][ T9725] ? pagecache_get_page+0xc27/0xf10 [ 296.988266][ T9725] ? page_cache_prev_miss+0x380/0x380 [ 296.993647][ T9725] ? mark_lock+0x94/0x320 [ 296.997985][ T9725] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 297.003981][ T9725] ? lock_chain_count+0x20/0x20 [ 297.008846][ T9725] ? do_user_addr_fault+0x694/0xc80 [ 297.014069][ T9725] shmem_getpage_gfp+0x14f4/0x2d40 [ 297.019196][ T9725] ? exc_page_fault+0x88/0x100 [ 297.023998][ T9725] ? __get_user_nocheck_1+0x6/0x10 [ 297.029131][ T9725] shmem_write_begin+0xcd/0x1a0 [ 297.034000][ T9725] generic_perform_write+0x2b6/0x550 [ 297.039411][ T9725] ? grab_cache_page_write_begin+0xa0/0xa0 [ 297.045230][ T9725] ? file_remove_privs+0x5d0/0x5d0 [ 297.050356][ T9725] ? rwsem_write_trylock+0x135/0x1c0 [ 297.055683][ T9725] ? clear_nonspinnable+0x60/0x60 [ 297.060718][ T9725] __generic_file_write_iter+0x25f/0x4e0 [ 297.066371][ T9725] generic_file_write_iter+0xa6/0x1b0 [ 297.071756][ T9725] vfs_write+0x745/0xd60 [ 297.076024][ T9725] ? file_end_write+0x250/0x250 [ 297.080891][ T9725] ? __fget_files+0x40f/0x480 [ 297.085591][ T9725] ? mutex_lock_nested+0x17/0x20 [ 297.090542][ T9725] ? __fdget_pos+0x2bf/0x370 [ 297.095139][ T9725] ? ksys_write+0x71/0x260 [ 297.099564][ T9725] ksys_write+0x152/0x260 [ 297.103904][ T9725] ? __ia32_sys_read+0x80/0x80 [ 297.108678][ T9725] ? lockdep_hardirqs_on+0x94/0x140 [ 297.113893][ T9725] do_syscall_64+0x4c/0xa0 [ 297.118324][ T9725] ? clear_bhb_loop+0x30/0x80 [ 297.123010][ T9725] ? clear_bhb_loop+0x30/0x80 [ 297.127701][ T9725] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.133604][ T9725] RIP: 0033:0x7fd1ccc96799 [ 297.138026][ T9725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.157636][ T9725] RSP: 002b:00007fd1caeae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.166068][ T9725] RAX: ffffffffffffffda RBX: 00007fd1ccf10180 RCX: 00007fd1ccc96799 [ 297.174054][ T9725] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000005 [ 297.182034][ T9725] RBP: 00007fd1caeae090 R08: 0000000000000000 R09: 0000000000000000 [ 297.190016][ T9725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.198002][ T9725] R13: 00007fd1ccf10218 R14: 00007fd1ccf10180 R15: 00007ffdc80d25e8 [ 297.206013][ T9725] [ 299.292536][ T9742] netlink: 'syz.3.1590': attribute type 10 has an invalid length. [ 299.380058][ T9742] team0: Device wg1 is of different type [ 299.531292][ T9746] netlink: 'syz.0.1593': attribute type 3 has an invalid length. [ 299.588639][ T9746] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1593'. [ 300.161420][ T9763] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1597'. [ 300.505417][ T9776] delete_channel: no stack [ 301.721525][ T9819] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.1612'. [ 301.797957][ T9819] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 303.179382][ T9832] netlink: 'syz.4.1616': attribute type 20 has an invalid length. [ 303.762213][ T9877] netlink: 'syz.3.1629': attribute type 29 has an invalid length. [ 303.771982][ T9870] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1628'. [ 303.786370][ T9871] netlink: 'syz.0.1627': attribute type 19 has an invalid length. [ 303.952189][ T9877] netlink: 'syz.3.1629': attribute type 29 has an invalid length. [ 304.184075][ T9879] netlink: 'syz.3.1629': attribute type 29 has an invalid length. [ 306.359930][ T9948] netlink: 'syz.2.1649': attribute type 1 has an invalid length. [ 306.432631][ T9949] netlink: 'syz.2.1649': attribute type 10 has an invalid length. [ 306.448851][ T9949] netlink: 'syz.2.1649': attribute type 10 has an invalid length. [ 306.521078][ T9949] netlink: 'syz.2.1649': attribute type 10 has an invalid length. [ 306.541873][ T9949] netlink: 'syz.2.1649': attribute type 10 has an invalid length. [ 309.920939][ T9978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1657'. [ 310.459933][T10008] FAULT_INJECTION: forcing a failure. [ 310.459933][T10008] name failslab, interval 1, probability 0, space 0, times 0 [ 310.518218][T10008] CPU: 0 PID: 10008 Comm: syz.0.1665 Not tainted syzkaller #0 [ 310.525746][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.535824][T10008] Call Trace: [ 310.539106][T10008] [ 310.542029][T10008] dump_stack_lvl+0x188/0x250 [ 310.546746][T10008] ? show_regs_print_info+0x20/0x20 [ 310.551951][T10008] ? load_image+0x400/0x400 [ 310.556451][T10008] ? __might_sleep+0xf0/0xf0 [ 310.561031][T10008] ? __lock_acquire+0x7d10/0x7d10 [ 310.566240][T10008] ? mark_lock+0x94/0x320 [ 310.570660][T10008] should_fail+0x38c/0x4c0 [ 310.575077][T10008] should_failslab+0x5/0x20 [ 310.579575][T10008] slab_pre_alloc_hook+0x51/0xc0 [ 310.584510][T10008] __kmalloc+0x6b/0x330 [ 310.588667][T10008] ? tomoyo_realpath_from_path+0x118/0x610 [ 310.594495][T10008] tomoyo_realpath_from_path+0x118/0x610 [ 310.600172][T10008] tomoyo_path_number_perm+0x242/0x660 [ 310.605637][T10008] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 310.611092][T10008] ? perf_trace_lock+0xe4/0x390 [ 310.616026][T10008] ? perf_trace_lock+0xe4/0x390 [ 310.620907][T10008] security_file_ioctl+0x6c/0xa0 [ 310.625853][T10008] __se_sys_ioctl+0x48/0x170 [ 310.630442][T10008] do_syscall_64+0x4c/0xa0 [ 310.634868][T10008] ? clear_bhb_loop+0x30/0x80 [ 310.639535][T10008] ? clear_bhb_loop+0x30/0x80 [ 310.644212][T10008] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.650215][T10008] RIP: 0033:0x7f82a878d799 [ 310.654642][T10008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.674339][T10008] RSP: 002b:00007f82a69c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.682778][T10008] RAX: ffffffffffffffda RBX: 00007f82a8a07090 RCX: 00007f82a878d799 [ 310.690762][T10008] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 310.698726][T10008] RBP: 00007f82a69c6090 R08: 0000000000000000 R09: 0000000000000000 [ 310.706687][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.714652][T10008] R13: 00007f82a8a07128 R14: 00007f82a8a07090 R15: 00007ffe64022098 [ 310.722666][T10008] [ 310.789294][T10008] ERROR: Out of memory at tomoyo_realpath_from_path. [ 311.060730][T10028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1672'. [ 311.192810][T10028] IPv6: pim6reg1: Disabled Multicast RS [ 314.004683][T10050] validate_nla: 29 callbacks suppressed [ 314.004766][T10050] netlink: 'syz.1.1678': attribute type 1 has an invalid length. [ 314.040306][T10050] netlink: 'syz.1.1678': attribute type 4 has an invalid length. [ 314.059123][T10050] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1678'. [ 314.826311][T10074] FAULT_INJECTION: forcing a failure. [ 314.826311][T10074] name failslab, interval 1, probability 0, space 0, times 0 [ 314.882088][T10074] CPU: 1 PID: 10074 Comm: syz.4.1685 Not tainted syzkaller #0 [ 314.889604][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.899674][T10074] Call Trace: [ 314.903071][T10074] [ 314.906098][T10074] dump_stack_lvl+0x188/0x250 [ 314.910792][T10074] ? show_regs_print_info+0x20/0x20 [ 314.916019][T10074] ? load_image+0x400/0x400 [ 314.920537][T10074] ? __might_sleep+0xf0/0xf0 [ 314.925143][T10074] ? __lock_acquire+0x7d10/0x7d10 [ 314.930186][T10074] should_fail+0x38c/0x4c0 [ 314.934616][T10074] should_failslab+0x5/0x20 [ 314.939116][T10074] slab_pre_alloc_hook+0x51/0xc0 [ 314.944058][T10074] __kmalloc+0x6b/0x330 [ 314.948208][T10074] ? tomoyo_encode+0x27e/0x540 [ 314.952971][T10074] tomoyo_encode+0x27e/0x540 [ 314.957565][T10074] tomoyo_realpath_from_path+0x5cd/0x610 [ 314.963205][T10074] tomoyo_path_number_perm+0x242/0x660 [ 314.968665][T10074] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 314.974119][T10074] ? perf_trace_lock+0xe4/0x390 [ 314.979014][T10074] security_file_ioctl+0x6c/0xa0 [ 314.983957][T10074] __se_sys_ioctl+0x48/0x170 [ 314.988813][T10074] do_syscall_64+0x4c/0xa0 [ 314.993319][T10074] ? clear_bhb_loop+0x30/0x80 [ 314.997992][T10074] ? clear_bhb_loop+0x30/0x80 [ 315.002666][T10074] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.008556][T10074] RIP: 0033:0x7f68d2d9b799 [ 315.012970][T10074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.032655][T10074] RSP: 002b:00007f68d0fd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.041068][T10074] RAX: ffffffffffffffda RBX: 00007f68d3015090 RCX: 00007f68d2d9b799 [ 315.049094][T10074] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 315.057063][T10074] RBP: 00007f68d0fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 315.065031][T10074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.072998][T10074] R13: 00007f68d3015128 R14: 00007f68d3015090 R15: 00007ffe855ff158 [ 315.081069][T10074] [ 315.301666][T10074] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.401558][T10084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1688'. [ 315.574736][T10086] netlink: 'syz.0.1689': attribute type 21 has an invalid length. [ 315.604748][T10086] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1689'. [ 317.253682][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.260347][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.376703][T10125] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1701'. [ 317.420124][T10129] FAULT_INJECTION: forcing a failure. [ 317.420124][T10129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.460451][T10131] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1704'. [ 317.505295][T10129] CPU: 1 PID: 10129 Comm: syz.2.1700 Not tainted syzkaller #0 [ 317.512808][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.522874][T10129] Call Trace: [ 317.526163][T10129] [ 317.529107][T10129] dump_stack_lvl+0x188/0x250 [ 317.533807][T10129] ? show_regs_print_info+0x20/0x20 [ 317.539026][T10129] ? load_image+0x400/0x400 [ 317.543551][T10129] ? __lock_acquire+0x7d10/0x7d10 [ 317.548594][T10129] ? unix_ioctl+0x25d/0x660 [ 317.553387][T10129] should_fail+0x38c/0x4c0 [ 317.557829][T10129] _copy_from_user+0x2e/0x170 [ 317.562521][T10129] sock_do_ioctl+0x18c/0x320 [ 317.567128][T10129] ? sock_show_fdinfo+0xb0/0xb0 [ 317.572145][T10129] sock_ioctl+0x4d2/0x710 [ 317.576490][T10129] ? sock_poll+0x410/0x410 [ 317.580918][T10129] ? bpf_lsm_file_ioctl+0x5/0x10 [ 317.585873][T10129] ? security_file_ioctl+0x7c/0xa0 [ 317.591000][T10129] ? sock_poll+0x410/0x410 [ 317.595403][T10129] __se_sys_ioctl+0xfa/0x170 [ 317.599994][T10129] do_syscall_64+0x4c/0xa0 [ 317.604417][T10129] ? clear_bhb_loop+0x30/0x80 [ 317.609105][T10129] ? clear_bhb_loop+0x30/0x80 [ 317.613796][T10129] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.619704][T10129] RIP: 0033:0x7f83413dc799 [ 317.624135][T10129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.643744][T10129] RSP: 002b:00007f833f615028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.652157][T10129] RAX: ffffffffffffffda RBX: 00007f8341656090 RCX: 00007f83413dc799 [ 317.660120][T10129] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 317.668083][T10129] RBP: 00007f833f615090 R08: 0000000000000000 R09: 0000000000000000 [ 317.676050][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.684017][T10129] R13: 00007f8341656128 R14: 00007f8341656090 R15: 00007ffe03cb7328 [ 317.692134][T10129] [ 317.704699][T10134] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.853913][T10137] netlink: 'syz.3.1704': attribute type 21 has an invalid length. [ 317.865772][T10137] netlink: 'syz.3.1704': attribute type 6 has an invalid length. [ 317.876765][T10137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1704'. [ 317.898366][T10140] netlink: 'syz.3.1704': attribute type 21 has an invalid length. [ 317.906363][T10140] netlink: 'syz.3.1704': attribute type 6 has an invalid length. [ 317.948941][T10140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1704'. [ 318.031892][T10152] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1709'. [ 318.106815][T10155] netlink: 'syz.0.1709': attribute type 21 has an invalid length. [ 318.115271][T10155] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1709'. [ 318.125905][T10155] netlink: 'syz.0.1709': attribute type 2 has an invalid length. [ 318.144928][T10155] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 318.165499][T10155] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1709'. [ 318.225035][T10162] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.1712'. [ 318.509644][T10164] device syzkaller0 entered promiscuous mode [ 318.968004][T10196] FAULT_INJECTION: forcing a failure. [ 318.968004][T10196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.189662][T10196] CPU: 1 PID: 10196 Comm: syz.2.1719 Not tainted syzkaller #0 [ 319.197171][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.207241][T10196] Call Trace: [ 319.210538][T10196] [ 319.213476][T10196] dump_stack_lvl+0x188/0x250 [ 319.218168][T10196] ? show_regs_print_info+0x20/0x20 [ 319.223380][T10196] ? load_image+0x400/0x400 [ 319.227885][T10196] ? __lock_acquire+0x7d10/0x7d10 [ 319.232916][T10196] ? __rwlock_init+0x140/0x140 [ 319.237678][T10196] should_fail+0x38c/0x4c0 [ 319.242098][T10196] _copy_from_user+0x2e/0x170 [ 319.246787][T10196] dev_ethtool+0xd7/0xfe0 [ 319.251119][T10196] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 319.257364][T10196] ? mutex_lock_io_nested+0x60/0x60 [ 319.262570][T10196] ? __lock_acquire+0x7d10/0x7d10 [ 319.267603][T10196] ? full_name_hash+0x8e/0xe0 [ 319.272289][T10196] dev_ioctl+0x457/0xe30 [ 319.276529][T10196] ? _copy_from_user+0x111/0x170 [ 319.281473][T10196] sock_do_ioctl+0x245/0x320 [ 319.286062][T10196] ? sock_show_fdinfo+0xb0/0xb0 [ 319.290926][T10196] sock_ioctl+0x4d2/0x710 [ 319.295258][T10196] ? sock_poll+0x410/0x410 [ 319.299674][T10196] ? bpf_lsm_file_ioctl+0x5/0x10 [ 319.304603][T10196] ? security_file_ioctl+0x7c/0xa0 [ 319.309708][T10196] ? sock_poll+0x410/0x410 [ 319.314125][T10196] __se_sys_ioctl+0xfa/0x170 [ 319.318727][T10196] do_syscall_64+0x4c/0xa0 [ 319.323141][T10196] ? clear_bhb_loop+0x30/0x80 [ 319.327811][T10196] ? clear_bhb_loop+0x30/0x80 [ 319.332482][T10196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.338371][T10196] RIP: 0033:0x7f83413dc799 [ 319.342792][T10196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.362396][T10196] RSP: 002b:00007f833f615028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.370815][T10196] RAX: ffffffffffffffda RBX: 00007f8341656090 RCX: 00007f83413dc799 [ 319.378782][T10196] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 319.386787][T10196] RBP: 00007f833f615090 R08: 0000000000000000 R09: 0000000000000000 [ 319.394752][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.402724][T10196] R13: 00007f8341656128 R14: 00007f8341656090 R15: 00007ffe03cb7328 [ 319.410709][T10196] [ 320.840429][T10200] validate_nla: 1 callbacks suppressed [ 320.840448][T10200] netlink: 'syz.4.1722': attribute type 10 has an invalid length. [ 320.886857][T10200] __nla_validate_parse: 1 callbacks suppressed [ 320.886874][T10200] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1722'. [ 320.941579][T10209] netlink: 'syz.2.1724': attribute type 10 has an invalid length. [ 321.165534][T10221] netlink: 'syz.4.1728': attribute type 9 has an invalid length. [ 321.223618][T10221] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1728'. [ 321.313752][T10220] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1727'. [ 321.373932][T10220] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 321.487357][T10245] FAULT_INJECTION: forcing a failure. [ 321.487357][T10245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.508201][T10245] CPU: 1 PID: 10245 Comm: syz.2.1734 Not tainted syzkaller #0 [ 321.515707][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.525775][T10245] Call Trace: [ 321.529071][T10245] [ 321.532015][T10245] dump_stack_lvl+0x188/0x250 [ 321.536709][T10245] ? show_regs_print_info+0x20/0x20 [ 321.541935][T10245] ? load_image+0x400/0x400 [ 321.546458][T10245] ? __lock_acquire+0x7d10/0x7d10 [ 321.551509][T10245] should_fail+0x38c/0x4c0 [ 321.555957][T10245] _copy_from_user+0x2e/0x170 [ 321.560664][T10245] ethtool_get_sset_info+0x9f/0x590 [ 321.565874][T10245] ? __lock_acquire+0x7d10/0x7d10 [ 321.570916][T10245] ? rcu_lock_release+0x20/0x20 [ 321.575789][T10245] ? ethtool_reset+0x1f0/0x1f0 [ 321.580662][T10245] ? _copy_from_user+0x111/0x170 [ 321.585619][T10245] dev_ethtool+0x5af/0xfe0 [ 321.590060][T10245] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 321.596324][T10245] ? mutex_lock_io_nested+0x60/0x60 [ 321.601585][T10245] ? __lock_acquire+0x7d10/0x7d10 [ 321.606622][T10245] ? full_name_hash+0x8e/0xe0 [ 321.611339][T10245] dev_ioctl+0x457/0xe30 [ 321.615680][T10245] ? _copy_from_user+0x111/0x170 [ 321.620653][T10245] sock_do_ioctl+0x245/0x320 [ 321.625267][T10245] ? sock_show_fdinfo+0xb0/0xb0 [ 321.630139][T10245] sock_ioctl+0x4d2/0x710 [ 321.634490][T10245] ? sock_poll+0x410/0x410 [ 321.638917][T10245] ? bpf_lsm_file_ioctl+0x5/0x10 [ 321.643853][T10245] ? security_file_ioctl+0x7c/0xa0 [ 321.648963][T10245] ? sock_poll+0x410/0x410 [ 321.653400][T10245] __se_sys_ioctl+0xfa/0x170 [ 321.657997][T10245] do_syscall_64+0x4c/0xa0 [ 321.662424][T10245] ? clear_bhb_loop+0x30/0x80 [ 321.667097][T10245] ? clear_bhb_loop+0x30/0x80 [ 321.671771][T10245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.677680][T10245] RIP: 0033:0x7f83413dc799 [ 321.682090][T10245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.701692][T10245] RSP: 002b:00007f833f615028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.710103][T10245] RAX: ffffffffffffffda RBX: 00007f8341656090 RCX: 00007f83413dc799 [ 321.718069][T10245] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 321.726118][T10245] RBP: 00007f833f615090 R08: 0000000000000000 R09: 0000000000000000 [ 321.734081][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.742044][T10245] R13: 00007f8341656128 R14: 00007f8341656090 R15: 00007ffe03cb7328 [ 321.750035][T10245] [ 322.034287][T10258] netlink: 'syz.2.1739': attribute type 10 has an invalid length. [ 325.143400][T10293] FAULT_INJECTION: forcing a failure. [ 325.143400][T10293] name failslab, interval 1, probability 0, space 0, times 0 [ 325.156496][T10293] CPU: 0 PID: 10293 Comm: syz.4.1749 Not tainted syzkaller #0 [ 325.163955][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.174008][T10293] Call Trace: [ 325.177283][T10293] [ 325.180204][T10293] dump_stack_lvl+0x188/0x250 [ 325.184875][T10293] ? show_regs_print_info+0x20/0x20 [ 325.190092][T10293] ? load_image+0x400/0x400 [ 325.194589][T10293] ? __lock_acquire+0x7d10/0x7d10 [ 325.199610][T10293] ? __might_fault+0xb7/0x110 [ 325.204284][T10293] should_fail+0x38c/0x4c0 [ 325.208699][T10293] should_failslab+0x5/0x20 [ 325.213196][T10293] slab_pre_alloc_hook+0x51/0xc0 [ 325.218141][T10293] __kmalloc+0x6b/0x330 [ 325.222291][T10293] ? ethtool_get_sset_info+0x170/0x590 [ 325.227750][T10293] ethtool_get_sset_info+0x170/0x590 [ 325.233064][T10293] ? __lock_acquire+0x7d10/0x7d10 [ 325.238106][T10293] ? ethtool_reset+0x1f0/0x1f0 [ 325.242875][T10293] ? _copy_from_user+0x111/0x170 [ 325.247805][T10293] dev_ethtool+0x5af/0xfe0 [ 325.252223][T10293] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 325.258457][T10293] ? mutex_lock_io_nested+0x60/0x60 [ 325.263651][T10293] ? __lock_acquire+0x7d10/0x7d10 [ 325.268669][T10293] ? full_name_hash+0x8e/0xe0 [ 325.273348][T10293] dev_ioctl+0x457/0xe30 [ 325.277588][T10293] ? _copy_from_user+0x111/0x170 [ 325.282526][T10293] sock_do_ioctl+0x245/0x320 [ 325.287120][T10293] ? sock_show_fdinfo+0xb0/0xb0 [ 325.291976][T10293] sock_ioctl+0x4d2/0x710 [ 325.296307][T10293] ? sock_poll+0x410/0x410 [ 325.300724][T10293] ? bpf_lsm_file_ioctl+0x5/0x10 [ 325.305653][T10293] ? security_file_ioctl+0x7c/0xa0 [ 325.310767][T10293] ? sock_poll+0x410/0x410 [ 325.315180][T10293] __se_sys_ioctl+0xfa/0x170 [ 325.319765][T10293] do_syscall_64+0x4c/0xa0 [ 325.324540][T10293] ? clear_bhb_loop+0x30/0x80 [ 325.329211][T10293] ? clear_bhb_loop+0x30/0x80 [ 325.333883][T10293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.339772][T10293] RIP: 0033:0x7f68d2d9b799 [ 325.344233][T10293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.363833][T10293] RSP: 002b:00007f68d0fd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.372251][T10293] RAX: ffffffffffffffda RBX: 00007f68d3015090 RCX: 00007f68d2d9b799 [ 325.380215][T10293] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 325.388182][T10293] RBP: 00007f68d0fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 325.396163][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.404148][T10293] R13: 00007f68d3015128 R14: 00007f68d3015090 R15: 00007ffe855ff158 [ 325.412137][T10293] [ 325.515818][T10301] netlink: 'syz.4.1751': attribute type 10 has an invalid length. [ 325.769737][T10311] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1753'. [ 326.117593][T10322] netlink: 'syz.0.1757': attribute type 10 has an invalid length. [ 326.320616][T10345] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1763'. [ 330.789512][T10391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.026871][T10401] netlink: 'syz.1.1778': attribute type 10 has an invalid length. [ 331.125045][T10398] netlink: 'syz.4.1777': attribute type 10 has an invalid length. [ 333.979451][T10451] netlink: 'syz.4.1793': attribute type 10 has an invalid length. [ 334.151679][T10459] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1796'. [ 337.351778][T10480] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1803'. [ 339.535601][T10497] netlink: 'syz.0.1806': attribute type 10 has an invalid length. [ 339.703634][T10505] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1810'. [ 339.715393][T10505] netlink: 'syz.0.1810': attribute type 8 has an invalid length. [ 339.724431][T10505] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1810'. [ 339.819720][T10512] netlink: 'syz.1.1809': attribute type 25 has an invalid length. [ 339.827582][T10512] netlink: 'syz.1.1809': attribute type 6 has an invalid length. [ 340.158198][T10520] netlink: 'syz.0.1812': attribute type 10 has an invalid length. [ 340.227050][T10520] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1812'. [ 341.369198][T10551] netlink: 'syz.4.1822': attribute type 10 has an invalid length. [ 343.074180][T10593] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1834'. [ 343.168854][T10593] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.1834'. [ 343.308120][T10607] netlink: 'syz.0.1837': attribute type 10 has an invalid length. [ 343.799201][T10630] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1842'. [ 343.973914][T10637] netlink: 'syz.1.1845': attribute type 21 has an invalid length. [ 344.124150][T10644] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1848'. [ 347.179268][T10663] netlink: 'syz.0.1853': attribute type 10 has an invalid length. [ 347.358706][T10670] netlink: 'syz.2.1857': attribute type 10 has an invalid length. [ 347.398174][T10670] device hsr0 entered promiscuous mode [ 347.438253][T10670] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 347.480967][T10670] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 347.500164][T10670] bond0: (slave hsr0): Error -95 calling set_mac_address [ 347.689740][T10693] netlink: 'syz.2.1864': attribute type 10 has an invalid length. [ 347.697597][T10693] device hsr0 left promiscuous mode [ 347.820929][T10698] netlink: 'syz.1.1865': attribute type 7 has an invalid length. [ 348.094896][T10714] netlink: 'syz.3.1870': attribute type 10 has an invalid length. [ 348.356497][T10736] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1877'. [ 348.429357][T10738] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1878'. [ 350.489436][T10764] netlink: 'syz.1.1885': attribute type 10 has an invalid length. [ 350.676957][T10792] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1892'. [ 350.684347][T10789] netlink: 'syz.1.1893': attribute type 3 has an invalid length. [ 350.701643][T10789] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1893'. [ 351.382077][T10815] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1900'. [ 351.509342][T10822] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1901'. [ 351.527943][T10822] netlink: 22796 bytes leftover after parsing attributes in process `syz.4.1901'. [ 351.843781][T10834] netlink: 'syz.3.1904': attribute type 10 has an invalid length. [ 352.857977][T10841] netlink: 'syz.4.1905': attribute type 6 has an invalid length. [ 352.866893][T10841] netlink: 'syz.4.1905': attribute type 10 has an invalid length. [ 352.947757][T10841] team0: Port device geneve1 added [ 353.047335][T10850] netlink: 35083 bytes leftover after parsing attributes in process `syz.0.1910'. [ 353.057426][T10851] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1909'. [ 353.851417][T10860] netlink: 'syz.0.1914': attribute type 9 has an invalid length. [ 353.948118][T10860] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1914'. [ 356.434669][T10878] netlink: 'syz.3.1918': attribute type 10 has an invalid length. [ 356.675013][T10893] netlink: 'syz.1.1932': attribute type 21 has an invalid length. [ 356.756270][T10893] netlink: 'syz.1.1932': attribute type 29 has an invalid length. [ 356.782476][T10893] netlink: 'syz.1.1932': attribute type 29 has an invalid length. [ 356.836010][T10900] netlink: 'syz.1.1932': attribute type 29 has an invalid length. [ 356.965902][T10914] netlink: 'syz.4.1927': attribute type 29 has an invalid length. [ 357.015471][T10913] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 360.061847][T10933] validate_nla: 2 callbacks suppressed [ 360.061863][T10933] netlink: 'syz.1.1937': attribute type 10 has an invalid length. [ 360.087619][T10936] netlink: 'syz.4.1936': attribute type 7 has an invalid length. [ 360.396147][T10951] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1942'. [ 360.651427][T10962] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 360.745067][T10958] netlink: 'syz.1.1943': attribute type 1 has an invalid length. [ 360.777973][T10958] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1943'. [ 360.792651][T10968] delete_channel: no stack [ 360.808115][T10968] delete_channel: no stack [ 360.922291][T10973] netlink: 'syz.0.1950': attribute type 10 has an invalid length. [ 361.024487][T10974] netlink: 'syz.3.1951': attribute type 12 has an invalid length. [ 361.032600][T10974] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1951'. [ 361.048742][T10976] netlink: 'syz.3.1951': attribute type 12 has an invalid length. [ 361.056573][T10976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1951'. [ 361.220538][T10981] netlink: 'syz.3.1952': attribute type 10 has an invalid length. [ 361.237911][T10981] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1952'. [ 363.626540][T10998] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1958'. [ 363.681055][T11009] netlink: 'syz.1.1961': attribute type 1 has an invalid length. [ 364.120231][T11024] netlink: 'syz.0.1965': attribute type 10 has an invalid length. [ 364.208694][T11019] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 364.215279][T11019] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 364.562185][T11047] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 364.572455][T11047] netlink: 15990 bytes leftover after parsing attributes in process `syz.4.1974'. [ 366.874380][T11070] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1980'. [ 366.973938][T11074] validate_nla: 1 callbacks suppressed [ 366.973953][T11074] netlink: 'syz.4.1981': attribute type 10 has an invalid length. [ 367.041348][T11082] netlink: 'syz.0.1984': attribute type 1 has an invalid length. [ 367.068021][T11082] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1984'. [ 367.077494][T11082] netlink: 'syz.0.1984': attribute type 1 has an invalid length. [ 367.382763][T11102] device syzkaller0 left promiscuous mode [ 367.520359][T11104] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1991'. [ 367.976299][T11106] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.1992'. [ 368.028891][T11113] netlink: 'syz.0.1994': attribute type 1 has an invalid length. [ 368.058482][T11106] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 368.066806][T11106] netlink: 'syz.2.1992': attribute type 2 has an invalid length. [ 368.168738][T11111] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1993'. [ 368.179108][T11106] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1992'. [ 368.731624][T11123] netlink: 'syz.1.1997': attribute type 10 has an invalid length. [ 368.789005][T11125] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1998'. [ 368.801285][T11118] netlink: 'syz.4.1995': attribute type 10 has an invalid length. [ 371.025292][T11131] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1999'. [ 371.162369][T11160] netlink: 'syz.3.2005': attribute type 3 has an invalid length. [ 371.170345][T11155] netlink: 'syz.3.2005': attribute type 3 has an invalid length. [ 371.170365][T11155] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2005'. [ 371.188281][T11160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2005'. [ 371.806425][T11184] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 372.105677][T11191] __nla_validate_parse: 6 callbacks suppressed [ 372.105712][T11191] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.2018'. [ 372.172129][T11191] validate_nla: 6 callbacks suppressed [ 372.172166][T11191] netlink: 'syz.3.2018': attribute type 1 has an invalid length. [ 372.207827][T11191] netlink: 'syz.3.2018': attribute type 2 has an invalid length. [ 372.288171][T11191] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2018'. [ 372.458495][T11212] netlink: 'syz.1.2024': attribute type 10 has an invalid length. [ 372.531337][T11216] netlink: 'syz.4.2026': attribute type 1 has an invalid length. [ 372.865323][T11226] netlink: 'syz.1.2028': attribute type 10 has an invalid length. [ 373.180976][T11223] delete_channel: no stack [ 374.610178][T11262] netlink: 'syz.0.2039': attribute type 10 has an invalid length. [ 374.686335][T11270] netlink: 'syz.2.2042': attribute type 1 has an invalid length. [ 376.227168][T11309] netlink: 'syz.2.2054': attribute type 2 has an invalid length. [ 376.242975][T11309] netlink: 'syz.2.2054': attribute type 1 has an invalid length. [ 376.252186][T11309] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2054'. [ 376.280745][T11309] netlink: 'syz.2.2054': attribute type 29 has an invalid length. [ 377.648527][T11312] netlink: 'syz.4.2055': attribute type 10 has an invalid length. [ 377.656827][T11309] netlink: 'syz.2.2054': attribute type 29 has an invalid length. [ 377.678094][T11320] netlink: 'syz.0.2056': attribute type 1 has an invalid length. [ 377.714273][T11323] netlink: 'syz.3.2068': attribute type 10 has an invalid length. [ 377.725115][T11323] team0: Device wg1 is of different type [ 378.220398][T11344] netlink: 'syz.4.2065': attribute type 4 has an invalid length. [ 378.231374][T11346] netlink: 'syz.0.2066': attribute type 10 has an invalid length. [ 378.281543][T11344] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2065'. [ 378.308181][T11346] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2066'. [ 378.700222][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.706556][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.800829][T11364] netlink: 'syz.1.2073': attribute type 10 has an invalid length. [ 378.873361][T11364] team0: Device wg1 is of different type [ 378.965483][T11367] netlink: 'syz.0.2074': attribute type 1 has an invalid length. [ 381.832116][T11382] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.856079][T11382] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2079'. [ 382.055216][T11392] netlink: 'syz.1.2080': attribute type 10 has an invalid length. [ 382.073359][T11392] netlink: 'syz.1.2080': attribute type 19 has an invalid length. [ 382.081950][T11392] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.2080'. [ 382.227648][T11398] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2084'. [ 385.713498][T11454] validate_nla: 2 callbacks suppressed [ 385.713514][T11454] netlink: 'syz.2.2099': attribute type 10 has an invalid length. [ 385.982592][T11468] device wlan0 entered promiscuous mode [ 386.018889][T11471] FAULT_INJECTION: forcing a failure. [ 386.018889][T11471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.128180][T11471] CPU: 0 PID: 11471 Comm: syz.2.2106 Not tainted syzkaller #0 [ 386.135690][T11471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.145762][T11471] Call Trace: [ 386.149056][T11471] [ 386.151993][T11471] dump_stack_lvl+0x188/0x250 [ 386.156685][T11471] ? show_regs_print_info+0x20/0x20 [ 386.161913][T11471] ? load_image+0x400/0x400 [ 386.166426][T11471] ? __lock_acquire+0x7d10/0x7d10 [ 386.171459][T11471] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 386.177462][T11471] should_fail+0x38c/0x4c0 [ 386.181897][T11471] _copy_from_user+0x2e/0x170 [ 386.186586][T11471] __copy_msghdr_from_user+0xc9/0x630 [ 386.191973][T11471] ? verify_lock_unused+0x140/0x140 [ 386.197188][T11471] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 386.202502][T11471] ___sys_sendmsg+0x19a/0x2e0 [ 386.207198][T11471] ? __sys_sendmsg+0x2a0/0x2a0 [ 386.211994][T11471] __se_sys_sendmsg+0x1af/0x290 [ 386.216848][T11471] ? __x64_sys_sendmsg+0x80/0x80 [ 386.221795][T11471] ? syscall_enter_from_user_mode+0x2a/0x70 [ 386.227707][T11471] do_syscall_64+0x4c/0xa0 [ 386.232127][T11471] ? clear_bhb_loop+0x30/0x80 [ 386.236805][T11471] ? clear_bhb_loop+0x30/0x80 [ 386.241478][T11471] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 386.247384][T11471] RIP: 0033:0x7f83413dc799 [ 386.251916][T11471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.271629][T11471] RSP: 002b:00007f833f636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.280052][T11471] RAX: ffffffffffffffda RBX: 00007f8341655fa0 RCX: 00007f83413dc799 [ 386.288022][T11471] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 386.295990][T11471] RBP: 00007f833f636090 R08: 0000000000000000 R09: 0000000000000000 [ 386.303962][T11471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.311935][T11471] R13: 00007f8341656038 R14: 00007f8341655fa0 R15: 00007ffe03cb7328 [ 386.319916][T11471] [ 386.725111][T11490] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2120'. [ 387.408033][T11506] netlink: 'syz.1.2116': attribute type 10 has an invalid length. [ 387.451661][T11506] team0: Device wg1 is of different type [ 387.776471][T11518] FAULT_INJECTION: forcing a failure. [ 387.776471][T11518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.806890][T11518] CPU: 1 PID: 11518 Comm: syz.1.2122 Not tainted syzkaller #0 [ 387.814391][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.824455][T11518] Call Trace: [ 387.827751][T11518] [ 387.830680][T11518] dump_stack_lvl+0x188/0x250 [ 387.835363][T11518] ? show_regs_print_info+0x20/0x20 [ 387.840563][T11518] ? load_image+0x400/0x400 [ 387.845073][T11518] ? __lock_acquire+0x7d10/0x7d10 [ 387.850109][T11518] should_fail+0x38c/0x4c0 [ 387.854534][T11518] _copy_from_user+0x2e/0x170 [ 387.859205][T11518] iovec_from_user+0x142/0x370 [ 387.863962][T11518] __import_iovec+0x70/0x490 [ 387.868543][T11518] ? import_iovec+0x22/0xa0 [ 387.873039][T11518] import_iovec+0x6f/0xa0 [ 387.877377][T11518] ___sys_sendmsg+0x1fd/0x2e0 [ 387.882071][T11518] ? __sys_sendmsg+0x2a0/0x2a0 [ 387.886846][T11518] ? ktime_get_real_ts64+0x440/0x440 [ 387.892141][T11518] __se_sys_sendmsg+0x1af/0x290 [ 387.896986][T11518] ? __x64_sys_sendmsg+0x80/0x80 [ 387.901914][T11518] ? lockdep_hardirqs_on+0x94/0x140 [ 387.907117][T11518] do_syscall_64+0x4c/0xa0 [ 387.911529][T11518] ? clear_bhb_loop+0x30/0x80 [ 387.916191][T11518] ? clear_bhb_loop+0x30/0x80 [ 387.920855][T11518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 387.926736][T11518] RIP: 0033:0x7ff6079bd799 [ 387.931142][T11518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.950823][T11518] RSP: 002b:00007ff605c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.959229][T11518] RAX: ffffffffffffffda RBX: 00007ff607c36fa0 RCX: 00007ff6079bd799 [ 387.967188][T11518] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 387.975145][T11518] RBP: 00007ff605c17090 R08: 0000000000000000 R09: 0000000000000000 [ 387.983114][T11518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.991087][T11518] R13: 00007ff607c37038 R14: 00007ff607c36fa0 R15: 00007ffc271e52f8 [ 387.999101][T11518] [ 388.227688][T11531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2136'. [ 388.275341][T11526] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2125'. [ 388.372450][T11536] netlink: 'syz.1.2127': attribute type 20 has an invalid length. [ 388.437793][T11543] netlink: 'syz.3.2129': attribute type 1 has an invalid length. [ 388.497579][T11536] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2127'. [ 388.561794][T11553] netlink: 'syz.1.2127': attribute type 2 has an invalid length. [ 388.576148][T11553] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2127'. [ 388.683232][T11552] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 388.897744][T11559] FAULT_INJECTION: forcing a failure. [ 388.897744][T11559] name failslab, interval 1, probability 0, space 0, times 0 [ 388.935089][T11559] CPU: 1 PID: 11559 Comm: syz.2.2135 Not tainted syzkaller #0 [ 388.942597][T11559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.952664][T11559] Call Trace: [ 388.955942][T11559] [ 388.958867][T11559] dump_stack_lvl+0x188/0x250 [ 388.963545][T11559] ? show_regs_print_info+0x20/0x20 [ 388.968739][T11559] ? load_image+0x400/0x400 [ 388.973240][T11559] ? __might_sleep+0xf0/0xf0 [ 388.977827][T11559] ? __lock_acquire+0x7d10/0x7d10 [ 388.982854][T11559] ? netlink_insert+0xe95/0x11f0 [ 388.987789][T11559] should_fail+0x38c/0x4c0 [ 388.992206][T11559] should_failslab+0x5/0x20 [ 388.996699][T11559] slab_pre_alloc_hook+0x51/0xc0 [ 389.001630][T11559] kmem_cache_alloc_node+0x47/0x2d0 [ 389.006830][T11559] ? __alloc_skb+0xf4/0x750 [ 389.011333][T11559] __alloc_skb+0xf4/0x750 [ 389.015671][T11559] netlink_sendmsg+0x654/0xbe0 [ 389.020437][T11559] ? netlink_getsockopt+0x570/0x570 [ 389.025630][T11559] ? aa_sock_msg_perm+0x94/0x150 [ 389.030569][T11559] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 389.035847][T11559] ? security_socket_sendmsg+0x7c/0xa0 [ 389.041399][T11559] ? netlink_getsockopt+0x570/0x570 [ 389.046618][T11559] ____sys_sendmsg+0x5b7/0x8f0 [ 389.051403][T11559] ? __sys_sendmsg_sock+0x30/0x30 [ 389.056439][T11559] ? ___sys_sendmsg+0x21b/0x2e0 [ 389.061285][T11559] ___sys_sendmsg+0x236/0x2e0 [ 389.065982][T11559] ? __sys_sendmsg+0x2a0/0x2a0 [ 389.070772][T11559] ? ktime_get_real_ts64+0x440/0x440 [ 389.076079][T11559] __se_sys_sendmsg+0x1af/0x290 [ 389.080926][T11559] ? __x64_sys_sendmsg+0x80/0x80 [ 389.085868][T11559] ? syscall_enter_from_user_mode+0x2a/0x70 [ 389.091763][T11559] do_syscall_64+0x4c/0xa0 [ 389.096172][T11559] ? clear_bhb_loop+0x30/0x80 [ 389.100845][T11559] ? clear_bhb_loop+0x30/0x80 [ 389.105513][T11559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 389.111395][T11559] RIP: 0033:0x7f83413dc799 [ 389.115804][T11559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.135411][T11559] RSP: 002b:00007f833f636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.143826][T11559] RAX: ffffffffffffffda RBX: 00007f8341655fa0 RCX: 00007f83413dc799 [ 389.151788][T11559] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 389.159749][T11559] RBP: 00007f833f636090 R08: 0000000000000000 R09: 0000000000000000 [ 389.167711][T11559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.175670][T11559] R13: 00007f8341656038 R14: 00007f8341655fa0 R15: 00007ffe03cb7328 [ 389.183647][T11559] [ 389.253055][T11561] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2134'. [ 389.439915][T11585] netlink: 'syz.1.2141': attribute type 21 has an invalid length. [ 389.548282][T11586] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.2143'. [ 389.720205][T11591] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2144'. [ 389.959576][T11600] netlink: 'syz.4.2146': attribute type 10 has an invalid length. [ 390.051824][T11600] team0: Device wg1 is of different type [ 390.409934][T11602] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 390.577350][T11612] netlink: 'syz.3.2149': attribute type 20 has an invalid length. [ 390.625407][T11609] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2149'. [ 390.737095][T11612] netlink: 'syz.3.2149': attribute type 2 has an invalid length. [ 390.760451][T11616] FAULT_INJECTION: forcing a failure. [ 390.760451][T11616] name failslab, interval 1, probability 0, space 0, times 0 [ 390.773755][T11616] CPU: 1 PID: 11616 Comm: syz.1.2151 Not tainted syzkaller #0 [ 390.775223][T11612] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2149'. [ 390.781230][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.781245][T11616] Call Trace: [ 390.781253][T11616] [ 390.781260][T11616] dump_stack_lvl+0x188/0x250 [ 390.781284][T11616] ? show_regs_print_info+0x20/0x20 [ 390.781305][T11616] ? load_image+0x400/0x400 [ 390.781322][T11616] ? __might_sleep+0xf0/0xf0 [ 390.781340][T11616] ? __lock_acquire+0x7d10/0x7d10 [ 390.781362][T11616] should_fail+0x38c/0x4c0 [ 390.781383][T11616] should_failslab+0x5/0x20 [ 390.781400][T11616] slab_pre_alloc_hook+0x51/0xc0 [ 390.781420][T11616] __kmalloc_node_track_caller+0x68/0x3a0 [ 390.781436][T11616] ? netlink_sendmsg+0x654/0xbe0 [ 390.781453][T11616] ? kmem_cache_alloc_node+0x162/0x2d0 [ 390.781469][T11616] ? __alloc_skb+0xf4/0x750 [ 390.781488][T11616] ? netlink_sendmsg+0x654/0xbe0 [ 390.781506][T11616] __alloc_skb+0x22c/0x750 [ 390.781528][T11616] netlink_sendmsg+0x654/0xbe0 [ 390.781552][T11616] ? netlink_getsockopt+0x570/0x570 [ 390.781571][T11616] ? aa_sock_msg_perm+0x94/0x150 [ 390.781593][T11616] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 390.781612][T11616] ? security_socket_sendmsg+0x7c/0xa0 [ 390.900111][T11616] ? netlink_getsockopt+0x570/0x570 [ 390.905304][T11616] ____sys_sendmsg+0x5b7/0x8f0 [ 390.910064][T11616] ? __sys_sendmsg_sock+0x30/0x30 [ 390.915085][T11616] ? ___sys_sendmsg+0x21b/0x2e0 [ 390.920057][T11616] ___sys_sendmsg+0x236/0x2e0 [ 390.924742][T11616] ? __sys_sendmsg+0x2a0/0x2a0 [ 390.929501][T11616] ? ktime_get_real_ts64+0x440/0x440 [ 390.934797][T11616] __se_sys_sendmsg+0x1af/0x290 [ 390.939638][T11616] ? __x64_sys_sendmsg+0x80/0x80 [ 390.944576][T11616] ? syscall_enter_from_user_mode+0x2a/0x70 [ 390.950471][T11616] do_syscall_64+0x4c/0xa0 [ 390.954875][T11616] ? clear_bhb_loop+0x30/0x80 [ 390.959539][T11616] ? clear_bhb_loop+0x30/0x80 [ 390.964206][T11616] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.970084][T11616] RIP: 0033:0x7ff6079bd799 [ 390.974494][T11616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.994092][T11616] RSP: 002b:00007ff605c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.002494][T11616] RAX: ffffffffffffffda RBX: 00007ff607c36fa0 RCX: 00007ff6079bd799 [ 391.010453][T11616] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 391.018410][T11616] RBP: 00007ff605c17090 R08: 0000000000000000 R09: 0000000000000000 [ 391.026377][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.034336][T11616] R13: 00007ff607c37038 R14: 00007ff607c36fa0 R15: 00007ffc271e52f8 [ 391.042305][T11616] [ 391.503033][T11625] netlink: 'syz.4.2153': attribute type 2 has an invalid length. [ 391.582144][T11630] netlink: 'syz.1.2156': attribute type 11 has an invalid length. [ 391.758022][T11630] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2156'. [ 392.003371][T11642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2158'. [ 392.303899][T11650] netlink: 'syz.1.2162': attribute type 1 has an invalid length. [ 392.416548][T11653] netlink: 'syz.4.2163': attribute type 1 has an invalid length. [ 392.573308][T11659] netlink: 'syz.3.2164': attribute type 10 has an invalid length. [ 393.128495][T11659] team0: Device wg1 is of different type [ 394.282442][T11677] netlink: 'syz.0.2168': attribute type 20 has an invalid length. [ 394.324263][T11672] FAULT_INJECTION: forcing a failure. [ 394.324263][T11672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.357230][T11681] netlink: 'syz.1.2169': attribute type 3 has an invalid length. [ 394.407940][T11681] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2169'. [ 394.430650][T11671] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2168'. [ 394.447959][T11672] CPU: 1 PID: 11672 Comm: syz.4.2166 Not tainted syzkaller #0 [ 394.455445][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.465486][T11672] Call Trace: [ 394.468763][T11672] [ 394.471703][T11672] dump_stack_lvl+0x188/0x250 [ 394.476399][T11672] ? show_regs_print_info+0x20/0x20 [ 394.481623][T11672] ? load_image+0x400/0x400 [ 394.486147][T11672] ? __lock_acquire+0x7d10/0x7d10 [ 394.491219][T11672] should_fail+0x38c/0x4c0 [ 394.495656][T11672] _copy_from_iter+0x22e/0x1170 [ 394.500610][T11672] ? __lock_acquire+0x7d10/0x7d10 [ 394.506005][T11672] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 394.511413][T11672] ? __virt_addr_valid+0x3c6/0x470 [ 394.516541][T11672] ? __phys_addr_symbol+0x2b/0x70 [ 394.521575][T11672] ? __check_object_size+0x30c/0x410 [ 394.527055][T11672] netlink_sendmsg+0x758/0xbe0 [ 394.531837][T11672] ? netlink_getsockopt+0x570/0x570 [ 394.537043][T11672] ? aa_sock_msg_perm+0x94/0x150 [ 394.541996][T11672] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 394.547293][T11672] ? security_socket_sendmsg+0x7c/0xa0 [ 394.552772][T11672] ? netlink_getsockopt+0x570/0x570 [ 394.557980][T11672] ____sys_sendmsg+0x5b7/0x8f0 [ 394.562773][T11672] ? __sys_sendmsg_sock+0x30/0x30 [ 394.567817][T11672] ? import_iovec+0x6f/0xa0 [ 394.572334][T11672] ___sys_sendmsg+0x236/0x2e0 [ 394.577027][T11672] ? __sys_sendmsg+0x2a0/0x2a0 [ 394.581825][T11672] ? vfs_write+0x8b2/0xd60 [ 394.586272][T11672] __se_sys_sendmsg+0x1af/0x290 [ 394.591139][T11672] ? __x64_sys_sendmsg+0x80/0x80 [ 394.596097][T11672] ? syscall_enter_from_user_mode+0x2a/0x70 [ 394.602006][T11672] do_syscall_64+0x4c/0xa0 [ 394.606435][T11672] ? clear_bhb_loop+0x30/0x80 [ 394.611239][T11672] ? clear_bhb_loop+0x30/0x80 [ 394.615930][T11672] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.621870][T11672] RIP: 0033:0x7f68d2d9b799 [ 394.626297][T11672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.646007][T11672] RSP: 002b:00007f68d0ff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.654440][T11672] RAX: ffffffffffffffda RBX: 00007f68d3014fa0 RCX: 00007f68d2d9b799 [ 394.662427][T11672] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 394.670409][T11672] RBP: 00007f68d0ff5090 R08: 0000000000000000 R09: 0000000000000000 [ 394.678477][T11672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.686455][T11672] R13: 00007f68d3015038 R14: 00007f68d3014fa0 R15: 00007ffe855ff158 [ 394.694445][T11672] [ 395.455497][T11703] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 397.927948][T11714] netlink: 'syz.3.2177': attribute type 10 has an invalid length. [ 398.012380][T11714] team0: Device wg1 is of different type [ 398.030217][T11720] netlink: 'syz.2.2178': attribute type 3 has an invalid length. [ 398.052247][T11720] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2178'. [ 398.092314][T11719] netlink: 'syz.1.2179': attribute type 1 has an invalid length. [ 398.243031][T11731] FAULT_INJECTION: forcing a failure. [ 398.243031][T11731] name failslab, interval 1, probability 0, space 0, times 0 [ 398.267968][T11731] CPU: 1 PID: 11731 Comm: syz.2.2184 Not tainted syzkaller #0 [ 398.268387][T11734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2182'. [ 398.275471][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.294447][T11731] Call Trace: [ 398.297731][T11731] [ 398.297983][T11734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2182'. [ 398.300657][T11731] dump_stack_lvl+0x188/0x250 [ 398.314276][T11731] ? show_regs_print_info+0x20/0x20 [ 398.319557][T11731] ? load_image+0x400/0x400 [ 398.324107][T11731] should_fail+0x38c/0x4c0 [ 398.328562][T11731] should_failslab+0x5/0x20 [ 398.329866][T11738] bridge0: port 4(dummy0) entered disabled state [ 398.333071][T11731] slab_pre_alloc_hook+0x51/0xc0 [ 398.344317][T11731] ? skb_clone+0x1bd/0x350 [ 398.348838][T11731] kmem_cache_alloc+0x3d/0x290 [ 398.353694][T11731] skb_clone+0x1bd/0x350 [ 398.357946][T11731] __netlink_deliver_tap+0x3cd/0x7c0 [ 398.363245][T11731] netlink_deliver_tap+0x16c/0x180 [ 398.368362][T11731] netlink_unicast+0x74f/0x920 [ 398.373139][T11731] netlink_sendmsg+0x8ba/0xbe0 [ 398.377913][T11731] ? netlink_getsockopt+0x570/0x570 [ 398.383121][T11731] ? aa_sock_msg_perm+0x94/0x150 [ 398.388096][T11731] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 398.393521][T11731] ? security_socket_sendmsg+0x7c/0xa0 [ 398.398988][T11731] ? netlink_getsockopt+0x570/0x570 [ 398.404187][T11731] ____sys_sendmsg+0x5b7/0x8f0 [ 398.408972][T11731] ? __sys_sendmsg_sock+0x30/0x30 [ 398.414022][T11731] ? import_iovec+0x6f/0xa0 [ 398.418544][T11731] ___sys_sendmsg+0x236/0x2e0 [ 398.423241][T11731] ? __sys_sendmsg+0x2a0/0x2a0 [ 398.428018][T11731] ? vfs_write+0x8b2/0xd60 [ 398.432459][T11731] __se_sys_sendmsg+0x1af/0x290 [ 398.437321][T11731] ? __x64_sys_sendmsg+0x80/0x80 [ 398.442262][T11731] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 398.448270][T11731] ? lockdep_hardirqs_on+0x94/0x140 [ 398.453532][T11731] do_syscall_64+0x4c/0xa0 [ 398.457955][T11731] ? clear_bhb_loop+0x30/0x80 [ 398.462630][T11731] ? clear_bhb_loop+0x30/0x80 [ 398.467327][T11731] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 398.473248][T11731] RIP: 0033:0x7f83413dc799 [ 398.477676][T11731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.497288][T11731] RSP: 002b:00007f833f636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.505712][T11731] RAX: ffffffffffffffda RBX: 00007f8341655fa0 RCX: 00007f83413dc799 [ 398.513694][T11731] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 398.521676][T11731] RBP: 00007f833f636090 R08: 0000000000000000 R09: 0000000000000000 [ 398.529659][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.537646][T11731] R13: 00007f8341656038 R14: 00007f8341655fa0 R15: 00007ffe03cb7328 [ 398.545643][T11731] [ 398.954682][T11738] bridge0: port 3(team0) entered disabled state [ 399.169905][T11738] device bridge_slave_1 left promiscuous mode [ 399.178786][T11738] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.502336][T11738] device bridge_slave_0 left promiscuous mode [ 399.508885][T11738] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.952869][T11743] netlink: 'syz.1.2185': attribute type 21 has an invalid length. [ 400.963006][T11743] netlink: 'syz.1.2185': attribute type 20 has an invalid length. [ 400.973487][T11749] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2187'. [ 400.990689][T11759] netlink: 'syz.2.2190': attribute type 1 has an invalid length. [ 401.087098][T11763] netlink: 'syz.1.2191': attribute type 3 has an invalid length. [ 401.107941][T11763] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2191'. [ 401.191448][T11769] netlink: 'syz.3.2194': attribute type 10 has an invalid length. [ 401.240306][T11769] team0: Device wg1 is of different type [ 401.277931][T11775] netlink: 'syz.4.2195': attribute type 1 has an invalid length. [ 401.285793][T11775] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.2195'. [ 401.297296][T11776] netlink: 'syz.2.2196': attribute type 1 has an invalid length. [ 401.377486][T11783] FAULT_INJECTION: forcing a failure. [ 401.377486][T11783] name failslab, interval 1, probability 0, space 0, times 0 [ 401.418899][T11783] CPU: 0 PID: 11783 Comm: syz.3.2198 Not tainted syzkaller #0 [ 401.426406][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.436461][T11783] Call Trace: [ 401.439729][T11783] [ 401.442642][T11783] dump_stack_lvl+0x188/0x250 [ 401.447307][T11783] ? show_regs_print_info+0x20/0x20 [ 401.452508][T11783] ? load_image+0x400/0x400 [ 401.457009][T11783] ? __might_sleep+0xf0/0xf0 [ 401.461596][T11783] ? __lock_acquire+0x7d10/0x7d10 [ 401.466612][T11783] should_fail+0x38c/0x4c0 [ 401.471020][T11783] should_failslab+0x5/0x20 [ 401.475506][T11783] slab_pre_alloc_hook+0x51/0xc0 [ 401.480439][T11783] __kmalloc+0x6b/0x330 [ 401.484598][T11783] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 401.490844][T11783] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 401.496904][T11783] genl_rcv_msg+0xa7d/0xf90 [ 401.501400][T11783] ? genl_bind+0x380/0x380 [ 401.505801][T11783] ? mark_lock+0x94/0x320 [ 401.510129][T11783] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 401.516101][T11783] ? lock_chain_count+0x20/0x20 [ 401.520943][T11783] ? rcu_is_watching+0x11/0xa0 [ 401.525689][T11783] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 401.531920][T11783] ? lockdep_hardirqs_on+0x94/0x140 [ 401.537131][T11783] ? hwsim_new_radio_nl+0xc40/0xc40 [ 401.542323][T11783] ? netlink_rcv_skb+0x192/0x440 [ 401.547260][T11783] netlink_rcv_skb+0x1f5/0x440 [ 401.552037][T11783] ? genl_bind+0x380/0x380 [ 401.556454][T11783] ? netlink_ack+0xb50/0xb50 [ 401.561028][T11783] ? __lock_acquire+0x7d10/0x7d10 [ 401.566046][T11783] ? down_read+0x1aa/0x2e0 [ 401.570448][T11783] genl_rcv+0x24/0x40 [ 401.574411][T11783] netlink_unicast+0x774/0x920 [ 401.579176][T11783] netlink_sendmsg+0x8ba/0xbe0 [ 401.583944][T11783] ? netlink_getsockopt+0x570/0x570 [ 401.589123][T11783] ? aa_sock_msg_perm+0x94/0x150 [ 401.594056][T11783] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 401.599351][T11783] ? security_socket_sendmsg+0x7c/0xa0 [ 401.604819][T11783] ? netlink_getsockopt+0x570/0x570 [ 401.610023][T11783] ____sys_sendmsg+0x5b7/0x8f0 [ 401.614798][T11783] ? __sys_sendmsg_sock+0x30/0x30 [ 401.619811][T11783] ? import_iovec+0x6f/0xa0 [ 401.624300][T11783] ___sys_sendmsg+0x236/0x2e0 [ 401.628983][T11783] ? __sys_sendmsg+0x2a0/0x2a0 [ 401.633767][T11783] ? ktime_get_real_ts64+0x440/0x440 [ 401.639065][T11783] __se_sys_sendmsg+0x1af/0x290 [ 401.643906][T11783] ? __x64_sys_sendmsg+0x80/0x80 [ 401.648832][T11783] ? syscall_enter_from_user_mode+0x2a/0x70 [ 401.654916][T11783] do_syscall_64+0x4c/0xa0 [ 401.659324][T11783] ? clear_bhb_loop+0x30/0x80 [ 401.664000][T11783] ? clear_bhb_loop+0x30/0x80 [ 401.668805][T11783] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 401.674715][T11783] RIP: 0033:0x7fd1ccc96799 [ 401.679140][T11783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.698934][T11783] RSP: 002b:00007fd1caef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.707363][T11783] RAX: ffffffffffffffda RBX: 00007fd1ccf0ffa0 RCX: 00007fd1ccc96799 [ 401.715327][T11783] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 401.723282][T11783] RBP: 00007fd1caef0090 R08: 0000000000000000 R09: 0000000000000000 [ 401.731247][T11783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.739219][T11783] R13: 00007fd1ccf10038 R14: 00007fd1ccf0ffa0 R15: 00007ffdc80d25e8 [ 401.747194][T11783] [ 401.759005][T11792] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.2199'. [ 401.850131][T11786] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2199'. [ 402.185523][T11811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2204'. [ 402.382002][T11811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2204'. [ 402.881058][T11817] device bridge_slave_1 left promiscuous mode [ 402.965760][T11817] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.798588][T11817] device bridge_slave_0 left promiscuous mode [ 404.804861][T11817] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.189946][T11826] validate_nla: 1 callbacks suppressed [ 405.189962][T11826] netlink: 'syz.3.2209': attribute type 10 has an invalid length. [ 405.205599][T11826] team0: Device wg1 is of different type [ 405.234095][T11841] netlink: 'syz.1.2214': attribute type 1 has an invalid length. [ 405.294887][T11848] netlink: 'syz.4.2216': attribute type 1 has an invalid length. [ 405.436640][T11852] FAULT_INJECTION: forcing a failure. [ 405.436640][T11852] name failslab, interval 1, probability 0, space 0, times 0 [ 405.449807][T11852] CPU: 1 PID: 11852 Comm: syz.3.2219 Not tainted syzkaller #0 [ 405.457275][T11852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.467344][T11852] Call Trace: [ 405.470631][T11852] [ 405.473562][T11852] dump_stack_lvl+0x188/0x250 [ 405.478251][T11852] ? show_regs_print_info+0x20/0x20 [ 405.483452][T11852] ? load_image+0x400/0x400 [ 405.487958][T11852] ? __might_sleep+0xf0/0xf0 [ 405.492550][T11852] ? __lock_acquire+0x7d10/0x7d10 [ 405.497573][T11852] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 405.503565][T11852] should_fail+0x38c/0x4c0 [ 405.507995][T11852] should_failslab+0x5/0x20 [ 405.512490][T11852] slab_pre_alloc_hook+0x51/0xc0 [ 405.517422][T11852] kmem_cache_alloc_node+0x47/0x2d0 [ 405.522620][T11852] ? __alloc_skb+0xf4/0x750 [ 405.527117][T11852] __alloc_skb+0xf4/0x750 [ 405.531438][T11852] netlink_ack+0x372/0xb50 [ 405.535866][T11852] ? hwsim_new_radio_nl+0xc40/0xc40 [ 405.541054][T11852] ? netlink_dump+0xcf0/0xcf0 [ 405.545721][T11852] ? lock_acquire+0x208/0x400 [ 405.550390][T11852] netlink_rcv_skb+0x27a/0x440 [ 405.555140][T11852] ? genl_bind+0x380/0x380 [ 405.559545][T11852] ? netlink_ack+0xb50/0xb50 [ 405.564121][T11852] ? __lock_acquire+0x7d10/0x7d10 [ 405.569168][T11852] ? down_read+0x1aa/0x2e0 [ 405.573578][T11852] genl_rcv+0x24/0x40 [ 405.577545][T11852] netlink_unicast+0x774/0x920 [ 405.582302][T11852] netlink_sendmsg+0x8ba/0xbe0 [ 405.587056][T11852] ? netlink_getsockopt+0x570/0x570 [ 405.592243][T11852] ? aa_sock_msg_perm+0x94/0x150 [ 405.597171][T11852] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 405.602449][T11852] ? security_socket_sendmsg+0x7c/0xa0 [ 405.607901][T11852] ? netlink_getsockopt+0x570/0x570 [ 405.613085][T11852] ____sys_sendmsg+0x5b7/0x8f0 [ 405.617851][T11852] ? __sys_sendmsg_sock+0x30/0x30 [ 405.622877][T11852] ? import_iovec+0x6f/0xa0 [ 405.627378][T11852] ___sys_sendmsg+0x236/0x2e0 [ 405.632050][T11852] ? __sys_sendmsg+0x2a0/0x2a0 [ 405.636809][T11852] ? ktime_get_real_ts64+0x440/0x440 [ 405.642109][T11852] __se_sys_sendmsg+0x1af/0x290 [ 405.646957][T11852] ? __x64_sys_sendmsg+0x80/0x80 [ 405.651895][T11852] ? syscall_enter_from_user_mode+0x2a/0x70 [ 405.657784][T11852] do_syscall_64+0x4c/0xa0 [ 405.662186][T11852] ? clear_bhb_loop+0x30/0x80 [ 405.666853][T11852] ? clear_bhb_loop+0x30/0x80 [ 405.671517][T11852] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 405.677407][T11852] RIP: 0033:0x7fd1ccc96799 [ 405.681810][T11852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.701402][T11852] RSP: 002b:00007fd1caef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.709809][T11852] RAX: ffffffffffffffda RBX: 00007fd1ccf0ffa0 RCX: 00007fd1ccc96799 [ 405.717769][T11852] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 405.725732][T11852] RBP: 00007fd1caef0090 R08: 0000000000000000 R09: 0000000000000000 [ 405.733694][T11852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.741658][T11852] R13: 00007fd1ccf10038 R14: 00007fd1ccf0ffa0 R15: 00007ffdc80d25e8 [ 405.749634][T11852] [ 406.156614][T11870] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.2222'. [ 406.261443][T11869] netlink: 'syz.0.2223': attribute type 29 has an invalid length. [ 406.261948][T11874] netlink: 'syz.2.2225': attribute type 10 has an invalid length. [ 406.351241][T11869] netlink: 'syz.0.2223': attribute type 29 has an invalid length. [ 406.384263][T11879] netlink: 'syz.0.2223': attribute type 29 has an invalid length. [ 406.413595][T11869] netlink: 'syz.0.2223': attribute type 29 has an invalid length. [ 406.455656][T11869] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.2223'. [ 406.532159][T11879] netlink: 'syz.0.2223': attribute type 16 has an invalid length. [ 406.566694][T11879] netlink: 'syz.0.2223': attribute type 21 has an invalid length. [ 406.673807][T11888] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2228'. [ 406.727415][T11888] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2228'. [ 406.898294][T11889] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2228'. [ 407.834658][T11902] FAULT_INJECTION: forcing a failure. [ 407.834658][T11902] name failslab, interval 1, probability 0, space 0, times 0 [ 407.848386][T11902] CPU: 0 PID: 11902 Comm: syz.2.2232 Not tainted syzkaller #0 [ 407.855870][T11902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.865936][T11902] Call Trace: [ 407.869315][T11902] [ 407.872254][T11902] dump_stack_lvl+0x188/0x250 [ 407.876941][T11902] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 407.883104][T11902] ? show_regs_print_info+0x20/0x20 [ 407.888310][T11902] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 407.894488][T11902] should_fail+0x38c/0x4c0 [ 407.898928][T11902] should_failslab+0x5/0x20 [ 407.903446][T11902] slab_pre_alloc_hook+0x51/0xc0 [ 407.908407][T11902] __kmalloc_node_track_caller+0x68/0x3a0 [ 407.914137][T11902] ? netlink_ack+0x372/0xb50 [ 407.918728][T11902] ? kmem_cache_alloc_node+0x162/0x2d0 [ 407.924192][T11902] ? __alloc_skb+0xf4/0x750 [ 407.928708][T11902] ? netlink_ack+0x372/0xb50 [ 407.933317][T11902] __alloc_skb+0x22c/0x750 [ 407.937734][T11902] ? lock_chain_count+0x20/0x20 [ 407.942614][T11902] netlink_ack+0x372/0xb50 [ 407.947059][T11902] ? hwsim_new_radio_nl+0xc40/0xc40 [ 407.952273][T11902] ? netlink_dump+0xcf0/0xcf0 [ 407.956966][T11902] ? netlink_rcv_skb+0x1d4/0x440 [ 407.961922][T11902] netlink_rcv_skb+0x27a/0x440 [ 407.966695][T11902] ? genl_bind+0x380/0x380 [ 407.971121][T11902] ? netlink_ack+0xb50/0xb50 [ 407.975714][T11902] ? __lock_acquire+0x7d10/0x7d10 [ 407.980753][T11902] ? down_read+0x1aa/0x2e0 [ 407.985178][T11902] genl_rcv+0x24/0x40 [ 407.989170][T11902] netlink_unicast+0x774/0x920 [ 407.993962][T11902] netlink_sendmsg+0x8ba/0xbe0 [ 407.998745][T11902] ? netlink_getsockopt+0x570/0x570 [ 408.003965][T11902] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 408.009265][T11902] ? security_socket_sendmsg+0x7c/0xa0 [ 408.014737][T11902] ? netlink_getsockopt+0x570/0x570 [ 408.019942][T11902] ____sys_sendmsg+0x5b7/0x8f0 [ 408.024723][T11902] ? __sys_sendmsg_sock+0x30/0x30 [ 408.029858][T11902] ? import_iovec+0x6f/0xa0 [ 408.034379][T11902] ___sys_sendmsg+0x236/0x2e0 [ 408.039234][T11902] ? __sys_sendmsg+0x2a0/0x2a0 [ 408.044355][T11902] __se_sys_sendmsg+0x1af/0x290 [ 408.049364][T11902] ? __x64_sys_sendmsg+0x80/0x80 [ 408.054307][T11902] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 408.060302][T11902] ? lockdep_hardirqs_on+0x94/0x140 [ 408.065502][T11902] do_syscall_64+0x4c/0xa0 [ 408.069918][T11902] ? clear_bhb_loop+0x30/0x80 [ 408.074587][T11902] ? clear_bhb_loop+0x30/0x80 [ 408.079261][T11902] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.085148][T11902] RIP: 0033:0x7f83413dc799 [ 408.089567][T11902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.109166][T11902] RSP: 002b:00007f833f636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.117579][T11902] RAX: ffffffffffffffda RBX: 00007f8341655fa0 RCX: 00007f83413dc799 [ 408.125554][T11902] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 408.133523][T11902] RBP: 00007f833f636090 R08: 0000000000000000 R09: 0000000000000000 [ 408.141488][T11902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.149454][T11902] R13: 00007f8341656038 R14: 00007f8341655fa0 R15: 00007ffe03cb7328 [ 408.157524][T11902] [ 408.449683][T11906] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2233'. [ 409.797273][T11924] team0: Device wg1 is of different type [ 412.953828][T11944] team0: Device wg1 is of different type [ 413.157747][T11961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2242'. [ 413.214862][T11959] FAULT_INJECTION: forcing a failure. [ 413.214862][T11959] name failslab, interval 1, probability 0, space 0, times 0 [ 413.249364][T11961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2242'. [ 413.304254][T11959] CPU: 1 PID: 11959 Comm: syz.4.2246 Not tainted syzkaller #0 [ 413.311754][T11959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 413.321816][T11959] Call Trace: [ 413.325100][T11959] [ 413.328042][T11959] dump_stack_lvl+0x188/0x250 [ 413.332738][T11959] ? show_regs_print_info+0x20/0x20 [ 413.337945][T11959] ? load_image+0x400/0x400 [ 413.342452][T11959] ? __might_sleep+0xf0/0xf0 [ 413.347040][T11959] ? __lock_acquire+0x7d10/0x7d10 [ 413.352078][T11959] should_fail+0x38c/0x4c0 [ 413.356509][T11959] should_failslab+0x5/0x20 [ 413.361017][T11959] slab_pre_alloc_hook+0x51/0xc0 [ 413.365971][T11959] __kmalloc_node_track_caller+0x68/0x3a0 [ 413.371878][T11959] ? netlink_ack+0x372/0xb50 [ 413.376473][T11959] ? kmem_cache_alloc_node+0x162/0x2d0 [ 413.381931][T11959] ? __alloc_skb+0xf4/0x750 [ 413.386444][T11959] ? netlink_ack+0x372/0xb50 [ 413.391040][T11959] __alloc_skb+0x22c/0x750 [ 413.395468][T11959] netlink_ack+0x372/0xb50 [ 413.399890][T11959] ? mark_lock+0x94/0x320 [ 413.404224][T11959] ? hwsim_new_radio_nl+0xc40/0xc40 [ 413.409430][T11959] ? netlink_dump+0xcf0/0xcf0 [ 413.414107][T11959] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 413.420103][T11959] netlink_rcv_skb+0x27a/0x440 [ 413.424879][T11959] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 413.431075][T11959] ? genl_bind+0x380/0x380 [ 413.435516][T11959] ? netlink_ack+0xb50/0xb50 [ 413.440117][T11959] ? down_read+0x5f/0x2e0 [ 413.444461][T11959] ? down_read+0x1aa/0x2e0 [ 413.448887][T11959] genl_rcv+0x24/0x40 [ 413.452874][T11959] netlink_unicast+0x774/0x920 [ 413.457743][T11959] netlink_sendmsg+0x8ba/0xbe0 [ 413.462522][T11959] ? netlink_getsockopt+0x570/0x570 [ 413.467740][T11959] ? netlink_getsockopt+0x570/0x570 [ 413.472970][T11959] ____sys_sendmsg+0x5b7/0x8f0 [ 413.477761][T11959] ? __sys_sendmsg_sock+0x30/0x30 [ 413.482800][T11959] ? import_iovec+0x6f/0xa0 [ 413.487319][T11959] ___sys_sendmsg+0x236/0x2e0 [ 413.492020][T11959] ? __sys_sendmsg+0x2a0/0x2a0 [ 413.496813][T11959] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 413.503445][T11959] __se_sys_sendmsg+0x1af/0x290 [ 413.508304][T11959] ? __x64_sys_sendmsg+0x80/0x80 [ 413.513266][T11959] ? syscall_enter_from_user_mode+0x2a/0x70 [ 413.519172][T11959] do_syscall_64+0x4c/0xa0 [ 413.523593][T11959] ? clear_bhb_loop+0x30/0x80 [ 413.528270][T11959] ? clear_bhb_loop+0x30/0x80 [ 413.532953][T11959] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 413.538855][T11959] RIP: 0033:0x7f68d2d9b799 [ 413.543275][T11959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.562889][T11959] RSP: 002b:00007f68d0ff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.571313][T11959] RAX: ffffffffffffffda RBX: 00007f68d3014fa0 RCX: 00007f68d2d9b799 [ 413.579285][T11959] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 413.587259][T11959] RBP: 00007f68d0ff5090 R08: 0000000000000000 R09: 0000000000000000 [ 413.595243][T11959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.603217][T11959] R13: 00007f68d3015038 R14: 00007f68d3014fa0 R15: 00007ffe855ff158 [ 413.611222][T11959] [ 413.882259][T11969] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2248'. [ 413.947365][T11966] validate_nla: 12 callbacks suppressed [ 413.947399][T11966] netlink: 'syz.1.2247': attribute type 7 has an invalid length. [ 413.976031][T11969] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2248'. [ 413.992667][T11972] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2248'. [ 414.069339][T11969] netlink: 'syz.4.2248': attribute type 2 has an invalid length. [ 414.090116][T11969] netlink: 'syz.4.2248': attribute type 1 has an invalid length. [ 414.124927][T11969] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2248'. [ 414.152733][T11979] netlink: 'syz.2.2250': attribute type 1 has an invalid length. [ 414.238484][T11984] netlink: 'syz.4.2255': attribute type 3 has an invalid length. [ 414.246341][T11984] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2255'. [ 414.868207][T11985] netlink: 'syz.1.2251': attribute type 1 has an invalid length. [ 415.592279][T12005] netlink: 'syz.0.2259': attribute type 10 has an invalid length. [ 415.662869][T12011] FAULT_INJECTION: forcing a failure. [ 415.662869][T12011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.738224][T12011] CPU: 1 PID: 12011 Comm: syz.1.2261 Not tainted syzkaller #0 [ 415.745731][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.755889][T12011] Call Trace: [ 415.759179][T12011] [ 415.762115][T12011] dump_stack_lvl+0x188/0x250 [ 415.766811][T12011] ? show_regs_print_info+0x20/0x20 [ 415.772021][T12011] ? load_image+0x400/0x400 [ 415.776548][T12011] ? __lock_acquire+0x7d10/0x7d10 [ 415.781593][T12011] should_fail+0x38c/0x4c0 [ 415.786029][T12011] _copy_to_user+0x2e/0x130 [ 415.790552][T12011] simple_read_from_buffer+0xe3/0x150 [ 415.795957][T12011] proc_fail_nth_read+0x1a6/0x220 [ 415.801003][T12011] ? proc_fault_inject_write+0x310/0x310 [ 415.806666][T12011] ? fsnotify_perm+0x254/0x560 [ 415.811437][T12011] ? proc_fault_inject_write+0x310/0x310 [ 415.817079][T12011] vfs_read+0x301/0xd60 [ 415.821334][T12011] ? kernel_read+0x1e0/0x1e0 [ 415.825924][T12011] ? __fget_files+0x40f/0x480 [ 415.830598][T12011] ? mutex_lock_nested+0x17/0x20 [ 415.835528][T12011] ? __fdget_pos+0x2bf/0x370 [ 415.840102][T12011] ? ksys_read+0x71/0x260 [ 415.844424][T12011] ksys_read+0x152/0x260 [ 415.848659][T12011] ? vfs_write+0xd60/0xd60 [ 415.853070][T12011] ? lockdep_hardirqs_on+0x94/0x140 [ 415.858261][T12011] do_syscall_64+0x4c/0xa0 [ 415.862670][T12011] ? clear_bhb_loop+0x30/0x80 [ 415.867341][T12011] ? clear_bhb_loop+0x30/0x80 [ 415.872018][T12011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 415.877907][T12011] RIP: 0033:0x7ff60797dfce [ 415.882317][T12011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 415.902174][T12011] RSP: 002b:00007ff605c16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.910581][T12011] RAX: ffffffffffffffda RBX: 00007ff605c176c0 RCX: 00007ff60797dfce [ 415.918542][T12011] RDX: 000000000000000f RSI: 00007ff605c170a0 RDI: 0000000000000007 [ 415.926502][T12011] RBP: 00007ff605c17090 R08: 0000000000000000 R09: 0000000000000000 [ 415.934461][T12011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.942424][T12011] R13: 00007ff607c37038 R14: 00007ff607c36fa0 R15: 00007ffc271e52f8 [ 415.950487][T12011] [ 418.525592][T12005] team0: Device wg1 is of different type [ 418.811067][T12023] netlink: 'syz.4.2265': attribute type 6 has an invalid length. [ 418.976022][T12030] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 419.059497][T12030] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2267'. [ 419.160058][T12033] netlink: 'syz.4.2268': attribute type 1 has an invalid length. [ 419.545707][T12036] netlink: 'syz.2.2269': attribute type 21 has an invalid length. [ 419.595357][T12036] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2269'. [ 420.016312][T12049] netlink: 'syz.0.2272': attribute type 1 has an invalid length. [ 420.138127][T12053] netlink: 'syz.2.2274': attribute type 10 has an invalid length. [ 420.340694][T12055] netlink: 'syz.1.2275': attribute type 12 has an invalid length. [ 420.414597][T12055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2275'. [ 423.587025][T12072] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 423.610279][T12072] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2279'. [ 423.887167][T12085] netlink: 'syz.2.2282': attribute type 1 has an invalid length. [ 427.007090][T12102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2286'. [ 427.026933][T12105] netlink: 'syz.2.2287': attribute type 10 has an invalid length. [ 427.308136][T12115] netlink: 'syz.2.2302': attribute type 10 has an invalid length. [ 427.950934][T12129] netlink: 'syz.0.2294': attribute type 1 has an invalid length. [ 427.964669][T12129] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2294'. [ 430.635345][T12146] netlink: 'syz.2.2300': attribute type 1 has an invalid length. [ 432.994109][T12169] netlink: 'syz.1.2317': attribute type 1 has an invalid length. [ 433.065219][T12173] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 433.078267][T12173] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2308'. [ 433.286593][T12177] netlink: 'syz.4.2309': attribute type 10 has an invalid length. [ 433.335640][T12177] team0: Device wg1 is of different type [ 433.508831][T12184] delete_channel: no stack [ 433.673552][T12192] device syzkaller0 left promiscuous mode [ 433.956769][T12213] netlink: 'syz.4.2322': attribute type 1 has an invalid length. [ 435.678079][T12227] netlink: 'syz.3.2325': attribute type 10 has an invalid length. [ 436.684977][T12227] team0: Device wg1 is of different type [ 436.835990][T12242] netlink: 'syz.2.2338': attribute type 1 has an invalid length. [ 437.228473][T12256] netlink: 'syz.0.2329': attribute type 29 has an invalid length. [ 439.533324][T12255] netlink: 'syz.0.2329': attribute type 13 has an invalid length. [ 439.555657][T12256] netlink: 'syz.0.2329': attribute type 29 has an invalid length. [ 439.790934][T12270] netlink: 'syz.4.2332': attribute type 1 has an invalid length. [ 439.812637][T12270] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2332'. [ 439.974586][T12274] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2334'. [ 440.130348][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.136747][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.641220][T12283] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2340'. [ 440.702938][T12287] netlink: 'syz.4.2342': attribute type 10 has an invalid length. [ 440.734549][T12287] team0: Device wg1 is of different type [ 440.801007][T12285] device syzkaller0 entered promiscuous mode [ 441.175045][T12295] netlink: 'syz.2.2344': attribute type 1 has an invalid length. [ 441.469594][T12298] device lo entered promiscuous mode [ 441.656689][T12300] delete_channel: no stack [ 441.662424][T12300] delete_channel: no stack [ 442.925431][T12308] netlink: 'syz.2.2359': attribute type 1 has an invalid length. [ 443.106746][T12313] netlink: 'syz.0.2350': attribute type 10 has an invalid length. [ 443.118025][T12313] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2350'. [ 443.268350][T12315] netlink: 'syz.4.2351': attribute type 3 has an invalid length. [ 443.298577][T12315] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2351'. [ 443.484789][T12315] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2351'. [ 443.568645][T12333] netlink: 'syz.0.2354': attribute type 10 has an invalid length. [ 443.627359][T12333] team0: Device wg1 is of different type [ 444.555062][T12353] netlink: 'syz.4.2364': attribute type 1 has an invalid length. [ 444.705876][T12354] netlink: 'syz.1.2362': attribute type 10 has an invalid length. [ 446.215416][T12354] team0: Device wg1 is of different type [ 447.424583][T12360] netlink: 'syz.3.2366': attribute type 11 has an invalid length. [ 447.793752][T12373] netlink: 'syz.1.2368': attribute type 3 has an invalid length. [ 447.810270][T12373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2368'. [ 447.855532][T12377] netlink: 'syz.3.2370': attribute type 10 has an invalid length. [ 447.918309][T12377] team0: Device wg1 is of different type [ 448.002718][T12373] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2368'. [ 448.233395][T12383] delete_channel: no stack [ 448.287173][T12388] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2375'. [ 448.540711][T12394] netlink: 'syz.3.2378': attribute type 1 has an invalid length. [ 448.831805][T12405] netlink: 'syz.4.2381': attribute type 6 has an invalid length. [ 448.848226][T12405] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2381'. [ 449.679359][T12421] netlink: 'syz.2.2380': attribute type 10 has an invalid length. [ 449.687320][T12422] netlink: 'syz.3.2383': attribute type 10 has an invalid length. [ 450.381584][T12422] team0: Device wg1 is of different type [ 451.729475][T12434] netlink: 'syz.1.2396': attribute type 10 has an invalid length. [ 451.744708][T12435] netlink: 'syz.3.2386': attribute type 3 has an invalid length. [ 451.755286][T12434] team0: Device wg1 is of different type [ 451.776906][T12435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2386'. [ 452.008582][T12435] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2386'. [ 452.029390][T12448] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 452.167934][T12448] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 452.177793][T12448] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 452.539136][T12448] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 452.658050][T12448] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 452.889675][T12465] netlink: 'syz.0.2394': attribute type 1 has an invalid length. [ 453.351066][T12476] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2399'. [ 453.696262][T12491] netlink: 'syz.3.2401': attribute type 10 has an invalid length. [ 456.140082][T12491] team0: Device wg1 is of different type [ 456.358947][T12495] netlink: 'syz.1.2402': attribute type 10 has an invalid length. [ 456.398425][T12495] team0: Device wg1 is of different type [ 456.557013][T12507] netlink: 'syz.0.2415': attribute type 1 has an invalid length. [ 456.600737][T12508] netlink: 'syz.2.2407': attribute type 3 has an invalid length. [ 456.641411][T12508] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2407'. [ 456.801256][T12508] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2407'. [ 458.898936][T12537] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.2411'. [ 458.989378][T12537] openvswitch: netlink: IP tunnel dst address not specified [ 459.590598][T12553] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2418'. [ 461.587232][T12536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2413'. [ 461.606481][T12557] netlink: 'syz.2.2419': attribute type 10 has an invalid length. [ 461.766918][T12560] netlink: 'syz.4.2421': attribute type 1 has an invalid length. [ 462.094785][T12572] netlink: 'syz.0.2422': attribute type 3 has an invalid length. [ 462.128690][T12572] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2422'. [ 462.260981][T12583] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2422'. [ 462.387361][T12586] netlink: 'syz.4.2428': attribute type 17 has an invalid length. [ 462.400146][T12586] netlink: 'syz.4.2428': attribute type 16 has an invalid length. [ 462.413720][T12586] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2428'. [ 462.427430][T12586] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2428'. [ 463.075746][T12590] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2429'. [ 464.865552][T12602] netlink: 'syz.4.2432': attribute type 1 has an invalid length. [ 464.941040][T12610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2433'. [ 464.995286][T12617] netlink: 'syz.0.2434': attribute type 10 has an invalid length. [ 465.044346][T12617] team0: Device wg1 is of different type [ 465.083294][T12621] netlink: 'syz.4.2437': attribute type 3 has an invalid length. [ 465.094486][T12616] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2436'. [ 465.128298][T12621] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2437'. [ 465.149605][T12622] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2437'. [ 465.400135][T12633] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2441'. [ 465.695622][T12645] netlink: 'syz.0.2445': attribute type 40 has an invalid length. [ 466.021136][T12644] netlink: 'syz.2.2446': attribute type 10 has an invalid length. [ 466.069840][T12650] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2447'. [ 466.200720][T12652] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2448'. [ 467.273488][T12686] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2456'. [ 469.414867][T12682] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2456'. [ 469.451918][T12688] validate_nla: 1 callbacks suppressed [ 469.451934][T12688] netlink: 'syz.4.2457': attribute type 1 has an invalid length. [ 469.552937][T12693] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2468'. [ 469.690095][T12695] netlink: 'syz.1.2458': attribute type 40 has an invalid length. [ 471.371529][T12710] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 471.391269][T12710] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 471.417970][T12710] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 472.158682][T12723] netlink: 'syz.3.2463': attribute type 4 has an invalid length. [ 472.166468][T12723] __nla_validate_parse: 1 callbacks suppressed [ 472.166485][T12723] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2463'. [ 472.279010][T12729] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.2465'. [ 472.493331][T12740] netlink: 'syz.3.2471': attribute type 1 has an invalid length. [ 472.816344][T12745] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2473'. [ 475.505247][T12748] netlink: 'syz.1.2476': attribute type 10 has an invalid length. [ 475.533981][T12748] team0: Device wg1 is of different type [ 475.620386][T12749] netlink: 'syz.4.2474': attribute type 40 has an invalid length. [ 475.866592][T12758] netlink: 'syz.1.2481': attribute type 4 has an invalid length. [ 475.921573][T12758] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2481'. [ 477.060944][T12787] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2500'. [ 477.358189][T12790] netlink: 'syz.4.2490': attribute type 1 has an invalid length. [ 478.308746][T12806] netlink: 'syz.0.2495': attribute type 10 has an invalid length. [ 478.367282][T12806] team0: Device wg1 is of different type [ 478.434324][T12810] netlink: 'syz.3.2493': attribute type 40 has an invalid length. [ 478.577079][T12813] netlink: 'syz.4.2497': attribute type 4 has an invalid length. [ 478.607537][T12813] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2497'. [ 478.672771][T12809] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 478.740702][T12809] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2496'. [ 478.955774][T12826] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2503'. [ 479.284237][T12845] netlink: 'syz.3.2509': attribute type 1 has an invalid length. [ 479.501268][T12852] netlink: 'syz.4.2513': attribute type 1 has an invalid length. [ 479.512477][T12852] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2513'. [ 479.524728][T12857] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2512'. [ 482.585480][T12877] validate_nla: 2 callbacks suppressed [ 482.585516][T12877] netlink: 'syz.1.2529': attribute type 4 has an invalid length. [ 482.602706][T12877] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2529'. [ 482.700761][T12883] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2521'. [ 483.135149][T12899] netlink: 'syz.2.2527': attribute type 10 has an invalid length. [ 483.257040][T12896] netlink: 'syz.0.2526': attribute type 1 has an invalid length. [ 483.313293][T12896] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2526'. [ 483.398793][T12911] netlink: 'syz.3.2532': attribute type 1 has an invalid length. [ 486.015856][T12918] netlink: 'syz.0.2544': attribute type 1 has an invalid length. [ 486.590682][T12922] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 486.897722][T12922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.940085][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'. [ 487.080784][T12943] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2540'. [ 487.536567][T12947] netlink: 'syz.1.2543': attribute type 10 has an invalid length. [ 487.640287][T12947] team0: Device wg1 is of different type [ 487.830719][T12949] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2542'. [ 488.510773][T12958] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2555'. [ 488.657511][T12956] netlink: 'syz.2.2545': attribute type 1 has an invalid length. [ 488.673430][T12956] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2545'. [ 489.068780][T12967] netlink: 'syz.1.2550': attribute type 1 has an invalid length. [ 490.061656][ C0] ODEBUG: Out of memory. ODEBUG disabled [ 491.085434][T12982] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 491.119469][T12982] syzkaller0: owner set to 2 [ 491.126517][T12980] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 491.146052][T12982] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2556'. [ 491.192843][T12980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.509090][T12990] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 491.537555][T12990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.638057][T13000] netlink: 'syz.2.2559': attribute type 10 has an invalid length. [ 491.757054][T13002] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2560'. [ 492.677487][T13011] netlink: 'syz.2.2565': attribute type 1 has an invalid length. [ 492.706393][T13010] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2573'. [ 492.840003][T13018] netlink: 'syz.3.2561': attribute type 1 has an invalid length. [ 492.855251][T13018] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2561'. [ 492.998510][T13024] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 493.023602][T13024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.086484][T13022] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 493.107781][T13022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.173694][T13034] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2584'. [ 493.303550][T13036] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2574'. [ 496.017395][T13049] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2576'. [ 496.030086][T13050] netlink: 'syz.3.2577': attribute type 10 has an invalid length. [ 496.045395][T13050] team0: Device wg1 is of different type [ 496.186355][T13059] netlink: 'syz.0.2582': attribute type 1 has an invalid length. [ 496.245930][T13068] netlink: 'syz.4.2583': attribute type 1 has an invalid length. [ 496.432158][T13071] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 496.446493][T13071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.464143][T13075] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 496.484458][T13075] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2588'. [ 496.511561][T13077] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 496.523537][T13077] syzkaller0: owner set to 2 [ 496.544589][T13073] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 496.600060][T13073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.669970][T13088] netlink: 'syz.4.2593': attribute type 10 has an invalid length. [ 496.691717][T13088] team0: Device wg1 is of different type [ 496.752077][T13092] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2595'. [ 496.850615][T13089] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 496.880569][T13089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.905466][T13100] netlink: 'syz.4.2598': attribute type 1 has an invalid length. [ 499.117964][T13113] netlink: 'syz.1.2601': attribute type 1 has an invalid length. [ 499.133871][T13109] netlink: 'syz.3.2600': attribute type 21 has an invalid length. [ 499.142175][T13109] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2600'. [ 499.223989][T13125] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 499.260429][T13125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.287867][T13129] netlink: 'syz.1.2605': attribute type 1 has an invalid length. [ 499.307213][T13129] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2605'. [ 499.399356][T13139] netlink: 'syz.1.2609': attribute type 10 has an invalid length. [ 499.440799][T13139] team0: Device wg1 is of different type [ 499.465592][T13134] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 499.509659][T13134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.563136][T13142] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2610'. [ 499.756417][T13155] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2612'. [ 500.062156][T13167] device syzkaller0 entered promiscuous mode [ 500.123818][T13168] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 500.169442][T13168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.192182][T13174] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2621'. [ 500.370466][T13188] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2624'. [ 500.394919][T13188] bridge_slave_1: default FDB implementation only supports local addresses [ 500.512042][T13194] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 500.527937][T13194] syzkaller0: owner set to 2 [ 501.043111][T13200] validate_nla: 5 callbacks suppressed [ 501.043127][T13200] netlink: 'syz.0.2629': attribute type 10 has an invalid length. [ 501.071204][T13200] team0: Device wg1 is of different type [ 501.300708][T13218] netlink: 'syz.3.2636': attribute type 29 has an invalid length. [ 501.570380][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.576734][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.778063][T13201] netlink: 'syz.1.2631': attribute type 1 has an invalid length. [ 502.810529][T13218] netlink: 'syz.3.2636': attribute type 29 has an invalid length. [ 503.048536][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 503.115285][T13225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.167773][T13241] netlink: 'syz.3.2644': attribute type 1 has an invalid length. [ 503.205324][T13246] netlink: 'syz.1.2648': attribute type 10 has an invalid length. [ 503.216045][T13246] team0: Device wg1 is of different type [ 503.305901][T13254] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2645'. [ 503.352196][T13254] bridge_slave_1: default FDB implementation only supports local addresses [ 503.384551][T13256] netlink: 'syz.1.2651': attribute type 1 has an invalid length. [ 506.437080][T13288] device syzkaller0 entered promiscuous mode [ 506.455960][T13289] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 506.499679][T13289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.525981][T13292] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2661'. [ 506.621983][T13299] netlink: 'syz.1.2663': attribute type 10 has an invalid length. [ 506.632350][T13299] team0: Device wg1 is of different type [ 506.861527][T13304] netlink: 'syz.3.2666': attribute type 10 has an invalid length. [ 506.946099][T13304] team0: Device wg1 is of different type [ 507.007308][T13307] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2667'. [ 507.059952][T13314] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2664'. [ 507.224618][T13305] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 507.291620][T13305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.345253][T13322] netlink: 'syz.2.2670': attribute type 1 has an invalid length. [ 507.551663][T13337] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2677'. [ 507.618262][T13338] netlink: 'syz.1.2673': attribute type 10 has an invalid length. [ 507.638632][T13338] device bridge_slave_1 left promiscuous mode [ 507.735777][T13338] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.873524][T13338] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 507.990916][T13342] netlink: 'syz.4.2680': attribute type 10 has an invalid length. [ 508.770425][T13342] team0: Device wg1 is of different type [ 510.608143][T13375] netlink: 'syz.4.2689': attribute type 1 has an invalid length. [ 510.735832][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 510.790513][T13379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.038543][T13404] netlink: 'syz.0.2699': attribute type 10 has an invalid length. [ 511.062340][T13404] team0: Device wg1 is of different type [ 511.184412][T13408] netlink: 'syz.3.2701': attribute type 21 has an invalid length. [ 511.235022][T13408] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2701'. [ 511.876310][T13414] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 511.962608][T13414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.215999][T13429] netlink: 'syz.4.2709': attribute type 1 has an invalid length. [ 512.253508][ T4387] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.317992][ T4387] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.346263][T13419] chnl_net:caif_netlink_parms(): no params data found [ 512.421097][ T4387] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.490230][T13436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 512.519354][T13436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.548336][T13419] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.555445][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.580765][T13419] device bridge_slave_0 entered promiscuous mode [ 512.629999][T13443] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.2712'. [ 512.932498][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.947976][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.956143][T13419] device bridge_slave_1 entered promiscuous mode [ 513.968050][ T7744] Bluetooth: hci5: command 0x0409 tx timeout [ 515.156798][ T4387] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.194590][T13419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.218874][T13419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.234964][T13450] netlink: 'syz.4.2715': attribute type 21 has an invalid length. [ 515.244096][T13450] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2715'. [ 515.290260][T13419] team0: Port device team_slave_0 added [ 515.305184][T13419] team0: Port device team_slave_1 added [ 515.391070][T13419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.408346][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.444283][T13419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.470088][T13419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.477060][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.517959][T13419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.653664][T13419] device hsr_slave_0 entered promiscuous mode [ 515.672315][T13419] device hsr_slave_1 entered promiscuous mode [ 515.682782][T13419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.691006][T13419] Cannot create hsr debugfs directory [ 516.048101][ T5759] Bluetooth: hci5: command 0x041b tx timeout [ 516.415035][T13491] netlink: 'syz.1.2721': attribute type 1 has an invalid length. [ 516.475109][T13419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 516.492755][T13419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 516.555203][T13419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 516.604894][T13419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 516.678911][T13489] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 516.708342][T13489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.882971][T13419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.950225][T13419] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.960375][T13501] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 517.017441][T13501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.038782][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 517.054636][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 517.080229][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 517.098580][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 517.116804][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.123957][ T4382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.139033][T13504] netlink: 'syz.3.2733': attribute type 1 has an invalid length. [ 517.176803][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 517.187299][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 517.204902][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 517.217043][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.224195][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.238367][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 517.252257][T13506] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 517.325449][T13506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.355935][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 517.385777][T13512] netlink: 'syz.1.2724': attribute type 10 has an invalid length. [ 517.421963][T13512] team0: Device wg1 is of different type [ 517.437661][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 517.455225][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 517.478772][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 517.489263][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 517.498553][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 517.518328][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 517.596346][T13518] FAULT_INJECTION: forcing a failure. [ 517.596346][T13518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.611894][T13419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.616740][T13518] CPU: 0 PID: 13518 Comm: syz.4.2728 Not tainted syzkaller #0 [ 517.629711][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.639787][T13518] Call Trace: [ 517.643082][T13518] [ 517.643946][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 517.646029][T13518] dump_stack_lvl+0x188/0x250 [ 517.657922][T13518] ? show_regs_print_info+0x20/0x20 [ 517.659809][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 517.663143][T13518] ? load_image+0x400/0x400 [ 517.674841][T13518] ? __lock_acquire+0x7d10/0x7d10 [ 517.679646][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 517.679900][T13518] should_fail+0x38c/0x4c0 [ 517.689096][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 517.692101][T13518] _copy_from_user+0x2e/0x170 [ 517.692135][T13518] __copy_msghdr_from_user+0xc9/0x630 [ 517.709968][T13518] ? verify_lock_unused+0x140/0x140 [ 517.715281][T13518] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 517.720647][T13518] ___sys_sendmsg+0x19a/0x2e0 [ 517.725369][T13518] ? __sys_sendmsg+0x2a0/0x2a0 [ 517.728449][T13516] netlink: 'syz.1.2726': attribute type 21 has an invalid length. [ 517.730172][T13518] ? vfs_write+0x8b2/0xd60 [ 517.730239][T13518] __se_sys_sendmsg+0x1af/0x290 [ 517.730271][T13518] ? __x64_sys_sendmsg+0x80/0x80 [ 517.752341][T13518] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 517.758485][T13518] ? lockdep_hardirqs_on+0x94/0x140 [ 517.763734][T13518] do_syscall_64+0x4c/0xa0 [ 517.768165][T13518] ? clear_bhb_loop+0x30/0x80 [ 517.772854][T13518] ? clear_bhb_loop+0x30/0x80 [ 517.777554][T13518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 517.778541][T13516] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2726'. [ 517.783466][T13518] RIP: 0033:0x7f68d2d9b799 [ 517.783495][T13518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.783510][T13518] RSP: 002b:00007f68d0ff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.783532][T13518] RAX: ffffffffffffffda RBX: 00007f68d3014fa0 RCX: 00007f68d2d9b799 [ 517.783547][T13518] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 517.783559][T13518] RBP: 00007f68d0ff5090 R08: 0000000000000000 R09: 0000000000000000 [ 517.783573][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.783585][T13518] R13: 00007f68d3015038 R14: 00007f68d3014fa0 R15: 00007ffe855ff158 [ 517.783622][T13518] [ 518.064807][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 518.084400][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.122285][T13419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.129910][ T5779] Bluetooth: hci5: command 0x040f tx timeout [ 518.173266][T13528] netlink: 'syz.4.2730': attribute type 4 has an invalid length. [ 518.219394][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 518.231111][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 518.294641][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 518.383830][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 518.464046][T13535] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 518.470029][T13535] syzkaller0: owner set to 2 [ 518.477406][T13419] device veth0_vlan entered promiscuous mode [ 518.489168][T13528] netlink: 166780 bytes leftover after parsing attributes in process `syz.4.2730'. [ 518.503538][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 518.512138][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 518.611058][T13419] device veth1_vlan entered promiscuous mode [ 518.811464][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 518.839325][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 518.874670][T13419] device veth0_macvtap entered promiscuous mode [ 518.930167][T13419] device veth1_macvtap entered promiscuous mode [ 518.998045][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.035007][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.045035][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.072470][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.090056][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.109499][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.126777][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.139314][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.159549][T13419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.177732][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 519.188020][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 519.205592][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 519.217276][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 519.245092][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.264138][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.275296][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.300110][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.316167][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.345705][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.362876][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.374556][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.391694][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.404688][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.423359][T13419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.442405][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 519.456804][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 519.485298][T13419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.502450][T13419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.514748][T13419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.529056][T13419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.667205][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.689156][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.703755][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 519.764291][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.772422][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.780859][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 520.139274][T13557] netlink: 'syz.4.2736': attribute type 1 has an invalid length. [ 520.222132][ T4298] Bluetooth: hci5: command 0x0419 tx timeout [ 520.263524][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 520.293067][T13562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.555291][ T4387] device hsr_slave_0 left promiscuous mode [ 520.563400][ T4387] device hsr_slave_1 left promiscuous mode [ 520.574434][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.583365][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.593982][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.604092][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.626633][ T4387] bridge0: port 3(team0) entered disabled state [ 520.644924][ T4387] device bridge_slave_1 left promiscuous mode [ 520.655547][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.674215][ T4387] device bridge_slave_0 left promiscuous mode [ 520.685408][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.706778][ T4387] device veth1_vlan left promiscuous mode [ 520.713256][ T4387] device veth0_vlan left promiscuous mode [ 521.076662][ T4387] device team_slave_1 left promiscuous mode [ 521.087752][ T4387] team0 (unregistering): Port device team_slave_1 removed [ 521.111541][ T4387] device team_slave_0 left promiscuous mode [ 521.121809][ T4387] team0 (unregistering): Port device team_slave_0 removed [ 521.274873][T13576] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 521.288733][T13576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.318709][T13577] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 521.327237][T13577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.355577][T13578] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 521.380086][T13578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.438827][T13583] netlink: 'syz.3.2740': attribute type 10 has an invalid length. [ 521.500343][T13583] team0: Device wg1 is of different type [ 524.123754][T13610] netlink: 'syz.3.2753': attribute type 1 has an invalid length. [ 524.158747][T13612] FAULT_INJECTION: forcing a failure. [ 524.158747][T13612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.229746][T13612] CPU: 1 PID: 13612 Comm: syz.4.2754 Not tainted syzkaller #0 [ 524.237261][T13612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.247331][T13612] Call Trace: [ 524.250623][T13612] [ 524.253557][T13612] dump_stack_lvl+0x188/0x250 [ 524.258243][T13612] ? show_regs_print_info+0x20/0x20 [ 524.263454][T13612] ? load_image+0x400/0x400 [ 524.267967][T13612] ? __lock_acquire+0x7d10/0x7d10 [ 524.272994][T13612] ? vfs_write+0x8b2/0xd60 [ 524.277417][T13612] should_fail+0x38c/0x4c0 [ 524.281849][T13612] _copy_from_user+0x2e/0x170 [ 524.286531][T13612] __sys_bpf+0x26d/0x6f0 [ 524.290787][T13612] ? bpf_link_show_fdinfo+0x380/0x380 [ 524.296188][T13612] ? vtime_user_exit+0x2c8/0x3e0 [ 524.301138][T13612] __x64_sys_bpf+0x78/0x90 [ 524.305558][T13612] do_syscall_64+0x4c/0xa0 [ 524.309975][T13612] ? clear_bhb_loop+0x30/0x80 [ 524.314657][T13612] ? clear_bhb_loop+0x30/0x80 [ 524.319350][T13612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 524.325264][T13612] RIP: 0033:0x7f68d2d9b799 [ 524.329680][T13612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.349289][T13612] RSP: 002b:00007f68d0ff5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.357714][T13612] RAX: ffffffffffffffda RBX: 00007f68d3014fa0 RCX: 00007f68d2d9b799 [ 524.365697][T13612] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 524.373670][T13612] RBP: 00007f68d0ff5090 R08: 0000000000000000 R09: 0000000000000000 [ 524.381651][T13612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.389771][T13612] R13: 00007f68d3015038 R14: 00007f68d3014fa0 R15: 00007ffe855ff158 [ 524.397803][T13612] [ 524.751932][T13619] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 524.940588][T13619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.112089][T13629] netlink: 'syz.0.2759': attribute type 10 has an invalid length. [ 525.216423][T13634] FAULT_INJECTION: forcing a failure. [ 525.216423][T13634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.256499][T13629] team0: Device wg1 is of different type [ 525.273014][T13634] CPU: 1 PID: 13634 Comm: syz.4.2760 Not tainted syzkaller #0 [ 525.280521][T13634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 525.290681][T13634] Call Trace: [ 525.293967][T13634] [ 525.296905][T13634] dump_stack_lvl+0x188/0x250 [ 525.301601][T13634] ? show_regs_print_info+0x20/0x20 [ 525.306824][T13634] ? load_image+0x400/0x400 [ 525.311346][T13634] ? __lock_acquire+0x7d10/0x7d10 [ 525.316397][T13634] should_fail+0x38c/0x4c0 [ 525.320837][T13634] _copy_from_user+0x2e/0x170 [ 525.325533][T13634] iovec_from_user+0x142/0x370 [ 525.330319][T13634] __import_iovec+0x70/0x490 [ 525.334943][T13634] import_iovec+0x6f/0xa0 [ 525.339292][T13634] ___sys_sendmsg+0x1fd/0x2e0 [ 525.343999][T13634] ? __sys_sendmsg+0x2a0/0x2a0 [ 525.348809][T13634] ? vfs_write+0x8b2/0xd60 [ 525.353282][T13634] __se_sys_sendmsg+0x1af/0x290 [ 525.358153][T13634] ? __x64_sys_sendmsg+0x80/0x80 [ 525.363097][T13634] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 525.369118][T13634] ? lockdep_hardirqs_on+0x94/0x140 [ 525.374351][T13634] do_syscall_64+0x4c/0xa0 [ 525.378788][T13634] ? clear_bhb_loop+0x30/0x80 [ 525.383478][T13634] ? clear_bhb_loop+0x30/0x80 [ 525.388175][T13634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 525.394082][T13634] RIP: 0033:0x7f68d2d9b799 [ 525.398511][T13634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.418137][T13634] RSP: 002b:00007f68d0ff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.426564][T13634] RAX: ffffffffffffffda RBX: 00007f68d3014fa0 RCX: 00007f68d2d9b799 [ 525.434551][T13634] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 525.442535][T13634] RBP: 00007f68d0ff5090 R08: 0000000000000000 R09: 0000000000000000 [ 525.450520][T13634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.458504][T13634] R13: 00007f68d3015038 R14: 00007f68d3014fa0 R15: 00007ffe855ff158 [ 525.466522][T13634] [ 525.512376][T13626] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 525.619669][T13626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.103639][T13657] netlink: 'syz.4.2768': attribute type 1 has an invalid length. [ 526.136235][T13659] netlink: 'syz.0.2769': attribute type 10 has an invalid length. [ 526.489657][T13668] device syzkaller0 entered promiscuous mode [ 526.622679][T13676] FAULT_INJECTION: forcing a failure. [ 526.622679][T13676] name failslab, interval 1, probability 0, space 0, times 0 [ 526.636581][T13676] CPU: 0 PID: 13676 Comm: syz.4.2776 Not tainted syzkaller #0 [ 526.644063][T13676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.654126][T13676] Call Trace: [ 526.657405][T13676] [ 526.660327][T13676] dump_stack_lvl+0x188/0x250 [ 526.665002][T13676] ? show_regs_print_info+0x20/0x20 [ 526.670196][T13676] ? load_image+0x400/0x400 [ 526.674694][T13676] ? __might_sleep+0xf0/0xf0 [ 526.679281][T13676] ? __lock_acquire+0x7d10/0x7d10 [ 526.684301][T13676] should_fail+0x38c/0x4c0 [ 526.688716][T13676] should_failslab+0x5/0x20 [ 526.693212][T13676] slab_pre_alloc_hook+0x51/0xc0 [ 526.698141][T13676] __kmalloc+0x6b/0x330 [ 526.702283][T13676] ? bpf_test_init+0xf8/0x1b0 [ 526.706953][T13676] ? __lock_acquire+0x7d10/0x7d10 [ 526.711972][T13676] bpf_test_init+0xf8/0x1b0 [ 526.716470][T13676] bpf_prog_test_run_skb+0x181/0x1180 [ 526.721843][T13676] ? __fget_files+0x40f/0x480 [ 526.726531][T13676] ? cpu_online+0x60/0x60 [ 526.730865][T13676] bpf_prog_test_run+0x31e/0x390 [ 526.735798][T13676] __sys_bpf+0x5a5/0x6f0 [ 526.740033][T13676] ? bpf_link_show_fdinfo+0x380/0x380 [ 526.745407][T13676] ? vtime_user_exit+0x2c8/0x3e0 [ 526.750343][T13676] __x64_sys_bpf+0x78/0x90 [ 526.754758][T13676] do_syscall_64+0x4c/0xa0 [ 526.759164][T13676] ? clear_bhb_loop+0x30/0x80 [ 526.763828][T13676] ? clear_bhb_loop+0x30/0x80 [ 526.768496][T13676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.774389][T13676] RIP: 0033:0x7f68d2d9b799 [ 526.778796][T13676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.798392][T13676] RSP: 002b:00007f68d0ff5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 526.806797][T13676] RAX: ffffffffffffffda RBX: 00007f68d3014fa0 RCX: 00007f68d2d9b799 [ 526.814765][T13676] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 526.822728][T13676] RBP: 00007f68d0ff5090 R08: 0000000000000000 R09: 0000000000000000 [ 526.830715][T13676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.838835][T13676] R13: 00007f68d3015038 R14: 00007f68d3014fa0 R15: 00007ffe855ff158 [ 526.846831][T13676] [ 527.045724][T13685] FAULT_INJECTION: forcing a failure. [ 527.045724][T13685] name failslab, interval 1, probability 0, space 0, times 0 [ 527.083075][T13685] CPU: 1 PID: 13685 Comm: syz.4.2779 Not tainted syzkaller #0 [ 527.090593][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.100696][T13685] Call Trace: [ 527.104002][T13685] [ 527.107056][T13685] dump_stack_lvl+0x188/0x250 [ 527.111772][T13685] ? show_regs_print_info+0x20/0x20 [ 527.117003][T13685] ? load_image+0x400/0x400 [ 527.121537][T13685] ? __might_sleep+0xf0/0xf0 [ 527.126149][T13685] ? __lock_acquire+0x7d10/0x7d10 [ 527.131190][T13685] ? netlink_insert+0xe95/0x11f0 [ 527.136159][T13685] should_fail+0x38c/0x4c0 [ 527.140615][T13685] should_failslab+0x5/0x20 [ 527.145133][T13685] slab_pre_alloc_hook+0x51/0xc0 [ 527.150182][T13685] kmem_cache_alloc_node+0x47/0x2d0 [ 527.155396][T13685] ? __alloc_skb+0xf4/0x750 [ 527.159935][T13685] __alloc_skb+0xf4/0x750 [ 527.164298][T13685] netlink_sendmsg+0x654/0xbe0 [ 527.169110][T13685] ? netlink_getsockopt+0x570/0x570 [ 527.174331][T13685] ? aa_sock_msg_perm+0x94/0x150 [ 527.179291][T13685] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 527.184595][T13685] ? security_socket_sendmsg+0x7c/0xa0 [ 527.190082][T13685] ? netlink_getsockopt+0x570/0x570 [ 527.195299][T13685] ____sys_sendmsg+0x5b7/0x8f0 [ 527.200109][T13685] ? __sys_sendmsg_sock+0x30/0x30 [ 527.205183][T13685] ? import_iovec+0x6f/0xa0 [ 527.209720][T13685] ___sys_sendmsg+0x236/0x2e0 [ 527.214451][T13685] ? __sys_sendmsg+0x2a0/0x2a0 [ 527.219304][T13685] ? vfs_write+0x8b2/0xd60 [ 527.223810][T13685] __se_sys_sendmsg+0x1af/0x290 [ 527.228686][T13685] ? __x64_sys_sendmsg+0x80/0x80 [ 527.233672][T13685] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 527.239745][T13685] ? lockdep_hardirqs_on+0x94/0x140 [ 527.244976][T13685] do_syscall_64+0x4c/0xa0 [ 527.249409][T13685] ? clear_bhb_loop+0x30/0x80 [ 527.254102][T13685] ? clear_bhb_loop+0x30/0x80 [ 527.258805][T13685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 527.264717][T13685] RIP: 0033:0x7f68d2d9b799 [ 527.269153][T13685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.288776][T13685] RSP: 002b:00007f68d0ff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.297217][T13685] RAX: ffffffffffffffda RBX: 00007f68d3014fa0 RCX: 00007f68d2d9b799 [ 527.305204][T13685] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 527.313188][T13685] RBP: 00007f68d0ff5090 R08: 0000000000000000 R09: 0000000000000000 [ 527.321175][T13685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.329168][T13685] R13: 00007f68d3015038 R14: 00007f68d3014fa0 R15: 00007ffe855ff158 [ 527.337207][T13685] [ 527.361503][T13691] netlink: 'syz.2.2777': attribute type 1 has an invalid length. [ 527.407943][T13690] netlink: 'syz.1.2781': attribute type 10 has an invalid length. [ 527.429822][T13691] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2777'. [ 527.452648][T13690] team0: Device wg1 is of different type [ 527.483230][T13697] netlink: 'syz.3.2784': attribute type 1 has an invalid length. [ 527.737069][T13709] netlink: 'syz.3.2788': attribute type 10 has an invalid length. [ 528.103014][T13719] netlink: 'syz.1.2792': attribute type 10 has an invalid length. [ 528.163233][T13719] team0: Device wg1 is of different type [ 528.183812][T13723] FAULT_INJECTION: forcing a failure. [ 528.183812][T13723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.204874][T13723] CPU: 1 PID: 13723 Comm: syz.3.2793 Not tainted syzkaller #0 [ 528.212382][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.218425][T13724] netlink: 'syz.2.2794': attribute type 29 has an invalid length. [ 528.222446][T13723] Call Trace: [ 528.222458][T13723] [ 528.236440][T13723] dump_stack_lvl+0x188/0x250 [ 528.241127][T13723] ? show_regs_print_info+0x20/0x20 [ 528.246333][T13723] ? load_image+0x400/0x400 [ 528.250850][T13723] ? __lock_acquire+0x7d10/0x7d10 [ 528.255882][T13723] ? __virt_addr_valid+0x22/0x470 [ 528.260911][T13723] should_fail+0x38c/0x4c0 [ 528.265338][T13723] _copy_from_user+0x2e/0x170 [ 528.270029][T13723] bpf_test_init+0x136/0x1b0 [ 528.274644][T13723] bpf_prog_test_run_skb+0x181/0x1180 [ 528.280044][T13723] ? __fget_files+0x40f/0x480 [ 528.284744][T13723] ? cpu_online+0x60/0x60 [ 528.289167][T13723] bpf_prog_test_run+0x31e/0x390 [ 528.294118][T13723] __sys_bpf+0x5a5/0x6f0 [ 528.298387][T13723] ? bpf_link_show_fdinfo+0x380/0x380 [ 528.303787][T13723] __x64_sys_bpf+0x78/0x90 [ 528.308224][T13723] do_syscall_64+0x4c/0xa0 [ 528.312653][T13723] ? clear_bhb_loop+0x30/0x80 [ 528.317335][T13723] ? clear_bhb_loop+0x30/0x80 [ 528.322025][T13723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 528.327921][T13723] RIP: 0033:0x7fd1ccc96799 [ 528.332395][T13723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.352010][T13723] RSP: 002b:00007fd1caef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 528.360436][T13723] RAX: ffffffffffffffda RBX: 00007fd1ccf0ffa0 RCX: 00007fd1ccc96799 [ 528.368412][T13723] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 528.376389][T13723] RBP: 00007fd1caef0090 R08: 0000000000000000 R09: 0000000000000000 [ 528.384369][T13723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.392351][T13723] R13: 00007fd1ccf10038 R14: 00007fd1ccf0ffa0 R15: 00007ffdc80d25e8 [ 528.400355][T13723] [ 528.692333][T13733] team0: Device wlan1 is of different type [ 529.072288][T13750] FAULT_INJECTION: forcing a failure. [ 529.072288][T13750] name failslab, interval 1, probability 0, space 0, times 0 [ 529.153105][T13750] CPU: 1 PID: 13750 Comm: syz.1.2801 Not tainted syzkaller #0 [ 529.160615][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.170674][T13750] Call Trace: [ 529.173956][T13750] [ 529.176888][T13750] dump_stack_lvl+0x188/0x250 [ 529.181572][T13750] ? show_regs_print_info+0x20/0x20 [ 529.186782][T13750] ? load_image+0x400/0x400 [ 529.191298][T13750] ? __might_sleep+0xf0/0xf0 [ 529.195907][T13750] ? __lock_acquire+0x7d10/0x7d10 [ 529.200948][T13750] should_fail+0x38c/0x4c0 [ 529.205381][T13750] should_failslab+0x5/0x20 [ 529.209883][T13750] slab_pre_alloc_hook+0x51/0xc0 [ 529.214833][T13750] __kmalloc_node_track_caller+0x68/0x3a0 [ 529.220557][T13750] ? netlink_sendmsg+0x654/0xbe0 [ 529.225498][T13750] ? kmem_cache_alloc_node+0x162/0x2d0 [ 529.230960][T13750] ? __alloc_skb+0xf4/0x750 [ 529.235468][T13750] ? netlink_sendmsg+0x654/0xbe0 [ 529.240409][T13750] __alloc_skb+0x22c/0x750 [ 529.244839][T13750] netlink_sendmsg+0x654/0xbe0 [ 529.249614][T13750] ? netlink_getsockopt+0x570/0x570 [ 529.254812][T13750] ? aa_sock_msg_perm+0x94/0x150 [ 529.259747][T13750] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 529.265023][T13750] ? security_socket_sendmsg+0x7c/0xa0 [ 529.270474][T13750] ? netlink_getsockopt+0x570/0x570 [ 529.275666][T13750] ____sys_sendmsg+0x5b7/0x8f0 [ 529.280433][T13750] ? __sys_sendmsg_sock+0x30/0x30 [ 529.285456][T13750] ? import_iovec+0x6f/0xa0 [ 529.289957][T13750] ___sys_sendmsg+0x236/0x2e0 [ 529.294634][T13750] ? __sys_sendmsg+0x2a0/0x2a0 [ 529.299401][T13750] ? vfs_write+0x8b2/0xd60 [ 529.303829][T13750] __se_sys_sendmsg+0x1af/0x290 [ 529.308674][T13750] ? __x64_sys_sendmsg+0x80/0x80 [ 529.313609][T13750] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 529.319594][T13750] ? lockdep_hardirqs_on+0x94/0x140 [ 529.324790][T13750] do_syscall_64+0x4c/0xa0 [ 529.329193][T13750] ? clear_bhb_loop+0x30/0x80 [ 529.333865][T13750] ? clear_bhb_loop+0x30/0x80 [ 529.338531][T13750] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 529.344418][T13750] RIP: 0033:0x7ff6079bd799 [ 529.348827][T13750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.368422][T13750] RSP: 002b:00007ff605bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.376828][T13750] RAX: ffffffffffffffda RBX: 00007ff607c37090 RCX: 00007ff6079bd799 [ 529.384790][T13750] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 529.392750][T13750] RBP: 00007ff605bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 529.400712][T13750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.408673][T13750] R13: 00007ff607c37128 R14: 00007ff607c37090 R15: 00007ffc271e52f8 [ 529.416656][T13750] [ 529.435627][T13756] validate_nla: 5 callbacks suppressed [ 529.435642][T13756] netlink: 'syz.4.2803': attribute type 1 has an invalid length. [ 529.470636][T13756] netlink: 'syz.4.2803': attribute type 4 has an invalid length. [ 529.485054][T13756] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2803'. [ 529.517659][T13759] netlink: 'syz.3.2806': attribute type 10 has an invalid length. [ 529.531906][T13760] netlink: 'syz.2.2805': attribute type 10 has an invalid length. [ 529.705183][T13764] FAULT_INJECTION: forcing a failure. [ 529.705183][T13764] name failslab, interval 1, probability 0, space 0, times 0 [ 529.726120][T13766] netlink: 'syz.2.2809': attribute type 10 has an invalid length. [ 529.760178][T13764] CPU: 0 PID: 13764 Comm: syz.4.2808 Not tainted syzkaller #0 [ 529.767694][T13764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.777755][T13764] Call Trace: [ 529.781039][T13764] [ 529.783967][T13764] dump_stack_lvl+0x188/0x250 [ 529.788653][T13764] ? show_regs_print_info+0x20/0x20 [ 529.793857][T13764] ? load_image+0x400/0x400 [ 529.798365][T13764] ? __lock_acquire+0x7d10/0x7d10 [ 529.803421][T13764] should_fail+0x38c/0x4c0 [ 529.808020][T13764] should_failslab+0x5/0x20 [ 529.812525][T13764] slab_pre_alloc_hook+0x51/0xc0 [ 529.817478][T13764] __kmalloc+0x6b/0x330 [ 529.821637][T13764] ? sk_prot_alloc+0xe7/0x210 [ 529.826332][T13764] sk_prot_alloc+0xe7/0x210 [ 529.830853][T13764] ? sk_alloc+0x1d/0x310 [ 529.835116][T13764] sk_alloc+0x2f/0x310 [ 529.839200][T13764] bpf_prog_test_run_skb+0x240/0x1180 [ 529.844593][T13764] ? lockdep_hardirqs_on+0x94/0x140 [ 529.847144][T13770] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2810'. [ 529.849812][T13764] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 529.849837][T13764] ? cpu_online+0x60/0x60 [ 529.849862][T13764] ? cpu_online+0x60/0x60 [ 529.849881][T13764] bpf_prog_test_run+0x31e/0x390 [ 529.849908][T13764] __sys_bpf+0x5a5/0x6f0 [ 529.883645][T13764] ? bpf_link_show_fdinfo+0x380/0x380 [ 529.889022][T13764] ? vtime_user_exit+0x2c8/0x3e0 [ 529.893949][T13764] __x64_sys_bpf+0x78/0x90 [ 529.898357][T13764] do_syscall_64+0x4c/0xa0 [ 529.902766][T13764] ? clear_bhb_loop+0x30/0x80 [ 529.907431][T13764] ? clear_bhb_loop+0x30/0x80 [ 529.912096][T13764] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 529.917980][T13764] RIP: 0033:0x7f68d2d9b799 [ 529.922395][T13764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.941999][T13764] RSP: 002b:00007f68d0ff5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.950418][T13764] RAX: ffffffffffffffda RBX: 00007f68d3014fa0 RCX: 00007f68d2d9b799 [ 529.958386][T13764] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 529.966362][T13764] RBP: 00007f68d0ff5090 R08: 0000000000000000 R09: 0000000000000000 [ 529.974323][T13764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.982288][T13764] R13: 00007f68d3015038 R14: 00007f68d3014fa0 R15: 00007ffe855ff158 [ 529.990266][T13764] [ 530.113058][T13777] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2814'. [ 530.191429][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 530.209576][T13780] netlink: 'syz.1.2815': attribute type 1 has an invalid length. [ 530.320984][T13786] netlink: 'syz.2.2818': attribute type 10 has an invalid length. [ 530.434582][T13796] netlink: 'syz.0.2820': attribute type 10 has an invalid length. [ 530.451122][T13794] FAULT_INJECTION: forcing a failure. [ 530.451122][T13794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.482376][T13796] team0: Device wg1 is of different type [ 530.487372][T13794] CPU: 0 PID: 13794 Comm: syz.1.2821 Not tainted syzkaller #0 [ 530.495501][T13794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 530.505551][T13794] Call Trace: [ 530.508834][T13794] [ 530.511784][T13794] dump_stack_lvl+0x188/0x250 [ 530.516495][T13794] ? show_regs_print_info+0x20/0x20 [ 530.521718][T13794] ? load_image+0x400/0x400 [ 530.526254][T13794] ? __lock_acquire+0x7d10/0x7d10 [ 530.531314][T13794] should_fail+0x38c/0x4c0 [ 530.535759][T13794] _copy_from_iter+0x22e/0x1170 [ 530.540631][T13794] ? __lock_acquire+0x7d10/0x7d10 [ 530.545695][T13794] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 530.551088][T13794] ? __virt_addr_valid+0x3c6/0x470 [ 530.556204][T13794] ? __phys_addr_symbol+0x2b/0x70 [ 530.561236][T13794] ? __check_object_size+0x30c/0x410 [ 530.566536][T13794] netlink_sendmsg+0x758/0xbe0 [ 530.571318][T13794] ? netlink_getsockopt+0x570/0x570 [ 530.576525][T13794] ? aa_sock_msg_perm+0x94/0x150 [ 530.581484][T13794] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 530.586777][T13794] ? security_socket_sendmsg+0x7c/0xa0 [ 530.592242][T13794] ? netlink_getsockopt+0x570/0x570 [ 530.597444][T13794] ____sys_sendmsg+0x5b7/0x8f0 [ 530.602236][T13794] ? __sys_sendmsg_sock+0x30/0x30 [ 530.607279][T13794] ? import_iovec+0x6f/0xa0 [ 530.611809][T13794] ___sys_sendmsg+0x236/0x2e0 [ 530.616522][T13794] ? __sys_sendmsg+0x2a0/0x2a0 [ 530.621319][T13794] ? vfs_write+0x8b2/0xd60 [ 530.625782][T13794] __se_sys_sendmsg+0x1af/0x290 [ 530.630889][T13794] ? __x64_sys_sendmsg+0x80/0x80 [ 530.635845][T13794] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 530.641859][T13794] ? lockdep_hardirqs_on+0x94/0x140 [ 530.647073][T13794] do_syscall_64+0x4c/0xa0 [ 530.651493][T13794] ? clear_bhb_loop+0x30/0x80 [ 530.656176][T13794] ? clear_bhb_loop+0x30/0x80 [ 530.660858][T13794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 530.666757][T13794] RIP: 0033:0x7ff6079bd799 [ 530.671175][T13794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.690786][T13794] RSP: 002b:00007ff605c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.699240][T13794] RAX: ffffffffffffffda RBX: 00007ff607c36fa0 RCX: 00007ff6079bd799 [ 530.707213][T13794] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 530.715186][T13794] RBP: 00007ff605c17090 R08: 0000000000000000 R09: 0000000000000000 [ 530.723157][T13794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.731141][T13794] R13: 00007ff607c37038 R14: 00007ff607c36fa0 R15: 00007ffc271e52f8 [ 530.739228][T13794] [ 530.983153][T13816] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 530.989623][T13816] syzkaller0: owner set to 2 [ 531.115244][T13822] netlink: 'syz.3.2831': attribute type 1 has an invalid length. [ 531.165814][T13829] netlink: 'syz.0.2834': attribute type 10 has an invalid length. [ 531.474606][T13837] team0: Device wg1 is of different type [ 531.509017][T13842] FAULT_INJECTION: forcing a failure. [ 531.509017][T13842] name failslab, interval 1, probability 0, space 0, times 0 [ 531.588387][T13842] CPU: 0 PID: 13842 Comm: syz.2.2840 Not tainted syzkaller #0 [ 531.595908][T13842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.606064][T13842] Call Trace: [ 531.609350][T13842] [ 531.612291][T13842] dump_stack_lvl+0x188/0x250 [ 531.616979][T13842] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 531.622709][T13842] ? show_regs_print_info+0x20/0x20 [ 531.627920][T13842] ? load_image+0x400/0x400 [ 531.632455][T13842] should_fail+0x38c/0x4c0 [ 531.636894][T13842] should_failslab+0x5/0x20 [ 531.641402][T13842] slab_pre_alloc_hook+0x51/0xc0 [ 531.646350][T13842] ? skb_clone+0x1bd/0x350 [ 531.650783][T13842] kmem_cache_alloc+0x3d/0x290 [ 531.655578][T13842] skb_clone+0x1bd/0x350 [ 531.659847][T13842] __netlink_deliver_tap+0x3cd/0x7c0 [ 531.665181][T13842] netlink_deliver_tap+0x16c/0x180 [ 531.670320][T13842] netlink_unicast+0x74f/0x920 [ 531.675465][T13842] netlink_sendmsg+0x8ba/0xbe0 [ 531.680263][T13842] ? netlink_getsockopt+0x570/0x570 [ 531.685492][T13842] ? aa_sock_msg_perm+0x94/0x150 [ 531.690457][T13842] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 531.695777][T13842] ? security_socket_sendmsg+0x7c/0xa0 [ 531.701257][T13842] ? netlink_getsockopt+0x570/0x570 [ 531.706469][T13842] ____sys_sendmsg+0x5b7/0x8f0 [ 531.711278][T13842] ? __sys_sendmsg_sock+0x30/0x30 [ 531.716334][T13842] ? import_iovec+0x6f/0xa0 [ 531.720860][T13842] ___sys_sendmsg+0x236/0x2e0 [ 531.725568][T13842] ? __sys_sendmsg+0x2a0/0x2a0 [ 531.730370][T13842] ? vfs_write+0x8b2/0xd60 [ 531.734845][T13842] __se_sys_sendmsg+0x1af/0x290 [ 531.739714][T13842] ? __x64_sys_sendmsg+0x80/0x80 [ 531.744658][T13842] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 531.750678][T13842] ? lockdep_hardirqs_on+0x94/0x140 [ 531.755894][T13842] do_syscall_64+0x4c/0xa0 [ 531.760324][T13842] ? clear_bhb_loop+0x30/0x80 [ 531.765010][T13842] ? clear_bhb_loop+0x30/0x80 [ 531.769698][T13842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.775603][T13842] RIP: 0033:0x7f83413dc799 [ 531.780027][T13842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.799642][T13842] RSP: 002b:00007f833f636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.808078][T13842] RAX: ffffffffffffffda RBX: 00007f8341655fa0 RCX: 00007f83413dc799 [ 531.816065][T13842] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 531.824049][T13842] RBP: 00007f833f636090 R08: 0000000000000000 R09: 0000000000000000 [ 531.832029][T13842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.840012][T13842] R13: 00007f8341656038 R14: 00007f8341655fa0 R15: 00007ffe03cb7328 [ 531.848020][T13842] [ 532.335626][T13839] delete_channel: no stack [ 532.416316][T13862] team0: Device wg1 is of different type [ 533.024124][T13901] team0: Device wg1 is of different type [ 533.289624][T13942] FAULT_INJECTION: forcing a failure. [ 533.289624][T13942] name failslab, interval 1, probability 0, space 0, times 0 [ 533.302674][T13942] CPU: 1 PID: 13942 Comm: syz.0.2862 Not tainted syzkaller #0 [ 533.310156][T13942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.320234][T13942] Call Trace: [ 533.323532][T13942] [ 533.326484][T13942] dump_stack_lvl+0x188/0x250 [ 533.331186][T13942] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 533.337804][T13942] ? show_regs_print_info+0x20/0x20 [ 533.343030][T13942] ? load_image+0x400/0x400 [ 533.347585][T13942] should_fail+0x38c/0x4c0 [ 533.352038][T13942] should_failslab+0x5/0x20 [ 533.356564][T13942] slab_pre_alloc_hook+0x51/0xc0 [ 533.361521][T13942] ? skb_clone+0x1bd/0x350 [ 533.365959][T13942] kmem_cache_alloc+0x3d/0x290 [ 533.370776][T13942] skb_clone+0x1bd/0x350 [ 533.375036][T13942] ? dev_queue_xmit_nit+0x1df/0xb00 [ 533.380262][T13942] dev_queue_xmit_nit+0x2cc/0xb00 [ 533.385324][T13942] ? validate_xmit_skb+0x7b3/0xe40 [ 533.390469][T13942] dev_hard_start_xmit+0x13e/0x7e0 [ 533.395630][T13942] __dev_queue_xmit+0x1a9b/0x2f80 [ 533.400716][T13942] ? dev_queue_xmit+0x20/0x20 [ 533.405429][T13942] ? memcpy+0x3c/0x60 [ 533.409444][T13942] ? __copy_skb_header+0x3ba/0x4f0 [ 533.414688][T13942] ? __skb_clone+0x480/0x790 [ 533.419322][T13942] ? skb_clone+0x1f1/0x350 [ 533.423770][T13942] __netlink_deliver_tap+0x53e/0x7c0 [ 533.429106][T13942] netlink_deliver_tap+0x16c/0x180 [ 533.434238][T13942] netlink_unicast+0x74f/0x920 [ 533.439039][T13942] netlink_sendmsg+0x8ba/0xbe0 [ 533.443839][T13942] ? netlink_getsockopt+0x570/0x570 [ 533.449104][T13942] ? aa_sock_msg_perm+0x94/0x150 [ 533.454150][T13942] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 533.459452][T13942] ? security_socket_sendmsg+0x7c/0xa0 [ 533.464932][T13942] ? netlink_getsockopt+0x570/0x570 [ 533.470152][T13942] ____sys_sendmsg+0x5b7/0x8f0 [ 533.474981][T13942] ? __sys_sendmsg_sock+0x30/0x30 [ 533.480044][T13942] ? import_iovec+0x6f/0xa0 [ 533.484572][T13942] ___sys_sendmsg+0x236/0x2e0 [ 533.489289][T13942] ? __sys_sendmsg+0x2a0/0x2a0 [ 533.494098][T13942] ? trace_event_raw_event_lock+0x270/0x270 [ 533.500030][T13942] ? vfs_write+0x8b2/0xd60 [ 533.504522][T13942] __se_sys_sendmsg+0x1af/0x290 [ 533.509417][T13942] ? __x64_sys_sendmsg+0x80/0x80 [ 533.514486][T13942] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 533.520519][T13942] ? lockdep_hardirqs_on+0x94/0x140 [ 533.525757][T13942] do_syscall_64+0x4c/0xa0 [ 533.530193][T13942] ? clear_bhb_loop+0x30/0x80 [ 533.534996][T13942] ? clear_bhb_loop+0x30/0x80 [ 533.539692][T13942] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 533.545600][T13942] RIP: 0033:0x7f8650aa7799 [ 533.550040][T13942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.570715][T13942] RSP: 002b:00007f864ed01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.579161][T13942] RAX: ffffffffffffffda RBX: 00007f8650d20fa0 RCX: 00007f8650aa7799 [ 533.587156][T13942] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 533.595153][T13942] RBP: 00007f864ed01090 R08: 0000000000000000 R09: 0000000000000000 [ 533.603146][T13942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.611140][T13942] R13: 00007f8650d21038 R14: 00007f8650d20fa0 R15: 00007ffe1edf50a8 [ 533.619166][T13942] [ 533.689130][T13950] team0: Device wg1 is of different type [ 533.746160][T13951] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.2865'. [ 533.858801][T13942] team0: Device wg1 is of different type [ 534.386483][T13983] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 534.393252][T13983] syzkaller0: owner set to 2 [ 534.547384][T13987] validate_nla: 14 callbacks suppressed [ 534.547400][T13987] netlink: 'syz.0.2878': attribute type 10 has an invalid length. [ 534.601098][T13987] team0: Device wg1 is of different type [ 534.635375][T13990] netlink: 'syz.1.2879': attribute type 1 has an invalid length. [ 534.687224][T13992] netlink: 'syz.3.2881': attribute type 10 has an invalid length. [ 534.742122][T13997] netlink: 'syz.2.2883': attribute type 6 has an invalid length. [ 534.765159][T13997] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2883'. [ 534.787761][T13998] netlink: 'syz.0.2882': attribute type 21 has an invalid length. [ 534.893965][T14003] netlink: 'syz.3.2884': attribute type 10 has an invalid length. [ 534.945502][T14003] FAULT_INJECTION: forcing a failure. [ 534.945502][T14003] name failslab, interval 1, probability 0, space 0, times 0 [ 535.021645][T14003] CPU: 0 PID: 14003 Comm: syz.3.2884 Not tainted syzkaller #0 [ 535.029187][T14003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.039258][T14003] Call Trace: [ 535.042551][T14003] [ 535.045493][T14003] dump_stack_lvl+0x188/0x250 [ 535.050197][T14003] ? show_regs_print_info+0x20/0x20 [ 535.055410][T14003] ? load_image+0x400/0x400 [ 535.059956][T14003] ? __lock_acquire+0x7d10/0x7d10 [ 535.065027][T14003] should_fail+0x38c/0x4c0 [ 535.069485][T14003] should_failslab+0x5/0x20 [ 535.074003][T14003] slab_pre_alloc_hook+0x51/0xc0 [ 535.078966][T14003] __kmalloc+0x6b/0x330 [ 535.083134][T14003] ? team_add_slave+0x297/0x2780 [ 535.088103][T14003] team_add_slave+0x297/0x2780 [ 535.092955][T14003] ? __local_bh_enable_ip+0x136/0x1c0 [ 535.098343][T14003] ? lockdep_hardirqs_on+0x94/0x140 [ 535.103575][T14003] ? _local_bh_enable+0xa0/0xa0 [ 535.108462][T14003] ? __dev_notify_flags+0x1df/0x300 [ 535.113672][T14003] ? __dev_change_flags+0x1c6/0x6a0 [ 535.118942][T14003] ? __dev_change_flags+0x6a0/0x6a0 [ 535.124152][T14003] ? __dev_change_flags+0x4d0/0x6a0 [ 535.129367][T14003] ? team_netpoll_cleanup+0xf0/0xf0 [ 535.134582][T14003] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 535.140582][T14003] ? dev_get_flags+0x1c0/0x1c0 [ 535.145369][T14003] ? preempt_schedule_common+0xa5/0xd0 [ 535.150845][T14003] ? preempt_schedule+0xbc/0xd0 [ 535.155736][T14003] ? mutex_is_locked+0xe/0x40 [ 535.160448][T14003] do_setlink+0xe90/0x3d60 [ 535.164894][T14003] ? vprintk_emit+0xf9/0x150 [ 535.169511][T14003] ? _printk+0xda/0x130 [ 535.173688][T14003] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 535.179902][T14003] ? load_image+0x400/0x400 [ 535.184418][T14003] ? perf_trace_lock+0xe4/0x390 [ 535.189305][T14003] ? __nla_validate_parse+0x1e23/0x2780 [ 535.194866][T14003] ? rtnetlink_rcv_msg+0x844/0xf30 [ 535.199994][T14003] ? netlink_rcv_skb+0x1f5/0x440 [ 535.204946][T14003] ? netlink_unicast+0x774/0x920 [ 535.209936][T14003] ? __nla_validate+0x50/0x50 [ 535.214667][T14003] ? validate_linkmsg+0x3db/0x4c0 [ 535.219717][T14003] rtnl_newlink+0x1658/0x1a50 [ 535.224437][T14003] ? rtnl_newlink+0x401/0x1a50 [ 535.229220][T14003] ? rtnl_setlink+0x500/0x500 [ 535.233911][T14003] ? mark_lock+0x94/0x320 [ 535.238258][T14003] ? __lock_acquire+0x13bc/0x7d10 [ 535.243382][T14003] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 535.250164][T14003] ? rtnl_setlink+0x500/0x500 [ 535.254858][T14003] rtnetlink_rcv_msg+0x844/0xf30 [ 535.259829][T14003] ? rtnetlink_bind+0x80/0x80 [ 535.264525][T14003] ? __local_bh_enable_ip+0x136/0x1c0 [ 535.269916][T14003] ? lockdep_hardirqs_on+0x94/0x140 [ 535.275140][T14003] ? __local_bh_enable_ip+0x136/0x1c0 [ 535.280533][T14003] ? _local_bh_enable+0xa0/0xa0 [ 535.285428][T14003] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 535.290674][T14003] ? perf_trace_lock+0xe4/0x390 [ 535.295560][T14003] ? trace_event_raw_event_lock+0x270/0x270 [ 535.301483][T14003] ? __skb_clone+0x480/0x790 [ 535.306108][T14003] netlink_rcv_skb+0x1f5/0x440 [ 535.310902][T14003] ? rtnetlink_bind+0x80/0x80 [ 535.315605][T14003] ? netlink_ack+0xb50/0xb50 [ 535.320244][T14003] netlink_unicast+0x774/0x920 [ 535.325060][T14003] netlink_sendmsg+0x8ba/0xbe0 [ 535.329855][T14003] ? netlink_getsockopt+0x570/0x570 [ 535.335075][T14003] ? aa_sock_msg_perm+0x94/0x150 [ 535.340029][T14003] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 535.345342][T14003] ? security_socket_sendmsg+0x7c/0xa0 [ 535.350820][T14003] ? netlink_getsockopt+0x570/0x570 [ 535.356043][T14003] ____sys_sendmsg+0x5b7/0x8f0 [ 535.360857][T14003] ? __sys_sendmsg_sock+0x30/0x30 [ 535.365921][T14003] ? import_iovec+0x6f/0xa0 [ 535.370457][T14003] ___sys_sendmsg+0x236/0x2e0 [ 535.375180][T14003] ? __sys_sendmsg+0x2a0/0x2a0 [ 535.380058][T14003] __se_sys_sendmsg+0x1af/0x290 [ 535.384942][T14003] ? __x64_sys_sendmsg+0x80/0x80 [ 535.390068][T14003] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 535.396106][T14003] ? lockdep_hardirqs_on+0x94/0x140 [ 535.401331][T14003] do_syscall_64+0x4c/0xa0 [ 535.405758][T14003] ? clear_bhb_loop+0x30/0x80 [ 535.410442][T14003] ? clear_bhb_loop+0x30/0x80 [ 535.415174][T14003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 535.421082][T14003] RIP: 0033:0x7fd1ccc96799 [ 535.425512][T14003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.445217][T14003] RSP: 002b:00007fd1caef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.453651][T14003] RAX: ffffffffffffffda RBX: 00007fd1ccf0ffa0 RCX: 00007fd1ccc96799 [ 535.461661][T14003] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 535.469653][T14003] RBP: 00007fd1caef0090 R08: 0000000000000000 R09: 0000000000000000 [ 535.477642][T14003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.485641][T14003] R13: 00007fd1ccf10038 R14: 00007fd1ccf0ffa0 R15: 00007ffdc80d25e8 [ 535.493673][T14003] [ 535.708581][T14004] netlink: 'syz.0.2882': attribute type 10 has an invalid length. [ 535.725593][T14004] team0: Device wg1 is of different type [ 535.756864][T14023] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 535.768048][T14023] syzkaller0: owner set to 2 [ 535.822434][T14030] netlink: 'syz.2.2894': attribute type 29 has an invalid length. [ 535.830689][T14026] netlink: 'syz.0.2892': attribute type 1 has an invalid length. [ 535.869714][T14030] netlink: 'syz.2.2894': attribute type 29 has an invalid length. [ 536.528816][T14039] team0: Device wg1 is of different type [ 537.225687][T14075] team0: Device wg1 is of different type [ 537.271477][T14068] chnl_net:caif_netlink_parms(): no params data found [ 537.310484][ T4225] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.534650][ T4225] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.565225][T14068] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.595542][T14068] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.612739][T14068] device bridge_slave_0 entered promiscuous mode [ 537.631501][ T4225] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.661812][T14068] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.682777][T14068] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.715720][T14068] device bridge_slave_1 entered promiscuous mode [ 537.754355][ T4225] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.815343][T14068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.829664][T14068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.863360][T14098] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2912'. [ 537.889820][T14068] team0: Port device team_slave_0 added [ 537.910848][T14068] team0: Port device team_slave_1 added [ 537.986438][T14068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.999068][T14101] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2914'. [ 538.008017][T14068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.008048][T14068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.012056][T14068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.068094][T14068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.122473][T14068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.454978][T14068] device hsr_slave_0 entered promiscuous mode [ 538.476647][T14068] device hsr_slave_1 entered promiscuous mode [ 538.935743][T14126] team0: Device wg1 is of different type [ 539.008261][ T5779] Bluetooth: hci0: command 0x0409 tx timeout [ 539.282937][T14142] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2924'. [ 539.385490][T14142] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 539.836132][T14068] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 539.850952][T14068] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 539.905389][T14068] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 539.937256][T14068] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 540.037235][T14184] validate_nla: 13 callbacks suppressed [ 540.037253][T14184] netlink: 'syz.1.2936': attribute type 1 has an invalid length. [ 540.080258][T14186] netlink: 'syz.0.2935': attribute type 10 has an invalid length. [ 540.092412][T14186] team0: Device wg1 is of different type [ 540.143299][T14068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.172952][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 540.191494][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 540.207626][T14068] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.267213][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 540.294727][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 540.332896][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.340042][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.356933][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 540.379430][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 540.389344][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.396426][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.410635][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 540.422036][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 540.447186][T14202] netlink: 'syz.1.2938': attribute type 10 has an invalid length. [ 540.457033][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 540.479548][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 540.510562][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 540.555078][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 540.568726][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 540.581802][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 540.592830][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 540.613848][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 540.627224][T14068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.652819][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 540.675731][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 540.686472][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 540.746800][T14212] netlink: 'syz.1.2943': attribute type 1 has an invalid length. [ 540.784790][T14213] netlink: 'syz.1.2943': attribute type 10 has an invalid length. [ 540.844228][T14213] team0: Device wg1 is of different type [ 541.038240][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 541.045774][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 541.060169][T14068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.089785][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 541.103598][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 541.104220][ T5759] Bluetooth: hci0: command 0x041b tx timeout [ 541.147355][T14068] device veth0_vlan entered promiscuous mode [ 541.175379][T14226] netlink: 'syz.2.2946': attribute type 1 has an invalid length. [ 541.193424][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 541.207282][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 541.224235][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 541.244112][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 541.263769][T14229] netlink: 'syz.1.2947': attribute type 1 has an invalid length. [ 541.287515][T14233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2948'. [ 541.330378][T14068] device veth1_vlan entered promiscuous mode [ 541.382491][T14229] netlink: 'syz.1.2947': attribute type 10 has an invalid length. [ 541.433182][T14229] device geneve0 entered promiscuous mode [ 541.725462][T14229] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 541.746215][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 541.764361][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 541.782575][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 541.798685][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 541.815039][T14235] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2949'. [ 541.861261][T14238] netlink: 'syz.2.2950': attribute type 10 has an invalid length. [ 541.941927][T14068] device veth0_macvtap entered promiscuous mode [ 541.960775][T14068] device veth1_macvtap entered promiscuous mode [ 541.989470][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.001719][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.017840][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.034013][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.045735][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.060613][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.074661][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.088806][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.103442][T14068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.117300][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 542.134030][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 542.154634][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 542.178014][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 542.225334][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.247330][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.266289][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.293623][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.303734][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.326005][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.342550][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.362564][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.415509][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.426044][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.439554][T14068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.447135][T14258] netlink: 'syz.0.2954': attribute type 10 has an invalid length. [ 542.495692][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 542.530122][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 542.567201][T14068] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.576816][T14068] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.586104][T14068] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.595443][T14068] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.628560][T14273] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 542.634459][T14273] syzkaller0: owner set to 2 [ 542.684063][T14269] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2958'. [ 542.704304][ T4225] device hsr_slave_0 left promiscuous mode [ 542.715848][ T4225] device hsr_slave_1 left promiscuous mode [ 542.723418][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.732172][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.741714][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.752078][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.761287][T14271] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2957'. [ 542.771512][T14271] openvswitch: netlink: Flow key attribute not present in set flow. [ 542.784059][ T4225] device veth0_vlan left promiscuous mode [ 542.985233][ T4225] device team_slave_1 left promiscuous mode [ 543.001105][ T4225] team0 (unregistering): Port device team_slave_1 removed [ 543.019488][ T4225] device team_slave_0 left promiscuous mode [ 543.032153][ T4225] team0 (unregistering): Port device team_slave_0 removed [ 543.168288][ T5760] Bluetooth: hci0: command 0x040f tx timeout [ 543.454901][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.469608][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.533681][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.546555][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.571907][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 543.602720][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 543.765331][T14303] delete_channel: no stack [ 543.804831][T14310] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2903'. [ 543.864501][T14310] device team0 entered promiscuous mode [ 543.885935][T14310] device team_slave_0 entered promiscuous mode [ 543.913201][T14310] device team_slave_1 entered promiscuous mode [ 543.956548][T14310] bridge0: port 3(team0) entered blocking state [ 543.981678][T14310] bridge0: port 3(team0) entered disabled state [ 544.009529][T14310] bridge0: port 3(team0) entered blocking state [ 544.015891][T14310] bridge0: port 3(team0) entered forwarding state [ 544.035073][T14317] device geneve0 entered promiscuous mode [ 544.130754][T14317] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 544.208418][T14319] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2970'. [ 544.397555][T14328] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 544.423857][T14328] syzkaller0: owner set to 2 [ 544.534123][T14328] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2973'. [ 544.681235][T14320] chnl_net:caif_netlink_parms(): no params data found [ 544.882966][T14320] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.898084][T14320] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.906359][T14320] device bridge_slave_0 entered promiscuous mode [ 544.921365][T14320] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.947915][T14320] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.955753][T14320] device bridge_slave_1 entered promiscuous mode [ 545.031297][T14340] team0: Device wg1 is of different type [ 545.185132][T14320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.220819][T14320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.248189][ T5779] Bluetooth: hci0: command 0x0419 tx timeout [ 545.303226][T14320] team0: Port device team_slave_0 added [ 545.330136][T14320] team0: Port device team_slave_1 added [ 545.366871][T14320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.412998][T14320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.433733][T14362] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2982'. [ 545.487843][T14320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.542712][T14362] netlink: 22796 bytes leftover after parsing attributes in process `syz.1.2982'. [ 545.559403][T14320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.566371][T14320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.602283][T14320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.671973][T14320] device hsr_slave_0 entered promiscuous mode [ 545.683500][T14320] device hsr_slave_1 entered promiscuous mode [ 545.692458][T14320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.707184][T14320] Cannot create hsr debugfs directory [ 545.748133][T14371] validate_nla: 9 callbacks suppressed [ 545.748150][T14371] netlink: 'syz.2.2985': attribute type 10 has an invalid length. [ 545.924348][T14320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.981127][T14375] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2986'. [ 546.048341][ T4298] Bluetooth: hci2: command 0x0409 tx timeout [ 546.048390][T14374] netlink: 'syz.2.2987': attribute type 1 has an invalid length. [ 546.081235][T14375] netlink: 'syz.1.2986': attribute type 9 has an invalid length. [ 546.090383][T14375] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2986'. [ 546.112271][T14320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.215444][T14320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.242109][T14385] netlink: 'syz.2.2987': attribute type 10 has an invalid length. [ 546.315113][T14320] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.317137][T14379] netlink: 'syz.1.2986': attribute type 9 has an invalid length. [ 546.365982][T14379] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2986'. [ 546.425541][T14391] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2991'. [ 546.519053][T14320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 546.538901][T14320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 546.564577][T14320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 546.599320][T14320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 546.677914][T14401] netlink: 'syz.0.2994': attribute type 10 has an invalid length. [ 546.700158][T14401] team0: Device wg1 is of different type [ 546.740226][T14320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.771933][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 546.780444][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 546.792044][T14320] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.809022][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 546.818589][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 546.839389][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.846468][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.867029][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 546.883129][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 546.892279][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.899392][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.922581][T14406] netlink: 'syz.0.2997': attribute type 10 has an invalid length. [ 546.933889][T14413] netlink: 'syz.3.2996': attribute type 4 has an invalid length. [ 546.946001][T14408] netlink: 'syz.3.2996': attribute type 2 has an invalid length. [ 546.958157][T14413] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2996'. [ 546.978157][T14409] netlink: 'syz.2.2998': attribute type 1 has an invalid length. [ 546.986129][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 547.002166][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 547.014672][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 547.059525][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 547.077186][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 547.086358][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 547.099986][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 547.113300][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 547.122318][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 547.131243][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 547.146891][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 547.155621][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 547.209176][T14320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 547.383499][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 547.392210][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 547.423244][T14320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.767374][T14445] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3007'. [ 547.772461][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 547.807503][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.850753][T14447] device geneve0 entered promiscuous mode [ 547.914207][T14447] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 547.926264][T14457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3017'. [ 547.994602][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 548.003313][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 548.024587][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 548.033941][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 548.073459][T14320] device veth0_vlan entered promiscuous mode [ 548.091925][T14460] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 548.098976][T14460] syzkaller0: owner set to 2 [ 548.115506][T14320] device veth1_vlan entered promiscuous mode [ 548.131199][T14460] FAULT_INJECTION: forcing a failure. [ 548.131199][T14460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.150389][ T7744] Bluetooth: hci2: command 0x041b tx timeout [ 548.166646][T14460] CPU: 1 PID: 14460 Comm: syz.1.3009 Not tainted syzkaller #0 [ 548.174148][T14460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 548.184210][T14460] Call Trace: [ 548.187503][T14460] [ 548.190440][T14460] dump_stack_lvl+0x188/0x250 [ 548.195124][T14460] ? show_regs_print_info+0x20/0x20 [ 548.200321][T14460] ? load_image+0x400/0x400 [ 548.204832][T14460] ? __lock_acquire+0x7d10/0x7d10 [ 548.209877][T14460] should_fail+0x38c/0x4c0 [ 548.214310][T14460] _copy_from_user+0x2e/0x170 [ 548.218998][T14460] __copy_msghdr_from_user+0xc9/0x630 [ 548.224383][T14460] ? verify_lock_unused+0x140/0x140 [ 548.229594][T14460] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 548.234889][T14460] ___sys_sendmsg+0x19a/0x2e0 [ 548.239567][T14460] ? __sys_sendmsg+0x2a0/0x2a0 [ 548.244341][T14460] ? ktime_get_real_ts64+0x440/0x440 [ 548.249635][T14460] __se_sys_sendmsg+0x1af/0x290 [ 548.254483][T14460] ? __x64_sys_sendmsg+0x80/0x80 [ 548.259412][T14460] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 548.265388][T14460] ? lockdep_hardirqs_on+0x94/0x140 [ 548.270585][T14460] do_syscall_64+0x4c/0xa0 [ 548.274989][T14460] ? clear_bhb_loop+0x30/0x80 [ 548.279653][T14460] ? clear_bhb_loop+0x30/0x80 [ 548.284318][T14460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 548.290197][T14460] RIP: 0033:0x7ff6079bd799 [ 548.294604][T14460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.314204][T14460] RSP: 002b:00007ff605c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.322620][T14460] RAX: ffffffffffffffda RBX: 00007ff607c36fa0 RCX: 00007ff6079bd799 [ 548.330583][T14460] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 548.338541][T14460] RBP: 00007ff605c17090 R08: 0000000000000000 R09: 0000000000000000 [ 548.346505][T14460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.354511][T14460] R13: 00007ff607c37038 R14: 00007ff607c36fa0 R15: 00007ffc271e52f8 [ 548.362488][T14460] [ 548.411557][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 548.422589][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 548.433343][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 548.443987][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 548.459486][T14320] device veth0_macvtap entered promiscuous mode [ 548.502129][T14320] device veth1_macvtap entered promiscuous mode [ 548.545061][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.556358][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.566769][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.583623][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.605000][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.618324][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.631790][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.649538][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.662875][T14320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.675880][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.693239][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.704113][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.714992][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.726095][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.736649][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.748000][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.758872][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.769044][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.779556][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.799238][T14320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.953942][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 548.968811][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 548.979632][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 548.989163][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 548.997974][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 549.006651][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 549.025760][T14320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.045114][T14320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.055724][T14320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.067879][T14320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.363363][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.384894][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.411144][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 549.432158][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.447319][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.455239][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 550.127936][T14506] chnl_net:caif_netlink_parms(): no params data found [ 550.209774][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 550.272298][T14506] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.287883][T14506] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.296245][T14506] device bridge_slave_0 entered promiscuous mode [ 550.747574][T14518] device geneve0 entered promiscuous mode [ 550.792574][T14518] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 550.815022][T14506] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.828223][T14506] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.837181][T14506] device bridge_slave_1 entered promiscuous mode [ 550.860185][T14520] __nla_validate_parse: 2 callbacks suppressed [ 550.860203][T14520] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3024'. [ 550.904243][T14538] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3026'. [ 550.981176][T14506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.997285][T14540] validate_nla: 14 callbacks suppressed [ 550.997299][T14540] netlink: 'syz.0.3027': attribute type 1 has an invalid length. [ 551.017436][T14544] netlink: 'syz.3.3029': attribute type 10 has an invalid length. [ 551.039647][T14544] device wg1 entered promiscuous mode [ 551.045198][T14544] team0: Device wg1 is of different type [ 551.084919][T14506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.132044][T14506] team0: Port device team_slave_0 added [ 551.199101][T14506] team0: Port device team_slave_1 added [ 551.217973][T14550] netlink: 'syz.0.3033': attribute type 10 has an invalid length. [ 551.227168][ T4225] device hsr_slave_0 left promiscuous mode [ 551.234527][ T4225] device hsr_slave_1 left promiscuous mode [ 551.242370][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.250611][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.258906][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.267044][T14551] FAULT_INJECTION: forcing a failure. [ 551.267044][T14551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.267985][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.298639][T14551] CPU: 0 PID: 14551 Comm: syz.3.3032 Not tainted syzkaller #0 [ 551.306134][T14551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 551.316179][T14551] Call Trace: [ 551.319441][T14551] [ 551.322380][T14551] dump_stack_lvl+0x188/0x250 [ 551.327039][T14551] ? show_regs_print_info+0x20/0x20 [ 551.332301][T14551] ? load_image+0x400/0x400 [ 551.336786][T14551] ? __lock_acquire+0x7d10/0x7d10 [ 551.341800][T14551] should_fail+0x38c/0x4c0 [ 551.346206][T14551] _copy_from_user+0x2e/0x170 [ 551.350871][T14551] iovec_from_user+0x142/0x370 [ 551.355619][T14551] __import_iovec+0x70/0x490 [ 551.360204][T14551] import_iovec+0x6f/0xa0 [ 551.364549][T14551] ___sys_sendmsg+0x1fd/0x2e0 [ 551.369238][T14551] ? __sys_sendmsg+0x2a0/0x2a0 [ 551.374020][T14551] ? trace_event_raw_event_lock+0x270/0x270 [ 551.379920][T14551] ? vfs_write+0x8b2/0xd60 [ 551.384355][T14551] __se_sys_sendmsg+0x1af/0x290 [ 551.389213][T14551] ? __x64_sys_sendmsg+0x80/0x80 [ 551.394144][T14551] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 551.400260][T14551] ? lockdep_hardirqs_on+0x94/0x140 [ 551.405469][T14551] do_syscall_64+0x4c/0xa0 [ 551.409886][T14551] ? clear_bhb_loop+0x30/0x80 [ 551.414557][T14551] ? clear_bhb_loop+0x30/0x80 [ 551.419226][T14551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 551.425107][T14551] RIP: 0033:0x7f1b367e3799 [ 551.429508][T14551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.449100][T14551] RSP: 002b:00007f1b34a1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.457504][T14551] RAX: ffffffffffffffda RBX: 00007f1b36a5d090 RCX: 00007f1b367e3799 [ 551.465464][T14551] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 551.473422][T14551] RBP: 00007f1b34a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 551.481378][T14551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.489334][T14551] R13: 00007f1b36a5d128 R14: 00007f1b36a5d090 R15: 00007ffd2b29c658 [ 551.497307][T14551] [ 551.594055][ T4225] team0 (unregistering): Port device geneve1 removed [ 551.641097][ T4225] team0 (unregistering): Port device team_slave_1 removed [ 551.654152][ T4225] team0 (unregistering): Port device team_slave_0 removed [ 551.743921][T14506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.758152][T14506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.793447][T14506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.805949][T14506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.808216][ T4298] Bluetooth: hci4: command 0x0409 tx timeout [ 551.820125][T14506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.849492][T14506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.930726][T14506] device hsr_slave_0 entered promiscuous mode [ 551.937571][T14506] device hsr_slave_1 entered promiscuous mode [ 551.951752][T14506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.960704][T14506] Cannot create hsr debugfs directory [ 552.093685][T14506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.160115][T14506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.237058][T14506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.277494][T14572] netlink: 'syz.0.3042': attribute type 1 has an invalid length. [ 552.298450][ T5768] Bluetooth: hci2: command 0x0419 tx timeout [ 552.468034][T14506] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.483502][T14506] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.507363][T14506] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 552.529009][T14506] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 552.654682][T14506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.690737][T14506] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.743819][T14582] netlink: 'syz.0.3046': attribute type 10 has an invalid length. [ 552.773237][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 552.782164][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 552.807270][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 552.831281][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 552.848709][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.855792][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.864773][T14586] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3047'. [ 552.866382][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 552.890481][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 552.915491][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.922664][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.932452][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 552.974726][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 552.988821][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.037148][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.057945][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.067320][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.086046][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.109610][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 553.128280][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.148282][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 553.156911][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.178743][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 553.265918][T14595] FAULT_INJECTION: forcing a failure. [ 553.265918][T14595] name failslab, interval 1, probability 0, space 0, times 0 [ 553.318458][T14595] CPU: 0 PID: 14595 Comm: syz.0.3051 Not tainted syzkaller #0 [ 553.325966][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.336033][T14595] Call Trace: [ 553.339326][T14595] [ 553.342270][T14595] dump_stack_lvl+0x188/0x250 [ 553.346952][T14595] ? show_regs_print_info+0x20/0x20 [ 553.352162][T14595] ? load_image+0x400/0x400 [ 553.356685][T14595] ? __might_sleep+0xf0/0xf0 [ 553.361287][T14595] ? __lock_acquire+0x7d10/0x7d10 [ 553.366314][T14595] ? __local_bh_enable_ip+0x136/0x1c0 [ 553.371695][T14595] should_fail+0x38c/0x4c0 [ 553.376137][T14595] should_failslab+0x5/0x20 [ 553.380657][T14595] slab_pre_alloc_hook+0x51/0xc0 [ 553.385615][T14595] kmem_cache_alloc_node_trace+0x4a/0x300 [ 553.391342][T14595] ? __get_vm_area_node+0x119/0x2d0 [ 553.396561][T14595] __get_vm_area_node+0x119/0x2d0 [ 553.401599][T14595] __vmalloc_node_range+0xef/0x8b0 [ 553.406718][T14595] ? netlink_sendmsg+0x5ec/0xbe0 [ 553.411652][T14595] ? netlink_data_ready+0x10/0x10 [ 553.416688][T14595] ? netlink_sendmsg+0x5ec/0xbe0 [ 553.421628][T14595] vmalloc+0x75/0x80 [ 553.425540][T14595] ? netlink_sendmsg+0x5ec/0xbe0 [ 553.430485][T14595] netlink_sendmsg+0x5ec/0xbe0 [ 553.435268][T14595] ? netlink_getsockopt+0x570/0x570 [ 553.440488][T14595] ? aa_sock_msg_perm+0x94/0x150 [ 553.445453][T14595] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 553.450750][T14595] ? security_socket_sendmsg+0x7c/0xa0 [ 553.456211][T14595] ? netlink_getsockopt+0x570/0x570 [ 553.461407][T14595] ____sys_sendmsg+0x5b7/0x8f0 [ 553.466182][T14595] ? __sys_sendmsg_sock+0x30/0x30 [ 553.471219][T14595] ? import_iovec+0x6f/0xa0 [ 553.475733][T14595] ___sys_sendmsg+0x236/0x2e0 [ 553.480422][T14595] ? __sys_sendmsg+0x2a0/0x2a0 [ 553.485208][T14595] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 553.491827][T14595] __se_sys_sendmsg+0x1af/0x290 [ 553.496686][T14595] ? __x64_sys_sendmsg+0x80/0x80 [ 553.501632][T14595] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 553.507776][T14595] ? lockdep_hardirqs_on+0x94/0x140 [ 553.512992][T14595] do_syscall_64+0x4c/0xa0 [ 553.517428][T14595] ? clear_bhb_loop+0x30/0x80 [ 553.522110][T14595] ? clear_bhb_loop+0x30/0x80 [ 553.526801][T14595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 553.532704][T14595] RIP: 0033:0x7f8650aa7799 [ 553.537132][T14595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.556745][T14595] RSP: 002b:00007f864ed01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.565167][T14595] RAX: ffffffffffffffda RBX: 00007f8650d20fa0 RCX: 00007f8650aa7799 [ 553.573147][T14595] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 553.581180][T14595] RBP: 00007f864ed01090 R08: 0000000000000000 R09: 0000000000000000 [ 553.589170][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.597151][T14595] R13: 00007f8650d21038 R14: 00007f8650d20fa0 R15: 00007ffe1edf50a8 [ 553.605150][T14595] [ 553.625487][T14595] syz.0.3051: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 553.693640][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 553.702431][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 553.716079][T14506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.747377][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 553.766794][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 553.840412][T14595] CPU: 1 PID: 14595 Comm: syz.0.3051 Not tainted syzkaller #0 [ 553.843467][T14506] device veth0_vlan entered promiscuous mode [ 553.847935][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.847950][T14595] Call Trace: [ 553.847956][T14595] [ 553.847963][T14595] dump_stack_lvl+0x188/0x250 [ 553.847987][T14595] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 553.874387][T14506] device veth1_vlan entered promiscuous mode [ 553.874874][T14595] ? show_regs_print_info+0x20/0x20 [ 553.888175][ T5768] Bluetooth: hci4: command 0x041b tx timeout [ 553.892154][T14595] ? load_image+0x400/0x400 [ 553.902628][T14595] warn_alloc+0x243/0x320 [ 553.906982][T14595] ? zone_watermark_ok_safe+0x240/0x240 [ 553.912549][T14595] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 553.918540][T14595] ? __get_vm_area_node+0x119/0x2d0 [ 553.923763][T14595] __vmalloc_node_range+0x2b1/0x8b0 [ 553.928975][T14595] ? netlink_data_ready+0x10/0x10 [ 553.934095][T14595] ? netlink_sendmsg+0x5ec/0xbe0 [ 553.935532][T14506] device veth0_macvtap entered promiscuous mode [ 553.939043][T14595] vmalloc+0x75/0x80 [ 553.939069][T14595] ? netlink_sendmsg+0x5ec/0xbe0 [ 553.939085][T14595] netlink_sendmsg+0x5ec/0xbe0 [ 553.939110][T14595] ? netlink_getsockopt+0x570/0x570 [ 553.957412][T14506] device veth1_macvtap entered promiscuous mode [ 553.958850][T14595] ? aa_sock_msg_perm+0x94/0x150 [ 553.958877][T14595] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 553.958895][T14595] ? security_socket_sendmsg+0x7c/0xa0 [ 553.986286][T14595] ? netlink_getsockopt+0x570/0x570 [ 553.991495][T14595] ____sys_sendmsg+0x5b7/0x8f0 [ 553.996292][T14595] ? __sys_sendmsg_sock+0x30/0x30 [ 553.997524][T14506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.001332][T14595] ? import_iovec+0x6f/0xa0 [ 554.001362][T14595] ___sys_sendmsg+0x236/0x2e0 [ 554.001391][T14595] ? __sys_sendmsg+0x2a0/0x2a0 [ 554.001419][T14595] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 554.001465][T14595] __se_sys_sendmsg+0x1af/0x290 [ 554.001489][T14595] ? __x64_sys_sendmsg+0x80/0x80 [ 554.024031][T14506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.025775][T14595] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 554.041772][T14506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.042113][T14595] ? lockdep_hardirqs_on+0x94/0x140 [ 554.073433][T14595] do_syscall_64+0x4c/0xa0 [ 554.077867][T14595] ? clear_bhb_loop+0x30/0x80 [ 554.082557][T14595] ? clear_bhb_loop+0x30/0x80 [ 554.085728][T14506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.087244][T14595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 554.087271][T14595] RIP: 0033:0x7f8650aa7799 [ 554.105135][T14506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.107332][T14595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.107349][T14595] RSP: 002b:00007f864ed01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.107369][T14595] RAX: ffffffffffffffda RBX: 00007f8650d20fa0 RCX: 00007f8650aa7799 [ 554.129891][T14506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.137356][T14595] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 554.137374][T14595] RBP: 00007f864ed01090 R08: 0000000000000000 R09: 0000000000000000 [ 554.137386][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.137397][T14595] R13: 00007f8650d21038 R14: 00007f8650d20fa0 R15: 00007ffe1edf50a8 [ 554.137425][T14595] [ 554.158020][T14506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.210429][T14595] Mem-Info: [ 554.215627][T14595] active_anon:276 inactive_anon:19058 isolated_anon:0 [ 554.215627][T14595] active_file:24164 inactive_file:36437 isolated_file:0 [ 554.215627][T14595] unevictable:768 dirty:412 writeback:0 [ 554.215627][T14595] slab_reclaimable:21741 slab_unreclaimable:99091 [ 554.215627][T14595] mapped:30073 shmem:1630 pagetables:625 bounce:0 [ 554.215627][T14595] kernel_misc_reclaimable:0 [ 554.215627][T14595] free:1350063 free_pcp:11421 free_cma:0 [ 554.235498][T14506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.267145][T14595] Node 0 active_anon:1072kB inactive_anon:75724kB active_file:96456kB inactive_file:145748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120292kB dirty:1648kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11460kB pagetables:2500kB all_unreclaimable? no [ 554.304422][T14595] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 554.317706][T14506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.338572][T14595] Node 0 [ 554.344623][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 554.355469][T14595] DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 554.357714][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 554.390611][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 554.399088][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 554.407339][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 554.416556][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 554.419147][T14595] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 554.425933][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 554.438214][T14595] Node 0 DMA32 free:1465600kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1072kB inactive_anon:75724kB active_file:96456kB inactive_file:145748kB unevictable:1536kB writepending:1648kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:41664kB local_pcp:21396kB free_cma:0kB [ 554.438630][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 554.481436][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 554.485115][T14595] lowmem_reserve[]: 0 0 0 0 0 [ 554.507933][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 554.515957][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 554.524048][T14595] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 554.526406][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 554.565733][T14506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.578867][T14506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.593728][T14506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.598196][T14595] lowmem_reserve[]: 0 [ 554.604222][T14506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.622500][T14506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.633582][T14506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.643794][T14595] 0 0 0 0 [ 554.647001][T14595] Node 1 Normal free:3918596kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4608kB local_pcp:0kB free_cma:0kB [ 554.650858][T14506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.695394][T14595] lowmem_reserve[]: 0 0 0 0 0 [ 554.701070][T14595] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 554.702488][T14506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.714754][T14595] Node 0 [ 554.726137][T14506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.732101][T14595] DMA32: [ 554.739830][T14506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.741576][T14506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.777028][T14506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.789542][T14506] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.798505][T14595] 1152*4kB (ME) 517*8kB (UME) 203*16kB (UME) 502*32kB (UME) 776*64kB (UME) 304*128kB (UME) 117*256kB (UME) 147*512kB (UM) 87*1024kB (UM) 28*2048kB (UME) 268*4096kB (UM) = 1466008kB [ 554.803340][T14506] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.833263][T14506] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.885201][T14595] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 554.910952][T14595] Node 1 Normal: 245*4kB (UME) 34*8kB (UME) 24*16kB (UME) 163*32kB (UME) 61*64kB (UME) 26*128kB (UE) 16*256kB (UME) 2*512kB (U) 2*1024kB (UE) 1*2048kB (M) 951*4096kB (M) = 3918596kB [ 554.919722][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 554.945705][T14595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 554.949600][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 554.955576][T14595] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 554.982885][T14595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 554.994874][T14617] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3054'. [ 555.022118][T14595] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 555.055496][T14595] 62231 total pagecache pages [ 555.083496][T14595] 0 pages in swap cache [ 555.094070][T14595] Swap cache stats: add 59, delete 59, find 7/17 [ 555.100894][T14622] netlink: 'syz.4.3056': attribute type 1 has an invalid length. [ 555.108158][T14595] Free swap = 124728kB [ 555.118229][T14595] Total swap = 124996kB [ 555.125548][T14616] device wg2 entered promiscuous mode [ 555.127926][T14595] 2097051 pages RAM [ 555.146908][T14595] 0 pages HighMem/MovableOnly [ 555.159376][T14595] 411490 pages reserved [ 555.163694][T14595] 0 pages cma reserved [ 555.290807][T14617] ieee80211 phy86: Failed to add default virtual iface [ 555.382548][T14449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.403086][T14449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.431979][T14627] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 555.445244][T14449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.453549][T14449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.461778][T14627] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 555.470013][T14627] netlink: 'syz.4.3057': attribute type 11 has an invalid length. [ 555.478234][T14627] netlink: 198172 bytes leftover after parsing attributes in process `syz.4.3057'. [ 555.535175][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 555.553293][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 555.861308][T14644] netlink: 'syz.1.3063': attribute type 10 has an invalid length. [ 555.920174][T14645] team0: Device wg1 is of different type [ 555.969208][ T5760] Bluetooth: hci4: command 0x040f tx timeout [ 556.088607][T14653] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3065'. [ 556.169689][T14657] validate_nla: 1 callbacks suppressed [ 556.169708][T14657] netlink: 'syz.4.3066': attribute type 1 has an invalid length. [ 556.688549][T14684] netlink: 'syz.1.3077': attribute type 10 has an invalid length. [ 556.752491][T14684] team0: Device wg1 is of different type [ 556.753708][T14691] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3073'. [ 556.861697][T14693] netlink: 'syz.3.3080': attribute type 1 has an invalid length. [ 557.366729][T14715] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3088'. [ 557.493146][T14715] can: request_module (can-proto-0) failed. [ 557.607009][T14723] netlink: 'syz.2.3092': attribute type 10 has an invalid length. [ 557.670378][T14727] netlink: 'syz.2.3093': attribute type 10 has an invalid length. [ 557.735241][T14729] netlink: 'syz.2.3094': attribute type 1 has an invalid length. [ 557.769013][ T4225] device hsr_slave_0 left promiscuous mode [ 557.779051][ T4225] device hsr_slave_1 left promiscuous mode [ 557.786670][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.799433][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.829465][ T4225] device bridge_slave_0 left promiscuous mode [ 557.835695][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.869841][ T4225] device veth1_macvtap left promiscuous mode [ 557.875935][ T4225] device veth0_macvtap left promiscuous mode [ 557.882903][ T4225] device veth1_vlan left promiscuous mode [ 557.908951][ T4225] device veth0_vlan left promiscuous mode [ 558.047029][ T4225] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 558.052977][ T5768] Bluetooth: hci4: command 0x0419 tx timeout [ 558.156250][ T4225] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 558.175580][ T4225] team0 (unregistering): Port device team_slave_1 removed [ 558.196744][ T4225] team0 (unregistering): Port device team_slave_0 removed [ 558.212630][ T4225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.235125][ T4225] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 558.296643][ T4225] bond0 (unregistering): Released all slaves [ 558.354886][T14739] netlink: 'syz.0.3096': attribute type 4 has an invalid length. [ 558.364970][T14739] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3096'. [ 558.389138][T14739] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 558.685792][T14765] netlink: 'syz.0.3106': attribute type 10 has an invalid length. [ 558.707395][T14765] team0: Device wg1 is of different type [ 558.856691][T14770] netlink: 'syz.3.3109': attribute type 10 has an invalid length. [ 558.904882][T14770] team0: Device wg1 is of different type [ 558.986143][T14771] netlink: 'syz.2.3108': attribute type 1 has an invalid length. [ 559.214014][T14785] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3114'. [ 559.284097][T14785] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 559.311420][T14788] team0: Device wg1 is of different type [ 560.444735][T14827] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3131'. [ 560.634065][T14839] team0: Device wg1 is of different type [ 560.919141][T14853] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3138'. [ 561.092730][T14862] netlink: 201660 bytes leftover after parsing attributes in process `syz.1.3141'. [ 561.354639][T14876] validate_nla: 10 callbacks suppressed [ 561.354656][T14876] netlink: 'syz.1.3148': attribute type 21 has an invalid length. [ 561.422234][T14877] netlink: 'syz.0.3147': attribute type 4 has an invalid length. [ 561.458751][T14877] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3147'. [ 561.475272][T14877] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 561.505458][T14881] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3149'. [ 561.608534][T14885] netlink: 'syz.0.3151': attribute type 1 has an invalid length. [ 561.706830][T14888] netlink: 'syz.3.3152': attribute type 10 has an invalid length. [ 561.754960][T14888] team0: Device wg1 is of different type [ 561.822411][T14894] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3155'. [ 561.984462][T14903] netlink: 'syz.0.3160': attribute type 21 has an invalid length. [ 562.087587][T14910] netlink: 200636 bytes leftover after parsing attributes in process `syz.3.3161'. [ 562.236919][T14924] netlink: 'syz.1.3164': attribute type 29 has an invalid length. [ 562.257040][T14912] netlink: 'syz.4.3162': attribute type 4 has an invalid length. [ 562.272860][T14912] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3162'. [ 562.297038][T14912] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 562.366787][T14924] netlink: 'syz.1.3164': attribute type 29 has an invalid length. [ 562.387293][T14927] netlink: 'syz.1.3164': attribute type 29 has an invalid length. [ 562.398157][T14925] netlink: 'syz.0.3166': attribute type 1 has an invalid length. [ 562.598814][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 562.680828][T14938] team0: Device wg1 is of different type [ 562.787339][T14937] team0: Device wg1 is of different type [ 562.946665][T14950] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3175'. [ 563.010273][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.016646][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.126047][T14953] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3176'. [ 563.176492][T14962] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3179'. [ 563.361761][T14957] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3177'. [ 563.819431][T14985] team0: Device wg1 is of different type [ 564.036997][T14994] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.