last executing test programs: 34.455275681s ago: executing program 0 (id=8110): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="fa30d5dedfc6ff19dedbd96b93f4ce16486baa598fd8be200cdcd0278e0f1b90e3f1c2c03af99daccff77063937881439dcbb0366247690b96e3defbff53a94fbd87480b9f82bbfe9badd3647eb6df422f1024f8ab6746bb92008c5af1a119373109f4a4049dfb6cd9467583a6df25ea50e8588dbf129347f4ddfac83406003aedccf6f69827fb6eccc425da042a15630cf18a678ac3077ee198be8225bca9248a7cfb662c0c29b8c0", 0xa9}, {&(0x7f0000000200)="cf035d56629ddb8d38f03472ca6adc905230e3ea56405e726e7c7cfec98f9948dc11fa7bd6c5721117c0c7c7d9015d029bea42", 0x33}, {&(0x7f0000000240)="9984b401779ba690639943b0e99c552ee2c93c0112a4c61d6585ca898e11ac0deba1004998e94b20bde67ae60720bd815e079a5aa88e30e856e864609f6586aa586b53529c4b97a2ed508ebb0d6af927db21983100fc58b1742eac360713fff00760c5445b5a1b891fd939202727d9803cd047045ec6a587e7c13fab903f27674fef83dc87f5cc726b083726e116a0ce6a31eb8e7eeeea51be2078ec93fc5698fb7fb3", 0xa3}], 0x3}, 0x800) 26.679605835s ago: executing program 0 (id=8130): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa21, 0x0, 0x498a, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x10000000000, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) (fail_nth: 8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff6fea, 0x0, 0x0, 0x0, 0x7}, @generic={0x62, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000009c0000009c000000050000000800000003000013040000000f00000000000000010000800700000001000000050000000200000010010000050000000000000003000084010000000800000001000000060000000c00000001000000000000000e00000003000000010000000300000000000011030000000100000001000000110200000005000000070000000000001101000000070000000f0000000000001201000000005f2e3000"], &(0x7f0000000780)=""/191, 0xb9, 0xbf, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000d8ece2e5b0bb524b60fca5ed0818d409ec0c3e17a28676488c3622c63fd5d4cdecce0ec6d180d5d1f4b0fb09ab3e1c920c26dac49ebc01d36a2cd1723cca826c5c5786547ff757ff3fdfb67b6fed66d82434620eba07353aaeadc8439112f2b6227b7631ec74ae77ae3ce7c18900c7aaa0e87f60176204fd8b3563a23041806a2ed531e31d407fc0e857bcebd716d6e39d2b1ab2c03c7990ba8c6fb7b6fd4019292b366101ab32bbd0356caae1f5f23e2ede49455e190704f0311b", @ANYRES32=0x1, @ANYBLOB="ffffff7f008000"/18, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="01000000000000000200"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 25.09810098s ago: executing program 0 (id=8134): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="3c00000000000000000000e707000000552900000002070da574ace24a24d6c02bc530000a36f741e989f19b77050c0abce4b1f363009a6e5700000000000000"], 0x40}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40010040) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0xdb, 0x0, 0xfffffffffffffffc, 0xa000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x15990, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, r0, 0x0) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000200)}, {&(0x7f0000000500)="2d24af644792f9f8a2a1ae61a333ea765c99823f4f51ebd2d6b8d0f1d11a6dc4cc9a8668a78622dce6aa7c16295c12109d1736ad4e1e686e2582ff9114b7b920caa952d4c1df480e191486c681443564", 0x50}, {&(0x7f0000000580)="b080823113b48a17a3caf2438df0a91c43d4339ea01b8decb47506c93daaaad3aba3780529907e0a63fb3301ec03f162722853c76f33beae530a5df9580830a87d09aac4baef215eef52805d8d1bc29d5252a18e96c081edf515836723ef71c6ed2e787996af9b8a3796b2b5ba3f1402812a8e6504d4d2f42d6acee7ee366a513c5b777c8ee86845019610131277ca67d0a2f2cf8030e70f0107016d7f7f2d20e2d643bc55998e88c9aff0214c8cfd504f43bc1bfa7882004c693a6b28c0e32ffb3d192273af79216bf5588aaf9513e89a6cf2ac72aaa45bcb0766b62782172e5522", 0xe2}, {&(0x7f0000000680)="5eb79289d08cc3c253ec1dc2a60e0ba8a23be6e7d1fa6e20e1991a3aae8ea4043b45a0bae9b7792ff46c2767e1046403c05c222399", 0x35}], 0x4, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}, 0x40040) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/154, 0xce, 0x9a, 0x1, 0x400}, 0x28) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'veth1_macvtap\x00', @multicast}) r7 = perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0x1, 0x4, 0x0, 0xc4, 0x0, 0x9, 0x18120, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20b, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x220, 0x3, 0x3, 0x3, 0x6, 0x4, 0xff4, 0x0, 0x7, 0x0, 0xe62}, 0xffffffffffffffff, 0xb, r0, 0x2) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000480)) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000200), 0x12) 24.302984038s ago: executing program 0 (id=8138): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(0x3) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c82000000000000000020000d0000000000005f00"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x8, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0x1001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r1, &(0x7f0000000340)="90db33ef", 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000300030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000009000000030000004f0c000001000000", @ANYBLOB], 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0x0) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) (fail_nth: 8) close(r6) 20.109534168s ago: executing program 2 (id=8144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4) write$cgroup_subtree(r3, &(0x7f0000002a00)=ANY=[@ANYBLOB="2b706572665f6576656e74202b637075202b637075736574202d667265657a6572202b6370756374202d6d656d6f727920006d656d6f7279202b64657669636573202b6e65745f7072696f20ff2931292137bdf27d4a2041a7ad7bbfd4df6d268b30e8484d0dae62946d09e79d5afad48efabf2feeb7eff8dba434afe75abebb"], 0x4e) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f00000028c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000027c0), 0x0, &(0x7f0000002880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x10002) 19.953875699s ago: executing program 4 (id=8145): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2004}, 0x109080, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0900000000000000000000000000000000000000567ee5e092f2a0178293f04416880af1cfd9a9cc4958d91cb2d7c574a24f528ba9d3c941343d328b8366e60f80fd8b9161374f7bd10a8b98cc8c0d7103e7edd75fff3ab93dde056bc889314e19b778", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0005000400142603600e1208001e0000000401a8000f00200010400400027c035c", 0x3e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000580)={r2}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032b00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2d6370752038229ebb41f327c1920860c09d09bd7cc8b95182b32ddae03e1c0b0757f657fb69ec9e9ec20605194810508fa187a44dde21a545d3592f7ba0432875ceaf849fcfd28d0121202080c107bc0f562038f7c324f56d9da033e48a40ec5b53477e3268b222fa5e8c8f"], 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 16.928481138s ago: executing program 4 (id=8148): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x0, 0x0, 0x9, 0x5, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10b0c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) 16.547296672s ago: executing program 0 (id=8150): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="3c00000000000000000000e707000000552900000002070da574ace24a24d6c02bc530000a36f741e989f19b77050c0abce4b1f363009a6e5700000000000000"], 0x40}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40010040) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0xdb, 0x0, 0xfffffffffffffffc, 0xa000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x15990, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, r0, 0x0) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000200)}, {&(0x7f0000000500)="2d24af644792f9f8a2a1ae61a333ea765c99823f4f51ebd2d6b8d0f1d11a6dc4cc9a8668a78622dce6aa7c16295c12109d1736ad4e1e686e2582ff9114b7b920caa952d4c1df480e191486c681443564", 0x50}, {&(0x7f0000000580)="b080823113b48a17a3caf2438df0a91c43d4339ea01b8decb47506c93daaaad3aba3780529907e0a63fb3301ec03f162722853c76f33beae530a5df9580830a87d09aac4baef215eef52805d8d1bc29d5252a18e96c081edf515836723ef71c6ed2e787996af9b8a3796b2b5ba3f1402812a8e6504d4d2f42d6acee7ee366a513c5b777c8ee86845019610131277ca67d0a2f2cf8030e70f0107016d7f7f2d20e2d643bc55998e88c9aff0214c8cfd504f43bc1bfa7882004c693a6b28c0e32ffb3d192273af79216bf5588aaf9513e89a6cf2ac72aaa45bcb0766b62782172e5522", 0xe2}, {&(0x7f0000000680)="5eb79289d08cc3c253ec1dc2a60e0ba8a23be6e7d1fa6e20e1991a3aae8ea4043b45a0bae9b7792ff46c2767e1046403c05c222399", 0x35}], 0x4, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}, 0x40040) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'veth1_macvtap\x00', @multicast}) r7 = perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0x1, 0x4, 0x0, 0xc4, 0x0, 0x9, 0x18120, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20b, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x220, 0x3, 0x3, 0x3, 0x6, 0x4, 0xff4, 0x0, 0x7, 0x0, 0xe62}, 0xffffffffffffffff, 0xb, r0, 0x2) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000480)) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000200), 0x12) 15.826244829s ago: executing program 4 (id=8152): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x73, 0x4, 0x3, 0x80, 0x0, 0x6, 0x10241, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x33bbd08, 0x2, @perf_config_ext={0x34000000000, 0x3}, 0x40, 0x0, 0x7, 0x2, 0x8, 0xc, 0x40, 0x0, 0xc8e, 0x0, 0x7ff}, 0x0, 0x7, r0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000400)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000700)=0x1) openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000088a85d", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.617847481s ago: executing program 0 (id=8154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4) write$cgroup_subtree(r3, &(0x7f0000002a00)=ANY=[@ANYBLOB="2b706572665f6576656e74202b637075202b637075736574202d667265657a6572202b6370756374202d6d656d6f727920006d656d6f7279202b64657669636573202b6e65745f7072696f20ff2931292137bdf27d4a2041a7ad7bbfd4df6d268b30e8484d0dae62946d09e79d5afad48efabf2feeb7eff8dba434afe75abebb"], 0x4e) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f00000028c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000027c0), 0x0, &(0x7f0000002880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x10002) 10.841747706s ago: executing program 2 (id=8161): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12120) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0xd832, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060365580023000000000000000000000000ac1414aa"], 0xfdef) 10.40159748s ago: executing program 2 (id=8164): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x101d0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0xf5}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) 10.357421401s ago: executing program 4 (id=8165): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ab1, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ab1, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x48004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) (async) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x13, &(0x7f0000000200), 0x4) openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000440), 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/mnt\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/mnt\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b70700000000000018010000202070c84ec73887202500000000002020207b1af8ff00000000bfa100965300000007010000f8ffffff"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) socket$kcm(0xa, 0x5, 0x0) 10.310363841s ago: executing program 3 (id=8166): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="3c00000000000000000000e707000000552900000002070da574ace24a24d6c02bc530000a36f741e989f19b77050c0abce4b1f363009a6e5700000000000000"], 0x40}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40010040) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0xdb, 0x0, 0xfffffffffffffffc, 0xa000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x15990, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, r0, 0x0) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000200)}, {&(0x7f0000000500)="2d24af644792f9f8a2a1ae61a333ea765c99823f4f51ebd2d6b8d0f1d11a6dc4cc9a8668a78622dce6aa7c16295c12109d1736ad4e1e686e2582ff9114b7b920caa952d4c1df480e191486c681443564", 0x50}, {&(0x7f0000000580)="b080823113b48a17a3caf2438df0a91c43d4339ea01b8decb47506c93daaaad3aba3780529907e0a63fb3301ec03f162722853c76f33beae530a5df9580830a87d09aac4baef215eef52805d8d1bc29d5252a18e96c081edf515836723ef71c6ed2e787996af9b8a3796b2b5ba3f1402812a8e6504d4d2f42d6acee7ee366a513c5b777c8ee86845019610131277ca67d0a2f2cf8030e70f0107016d7f7f2d20e2d643bc55998e88c9aff0214c8cfd504f43bc1bfa7882004c693a6b28c0e32ffb3d192273af79216bf5588aaf9513e89a6cf2ac72aaa45bcb0766b62782172e5522", 0xe2}, {&(0x7f0000000680)="5eb79289d08cc3c253ec1dc2a60e0ba8a23be6e7d1fa6e20e1991a3aae8ea4043b45a0bae9b7792ff46c2767e1046403c05c222399", 0x35}], 0x4, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}, 0x40040) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'veth1_macvtap\x00', @multicast}) r7 = perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0x1, 0x4, 0x0, 0xc4, 0x0, 0x9, 0x18120, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20b, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x220, 0x3, 0x3, 0x3, 0x6, 0x4, 0xff4, 0x0, 0x7, 0x0, 0xe62}, 0xffffffffffffffff, 0xb, r0, 0x2) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000480)) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000200), 0x12) 10.123308093s ago: executing program 2 (id=8167): sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000081) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0xd832, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060358650023000000000000000000000000ac1414aa"], 0xfdef) 9.820915446s ago: executing program 2 (id=8168): socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1e000000590000007b830000f8ffff", @ANYRES32=r0, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000400", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c0000001e0081054e81f782db020000071d080006007c09e8fe08a1", 0x1c}], 0x1}, 0x804) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2f, 0x2}, 0x2058, 0x5, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), 0x0, 0x2}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0xf}}, 0x80, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r3, 0x1, 0x10}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x4}, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) 9.241806122s ago: executing program 3 (id=8169): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="3c00000000000000000000e707000000552900000002070da574ace24a24d6c02bc530000a36f741e989f19b77050c0abce4b1f363009a6e5700000000000000"], 0x40}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40010040) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0xdb, 0x0, 0xfffffffffffffffc, 0xa000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x15990, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, r0, 0x0) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000200)}, {&(0x7f0000000500)="2d24af644792f9f8a2a1ae61a333ea765c99823f4f51ebd2d6b8d0f1d11a6dc4cc9a8668a78622dce6aa7c16295c12109d1736ad4e1e686e2582ff9114b7b920caa952d4c1df480e191486c681443564", 0x50}, {&(0x7f0000000580)="b080823113b48a17a3caf2438df0a91c43d4339ea01b8decb47506c93daaaad3aba3780529907e0a63fb3301ec03f162722853c76f33beae530a5df9580830a87d09aac4baef215eef52805d8d1bc29d5252a18e96c081edf515836723ef71c6ed2e787996af9b8a3796b2b5ba3f1402812a8e6504d4d2f42d6acee7ee366a513c5b777c8ee86845019610131277ca67d0a2f2cf8030e70f0107016d7f7f2d20e2d643bc55998e88c9aff0214c8cfd504f43bc1bfa7882004c693a6b28c0e32ffb3d192273af79216bf5588aaf9513e89a6cf2ac72aaa45bcb0766b62782172e5522", 0xe2}, {&(0x7f0000000680)="5eb79289d08cc3c253ec1dc2a60e0ba8a23be6e7d1fa6e20e1991a3aae8ea4043b45a0bae9b7792ff46c2767e1046403c05c222399", 0x35}], 0x4, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}, 0x40040) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/154, 0xce, 0x9a, 0x1, 0x400}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'veth1_macvtap\x00', @multicast}) r7 = perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0x1, 0x4, 0x0, 0xc4, 0x0, 0x9, 0x18120, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20b, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x220, 0x3, 0x3, 0x3, 0x6, 0x4, 0xff4, 0x0, 0x7, 0x0, 0xe62}, 0xffffffffffffffff, 0xb, r0, 0x2) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000480)) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000200), 0x12) 9.241401091s ago: executing program 2 (id=8170): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x5, 0x4, 0x4, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="180600000000000000000000000000001812000056d271a1a553745f527a3170364648c5a4b9faee3a4cd3bafaa11c00cb9f2d7bd3729679fbb72a5d01c9fc24b7669db24556c145bbfc94c2e1fb758976fbb86fddb6232cb103362a884805e04074b680b558f928eceb3e622093027b89e5eb44c4c71d4dad112d677759b46e7350738d1728aabae0c007b91a5efb1a0d8db1ddefbeaebfcc796a2650889a4c331e23277d8c95007b4afd", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f0000"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r5, 0x400454cd, 0x336) close(r5) 9.145675492s ago: executing program 4 (id=8171): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="3c00000000000000000000e707000000552900000002070da574ace24a24d6c02bc530000a36f741e989f19b77050c0abce4b1f363009a6e5700000000000000"], 0x40}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40010040) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0xdb, 0x0, 0xfffffffffffffffc, 0xa000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x15990, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, r0, 0x0) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000200)}, {&(0x7f0000000500)="2d24af644792f9f8a2a1ae61a333ea765c99823f4f51ebd2d6b8d0f1d11a6dc4cc9a8668a78622dce6aa7c16295c12109d1736ad4e1e686e2582ff9114b7b920caa952d4c1df480e191486c681443564", 0x50}, {&(0x7f0000000580)="b080823113b48a17a3caf2438df0a91c43d4339ea01b8decb47506c93daaaad3aba3780529907e0a63fb3301ec03f162722853c76f33beae530a5df9580830a87d09aac4baef215eef52805d8d1bc29d5252a18e96c081edf515836723ef71c6ed2e787996af9b8a3796b2b5ba3f1402812a8e6504d4d2f42d6acee7ee366a513c5b777c8ee86845019610131277ca67d0a2f2cf8030e70f0107016d7f7f2d20e2d643bc55998e88c9aff0214c8cfd504f43bc1bfa7882004c693a6b28c0e32ffb3d192273af79216bf5588aaf9513e89a6cf2ac72aaa45bcb0766b62782172e5522", 0xe2}, {&(0x7f0000000680)="5eb79289d08cc3c253ec1dc2a60e0ba8a23be6e7d1fa6e20e1991a3aae8ea4043b45a0bae9b7792ff46c2767e1046403c05c222399", 0x35}], 0x4, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}, 0x40040) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/154, 0xce, 0x9a, 0x1, 0x400}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'veth1_macvtap\x00', @multicast}) r7 = perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0x1, 0x4, 0x0, 0xc4, 0x0, 0x9, 0x18120, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20b, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x220, 0x3, 0x3, 0x3, 0x6, 0x4, 0xff4, 0x0, 0x7, 0x0, 0xe62}, 0xffffffffffffffff, 0xb, r0, 0x2) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000480)) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000200), 0x12) 8.574802838s ago: executing program 1 (id=8172): r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) socket$kcm(0x23, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000086850000002d000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000580)=""/245, 0x26, 0xf5, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00@\x00\x00\x00\x00'], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) recvmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f00000001c0)=""/75, 0x4b}], 0x4, &(0x7f00000000c0)=""/47, 0x2f}, 0x2000) 7.815940085s ago: executing program 3 (id=8173): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x73, 0x4, 0x3, 0x80, 0x0, 0x6, 0x10241, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x33bbd08, 0x2, @perf_config_ext={0x34000000000, 0x3}, 0x40, 0x0, 0x7, 0x2, 0x8, 0xc, 0x40, 0x0, 0xc8e, 0x0, 0x7ff}, 0x0, 0x7, r0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000400)=0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000088a85d", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.619211617s ago: executing program 4 (id=8174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x98}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2022) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000120091be"], 0xfe33) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x5, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000240000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000e0000009500000800000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x3, 0xfffffffe}, {0x16, 0xfc, 0x5, 0xffffffff}]}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="d8000000140081044e81f782db09b9040a1d08020a000000040000a118000200ff020000fff0000008000f0100810401a80016ea1f0008400803600cfab94dcf5c0461c10cf4d67f6f94007134cf6ee0800080e408e8d8ef075c010000005f73a54865f69b9b001fb791643a5ee40021146218a074d674539fc575fc4e92b3663bb745d6d930dfe1d9d322fe7c9fd6878e730d16a4683f5aeb4edbb57ad2c1ce1f6c3ed054be6d35565025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bff9aece0b42a9ecb", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r4, @ANYRES32], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) 4.495955247s ago: executing program 1 (id=8175): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x73, 0x4, 0x3, 0x80, 0x0, 0x6, 0x10241, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x33bbd08, 0x2, @perf_config_ext={0x34000000000, 0x3}, 0x40, 0x0, 0x7, 0x2, 0x8, 0xc, 0x40, 0x0, 0xc8e, 0x0, 0x7ff}, 0x0, 0x7, r0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000400)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000700)=0x1) openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000088a85d", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.353443478s ago: executing program 3 (id=8176): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd00100000000040007d007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r1}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex, 0x22, 0x0, 0x3, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x215, 0x3ff, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x6ebd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0401, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x20000000000, r4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x3b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 1.305792018s ago: executing program 1 (id=8177): socketpair(0xf, 0x3, 0x0, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000640)=@framed={{}, [@call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xd8, &(0x7f0000000400)=""/216}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000002b00)={&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000000180)="09ea0a15231cfde6ca979fd9f00405caad148140d6dcf54070ec0c07402524affa1782fce720eb672162150a4788a9cfd5bafb468236", 0x36}, {&(0x7f0000000200)="7ac95e58f6b7132def6e7e0ca6d2317ff4f80a14b2ecd5da8d7007fdee4561c4efc4b7", 0x23}, {&(0x7f0000000240)="a031a686d788e44311ac33ba32e778d33c6bb30e9c24c2f53f4100a3fbc3f7d92760cf2bbce8cb8a4c14caf1594b2bf5185db7dc18169dbeb28fc887b29c71b971302d0c8979e27076bbac833658183c75e1b6d459f990c1efa279abbe54d9e7c15b0433a1c98ab68accfaf8a52060b8caf35f35858fc407224679299d87f4d720b291c52432fa1ae074da68e3", 0x8d}, {&(0x7f0000000500)="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", 0xff}, {&(0x7f0000000600)}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="0919970ad8775dcf2b5791213e7eebb097e90772a5c40be65e43eb4bbfb97a51e2e0628154441a5083c43735cc78aedb4dfcf1efd517b98983326d3a48d0c99d6ed960c788278a8827e8ff309225d32cae9d1aabaeeae447d0bc55c403e452c3a4bfca75ba7700fb9a22d15f3d5b201d4a823b677f3207dc0d72e8fd6a90a91808b95569b25a8db576ef21e2c17265c33e533202501633853b5c457e2eeb5ff4e62c731b83c6f5a0034a48655fc1bcf4b169", 0xb2}, {&(0x7f0000002a40)="01108a3257463ce6", 0x8}], 0x8}, 0x20000010) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 1.185613029s ago: executing program 3 (id=8178): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="3c00000000000000000000e707000000552900000002070da574ace24a24d6c02bc530000a36f741e989f19b77050c0abce4b1f363009a6e5700000000000000"], 0x40}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40010040) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0xdb, 0x0, 0xfffffffffffffffc, 0xa000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x15990, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, r0, 0x0) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000200)}, {&(0x7f0000000500)="2d24af644792f9f8a2a1ae61a333ea765c99823f4f51ebd2d6b8d0f1d11a6dc4cc9a8668a78622dce6aa7c16295c12109d1736ad4e1e686e2582ff9114b7b920caa952d4c1df480e191486c681443564", 0x50}, {&(0x7f0000000580)="b080823113b48a17a3caf2438df0a91c43d4339ea01b8decb47506c93daaaad3aba3780529907e0a63fb3301ec03f162722853c76f33beae530a5df9580830a87d09aac4baef215eef52805d8d1bc29d5252a18e96c081edf515836723ef71c6ed2e787996af9b8a3796b2b5ba3f1402812a8e6504d4d2f42d6acee7ee366a513c5b777c8ee86845019610131277ca67d0a2f2cf8030e70f0107016d7f7f2d20e2d643bc55998e88c9aff0214c8cfd504f43bc1bfa7882004c693a6b28c0e32ffb3d192273af79216bf5588aaf9513e89a6cf2ac72aaa45bcb0766b62782172e5522", 0xe2}, {&(0x7f0000000680)="5eb79289d08cc3c253ec1dc2a60e0ba8a23be6e7d1fa6e20e1991a3aae8ea4043b45a0bae9b7792ff46c2767e1046403c05c222399", 0x35}], 0x4, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}, 0x40040) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/154, 0xce, 0x9a, 0x1, 0x400}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'veth1_macvtap\x00', @multicast}) r7 = perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0x1, 0x4, 0x0, 0xc4, 0x0, 0x9, 0x18120, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20b, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x220, 0x3, 0x3, 0x3, 0x6, 0x4, 0xff4, 0x0, 0x7, 0x0, 0xe62}, 0xffffffffffffffff, 0xb, r0, 0x2) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000480)) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000200), 0x12) 1.005060421s ago: executing program 1 (id=8179): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffefff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xf, &(0x7f0000000480)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x18}, 0x50) 525.742565ms ago: executing program 32 (id=8154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4) write$cgroup_subtree(r3, &(0x7f0000002a00)=ANY=[@ANYBLOB="2b706572665f6576656e74202b637075202b637075736574202d667265657a6572202b6370756374202d6d656d6f727920006d656d6f7279202b64657669636573202b6e65745f7072696f20ff2931292137bdf27d4a2041a7ad7bbfd4df6d268b30e8484d0dae62946d09e79d5afad48efabf2feeb7eff8dba434afe75abebb"], 0x4e) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f00000028c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000027c0), 0x0, &(0x7f0000002880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x10002) 470.858215ms ago: executing program 1 (id=8181): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xd, 0xce, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf93, 0x0, @perf_bp={&(0x7f0000000400), 0x8}, 0x10c002, 0xac5d, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="0218030002000000e4a17c45c8d360c9", 0x10}], 0x1}, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a4000140040000f5026010fab94d86fe00000000000094007134cf6ee08000a1e408e8d8ef52a98516277ce06bbace8017cbec4c2ea4b84065bc074d4f9f77e5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9eb8ec0000ccd40dd6e4edef3d93", 0xd8}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfdef) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, &(0x7f0000000000)=r4, 0x11) setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, &(0x7f0000000040)=r4, 0x4) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4000, r5}, 0x18) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000006c0)}, 0x0, 0xfb5, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfe33) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0xfffffffc}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 365.051677ms ago: executing program 3 (id=8182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="553d87000000120b", 0x0, 0x8, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) r1 = socket$kcm(0x15, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x1010}, 0xc000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES16], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc72380000000001000000fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000840)="8d03cab9cbe923f2ab882de54b", 0xd}], 0x2}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYRESDEC=r8], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="fb36831208ff3f154d6907de47c74e3c8fb98767ff4c5a097d31714dfa1caf1fe4b6035f8547244cd8679faedd8d581a32ce13ae40b73b8f19a9ff9aec6decbb63413eee66d21baebd4d2a24b7125e32816356146f96a1638b45b13cb059c3dc8410ba54eeaf4564fae00fa79d0c5cf5e59883829eb8216faa688fa03c1fdf52b50c3f0d02b20397c79246d5f797a0b0ec94b9"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) recvmsg$unix(r12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r11}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r15, 0x4) 0s ago: executing program 1 (id=8183): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000030000a69108a00000000000400000000000000950000000000000046a1106954caf9317ef0ec6cf5f9296f92e6d9fbaf8d628d5afd48ee755f33e7495dde895d9a2b8c8aa5ff9cafec3c01608c93122ee076b3b798618d6d6b6f391799a552c3a162939866b4767b8f113833ee26d6d2ad9ca26e9d26806cc4757f9660753259904f10096a64e155d3b392012db9c8211e6dc15c1e117ff7396fbe8cc4ecca198ef986ba4d4c54bab969528b49b60350e14a"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000041) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x241, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @private=0xa010100}}}], 0x20}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115000200fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r4, r3, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) kernel console output (not intermixed with test programs): fffffffffffffda RBX: 00007feb49815fa0 RCX: 00007feb4959cdd9 [ 1656.871128][T27980] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 000000000000000a [ 1656.879265][T27980] RBP: 00007feb4a407090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.887233][T27980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.895210][T27980] R13: 00007feb49816038 R14: 00007feb49815fa0 R15: 00007ffd13d1beb8 [ 1656.903196][T27980] [ 1656.912732][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 1656.937613][T27919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.961083][T27919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.977882][T27919] device bridge_slave_0 entered promiscuous mode [ 1657.046298][T27919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.066797][T27919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.103244][T27919] device bridge_slave_1 entered promiscuous mode [ 1657.109319][T27986] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:00f5:0023 with DS=0x31 [ 1657.305550][T27993] netlink: 'syz.2.7196': attribute type 2 has an invalid length. [ 1657.322477][T27919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.369119][T27993] device 7 entered promiscuous mode [ 1657.375000][T27996] netlink: 'syz.3.7195': attribute type 9 has an invalid length. [ 1657.384355][T27996] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.7195'. [ 1657.398785][T27919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.410640][T27999] netlink: 'syz.0.7198': attribute type 29 has an invalid length. [ 1657.452397][T27999] netlink: 'syz.0.7198': attribute type 3 has an invalid length. [ 1657.479641][T27999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7198'. [ 1657.604916][T27919] team0: Port device team_slave_0 added [ 1657.628605][T27919] team0: Port device team_slave_1 added [ 1657.745930][T28013] netlink: 'syz.4.7201': attribute type 3 has an invalid length. [ 1657.778706][T28013] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.7201'. [ 1657.798405][T27919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.819104][T27919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.901766][T27919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.943392][T28013] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7201'. [ 1657.990425][T27919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.015563][T27919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.101638][T27919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.160281][T28025] netlink: 'syz.3.7203': attribute type 10 has an invalid length. [ 1658.181821][T28025] bridge0: port 3(dummy0) entered disabled state [ 1658.188747][T28025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.197187][T28025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.277485][T28025] bridge0: port 3(dummy0) entered blocking state [ 1658.284237][T28025] bridge0: port 3(dummy0) entered forwarding state [ 1658.291580][T28025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.299071][T28025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1658.307085][T28025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.314848][T28025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.490171][T28025] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1658.738944][T28050] FAULT_INJECTION: forcing a failure. [ 1658.738944][T28050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1658.817583][T28050] CPU: 0 PID: 28050 Comm: syz.4.7209 Not tainted syzkaller #0 [ 1658.825094][T28050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1658.835165][T28050] Call Trace: [ 1658.838456][T28050] [ 1658.841398][T28050] dump_stack_lvl+0x188/0x24e [ 1658.846106][T28050] ? show_regs_print_info+0x12/0x12 [ 1658.851335][T28050] ? load_image+0x400/0x400 [ 1658.855868][T28050] ? __lock_acquire+0x7d10/0x7d10 [ 1658.860922][T28050] should_fail_ex+0x399/0x4d0 [ 1658.865631][T28050] _copy_from_user+0x2c/0x170 [ 1658.870329][T28050] ___sys_sendmsg+0x1c3/0x360 [ 1658.875041][T28050] ? __sys_sendmsg+0x290/0x290 [ 1658.879849][T28050] ? __lock_acquire+0x7d10/0x7d10 [ 1658.884926][T28050] __se_sys_sendmsg+0x1bb/0x2a0 [ 1658.889803][T28050] ? __x64_sys_sendmsg+0x80/0x80 [ 1658.894775][T28050] ? lockdep_hardirqs_on+0x94/0x140 [ 1658.899997][T28050] do_syscall_64+0x4c/0xa0 [ 1658.904434][T28050] ? clear_bhb_loop+0x60/0xb0 [ 1658.909133][T28050] ? clear_bhb_loop+0x60/0xb0 [ 1658.913831][T28050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1658.919743][T28050] RIP: 0033:0x7fd72f79cdd9 [ 1658.924172][T28050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1658.942127][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 1658.943774][T28050] RSP: 002b:00007fd7305e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1658.958438][T28050] RAX: ffffffffffffffda RBX: 00007fd72fa15fa0 RCX: 00007fd72f79cdd9 [ 1658.966430][T28050] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1658.974406][T28050] RBP: 00007fd7305e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1658.982372][T28050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.990348][T28050] R13: 00007fd72fa16038 R14: 00007fd72fa15fa0 R15: 00007ffef89322a8 [ 1658.998337][T28050] [ 1659.019386][T27919] device hsr_slave_0 entered promiscuous mode [ 1659.040864][T27919] device hsr_slave_1 entered promiscuous mode [ 1659.066751][T27919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1659.086629][T27919] Cannot create hsr debugfs directory [ 1659.134784][T28055] device 8 entered promiscuous mode [ 1659.404023][ T11] device hsr_slave_0 left promiscuous mode [ 1659.423427][ T11] device hsr_slave_1 left promiscuous mode [ 1659.461655][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.489747][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.503694][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.521071][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.531944][T28072] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.7216'. [ 1659.542692][ T11] device veth0_to_bridge left promiscuous mode [ 1659.548977][ T11] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1659.570298][ T11] bridge0: port 3(dummy0) entered disabled state [ 1659.579813][ T11] device bridge_slave_1 left promiscuous mode [ 1659.591131][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.604601][ T11] device bridge_slave_0 left promiscuous mode [ 1659.610929][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.637102][ T11] device veth1_macvtap left promiscuous mode [ 1659.643651][ T11] device veth0_macvtap left promiscuous mode [ 1660.002206][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1660.040100][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1660.078765][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1660.117718][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1660.319162][ T11] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1660.397103][ T11] bond0 (unregistering): Released all slaves [ 1660.462435][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 1660.490144][T28061] validate_nla: 2 callbacks suppressed [ 1660.490159][T28061] netlink: 'syz.4.7211': attribute type 9 has an invalid length. [ 1660.503667][T28061] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.7211'. [ 1660.513060][T28072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7216'. [ 1661.022188][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 1661.773701][T27919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1661.793317][T27919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1661.813277][T27919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1661.835207][T27919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1661.976314][T27919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1662.015859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1662.027420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1662.067756][T27919] 8021q: adding VLAN 0 to HW filter on device team0 [ 1662.078971][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1662.093567][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1662.124675][ T6979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.131848][ T6979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1662.177301][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1662.193888][T28130] FAULT_INJECTION: forcing a failure. [ 1662.193888][T28130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1662.214278][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1662.237187][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1662.250731][T28130] CPU: 1 PID: 28130 Comm: syz.3.7230 Not tainted syzkaller #0 [ 1662.258232][T28130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1662.263288][ T6979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.268281][T28130] Call Trace: [ 1662.268313][T28130] [ 1662.268322][T28130] dump_stack_lvl+0x188/0x24e [ 1662.275414][ T6979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1662.278593][T28130] ? show_regs_print_info+0x12/0x12 [ 1662.298582][T28130] ? load_image+0x400/0x400 [ 1662.299891][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1662.303089][T28130] ? __lock_acquire+0x7d10/0x7d10 [ 1662.303124][T28130] should_fail_ex+0x399/0x4d0 [ 1662.303147][T28130] _copy_from_user+0x2c/0x170 [ 1662.303172][T28130] kstrtouint_from_user+0xda/0x170 [ 1662.303199][T28130] ? kstrtol_from_user+0x190/0x190 [ 1662.303237][T28130] proc_fail_nth_write+0x8b/0x200 [ 1662.338641][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1662.340639][T28130] ? proc_fail_nth_read+0x220/0x220 [ 1662.340668][T28130] ? common_file_perm+0x171/0x1c0 [ 1662.358777][T28130] ? proc_fail_nth_read+0x220/0x220 [ 1662.363992][T28130] vfs_write+0x2e6/0xa30 [ 1662.368272][T28130] ? file_end_write+0x250/0x250 [ 1662.373144][T28130] ? __fget_files+0x28/0x4b0 [ 1662.377166][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1662.377735][T28130] ? __fget_files+0x28/0x4b0 [ 1662.388210][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1662.390178][T28130] ? __fget_files+0x43d/0x4b0 [ 1662.390213][T28130] ? __fdget_pos+0x2ae/0x360 [ 1662.405226][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1662.407211][T28130] ? ksys_write+0x71/0x250 [ 1662.407245][T28130] ksys_write+0x14c/0x250 [ 1662.417183][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1662.419509][T28130] ? __ia32_sys_read+0x80/0x80 [ 1662.419544][T28130] ? lockdep_hardirqs_on+0x94/0x140 [ 1662.424866][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1662.431627][T28130] do_syscall_64+0x4c/0xa0 [ 1662.431655][T28130] ? clear_bhb_loop+0x60/0xb0 [ 1662.431677][T28130] ? clear_bhb_loop+0x60/0xb0 [ 1662.437633][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1662.441599][T28130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1662.441627][T28130] RIP: 0033:0x7fe72235d60e [ 1662.459522][T27919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1662.463129][T28130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1662.463146][T28130] RSP: 002b:00007fe7232f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1662.463168][T28130] RAX: ffffffffffffffda RBX: 00007fe7232f76c0 RCX: 00007fe72235d60e [ 1662.463182][T28130] RDX: 0000000000000001 RSI: 00007fe7232f70a0 RDI: 0000000000000009 [ 1662.463194][T28130] RBP: 00007fe7232f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1662.472697][T27919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1662.476767][T28130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.476783][T28130] R13: 00007fe722616038 R14: 00007fe722615fa0 R15: 00007fff7ad9b9c8 [ 1662.476810][T28130] [ 1662.483314][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1662.583252][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1662.591915][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1662.605644][T28141] netlink: 'syz.0.7232': attribute type 3 has an invalid length. [ 1662.642753][T28141] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.7232'. [ 1662.675273][T28142] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7232'. [ 1663.102604][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 1663.246252][T28164] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7240'. [ 1663.496575][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1663.526921][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1663.559697][T27919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1663.670945][T28176] netlink: 'syz.0.7242': attribute type 21 has an invalid length. [ 1663.721733][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1663.740171][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1663.787535][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1663.801376][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1663.823303][T27919] device veth0_vlan entered promiscuous mode [ 1663.831343][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1663.856964][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1663.896402][T27919] device veth1_vlan entered promiscuous mode [ 1663.966317][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1663.984558][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1664.009984][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1664.036770][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1664.068807][T27919] device veth0_macvtap entered promiscuous mode [ 1664.103371][T27919] device veth1_macvtap entered promiscuous mode [ 1664.181678][T28199] netlink: 'syz.3.7248': attribute type 3 has an invalid length. [ 1664.198450][T27919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.215620][T27919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.215732][T28199] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.7248'. [ 1664.248695][T27919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.276300][T27919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.323081][T27919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1664.340603][T28202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7248'. [ 1664.386641][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1664.416261][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1664.425870][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1664.434996][T28211] FAULT_INJECTION: forcing a failure. [ 1664.434996][T28211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1664.450406][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1664.462354][T27919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.474622][T27919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.484879][T28211] CPU: 1 PID: 28211 Comm: syz.4.7251 Not tainted syzkaller #0 [ 1664.492364][T28211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1664.502431][T28211] Call Trace: [ 1664.505727][T28211] [ 1664.508685][T28211] dump_stack_lvl+0x188/0x24e [ 1664.513392][T28211] ? show_regs_print_info+0x12/0x12 [ 1664.518618][T28211] ? load_image+0x400/0x400 [ 1664.523146][T28211] ? __might_fault+0xa6/0x120 [ 1664.527849][T28211] should_fail_ex+0x399/0x4d0 [ 1664.532547][T28211] copyin+0x1b/0x120 [ 1664.536458][T28211] _copy_from_iter+0x447/0x1130 [ 1664.541337][T28211] ? copyout_mc+0x110/0x110 [ 1664.545862][T28211] ? __virt_addr_valid+0x188/0x540 [ 1664.550975][T28211] ? __virt_addr_valid+0x188/0x540 [ 1664.556087][T28211] ? __virt_addr_valid+0x465/0x540 [ 1664.561196][T28211] ? __check_object_size+0x500/0xa40 [ 1664.566481][T28211] netlink_sendmsg+0x755/0xbd0 [ 1664.571249][T28211] ? netlink_getsockopt+0x550/0x550 [ 1664.576445][T28211] ? aa_sock_msg_perm+0x94/0x150 [ 1664.581377][T28211] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1664.586653][T28211] ? security_socket_sendmsg+0x7c/0xa0 [ 1664.592116][T28211] ? netlink_getsockopt+0x550/0x550 [ 1664.597318][T28211] ____sys_sendmsg+0x5be/0x970 [ 1664.602090][T28211] ? __sys_sendmsg_sock+0x30/0x30 [ 1664.607110][T28211] ? __import_iovec+0x315/0x500 [ 1664.611958][T28211] ? import_iovec+0x6f/0xa0 [ 1664.616455][T28211] ___sys_sendmsg+0x2a2/0x360 [ 1664.621133][T28211] ? __sys_sendmsg+0x290/0x290 [ 1664.625908][T28211] ? __lock_acquire+0x7d10/0x7d10 [ 1664.630944][T28211] __se_sys_sendmsg+0x1bb/0x2a0 [ 1664.635795][T28211] ? __x64_sys_sendmsg+0x80/0x80 [ 1664.640837][T28211] ? lockdep_hardirqs_on+0x94/0x140 [ 1664.646034][T28211] do_syscall_64+0x4c/0xa0 [ 1664.650451][T28211] ? clear_bhb_loop+0x60/0xb0 [ 1664.655123][T28211] ? clear_bhb_loop+0x60/0xb0 [ 1664.659795][T28211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1664.665685][T28211] RIP: 0033:0x7fd72f79cdd9 [ 1664.670096][T28211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1664.689694][T28211] RSP: 002b:00007fd7305e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1664.698100][T28211] RAX: ffffffffffffffda RBX: 00007fd72fa15fa0 RCX: 00007fd72f79cdd9 [ 1664.706063][T28211] RDX: 0000000000040004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1664.714027][T28211] RBP: 00007fd7305e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1664.721989][T28211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1664.729954][T28211] R13: 00007fd72fa16038 R14: 00007fd72fa15fa0 R15: 00007ffef89322a8 [ 1664.737928][T28211] [ 1664.750684][T27919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.763810][T27919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.777617][T27919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1664.871452][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1664.891004][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1664.924134][T27919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.942415][T27919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.951555][T27919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.984237][T27919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.084995][T28225] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7254'. [ 1665.097010][T28224] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1665.105600][T28223] netlink: 'syz.3.7253': attribute type 2 has an invalid length. [ 1665.150892][T28229] netlink: 'syz.0.7252': attribute type 10 has an invalid length. [ 1665.171232][T28229] bridge0: port 4(team0) entered disabled state [ 1665.178643][T28229] bridge0: port 3(dummy0) entered disabled state [ 1665.185557][T28229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.194174][T28229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.254336][T28229] bridge0: port 4(team0) entered blocking state [ 1665.261143][T28229] bridge0: port 4(team0) entered forwarding state [ 1665.268518][T28229] bridge0: port 3(dummy0) entered blocking state [ 1665.275388][T28229] bridge0: port 3(dummy0) entered forwarding state [ 1665.282761][T28229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.290369][T28229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1665.298575][T28229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.306139][T28229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1665.330454][T28229] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1665.351677][T28223] device 2 entered promiscuous mode [ 1665.430537][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.456323][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.473929][ T6979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.481887][ T6979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.548779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1665.576868][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1665.637779][T28240] netlink: 'syz.2.7256': attribute type 2 has an invalid length. [ 1665.697276][T28240] device 9 entered promiscuous mode [ 1666.414578][T28273] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1666.454183][T28277] netlink: 'syz.1.7267': attribute type 2 has an invalid length. [ 1666.471905][T28278] netlink: 'syz.0.7266': attribute type 10 has an invalid length. [ 1666.828950][T28277] device 0 entered promiscuous mode [ 1666.990823][T28293] netlink: 'syz.3.7271': attribute type 2 has an invalid length. [ 1667.053698][T28293] device 3 entered promiscuous mode [ 1667.089811][T28297] netlink: 'syz.1.7272': attribute type 7 has an invalid length. [ 1667.191612][T28302] netlink: 'syz.4.7270': attribute type 10 has an invalid length. [ 1667.233911][T28302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.242718][T28302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.367874][T28302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.375437][T28302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1667.383645][T28302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.391158][T28302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.461168][T28302] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1667.993235][T28341] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1668.276845][T28350] netlink: 'syz.1.7285': attribute type 2 has an invalid length. [ 1668.311116][T28350] device 1 entered promiscuous mode [ 1668.454936][T28356] netlink: 'syz.1.7287': attribute type 10 has an invalid length. [ 1668.626307][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.632756][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.934622][T28359] netlink: 'syz.0.7288': attribute type 2 has an invalid length. [ 1668.951755][T28359] netlink: 'syz.0.7288': attribute type 8 has an invalid length. [ 1668.960908][T28359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7288'. [ 1669.092310][T28369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7291'. [ 1669.092521][T28368] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7291'. [ 1672.589407][T28401] FAULT_INJECTION: forcing a failure. [ 1672.589407][T28401] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.611911][T28404] validate_nla: 3 callbacks suppressed [ 1672.611927][T28404] netlink: 'syz.2.7298': attribute type 2 has an invalid length. [ 1672.647449][T28401] CPU: 0 PID: 28401 Comm: syz.4.7300 Not tainted syzkaller #0 [ 1672.654971][T28401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1672.662591][T28403] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1672.665024][T28401] Call Trace: [ 1672.665061][T28401] [ 1672.679788][T28401] dump_stack_lvl+0x188/0x24e [ 1672.683364][T28404] device 10 entered promiscuous mode [ 1672.684482][T28401] ? show_regs_print_info+0x12/0x12 [ 1672.684515][T28401] ? load_image+0x400/0x400 [ 1672.684541][T28401] ? __might_sleep+0xd0/0xd0 [ 1672.704194][T28401] ? __lock_acquire+0x7d10/0x7d10 [ 1672.709247][T28401] should_fail_ex+0x399/0x4d0 [ 1672.713946][T28401] should_failslab+0x5/0x20 [ 1672.718456][T28401] slab_pre_alloc_hook+0x59/0x310 [ 1672.723474][T28401] kmem_cache_alloc+0x56/0x2f0 [ 1672.728225][T28401] ? rxrpc_alloc_call+0x263/0xbf0 [ 1672.733252][T28401] ? rxrpc_alloc_call+0x7b/0xbf0 [ 1672.738198][T28401] rxrpc_alloc_call+0x263/0xbf0 [ 1672.743055][T28401] rxrpc_new_client_call+0xf3/0xd30 [ 1672.748263][T28401] ? rxrpc_do_sendmsg+0xab9/0x10c0 [ 1672.753382][T28401] ? do_raw_read_unlock+0x39/0x70 [ 1672.758417][T28401] rxrpc_do_sendmsg+0xab9/0x10c0 [ 1672.763361][T28401] ? rxrpc_process_local_events+0xa50/0xa50 [ 1672.769289][T28401] ? rxrpc_look_up_server_security+0x530/0x530 [ 1672.775480][T28401] ? rxrpc_sendmsg+0x467/0x890 [ 1672.780279][T28401] ? rxrpc_getsockopt+0x150/0x150 [ 1672.785321][T28401] ____sys_sendmsg+0x5be/0x970 [ 1672.790084][T28401] ? __sys_sendmsg_sock+0x30/0x30 [ 1672.795111][T28401] ? __import_iovec+0x315/0x500 [ 1672.799976][T28401] ? import_iovec+0x6f/0xa0 [ 1672.804484][T28401] ___sys_sendmsg+0x2a2/0x360 [ 1672.809181][T28401] ? lockdep_hardirqs_on+0x94/0x140 [ 1672.814410][T28401] ? __sys_sendmsg+0x290/0x290 [ 1672.819218][T28401] ? __lock_acquire+0x7d10/0x7d10 [ 1672.824290][T28401] __se_sys_sendmsg+0x1bb/0x2a0 [ 1672.829179][T28401] ? __x64_sys_sendmsg+0x80/0x80 [ 1672.834162][T28401] ? lockdep_hardirqs_on+0x94/0x140 [ 1672.839381][T28401] do_syscall_64+0x4c/0xa0 [ 1672.843806][T28401] ? clear_bhb_loop+0x60/0xb0 [ 1672.848499][T28401] ? clear_bhb_loop+0x60/0xb0 [ 1672.853195][T28401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1672.859090][T28401] RIP: 0033:0x7fd72f79cdd9 [ 1672.863502][T28401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.883104][T28401] RSP: 002b:00007fd7305e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1672.891512][T28401] RAX: ffffffffffffffda RBX: 00007fd72fa15fa0 RCX: 00007fd72f79cdd9 [ 1672.899481][T28401] RDX: 000000002004fc10 RSI: 0000200000000080 RDI: 0000000000000004 [ 1672.907450][T28401] RBP: 00007fd7305e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1672.915413][T28401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1672.923378][T28401] R13: 00007fd72fa16038 R14: 00007fd72fa15fa0 R15: 00007ffef89322a8 [ 1672.931359][T28401] [ 1673.370090][T28424] netlink: 'syz.0.7310': attribute type 10 has an invalid length. [ 1673.410127][T28424] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7310'. [ 1674.202211][T28444] netlink: 'syz.0.7316': attribute type 21 has an invalid length. [ 1674.210129][T28444] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7316'. [ 1674.238112][T28444] netlink: 'syz.0.7316': attribute type 4 has an invalid length. [ 1674.440818][T28451] netlink: 'syz.2.7317': attribute type 3 has an invalid length. [ 1674.512759][T28453] netlink: 'syz.1.7318': attribute type 3 has an invalid length. [ 1674.545926][T28453] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.7318'. [ 1674.572864][T28451] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.7317'. [ 1674.581970][T28457] FAULT_INJECTION: forcing a failure. [ 1674.581970][T28457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.632727][T28457] CPU: 0 PID: 28457 Comm: syz.3.7320 Not tainted syzkaller #0 [ 1674.640244][T28457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1674.650316][T28457] Call Trace: [ 1674.653607][T28457] [ 1674.656545][T28457] dump_stack_lvl+0x188/0x24e [ 1674.661248][T28457] ? show_regs_print_info+0x12/0x12 [ 1674.666465][T28457] ? load_image+0x400/0x400 [ 1674.670991][T28457] ? __lock_acquire+0x7d10/0x7d10 [ 1674.676031][T28457] ? perf_trace_lock+0xf8/0x390 [ 1674.680904][T28457] should_fail_ex+0x399/0x4d0 [ 1674.685600][T28457] _copy_from_user+0x2c/0x170 [ 1674.690302][T28457] ___sys_sendmsg+0x1c3/0x360 [ 1674.695020][T28457] ? __sys_sendmsg+0x290/0x290 [ 1674.699832][T28457] ? ktime_get_real_ts64+0x440/0x440 [ 1674.705156][T28457] __se_sys_sendmsg+0x1bb/0x2a0 [ 1674.710033][T28457] ? __x64_sys_sendmsg+0x80/0x80 [ 1674.715010][T28457] ? lockdep_hardirqs_on+0x94/0x140 [ 1674.720228][T28457] do_syscall_64+0x4c/0xa0 [ 1674.724666][T28457] ? clear_bhb_loop+0x60/0xb0 [ 1674.729360][T28457] ? clear_bhb_loop+0x60/0xb0 [ 1674.734057][T28457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1674.739976][T28457] RIP: 0033:0x7fe72239cdd9 [ 1674.744404][T28457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1674.764028][T28457] RSP: 002b:00007fe7232f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1674.772464][T28457] RAX: ffffffffffffffda RBX: 00007fe722615fa0 RCX: 00007fe72239cdd9 [ 1674.780464][T28457] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 1674.788460][T28457] RBP: 00007fe7232f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1674.796455][T28457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1674.804444][T28457] R13: 00007fe722616038 R14: 00007fe722615fa0 R15: 00007fff7ad9b9c8 [ 1674.812452][T28457] [ 1674.987074][T28463] netlink: 'syz.0.7321': attribute type 3 has an invalid length. [ 1675.017456][T28463] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.7321'. [ 1675.067050][T28465] netlink: 'syz.1.7322': attribute type 10 has an invalid length. [ 1675.088000][T28465] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7322'. [ 1679.230994][T28494] FAULT_INJECTION: forcing a failure. [ 1679.230994][T28494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1679.244833][T28494] CPU: 0 PID: 28494 Comm: syz.4.7331 Not tainted syzkaller #0 [ 1679.252319][T28494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1679.262408][T28494] Call Trace: [ 1679.265707][T28494] [ 1679.268649][T28494] dump_stack_lvl+0x188/0x24e [ 1679.273359][T28494] ? show_regs_print_info+0x12/0x12 [ 1679.278583][T28494] ? load_image+0x400/0x400 [ 1679.283109][T28494] ? __lock_acquire+0x7d10/0x7d10 [ 1679.288150][T28494] ? __fget_files+0x28/0x4b0 [ 1679.292767][T28494] should_fail_ex+0x399/0x4d0 [ 1679.297465][T28494] _copy_from_user+0x2c/0x170 [ 1679.302161][T28494] generic_map_update_batch+0x4a1/0x810 [ 1679.307738][T28494] ? rcu_read_unlock+0xa0/0xa0 [ 1679.312519][T28494] ? __fdget+0x17c/0x200 [ 1679.316779][T28494] ? rcu_read_unlock+0xa0/0xa0 [ 1679.321560][T28494] bpf_map_do_batch+0x466/0x600 [ 1679.326438][T28494] __sys_bpf+0x6f7/0x780 [ 1679.330704][T28494] ? bpf_link_show_fdinfo+0x380/0x380 [ 1679.336108][T28494] ? lock_chain_count+0x20/0x20 [ 1679.340985][T28494] __x64_sys_bpf+0x78/0x90 [ 1679.345415][T28494] do_syscall_64+0x4c/0xa0 [ 1679.349847][T28494] ? clear_bhb_loop+0x60/0xb0 [ 1679.354540][T28494] ? clear_bhb_loop+0x60/0xb0 [ 1679.359231][T28494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1679.365142][T28494] RIP: 0033:0x7fd72f79cdd9 [ 1679.369655][T28494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.389276][T28494] RSP: 002b:00007fd7305e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1679.397712][T28494] RAX: ffffffffffffffda RBX: 00007fd72fa15fa0 RCX: 00007fd72f79cdd9 [ 1679.405699][T28494] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1679.413678][T28494] RBP: 00007fd7305e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1679.421656][T28494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1679.429633][T28494] R13: 00007fd72fa16038 R14: 00007fd72fa15fa0 R15: 00007ffef89322a8 [ 1679.437633][T28494] [ 1679.622342][T28501] netlink: 'syz.4.7333': attribute type 2 has an invalid length. [ 1679.661140][T28501] device 4 entered promiscuous mode [ 1679.969590][T28513] netlink: 'syz.4.7337': attribute type 3 has an invalid length. [ 1679.978169][T28513] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.7337'. [ 1680.065456][T28519] FAULT_INJECTION: forcing a failure. [ 1680.065456][T28519] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.113772][T28519] CPU: 0 PID: 28519 Comm: syz.3.7340 Not tainted syzkaller #0 [ 1680.121289][T28519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1680.131362][T28519] Call Trace: [ 1680.134655][T28519] [ 1680.137600][T28519] dump_stack_lvl+0x188/0x24e [ 1680.142305][T28519] ? show_regs_print_info+0x12/0x12 [ 1680.147528][T28519] ? load_image+0x400/0x400 [ 1680.152055][T28519] ? __might_sleep+0xd0/0xd0 [ 1680.156661][T28519] ? __lock_acquire+0x7d10/0x7d10 [ 1680.161712][T28519] should_fail_ex+0x399/0x4d0 [ 1680.166400][T28519] should_failslab+0x5/0x20 [ 1680.170899][T28519] slab_pre_alloc_hook+0x59/0x310 [ 1680.175927][T28519] kmem_cache_alloc+0x56/0x2f0 [ 1680.180685][T28519] ? rxrpc_alloc_call+0x263/0xbf0 [ 1680.185706][T28519] ? rxrpc_alloc_call+0x7b/0xbf0 [ 1680.190634][T28519] rxrpc_alloc_call+0x263/0xbf0 [ 1680.195481][T28519] rxrpc_new_client_call+0xf3/0xd30 [ 1680.200672][T28519] ? rxrpc_do_sendmsg+0xab9/0x10c0 [ 1680.205787][T28519] ? do_raw_read_unlock+0x39/0x70 [ 1680.210809][T28519] rxrpc_do_sendmsg+0xab9/0x10c0 [ 1680.215743][T28519] ? rxrpc_process_local_events+0xa50/0xa50 [ 1680.221639][T28519] ? rxrpc_look_up_server_security+0x530/0x530 [ 1680.227804][T28519] ? rxrpc_sendmsg+0x467/0x890 [ 1680.232578][T28519] ? rxrpc_getsockopt+0x150/0x150 [ 1680.237599][T28519] ____sys_sendmsg+0x5be/0x970 [ 1680.242373][T28519] ? __sys_sendmsg_sock+0x30/0x30 [ 1680.247392][T28519] ? __import_iovec+0x315/0x500 [ 1680.252242][T28519] ? import_iovec+0x6f/0xa0 [ 1680.256743][T28519] ___sys_sendmsg+0x2a2/0x360 [ 1680.261420][T28519] ? __sys_sendmsg+0x290/0x290 [ 1680.266226][T28519] __se_sys_sendmsg+0x1bb/0x2a0 [ 1680.271074][T28519] ? __x64_sys_sendmsg+0x80/0x80 [ 1680.276051][T28519] ? lockdep_hardirqs_on+0x94/0x140 [ 1680.281245][T28519] do_syscall_64+0x4c/0xa0 [ 1680.285659][T28519] ? clear_bhb_loop+0x60/0xb0 [ 1680.290333][T28519] ? clear_bhb_loop+0x60/0xb0 [ 1680.295012][T28519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1680.300899][T28519] RIP: 0033:0x7fe72239cdd9 [ 1680.305311][T28519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1680.324908][T28519] RSP: 002b:00007fe7232f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1680.333318][T28519] RAX: ffffffffffffffda RBX: 00007fe722615fa0 RCX: 00007fe72239cdd9 [ 1680.341286][T28519] RDX: 000000002004fc10 RSI: 0000200000000080 RDI: 0000000000000006 [ 1680.349251][T28519] RBP: 00007fe7232f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.357212][T28519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1680.365178][T28519] R13: 00007fe722616038 R14: 00007fe722615fa0 R15: 00007fff7ad9b9c8 [ 1680.373155][T28519] [ 1680.971751][T28544] netlink: 'syz.2.7348': attribute type 2 has an invalid length. [ 1680.985796][T28544] device 11 entered promiscuous mode [ 1681.118991][T28547] netlink: 'syz.2.7349': attribute type 10 has an invalid length. [ 1681.127481][T28547] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7349'. [ 1684.144794][T28550] FAULT_INJECTION: forcing a failure. [ 1684.144794][T28550] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.157542][T28550] CPU: 0 PID: 28550 Comm: syz.2.7350 Not tainted syzkaller #0 [ 1684.165031][T28550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1684.175108][T28550] Call Trace: [ 1684.178394][T28550] [ 1684.181335][T28550] dump_stack_lvl+0x188/0x24e [ 1684.186040][T28550] ? show_regs_print_info+0x12/0x12 [ 1684.191253][T28550] ? load_image+0x400/0x400 [ 1684.195777][T28550] ? rt6_nlmsg_size+0xcc/0x490 [ 1684.200572][T28550] should_fail_ex+0x399/0x4d0 [ 1684.205270][T28550] should_failslab+0x5/0x20 [ 1684.209776][T28550] slab_pre_alloc_hook+0x59/0x310 [ 1684.214838][T28550] kmem_cache_alloc_node+0x5a/0x320 [ 1684.220071][T28550] ? __alloc_skb+0xfc/0x7e0 [ 1684.224604][T28550] __alloc_skb+0xfc/0x7e0 [ 1684.228950][T28550] ? verify_lock_unused+0x140/0x140 [ 1684.234172][T28550] inet6_rt_notify+0xb0/0x240 [ 1684.238880][T28550] fib6_del+0x10b4/0x1530 [ 1684.243267][T28550] ? fib6_locate_1+0x6c0/0x6c0 [ 1684.248044][T28550] ? do_raw_spin_lock+0x128/0x2f0 [ 1684.253082][T28550] ? __rwlock_init+0x140/0x140 [ 1684.257860][T28550] ? __lock_acquire+0x7d10/0x7d10 [ 1684.262902][T28550] ? __ip6_del_rt+0x8c/0x150 [ 1684.267512][T28550] __ip6_del_rt+0x97/0x150 [ 1684.271950][T28550] ip6_route_del+0x1342/0x14f0 [ 1684.276726][T28550] ? trace_contention_end+0x5f/0x170 [ 1684.282025][T28550] ? ip6_route_del+0xdf/0x14f0 [ 1684.287009][T28550] ? ipv6_route_ioctl+0x31e/0x500 [ 1684.292058][T28550] ? mutex_lock_nested+0x10/0x10 [ 1684.297013][T28550] ? ipv6_route_ioctl+0x500/0x500 [ 1684.302055][T28550] ? apparmor_capable+0x12c/0x190 [ 1684.307100][T28550] ? l3mdev_fib_table_by_index+0x30/0x2c0 [ 1684.312827][T28550] ? l3mdev_fib_table_by_index+0x30/0x2c0 [ 1684.318573][T28550] ipv6_route_ioctl+0x385/0x500 [ 1684.323453][T28550] ? rt6_purge_dflt_routers+0xb10/0xb10 [ 1684.329089][T28550] ? __might_fault+0xa6/0x120 [ 1684.333776][T28550] ? __might_fault+0xc2/0x120 [ 1684.338463][T28550] ? __might_fault+0xa6/0x120 [ 1684.343169][T28550] inet6_ioctl+0x207/0x280 [ 1684.347610][T28550] ? __kmem_cache_free+0xb6/0x1f0 [ 1684.352647][T28550] ? inet6_getname+0x640/0x640 [ 1684.357421][T28550] ? tomoyo_path_number_perm+0x205/0x650 [ 1684.363078][T28550] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1684.368570][T28550] sock_do_ioctl+0xfb/0x320 [ 1684.373093][T28550] ? sock_show_fdinfo+0xb0/0xb0 [ 1684.377992][T28550] sock_ioctl+0x4d2/0x710 [ 1684.382338][T28550] ? sock_poll+0x410/0x410 [ 1684.386785][T28550] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1684.391731][T28550] ? security_file_ioctl+0x7c/0xa0 [ 1684.396855][T28550] ? sock_poll+0x410/0x410 [ 1684.401278][T28550] __se_sys_ioctl+0xfa/0x170 [ 1684.405888][T28550] do_syscall_64+0x4c/0xa0 [ 1684.410318][T28550] ? clear_bhb_loop+0x60/0xb0 [ 1684.415006][T28550] ? clear_bhb_loop+0x60/0xb0 [ 1684.419696][T28550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1684.425597][T28550] RIP: 0033:0x7f5142f9cdd9 [ 1684.430020][T28550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1684.449631][T28550] RSP: 002b:00007f5143df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1684.458057][T28550] RAX: ffffffffffffffda RBX: 00007f5143215fa0 RCX: 00007f5142f9cdd9 [ 1684.466036][T28550] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000005 [ 1684.474015][T28550] RBP: 00007f5143df7090 R08: 0000000000000000 R09: 0000000000000000 [ 1684.481988][T28550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1684.489969][T28550] R13: 00007f5143216038 R14: 00007f5143215fa0 R15: 00007fff24c15438 [ 1684.497986][T28550] [ 1684.750652][T28558] netlink: 'syz.0.7353': attribute type 3 has an invalid length. [ 1684.774618][T28558] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.7353'. [ 1684.930401][T28570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.939818][T28570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.981725][T28566] netlink: 'syz.1.7357': attribute type 2 has an invalid length. [ 1685.111921][T28573] netlink: 'syz.0.7359': attribute type 2 has an invalid length. [ 1685.178600][T28573] device 6 entered promiscuous mode [ 1686.627748][T28612] tap0: tun_chr_ioctl cmd 2147767517 [ 1686.646336][T28615] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7368'. [ 1686.660936][T28615] device hsr_slave_0 left promiscuous mode [ 1686.691896][T28615] device hsr_slave_1 left promiscuous mode [ 1686.945871][T28621] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1690.099582][T28639] FAULT_INJECTION: forcing a failure. [ 1690.099582][T28639] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.117103][T28639] CPU: 0 PID: 28639 Comm: syz.2.7379 Not tainted syzkaller #0 [ 1690.124599][T28639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1690.134669][T28639] Call Trace: [ 1690.137962][T28639] [ 1690.140902][T28639] dump_stack_lvl+0x188/0x24e [ 1690.145604][T28639] ? show_regs_print_info+0x12/0x12 [ 1690.150810][T28639] ? load_image+0x400/0x400 [ 1690.155316][T28639] ? __might_sleep+0xd0/0xd0 [ 1690.159900][T28639] ? __lock_acquire+0x7d10/0x7d10 [ 1690.164926][T28639] should_fail_ex+0x399/0x4d0 [ 1690.169601][T28639] should_failslab+0x5/0x20 [ 1690.174098][T28639] slab_pre_alloc_hook+0x59/0x310 [ 1690.179122][T28639] ? ip6_setup_cork+0x50d/0xfe0 [ 1690.183973][T28639] __kmem_cache_alloc_node+0x4f/0x260 [ 1690.189343][T28639] ? ip6_setup_cork+0x50d/0xfe0 [ 1690.194197][T28639] __kmalloc_node_track_caller+0x9e/0x230 [ 1690.199920][T28639] kmemdup+0x27/0x60 [ 1690.203817][T28639] ip6_setup_cork+0x50d/0xfe0 [ 1690.208522][T28639] ip6_append_data+0x29e/0x3e0 [ 1690.213287][T28639] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1690.218134][T28639] l2tp_ip6_sendmsg+0x1208/0x1670 [ 1690.223167][T28639] ? l2tp_ip6_destroy_sock+0x50/0x50 [ 1690.228463][T28639] ? aa_af_perm+0x340/0x340 [ 1690.232964][T28639] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1690.239383][T28639] ? sock_rps_record_flow+0x19/0x3f0 [ 1690.244662][T28639] ? inet_sendmsg+0x78/0x2f0 [ 1690.249353][T28639] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1690.254642][T28639] ? security_socket_sendmsg+0x7c/0xa0 [ 1690.260103][T28639] ? inet_send_prepare+0x260/0x260 [ 1690.265208][T28639] ____sys_sendmsg+0x5be/0x970 [ 1690.269981][T28639] ? __sys_sendmsg_sock+0x30/0x30 [ 1690.275004][T28639] ? __import_iovec+0x315/0x500 [ 1690.279852][T28639] ? import_iovec+0x6f/0xa0 [ 1690.284352][T28639] ___sys_sendmsg+0x2a2/0x360 [ 1690.289037][T28639] ? __sys_sendmsg+0x290/0x290 [ 1690.293815][T28639] ? __lock_acquire+0x7d10/0x7d10 [ 1690.298854][T28639] __se_sys_sendmsg+0x1bb/0x2a0 [ 1690.303707][T28639] ? __x64_sys_sendmsg+0x80/0x80 [ 1690.308656][T28639] ? lockdep_hardirqs_on+0x94/0x140 [ 1690.313853][T28639] do_syscall_64+0x4c/0xa0 [ 1690.318269][T28639] ? clear_bhb_loop+0x60/0xb0 [ 1690.322943][T28639] ? clear_bhb_loop+0x60/0xb0 [ 1690.327617][T28639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1690.333506][T28639] RIP: 0033:0x7f5142f9cdd9 [ 1690.337917][T28639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.357515][T28639] RSP: 002b:00007f5143df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1690.365922][T28639] RAX: ffffffffffffffda RBX: 00007f5143215fa0 RCX: 00007f5142f9cdd9 [ 1690.373886][T28639] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000004 [ 1690.381859][T28639] RBP: 00007f5143df7090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.389820][T28639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.397784][T28639] R13: 00007f5143216038 R14: 00007f5143215fa0 R15: 00007fff24c15438 [ 1690.405761][T28639] [ 1690.436428][T28648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7381'. [ 1690.608022][T28654] tipc: Started in network mode [ 1690.621283][T28654] tipc: Node identity 9215a268, cluster identity 4711 [ 1690.632845][T28654] tipc: Node number set to 2450891368 [ 1690.819264][T28663] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7386'. [ 1690.840695][T28663] device hsr_slave_0 left promiscuous mode [ 1690.856745][T28663] device hsr_slave_1 left promiscuous mode [ 1691.020339][T28668] netlink: 'syz.1.7388': attribute type 2 has an invalid length. [ 1691.047005][T28668] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7388'. [ 1691.381176][T28675] netlink: 'syz.3.7391': attribute type 2 has an invalid length. [ 1691.407050][T28675] device 4 entered promiscuous mode [ 1691.572883][T28681] netlink: 'syz.0.7394': attribute type 1 has an invalid length. [ 1691.589297][T28681] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.7394'. [ 1691.626307][T28681] netlink: 'syz.0.7394': attribute type 29 has an invalid length. [ 1691.660837][T28681] netlink: 'syz.0.7394': attribute type 29 has an invalid length. [ 1692.606535][T28711] netlink: 'syz.0.7401': attribute type 2 has an invalid length. [ 1692.646709][T28711] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7401'. [ 1692.895648][T28711] bridge0: port 3(dummy0) entered disabled state [ 1693.064640][T28711] bridge0: port 3(dummy0) entered disabled state [ 1693.140840][T28730] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1693.296306][T28732] netlink: 'syz.2.7407': attribute type 2 has an invalid length. [ 1693.314840][T28732] device 12 entered promiscuous mode [ 1693.347067][T28734] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7408'. [ 1693.372698][T28734] bridge_slave_1: default FDB implementation only supports local addresses [ 1693.525647][T28739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7408'. [ 1693.785151][T28749] netlink: 'syz.0.7414': attribute type 3 has an invalid length. [ 1693.851611][T28749] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.7414'. [ 1694.162394][T28764] netlink: 'syz.1.7417': attribute type 29 has an invalid length. [ 1694.259168][T28764] netlink: 'syz.1.7417': attribute type 29 has an invalid length. [ 1694.274954][T28760] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.7417'. [ 1694.427423][T28770] FAULT_INJECTION: forcing a failure. [ 1694.427423][T28770] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.452443][T28770] CPU: 0 PID: 28770 Comm: syz.0.7421 Not tainted syzkaller #0 [ 1694.459957][T28770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1694.470022][T28770] Call Trace: [ 1694.473311][T28770] [ 1694.476325][T28770] dump_stack_lvl+0x188/0x24e [ 1694.481019][T28770] ? show_regs_print_info+0x12/0x12 [ 1694.486254][T28770] ? load_image+0x400/0x400 [ 1694.490765][T28770] ? __might_sleep+0xd0/0xd0 [ 1694.495351][T28770] ? __lock_acquire+0x7d10/0x7d10 [ 1694.500380][T28770] should_fail_ex+0x399/0x4d0 [ 1694.505156][T28770] should_failslab+0x5/0x20 [ 1694.509654][T28770] slab_pre_alloc_hook+0x59/0x310 [ 1694.514681][T28770] ? preempt_count_add+0xb5/0x190 [ 1694.519703][T28770] kmem_cache_alloc_node+0x5a/0x320 [ 1694.524899][T28770] ? __alloc_skb+0xfc/0x7e0 [ 1694.529404][T28770] __alloc_skb+0xfc/0x7e0 [ 1694.533737][T28770] alloc_skb_with_frags+0xa7/0x710 [ 1694.538842][T28770] ? mark_lock+0x94/0x320 [ 1694.543178][T28770] ? __lock_acquire+0x12f4/0x7d10 [ 1694.548206][T28770] sock_alloc_send_pskb+0x87f/0x9a0 [ 1694.553416][T28770] ? sock_kzfree_s+0x50/0x50 [ 1694.558009][T28770] ? __kasan_kmalloc+0x8e/0xa0 [ 1694.562777][T28770] ? verify_lock_unused+0x140/0x140 [ 1694.567974][T28770] ? ip6_append_data+0x29e/0x3e0 [ 1694.572917][T28770] ? l2tp_ip6_sendmsg+0x1208/0x1670 [ 1694.578111][T28770] ? ____sys_sendmsg+0x5be/0x970 [ 1694.583048][T28770] ? ___sys_sendmsg+0x2a2/0x360 [ 1694.587899][T28770] ? __se_sys_sendmsg+0x1bb/0x2a0 [ 1694.592923][T28770] ? do_syscall_64+0x4c/0xa0 [ 1694.597518][T28770] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1694.603596][T28770] __ip6_append_data+0x2ae9/0x3d40 [ 1694.608729][T28770] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1694.613673][T28770] ? ip6_mtu+0x79/0x3f0 [ 1694.617824][T28770] ? ip6_setup_cork+0xfe0/0xfe0 [ 1694.622675][T28770] ? ip6_setup_cork+0xa30/0xfe0 [ 1694.627527][T28770] ip6_append_data+0x1ea/0x3e0 [ 1694.632293][T28770] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1694.637144][T28770] l2tp_ip6_sendmsg+0x1208/0x1670 [ 1694.642177][T28770] ? l2tp_ip6_destroy_sock+0x50/0x50 [ 1694.647474][T28770] ? aa_af_perm+0x340/0x340 [ 1694.652062][T28770] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1694.658479][T28770] ? sock_rps_record_flow+0x19/0x3f0 [ 1694.663759][T28770] ? inet_sendmsg+0x78/0x2f0 [ 1694.668340][T28770] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1694.673620][T28770] ? security_socket_sendmsg+0x7c/0xa0 [ 1694.679081][T28770] ? inet_send_prepare+0x260/0x260 [ 1694.684183][T28770] ____sys_sendmsg+0x5be/0x970 [ 1694.688953][T28770] ? __sys_sendmsg_sock+0x30/0x30 [ 1694.693980][T28770] ? __import_iovec+0x315/0x500 [ 1694.698839][T28770] ? import_iovec+0x6f/0xa0 [ 1694.703338][T28770] ___sys_sendmsg+0x2a2/0x360 [ 1694.708028][T28770] ? __sys_sendmsg+0x290/0x290 [ 1694.712805][T28770] ? ktime_get_real_ts64+0x440/0x440 [ 1694.718104][T28770] __se_sys_sendmsg+0x1bb/0x2a0 [ 1694.722960][T28770] ? __x64_sys_sendmsg+0x80/0x80 [ 1694.727911][T28770] ? lockdep_hardirqs_on+0x94/0x140 [ 1694.733146][T28770] do_syscall_64+0x4c/0xa0 [ 1694.737648][T28770] ? clear_bhb_loop+0x60/0xb0 [ 1694.742324][T28770] ? clear_bhb_loop+0x60/0xb0 [ 1694.747005][T28770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1694.752894][T28770] RIP: 0033:0x7feb4959cdd9 [ 1694.757305][T28770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1694.776907][T28770] RSP: 002b:00007feb4a407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1694.785318][T28770] RAX: ffffffffffffffda RBX: 00007feb49815fa0 RCX: 00007feb4959cdd9 [ 1694.793288][T28770] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000004 [ 1694.801254][T28770] RBP: 00007feb4a407090 R08: 0000000000000000 R09: 0000000000000000 [ 1694.809220][T28770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1694.817186][T28770] R13: 00007feb49816038 R14: 00007feb49815fa0 R15: 00007ffd13d1beb8 [ 1694.825163][T28770] [ 1694.879204][T28774] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.7420'. [ 1694.924687][T28778] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7424'. [ 1695.121152][T28784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7426'. [ 1695.265808][T28774] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7420'. [ 1695.374897][T28792] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.7429'. [ 1696.119133][T28809] validate_nla: 6 callbacks suppressed [ 1696.119151][T28809] netlink: 'syz.2.7434': attribute type 2 has an invalid length. [ 1696.185722][T28805] netlink: 'syz.4.7435': attribute type 1 has an invalid length. [ 1696.216344][T28807] netlink: 'syz.3.7433': attribute type 2 has an invalid length. [ 1696.235115][T28809] device 13 entered promiscuous mode [ 1696.257645][T28805] netlink: 'syz.4.7435': attribute type 29 has an invalid length. [ 1696.350728][T28807] device 0 entered promiscuous mode [ 1696.363613][T28805] netlink: 'syz.4.7435': attribute type 29 has an invalid length. [ 1696.461441][T28815] FAULT_INJECTION: forcing a failure. [ 1696.461441][T28815] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.500222][T28815] CPU: 1 PID: 28815 Comm: syz.1.7437 Not tainted syzkaller #0 [ 1696.507736][T28815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1696.517810][T28815] Call Trace: [ 1696.521104][T28815] [ 1696.524058][T28815] dump_stack_lvl+0x188/0x24e [ 1696.528766][T28815] ? show_regs_print_info+0x12/0x12 [ 1696.533991][T28815] ? load_image+0x400/0x400 [ 1696.538524][T28815] ? __might_sleep+0xd0/0xd0 [ 1696.543132][T28815] ? __lock_acquire+0x7d10/0x7d10 [ 1696.548177][T28815] ? __lock_acquire+0x7d10/0x7d10 [ 1696.553236][T28815] should_fail_ex+0x399/0x4d0 [ 1696.557933][T28815] should_failslab+0x5/0x20 [ 1696.562450][T28815] slab_pre_alloc_hook+0x59/0x310 [ 1696.567498][T28815] ? ip6_setup_cork+0x1d7/0xfe0 [ 1696.572368][T28815] __kmem_cache_alloc_node+0x4f/0x260 [ 1696.577757][T28815] ? ip6_setup_cork+0x1d7/0xfe0 [ 1696.582628][T28815] kmalloc_trace+0x26/0xe0 [ 1696.587076][T28815] ip6_setup_cork+0x1d7/0xfe0 [ 1696.591794][T28815] ip6_append_data+0x29e/0x3e0 [ 1696.596588][T28815] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1696.601470][T28815] l2tp_ip6_sendmsg+0x1208/0x1670 [ 1696.606526][T28815] ? l2tp_ip6_destroy_sock+0x50/0x50 [ 1696.611851][T28815] ? lockdep_hardirqs_on+0x94/0x140 [ 1696.617084][T28815] ? sock_rps_record_flow+0x19/0x3f0 [ 1696.622387][T28815] ? inet_sendmsg+0x78/0x2f0 [ 1696.626996][T28815] ? inet_send_prepare+0x260/0x260 [ 1696.632123][T28815] ____sys_sendmsg+0x5be/0x970 [ 1696.636904][T28815] ? __sys_sendmsg_sock+0x30/0x30 [ 1696.641930][T28815] ? __import_iovec+0x315/0x500 [ 1696.646780][T28815] ? import_iovec+0x6f/0xa0 [ 1696.651276][T28815] ___sys_sendmsg+0x2a2/0x360 [ 1696.655951][T28815] ? __sys_sendmsg+0x290/0x290 [ 1696.660789][T28815] ? __lock_acquire+0x7d10/0x7d10 [ 1696.665825][T28815] __se_sys_sendmsg+0x1bb/0x2a0 [ 1696.670672][T28815] ? ct_nmi_exit+0x145/0x1c0 [ 1696.675248][T28815] ? __x64_sys_sendmsg+0x80/0x80 [ 1696.680212][T28815] ? lockdep_hardirqs_on+0x94/0x140 [ 1696.685429][T28815] do_syscall_64+0x4c/0xa0 [ 1696.689873][T28815] ? clear_bhb_loop+0x60/0xb0 [ 1696.694568][T28815] ? clear_bhb_loop+0x60/0xb0 [ 1696.699267][T28815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1696.705180][T28815] RIP: 0033:0x7f49f859cdd9 [ 1696.709609][T28815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1696.729221][T28815] RSP: 002b:00007f49f949f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1696.737625][T28815] RAX: ffffffffffffffda RBX: 00007f49f8815fa0 RCX: 00007f49f859cdd9 [ 1696.745587][T28815] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000004 [ 1696.753559][T28815] RBP: 00007f49f949f090 R08: 0000000000000000 R09: 0000000000000000 [ 1696.761537][T28815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.769494][T28815] R13: 00007f49f8816038 R14: 00007f49f8815fa0 R15: 00007ffdf7c45a28 [ 1696.777461][T28815] [ 1697.085085][T28834] netlink: 'syz.0.7444': attribute type 3 has an invalid length. [ 1697.110237][T28834] netlink: 'syz.0.7444': attribute type 1 has an invalid length. [ 1697.378391][T28834] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1697.699297][T28847] __nla_validate_parse: 4 callbacks suppressed [ 1697.699315][T28847] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7446'. [ 1698.627806][T28882] netlink: 'syz.1.7458': attribute type 27 has an invalid length. [ 1699.088648][T28890] netlink: 'syz.2.7461': attribute type 3 has an invalid length. [ 1699.120628][T28890] netlink: 'syz.2.7461': attribute type 1 has an invalid length. [ 1699.132226][T28890] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.7461'. [ 1699.317193][T28893] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7461'. [ 1699.336336][T28893] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1699.866725][T28901] device 1 entered promiscuous mode [ 1700.057600][T28916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7473'. [ 1700.080456][T28916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7473'. [ 1700.324904][T28926] device 7 entered promiscuous mode [ 1700.330320][T28927] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1700.557396][T28938] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7480'. [ 1700.652301][T28942] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.7481'. [ 1700.916954][T28946] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7483'. [ 1701.502996][T28956] validate_nla: 8 callbacks suppressed [ 1701.503015][T28956] netlink: 'syz.1.7486': attribute type 1 has an invalid length. [ 1701.742238][T28956] netlink: 'syz.1.7486': attribute type 1 has an invalid length. [ 1701.750030][T28956] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.7486'. [ 1702.490020][T28964] netlink: 'syz.2.7488': attribute type 2 has an invalid length. [ 1702.589716][T28964] device 0 entered promiscuous mode [ 1702.876995][T28967] netlink: 'syz.4.7491': attribute type 21 has an invalid length. [ 1702.918736][T28967] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1702.981473][T28970] FAULT_INJECTION: forcing a failure. [ 1702.981473][T28970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1703.023041][T28970] CPU: 0 PID: 28970 Comm: syz.0.7490 Not tainted syzkaller #0 [ 1703.030565][T28970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1703.040642][T28970] Call Trace: [ 1703.043938][T28970] [ 1703.046877][T28970] dump_stack_lvl+0x188/0x24e [ 1703.051579][T28970] ? show_regs_print_info+0x12/0x12 [ 1703.056802][T28970] ? load_image+0x400/0x400 [ 1703.061330][T28970] ? __lock_acquire+0x7d10/0x7d10 [ 1703.066379][T28970] should_fail_ex+0x399/0x4d0 [ 1703.071070][T28970] _copy_from_user+0x2c/0x170 [ 1703.075775][T28970] __sys_bpf+0x2ea/0x780 [ 1703.080034][T28970] ? bpf_link_show_fdinfo+0x380/0x380 [ 1703.085441][T28970] ? lock_chain_count+0x20/0x20 [ 1703.090324][T28970] __x64_sys_bpf+0x78/0x90 [ 1703.094759][T28970] do_syscall_64+0x4c/0xa0 [ 1703.099184][T28970] ? clear_bhb_loop+0x60/0xb0 [ 1703.103857][T28970] ? clear_bhb_loop+0x60/0xb0 [ 1703.108525][T28970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.114423][T28970] RIP: 0033:0x7feb4959cdd9 [ 1703.118863][T28970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.138490][T28970] RSP: 002b:00007feb4a407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1703.146927][T28970] RAX: ffffffffffffffda RBX: 00007feb49815fa0 RCX: 00007feb4959cdd9 [ 1703.154915][T28970] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 1703.162899][T28970] RBP: 00007feb4a407090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.170888][T28970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.178878][T28970] R13: 00007feb49816038 R14: 00007feb49815fa0 R15: 00007ffd13d1beb8 [ 1703.186881][T28970] [ 1703.286185][T28983] netlink: 'syz.1.7494': attribute type 2 has an invalid length. [ 1703.373257][T28983] device 2 entered promiscuous mode [ 1703.441078][T28989] tipc: Started in network mode [ 1703.451863][T28989] tipc: Node identity 9215a268, cluster identity 4711 [ 1703.465328][T28989] tipc: Node number set to 2450891368 [ 1703.529693][T28991] netlink: 'syz.4.7495': attribute type 3 has an invalid length. [ 1703.573803][T28991] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7495'. [ 1703.588729][T28991] netlink: 'syz.4.7495': attribute type 3 has an invalid length. [ 1703.648508][T28991] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7495'. [ 1703.674891][T28996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7498'. [ 1703.873020][T28994] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7497'. [ 1703.957290][T28994] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1703.982394][T28994] CPU: 0 PID: 28994 Comm: syz.2.7497 Not tainted syzkaller #0 [ 1703.989915][T28994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1703.999972][T28994] Call Trace: [ 1704.003257][T28994] [ 1704.006190][T28994] dump_stack_lvl+0x188/0x24e [ 1704.010882][T28994] ? show_regs_print_info+0x12/0x12 [ 1704.016088][T28994] ? load_image+0x400/0x400 [ 1704.020600][T28994] sysfs_warn_dup+0x8a/0xa0 [ 1704.025104][T28994] sysfs_do_create_link_sd+0xc0/0x110 [ 1704.030479][T28994] device_add+0x7ed/0xfb0 [ 1704.034817][T28994] wiphy_register+0x1d9f/0x2ac0 [ 1704.039685][T28994] ? cfg80211_event_work+0x40/0x40 [ 1704.044802][T28994] ? minstrel_ht_alloc+0x894/0xa20 [ 1704.049927][T28994] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1704.055998][T28994] ieee80211_register_hw+0x2d00/0x39f0 [ 1704.061474][T28994] ? ieee80211_register_hw+0xf21/0x39f0 [ 1704.067025][T28994] ? ieee80211_register_hw+0xf21/0x39f0 [ 1704.072581][T28994] ? ieee80211_tasklet_handler+0x20/0x20 [ 1704.078227][T28994] ? memset+0x1e/0x40 [ 1704.082227][T28994] ? __hrtimer_init+0x186/0x270 [ 1704.087092][T28994] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1704.092833][T28994] hwsim_new_radio_nl+0xafa/0xce0 [ 1704.097876][T28994] genl_family_rcv_msg_doit+0x22a/0x330 [ 1704.103427][T28994] ? end_current_label_crit_section+0x170/0x170 [ 1704.109670][T28994] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1704.115567][T28994] ? bpf_lsm_capable+0x5/0x10 [ 1704.120241][T28994] ? security_capable+0x85/0xb0 [ 1704.125097][T28994] genl_rcv_msg+0x604/0x790 [ 1704.129596][T28994] ? rcu_is_watching+0x11/0xa0 [ 1704.134374][T28994] ? genl_bind+0x360/0x360 [ 1704.138796][T28994] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1704.145141][T28994] ? netlink_rcv_skb+0x81/0x450 [ 1704.150002][T28994] netlink_rcv_skb+0x1fb/0x450 [ 1704.154769][T28994] ? genl_bind+0x360/0x360 [ 1704.159183][T28994] ? netlink_ack+0x1170/0x1170 [ 1704.163961][T28994] ? down_read+0x1a8/0x2d0 [ 1704.168388][T28994] genl_rcv+0x24/0x40 [ 1704.172382][T28994] netlink_unicast+0x74d/0x8d0 [ 1704.177170][T28994] netlink_sendmsg+0x8ad/0xbd0 [ 1704.181948][T28994] ? netlink_getsockopt+0x550/0x550 [ 1704.187154][T28994] ? aa_sock_msg_perm+0x94/0x150 [ 1704.192093][T28994] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1704.197379][T28994] ? security_socket_sendmsg+0x7c/0xa0 [ 1704.202857][T28994] ? netlink_getsockopt+0x550/0x550 [ 1704.208062][T28994] ____sys_sendmsg+0x5be/0x970 [ 1704.212840][T28994] ? __sys_sendmsg_sock+0x30/0x30 [ 1704.217863][T28994] ? __import_iovec+0x315/0x500 [ 1704.222718][T28994] ? import_iovec+0x6f/0xa0 [ 1704.227224][T28994] ___sys_sendmsg+0x2a2/0x360 [ 1704.231909][T28994] ? __sys_sendmsg+0x290/0x290 [ 1704.236692][T28994] ? ktime_get_real_ts64+0x440/0x440 [ 1704.241978][T28994] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1704.248239][T28994] __se_sys_sendmsg+0x1bb/0x2a0 [ 1704.253125][T28994] ? __x64_sys_sendmsg+0x80/0x80 [ 1704.258096][T28994] ? lockdep_hardirqs_on+0x94/0x140 [ 1704.263300][T28994] do_syscall_64+0x4c/0xa0 [ 1704.267725][T28994] ? clear_bhb_loop+0x60/0xb0 [ 1704.272408][T28994] ? clear_bhb_loop+0x60/0xb0 [ 1704.277093][T28994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.282990][T28994] RIP: 0033:0x7f5142f9cdd9 [ 1704.287409][T28994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.307013][T28994] RSP: 002b:00007f5143df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.315427][T28994] RAX: ffffffffffffffda RBX: 00007f5143215fa0 RCX: 00007f5142f9cdd9 [ 1704.323400][T28994] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1704.331370][T28994] RBP: 00007f5143032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1704.339344][T28994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1704.347311][T28994] R13: 00007f5143216038 R14: 00007f5143215fa0 R15: 00007fff24c15438 [ 1704.355302][T28994] [ 1704.405348][T29007] FAULT_INJECTION: forcing a failure. [ 1704.405348][T29007] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.512925][T29007] CPU: 1 PID: 29007 Comm: syz.1.7502 Not tainted syzkaller #0 [ 1704.520440][T29007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1704.530519][T29007] Call Trace: [ 1704.533812][T29007] [ 1704.536755][T29007] dump_stack_lvl+0x188/0x24e [ 1704.541460][T29007] ? show_regs_print_info+0x12/0x12 [ 1704.546683][T29007] ? load_image+0x400/0x400 [ 1704.551211][T29007] ? __might_sleep+0xd0/0xd0 [ 1704.555822][T29007] ? __lock_acquire+0x7d10/0x7d10 [ 1704.560871][T29007] should_fail_ex+0x399/0x4d0 [ 1704.565571][T29007] should_failslab+0x5/0x20 [ 1704.570089][T29007] slab_pre_alloc_hook+0x59/0x310 [ 1704.575145][T29007] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1704.581411][T29007] __kmem_cache_alloc_node+0x4f/0x260 [ 1704.586805][T29007] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1704.593063][T29007] __kmalloc+0xa0/0x240 [ 1704.597275][T29007] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1704.603366][T29007] genl_family_rcv_msg_doit+0xe5/0x330 [ 1704.608843][T29007] ? end_current_label_crit_section+0x170/0x170 [ 1704.615090][T29007] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1704.620988][T29007] ? lockdep_hardirqs_on+0x94/0x140 [ 1704.626190][T29007] ? apparmor_capable+0x12c/0x190 [ 1704.631219][T29007] ? bpf_lsm_capable+0x5/0x10 [ 1704.635896][T29007] ? security_capable+0x85/0xb0 [ 1704.640747][T29007] genl_rcv_msg+0x604/0x790 [ 1704.645257][T29007] ? genl_bind+0x360/0x360 [ 1704.649665][T29007] ? nl80211_req_set_reg+0x210/0x210 [ 1704.654958][T29007] netlink_rcv_skb+0x1fb/0x450 [ 1704.659732][T29007] ? genl_bind+0x360/0x360 [ 1704.664150][T29007] ? netlink_ack+0x1170/0x1170 [ 1704.668921][T29007] ? down_read+0x1a8/0x2d0 [ 1704.673342][T29007] genl_rcv+0x24/0x40 [ 1704.677317][T29007] netlink_unicast+0x74d/0x8d0 [ 1704.682091][T29007] netlink_sendmsg+0x8ad/0xbd0 [ 1704.686866][T29007] ? netlink_getsockopt+0x550/0x550 [ 1704.692068][T29007] ? aa_sock_msg_perm+0x94/0x150 [ 1704.697008][T29007] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1704.702290][T29007] ? security_socket_sendmsg+0x7c/0xa0 [ 1704.707754][T29007] ? netlink_getsockopt+0x550/0x550 [ 1704.712968][T29007] ____sys_sendmsg+0x5be/0x970 [ 1704.717762][T29007] ? __sys_sendmsg_sock+0x30/0x30 [ 1704.722798][T29007] ? __import_iovec+0x315/0x500 [ 1704.727658][T29007] ? import_iovec+0x6f/0xa0 [ 1704.732162][T29007] ___sys_sendmsg+0x2a2/0x360 [ 1704.736858][T29007] ? __sys_sendmsg+0x290/0x290 [ 1704.741641][T29007] ? trace_call_bpf+0xbf/0x6b0 [ 1704.746424][T29007] __se_sys_sendmsg+0x1bb/0x2a0 [ 1704.751309][T29007] ? __x64_sys_sendmsg+0x80/0x80 [ 1704.756280][T29007] ? lockdep_hardirqs_on+0x94/0x140 [ 1704.761483][T29007] do_syscall_64+0x4c/0xa0 [ 1704.765904][T29007] ? clear_bhb_loop+0x60/0xb0 [ 1704.770586][T29007] ? clear_bhb_loop+0x60/0xb0 [ 1704.775276][T29007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.781177][T29007] RIP: 0033:0x7f49f859cdd9 [ 1704.785594][T29007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.805211][T29007] RSP: 002b:00007f49f949f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.813631][T29007] RAX: ffffffffffffffda RBX: 00007f49f8815fa0 RCX: 00007f49f859cdd9 [ 1704.821596][T29007] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000a [ 1704.829560][T29007] RBP: 00007f49f949f090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.837525][T29007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.845509][T29007] R13: 00007f49f8816038 R14: 00007f49f8815fa0 R15: 00007ffdf7c45a28 [ 1704.853490][T29007] [ 1704.921471][T29016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7504'. [ 1705.168002][T29023] sctp: [Deprecated]: syz.2.7507 (pid 29023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1705.168002][T29023] Use struct sctp_sack_info instead [ 1705.241617][T29027] netlink: 'syz.1.7508': attribute type 2 has an invalid length. [ 1705.257265][T29027] device 3 entered promiscuous mode [ 1706.009900][T29054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7519'. [ 1706.447696][T29066] netlink: 'syz.3.7522': attribute type 2 has an invalid length. [ 1706.455840][T29066] netlink: 'syz.3.7522': attribute type 8 has an invalid length. [ 1706.465617][T29066] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7522'. [ 1706.606608][T29070] ref_ctr_offset mismatch. inode: 0x4d7 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1707.036394][T29083] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7530'. [ 1707.047641][T29084] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7529'. [ 1707.060071][T29083] netlink: 'syz.2.7530': attribute type 1 has an invalid length. [ 1707.080854][T29084] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1707.139158][T29084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1707.200591][T29092] netlink: 'syz.2.7530': attribute type 21 has an invalid length. [ 1707.239250][T29092] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7530'. [ 1708.115583][T29126] FAULT_INJECTION: forcing a failure. [ 1708.115583][T29126] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.162300][T29126] CPU: 1 PID: 29126 Comm: syz.0.7545 Not tainted syzkaller #0 [ 1708.169821][T29126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1708.179894][T29126] Call Trace: [ 1708.183191][T29126] [ 1708.186133][T29126] dump_stack_lvl+0x188/0x24e [ 1708.190845][T29126] ? show_regs_print_info+0x12/0x12 [ 1708.196075][T29126] ? load_image+0x400/0x400 [ 1708.200606][T29126] ? __might_sleep+0xd0/0xd0 [ 1708.205209][T29126] ? __lock_acquire+0x7d10/0x7d10 [ 1708.210255][T29126] should_fail_ex+0x399/0x4d0 [ 1708.214954][T29126] should_failslab+0x5/0x20 [ 1708.219476][T29126] slab_pre_alloc_hook+0x59/0x310 [ 1708.224514][T29126] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1708.230255][T29126] __kmem_cache_alloc_node+0x4f/0x260 [ 1708.235619][T29126] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1708.241330][T29126] __kmalloc+0xa0/0x240 [ 1708.245482][T29126] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1708.251033][T29126] ? tomoyo_path_number_perm+0x205/0x650 [ 1708.256654][T29126] tomoyo_path_number_perm+0x22f/0x650 [ 1708.262113][T29126] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1708.267586][T29126] ? trace_call_bpf+0xbf/0x6b0 [ 1708.272353][T29126] ? trace_call_bpf+0xbf/0x6b0 [ 1708.277118][T29126] ? trace_call_bpf+0x5d6/0x6b0 [ 1708.281993][T29126] ? __fget_files+0x28/0x4b0 [ 1708.286586][T29126] ? __fget_files+0x28/0x4b0 [ 1708.291182][T29126] security_file_ioctl+0x6c/0xa0 [ 1708.296118][T29126] __se_sys_ioctl+0x48/0x170 [ 1708.300708][T29126] do_syscall_64+0x4c/0xa0 [ 1708.305127][T29126] ? clear_bhb_loop+0x60/0xb0 [ 1708.309804][T29126] ? clear_bhb_loop+0x60/0xb0 [ 1708.314494][T29126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1708.320390][T29126] RIP: 0033:0x7feb4959cdd9 [ 1708.324809][T29126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.344418][T29126] RSP: 002b:00007feb4a407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1708.352831][T29126] RAX: ffffffffffffffda RBX: 00007feb49815fa0 RCX: 00007feb4959cdd9 [ 1708.360798][T29126] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 00000000000000c8 [ 1708.368763][T29126] RBP: 00007feb4a407090 R08: 0000000000000000 R09: 0000000000000000 [ 1708.376736][T29126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1708.384703][T29126] R13: 00007feb49816038 R14: 00007feb49815fa0 R15: 00007ffd13d1beb8 [ 1708.392692][T29126] [ 1708.464330][T29126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1712.246164][T29174] __nla_validate_parse: 1 callbacks suppressed [ 1712.246180][T29174] netlink: 15750 bytes leftover after parsing attributes in process `syz.0.7559'. [ 1712.296430][T29175] netlink: 15750 bytes leftover after parsing attributes in process `syz.0.7559'. [ 1712.383433][T29178] netlink: 'syz.2.7561': attribute type 10 has an invalid length. [ 1712.658954][T29189] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.7563'. [ 1712.830334][T29195] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7563'. [ 1712.962504][T29195] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1713.025646][T29195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1713.701415][T29214] netlink: 'syz.0.7571': attribute type 3 has an invalid length. [ 1713.718689][T29214] netlink: 'syz.0.7571': attribute type 1 has an invalid length. [ 1713.732802][T29214] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7571'. [ 1713.983162][T29222] ref_ctr_offset mismatch. inode: 0x634 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1714.027870][T29224] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.7571'. [ 1714.078826][T29224] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1714.092290][T29224] CPU: 1 PID: 29224 Comm: syz.0.7571 Not tainted syzkaller #0 [ 1714.099790][T29224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1714.109864][T29224] Call Trace: [ 1714.113166][T29224] [ 1714.116117][T29224] dump_stack_lvl+0x188/0x24e [ 1714.120838][T29224] ? show_regs_print_info+0x12/0x12 [ 1714.126074][T29224] ? load_image+0x400/0x400 [ 1714.130625][T29224] sysfs_warn_dup+0x8a/0xa0 [ 1714.135163][T29224] sysfs_do_create_link_sd+0xc0/0x110 [ 1714.140585][T29224] device_add+0x7ed/0xfb0 [ 1714.144955][T29224] wiphy_register+0x1d9f/0x2ac0 [ 1714.149868][T29224] ? cfg80211_event_work+0x40/0x40 [ 1714.155009][T29224] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1714.161191][T29224] ? ieee80211_register_hw+0x2b20/0x39f0 [ 1714.166928][T29224] ieee80211_register_hw+0x2d00/0x39f0 [ 1714.172403][T29224] ? ieee80211_register_hw+0xf21/0x39f0 [ 1714.177955][T29224] ? ieee80211_register_hw+0xf21/0x39f0 [ 1714.183513][T29224] ? ieee80211_tasklet_handler+0x20/0x20 [ 1714.189163][T29224] ? memset+0x1e/0x40 [ 1714.193149][T29224] ? __hrtimer_init+0x186/0x270 [ 1714.198006][T29224] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1714.203754][T29224] hwsim_new_radio_nl+0xafa/0xce0 [ 1714.208796][T29224] genl_family_rcv_msg_doit+0x22a/0x330 [ 1714.214345][T29224] ? end_current_label_crit_section+0x170/0x170 [ 1714.220588][T29224] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1714.226485][T29224] ? bpf_lsm_capable+0x5/0x10 [ 1714.231162][T29224] ? security_capable+0x85/0xb0 [ 1714.236018][T29224] genl_rcv_msg+0x604/0x790 [ 1714.240531][T29224] ? genl_bind+0x360/0x360 [ 1714.244941][T29224] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1714.251293][T29224] netlink_rcv_skb+0x1fb/0x450 [ 1714.256065][T29224] ? genl_bind+0x360/0x360 [ 1714.260478][T29224] ? netlink_ack+0x1170/0x1170 [ 1714.265259][T29224] ? down_read+0x1a8/0x2d0 [ 1714.269685][T29224] genl_rcv+0x24/0x40 [ 1714.273663][T29224] netlink_unicast+0x74d/0x8d0 [ 1714.278443][T29224] netlink_sendmsg+0x8ad/0xbd0 [ 1714.283217][T29224] ? netlink_getsockopt+0x550/0x550 [ 1714.288421][T29224] ? aa_sock_msg_perm+0x94/0x150 [ 1714.293442][T29224] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1714.298722][T29224] ? security_socket_sendmsg+0x7c/0xa0 [ 1714.304189][T29224] ? netlink_getsockopt+0x550/0x550 [ 1714.309389][T29224] ____sys_sendmsg+0x5be/0x970 [ 1714.314162][T29224] ? __sys_sendmsg_sock+0x30/0x30 [ 1714.319194][T29224] ? __import_iovec+0x315/0x500 [ 1714.324134][T29224] ? import_iovec+0x6f/0xa0 [ 1714.328636][T29224] ___sys_sendmsg+0x2a2/0x360 [ 1714.333321][T29224] ? __sys_sendmsg+0x290/0x290 [ 1714.338103][T29224] ? ktime_get_real_ts64+0x440/0x440 [ 1714.343406][T29224] __se_sys_sendmsg+0x1bb/0x2a0 [ 1714.348263][T29224] ? __x64_sys_sendmsg+0x80/0x80 [ 1714.353216][T29224] ? lockdep_hardirqs_on+0x94/0x140 [ 1714.358412][T29224] do_syscall_64+0x4c/0xa0 [ 1714.362830][T29224] ? clear_bhb_loop+0x60/0xb0 [ 1714.367504][T29224] ? clear_bhb_loop+0x60/0xb0 [ 1714.372183][T29224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1714.378078][T29224] RIP: 0033:0x7feb4959cdd9 [ 1714.382490][T29224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.402099][T29224] RSP: 002b:00007feb4a3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1714.410510][T29224] RAX: ffffffffffffffda RBX: 00007feb49816090 RCX: 00007feb4959cdd9 [ 1714.418482][T29224] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 1714.426451][T29224] RBP: 00007feb49632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1714.434414][T29224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1714.442376][T29224] R13: 00007feb49816128 R14: 00007feb49816090 R15: 00007ffd13d1beb8 [ 1714.450356][T29224] [ 1714.537005][T29234] FAULT_INJECTION: forcing a failure. [ 1714.537005][T29234] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.551402][T29234] CPU: 1 PID: 29234 Comm: syz.1.7577 Not tainted syzkaller #0 [ 1714.558898][T29234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1714.568968][T29234] Call Trace: [ 1714.572259][T29234] [ 1714.575201][T29234] dump_stack_lvl+0x188/0x24e [ 1714.579899][T29234] ? show_regs_print_info+0x12/0x12 [ 1714.585110][T29234] ? load_image+0x400/0x400 [ 1714.589622][T29234] ? __might_sleep+0xd0/0xd0 [ 1714.594220][T29234] ? __lock_acquire+0x7d10/0x7d10 [ 1714.599260][T29234] should_fail_ex+0x399/0x4d0 [ 1714.603948][T29234] should_failslab+0x5/0x20 [ 1714.608457][T29234] slab_pre_alloc_hook+0x59/0x310 [ 1714.613500][T29234] ? sk_prot_alloc+0xe7/0x210 [ 1714.618187][T29234] __kmem_cache_alloc_node+0x4f/0x260 [ 1714.623568][T29234] ? sk_prot_alloc+0xe7/0x210 [ 1714.628262][T29234] __kmalloc+0xa0/0x240 [ 1714.632433][T29234] sk_prot_alloc+0xe7/0x210 [ 1714.636944][T29234] ? sk_alloc+0x20/0x340 [ 1714.641284][T29234] sk_alloc+0x36/0x340 [ 1714.645359][T29234] ? bpf_ctx_init+0x163/0x1a0 [ 1714.650042][T29234] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1714.655600][T29234] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1714.660976][T29234] ? __fget_files+0x28/0x4b0 [ 1714.665577][T29234] ? __fget_files+0x43d/0x4b0 [ 1714.670270][T29234] ? cpu_online+0xa0/0xa0 [ 1714.674603][T29234] bpf_prog_test_run+0x31e/0x390 [ 1714.679553][T29234] __sys_bpf+0x62b/0x780 [ 1714.683808][T29234] ? bpf_link_show_fdinfo+0x380/0x380 [ 1714.689204][T29234] ? lock_chain_count+0x20/0x20 [ 1714.694070][T29234] __x64_sys_bpf+0x78/0x90 [ 1714.698508][T29234] do_syscall_64+0x4c/0xa0 [ 1714.702937][T29234] ? clear_bhb_loop+0x60/0xb0 [ 1714.707629][T29234] ? clear_bhb_loop+0x60/0xb0 [ 1714.712316][T29234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1714.718213][T29234] RIP: 0033:0x7f49f859cdd9 [ 1714.722631][T29234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.742235][T29234] RSP: 002b:00007f49f949f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1714.750656][T29234] RAX: ffffffffffffffda RBX: 00007f49f8815fa0 RCX: 00007f49f859cdd9 [ 1714.758631][T29234] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 1714.766602][T29234] RBP: 00007f49f949f090 R08: 0000000000000000 R09: 0000000000000000 [ 1714.774575][T29234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1714.782549][T29234] R13: 00007f49f8816038 R14: 00007f49f8815fa0 R15: 00007ffdf7c45a28 [ 1714.790539][T29234] [ 1714.826760][T29233] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.7576'. [ 1715.020075][T29241] netlink: 'syz.1.7579': attribute type 2 has an invalid length. [ 1715.078623][T29241] device 4 entered promiscuous mode [ 1715.689372][T29258] netlink: 'syz.2.7586': attribute type 1 has an invalid length. [ 1716.828610][T29269] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7589'. [ 1716.867199][T29272] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.7590'. [ 1716.892229][T29274] netlink: 'syz.3.7591': attribute type 21 has an invalid length. [ 1716.900801][T29274] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7591'. [ 1716.935815][T29277] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1716.973513][T29277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1717.091670][T29281] netlink: 'syz.2.7592': attribute type 3 has an invalid length. [ 1717.152803][T29281] netlink: 'syz.2.7592': attribute type 1 has an invalid length. [ 1717.393145][T29289] netlink: 'syz.0.7595': attribute type 2 has an invalid length. [ 1717.429119][T29291] netlink: 'syz.4.7596': attribute type 10 has an invalid length. [ 1717.549005][T29291] team0: Port device macvlan0 added [ 1717.569442][T29289] device 8 entered promiscuous mode [ 1717.612559][T29294] bridge0: port 3(dummy0) entered disabled state [ 1717.619165][T29294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.626842][T29294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.796104][T29281] __nla_validate_parse: 2 callbacks suppressed [ 1717.796152][T29281] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.7592'. [ 1717.914647][T29281] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1717.996617][T29302] netlink: 'syz.3.7600': attribute type 3 has an invalid length. [ 1718.004842][T29281] CPU: 1 PID: 29281 Comm: syz.2.7592 Not tainted syzkaller #0 [ 1718.012331][T29281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1718.022399][T29281] Call Trace: [ 1718.025691][T29281] [ 1718.028641][T29281] dump_stack_lvl+0x188/0x24e [ 1718.033355][T29281] ? show_regs_print_info+0x12/0x12 [ 1718.038589][T29281] ? load_image+0x400/0x400 [ 1718.043134][T29281] sysfs_warn_dup+0x8a/0xa0 [ 1718.047672][T29281] sysfs_do_create_link_sd+0xc0/0x110 [ 1718.053071][T29281] device_add+0x7ed/0xfb0 [ 1718.057414][T29281] wiphy_register+0x1d9f/0x2ac0 [ 1718.062302][T29281] ? cfg80211_event_work+0x40/0x40 [ 1718.067434][T29281] ? minstrel_ht_alloc+0x894/0xa20 [ 1718.072558][T29281] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1718.078629][T29281] ieee80211_register_hw+0x2d00/0x39f0 [ 1718.084110][T29281] ? ieee80211_register_hw+0xf21/0x39f0 [ 1718.089657][T29281] ? ieee80211_register_hw+0xf21/0x39f0 [ 1718.095214][T29281] ? ieee80211_tasklet_handler+0x20/0x20 [ 1718.100860][T29281] ? memset+0x1e/0x40 [ 1718.104845][T29281] ? __hrtimer_init+0x186/0x270 [ 1718.109706][T29281] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1718.115453][T29281] hwsim_new_radio_nl+0xafa/0xce0 [ 1718.120497][T29281] genl_family_rcv_msg_doit+0x22a/0x330 [ 1718.126047][T29281] ? end_current_label_crit_section+0x170/0x170 [ 1718.132294][T29281] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1718.138195][T29281] ? bpf_lsm_capable+0x5/0x10 [ 1718.142871][T29281] ? security_capable+0x85/0xb0 [ 1718.147732][T29281] genl_rcv_msg+0x604/0x790 [ 1718.152250][T29281] ? preempt_schedule_common+0xd0/0xd0 [ 1718.157728][T29281] ? genl_bind+0x360/0x360 [ 1718.162166][T29281] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1718.168533][T29281] netlink_rcv_skb+0x1fb/0x450 [ 1718.173318][T29281] ? genl_bind+0x360/0x360 [ 1718.177741][T29281] ? netlink_ack+0x1170/0x1170 [ 1718.182525][T29281] ? down_read+0x1a8/0x2d0 [ 1718.186960][T29281] genl_rcv+0x24/0x40 [ 1718.190951][T29281] netlink_unicast+0x74d/0x8d0 [ 1718.195736][T29281] netlink_sendmsg+0x8ad/0xbd0 [ 1718.200517][T29281] ? netlink_getsockopt+0x550/0x550 [ 1718.205722][T29281] ? aa_sock_msg_perm+0x94/0x150 [ 1718.210659][T29281] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1718.215944][T29281] ? security_socket_sendmsg+0x7c/0xa0 [ 1718.221415][T29281] ? netlink_getsockopt+0x550/0x550 [ 1718.226622][T29281] ____sys_sendmsg+0x5be/0x970 [ 1718.231399][T29281] ? __sys_sendmsg_sock+0x30/0x30 [ 1718.236449][T29281] ? __import_iovec+0x315/0x500 [ 1718.241314][T29281] ? import_iovec+0x6f/0xa0 [ 1718.245825][T29281] ___sys_sendmsg+0x2a2/0x360 [ 1718.250523][T29281] ? __sys_sendmsg+0x290/0x290 [ 1718.255315][T29281] ? ktime_get_real_ts64+0x440/0x440 [ 1718.260604][T29281] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1718.266870][T29281] __se_sys_sendmsg+0x1bb/0x2a0 [ 1718.271734][T29281] ? __x64_sys_sendmsg+0x80/0x80 [ 1718.276690][T29281] ? lockdep_hardirqs_on+0x94/0x140 [ 1718.281893][T29281] do_syscall_64+0x4c/0xa0 [ 1718.286313][T29281] ? clear_bhb_loop+0x60/0xb0 [ 1718.290992][T29281] ? clear_bhb_loop+0x60/0xb0 [ 1718.295672][T29281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1718.301566][T29281] RIP: 0033:0x7f5142f9cdd9 [ 1718.305981][T29281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.325589][T29281] RSP: 002b:00007f5143df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1718.334003][T29281] RAX: ffffffffffffffda RBX: 00007f5143215fa0 RCX: 00007f5142f9cdd9 [ 1718.341972][T29281] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 1718.349944][T29281] RBP: 00007f5143032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1718.357911][T29281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1718.365877][T29281] R13: 00007f5143216038 R14: 00007f5143215fa0 R15: 00007fff24c15438 [ 1718.373859][T29281] [ 1718.412455][T29302] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.7600'. [ 1718.547300][T29313] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.7603'. [ 1718.708181][T29299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7599'. [ 1718.790780][T29313] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.7603'. [ 1718.815654][T29311] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.7603'. [ 1721.170614][T29321] netlink: 'syz.1.7605': attribute type 39 has an invalid length. [ 1721.209550][T29319] netlink: 'syz.4.7604': attribute type 10 has an invalid length. [ 1721.237309][T29326] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.7607'. [ 1721.407966][T29330] netlink: 'syz.3.7609': attribute type 2 has an invalid length. [ 1721.518599][T29319] team0 (unregistering): Port device team_slave_0 removed [ 1721.618749][T29336] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.7610'. [ 1721.627091][T29319] team0 (unregistering): Port device team_slave_1 removed [ 1721.692396][T29319] team0 (unregistering): Port device macvlan0 removed [ 1721.790665][T29330] device 5 entered promiscuous mode [ 1721.805737][T29342] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7610'. [ 1721.842791][T29342] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1721.867686][T29342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1722.086774][T29357] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7618'. [ 1722.111211][T29356] netlink: 'syz.4.7617': attribute type 3 has an invalid length. [ 1722.418188][T29364] netlink: 'syz.1.7620': attribute type 3 has an invalid length. [ 1722.446457][T29363] netlink: 'syz.1.7620': attribute type 3 has an invalid length. [ 1722.564745][T29367] device pim6reg1 entered promiscuous mode [ 1722.610965][T29371] netlink: 'syz.3.7622': attribute type 3 has an invalid length. [ 1722.778153][T29378] netlink: 'syz.3.7625': attribute type 2 has an invalid length. [ 1722.819593][T29378] device 6 entered promiscuous mode [ 1723.015142][T29384] netlink: 'syz.3.7628': attribute type 16 has an invalid length. [ 1723.060964][T29384] __nla_validate_parse: 6 callbacks suppressed [ 1723.060996][T29384] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7628'. [ 1723.086242][T29388] FAULT_INJECTION: forcing a failure. [ 1723.086242][T29388] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.129761][T29388] CPU: 1 PID: 29388 Comm: syz.4.7630 Not tainted syzkaller #0 [ 1723.137272][T29388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1723.147342][T29388] Call Trace: [ 1723.150630][T29388] [ 1723.153572][T29388] dump_stack_lvl+0x188/0x24e [ 1723.158276][T29388] ? show_regs_print_info+0x12/0x12 [ 1723.163504][T29388] ? load_image+0x400/0x400 [ 1723.168040][T29388] should_fail_ex+0x399/0x4d0 [ 1723.172744][T29388] should_failslab+0x5/0x20 [ 1723.177261][T29388] slab_pre_alloc_hook+0x59/0x310 [ 1723.182299][T29388] ? verify_lock_unused+0x140/0x140 [ 1723.187529][T29388] kmem_cache_alloc+0x56/0x2f0 [ 1723.192305][T29388] ? skb_clone+0x1e7/0x370 [ 1723.196763][T29388] skb_clone+0x1e7/0x370 [ 1723.201030][T29388] bpf_clone_redirect+0x163/0x4a0 [ 1723.206088][T29388] bpf_prog_297510cab277b9a5+0x56/0x5b [ 1723.208212][T29391] netlink: 'syz.3.7632': attribute type 3 has an invalid length. [ 1723.211554][T29388] ? ct_nmi_exit+0x145/0x1c0 [ 1723.211578][T29388] ? ct_irq_exit_irqson+0x113/0x170 [ 1723.211602][T29388] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1723.211631][T29388] ? lock_chain_count+0x20/0x20 [ 1723.211660][T29388] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1723.223569][T29391] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.7632'. [ 1723.223927][T29388] ? lockdep_hardirqs_on+0x94/0x140 [ 1723.223955][T29388] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1723.266732][T29388] ? 0xffffffffa0000958 [ 1723.270908][T29388] bpf_test_run+0x2b6/0x830 [ 1723.275453][T29388] ? convert___skb_to_skb+0x580/0x580 [ 1723.280848][T29388] ? eth_get_headlen+0x200/0x200 [ 1723.285801][T29388] ? __build_skb+0x257/0x3c0 [ 1723.290415][T29388] ? bpf_prog_test_run_skb+0x773/0x12a0 [ 1723.295979][T29388] ? convert___skb_to_skb+0x3d/0x580 [ 1723.301282][T29388] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 1723.306686][T29388] ? cpu_online+0xa0/0xa0 [ 1723.311037][T29388] bpf_prog_test_run+0x31e/0x390 [ 1723.316000][T29388] __sys_bpf+0x62b/0x780 [ 1723.320272][T29388] ? bpf_link_show_fdinfo+0x380/0x380 [ 1723.325685][T29388] ? lock_chain_count+0x20/0x20 [ 1723.330571][T29388] __x64_sys_bpf+0x78/0x90 [ 1723.335012][T29388] do_syscall_64+0x4c/0xa0 [ 1723.339447][T29388] ? clear_bhb_loop+0x60/0xb0 [ 1723.344139][T29388] ? clear_bhb_loop+0x60/0xb0 [ 1723.348837][T29388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1723.354748][T29388] RIP: 0033:0x7fd72f79cdd9 [ 1723.359175][T29388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.378799][T29388] RSP: 002b:00007fd7305e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1723.387247][T29388] RAX: ffffffffffffffda RBX: 00007fd72fa15fa0 RCX: 00007fd72f79cdd9 [ 1723.395236][T29388] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1723.403219][T29388] RBP: 00007fd7305e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.411207][T29388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.419189][T29388] R13: 00007fd72fa16038 R14: 00007fd72fa15fa0 R15: 00007ffef89322a8 [ 1723.427187][T29388] [ 1723.904164][T29402] FAULT_INJECTION: forcing a failure. [ 1723.904164][T29402] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.929882][T29402] CPU: 0 PID: 29402 Comm: syz.3.7635 Not tainted syzkaller #0 [ 1723.937383][T29402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1723.947452][T29402] Call Trace: [ 1723.950744][T29402] [ 1723.953686][T29402] dump_stack_lvl+0x188/0x24e [ 1723.958389][T29402] ? show_regs_print_info+0x12/0x12 [ 1723.963614][T29402] ? load_image+0x400/0x400 [ 1723.968144][T29402] ? __might_sleep+0xd0/0xd0 [ 1723.972750][T29402] ? __lock_acquire+0x7d10/0x7d10 [ 1723.977807][T29402] should_fail_ex+0x399/0x4d0 [ 1723.982514][T29402] should_failslab+0x5/0x20 [ 1723.987032][T29402] slab_pre_alloc_hook+0x59/0x310 [ 1723.992073][T29402] ? rtnl_newlink+0x10c/0x20a0 [ 1723.996860][T29402] __kmem_cache_alloc_node+0x4f/0x260 [ 1724.002255][T29402] ? rtnl_newlink+0x10c/0x20a0 [ 1724.007030][T29402] kmalloc_trace+0x26/0xe0 [ 1724.011449][T29402] ? rtnl_setlink+0x510/0x510 [ 1724.016134][T29402] rtnl_newlink+0x10c/0x20a0 [ 1724.020743][T29402] ? __mutex_trylock_common+0x155/0x260 [ 1724.026289][T29402] ? rtnl_setlink+0x510/0x510 [ 1724.030967][T29402] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1724.037127][T29402] ? rcu_is_watching+0x11/0xa0 [ 1724.041896][T29402] ? trace_contention_end+0x5f/0x170 [ 1724.047184][T29402] ? __mutex_lock+0x1ab/0xaf0 [ 1724.051871][T29402] ? rtnetlink_rcv_msg+0x824/0xfc0 [ 1724.056989][T29402] ? rcu_read_unlock+0x8c/0xa0 [ 1724.061751][T29402] ? mutex_lock_nested+0x10/0x10 [ 1724.066694][T29402] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1724.071804][T29402] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1724.076913][T29402] ? rtnl_setlink+0x510/0x510 [ 1724.081585][T29402] rtnetlink_rcv_msg+0x87c/0xfc0 [ 1724.086534][T29402] ? rtnetlink_bind+0x80/0x80 [ 1724.091204][T29402] ? mark_lock+0x94/0x320 [ 1724.095533][T29402] ? __lock_acquire+0x12f4/0x7d10 [ 1724.100572][T29402] ? verify_lock_unused+0x140/0x140 [ 1724.105765][T29402] ? netlink_sendmsg+0x654/0xbd0 [ 1724.110702][T29402] ? verify_lock_unused+0x140/0x140 [ 1724.115916][T29402] netlink_rcv_skb+0x1fb/0x450 [ 1724.120676][T29402] ? rtnetlink_bind+0x80/0x80 [ 1724.125352][T29402] ? netlink_ack+0x1170/0x1170 [ 1724.130120][T29402] ? netlink_deliver_tap+0x2e/0x1b0 [ 1724.135319][T29402] netlink_unicast+0x74d/0x8d0 [ 1724.140090][T29402] netlink_sendmsg+0x8ad/0xbd0 [ 1724.144857][T29402] ? netlink_getsockopt+0x550/0x550 [ 1724.150055][T29402] ? aa_sock_msg_perm+0x94/0x150 [ 1724.154989][T29402] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1724.160264][T29402] ? security_socket_sendmsg+0x7c/0xa0 [ 1724.165722][T29402] ? netlink_getsockopt+0x550/0x550 [ 1724.170919][T29402] ____sys_sendmsg+0x5be/0x970 [ 1724.175689][T29402] ? __sys_sendmsg_sock+0x30/0x30 [ 1724.180707][T29402] ? __import_iovec+0x315/0x500 [ 1724.185558][T29402] ? import_iovec+0x6f/0xa0 [ 1724.190057][T29402] ___sys_sendmsg+0x2a2/0x360 [ 1724.194735][T29402] ? __sys_sendmsg+0x290/0x290 [ 1724.199513][T29402] ? __lock_acquire+0x7d10/0x7d10 [ 1724.204554][T29402] __se_sys_sendmsg+0x1bb/0x2a0 [ 1724.209404][T29402] ? __x64_sys_sendmsg+0x80/0x80 [ 1724.214350][T29402] ? lockdep_hardirqs_on+0x94/0x140 [ 1724.219544][T29402] do_syscall_64+0x4c/0xa0 [ 1724.223958][T29402] ? clear_bhb_loop+0x60/0xb0 [ 1724.228631][T29402] ? clear_bhb_loop+0x60/0xb0 [ 1724.233304][T29402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1724.239193][T29402] RIP: 0033:0x7fe72239cdd9 [ 1724.243601][T29402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.263200][T29402] RSP: 002b:00007fe7232f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1724.271612][T29402] RAX: ffffffffffffffda RBX: 00007fe722615fa0 RCX: 00007fe72239cdd9 [ 1724.279577][T29402] RDX: 0000000020000800 RSI: 0000200000000940 RDI: 0000000000000003 [ 1724.287543][T29402] RBP: 00007fe7232f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1724.295519][T29402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.303487][T29402] R13: 00007fe722616038 R14: 00007fe722615fa0 R15: 00007fff7ad9b9c8 [ 1724.311470][T29402] [ 1724.344877][T29405] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1724.370013][T29405] device syzkaller0 entered promiscuous mode [ 1724.418267][T29405] netlink: 'syz.1.7636': attribute type 10 has an invalid length. [ 1724.437617][T29405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7636'. [ 1724.517917][T29408] netlink: 'syz.3.7637': attribute type 2 has an invalid length. [ 1724.529865][T29408] netlink: 'syz.3.7637': attribute type 9 has an invalid length. [ 1724.542377][T29408] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7637'. [ 1724.558284][T29400] netlink: 'syz.4.7634': attribute type 10 has an invalid length. [ 1724.900932][T29414] device 5 entered promiscuous mode [ 1725.295804][T29427] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.7647'. [ 1727.050254][T29431] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7648'. [ 1727.061083][T29431] device bond0 entered promiscuous mode [ 1727.067518][T29431] device bond_slave_0 entered promiscuous mode [ 1727.076007][T29431] device bond_slave_1 entered promiscuous mode [ 1727.083043][T29431] device bridge0 entered promiscuous mode [ 1727.089181][T29431] bridge0: port 4(bond0) entered blocking state [ 1727.099118][T29431] bridge0: port 4(bond0) entered disabled state [ 1727.368354][T29460] device 9 entered promiscuous mode [ 1727.857231][T29475] device syzkaller0 entered promiscuous mode [ 1728.167052][T29486] validate_nla: 7 callbacks suppressed [ 1728.167070][T29486] netlink: 'syz.2.7663': attribute type 2 has an invalid length. [ 1728.200635][T29486] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7663'. [ 1730.073087][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.079425][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.940190][T29495] netlink: 'syz.1.7667': attribute type 3 has an invalid length. [ 1730.967929][T29495] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.7667'. [ 1731.046526][T29498] netlink: 'syz.4.7668': attribute type 3 has an invalid length. [ 1731.055341][T29498] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.7668'. [ 1732.632847][T29507] netlink: 'syz.1.7671': attribute type 10 has an invalid length. [ 1732.660439][T29509] netlink: 'syz.4.7672': attribute type 39 has an invalid length. [ 1732.781082][T29511] netlink: 'syz.4.7672': attribute type 4 has an invalid length. [ 1732.802111][T29511] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7672'. [ 1733.145063][T29532] netlink: 'syz.3.7678': attribute type 2 has an invalid length. [ 1733.170875][T29532] device 7 entered promiscuous mode [ 1733.451503][T29541] netlink: 'syz.3.7680': attribute type 2 has an invalid length. [ 1733.484971][T29541] device 8 entered promiscuous mode [ 1733.496332][T29543] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1733.514861][T29543] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1733.539930][T29543] device veth0_to_bridge entered promiscuous mode [ 1733.557066][T29543] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1733.571551][T29543] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1733.578848][T29543] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1733.622235][T29544] netlink: 'syz.1.7679': attribute type 21 has an invalid length. [ 1733.655710][T29544] netlink: 'syz.1.7679': attribute type 6 has an invalid length. [ 1733.670386][T29544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7679'. [ 1733.947050][T29558] netlink: 'syz.3.7684': attribute type 2 has an invalid length. [ 1733.962212][T29558] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7684'. [ 1733.999555][T29551] netlink: 'syz.4.7682': attribute type 21 has an invalid length. [ 1734.008120][T29551] netlink: 'syz.4.7682': attribute type 6 has an invalid length. [ 1734.016588][T29551] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7682'. [ 1734.253854][T29562] netlink: 'syz.0.7687': attribute type 10 has an invalid length. [ 1734.346020][T29570] netlink: 'syz.4.7691': attribute type 2 has an invalid length. [ 1734.368912][T29570] device 6 entered promiscuous mode [ 1734.452617][T29574] netlink: 'syz.1.7692': attribute type 21 has an invalid length. [ 1734.586989][T29581] netlink: 'syz.2.7696': attribute type 12 has an invalid length. [ 1734.605678][T29581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7696'. [ 1734.644094][T29581] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7696'. [ 1734.956988][T29595] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7701'. [ 1735.670773][T29609] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1735.697048][T29609] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1735.731866][T29609] device veth0_to_bridge entered promiscuous mode [ 1735.811328][T29613] FAULT_INJECTION: forcing a failure. [ 1735.811328][T29613] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.853282][T29613] CPU: 1 PID: 29613 Comm: syz.1.7707 Not tainted syzkaller #0 [ 1735.860799][T29613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1735.870879][T29613] Call Trace: [ 1735.874177][T29613] [ 1735.877127][T29613] dump_stack_lvl+0x188/0x24e [ 1735.881835][T29613] ? show_regs_print_info+0x12/0x12 [ 1735.887064][T29613] ? load_image+0x400/0x400 [ 1735.891606][T29613] should_fail_ex+0x399/0x4d0 [ 1735.896317][T29613] should_failslab+0x5/0x20 [ 1735.900848][T29613] slab_pre_alloc_hook+0x59/0x310 [ 1735.905896][T29613] ? nf_ct_ext_add+0x1a7/0x3e0 [ 1735.910685][T29613] __kmem_cache_alloc_node+0x4f/0x260 [ 1735.916085][T29613] ? nf_ct_ext_add+0x1a7/0x3e0 [ 1735.920874][T29613] __kmalloc_node_track_caller+0x9e/0x230 [ 1735.926628][T29613] krealloc+0x6a/0x100 [ 1735.930705][T29613] nf_ct_ext_add+0x1a7/0x3e0 [ 1735.935288][T29613] init_conntrack+0x8af/0x11a0 [ 1735.940042][T29613] ? early_drop+0x870/0x870 [ 1735.944548][T29613] ? nf_conntrack_find_get+0x670/0x670 [ 1735.950029][T29613] ? __siphash_unaligned+0x25b/0x3a0 [ 1735.955310][T29613] nf_conntrack_in+0xd3e/0x17b0 [ 1735.960165][T29613] ? nf_ct_pernet+0x270/0x270 [ 1735.964861][T29613] ? ip6t_alloc_initial_table+0x640/0x640 [ 1735.970591][T29613] ? ipv6_defrag+0x2d2/0x3a0 [ 1735.975180][T29613] ? ipv6_conntrack_in+0x20/0x20 [ 1735.980109][T29613] nf_hook_slow+0xb9/0x200 [ 1735.984526][T29613] __ip6_local_out+0x780/0x8a0 [ 1735.989287][T29613] ? __ip6_local_out+0x608/0x8a0 [ 1735.994216][T29613] ? ip6_dst_hoplimit+0x340/0x340 [ 1735.999236][T29613] ? __ip6_local_out+0x8a0/0x8a0 [ 1736.004169][T29613] ? read_lock_is_recursive+0x10/0x10 [ 1736.009557][T29613] ip6_local_out+0x26/0x120 [ 1736.014065][T29613] ? ip6_send_skb+0x10b/0x380 [ 1736.018738][T29613] ip6_send_skb+0x1d1/0x380 [ 1736.023235][T29613] udp_v6_send_skb+0xb62/0x17f0 [ 1736.028085][T29613] udp_v6_push_pending_frames+0x12f/0x220 [ 1736.033802][T29613] udpv6_sendmsg+0xebe/0x2420 [ 1736.038479][T29613] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1736.043328][T29613] ? udp_v6_early_demux+0xf80/0xf80 [ 1736.048539][T29613] ? __might_fault+0xa6/0x120 [ 1736.053228][T29613] ? inet_send_prepare+0x58/0x260 [ 1736.058247][T29613] ? inet6_sendmsg+0x5b/0xd0 [ 1736.062840][T29613] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1736.068059][T29613] ____sys_sendmsg+0x5be/0x970 [ 1736.072851][T29613] ? __sys_sendmsg_sock+0x30/0x30 [ 1736.077874][T29613] ? __import_iovec+0x315/0x500 [ 1736.082734][T29613] ? import_iovec+0x6f/0xa0 [ 1736.087397][T29613] ___sys_sendmsg+0x2a2/0x360 [ 1736.092072][T29613] ? __sys_sendmsg+0x290/0x290 [ 1736.096842][T29613] ? __lock_acquire+0x7d10/0x7d10 [ 1736.101873][T29613] __se_sys_sendmsg+0x1bb/0x2a0 [ 1736.106721][T29613] ? __x64_sys_sendmsg+0x80/0x80 [ 1736.111666][T29613] ? lockdep_hardirqs_on+0x94/0x140 [ 1736.116874][T29613] do_syscall_64+0x4c/0xa0 [ 1736.121285][T29613] ? clear_bhb_loop+0x60/0xb0 [ 1736.125956][T29613] ? clear_bhb_loop+0x60/0xb0 [ 1736.130648][T29613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1736.136556][T29613] RIP: 0033:0x7f49f859cdd9 [ 1736.140958][T29613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1736.160556][T29613] RSP: 002b:00007f49f949f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1736.168969][T29613] RAX: ffffffffffffffda RBX: 00007f49f8815fa0 RCX: 00007f49f859cdd9 [ 1736.176949][T29613] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1736.184910][T29613] RBP: 00007f49f949f090 R08: 0000000000000000 R09: 0000000000000000 [ 1736.192872][T29613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.200841][T29613] R13: 00007f49f8816038 R14: 00007f49f8815fa0 R15: 00007ffdf7c45a28 [ 1736.208827][T29613] [ 1736.655715][T29624] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.7712'. [ 1736.685778][T29628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7714'. [ 1736.716952][T29628] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7714'. [ 1736.731808][T29629] device 5 entered promiscuous mode [ 1737.667548][T29647] device syzkaller0 entered promiscuous mode [ 1738.266110][ T4288] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 1738.527054][T29676] FAULT_INJECTION: forcing a failure. [ 1738.527054][T29676] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.547257][T29676] CPU: 1 PID: 29676 Comm: syz.1.7728 Not tainted syzkaller #0 [ 1738.554744][T29676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1738.564808][T29676] Call Trace: [ 1738.568076][T29676] [ 1738.570993][T29676] dump_stack_lvl+0x188/0x24e [ 1738.575665][T29676] ? show_regs_print_info+0x12/0x12 [ 1738.580852][T29676] ? load_image+0x400/0x400 [ 1738.585341][T29676] ? __might_sleep+0xd0/0xd0 [ 1738.589926][T29676] ? __lock_acquire+0x7d10/0x7d10 [ 1738.594942][T29676] should_fail_ex+0x399/0x4d0 [ 1738.599614][T29676] should_failslab+0x5/0x20 [ 1738.604113][T29676] slab_pre_alloc_hook+0x59/0x310 [ 1738.609148][T29676] ? page_pool_create+0x6d/0x5c0 [ 1738.614073][T29676] __kmem_cache_alloc_node+0x4f/0x260 [ 1738.619437][T29676] ? page_pool_create+0x6d/0x5c0 [ 1738.624362][T29676] kmalloc_node_trace+0x22/0xe0 [ 1738.629254][T29676] page_pool_create+0x6d/0x5c0 [ 1738.634033][T29676] bpf_test_run_xdp_live+0x223/0x1a90 [ 1738.639407][T29676] ? 0xffffffffa00041c0 [ 1738.643551][T29676] ? text_poke_copy+0x79/0x90 [ 1738.648225][T29676] ? 0xffffffffa00041c0 [ 1738.652377][T29676] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1738.658277][T29676] ? 0xffffffffa00041c0 [ 1738.662429][T29676] ? xdp_convert_md_to_buff+0x330/0x330 [ 1738.667994][T29676] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1738.674268][T29676] ? bpf_test_init+0x119/0x140 [ 1738.679037][T29676] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1738.684496][T29676] bpf_prog_test_run_xdp+0x736/0xf10 [ 1738.689787][T29676] ? dev_put+0x80/0x80 [ 1738.693885][T29676] ? dev_put+0x80/0x80 [ 1738.697972][T29676] bpf_prog_test_run+0x31e/0x390 [ 1738.702926][T29676] __sys_bpf+0x62b/0x780 [ 1738.707172][T29676] ? bpf_link_show_fdinfo+0x380/0x380 [ 1738.712552][T29676] ? lock_chain_count+0x20/0x20 [ 1738.717404][T29676] __x64_sys_bpf+0x78/0x90 [ 1738.721824][T29676] do_syscall_64+0x4c/0xa0 [ 1738.726240][T29676] ? clear_bhb_loop+0x60/0xb0 [ 1738.730916][T29676] ? clear_bhb_loop+0x60/0xb0 [ 1738.735591][T29676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1738.741479][T29676] RIP: 0033:0x7f49f859cdd9 [ 1738.745894][T29676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1738.765924][T29676] RSP: 002b:00007f49f949f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1738.774339][T29676] RAX: ffffffffffffffda RBX: 00007f49f8815fa0 RCX: 00007f49f859cdd9 [ 1738.782308][T29676] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1738.790273][T29676] RBP: 00007f49f949f090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.798239][T29676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.806206][T29676] R13: 00007f49f8816038 R14: 00007f49f8815fa0 R15: 00007ffdf7c45a28 [ 1738.814184][T29676] [ 1740.371077][T29688] validate_nla: 5 callbacks suppressed [ 1740.371093][T29688] netlink: 'syz.0.7731': attribute type 10 has an invalid length. [ 1740.458565][T29688] team0: Device hsr_slave_0 failed to register rx_handler [ 1740.901120][T29709] netlink: 'syz.4.7741': attribute type 2 has an invalid length. [ 1740.963270][T29709] device 7 entered promiscuous mode [ 1741.384969][T29727] device bond_slave_1 entered promiscuous mode [ 1741.469074][T29727] device syzkaller0 entered promiscuous mode [ 1742.460626][T29749] FAULT_INJECTION: forcing a failure. [ 1742.460626][T29749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.520282][T29749] CPU: 1 PID: 29749 Comm: syz.4.7753 Not tainted syzkaller #0 [ 1742.527791][T29749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1742.537864][T29749] Call Trace: [ 1742.541162][T29749] [ 1742.544105][T29749] dump_stack_lvl+0x188/0x24e [ 1742.548820][T29749] ? show_regs_print_info+0x12/0x12 [ 1742.554054][T29749] ? load_image+0x400/0x400 [ 1742.558582][T29749] ? __lock_acquire+0x7d10/0x7d10 [ 1742.563631][T29749] ? __lock_acquire+0x7d10/0x7d10 [ 1742.568686][T29749] should_fail_ex+0x399/0x4d0 [ 1742.573389][T29749] _copy_from_user+0x2c/0x170 [ 1742.578093][T29749] ___sys_sendmsg+0x1c3/0x360 [ 1742.582799][T29749] ? __sys_sendmsg+0x290/0x290 [ 1742.587606][T29749] ? ktime_get_real_ts64+0x440/0x440 [ 1742.592927][T29749] __se_sys_sendmsg+0x1bb/0x2a0 [ 1742.597806][T29749] ? __x64_sys_sendmsg+0x80/0x80 [ 1742.602782][T29749] ? lockdep_hardirqs_on+0x94/0x140 [ 1742.608002][T29749] do_syscall_64+0x4c/0xa0 [ 1742.612448][T29749] ? clear_bhb_loop+0x60/0xb0 [ 1742.617143][T29749] ? clear_bhb_loop+0x60/0xb0 [ 1742.621846][T29749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1742.627756][T29749] RIP: 0033:0x7fd72f79cdd9 [ 1742.632185][T29749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.651814][T29749] RSP: 002b:00007fd7305e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1742.660259][T29749] RAX: ffffffffffffffda RBX: 00007fd72fa15fa0 RCX: 00007fd72f79cdd9 [ 1742.668249][T29749] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1742.676233][T29749] RBP: 00007fd7305e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.684214][T29749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.692193][T29749] R13: 00007fd72fa16038 R14: 00007fd72fa15fa0 R15: 00007ffef89322a8 [ 1742.700188][T29749] [ 1743.002931][T29762] netlink: 'syz.2.7759': attribute type 2 has an invalid length. [ 1743.033079][T29762] netlink: 'syz.2.7759': attribute type 8 has an invalid length. [ 1743.040863][T29762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7759'. [ 1743.436261][T29778] FAULT_INJECTION: forcing a failure. [ 1743.436261][T29778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1743.464391][T29778] CPU: 1 PID: 29778 Comm: syz.4.7764 Not tainted syzkaller #0 [ 1743.471893][T29778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1743.481960][T29778] Call Trace: [ 1743.485242][T29778] [ 1743.488167][T29778] dump_stack_lvl+0x188/0x24e [ 1743.492855][T29778] ? show_regs_print_info+0x12/0x12 [ 1743.498051][T29778] ? load_image+0x400/0x400 [ 1743.502552][T29778] ? __lock_acquire+0x7d10/0x7d10 [ 1743.507572][T29778] ? snprintf+0xe5/0x140 [ 1743.511815][T29778] should_fail_ex+0x399/0x4d0 [ 1743.516489][T29778] _copy_to_user+0x2c/0x130 [ 1743.520995][T29778] simple_read_from_buffer+0xe3/0x150 [ 1743.526363][T29778] proc_fail_nth_read+0x1a6/0x220 [ 1743.531388][T29778] ? proc_fault_inject_write+0x310/0x310 [ 1743.537019][T29778] ? fsnotify_perm+0x248/0x550 [ 1743.541780][T29778] ? proc_fault_inject_write+0x310/0x310 [ 1743.547404][T29778] vfs_read+0x2de/0xa00 [ 1743.551560][T29778] ? kernel_read+0x1e0/0x1e0 [ 1743.556145][T29778] ? __fget_files+0x28/0x4b0 [ 1743.560734][T29778] ? __fget_files+0x28/0x4b0 [ 1743.565323][T29778] ? __fget_files+0x43d/0x4b0 [ 1743.570002][T29778] ? __fdget_pos+0x2ae/0x360 [ 1743.574589][T29778] ? ksys_read+0x71/0x250 [ 1743.578917][T29778] ksys_read+0x14c/0x250 [ 1743.583163][T29778] ? vfs_write+0xa30/0xa30 [ 1743.587579][T29778] ? lockdep_hardirqs_on+0x94/0x140 [ 1743.592775][T29778] do_syscall_64+0x4c/0xa0 [ 1743.597187][T29778] ? clear_bhb_loop+0x60/0xb0 [ 1743.601858][T29778] ? clear_bhb_loop+0x60/0xb0 [ 1743.606534][T29778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1743.612426][T29778] RIP: 0033:0x7fd72f75d60e [ 1743.616834][T29778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1743.636431][T29778] RSP: 002b:00007fd7305e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1743.644839][T29778] RAX: ffffffffffffffda RBX: 00007fd7305e36c0 RCX: 00007fd72f75d60e [ 1743.652803][T29778] RDX: 000000000000000f RSI: 00007fd7305e30a0 RDI: 0000000000000006 [ 1743.660769][T29778] RBP: 00007fd7305e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.668731][T29778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1743.676694][T29778] R13: 00007fd72fa16038 R14: 00007fd72fa15fa0 R15: 00007ffef89322a8 [ 1743.684674][T29778] [ 1743.769862][T29782] netlink: 'syz.3.7765': attribute type 2 has an invalid length. [ 1744.640642][T29817] netlink: 'syz.1.7778': attribute type 21 has an invalid length. [ 1744.679811][T29817] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7778'. [ 1745.550762][T29843] FAULT_INJECTION: forcing a failure. [ 1745.550762][T29843] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.597907][T29843] CPU: 1 PID: 29843 Comm: syz.2.7786 Not tainted syzkaller #0 [ 1745.605429][T29843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1745.615503][T29843] Call Trace: [ 1745.618796][T29843] [ 1745.621725][T29843] dump_stack_lvl+0x188/0x24e [ 1745.626408][T29843] ? show_regs_print_info+0x12/0x12 [ 1745.631607][T29843] ? load_image+0x400/0x400 [ 1745.636108][T29843] ? __might_sleep+0xd0/0xd0 [ 1745.640693][T29843] ? __lock_acquire+0x7d10/0x7d10 [ 1745.645718][T29843] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1745.651875][T29843] should_fail_ex+0x399/0x4d0 [ 1745.656550][T29843] should_failslab+0x5/0x20 [ 1745.661048][T29843] slab_pre_alloc_hook+0x59/0x310 [ 1745.666071][T29843] ? iovec_from_user+0x83/0x360 [ 1745.670936][T29843] __kmem_cache_alloc_node+0x4f/0x260 [ 1745.676320][T29843] ? iovec_from_user+0x83/0x360 [ 1745.681177][T29843] __kmalloc+0xa0/0x240 [ 1745.685345][T29843] iovec_from_user+0x83/0x360 [ 1745.690024][T29843] __import_iovec+0x6d/0x500 [ 1745.694616][T29843] import_iovec+0x6f/0xa0 [ 1745.698945][T29843] ___sys_sendmsg+0x252/0x360 [ 1745.703629][T29843] ? __sys_sendmsg+0x290/0x290 [ 1745.708416][T29843] ? __lock_acquire+0x7d10/0x7d10 [ 1745.713454][T29843] __se_sys_sendmsg+0x1bb/0x2a0 [ 1745.718306][T29843] ? __x64_sys_sendmsg+0x80/0x80 [ 1745.723252][T29843] ? lockdep_hardirqs_on+0x94/0x140 [ 1745.728447][T29843] do_syscall_64+0x4c/0xa0 [ 1745.732864][T29843] ? clear_bhb_loop+0x60/0xb0 [ 1745.737536][T29843] ? clear_bhb_loop+0x60/0xb0 [ 1745.742209][T29843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1745.748096][T29843] RIP: 0033:0x7f5142f9cdd9 [ 1745.752510][T29843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.772111][T29843] RSP: 002b:00007f5143df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1745.780522][T29843] RAX: ffffffffffffffda RBX: 00007f5143215fa0 RCX: 00007f5142f9cdd9 [ 1745.788574][T29843] RDX: 00000000000012cd RSI: 0000200000000040 RDI: 0000000000000006 [ 1745.796586][T29843] RBP: 00007f5143df7090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.804562][T29843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.812626][T29843] R13: 00007f5143216038 R14: 00007f5143215fa0 R15: 00007fff24c15438 [ 1745.820607][T29843] [ 1745.826292][T25552] wlan1: Trigger new scan to find an IBSS to join [ 1745.952283][T29849] netlink: 'syz.3.7789': attribute type 3 has an invalid length. [ 1745.980655][T29849] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.7789'. [ 1746.000683][T29851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7790'. [ 1746.028843][T29851] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7790'. [ 1746.603907][T29871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7797'. [ 1747.570999][T29895] netlink: 'syz.3.7804': attribute type 3 has an invalid length. [ 1747.595373][T29895] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.7804'. [ 1747.805846][T29905] FAULT_INJECTION: forcing a failure. [ 1747.805846][T29905] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.849541][T29905] CPU: 1 PID: 29905 Comm: syz.1.7809 Not tainted syzkaller #0 [ 1747.857082][T29905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1747.867258][T29905] Call Trace: [ 1747.870562][T29905] [ 1747.873517][T29905] dump_stack_lvl+0x188/0x24e [ 1747.878236][T29905] ? show_regs_print_info+0x12/0x12 [ 1747.883468][T29905] ? load_image+0x400/0x400 [ 1747.888009][T29905] ? __might_sleep+0xd0/0xd0 [ 1747.892625][T29905] ? __lock_acquire+0x7d10/0x7d10 [ 1747.897689][T29905] should_fail_ex+0x399/0x4d0 [ 1747.902406][T29905] should_failslab+0x5/0x20 [ 1747.906924][T29905] slab_pre_alloc_hook+0x59/0x310 [ 1747.911975][T29905] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1747.917546][T29905] __kmem_cache_alloc_node+0x4f/0x260 [ 1747.922944][T29905] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1747.928502][T29905] __kmalloc+0xa0/0x240 [ 1747.932679][T29905] bpf_prog_test_run_skb+0x234/0x12a0 [ 1747.938050][T29905] ? __fget_files+0x28/0x4b0 [ 1747.942646][T29905] ? __fget_files+0x28/0x4b0 [ 1747.947244][T29905] ? __fget_files+0x43d/0x4b0 [ 1747.951942][T29905] ? cpu_online+0xa0/0xa0 [ 1747.956279][T29905] bpf_prog_test_run+0x31e/0x390 [ 1747.961226][T29905] __sys_bpf+0x62b/0x780 [ 1747.965476][T29905] ? bpf_link_show_fdinfo+0x380/0x380 [ 1747.970875][T29905] ? lock_chain_count+0x20/0x20 [ 1747.975743][T29905] __x64_sys_bpf+0x78/0x90 [ 1747.980168][T29905] do_syscall_64+0x4c/0xa0 [ 1747.984611][T29905] ? clear_bhb_loop+0x60/0xb0 [ 1747.989315][T29905] ? clear_bhb_loop+0x60/0xb0 [ 1747.994006][T29905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1747.999912][T29905] RIP: 0033:0x7f49f859cdd9 [ 1748.004338][T29905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.023946][T29905] RSP: 002b:00007f49f949f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1748.032363][T29905] RAX: ffffffffffffffda RBX: 00007f49f8815fa0 RCX: 00007f49f859cdd9 [ 1748.040333][T29905] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 1748.048306][T29905] RBP: 00007f49f949f090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.056277][T29905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.064249][T29905] R13: 00007f49f8816038 R14: 00007f49f8815fa0 R15: 00007ffdf7c45a28 [ 1748.072245][T29905] [ 1748.622968][ T6979] wlan1: Trigger new scan to find an IBSS to join [ 1748.702201][ T6979] wlan1: Trigger new scan to find an IBSS to join [ 1749.812974][T29946] netlink: 763 bytes leftover after parsing attributes in process `syz.3.7822'. [ 1750.523857][T29958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7827'. [ 1750.713271][ T75] wlan1: Trigger new scan to find an IBSS to join [ 1751.662469][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1751.669188][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1751.772939][ T6979] wlan1: Creating new IBSS network, BSSID 7e:ef:95:6e:ad:7b [ 1752.570123][T30000] FAULT_INJECTION: forcing a failure. [ 1752.570123][T30000] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.613030][T30002] netlink: 763 bytes leftover after parsing attributes in process `syz.0.7842'. [ 1752.625591][T30000] CPU: 0 PID: 30000 Comm: syz.1.7840 Not tainted syzkaller #0 [ 1752.633110][T30000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1752.643187][T30000] Call Trace: [ 1752.646485][T30000] [ 1752.649433][T30000] dump_stack_lvl+0x188/0x24e [ 1752.654144][T30000] ? show_regs_print_info+0x12/0x12 [ 1752.659374][T30000] ? load_image+0x400/0x400 [ 1752.663900][T30000] ? __might_sleep+0xd0/0xd0 [ 1752.668518][T30000] ? __lock_acquire+0x7d10/0x7d10 [ 1752.673571][T30000] should_fail_ex+0x399/0x4d0 [ 1752.678265][T30000] should_failslab+0x5/0x20 [ 1752.682785][T30000] slab_pre_alloc_hook+0x59/0x310 [ 1752.687824][T30000] ? apparmor_sk_alloc_security+0x74/0x100 [ 1752.693652][T30000] __kmem_cache_alloc_node+0x4f/0x260 [ 1752.699132][T30000] ? apparmor_sk_alloc_security+0x74/0x100 [ 1752.704957][T30000] kmalloc_trace+0x26/0xe0 [ 1752.709405][T30000] apparmor_sk_alloc_security+0x74/0x100 [ 1752.715061][T30000] security_sk_alloc+0x6a/0xa0 [ 1752.719855][T30000] sk_prot_alloc+0x101/0x210 [ 1752.724467][T30000] ? sk_alloc+0x20/0x340 [ 1752.728728][T30000] sk_alloc+0x36/0x340 [ 1752.732824][T30000] ? bpf_ctx_init+0x163/0x1a0 [ 1752.737496][T30000] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1752.743048][T30000] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1752.748422][T30000] ? __fget_files+0x28/0x4b0 [ 1752.753013][T30000] ? __fget_files+0x43d/0x4b0 [ 1752.757701][T30000] ? cpu_online+0xa0/0xa0 [ 1752.762031][T30000] bpf_prog_test_run+0x31e/0x390 [ 1752.766971][T30000] __sys_bpf+0x62b/0x780 [ 1752.771223][T30000] ? bpf_link_show_fdinfo+0x380/0x380 [ 1752.776601][T30000] ? lock_chain_count+0x20/0x20 [ 1752.781455][T30000] __x64_sys_bpf+0x78/0x90 [ 1752.785872][T30000] do_syscall_64+0x4c/0xa0 [ 1752.790286][T30000] ? clear_bhb_loop+0x60/0xb0 [ 1752.794964][T30000] ? clear_bhb_loop+0x60/0xb0 [ 1752.799639][T30000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1752.805536][T30000] RIP: 0033:0x7f49f859cdd9 [ 1752.809946][T30000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1752.829550][T30000] RSP: 002b:00007f49f949f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1752.837962][T30000] RAX: ffffffffffffffda RBX: 00007f49f8815fa0 RCX: 00007f49f859cdd9 [ 1752.845933][T30000] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 000000000000000a [ 1752.853896][T30000] RBP: 00007f49f949f090 R08: 0000000000000000 R09: 0000000000000000 [ 1752.861863][T30000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.869828][T30000] R13: 00007f49f8816038 R14: 00007f49f8815fa0 R15: 00007ffdf7c45a28 [ 1752.877809][T30000] [ 1752.914422][ T6979] wlan1: Creating new IBSS network, BSSID 92:33:90:b0:16:e2 [ 1753.026040][T30006] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.7843'. [ 1755.664331][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1756.619440][T25552] wlan1: Creating new IBSS network, BSSID 86:6a:ee:eb:2e:83 [ 1756.964131][T30053] netlink: 763 bytes leftover after parsing attributes in process `syz.2.7858'. [ 1757.008424][T30060] netlink: 50095 bytes leftover after parsing attributes in process `syz.4.7860'. [ 1757.568360][T30072] FAULT_INJECTION: forcing a failure. [ 1757.568360][T30072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1757.610149][T30072] CPU: 1 PID: 30072 Comm: syz.2.7865 Not tainted syzkaller #0 [ 1757.617667][T30072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1757.627745][T30072] Call Trace: [ 1757.631039][T30072] [ 1757.633983][T30072] dump_stack_lvl+0x188/0x24e [ 1757.638691][T30072] ? show_regs_print_info+0x12/0x12 [ 1757.643918][T30072] ? load_image+0x400/0x400 [ 1757.648457][T30072] ? __lock_acquire+0x7d10/0x7d10 [ 1757.653509][T30072] should_fail_ex+0x399/0x4d0 [ 1757.658207][T30072] _copy_from_user+0x2c/0x170 [ 1757.662905][T30072] iovec_from_user+0x143/0x360 [ 1757.667681][T30072] __import_iovec+0x6d/0x500 [ 1757.672275][T30072] import_iovec+0x6f/0xa0 [ 1757.676603][T30072] ___sys_sendmsg+0x252/0x360 [ 1757.681288][T30072] ? __sys_sendmsg+0x290/0x290 [ 1757.686067][T30072] ? __lock_acquire+0x7d10/0x7d10 [ 1757.691107][T30072] __se_sys_sendmsg+0x1bb/0x2a0 [ 1757.695958][T30072] ? ct_nmi_exit+0x145/0x1c0 [ 1757.700546][T30072] ? __x64_sys_sendmsg+0x80/0x80 [ 1757.705495][T30072] ? lockdep_hardirqs_on+0x94/0x140 [ 1757.710690][T30072] do_syscall_64+0x4c/0xa0 [ 1757.715114][T30072] ? clear_bhb_loop+0x60/0xb0 [ 1757.719784][T30072] ? clear_bhb_loop+0x60/0xb0 [ 1757.724458][T30072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1757.730356][T30072] RIP: 0033:0x7f5142f9cdd9 [ 1757.734768][T30072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.754370][T30072] RSP: 002b:00007f5143df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1757.762781][T30072] RAX: ffffffffffffffda RBX: 00007f5143215fa0 RCX: 00007f5142f9cdd9 [ 1757.770747][T30072] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1757.778712][T30072] RBP: 00007f5143df7090 R08: 0000000000000000 R09: 0000000000000000 [ 1757.786675][T30072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1757.794645][T30072] R13: 00007f5143216038 R14: 00007f5143215fa0 R15: 00007fff24c15438 [ 1757.802622][T30072] [ 1759.659995][T30078] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7869'. [ 1760.412529][T30114] netlink: 50095 bytes leftover after parsing attributes in process `syz.3.7880'. [ 1766.159240][T30153] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7893'. [ 1766.235313][T30153] bond0: (slave bond_slave_0): Releasing backup interface [ 1766.302703][T30153] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1766.447097][T30160] netlink: 50095 bytes leftover after parsing attributes in process `syz.2.7896'. [ 1766.691480][T30162] netlink: 'syz.1.7897': attribute type 10 has an invalid length. [ 1769.572835][T30192] device syzkaller0 left promiscuous mode [ 1770.384107][T30221] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7912'. [ 1770.384942][T30208] device bridge_slave_1 left promiscuous mode [ 1770.436228][T30208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.475438][T30208] device bridge_slave_0 left promiscuous mode [ 1770.481768][T30208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.531558][T30227] FAULT_INJECTION: forcing a failure. [ 1770.531558][T30227] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.555238][T30227] CPU: 0 PID: 30227 Comm: syz.4.7915 Not tainted syzkaller #0 [ 1770.562748][T30227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1770.572823][T30227] Call Trace: [ 1770.576111][T30227] [ 1770.579055][T30227] dump_stack_lvl+0x188/0x24e [ 1770.583765][T30227] ? show_regs_print_info+0x12/0x12 [ 1770.588988][T30227] ? load_image+0x400/0x400 [ 1770.593520][T30227] ? __lock_acquire+0x7d10/0x7d10 [ 1770.598582][T30227] should_fail_ex+0x399/0x4d0 [ 1770.603282][T30227] should_failslab+0x5/0x20 [ 1770.607798][T30227] slab_pre_alloc_hook+0x59/0x310 [ 1770.612845][T30227] ? rxrpc_alloc_call+0x2d4/0xbf0 [ 1770.617885][T30227] __kmem_cache_alloc_node+0x4f/0x260 [ 1770.623292][T30227] ? rxrpc_alloc_call+0x2d4/0xbf0 [ 1770.628334][T30227] kmalloc_trace+0x26/0xe0 [ 1770.632778][T30227] rxrpc_alloc_call+0x2d4/0xbf0 [ 1770.637651][T30227] rxrpc_new_client_call+0xf3/0xd30 [ 1770.642873][T30227] ? rxrpc_do_sendmsg+0xab9/0x10c0 [ 1770.648011][T30227] ? do_raw_read_unlock+0x39/0x70 [ 1770.653059][T30227] rxrpc_do_sendmsg+0xab9/0x10c0 [ 1770.658023][T30227] ? rxrpc_look_up_server_security+0x530/0x530 [ 1770.664187][T30227] ? rxrpc_sendmsg+0x467/0x890 [ 1770.668974][T30227] ? rxrpc_getsockopt+0x150/0x150 [ 1770.674014][T30227] ____sys_sendmsg+0x5be/0x970 [ 1770.678799][T30227] ? __sys_sendmsg_sock+0x30/0x30 [ 1770.683828][T30227] ? __import_iovec+0x315/0x500 [ 1770.688683][T30227] ? import_iovec+0x6f/0xa0 [ 1770.693186][T30227] ___sys_sendmsg+0x2a2/0x360 [ 1770.697870][T30227] ? __sys_sendmsg+0x290/0x290 [ 1770.702648][T30227] ? ktime_get_real_ts64+0x440/0x440 [ 1770.707948][T30227] __se_sys_sendmsg+0x1bb/0x2a0 [ 1770.712803][T30227] ? __x64_sys_sendmsg+0x80/0x80 [ 1770.717750][T30227] ? lockdep_hardirqs_on+0x94/0x140 [ 1770.722948][T30227] do_syscall_64+0x4c/0xa0 [ 1770.727362][T30227] ? clear_bhb_loop+0x60/0xb0 [ 1770.732121][T30227] ? clear_bhb_loop+0x60/0xb0 [ 1770.736798][T30227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1770.742697][T30227] RIP: 0033:0x7fd72f79cdd9 [ 1770.747116][T30227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.766728][T30227] RSP: 002b:00007fd7305e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1770.775152][T30227] RAX: ffffffffffffffda RBX: 00007fd72fa15fa0 RCX: 00007fd72f79cdd9 [ 1770.783124][T30227] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1770.791095][T30227] RBP: 00007fd7305e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1770.799067][T30227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.807042][T30227] R13: 00007fd72fa16038 R14: 00007fd72fa15fa0 R15: 00007ffef89322a8 [ 1770.815026][T30227] [ 1770.910061][T30233] FAULT_INJECTION: forcing a failure. [ 1770.910061][T30233] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.929400][T30233] CPU: 0 PID: 30233 Comm: syz.4.7917 Not tainted syzkaller #0 [ 1770.936897][T30233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1770.946964][T30233] Call Trace: [ 1770.950257][T30233] [ 1770.953199][T30233] dump_stack_lvl+0x188/0x24e [ 1770.957907][T30233] ? show_regs_print_info+0x12/0x12 [ 1770.963129][T30233] ? load_image+0x400/0x400 [ 1770.967651][T30233] ? mark_lock+0x94/0x320 [ 1770.971999][T30233] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1770.978012][T30233] should_fail_ex+0x399/0x4d0 [ 1770.982796][T30233] should_failslab+0x5/0x20 [ 1770.987312][T30233] slab_pre_alloc_hook+0x59/0x310 [ 1770.992354][T30233] ? lockdep_hardirqs_on+0x94/0x140 [ 1770.997575][T30233] kmem_cache_alloc+0x56/0x2f0 [ 1771.002358][T30233] ? skb_clone+0x1e7/0x370 [ 1771.006799][T30233] skb_clone+0x1e7/0x370 [ 1771.011068][T30233] __netlink_deliver_tap+0x3ed/0x800 [ 1771.016387][T30233] ? netlink_deliver_tap+0x2e/0x1b0 [ 1771.021606][T30233] netlink_deliver_tap+0x19c/0x1b0 [ 1771.026743][T30233] netlink_dump+0x832/0xd00 [ 1771.031287][T30233] ? netlink_lookup+0x200/0x200 [ 1771.036169][T30233] ? netlink_lookup+0x30/0x200 [ 1771.040952][T30233] ? netlink_lookup+0x30/0x200 [ 1771.045741][T30233] __netlink_dump_start+0x537/0x6f0 [ 1771.050969][T30233] netlink_diag_handler_dump+0x195/0x230 [ 1771.056619][T30233] ? __lock_acquire+0x7d10/0x7d10 [ 1771.061664][T30233] ? netlink_policy_dump_write+0x5e0/0x5e0 [ 1771.067484][T30233] ? netlink_diag_handler_dump+0x230/0x230 [ 1771.073304][T30233] ? netlink_diag_dump+0x230/0x230 [ 1771.078436][T30233] ? sock_diag_lock_handler+0x19/0x280 [ 1771.083910][T30233] ? sock_diag_lock_handler+0x19/0x280 [ 1771.089388][T30233] ? netlink_policy_dump_write+0x5e0/0x5e0 [ 1771.095213][T30233] sock_diag_rcv_msg+0x3cc/0x5f0 [ 1771.100171][T30233] netlink_rcv_skb+0x1fb/0x450 [ 1771.104960][T30233] ? sock_diag_bind+0xa0/0xa0 [ 1771.109655][T30233] ? netlink_ack+0x1170/0x1170 [ 1771.114450][T30233] ? netlink_deliver_tap+0x2e/0x1b0 [ 1771.119678][T30233] sock_diag_rcv+0x26/0x40 [ 1771.124108][T30233] netlink_unicast+0x74d/0x8d0 [ 1771.128905][T30233] netlink_sendmsg+0x8ad/0xbd0 [ 1771.133706][T30233] ? netlink_getsockopt+0x550/0x550 [ 1771.138929][T30233] ? aa_sock_msg_perm+0x94/0x150 [ 1771.143888][T30233] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1771.149187][T30233] ? security_socket_sendmsg+0x7c/0xa0 [ 1771.154671][T30233] ? netlink_getsockopt+0x550/0x550 [ 1771.159891][T30233] ____sys_sendmsg+0x5be/0x970 [ 1771.164691][T30233] ? __sys_sendmsg_sock+0x30/0x30 [ 1771.169747][T30233] ? __import_iovec+0x315/0x500 [ 1771.174623][T30233] ? import_iovec+0x6f/0xa0 [ 1771.179143][T30233] ___sys_sendmsg+0x2a2/0x360 [ 1771.183848][T30233] ? __sys_sendmsg+0x290/0x290 [ 1771.188655][T30233] ? __lock_acquire+0x7d10/0x7d10 [ 1771.193726][T30233] __se_sys_sendmsg+0x1bb/0x2a0 [ 1771.198603][T30233] ? __x64_sys_sendmsg+0x80/0x80 [ 1771.203581][T30233] ? lockdep_hardirqs_on+0x94/0x140 [ 1771.208816][T30233] do_syscall_64+0x4c/0xa0 [ 1771.213254][T30233] ? clear_bhb_loop+0x60/0xb0 [ 1771.217948][T30233] ? clear_bhb_loop+0x60/0xb0 [ 1771.222648][T30233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1771.228564][T30233] RIP: 0033:0x7fd72f79cdd9 [ 1771.232995][T30233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1771.252610][T30233] RSP: 002b:00007fd7305e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1771.261040][T30233] RAX: ffffffffffffffda RBX: 00007fd72fa15fa0 RCX: 00007fd72f79cdd9 [ 1771.269025][T30233] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1771.277010][T30233] RBP: 00007fd7305e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1771.284995][T30233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1771.292976][T30233] R13: 00007fd72fa16038 R14: 00007fd72fa15fa0 R15: 00007ffef89322a8 [ 1771.300978][T30233] [ 1776.479046][T30255] FAULT_INJECTION: forcing a failure. [ 1776.479046][T30255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1776.535090][T30255] CPU: 1 PID: 30255 Comm: syz.2.7933 Not tainted syzkaller #0 [ 1776.542614][T30255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1776.552666][T30255] Call Trace: [ 1776.555938][T30255] [ 1776.558862][T30255] dump_stack_lvl+0x188/0x24e [ 1776.563546][T30255] ? show_regs_print_info+0x12/0x12 [ 1776.568744][T30255] ? load_image+0x400/0x400 [ 1776.573248][T30255] ? __lock_acquire+0x7d10/0x7d10 [ 1776.578276][T30255] should_fail_ex+0x399/0x4d0 [ 1776.582956][T30255] prepare_alloc_pages+0x1e2/0x5f0 [ 1776.588073][T30255] __alloc_pages+0x130/0x4f0 [ 1776.592662][T30255] ? __rwlock_init+0x140/0x140 [ 1776.597417][T30255] ? zone_statistics+0x170/0x170 [ 1776.602365][T30255] pte_alloc_one+0x7b/0x310 [ 1776.606867][T30255] ? pfn_modify_allowed+0x560/0x560 [ 1776.612065][T30255] ? hugepage_vma_check+0x466/0x540 [ 1776.617265][T30255] handle_mm_fault+0x290f/0x3ee0 [ 1776.622212][T30255] ? numa_migrate_prep+0x250/0x250 [ 1776.627330][T30255] ? lock_mm_and_find_vma+0xae/0x2f0 [ 1776.632612][T30255] do_user_addr_fault+0x51f/0xb10 [ 1776.637645][T30255] exc_page_fault+0x60/0x100 [ 1776.642231][T30255] ? __might_fault+0xa6/0x120 [ 1776.646904][T30255] asm_exc_page_fault+0x22/0x30 [ 1776.651750][T30255] RIP: 0010:__get_user_4+0x1c/0x30 [ 1776.656864][T30255] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 1776.676466][T30255] RSP: 0018:ffffc9000c9bfd98 EFLAGS: 00050206 [ 1776.682532][T30255] RAX: 000000110e22fff6 RBX: ffff888077c254c0 RCX: 7e600c3de2d48000 [ 1776.690500][T30255] RDX: ffffffffffffffff RSI: ffffffff8a8c22a0 RDI: ffffffff8adf1320 [ 1776.698464][T30255] RBP: ffffc9000c9bfed8 R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d [ 1776.706433][T30255] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: 00000000c004743e [ 1776.714401][T30255] R13: ffff88802ed61aa8 R14: ffff88802ed61900 R15: 1ffff11005dac355 [ 1776.722377][T30255] ppp_ioctl+0x39a/0x1a50 [ 1776.726707][T30255] ? ppp_poll+0x250/0x250 [ 1776.731037][T30255] ? __fget_files+0x28/0x4b0 [ 1776.735637][T30255] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1776.740572][T30255] ? security_file_ioctl+0x7c/0xa0 [ 1776.745681][T30255] ? ppp_poll+0x250/0x250 [ 1776.750006][T30255] __se_sys_ioctl+0xfa/0x170 [ 1776.754599][T30255] do_syscall_64+0x4c/0xa0 [ 1776.759017][T30255] ? clear_bhb_loop+0x60/0xb0 [ 1776.763689][T30255] ? clear_bhb_loop+0x60/0xb0 [ 1776.768362][T30255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1776.774258][T30255] RIP: 0033:0x7f5142f9cdd9 [ 1776.778667][T30255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.798271][T30255] RSP: 002b:00007f5143df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1776.806686][T30255] RAX: ffffffffffffffda RBX: 00007f5143215fa0 RCX: 00007f5142f9cdd9 [ 1776.814653][T30255] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 000000000000000a [ 1776.822616][T30255] RBP: 00007f5143df7090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.830579][T30255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1776.838541][T30255] R13: 00007f5143216038 R14: 00007f5143215fa0 R15: 00007fff24c15438 [ 1776.846515][T30255] [ 1777.240431][T30276] FAULT_INJECTION: forcing a failure. [ 1777.240431][T30276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1777.276908][T30276] CPU: 0 PID: 30276 Comm: syz.0.7931 Not tainted syzkaller #0 [ 1777.284421][T30276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1777.294492][T30276] Call Trace: [ 1777.297780][T30276] [ 1777.300717][T30276] dump_stack_lvl+0x188/0x24e [ 1777.305424][T30276] ? show_regs_print_info+0x12/0x12 [ 1777.310643][T30276] ? load_image+0x400/0x400 [ 1777.315173][T30276] ? should_fail_ex+0x31e/0x4d0 [ 1777.320046][T30276] should_fail_ex+0x399/0x4d0 [ 1777.324740][T30276] _copy_from_user+0x2c/0x170 [ 1777.329436][T30276] iovec_from_user+0x143/0x360 [ 1777.334221][T30276] __import_iovec+0x6d/0x500 [ 1777.338830][T30276] import_iovec+0x6f/0xa0 [ 1777.343174][T30276] ___sys_sendmsg+0x252/0x360 [ 1777.347877][T30276] ? __sys_sendmsg+0x290/0x290 [ 1777.352683][T30276] ? ktime_get_real_ts64+0x440/0x440 [ 1777.358005][T30276] __se_sys_sendmsg+0x1bb/0x2a0 [ 1777.362888][T30276] ? __x64_sys_sendmsg+0x80/0x80 [ 1777.367860][T30276] ? lockdep_hardirqs_on+0x94/0x140 [ 1777.373081][T30276] do_syscall_64+0x4c/0xa0 [ 1777.377518][T30276] ? clear_bhb_loop+0x60/0xb0 [ 1777.382211][T30276] ? clear_bhb_loop+0x60/0xb0 [ 1777.386910][T30276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1777.392822][T30276] RIP: 0033:0x7feb4959cdd9 [ 1777.397249][T30276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1777.416871][T30276] RSP: 002b:00007feb4a407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1777.425304][T30276] RAX: ffffffffffffffda RBX: 00007feb49815fa0 RCX: 00007feb4959cdd9 [ 1777.433292][T30276] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 1777.441283][T30276] RBP: 00007feb4a407090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.449273][T30276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.457260][T30276] R13: 00007feb49816038 R14: 00007feb49815fa0 R15: 00007ffd13d1beb8 [ 1777.465260][T30276] [ 1777.707894][T30288] device syzkaller0 entered promiscuous mode [ 1777.748154][T30288] netlink: 'syz.4.7935': attribute type 2 has an invalid length. [ 1778.222090][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 1778.505887][T30313] FAULT_INJECTION: forcing a failure. [ 1778.505887][T30313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.515443][T30314] FAULT_INJECTION: forcing a failure. [ 1778.515443][T30314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.566935][T30314] CPU: 0 PID: 30314 Comm: syz.1.7941 Not tainted syzkaller #0 [ 1778.574441][T30314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1778.584508][T30314] Call Trace: [ 1778.587798][T30314] [ 1778.590740][T30314] dump_stack_lvl+0x188/0x24e [ 1778.595445][T30314] ? show_regs_print_info+0x12/0x12 [ 1778.600665][T30314] ? load_image+0x400/0x400 [ 1778.605190][T30314] ? __lock_acquire+0x7d10/0x7d10 [ 1778.610230][T30314] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1778.615977][T30314] should_fail_ex+0x399/0x4d0 [ 1778.620678][T30314] _copy_from_user+0x2c/0x170 [ 1778.625379][T30314] dev_ethtool+0xc2/0x12f0 [ 1778.629822][T30314] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1778.636082][T30314] ? __lock_acquire+0x7d10/0x7d10 [ 1778.641126][T30314] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1778.647303][T30314] ? full_name_hash+0x8e/0xe0 [ 1778.651997][T30314] ? dev_load+0x1d/0x1e0 [ 1778.656254][T30314] ? dev_load+0x1d/0x1e0 [ 1778.660517][T30314] dev_ioctl+0x474/0xe80 [ 1778.664782][T30314] sock_do_ioctl+0x245/0x320 [ 1778.669390][T30314] ? sock_show_fdinfo+0xb0/0xb0 [ 1778.674266][T30314] sock_ioctl+0x4d2/0x710 [ 1778.678610][T30314] ? sock_poll+0x410/0x410 [ 1778.683044][T30314] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1778.688001][T30314] ? security_file_ioctl+0x7c/0xa0 [ 1778.693130][T30314] ? sock_poll+0x410/0x410 [ 1778.697558][T30314] __se_sys_ioctl+0xfa/0x170 [ 1778.702170][T30314] do_syscall_64+0x4c/0xa0 [ 1778.706622][T30314] ? clear_bhb_loop+0x60/0xb0 [ 1778.711317][T30314] ? clear_bhb_loop+0x60/0xb0 [ 1778.716010][T30314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1778.721918][T30314] RIP: 0033:0x7f49f859cdd9 [ 1778.726343][T30314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.745966][T30314] RSP: 002b:00007f49f949f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1778.754397][T30314] RAX: ffffffffffffffda RBX: 00007f49f8815fa0 RCX: 00007f49f859cdd9 [ 1778.762384][T30314] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000011 [ 1778.770367][T30314] RBP: 00007f49f949f090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.778349][T30314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.786333][T30314] R13: 00007f49f8816038 R14: 00007f49f8815fa0 R15: 00007ffdf7c45a28 [ 1778.794334][T30314] [ 1778.797427][T30313] CPU: 1 PID: 30313 Comm: syz.3.7939 Not tainted syzkaller #0 [ 1778.804902][T30313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1778.814954][T30313] Call Trace: [ 1778.818224][T30313] [ 1778.821148][T30313] dump_stack_lvl+0x188/0x24e [ 1778.825832][T30313] ? show_regs_print_info+0x12/0x12 [ 1778.831029][T30313] ? load_image+0x400/0x400 [ 1778.835531][T30313] ? __lock_acquire+0x7d10/0x7d10 [ 1778.840551][T30313] ? __fget_files+0x28/0x4b0 [ 1778.845142][T30313] should_fail_ex+0x399/0x4d0 [ 1778.849814][T30313] _copy_from_user+0x2c/0x170 [ 1778.854486][T30313] generic_map_update_batch+0x4f3/0x810 [ 1778.860026][T30313] ? lock_chain_count+0x20/0x20 [ 1778.864884][T30313] ? rcu_read_unlock+0xa0/0xa0 [ 1778.869654][T30313] ? __fdget+0x17c/0x200 [ 1778.873908][T30313] ? rcu_read_unlock+0xa0/0xa0 [ 1778.878664][T30313] bpf_map_do_batch+0x466/0x600 [ 1778.883515][T30313] __sys_bpf+0x6f7/0x780 [ 1778.887757][T30313] ? bpf_link_show_fdinfo+0x380/0x380 [ 1778.893133][T30313] ? lock_chain_count+0x20/0x20 [ 1778.897982][T30313] __x64_sys_bpf+0x78/0x90 [ 1778.902394][T30313] do_syscall_64+0x4c/0xa0 [ 1778.906807][T30313] ? clear_bhb_loop+0x60/0xb0 [ 1778.911483][T30313] ? clear_bhb_loop+0x60/0xb0 [ 1778.916154][T30313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1778.922048][T30313] RIP: 0033:0x7fe72239cdd9 [ 1778.926454][T30313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.946052][T30313] RSP: 002b:00007fe7232f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1778.954475][T30313] RAX: ffffffffffffffda RBX: 00007fe722615fa0 RCX: 00007fe72239cdd9 [ 1778.962455][T30313] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1778.970424][T30313] RBP: 00007fe7232f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.978391][T30313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.986361][T30313] R13: 00007fe722616038 R14: 00007fe722615fa0 R15: 00007fff7ad9b9c8 [ 1778.994341][T30313] [ 1779.547071][T30329] FAULT_INJECTION: forcing a failure. [ 1779.547071][T30329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1779.566548][T30329] CPU: 0 PID: 30329 Comm: syz.1.7947 Not tainted syzkaller #0 [ 1779.574054][T30329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1779.584121][T30329] Call Trace: [ 1779.587413][T30329] [ 1779.590356][T30329] dump_stack_lvl+0x188/0x24e [ 1779.595058][T30329] ? show_regs_print_info+0x12/0x12 [ 1779.600282][T30329] ? load_image+0x400/0x400 [ 1779.604805][T30329] ? __lock_acquire+0x7d10/0x7d10 [ 1779.609864][T30329] should_fail_ex+0x399/0x4d0 [ 1779.614564][T30329] _copy_from_user+0x2c/0x170 [ 1779.619261][T30329] generic_map_update_batch+0x4f3/0x810 [ 1779.624826][T30329] ? lock_chain_count+0x20/0x20 [ 1779.629686][T30329] ? rcu_read_unlock+0xa0/0xa0 [ 1779.634453][T30329] ? __fdget+0x17c/0x200 [ 1779.638698][T30329] ? rcu_read_unlock+0xa0/0xa0 [ 1779.643456][T30329] bpf_map_do_batch+0x466/0x600 [ 1779.648306][T30329] __sys_bpf+0x6f7/0x780 [ 1779.652570][T30329] ? bpf_link_show_fdinfo+0x380/0x380 [ 1779.657951][T30329] ? lock_chain_count+0x20/0x20 [ 1779.662802][T30329] __x64_sys_bpf+0x78/0x90 [ 1779.667221][T30329] do_syscall_64+0x4c/0xa0 [ 1779.671635][T30329] ? clear_bhb_loop+0x60/0xb0 [ 1779.676307][T30329] ? clear_bhb_loop+0x60/0xb0 [ 1779.680981][T30329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1779.686872][T30329] RIP: 0033:0x7f49f859cdd9 [ 1779.691278][T30329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.710875][T30329] RSP: 002b:00007f49f949f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1779.719294][T30329] RAX: ffffffffffffffda RBX: 00007f49f8815fa0 RCX: 00007f49f859cdd9 [ 1779.727268][T30329] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1779.735237][T30329] RBP: 00007f49f949f090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.743201][T30329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.751169][T30329] R13: 00007f49f8816038 R14: 00007f49f8815fa0 R15: 00007ffdf7c45a28 [ 1779.759147][T30329] [ 1780.250785][T30339] netlink: 'syz.3.7950': attribute type 10 has an invalid length. [ 1780.311225][T30339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7950'. [ 1780.393293][T30338] netlink: 'syz.3.7950': attribute type 10 has an invalid length. [ 1780.401330][T30338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7950'. [ 1780.958835][T30358] FAULT_INJECTION: forcing a failure. [ 1780.958835][T30358] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.045778][T30358] CPU: 0 PID: 30358 Comm: syz.2.7955 Not tainted syzkaller #0 [ 1781.053298][T30358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1781.063366][T30358] Call Trace: [ 1781.066658][T30358] [ 1781.069599][T30358] dump_stack_lvl+0x188/0x24e [ 1781.074307][T30358] ? show_regs_print_info+0x12/0x12 [ 1781.079530][T30358] ? load_image+0x400/0x400 [ 1781.084052][T30358] ? __lock_acquire+0x7d10/0x7d10 [ 1781.089101][T30358] should_fail_ex+0x399/0x4d0 [ 1781.093798][T30358] should_failslab+0x5/0x20 [ 1781.098310][T30358] slab_pre_alloc_hook+0x59/0x310 [ 1781.103348][T30358] ? rxrpc_alloc_call+0x2d4/0xbf0 [ 1781.108383][T30358] __kmem_cache_alloc_node+0x4f/0x260 [ 1781.113778][T30358] ? rxrpc_alloc_call+0x2d4/0xbf0 [ 1781.118815][T30358] kmalloc_trace+0x26/0xe0 [ 1781.123268][T30358] rxrpc_alloc_call+0x2d4/0xbf0 [ 1781.128139][T30358] rxrpc_new_client_call+0xf3/0xd30 [ 1781.133357][T30358] ? rxrpc_do_sendmsg+0xab9/0x10c0 [ 1781.138487][T30358] ? do_raw_read_unlock+0x39/0x70 [ 1781.143528][T30358] rxrpc_do_sendmsg+0xab9/0x10c0 [ 1781.148485][T30358] ? rxrpc_process_local_events+0xa50/0xa50 [ 1781.154404][T30358] ? rxrpc_look_up_server_security+0x530/0x530 [ 1781.160593][T30358] ? rxrpc_sendmsg+0x467/0x890 [ 1781.165386][T30358] ? rxrpc_getsockopt+0x150/0x150 [ 1781.170438][T30358] ____sys_sendmsg+0x5be/0x970 [ 1781.175238][T30358] ? __sys_sendmsg_sock+0x30/0x30 [ 1781.180282][T30358] ? __import_iovec+0x315/0x500 [ 1781.185155][T30358] ? import_iovec+0x6f/0xa0 [ 1781.189678][T30358] ___sys_sendmsg+0x2a2/0x360 [ 1781.194384][T30358] ? __sys_sendmsg+0x290/0x290 [ 1781.199184][T30358] ? ktime_get_real_ts64+0x440/0x440 [ 1781.204506][T30358] __se_sys_sendmsg+0x1bb/0x2a0 [ 1781.209381][T30358] ? __x64_sys_sendmsg+0x80/0x80 [ 1781.214356][T30358] ? lockdep_hardirqs_on+0x94/0x140 [ 1781.219588][T30358] do_syscall_64+0x4c/0xa0 [ 1781.224026][T30358] ? clear_bhb_loop+0x60/0xb0 [ 1781.228720][T30358] ? clear_bhb_loop+0x60/0xb0 [ 1781.233424][T30358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1781.239339][T30358] RIP: 0033:0x7f5142f9cdd9 [ 1781.243769][T30358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1781.263393][T30358] RSP: 002b:00007f5143dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1781.271830][T30358] RAX: ffffffffffffffda RBX: 00007f5143216090 RCX: 00007f5142f9cdd9 [ 1781.279827][T30358] RDX: 000000002004fc10 RSI: 0000200000000080 RDI: 0000000000000006 [ 1781.287814][T30358] RBP: 00007f5143dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.295800][T30358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1781.303785][T30358] R13: 00007f5143216128 R14: 00007f5143216090 R15: 00007fff24c15438 [ 1781.311787][T30358] [ 1782.498512][T30367] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.7957'. [ 1782.865058][T30383] FAULT_INJECTION: forcing a failure. [ 1782.865058][T30383] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.923701][T30383] CPU: 0 PID: 30383 Comm: syz.0.7963 Not tainted syzkaller #0 [ 1782.931228][T30383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1782.941307][T30383] Call Trace: [ 1782.944607][T30383] [ 1782.947559][T30383] dump_stack_lvl+0x188/0x24e [ 1782.952273][T30383] ? show_regs_print_info+0x12/0x12 [ 1782.957504][T30383] ? load_image+0x400/0x400 [ 1782.962033][T30383] ? __lock_acquire+0x7d10/0x7d10 [ 1782.967085][T30383] ? __lock_acquire+0x7d10/0x7d10 [ 1782.972140][T30383] should_fail_ex+0x399/0x4d0 [ 1782.976846][T30383] should_failslab+0x5/0x20 [ 1782.981366][T30383] slab_pre_alloc_hook+0x59/0x310 [ 1782.986429][T30383] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1782.992097][T30383] ? cgroup_file_open+0x85/0x2a0 [ 1782.997063][T30383] __kmem_cache_alloc_node+0x4f/0x260 [ 1783.002469][T30383] ? cgroup_file_open+0x85/0x2a0 [ 1783.007436][T30383] kmalloc_trace+0x26/0xe0 [ 1783.011888][T30383] cgroup_file_open+0x85/0x2a0 [ 1783.016673][T30383] ? cgroup_show_options+0xf0/0xf0 [ 1783.021814][T30383] kernfs_fop_open+0xa01/0xcc0 [ 1783.026612][T30383] ? kernfs_fop_mmap+0x550/0x550 [ 1783.031586][T30383] do_dentry_open+0x7e9/0x10d0 [ 1783.036399][T30383] path_openat+0x2635/0x2ee0 [ 1783.041048][T30383] ? do_filp_open+0x430/0x430 [ 1783.045754][T30383] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1783.051944][T30383] do_filp_open+0x1f1/0x430 [ 1783.056472][T30383] ? vfs_tmpfile+0x480/0x480 [ 1783.061117][T30383] ? _raw_spin_unlock+0x24/0x40 [ 1783.066079][T30383] ? alloc_fd+0x58f/0x630 [ 1783.070451][T30383] do_sys_openat2+0x150/0x4b0 [ 1783.075165][T30383] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1783.081351][T30383] ? do_sys_open+0xe0/0xe0 [ 1783.085795][T30383] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1783.091803][T30383] ? lock_chain_count+0x20/0x20 [ 1783.096678][T30383] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1783.102694][T30383] __x64_sys_openat+0x135/0x160 [ 1783.107583][T30383] do_syscall_64+0x4c/0xa0 [ 1783.112111][T30383] ? clear_bhb_loop+0x60/0xb0 [ 1783.116808][T30383] ? clear_bhb_loop+0x60/0xb0 [ 1783.121515][T30383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1783.127440][T30383] RIP: 0033:0x7feb4959cdd9 [ 1783.131878][T30383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1783.151507][T30383] RSP: 002b:00007feb4a3e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1783.159943][T30383] RAX: ffffffffffffffda RBX: 00007feb49816090 RCX: 00007feb4959cdd9 [ 1783.167950][T30383] RDX: 000000000000275a RSI: 0000200000000040 RDI: 0000000000000006 [ 1783.175941][T30383] RBP: 00007feb4a3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1783.183930][T30383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1783.191917][T30383] R13: 00007feb49816128 R14: 00007feb49816090 R15: 00007ffd13d1beb8 [ 1783.199937][T30383] [ 1785.797243][ T4328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1786.305218][T30412] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7974'. [ 1786.663549][ T4328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1786.819964][T30416] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7975'. [ 1787.063957][T30425] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7977'. [ 1787.201708][T30425] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1787.242318][T30425] CPU: 0 PID: 30425 Comm: syz.0.7977 Not tainted syzkaller #0 [ 1787.249834][T30425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1787.259905][T30425] Call Trace: [ 1787.263214][T30425] [ 1787.266163][T30425] dump_stack_lvl+0x188/0x24e [ 1787.270881][T30425] ? show_regs_print_info+0x12/0x12 [ 1787.276124][T30425] ? load_image+0x400/0x400 [ 1787.280676][T30425] sysfs_warn_dup+0x8a/0xa0 [ 1787.285211][T30425] sysfs_do_create_link_sd+0xc0/0x110 [ 1787.290617][T30425] device_add+0x7ed/0xfb0 [ 1787.294988][T30425] wiphy_register+0x1d9f/0x2ac0 [ 1787.299893][T30425] ? cfg80211_event_work+0x40/0x40 [ 1787.305056][T30425] ? minstrel_ht_alloc+0x894/0xa20 [ 1787.310212][T30425] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1787.316312][T30425] ieee80211_register_hw+0x2d00/0x39f0 [ 1787.321817][T30425] ? ieee80211_register_hw+0xf21/0x39f0 [ 1787.327390][T30425] ? ieee80211_register_hw+0xf21/0x39f0 [ 1787.332979][T30425] ? ieee80211_tasklet_handler+0x20/0x20 [ 1787.338659][T30425] ? memset+0x1e/0x40 [ 1787.342664][T30425] ? __hrtimer_init+0x186/0x270 [ 1787.347543][T30425] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1787.353321][T30425] hwsim_new_radio_nl+0xafa/0xce0 [ 1787.358394][T30425] genl_family_rcv_msg_doit+0x22a/0x330 [ 1787.363969][T30425] ? end_current_label_crit_section+0x170/0x170 [ 1787.370241][T30425] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1787.376177][T30425] ? bpf_lsm_capable+0x5/0x10 [ 1787.380877][T30425] ? security_capable+0x85/0xb0 [ 1787.385773][T30425] genl_rcv_msg+0x604/0x790 [ 1787.390316][T30425] ? genl_bind+0x360/0x360 [ 1787.394763][T30425] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1787.401143][T30425] netlink_rcv_skb+0x1fb/0x450 [ 1787.405943][T30425] ? genl_bind+0x360/0x360 [ 1787.410383][T30425] ? netlink_ack+0x1170/0x1170 [ 1787.415191][T30425] ? down_read+0x1a8/0x2d0 [ 1787.419643][T30425] genl_rcv+0x24/0x40 [ 1787.423643][T30425] netlink_unicast+0x74d/0x8d0 [ 1787.428454][T30425] netlink_sendmsg+0x8ad/0xbd0 [ 1787.433265][T30425] ? netlink_getsockopt+0x550/0x550 [ 1787.438501][T30425] ? aa_sock_msg_perm+0x94/0x150 [ 1787.443463][T30425] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1787.448770][T30425] ? security_socket_sendmsg+0x7c/0xa0 [ 1787.454264][T30425] ? netlink_getsockopt+0x550/0x550 [ 1787.459490][T30425] ____sys_sendmsg+0x5be/0x970 [ 1787.464297][T30425] ? __sys_sendmsg_sock+0x30/0x30 [ 1787.469350][T30425] ? __import_iovec+0x315/0x500 [ 1787.474234][T30425] ? import_iovec+0x6f/0xa0 [ 1787.478766][T30425] ___sys_sendmsg+0x2a2/0x360 [ 1787.483494][T30425] ? __lock_acquire+0x7d10/0x7d10 [ 1787.488552][T30425] ? __sys_sendmsg+0x290/0x290 [ 1787.493407][T30425] __se_sys_sendmsg+0x1bb/0x2a0 [ 1787.498292][T30425] ? ct_nmi_exit+0x145/0x1c0 [ 1787.502921][T30425] ? __x64_sys_sendmsg+0x80/0x80 [ 1787.507926][T30425] ? lockdep_hardirqs_on+0x94/0x140 [ 1787.513154][T30425] do_syscall_64+0x4c/0xa0 [ 1787.517605][T30425] ? clear_bhb_loop+0x60/0xb0 [ 1787.522307][T30425] ? clear_bhb_loop+0x60/0xb0 [ 1787.527030][T30425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1787.532954][T30425] RIP: 0033:0x7feb4959cdd9 [ 1787.537393][T30425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1787.557022][T30425] RSP: 002b:00007feb4a3c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1787.565462][T30425] RAX: ffffffffffffffda RBX: 00007feb49816180 RCX: 00007feb4959cdd9 [ 1787.573457][T30425] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1787.581447][T30425] RBP: 00007feb49632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1787.589443][T30425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1787.597429][T30425] R13: 00007feb49816218 R14: 00007feb49816180 R15: 00007ffd13d1beb8 [ 1787.605449][T30425] [ 1787.933132][T30436] FAULT_INJECTION: forcing a failure. [ 1787.933132][T30436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1787.994735][T30436] CPU: 1 PID: 30436 Comm: syz.4.7979 Not tainted syzkaller #0 [ 1788.002251][T30436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1788.012326][T30436] Call Trace: [ 1788.015623][T30436] [ 1788.018569][T30436] dump_stack_lvl+0x188/0x24e [ 1788.023280][T30436] ? show_regs_print_info+0x12/0x12 [ 1788.028503][T30436] ? load_image+0x400/0x400 [ 1788.033037][T30436] ? __might_fault+0xa6/0x120 [ 1788.037748][T30436] should_fail_ex+0x399/0x4d0 [ 1788.042477][T30436] copyin+0x1b/0x120 [ 1788.046396][T30436] _copy_from_iter+0x447/0x1130 [ 1788.051279][T30436] ? copyout_mc+0x110/0x110 [ 1788.055807][T30436] ? __virt_addr_valid+0x188/0x540 [ 1788.060942][T30436] ? __virt_addr_valid+0x188/0x540 [ 1788.066080][T30436] ? __virt_addr_valid+0x465/0x540 [ 1788.071225][T30436] ? __check_object_size+0x500/0xa40 [ 1788.076540][T30436] pfkey_sendmsg+0x1ff/0x1090 [ 1788.081243][T30436] ? __might_sleep+0xd0/0xd0 [ 1788.085858][T30436] ? pfkey_release+0x310/0x310 [ 1788.090651][T30436] ? aa_sk_perm+0x81f/0x950 [ 1788.095186][T30436] ? __might_fault+0xa6/0x120 [ 1788.099880][T30436] ? aa_af_perm+0x340/0x340 [ 1788.104401][T30436] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1788.110838][T30436] ? aa_sock_msg_perm+0x94/0x150 [ 1788.115777][T30436] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1788.121061][T30436] ? security_socket_sendmsg+0x7c/0xa0 [ 1788.126527][T30436] ? pfkey_release+0x310/0x310 [ 1788.131287][T30436] ____sys_sendmsg+0x5be/0x970 [ 1788.136068][T30436] ? __sys_sendmsg_sock+0x30/0x30 [ 1788.141098][T30436] ? __import_iovec+0x315/0x500 [ 1788.145967][T30436] ? import_iovec+0x6f/0xa0 [ 1788.150469][T30436] ___sys_sendmsg+0x2a2/0x360 [ 1788.155155][T30436] ? __sys_sendmsg+0x290/0x290 [ 1788.159942][T30436] ? __lock_acquire+0x7d10/0x7d10 [ 1788.164990][T30436] __se_sys_sendmsg+0x1bb/0x2a0 [ 1788.169844][T30436] ? __x64_sys_sendmsg+0x80/0x80 [ 1788.174797][T30436] ? lockdep_hardirqs_on+0x94/0x140 [ 1788.180000][T30436] do_syscall_64+0x4c/0xa0 [ 1788.184417][T30436] ? clear_bhb_loop+0x60/0xb0 [ 1788.189096][T30436] ? clear_bhb_loop+0x60/0xb0 [ 1788.193771][T30436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1788.199661][T30436] RIP: 0033:0x7fd72f79cdd9 [ 1788.204075][T30436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.223680][T30436] RSP: 002b:00007fd7305e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1788.232096][T30436] RAX: ffffffffffffffda RBX: 00007fd72fa15fa0 RCX: 00007fd72f79cdd9 [ 1788.240063][T30436] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 1788.248033][T30436] RBP: 00007fd7305e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.256002][T30436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.263966][T30436] R13: 00007fd72fa16038 R14: 00007fd72fa15fa0 R15: 00007ffef89322a8 [ 1788.271966][T30436] [ 1788.959654][T30449] netlink: 'syz.1.7984': attribute type 1 has an invalid length. [ 1789.040866][T30449] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.7984'. [ 1789.207647][T30443] netlink: 'syz.4.7982': attribute type 5 has an invalid length. [ 1789.213380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1789.228527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1789.241613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1789.254661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1789.267780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1789.280858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1789.294707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1789.309016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1789.322229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1789.335310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1789.803833][T30462] netlink: 'syz.0.7987': attribute type 21 has an invalid length. [ 1789.884815][T30462] device pim6reg1 entered promiscuous mode [ 1791.624449][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.630822][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.231702][ C1] net_ratelimit: 1877 callbacks suppressed [ 1794.231720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1794.251431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1794.264339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1794.277263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1794.290210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1794.303150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1794.316107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1794.329044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1794.342062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1794.355001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1794.474315][T30494] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.8000'. [ 1794.525427][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1795.296877][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1795.983514][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1796.839805][T30545] netlink: 'syz.3.8013': attribute type 21 has an invalid length. [ 1796.855673][T30545] netlink: 'syz.3.8013': attribute type 6 has an invalid length. [ 1796.897937][T30545] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8013'. [ 1799.232259][ C1] net_ratelimit: 2288 callbacks suppressed [ 1799.232279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1799.251014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1799.263928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1799.276850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1799.289800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1799.302771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1799.315290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1799.328025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1799.340500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1799.354500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1799.610618][T30552] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.8014'. [ 1799.636050][T30552] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.8014'. [ 1802.895055][T30577] tipc: Started in network mode [ 1802.901884][T30577] tipc: Node identity 9215a268, cluster identity 4711 [ 1802.926546][T30577] tipc: Node number set to 2450891368 [ 1803.210595][T30582] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8027'. [ 1804.242415][ C1] net_ratelimit: 2081 callbacks suppressed [ 1804.242433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1804.261303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1804.274375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1804.287464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1804.300710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1804.313764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1804.326841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1804.339901][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1804.352950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1804.365995][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1806.170978][T30582] device hsr_slave_0 left promiscuous mode [ 1806.232640][T30582] device hsr_slave_1 left promiscuous mode [ 1806.499691][T30603] netlink: 'syz.4.8032': attribute type 4 has an invalid length. [ 1806.548600][T30603] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.8032'. [ 1807.331328][T30627] netlink: 'syz.0.8039': attribute type 21 has an invalid length. [ 1807.339567][T30627] netlink: 'syz.0.8039': attribute type 1 has an invalid length. [ 1807.363315][T30627] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.8039'. [ 1807.398656][T30626] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.8040'. [ 1807.645050][T30634] netlink: 'syz.2.8042': attribute type 4 has an invalid length. [ 1807.658763][T30634] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8042'. [ 1809.272794][ C1] net_ratelimit: 2684 callbacks suppressed [ 1809.272814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1809.291578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1809.304197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1809.317271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1809.329792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1809.342805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1809.355332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1809.368016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1809.381150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1809.394009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1810.800482][T30659] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8051'. [ 1811.096725][T30667] netlink: 'syz.4.8055': attribute type 4 has an invalid length. [ 1811.119408][T30667] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8055'. [ 1811.835967][T30678] sctp: [Deprecated]: syz.0.8060 (pid 30678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1811.835967][T30678] Use struct sctp_sack_info instead [ 1814.282199][ C1] net_ratelimit: 2573 callbacks suppressed [ 1814.282217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1814.301318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1814.314427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1814.327584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1814.340757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1814.353904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1814.367076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1814.380211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1814.393304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1814.407378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1817.642128][T30704] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8071'. [ 1817.747224][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1817.828583][T30707] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8071'. [ 1818.544141][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1818.890095][T30724] netlink: 'syz.3.8077': attribute type 4 has an invalid length. [ 1818.926821][T30724] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8077'. [ 1819.292202][ C0] net_ratelimit: 4590 callbacks suppressed [ 1819.292222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1819.310599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1819.313390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1819.322940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1819.335584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1819.346978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1819.359635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1819.370779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1819.383408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1819.394552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1820.813629][T30727] FAULT_INJECTION: forcing a failure. [ 1820.813629][T30727] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.841374][T30727] CPU: 0 PID: 30727 Comm: syz.0.8078 Not tainted syzkaller #0 [ 1820.848888][T30727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1820.858959][T30727] Call Trace: [ 1820.862255][T30727] [ 1820.865210][T30727] dump_stack_lvl+0x188/0x24e [ 1820.869918][T30727] ? show_regs_print_info+0x12/0x12 [ 1820.875149][T30727] ? load_image+0x400/0x400 [ 1820.879681][T30727] ? __might_sleep+0xd0/0xd0 [ 1820.884283][T30727] ? __lock_acquire+0x7d10/0x7d10 [ 1820.889332][T30727] should_fail_ex+0x399/0x4d0 [ 1820.894032][T30727] should_failslab+0x5/0x20 [ 1820.898550][T30727] slab_pre_alloc_hook+0x59/0x310 [ 1820.903599][T30727] ? ip6_setup_cork+0x50d/0xfe0 [ 1820.908476][T30727] __kmem_cache_alloc_node+0x4f/0x260 [ 1820.913875][T30727] ? ip6_setup_cork+0x50d/0xfe0 [ 1820.918748][T30727] __kmalloc_node_track_caller+0x9e/0x230 [ 1820.924496][T30727] kmemdup+0x27/0x60 [ 1820.928422][T30727] ip6_setup_cork+0x50d/0xfe0 [ 1820.933139][T30727] ip6_append_data+0x29e/0x3e0 [ 1820.937929][T30727] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1820.942811][T30727] l2tp_ip6_sendmsg+0x1208/0x1670 [ 1820.947875][T30727] ? l2tp_ip6_destroy_sock+0x50/0x50 [ 1820.953179][T30727] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1820.959200][T30727] ? aa_af_perm+0x340/0x340 [ 1820.963724][T30727] ? sock_rps_record_flow+0x19/0x3f0 [ 1820.969025][T30727] ? inet_sendmsg+0x78/0x2f0 [ 1820.973625][T30727] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1820.978925][T30727] ? security_socket_sendmsg+0x7c/0xa0 [ 1820.984418][T30727] ? inet_send_prepare+0x260/0x260 [ 1820.989548][T30727] ____sys_sendmsg+0x5be/0x970 [ 1820.994342][T30727] ? __sys_sendmsg_sock+0x30/0x30 [ 1820.999393][T30727] ? __import_iovec+0x315/0x500 [ 1821.004266][T30727] ? import_iovec+0x6f/0xa0 [ 1821.008784][T30727] ___sys_sendmsg+0x2a2/0x360 [ 1821.013494][T30727] ? __sys_sendmsg+0x290/0x290 [ 1821.018333][T30727] __se_sys_sendmsg+0x1bb/0x2a0 [ 1821.023211][T30727] ? __x64_sys_sendmsg+0x80/0x80 [ 1821.028195][T30727] ? lockdep_hardirqs_on+0x94/0x140 [ 1821.033411][T30727] do_syscall_64+0x4c/0xa0 [ 1821.037845][T30727] ? clear_bhb_loop+0x60/0xb0 [ 1821.042539][T30727] ? clear_bhb_loop+0x60/0xb0 [ 1821.047234][T30727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1821.053145][T30727] RIP: 0033:0x7feb4959cdd9 [ 1821.057574][T30727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1821.077197][T30727] RSP: 002b:00007feb4a407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1821.085628][T30727] RAX: ffffffffffffffda RBX: 00007feb49815fa0 RCX: 00007feb4959cdd9 [ 1821.093616][T30727] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000004 [ 1821.101602][T30727] RBP: 00007feb4a407090 R08: 0000000000000000 R09: 0000000000000000 [ 1821.109582][T30727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1821.117566][T30727] R13: 00007feb49816038 R14: 00007feb49815fa0 R15: 00007ffd13d1beb8 [ 1821.125572][T30727] [ 1824.305147][ C1] net_ratelimit: 6411 callbacks suppressed [ 1824.305169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1824.313475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1824.324044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1824.336047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1824.347849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1824.359839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1824.371586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1824.383639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1824.395396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1824.407423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1825.942604][T30773] netlink: 'syz.1.8094': attribute type 10 has an invalid length. [ 1826.039942][T30775] FAULT_INJECTION: forcing a failure. [ 1826.039942][T30775] name failslab, interval 1, probability 0, space 0, times 0 [ 1826.116359][T30775] CPU: 0 PID: 30775 Comm: syz.0.8093 Not tainted syzkaller #0 [ 1826.123873][T30775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1826.133941][T30775] Call Trace: [ 1826.137230][T30775] [ 1826.140176][T30775] dump_stack_lvl+0x188/0x24e [ 1826.144880][T30775] ? show_regs_print_info+0x12/0x12 [ 1826.150108][T30775] ? load_image+0x400/0x400 [ 1826.154635][T30775] ? __might_sleep+0xd0/0xd0 [ 1826.159251][T30775] ? __lock_acquire+0x7d10/0x7d10 [ 1826.164301][T30775] should_fail_ex+0x399/0x4d0 [ 1826.168997][T30775] should_failslab+0x5/0x20 [ 1826.173509][T30775] slab_pre_alloc_hook+0x59/0x310 [ 1826.178552][T30775] ? lock_chain_count+0x20/0x20 [ 1826.183423][T30775] ? dev_ethtool+0x125/0x12f0 [ 1826.188126][T30775] __kmem_cache_alloc_node+0x4f/0x260 [ 1826.193518][T30775] ? dev_ethtool+0x125/0x12f0 [ 1826.198218][T30775] kmalloc_trace+0x26/0xe0 [ 1826.202658][T30775] dev_ethtool+0x125/0x12f0 [ 1826.207188][T30775] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1826.213452][T30775] ? __lock_acquire+0x7d10/0x7d10 [ 1826.218504][T30775] ? __kmem_cache_free+0xb6/0x1f0 [ 1826.223577][T30775] ? full_name_hash+0x8e/0xe0 [ 1826.228272][T30775] ? dev_load+0x1d/0x1e0 [ 1826.232523][T30775] ? dev_load+0x1d/0x1e0 [ 1826.236760][T30775] dev_ioctl+0x474/0xe80 [ 1826.240995][T30775] sock_do_ioctl+0x245/0x320 [ 1826.245579][T30775] ? sock_show_fdinfo+0xb0/0xb0 [ 1826.250431][T30775] sock_ioctl+0x4d2/0x710 [ 1826.254757][T30775] ? sock_poll+0x410/0x410 [ 1826.259171][T30775] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1826.264108][T30775] ? security_file_ioctl+0x7c/0xa0 [ 1826.269218][T30775] ? sock_poll+0x410/0x410 [ 1826.273628][T30775] __se_sys_ioctl+0xfa/0x170 [ 1826.278221][T30775] do_syscall_64+0x4c/0xa0 [ 1826.282637][T30775] ? clear_bhb_loop+0x60/0xb0 [ 1826.287310][T30775] ? clear_bhb_loop+0x60/0xb0 [ 1826.291982][T30775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1826.297870][T30775] RIP: 0033:0x7feb4959cdd9 [ 1826.302279][T30775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.321874][T30775] RSP: 002b:00007feb4a407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1826.330281][T30775] RAX: ffffffffffffffda RBX: 00007feb49815fa0 RCX: 00007feb4959cdd9 [ 1826.338245][T30775] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003f [ 1826.346206][T30775] RBP: 00007feb4a407090 R08: 0000000000000000 R09: 0000000000000000 [ 1826.354168][T30775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1826.362126][T30775] R13: 00007feb49816038 R14: 00007feb49815fa0 R15: 00007ffd13d1beb8 [ 1826.370098][T30775] [ 1829.004487][T30773] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1829.080726][T30777] netlink: 'syz.1.8094': attribute type 10 has an invalid length. [ 1829.313034][ C0] net_ratelimit: 4647 callbacks suppressed [ 1829.313054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1829.331458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1829.331671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1829.344896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1829.356589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1829.367803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1829.380534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1829.392762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1829.404369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1829.415606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1829.537405][T30795] netlink: 'syz.4.8098': attribute type 10 has an invalid length. [ 1829.573435][T30795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.581999][T30795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.621057][T30795] bond0: (slave bridge0): Releasing backup interface [ 1829.930973][T25552] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1830.436835][T30815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8105'. [ 1834.159275][T30839] netlink: 'syz.2.8111': attribute type 10 has an invalid length. [ 1834.259574][T30839] bond0: (slave bond_slave_0): Releasing backup interface [ 1834.342716][ C0] net_ratelimit: 3674 callbacks suppressed [ 1834.342735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1834.361040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1834.362424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1834.374832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1834.385775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1834.397182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1834.409682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1834.422426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1834.434151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1834.444800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1835.256286][T30857] FAULT_INJECTION: forcing a failure. [ 1835.256286][T30857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1835.276440][T30856] netlink: 'syz.4.8116': attribute type 3 has an invalid length. [ 1835.338698][T30857] CPU: 0 PID: 30857 Comm: syz.2.8115 Not tainted syzkaller #0 [ 1835.346219][T30857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1835.354723][T30856] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8116'. [ 1835.356271][T30857] Call Trace: [ 1835.356282][T30857] [ 1835.356290][T30857] dump_stack_lvl+0x188/0x24e [ 1835.376456][T30857] ? show_regs_print_info+0x12/0x12 [ 1835.381707][T30857] ? load_image+0x400/0x400 [ 1835.386223][T30857] ? __lock_acquire+0x7d10/0x7d10 [ 1835.391265][T30857] should_fail_ex+0x399/0x4d0 [ 1835.395954][T30857] _copy_from_user+0x2c/0x170 [ 1835.400646][T30857] ___sys_sendmsg+0x1c3/0x360 [ 1835.405349][T30857] ? __sys_sendmsg+0x290/0x290 [ 1835.410142][T30857] ? __lock_acquire+0x7d10/0x7d10 [ 1835.415200][T30857] __se_sys_sendmsg+0x1bb/0x2a0 [ 1835.420064][T30857] ? __x64_sys_sendmsg+0x80/0x80 [ 1835.425026][T30857] ? lockdep_hardirqs_on+0x94/0x140 [ 1835.430233][T30857] do_syscall_64+0x4c/0xa0 [ 1835.434658][T30857] ? clear_bhb_loop+0x60/0xb0 [ 1835.439351][T30857] ? clear_bhb_loop+0x60/0xb0 [ 1835.444040][T30857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1835.449939][T30857] RIP: 0033:0x7f5142f9cdd9 [ 1835.454359][T30857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1835.473970][T30857] RSP: 002b:00007f5143dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1835.482391][T30857] RAX: ffffffffffffffda RBX: 00007f5143216090 RCX: 00007f5142f9cdd9 [ 1835.490368][T30857] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000c [ 1835.498344][T30857] RBP: 00007f5143dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1835.506316][T30857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1835.514292][T30857] R13: 00007f5143216128 R14: 00007f5143216090 R15: 00007fff24c15438 [ 1835.522286][T30857] [ 1836.135804][T30866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8118'. [ 1837.762234][T30889] FAULT_INJECTION: forcing a failure. [ 1837.762234][T30889] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.775338][T30889] CPU: 1 PID: 30889 Comm: syz.1.8124 Not tainted syzkaller #0 [ 1837.782818][T30889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1837.792885][T30889] Call Trace: [ 1837.796171][T30889] [ 1837.799109][T30889] dump_stack_lvl+0x188/0x24e [ 1837.803810][T30889] ? show_regs_print_info+0x12/0x12 [ 1837.809026][T30889] ? load_image+0x400/0x400 [ 1837.813555][T30889] ? __local_bh_enable_ip+0x136/0x1c0 [ 1837.818944][T30889] ? lockdep_hardirqs_on+0x94/0x140 [ 1837.824165][T30889] should_fail_ex+0x399/0x4d0 [ 1837.828862][T30889] should_failslab+0x5/0x20 [ 1837.833371][T30889] slab_pre_alloc_hook+0x59/0x310 [ 1837.838410][T30889] ? tipc_conn_lookup+0x1e2/0x270 [ 1837.843458][T30889] ? tipc_topsrv_queue_evt+0xeb/0x2d0 [ 1837.848853][T30889] __kmem_cache_alloc_node+0x4f/0x260 [ 1837.854245][T30889] ? tipc_topsrv_queue_evt+0xeb/0x2d0 [ 1837.859644][T30889] kmalloc_trace+0x26/0xe0 [ 1837.864085][T30889] tipc_topsrv_queue_evt+0xeb/0x2d0 [ 1837.869312][T30889] tipc_sub_report_overlap+0x4b4/0x8a0 [ 1837.874820][T30889] tipc_nametbl_remove_publ+0xcd1/0x1ac0 [ 1837.880486][T30889] ? tipc_nametbl_withdraw+0x78/0x280 [ 1837.885879][T30889] tipc_nametbl_withdraw+0x89/0x280 [ 1837.891094][T30889] ? tipc_group_self+0x22/0x1c0 [ 1837.895947][T30889] tipc_sk_leave+0x44f/0x4d0 [ 1837.900537][T30889] ? __tipc_shutdown+0x1530/0x1530 [ 1837.905643][T30889] ? _local_bh_enable+0xa0/0xa0 [ 1837.910492][T30889] tipc_release+0x34d/0x2270 [ 1837.915084][T30889] ? tipc_sock_destruct+0x170/0x170 [ 1837.920285][T30889] sock_close+0xd5/0x240 [ 1837.924526][T30889] ? sock_mmap+0x90/0x90 [ 1837.928761][T30889] __fput+0x22c/0x920 [ 1837.932744][T30889] task_work_run+0x1d0/0x260 [ 1837.937330][T30889] ? task_work_cancel+0x220/0x220 [ 1837.942353][T30889] ? exit_to_user_mode_loop+0x3b/0x110 [ 1837.947812][T30889] exit_to_user_mode_loop+0xe6/0x110 [ 1837.953096][T30889] exit_to_user_mode_prepare+0xee/0x180 [ 1837.958638][T30889] syscall_exit_to_user_mode+0x16/0x40 [ 1837.964090][T30889] do_syscall_64+0x58/0xa0 [ 1837.968505][T30889] ? clear_bhb_loop+0x60/0xb0 [ 1837.973179][T30889] ? clear_bhb_loop+0x60/0xb0 [ 1837.977853][T30889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1837.983740][T30889] RIP: 0033:0x7f49f859cdd9 [ 1837.988146][T30889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1838.007743][T30889] RSP: 002b:00007f49f947e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1838.016149][T30889] RAX: 0000000000000000 RBX: 00007f49f8816090 RCX: 00007f49f859cdd9 [ 1838.024112][T30889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1838.032074][T30889] RBP: 00007f49f947e090 R08: 0000000000000000 R09: 0000000000000000 [ 1838.040033][T30889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1838.047996][T30889] R13: 00007f49f8816128 R14: 00007f49f8816090 R15: 00007ffdf7c45a28 [ 1838.055972][T30889] [ 1838.731064][T30898] netlink: 'syz.2.8125': attribute type 10 has an invalid length. [ 1838.871772][T30891] delete_channel: no stack [ 1838.892270][T30891] delete_channel: no stack [ 1839.353939][ C0] net_ratelimit: 3120 callbacks suppressed [ 1839.353959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1839.373764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1839.382344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1839.386102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1839.398606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1839.411285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1839.422407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1839.433764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1839.446280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1839.458988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1840.073110][T30917] FAULT_INJECTION: forcing a failure. [ 1840.073110][T30917] name failslab, interval 1, probability 0, space 0, times 0 [ 1840.165323][T30917] CPU: 1 PID: 30917 Comm: syz.0.8130 Not tainted syzkaller #0 [ 1840.172850][T30917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1840.182931][T30917] Call Trace: [ 1840.186221][T30917] [ 1840.189159][T30917] dump_stack_lvl+0x188/0x24e [ 1840.193867][T30917] ? show_regs_print_info+0x12/0x12 [ 1840.199098][T30917] ? load_image+0x400/0x400 [ 1840.203629][T30917] ? __might_sleep+0xd0/0xd0 [ 1840.208244][T30917] ? __lock_acquire+0x7d10/0x7d10 [ 1840.213303][T30917] should_fail_ex+0x399/0x4d0 [ 1840.218007][T30917] should_failslab+0x5/0x20 [ 1840.222540][T30917] slab_pre_alloc_hook+0x59/0x310 [ 1840.227589][T30917] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1840.233765][T30917] ? _request_firmware+0x2bf/0x1250 [ 1840.238985][T30917] __kmem_cache_alloc_node+0x4f/0x260 [ 1840.244380][T30917] ? _request_firmware+0x2bf/0x1250 [ 1840.249596][T30917] kmalloc_trace+0x26/0xe0 [ 1840.254038][T30917] _request_firmware+0x2bf/0x1250 [ 1840.259086][T30917] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1840.265268][T30917] ? rcu_is_watching+0x11/0xa0 [ 1840.270069][T30917] ? trace_contention_end+0x5f/0x170 [ 1840.275382][T30917] ? __rtnl_unlock+0xc2/0xe0 [ 1840.279989][T30917] ? request_firmware+0x50/0x50 [ 1840.284856][T30917] ? netdev_run_todo+0xd42/0xdb0 [ 1840.289825][T30917] ? netdev_refcnt_read+0x50/0x50 [ 1840.294880][T30917] request_firmware+0x32/0x50 [ 1840.299579][T30917] reg_reload_regdb+0x96/0x490 [ 1840.304365][T30917] ? __nla_parse+0x3c/0x50 [ 1840.308798][T30917] ? reg_query_regdb_wmm+0x510/0x510 [ 1840.314106][T30917] ? nl80211_pre_doit+0x4ed/0x930 [ 1840.319161][T30917] genl_family_rcv_msg_doit+0x22a/0x330 [ 1840.324727][T30917] ? end_current_label_crit_section+0x170/0x170 [ 1840.330991][T30917] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1840.336904][T30917] ? bpf_lsm_capable+0x5/0x10 [ 1840.341593][T30917] ? security_capable+0x85/0xb0 [ 1840.346460][T30917] genl_rcv_msg+0x604/0x790 [ 1840.350986][T30917] ? genl_bind+0x360/0x360 [ 1840.355420][T30917] ? nl80211_req_set_reg+0x210/0x210 [ 1840.360729][T30917] netlink_rcv_skb+0x1fb/0x450 [ 1840.365512][T30917] ? genl_bind+0x360/0x360 [ 1840.369937][T30917] ? netlink_ack+0x1170/0x1170 [ 1840.374725][T30917] ? down_read+0x1a8/0x2d0 [ 1840.379152][T30917] genl_rcv+0x24/0x40 [ 1840.383137][T30917] netlink_unicast+0x74d/0x8d0 [ 1840.387929][T30917] netlink_sendmsg+0x8ad/0xbd0 [ 1840.392733][T30917] ? netlink_getsockopt+0x550/0x550 [ 1840.397942][T30917] ? aa_sock_msg_perm+0x94/0x150 [ 1840.402889][T30917] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1840.408177][T30917] ? security_socket_sendmsg+0x7c/0xa0 [ 1840.413650][T30917] ? netlink_getsockopt+0x550/0x550 [ 1840.418860][T30917] ____sys_sendmsg+0x5be/0x970 [ 1840.423675][T30917] ? __sys_sendmsg_sock+0x30/0x30 [ 1840.428707][T30917] ? __import_iovec+0x315/0x500 [ 1840.433570][T30917] ? import_iovec+0x6f/0xa0 [ 1840.438080][T30917] ___sys_sendmsg+0x2a2/0x360 [ 1840.442773][T30917] ? __sys_sendmsg+0x290/0x290 [ 1840.447563][T30917] ? __lock_acquire+0x7d10/0x7d10 [ 1840.452624][T30917] __se_sys_sendmsg+0x1bb/0x2a0 [ 1840.457487][T30917] ? __x64_sys_sendmsg+0x80/0x80 [ 1840.462455][T30917] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1840.468365][T30917] do_syscall_64+0x4c/0xa0 [ 1840.472790][T30917] ? clear_bhb_loop+0x60/0xb0 [ 1840.477475][T30917] ? clear_bhb_loop+0x60/0xb0 [ 1840.482164][T30917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1840.488063][T30917] RIP: 0033:0x7feb4959cdd9 [ 1840.492499][T30917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1840.512111][T30917] RSP: 002b:00007feb4a3c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1840.520532][T30917] RAX: ffffffffffffffda RBX: 00007feb49816180 RCX: 00007feb4959cdd9 [ 1840.528514][T30917] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000c [ 1840.536494][T30917] RBP: 00007feb4a3c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1840.544468][T30917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1840.552446][T30917] R13: 00007feb49816218 R14: 00007feb49816180 R15: 00007ffd13d1beb8 [ 1840.560441][T30917] [ 1841.203741][T30917] platform regulatory.0: _request_firmware_prepare: kmalloc(struct firmware) failed [ 1842.710233][T30947] FAULT_INJECTION: forcing a failure. [ 1842.710233][T30947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1842.880694][T30956] netlink: 'syz.1.8140': attribute type 10 has an invalid length. [ 1842.892227][T30947] CPU: 1 PID: 30947 Comm: syz.0.8138 Not tainted syzkaller #0 [ 1842.899729][T30947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1842.909801][T30947] Call Trace: [ 1842.913102][T30947] [ 1842.916047][T30947] dump_stack_lvl+0x188/0x24e [ 1842.920759][T30947] ? show_regs_print_info+0x12/0x12 [ 1842.925986][T30947] ? load_image+0x400/0x400 [ 1842.930516][T30947] ? __lock_acquire+0x7d10/0x7d10 [ 1842.935558][T30947] ? snprintf+0xe5/0x140 [ 1842.939799][T30947] should_fail_ex+0x399/0x4d0 [ 1842.944489][T30947] _copy_to_user+0x2c/0x130 [ 1842.949011][T30947] simple_read_from_buffer+0xe3/0x150 [ 1842.954396][T30947] proc_fail_nth_read+0x1a6/0x220 [ 1842.959430][T30947] ? proc_fault_inject_write+0x310/0x310 [ 1842.965062][T30947] ? fsnotify_perm+0x248/0x550 [ 1842.969825][T30947] ? proc_fault_inject_write+0x310/0x310 [ 1842.975458][T30947] vfs_read+0x2de/0xa00 [ 1842.979620][T30947] ? kernel_read+0x1e0/0x1e0 [ 1842.984211][T30947] ? __fget_files+0x28/0x4b0 [ 1842.988798][T30947] ? __fget_files+0x28/0x4b0 [ 1842.993384][T30947] ? __fget_files+0x43d/0x4b0 [ 1842.998066][T30947] ? __fdget_pos+0x2ae/0x360 [ 1843.002653][T30947] ? ksys_read+0x71/0x250 [ 1843.006981][T30947] ksys_read+0x14c/0x250 [ 1843.011229][T30947] ? vfs_write+0xa30/0xa30 [ 1843.015647][T30947] ? lockdep_hardirqs_on+0x94/0x140 [ 1843.020843][T30947] do_syscall_64+0x4c/0xa0 [ 1843.025258][T30947] ? clear_bhb_loop+0x60/0xb0 [ 1843.029930][T30947] ? clear_bhb_loop+0x60/0xb0 [ 1843.034604][T30947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1843.040494][T30947] RIP: 0033:0x7feb4955d60e [ 1843.044903][T30947] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1843.064500][T30947] RSP: 002b:00007feb4a406fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1843.072909][T30947] RAX: ffffffffffffffda RBX: 00007feb4a4076c0 RCX: 00007feb4955d60e [ 1843.080876][T30947] RDX: 000000000000000f RSI: 00007feb4a4070a0 RDI: 000000000000000a [ 1843.088852][T30947] RBP: 00007feb4a407090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.096815][T30947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.104778][T30947] R13: 00007feb49816038 R14: 00007feb49815fa0 R15: 00007ffd13d1beb8 [ 1843.112760][T30947] [ 1844.372174][ C0] net_ratelimit: 3095 callbacks suppressed [ 1844.372195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1844.382989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1844.391777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1844.402826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1844.414182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1844.426688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1844.439385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1844.450457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1844.461844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1844.474323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1847.105524][T30967] delete_channel: no stack [ 1847.110464][T30967] delete_channel: no stack [ 1848.667486][T30980] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8147'. [ 1848.876762][T30980] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1849.382837][ C1] net_ratelimit: 3181 callbacks suppressed [ 1849.382856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1849.387594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1849.390455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1849.400993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1849.413612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1849.426339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1849.437368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1849.448688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1849.461268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1849.473970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1851.286344][ T6979] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1851.709549][ T6979] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1852.953260][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.959605][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.393186][ C0] net_ratelimit: 3520 callbacks suppressed [ 1854.393206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1854.396135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1854.399405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1854.411999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1854.424687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1854.435810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1854.447104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1854.459684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1854.495535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1854.508436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1856.262065][T31033] netlink: 'syz.1.8163': attribute type 3 has an invalid length. [ 1856.432726][T31033] netlink: 'syz.1.8163': attribute type 1 has an invalid length. [ 1856.440624][T31033] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.8163'. [ 1856.790707][T31046] netlink: 'syz.2.8168': attribute type 15 has an invalid length. [ 1856.835414][T31046] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.8168'. [ 1857.081731][T31033] netlink: 133136 bytes leftover after parsing attributes in process `syz.1.8163'. [ 1857.287665][T31033] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1858.494961][T31066] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.8172'. [ 1858.643055][T31066] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1859.402297][ C1] net_ratelimit: 2928 callbacks suppressed [ 1859.402317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1859.421065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1859.424259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1859.433878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1859.445302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1859.457761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1859.470490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1859.481575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1859.492930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1859.505406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1860.396943][T31074] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.8174'. [ 1860.526456][T31073] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8174'. [ 1862.413794][T31080] netlink: 'syz.3.8176': attribute type 16 has an invalid length. [ 1862.484522][T31080] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8176'. [ 1864.412403][ C0] net_ratelimit: 3456 callbacks suppressed [ 1864.412422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1864.430662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1864.432479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1864.444336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1864.455414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1864.466779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1864.479282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1864.492009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1864.503021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1864.514417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1865.278293][T31085] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.8177'. [ 1866.138359][T31095] netlink: 'syz.1.8181': attribute type 21 has an invalid length. [ 1866.763379][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1866.799950][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1866.820184][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1866.839496][T31100] netlink: 'syz.1.8183': attribute type 2 has an invalid length. [ 1866.839569][T31100] netlink: 'syz.1.8183': attribute type 3 has an invalid length. [ 1866.839620][T31100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8183'. [ 1866.924900][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1866.986134][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1867.025660][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1867.820074][T31101] chnl_net:caif_netlink_parms(): no params data found [ 1868.322835][T31101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.353822][T31101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.393675][T31101] device bridge_slave_0 entered promiscuous mode [ 1868.682835][T31101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.692591][T31101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.708102][T31101] device bridge_slave_1 entered promiscuous mode [ 1868.899357][T31101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1868.954141][T31101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1869.106580][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 1869.422358][ C1] net_ratelimit: 3626 callbacks suppressed [ 1869.422377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1869.423047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1869.429092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1869.440422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1869.453725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1869.465743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1869.476841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1869.488108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1869.500687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1869.536601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1871.202582][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 1871.325426][T31101] team0: Port device team_slave_0 added [ 1871.556968][T31129] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.8188'. [ 1871.631990][T31101] team0: Port device team_slave_1 added [ 1871.696636][T31132] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8188'. [ 1871.705798][T31132] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1871.768855][T31135] netlink: 'syz.3.8189': attribute type 1 has an invalid length. [ 1871.818543][T31135] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.8189'. [ 1871.912687][T31101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1871.922071][T31101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.036654][T31101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1872.096529][T31137] netlink: 'syz.4.8190': attribute type 10 has an invalid length. [ 1872.106438][T31141] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8192'. [ 1872.128638][T31101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1872.142060][T31101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.248261][T31101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1872.366869][T31101] device hsr_slave_0 entered promiscuous mode [ 1872.374235][T31101] device hsr_slave_1 entered promiscuous mode [ 1872.731321][T31101] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1872.781577][T31101] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1872.791454][T31101] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1872.832924][T31101] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1873.092174][T31101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1873.154733][T31101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1873.161619][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1873.209981][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1873.277742][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1873.285913][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 1873.297359][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1873.312675][T25552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.319808][T25552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1873.390497][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1873.443731][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1873.462409][T25552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.469542][T25552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1873.502394][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1873.532676][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1873.577669][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1873.602603][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1873.643819][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1873.662626][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1873.703229][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1873.726858][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1873.755731][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1873.797053][T31101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1873.825660][T31101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1873.844579][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1873.853402][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1873.907849][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1874.442176][ C0] net_ratelimit: 3566 callbacks suppressed [ 1874.442195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1874.442384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1874.449753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1874.460822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1874.472287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1874.485390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1874.497366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1874.508472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1874.519833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1874.532347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1874.676187][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1874.684159][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1874.697983][T31101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1875.349686][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 1875.543478][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1875.560203][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1875.596797][T31101] device veth0_vlan entered promiscuous mode [ 1875.606383][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1875.618379][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1875.644678][T31101] device veth1_vlan entered promiscuous mode [ 1875.651593][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1875.661904][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1875.685393][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1875.751153][T31101] device veth0_macvtap entered promiscuous mode [ 1875.773630][T31101] device veth1_macvtap entered promiscuous mode [ 1875.794893][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1875.803743][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1875.842440][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1875.860086][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1875.915194][T31101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.937723][T31101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.958584][T31101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.982911][T31101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.013747][T31101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1876.036553][T31101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.061865][T31101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1876.095596][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1876.104414][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1876.126377][T31101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1876.137301][T31101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.161576][T31101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1876.198972][T31101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.218275][T31101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1876.247594][T31101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.270498][T31101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1876.341506][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1876.350395][T25552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1876.371386][T31101] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.395663][T31101] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.414258][T31101] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.444625][T31101] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.603186][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.621044][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1876.660582][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1876.683994][ T6979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.702887][ T6979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1876.733233][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1879.452808][ C1] net_ratelimit: 6581 callbacks suppressed [ 1879.452828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1879.455665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1879.460201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1879.470841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1879.486229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1879.496090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1879.507172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1879.518521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1879.531061][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1879.543724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1884.462224][ C0] net_ratelimit: 9053 callbacks suppressed [ 1884.462243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1884.462281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1884.468354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1884.480930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1884.493670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1884.513294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1884.516140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1884.528610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1884.541578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1884.552429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1885.656142][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1886.236056][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1889.472488][ C1] net_ratelimit: 8922 callbacks suppressed [ 1889.472507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1889.473088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1889.479154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1889.490535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1889.503053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1889.515744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1889.526867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1889.538199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1889.550712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1889.563403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1894.482841][ C1] net_ratelimit: 8899 callbacks suppressed [ 1894.482860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1894.482884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1894.489524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1894.500959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1894.513438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1894.526601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1894.537244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1894.548628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1894.561143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1894.574271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1896.116606][T25035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.830568][T25035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.030300][T25035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.227979][T25035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.502877][ C0] net_ratelimit: 5912 callbacks suppressed [ 1899.502894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1899.521126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.534626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1899.546909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.560383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1899.572647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.586131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1899.598434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.611906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1899.624198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.644958][T25035] device 0 left promiscuous mode [ 1899.902265][T25035] device 0 left promiscuous mode [ 1900.088818][T25035] device 1 left promiscuous mode [ 1900.452868][T25035] device 2 left promiscuous mode [ 1900.919994][T25035] device 3 left promiscuous mode [ 1901.343532][T25035] device 4 left promiscuous mode [ 1901.707304][T25035] device 5 left promiscuous mode [ 1901.901791][T25035] device 6 left promiscuous mode [ 1902.162482][T25035] device 1 left promiscuous mode [ 1902.409333][T25035] device 7 left promiscuous mode [ 1902.621397][T25035] device 8 left promiscuous mode [ 1902.873050][T25035] device 9 left promiscuous mode [ 1903.146644][T25035] tipc: Left network mode [ 1904.513371][ C0] net_ratelimit: 3460 callbacks suppressed [ 1904.513388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1904.531492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.544943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1904.557228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.570661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1904.582937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.596398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1904.608681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.678883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1904.691175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.533719][ C0] net_ratelimit: 3374 callbacks suppressed [ 1909.533737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1909.551907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.565276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1909.577533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.590940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1909.603265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.616689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1909.628934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.642308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:9a:ce:96:7f:3c, vlan:0) [ 1909.654599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1912.462152][T25035] device hsr_slave_0 left promiscuous mode [ 1912.505564][T25035] device hsr_slave_1 left promiscuous mode [ 1912.547304][T25035] device veth0_to_bridge left promiscuous mode [ 1912.554864][T25035] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1912.568174][T25035] bridge0: port 4(team0) entered disabled state [ 1912.576668][T25035] device bridge_slave_1 left promiscuous mode [ 1912.583039][T25035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.590998][T25035] device bridge_slave_0 left promiscuous mode [ 1912.597228][T25035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.845509][T25035] device team_slave_1 left promiscuous mode [ 1912.855126][T25035] team0 (unregistering): Port device team_slave_1 removed [ 1912.897032][T25035] device team_slave_0 left promiscuous mode [ 1912.904593][T25035] team0 (unregistering): Port device team_slave_0 removed [ 1912.941758][T25035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1912.979320][T25035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1913.201747][T25035] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1913.210343][T25035] bond0 (unregistering): Released all slaves [ 1914.383622][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.389938][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1918.222416][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1950.233163][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1975.823502][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.829815][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1982.222869][ T6979] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1993.262204][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 2014.232300][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2037.263736][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.270048][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2046.223089][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2078.223575][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2098.703980][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.710295][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2110.223079][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2142.222560][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2160.143524][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.149826][ T1267] ieee802154 phy1 wpan1: encryption failed: -22