last executing test programs: 2.393269954s ago: executing program 2 (id=1846): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r1, 0x0, 0xfeff}, 0x38) 2.321960608s ago: executing program 1 (id=1849): r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000003f00000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.169649237s ago: executing program 2 (id=1854): r0 = socket$kcm(0x2, 0xa, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, 0x0, 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2a26080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x6) ioctl$SIOCSIFHWADDR(r0, 0x891c, &(0x7f0000000000)={'wg2\x00', @random="0200ff7fffff"}) 1.669490228s ago: executing program 3 (id=1862): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRESHEX, @ANYBLOB="2e01"], 0x50) 1.669015758s ago: executing program 2 (id=1863): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0xec4a, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x6c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sendmsg$kcm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.572210174s ago: executing program 0 (id=1864): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000a34300000000000000001000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x8e, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="140000004f007f049e", 0x9}, {&(0x7f00000001c0)="78cafc0a7d0a08b40178f8", 0xb}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000040009504020000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x2}, 0x10}, 0x80) sendmsg$kcm(r4, &(0x7f0000001200)={&(0x7f0000000680)=@ethernet={0x6, @random="c6acd61352d9"}, 0x80, 0x0}, 0x0) close(r4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000000000003"], 0x50) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r8 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) socket$kcm(0x2, 0x2, 0x73) r9 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805b", 0xc}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="f9ffffffffffffffdcd5635f2e"], 0x48) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r10) 1.512293438s ago: executing program 2 (id=1865): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x2440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.401347225s ago: executing program 3 (id=1866): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0xffffffffffffc92}, 0x200ce0c0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000080)='i\"nok', 0x5}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x40801) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) write$cgroup_devices(r3, &(0x7f0000000580)={'c', ' *:* ', 'w\x00'}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r8 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYBLOB="ac141411a0"], 0x50}, 0x200040c4) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.400906224s ago: executing program 2 (id=1867): r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18, 0x6400}, 0x0) recvmsg$kcm(r1, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0xc8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0xa, 0x73) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r0}) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8931, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8932, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7f, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x50) 1.400303855s ago: executing program 1 (id=1868): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e032c00e5fd9801288763"], 0xfdef) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000180)={0x1, 0x3, [@broadcast, @multicast, @empty]}) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000030000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c"], 0xc0}, 0x0) 1.383386565s ago: executing program 0 (id=1869): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x2, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 32) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000180)=0xffffffff) (async, rerun: 64) r3 = socket$kcm(0x2, 0x1, 0x84) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x541b, &(0x7f0000000180)) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x10020, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) (async) recvmsg$kcm(r4, &(0x7f0000002400)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async, rerun: 32) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x3, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="6a201a09e5fa", @remote]}) (rerun: 32) 1.252353944s ago: executing program 4 (id=1870): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x1, 0x80, 0x4, 0x5, 0x1, 0xd, 0x0, 0x8000000000000000, 0x800, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x4c, 0x1c6}, 0x2080, 0x8, 0x1, 0x7, 0x7fff, 0x72, 0x7fff, 0x0, 0x3, 0x0, 0xf4b}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x400}) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b00000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240080d0) 1.185236197s ago: executing program 4 (id=1871): close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)='%ps \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000940)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.184925337s ago: executing program 1 (id=1872): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) 1.184726838s ago: executing program 0 (id=1873): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffcc, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x7c00) 1.038023136s ago: executing program 1 (id=1874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x8000000}, 0x10}, 0x94) r2 = socket$kcm(0x15, 0x5, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x3, 0x10) (async, rerun: 64) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x1) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async, rerun: 64) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-net +pids \x00'/25], 0x19) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) (async, rerun: 64) recvmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000180)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/2, 0x2}, {&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x6, &(0x7f0000000680)=""/114, 0x72}, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x8202) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=0x1, r1, 0x5}, 0x10) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.014863378s ago: executing program 0 (id=1875): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x7, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000004000000000711226000000000095000000000000006e222baccc273d3dbc7fa57b241ad5253a2bbab399dbdd8245202c28e286328fe4605928ad547bf50ad1c487edaee9a5c53d891a590d74868710fadea9f8aba7c3c6b3e98e45d375c7ba8dcf13bbec2448c7f863514ec85e90aa2cb482731befdbec1d89bce00dcd7cb29e4c4d592a0230d089674e7ea5537ca2db131f4f4d5753f3d2873e8f4094f1d384e4b3837c7ddcbd2b57fb2655dc36f85fff126bd13da3b810632ac23ebc4800ba6c62db471fc9764f7bdf612ef98153906f8124"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 946.601022ms ago: executing program 1 (id=1876): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x440, @local, 0x406}}, 0x80, 0x0}, 0x40000) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex=r6, 0x36, 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000900)=""/239, 0xef}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1d, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x25f7279b, 0x96, &(0x7f0000000600)=""/150, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0x1, 0xaf0, 0xfc}, 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xd, &(0x7f0000000240)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000003c0)='GPL\x00', 0x4, 0x7, &(0x7f0000000440)=""/7, 0x40f00, 0x40, '\x00', r6, @fallback=0x35, r0, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x12f, 0x48ed}, 0x10, r7, r4, 0x5, 0x0, &(0x7f0000000580)=[{0x2, 0x5, 0x9, 0x7}, {0x5, 0x3, 0x3, 0xc}, {0x1, 0x4, 0xd, 0x6}, {0x1, 0x4, 0x8, 0xa}, {0x0, 0x1, 0x9, 0x6}], 0x10, 0x3618}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) r9 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x1, 0x19, &(0x7f00000002c0), 0x8) 944.320212ms ago: executing program 3 (id=1877): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0}, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a", 0x35}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111820000000000180000000000000000000000620000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c02000055a10a0017000600a42603600e1208000600fe80ff00a007a290457f01890500277ce06bbaceac3c940649cc7f5715a9b62f00001fb71b14d6c930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edb360c8c1a8db6751cffe0b5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bba4d809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ee6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef57935d0000000000000073d0e899fdf2431393dfd6cbaf", 0xd8}], 0x1}, 0x48000) recvmsg$unix(r1, &(0x7f0000000900)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000500)=""/163, 0xa3}, {&(0x7f00000005c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000640)=""/169, 0xa9}, {&(0x7f0000000700)=""/100, 0x64}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/89, 0x59}], 0x9, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x40002102) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffe74, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c11", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 857.235728ms ago: executing program 0 (id=1878): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext, 0x0, 0xac5d, 0x0, 0x6, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0x30, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x9e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xaf55}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc6, &(0x7f0000000b80)=""/198, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x1, 0xff, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000980)=[r1, r2, r2, r2, r2], &(0x7f0000000c80)=[{0x1, 0x1, 0x4, 0x6}, {0x3, 0x5, 0xf, 0x1}, {0x1, 0x1, 0x7, 0x2}, {0x1, 0x3, 0x2, 0xb}, {0x0, 0x1, 0x2, 0x6}, {0x2, 0x5, 0x0, 0x5}, {0x1, 0x1, 0x1, 0xb}, {0x0, 0x3, 0xe}, {0x5, 0x2, 0xd, 0xc}], 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000600000059fbffff0100ffffffffffff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="d28a08d988a88d8bf2f08c8288a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x001\n\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="02cb000000000000000000000000400400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300), 0x207, r8}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r9, &(0x7f0000000200), &(0x7f0000000300)=""/189}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x28) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r12, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) close(r11) 856.912938ms ago: executing program 4 (id=1879): ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000140)=0xf) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea60860160af3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 6) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001e00)}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) 529.043858ms ago: executing program 2 (id=1880): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x9, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0x4e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x881) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000200)=r2) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 502.045599ms ago: executing program 4 (id=1881): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x1, 0x80, 0x4, 0x5, 0x1, 0xd, 0x0, 0x8000000000000000, 0x800, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x4c, 0x1c6}, 0x2080, 0x8, 0x1, 0x7, 0x7fff, 0x72, 0x7fff, 0x0, 0x3, 0x0, 0xf4b}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x400}) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b00000000009500000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240080d0) 421.462284ms ago: executing program 3 (id=1882): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x24008010) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f0000000200), 0x11) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 420.671834ms ago: executing program 1 (id=1883): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010001"], 0x50) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd2b4, 0x22a0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x4, 0x2, 0x1, 0x0, 0x9, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, r0, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000a00)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0x3) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x23, 0x0, 0x0) sendmsg(r2, &(0x7f0000000a40)={&(0x7f0000000500)=@in6={0xa, 0x4e24, 0x1, @loopback, 0x9}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000007c0)="026c5f84a3ad9ec45702a65eff402ac0f2af6c72ebad69393a4ce30cc5e96601d54b94608c66ef26fbd379cf1577e2a13dba3e405c77e9b8c0b82ec08285bb1d53f75ca1a5b08b9a19beaf2d1ec83db692029710267f9f7a558745561998a247c31e525c5df5cb11073038e6d3ae4ec4b03b35f706b432cb7e21169540b0268d9c0e1ab09e1c63763088b6f83f5ca6f393acdc06fa5e6686afea64fd223fe277067db11b33448998b63ed7251d7260f8357a57feaf87", 0xb6}, {&(0x7f0000000880)="46d3d87e94bacee06048abb6f046f81314158f23a8bc926f6e1b7f247c14fc8ac0232af0df792256e934c4baff51195eee", 0x31}, {&(0x7f00000008c0)="890ce8567d73c90bb574d0dd7908fce1eb9aa844a463a42da41d43e3bbf3ca5bec81f931bb5255700a3fe90ef3ae7e51cc9293579b715cddbfc84711b2da1157babd39992297c4c17bfce4628c6707ab99a7dd80a6907a150b3f4eafeaf916142f3a29fa047e", 0x66}, {&(0x7f0000000940)="ef721451d89f591e7a129c22e09202ab9f71d0da4bec4697d1b233d4c36e92f64d15aa346793ed618cd9073a1b97424d5f5c430d86fc4e0c56f0855beba3a681f3b803c3be7d407f65720fb84f8a04ba74c6bfa5ca0aaddc189b89b18239ca6bfb827798eb0332d1d321fe9d60fe54342a3df9c0eb47e2d9aebacc1ce564c7361833f4961647770d29bec01630809b02fee5569f689c09af4737a2e2597b67eed5907cb72c4384f7d0c02f217e2435bdb513f5493dd522917876da69ff8f399f329aa745c7e7e2a48fa51be5c0dc34b458ca9357b9972f6d08366f8206cbe9d9fa7679c2", 0xe4}, {&(0x7f0000000cc0)}], 0x5, &(0x7f0000000dc0)=[{0x1010, 0x107, 0xc18, "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"}], 0x1010}, 0x800) socket$kcm(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x33, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff8100632f0806a5e65181a957ff59821ab6abc50af2cbd1024f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 420.522144ms ago: executing program 3 (id=1884): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) 413.387625ms ago: executing program 4 (id=1885): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000421000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x60) 347.977759ms ago: executing program 3 (id=1886): r0 = socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1}, 0x40000002) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x5, &(0x7f0000001140)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf670000000000001606fdff0fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999f9d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1}, 0x48) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$inet(r6, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendmsg$inet(r0, &(0x7f0000001100)={&(0x7f0000000c00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000fc0), 0x0, &(0x7f0000001040)=[@ip_retopts={{0x50, 0x0, 0x7, {[@rr={0x7, 0xb, 0x62, [@broadcast, @loopback]}, @lsrr={0x83, 0x7, 0x8f, [@multicast2]}, @timestamp={0x44, 0x14, 0x34, 0x0, 0x4, [0x5, 0x6, 0x8, 0xef3f]}, @cipso={0x86, 0x17, 0x0, [{0x6, 0x6, "563d2f90"}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x7, "5a30c45056"}]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0xf, 0xb3, [@local, @remote, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0x12, 0x0, 0x1, [0x10001]}, @lsrr={0x83, 0xb, 0x2e, [@empty, @empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0xa0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000011c0)={r8, r5}) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) socketpair(0x18, 0x4, 0x1, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x4) sendmsg$sock(r2, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000580)="5c84570ea5f69c32147db1be2f0b7a3ef00e1850fcf46e49ece69c355b278d7f1086d1c7f844fb22a71e0ddaaa667fbe1e87a4781ea6c21777e23e2cbba9", 0x3e}, {&(0x7f0000000600)}, {&(0x7f0000000780)="da53ae30873e946a78cb", 0xa}, {&(0x7f00000007c0)}, {0x0}, {&(0x7f0000000880)="5d6d266c6323d5784c84a88ab7bff1ec65166aa91c8f510e70337066af6b8e833cf7d79644b3f65012a724c1648d3fbde14b9d8f6910cc87de079e9867dcf451d93c587e34fbe9e1aa766b6c1171d56f2bf836e3ff3437b3d116f47e81108f3e18b80d4e30f79974e83c7878d05508016d2f71e6cd5ea891c67d3598af711dbf05599923d323ffd68b7e86afe607dd1ddf9183b02dce9107d5469a3aa37609f201bdb45bae59", 0xa6}, {&(0x7f0000000a00)="d9718911ab67b0976e6bb6a9325ed8ff0f30deb516464eae4d210fd877cc4cab1883525c599dcf3548f3b24c58c6f1a12ec72f6926289830f8406cdeb3b549e19553899ad87cde4b8834ef89fc040b5ef5052e61e0b0fdd7fb8d777fb99d14619468ecd63781de88ce710052344b14994d63a664d82195be37dd566bfdd6", 0x7e}], 0x8, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}, 0x80) 277.325703ms ago: executing program 4 (id=1887): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=1888): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba", 0x1}], 0x1}, 0x500) kernel console output (not intermixed with test programs): 846] ? trace_event_raw_event_lock+0x270/0x270 [ 111.296784][ T5846] ? vfs_write+0x8b2/0xd60 [ 111.301506][ T5846] __se_sys_sendmsg+0x1af/0x290 [ 111.306466][ T5846] ? __x64_sys_sendmsg+0x80/0x80 [ 111.311586][ T5846] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 111.317625][ T5846] ? lockdep_hardirqs_on+0x94/0x140 [ 111.323076][ T5846] do_syscall_64+0x4c/0xa0 [ 111.327574][ T5846] ? clear_bhb_loop+0x30/0x80 [ 111.332261][ T5846] ? clear_bhb_loop+0x30/0x80 [ 111.336943][ T5846] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.343032][ T5846] RIP: 0033:0x7f407f218cb9 [ 111.347443][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.367325][ T5846] RSP: 002b:00007f407d474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.375737][ T5846] RAX: ffffffffffffffda RBX: 00007f407f493fa0 RCX: 00007f407f218cb9 [ 111.383887][ T5846] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 111.392034][ T5846] RBP: 00007f407d474090 R08: 0000000000000000 R09: 0000000000000000 [ 111.400088][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.408228][ T5846] R13: 00007f407f494038 R14: 00007f407f493fa0 R15: 00007ffe8d2247a8 [ 111.416592][ T5846] [ 111.506552][ T5849] netlink: 'syz.1.573': attribute type 21 has an invalid length. [ 111.548075][ T5849] netlink: 'syz.1.573': attribute type 12 has an invalid length. [ 111.578055][ T5849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.573'. [ 112.319058][ T5890] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.588'. [ 113.018558][ T5918] device lo left promiscuous mode [ 113.055473][ T5918] device lo entered promiscuous mode [ 113.635610][ T5959] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 113.655071][ T5959] netlink: 40 bytes leftover after parsing attributes in process `syz.0.612'. [ 113.695673][ T5933] syz.3.602 (5933) used greatest stack depth: 16400 bytes left [ 113.705211][ T5959] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 113.716479][ T5959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.809592][ T5966] netlink: 'syz.2.614': attribute type 39 has an invalid length. [ 113.830664][ T5963] netlink: 'syz.4.613': attribute type 2 has an invalid length. [ 113.860540][ T5963] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 113.985282][ T5971] syz.4.613 (5971) used obsolete PPPIOCDETACH ioctl [ 113.993411][ T5974] device lo left promiscuous mode [ 114.040105][ T5974] device lo entered promiscuous mode [ 114.064127][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 114.437695][ T6003] netlink: 'syz.2.628': attribute type 21 has an invalid length. [ 114.469769][ T6003] netlink: 132 bytes leftover after parsing attributes in process `syz.2.628'. [ 114.792012][ T6005] netlink: 172 bytes leftover after parsing attributes in process `syz.1.629'. [ 115.103617][ T6018] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.634'. [ 115.138143][ T6018] netlink: 168 bytes leftover after parsing attributes in process `syz.0.634'. [ 115.171773][ T6018] raw_sendmsg: syz.0.634 forgot to set AF_INET. Fix it! [ 115.246478][ T6031] FAULT_INJECTION: forcing a failure. [ 115.246478][ T6031] name failslab, interval 1, probability 0, space 0, times 0 [ 115.282734][ T6031] CPU: 1 PID: 6031 Comm: syz.2.639 Not tainted syzkaller #0 [ 115.290418][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.300841][ T6031] Call Trace: [ 115.304137][ T6031] [ 115.307084][ T6031] dump_stack_lvl+0x188/0x250 [ 115.311783][ T6031] ? show_regs_print_info+0x20/0x20 [ 115.317006][ T6031] ? load_image+0x400/0x400 [ 115.321633][ T6031] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 115.328083][ T6031] ? lockdep_hardirqs_on+0x94/0x140 [ 115.333332][ T6031] should_fail+0x38c/0x4c0 [ 115.337782][ T6031] should_failslab+0x5/0x20 [ 115.342386][ T6031] slab_pre_alloc_hook+0x51/0xc0 [ 115.347340][ T6031] ? __build_skb+0x26/0x2e0 [ 115.351933][ T6031] kmem_cache_alloc+0x3d/0x290 [ 115.356707][ T6031] __build_skb+0x26/0x2e0 [ 115.361848][ T6031] build_skb+0x1e/0x170 [ 115.366186][ T6031] bpf_prog_test_run_skb+0x260/0x1180 [ 115.371743][ T6031] ? __fget_files+0x40f/0x480 [ 115.376519][ T6031] ? cpu_online+0x60/0x60 [ 115.381071][ T6031] bpf_prog_test_run+0x31e/0x390 [ 115.386383][ T6031] __sys_bpf+0x5a5/0x6f0 [ 115.390834][ T6031] ? bpf_link_show_fdinfo+0x380/0x380 [ 115.396311][ T6031] ? vtime_user_exit+0x2c8/0x3e0 [ 115.401480][ T6031] __x64_sys_bpf+0x78/0x90 [ 115.405920][ T6031] do_syscall_64+0x4c/0xa0 [ 115.410332][ T6031] ? clear_bhb_loop+0x30/0x80 [ 115.415102][ T6031] ? clear_bhb_loop+0x30/0x80 [ 115.419960][ T6031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.426154][ T6031] RIP: 0033:0x7f407f218cb9 [ 115.430732][ T6031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.450505][ T6031] RSP: 002b:00007f407d474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.459006][ T6031] RAX: ffffffffffffffda RBX: 00007f407f493fa0 RCX: 00007f407f218cb9 [ 115.467727][ T6031] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 115.475892][ T6031] RBP: 00007f407d474090 R08: 0000000000000000 R09: 0000000000000000 [ 115.483962][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.492190][ T6031] R13: 00007f407f494038 R14: 00007f407f493fa0 R15: 00007ffe8d2247a8 [ 115.500372][ T6031] [ 115.552474][ T6036] device lo left promiscuous mode [ 115.609590][ T6036] device lo entered promiscuous mode [ 117.039005][ T6046] device lo left promiscuous mode [ 117.088119][ T6047] Q6\bY4: renamed from lo [ 117.336192][ T6061] validate_nla: 3 callbacks suppressed [ 117.336209][ T6061] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 117.366241][ T6061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.651'. [ 117.391367][ T6064] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.650'. [ 117.648677][ T6079] device lo left promiscuous mode [ 117.701440][ T6079] device lo entered promiscuous mode [ 118.163937][ T6085] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 118.206415][ T6085] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.660'. [ 119.772423][ T6099] device lo left promiscuous mode [ 119.778022][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 119.809860][ T6099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.019007][ T6103] netlink: 'syz.1.667': attribute type 32 has an invalid length. [ 120.054197][ T6103] netlink: 55 bytes leftover after parsing attributes in process `syz.1.667'. [ 122.991290][ T6134] netlink: 'syz.2.675': attribute type 3 has an invalid length. [ 123.020383][ T6134] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.675'. [ 123.132184][ T6139] device lo entered promiscuous mode [ 123.167824][ T6139] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 123.703631][ T6170] device lo left promiscuous mode [ 123.895016][ T6177] device lo entered promiscuous mode [ 123.936675][ T6183] netlink: 'syz.0.691': attribute type 3 has an invalid length. [ 123.967991][ T6183] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.691'. [ 124.066600][ T6187] netlink: 'syz.1.694': attribute type 21 has an invalid length. [ 124.108192][ T6187] netlink: 'syz.1.694': attribute type 6 has an invalid length. [ 124.124265][ T6187] netlink: 132 bytes leftover after parsing attributes in process `syz.1.694'. [ 124.445822][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 124.462024][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.701'. [ 124.474825][ T6214] device lo entered promiscuous mode [ 124.620995][ T6218] netlink: 'syz.4.706': attribute type 3 has an invalid length. [ 124.668658][ T6218] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.706'. [ 124.693196][ T6224] netlink: 'syz.3.709': attribute type 13 has an invalid length. [ 124.804294][ T6229] FAULT_INJECTION: forcing a failure. [ 124.804294][ T6229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.846142][ T6229] CPU: 1 PID: 6229 Comm: syz.4.711 Not tainted syzkaller #0 [ 124.853772][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.864121][ T6229] Call Trace: [ 124.867419][ T6229] [ 124.870354][ T6229] dump_stack_lvl+0x188/0x250 [ 124.875055][ T6229] ? show_regs_print_info+0x20/0x20 [ 124.880431][ T6229] ? load_image+0x400/0x400 [ 124.885208][ T6229] ? __lock_acquire+0x7d10/0x7d10 [ 124.890872][ T6229] should_fail+0x38c/0x4c0 [ 124.895562][ T6229] _copy_from_user+0x2e/0x170 [ 124.900255][ T6229] iovec_from_user+0x142/0x370 [ 124.905035][ T6229] __import_iovec+0x70/0x490 [ 124.909653][ T6229] import_iovec+0x6f/0xa0 [ 124.914348][ T6229] ___sys_sendmsg+0x1fd/0x2e0 [ 124.919396][ T6229] ? __sys_sendmsg+0x2a0/0x2a0 [ 124.924284][ T6229] __se_sys_sendmsg+0x1af/0x290 [ 124.929229][ T6229] ? __x64_sys_sendmsg+0x80/0x80 [ 124.934200][ T6229] ? syscall_enter_from_user_mode+0x2a/0x70 [ 124.940653][ T6229] do_syscall_64+0x4c/0xa0 [ 124.945165][ T6229] ? clear_bhb_loop+0x30/0x80 [ 124.949853][ T6229] ? clear_bhb_loop+0x30/0x80 [ 124.954565][ T6229] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.960706][ T6229] RIP: 0033:0x7fbebc27fcb9 [ 124.965136][ T6229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.985542][ T6229] RSP: 002b:00007fbeba4db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.994079][ T6229] RAX: ffffffffffffffda RBX: 00007fbebc4fafa0 RCX: 00007fbebc27fcb9 [ 125.002072][ T6229] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 125.010245][ T6229] RBP: 00007fbeba4db090 R08: 0000000000000000 R09: 0000000000000000 [ 125.018442][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.026420][ T6229] R13: 00007fbebc4fb038 R14: 00007fbebc4fafa0 R15: 00007fffe21aec08 [ 125.034594][ T6229] [ 125.574198][ T6264] FAULT_INJECTION: forcing a failure. [ 125.574198][ T6264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.621118][ T6264] CPU: 1 PID: 6264 Comm: syz.1.723 Not tainted syzkaller #0 [ 125.628698][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.639097][ T6264] Call Trace: [ 125.642398][ T6264] [ 125.645339][ T6264] dump_stack_lvl+0x188/0x250 [ 125.650284][ T6264] ? show_regs_print_info+0x20/0x20 [ 125.655617][ T6264] ? load_image+0x400/0x400 [ 125.660317][ T6264] ? __lock_acquire+0x7d10/0x7d10 [ 125.665350][ T6264] ? vfs_write+0x8b2/0xd60 [ 125.670131][ T6264] should_fail+0x38c/0x4c0 [ 125.674561][ T6262] sctp: [Deprecated]: syz.2.722 (pid 6262) Use of int in max_burst socket option deprecated. [ 125.674561][ T6262] Use struct sctp_assoc_value instead [ 125.690182][ T6264] _copy_from_user+0x2e/0x170 [ 125.690212][ T6264] __sys_bpf+0x26d/0x6f0 [ 125.690228][ T6264] ? bpf_link_show_fdinfo+0x380/0x380 [ 125.690250][ T6264] ? vtime_user_exit+0x2c8/0x3e0 [ 125.690270][ T6264] __x64_sys_bpf+0x78/0x90 [ 125.690287][ T6264] do_syscall_64+0x4c/0xa0 [ 125.690303][ T6264] ? clear_bhb_loop+0x30/0x80 [ 125.690318][ T6264] ? clear_bhb_loop+0x30/0x80 [ 125.690335][ T6264] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.690352][ T6264] RIP: 0033:0x7f87873f5cb9 [ 125.690368][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.690380][ T6264] RSP: 002b:00007f8785651028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.690395][ T6264] RAX: ffffffffffffffda RBX: 00007f8787670fa0 RCX: 00007f87873f5cb9 [ 125.690404][ T6264] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 125.784673][ T6264] RBP: 00007f8785651090 R08: 0000000000000000 R09: 0000000000000000 [ 125.792998][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.801585][ T6264] R13: 00007f8787671038 R14: 00007f8787670fa0 R15: 00007fff1d820908 [ 125.809678][ T6264] [ 127.567086][ T6290] device lo left promiscuous mode [ 127.637110][ T6290] device lo entered promiscuous mode [ 127.827884][ T6304] netlink: 132 bytes leftover after parsing attributes in process `syz.4.738'. [ 127.922687][ T6313] netlink: 'syz.2.741': attribute type 3 has an invalid length. [ 127.935375][ T6313] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.741'. [ 127.968646][ T6311] device syzkaller0 entered promiscuous mode [ 128.031569][ T6322] netlink: 'syz.4.745': attribute type 21 has an invalid length. [ 128.050674][ T6321] netlink: 'syz.0.744': attribute type 1 has an invalid length. [ 128.060798][ T6322] netlink: 'syz.4.745': attribute type 6 has an invalid length. [ 128.063347][ T6321] netlink: 'syz.0.744': attribute type 3 has an invalid length. [ 128.078616][ T6322] netlink: 132 bytes leftover after parsing attributes in process `syz.4.745'. [ 128.087305][ T6321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.744'. [ 128.091434][ T6326] netlink: 'syz.4.745': attribute type 1 has an invalid length. [ 128.111881][ T6325] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.746'. [ 128.168961][ T6326] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.745'. [ 128.698926][ T6363] netlink: 'syz.2.756': attribute type 8 has an invalid length. [ 128.736646][ T6363] netlink: 197324 bytes leftover after parsing attributes in process `syz.2.756'. [ 129.102171][ T6382] netlink: 'syz.1.763': attribute type 39 has an invalid length. [ 131.263209][ T6426] netlink: 112 bytes leftover after parsing attributes in process `syz.2.775'. [ 131.288643][ T6426] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 131.324179][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 131.354000][ T6434] device bridge_slave_1 left promiscuous mode [ 131.383456][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.600088][ T6433] netlink: 'syz.1.780': attribute type 10 has an invalid length. [ 131.621960][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.729130][ T6433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.820207][ T6433] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 131.833564][ T6447] netlink: 'syz.0.786': attribute type 21 has an invalid length. [ 131.856728][ T6447] netlink: 120 bytes leftover after parsing attributes in process `syz.0.786'. [ 131.871597][ T6447] netlink: 9 bytes leftover after parsing attributes in process `syz.0.786'. [ 132.046960][ T6464] device lo left promiscuous mode [ 132.096643][ T6464] device lo entered promiscuous mode [ 132.172199][ T6473] netlink: 140 bytes leftover after parsing attributes in process `syz.3.797'. [ 132.243267][ T6476] device wlan0 left promiscuous mode [ 132.296506][ T6481] device wlan0 entered promiscuous mode [ 132.352971][ T6485] device lo left promiscuous mode [ 132.503939][ T6485] device lo entered promiscuous mode [ 132.826428][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.833269][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.928564][ T6512] device syzkaller0 entered promiscuous mode [ 132.963848][ T6521] device lo entered promiscuous mode [ 133.035169][ T6533] validate_nla: 2 callbacks suppressed [ 133.035193][ T6533] netlink: 'syz.2.816': attribute type 3 has an invalid length. [ 133.309327][ T6544] __nla_validate_parse: 2 callbacks suppressed [ 133.309362][ T6544] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.822'. [ 133.461060][ T6550] netlink: 'syz.4.824': attribute type 21 has an invalid length. [ 133.956985][ T6574] netlink: 'syz.4.831': attribute type 39 has an invalid length. [ 134.609818][ T6608] netlink: 'syz.2.844': attribute type 9 has an invalid length. [ 134.659261][ T6608] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.844'. [ 136.306447][ T6675] FAULT_INJECTION: forcing a failure. [ 136.306447][ T6675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.322206][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.861'. [ 136.345706][ T6669] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.860'. [ 136.352449][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.861'. [ 136.399935][ T6672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.861'. [ 136.407603][ T6675] CPU: 0 PID: 6675 Comm: syz.2.862 Not tainted syzkaller #0 [ 136.416751][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.427096][ T6675] Call Trace: [ 136.430498][ T6675] [ 136.433473][ T6675] dump_stack_lvl+0x188/0x250 [ 136.438281][ T6675] ? show_regs_print_info+0x20/0x20 [ 136.443921][ T6675] ? load_image+0x400/0x400 [ 136.448475][ T6675] ? __lock_acquire+0x7d10/0x7d10 [ 136.453725][ T6675] should_fail+0x38c/0x4c0 [ 136.458192][ T6675] _copy_from_user+0x2e/0x170 [ 136.462993][ T6675] iovec_from_user+0x142/0x370 [ 136.467879][ T6675] __import_iovec+0x70/0x490 [ 136.472957][ T6675] import_iovec+0x6f/0xa0 [ 136.477394][ T6675] ___sys_sendmsg+0x1fd/0x2e0 [ 136.482224][ T6675] ? __sys_sendmsg+0x2a0/0x2a0 [ 136.487048][ T6675] ? trace_event_raw_event_lock+0x270/0x270 [ 136.493128][ T6675] ? vfs_write+0x8b2/0xd60 [ 136.497823][ T6675] __se_sys_sendmsg+0x1af/0x290 [ 136.502799][ T6675] ? __x64_sys_sendmsg+0x80/0x80 [ 136.507770][ T6675] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 136.513804][ T6675] ? lockdep_hardirqs_on+0x94/0x140 [ 136.519125][ T6675] do_syscall_64+0x4c/0xa0 [ 136.523783][ T6675] ? clear_bhb_loop+0x30/0x80 [ 136.528471][ T6675] ? clear_bhb_loop+0x30/0x80 [ 136.533244][ T6675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.539256][ T6675] RIP: 0033:0x7f407f218cb9 [ 136.543670][ T6675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.563837][ T6675] RSP: 002b:00007f407d474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.572712][ T6675] RAX: ffffffffffffffda RBX: 00007f407f493fa0 RCX: 00007f407f218cb9 [ 136.580778][ T6675] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 136.588769][ T6675] RBP: 00007f407d474090 R08: 0000000000000000 R09: 0000000000000000 [ 136.596950][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.605056][ T6675] R13: 00007f407f494038 R14: 00007f407f493fa0 R15: 00007ffe8d2247a8 [ 136.613463][ T6675] [ 136.933688][ T6687] netlink: 14 bytes leftover after parsing attributes in process `syz.1.865'. [ 137.317681][ T6686] netlink: 'syz.2.866': attribute type 3 has an invalid length. [ 137.339704][ T6686] netlink: 132 bytes leftover after parsing attributes in process `syz.2.866'. [ 137.376897][ T6686] netlink: 'syz.2.866': attribute type 39 has an invalid length. [ 137.444008][ T6700] device lo left promiscuous mode [ 137.548199][ T6700] device lo entered promiscuous mode [ 137.889076][ T6711] netlink: 'syz.1.876': attribute type 12 has an invalid length. [ 137.932928][ T6711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.876'. [ 138.107819][ T6719] netlink: 'syz.4.880': attribute type 10 has an invalid length. [ 138.152846][ T6719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.880'. [ 138.216581][ T6719] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 138.278388][ T6719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.478002][ T6735] FAULT_INJECTION: forcing a failure. [ 138.478002][ T6735] name failslab, interval 1, probability 0, space 0, times 0 [ 138.562873][ T6735] CPU: 0 PID: 6735 Comm: syz.4.884 Not tainted syzkaller #0 [ 138.570736][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.581518][ T6735] Call Trace: [ 138.585030][ T6735] [ 138.587970][ T6735] dump_stack_lvl+0x188/0x250 [ 138.592806][ T6735] ? show_regs_print_info+0x20/0x20 [ 138.598013][ T6735] ? load_image+0x400/0x400 [ 138.602530][ T6735] ? __might_sleep+0xf0/0xf0 [ 138.607208][ T6735] ? __lock_acquire+0x7d10/0x7d10 [ 138.612236][ T6735] should_fail+0x38c/0x4c0 [ 138.616749][ T6735] should_failslab+0x5/0x20 [ 138.621354][ T6735] slab_pre_alloc_hook+0x51/0xc0 [ 138.626498][ T6735] __kmalloc_node_track_caller+0x68/0x3a0 [ 138.632330][ T6735] ? netlink_sendmsg+0x654/0xbe0 [ 138.637362][ T6735] ? kmem_cache_alloc_node+0x162/0x2d0 [ 138.642819][ T6735] ? __alloc_skb+0xf4/0x750 [ 138.647321][ T6735] ? netlink_sendmsg+0x654/0xbe0 [ 138.652364][ T6735] __alloc_skb+0x22c/0x750 [ 138.656988][ T6735] netlink_sendmsg+0x654/0xbe0 [ 138.661764][ T6735] ? netlink_getsockopt+0x570/0x570 [ 138.667016][ T6735] ? aa_sock_msg_perm+0x94/0x150 [ 138.671977][ T6735] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 138.677292][ T6735] ? security_socket_sendmsg+0x7c/0xa0 [ 138.682754][ T6735] ? netlink_getsockopt+0x570/0x570 [ 138.688069][ T6735] ____sys_sendmsg+0x5b7/0x8f0 [ 138.692859][ T6735] ? __sys_sendmsg_sock+0x30/0x30 [ 138.698072][ T6735] ? import_iovec+0x6f/0xa0 [ 138.702599][ T6735] ___sys_sendmsg+0x236/0x2e0 [ 138.707489][ T6735] ? __sys_sendmsg+0x2a0/0x2a0 [ 138.712356][ T6735] ? trace_event_raw_event_lock+0x270/0x270 [ 138.718252][ T6735] ? vfs_write+0x8b2/0xd60 [ 138.722696][ T6735] __se_sys_sendmsg+0x1af/0x290 [ 138.727548][ T6735] ? __x64_sys_sendmsg+0x80/0x80 [ 138.732664][ T6735] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 138.738671][ T6735] ? lockdep_hardirqs_on+0x94/0x140 [ 138.743965][ T6735] do_syscall_64+0x4c/0xa0 [ 138.748467][ T6735] ? clear_bhb_loop+0x30/0x80 [ 138.753224][ T6735] ? clear_bhb_loop+0x30/0x80 [ 138.758164][ T6735] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.764165][ T6735] RIP: 0033:0x7fbebc27fcb9 [ 138.768723][ T6735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.788840][ T6735] RSP: 002b:00007fbeba4db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.797467][ T6735] RAX: ffffffffffffffda RBX: 00007fbebc4fafa0 RCX: 00007fbebc27fcb9 [ 138.805627][ T6735] RDX: ff0f000020000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 138.813704][ T6735] RBP: 00007fbeba4db090 R08: 0000000000000000 R09: 0000000000000000 [ 138.821855][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.829914][ T6735] R13: 00007fbebc4fb038 R14: 00007fbebc4fafa0 R15: 00007fffe21aec08 [ 138.837901][ T6735] [ 139.253108][ T6745] netlink: 'syz.3.888': attribute type 12 has an invalid length. [ 139.260992][ T6745] netlink: 132 bytes leftover after parsing attributes in process `syz.3.888'. [ 139.746457][ T6756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.892'. [ 139.906791][ T6765] FAULT_INJECTION: forcing a failure. [ 139.906791][ T6765] name failslab, interval 1, probability 0, space 0, times 0 [ 139.940547][ T6765] CPU: 1 PID: 6765 Comm: syz.3.895 Not tainted syzkaller #0 [ 139.948185][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.958341][ T6765] Call Trace: [ 139.961726][ T6765] [ 139.964662][ T6765] dump_stack_lvl+0x188/0x250 [ 139.969362][ T6765] ? show_regs_print_info+0x20/0x20 [ 139.974763][ T6765] ? load_image+0x400/0x400 [ 139.979534][ T6765] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 139.985767][ T6765] ? lockdep_hardirqs_on+0x94/0x140 [ 139.991243][ T6765] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 139.997515][ T6765] should_fail+0x38c/0x4c0 [ 140.001959][ T6765] should_failslab+0x5/0x20 [ 140.006557][ T6765] slab_pre_alloc_hook+0x51/0xc0 [ 140.011537][ T6765] ? skb_clone+0x1bd/0x350 [ 140.016082][ T6765] kmem_cache_alloc+0x3d/0x290 [ 140.020860][ T6765] skb_clone+0x1bd/0x350 [ 140.025119][ T6765] bpf_clone_redirect+0xa9/0x390 [ 140.030180][ T6765] bpf_prog_ed198f4594f8762b+0x19/0x6f4 [ 140.036116][ T6765] bpf_test_run+0x4ae/0x800 [ 140.040744][ T6765] ? convert___skb_to_skb+0x4c0/0x4c0 [ 140.046144][ T6765] ? eth_get_headlen+0x200/0x200 [ 140.051447][ T6765] ? __build_skb+0x1e2/0x2e0 [ 140.056143][ T6765] ? convert___skb_to_skb+0x3d/0x4c0 [ 140.061543][ T6765] bpf_prog_test_run_skb+0x9cc/0x1180 [ 140.066942][ T6765] ? cpu_online+0x60/0x60 [ 140.071569][ T6765] bpf_prog_test_run+0x31e/0x390 [ 140.076538][ T6765] __sys_bpf+0x5a5/0x6f0 [ 140.080800][ T6765] ? bpf_link_show_fdinfo+0x380/0x380 [ 140.086376][ T6765] ? vtime_user_exit+0x2c8/0x3e0 [ 140.091336][ T6765] __x64_sys_bpf+0x78/0x90 [ 140.095780][ T6765] do_syscall_64+0x4c/0xa0 [ 140.100208][ T6765] ? clear_bhb_loop+0x30/0x80 [ 140.105114][ T6765] ? clear_bhb_loop+0x30/0x80 [ 140.109806][ T6765] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.115703][ T6765] RIP: 0033:0x7fdd1000ecb9 [ 140.120470][ T6765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.140255][ T6765] RSP: 002b:00007fdd0e26a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.148947][ T6765] RAX: ffffffffffffffda RBX: 00007fdd10289fa0 RCX: 00007fdd1000ecb9 [ 140.157278][ T6765] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 140.165438][ T6765] RBP: 00007fdd0e26a090 R08: 0000000000000000 R09: 0000000000000000 [ 140.173672][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.181840][ T6765] R13: 00007fdd1028a038 R14: 00007fdd10289fa0 R15: 00007fffcd2d3f78 [ 140.190464][ T6765] [ 141.033616][ T6767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.893'. [ 141.333154][ T6793] netlink: 'syz.3.904': attribute type 10 has an invalid length. [ 141.341031][ T6793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.904'. [ 141.407435][ T6793] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 141.522941][ T6799] netlink: 'syz.2.905': attribute type 8 has an invalid length. [ 141.542842][ T6799] netlink: 156 bytes leftover after parsing attributes in process `syz.2.905'. [ 141.876309][ T6813] device lo left promiscuous mode [ 141.937156][ T6813] device lo entered promiscuous mode [ 142.077298][ T6818] device syzkaller0 entered promiscuous mode [ 142.147067][ T6828] netlink: set zone limit has 8 unknown bytes [ 142.331114][ T6828] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 142.547109][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 142.596835][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 142.640589][ T6834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.053166][ T6854] device syzkaller0 entered promiscuous mode [ 143.184398][ T6866] netlink: 'syz.1.932': attribute type 21 has an invalid length. [ 143.192312][ T6866] netlink: 'syz.1.932': attribute type 6 has an invalid length. [ 143.203355][ T6866] netlink: 132 bytes leftover after parsing attributes in process `syz.1.932'. [ 143.324175][ T6872] netlink: zone id is out of range [ 143.353002][ T6872] netlink: set zone limit has 8 unknown bytes [ 143.378875][ T6871] netlink: 'syz.4.935': attribute type 4 has an invalid length. [ 143.447406][ T6871] netlink: 152 bytes leftover after parsing attributes in process `syz.4.935'. [ 143.607288][ T6884] FAULT_INJECTION: forcing a failure. [ 143.607288][ T6884] name failslab, interval 1, probability 0, space 0, times 0 [ 143.632884][ T6871] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 143.633119][ T6884] CPU: 0 PID: 6884 Comm: syz.3.939 Not tainted syzkaller #0 [ 143.655773][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.665839][ T6884] Call Trace: [ 143.669112][ T6884] [ 143.672025][ T6884] dump_stack_lvl+0x188/0x250 [ 143.676790][ T6884] ? show_regs_print_info+0x20/0x20 [ 143.682245][ T6884] ? load_image+0x400/0x400 [ 143.686780][ T6884] ? __might_sleep+0xf0/0xf0 [ 143.691577][ T6884] ? __lock_acquire+0x7d10/0x7d10 [ 143.696594][ T6884] ? netlink_insert+0xe95/0x11f0 [ 143.701529][ T6884] should_fail+0x38c/0x4c0 [ 143.706044][ T6884] should_failslab+0x5/0x20 [ 143.710533][ T6884] slab_pre_alloc_hook+0x51/0xc0 [ 143.715458][ T6884] kmem_cache_alloc_node+0x47/0x2d0 [ 143.720642][ T6884] ? __alloc_skb+0xf4/0x750 [ 143.725217][ T6884] __alloc_skb+0xf4/0x750 [ 143.729539][ T6884] netlink_sendmsg+0x654/0xbe0 [ 143.734688][ T6884] ? netlink_getsockopt+0x570/0x570 [ 143.739950][ T6884] ? netlink_getsockopt+0x570/0x570 [ 143.745134][ T6884] ____sys_sendmsg+0x5b7/0x8f0 [ 143.749912][ T6884] ? __sys_sendmsg_sock+0x30/0x30 [ 143.755017][ T6884] ? import_iovec+0x6f/0xa0 [ 143.759600][ T6884] ___sys_sendmsg+0x236/0x2e0 [ 143.764355][ T6884] ? __sys_sendmsg+0x2a0/0x2a0 [ 143.769236][ T6884] __se_sys_sendmsg+0x1af/0x290 [ 143.774105][ T6884] ? __x64_sys_sendmsg+0x80/0x80 [ 143.779041][ T6884] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 143.785058][ T6884] ? lockdep_hardirqs_on+0x94/0x140 [ 143.790351][ T6884] do_syscall_64+0x4c/0xa0 [ 143.794857][ T6884] ? clear_bhb_loop+0x30/0x80 [ 143.799614][ T6884] ? clear_bhb_loop+0x30/0x80 [ 143.804371][ T6884] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.810265][ T6884] RIP: 0033:0x7fdd1000ecb9 [ 143.814706][ T6884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.834558][ T6884] RSP: 002b:00007fdd0e26a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.842959][ T6884] RAX: ffffffffffffffda RBX: 00007fdd10289fa0 RCX: 00007fdd1000ecb9 [ 143.851003][ T6884] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 143.859224][ T6884] RBP: 00007fdd0e26a090 R08: 0000000000000000 R09: 0000000000000000 [ 143.867180][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.875221][ T6884] R13: 00007fdd1028a038 R14: 00007fdd10289fa0 R15: 00007fffcd2d3f78 [ 143.883187][ T6884] [ 143.942323][ T6870] delete_channel: no stack [ 144.156620][ T6904] device syzkaller0 entered promiscuous mode [ 144.672296][ T6922] FAULT_INJECTION: forcing a failure. [ 144.672296][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 144.693275][ T6922] CPU: 1 PID: 6922 Comm: syz.1.954 Not tainted syzkaller #0 [ 144.700956][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.711211][ T6922] Call Trace: [ 144.714648][ T6922] [ 144.717590][ T6922] dump_stack_lvl+0x188/0x250 [ 144.722282][ T6922] ? show_regs_print_info+0x20/0x20 [ 144.727768][ T6922] ? load_image+0x400/0x400 [ 144.732411][ T6922] ? __might_sleep+0xf0/0xf0 [ 144.737125][ T6922] ? __lock_acquire+0x7d10/0x7d10 [ 144.742409][ T6922] should_fail+0x38c/0x4c0 [ 144.747162][ T6922] should_failslab+0x5/0x20 [ 144.751764][ T6922] slab_pre_alloc_hook+0x51/0xc0 [ 144.756894][ T6922] __kmalloc+0x6b/0x330 [ 144.761354][ T6922] ? bpf_test_init+0xf8/0x1b0 [ 144.766048][ T6922] ? __lock_acquire+0x7d10/0x7d10 [ 144.771094][ T6922] bpf_test_init+0xf8/0x1b0 [ 144.775625][ T6922] bpf_prog_test_run_skb+0x181/0x1180 [ 144.781105][ T6922] ? __fget_files+0x40f/0x480 [ 144.785848][ T6922] ? cpu_online+0x60/0x60 [ 144.790482][ T6922] bpf_prog_test_run+0x31e/0x390 [ 144.795928][ T6922] __sys_bpf+0x5a5/0x6f0 [ 144.800278][ T6922] ? bpf_link_show_fdinfo+0x380/0x380 [ 144.805724][ T6922] ? rcu_nmi_exit+0x6f/0xf0 [ 144.810251][ T6922] ? vtime_user_exit+0x2c8/0x3e0 [ 144.815392][ T6922] __x64_sys_bpf+0x78/0x90 [ 144.819834][ T6922] do_syscall_64+0x4c/0xa0 [ 144.824458][ T6922] ? clear_bhb_loop+0x30/0x80 [ 144.829327][ T6922] ? clear_bhb_loop+0x30/0x80 [ 144.834164][ T6922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.840499][ T6922] RIP: 0033:0x7f87873f5cb9 [ 144.845025][ T6922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.865299][ T6922] RSP: 002b:00007f8785651028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.873988][ T6922] RAX: ffffffffffffffda RBX: 00007f8787670fa0 RCX: 00007f87873f5cb9 [ 144.882154][ T6922] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 144.890312][ T6922] RBP: 00007f8785651090 R08: 0000000000000000 R09: 0000000000000000 [ 144.899029][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.907201][ T6922] R13: 00007f8787671038 R14: 00007f8787670fa0 R15: 00007fff1d820908 [ 144.915578][ T6922] [ 149.117540][ T6975] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.974'. [ 149.462197][ T7011] device syzkaller0 entered promiscuous mode [ 149.530742][ T7017] netlink: 52 bytes leftover after parsing attributes in process `syz.1.988'. [ 149.541114][ T7017] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 149.718375][ T7027] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.991'. [ 149.748664][ T7027] openvswitch: netlink: Flow key attribute not present in set flow. [ 150.131894][ T7055] device syzkaller0 entered promiscuous mode [ 150.159977][ T7053] netlink: 'syz.4.1002': attribute type 10 has an invalid length. [ 150.172186][ T7053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.226516][ T7053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.284441][ T7053] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 150.691878][ T7084] device wlan0 left promiscuous mode [ 150.727153][ T7084] device wlan0 entered promiscuous mode [ 150.749422][ T7090] FAULT_INJECTION: forcing a failure. [ 150.749422][ T7090] name failslab, interval 1, probability 0, space 0, times 0 [ 150.763551][ T7084] netlink: 'syz.1.1013': attribute type 9 has an invalid length. [ 150.773087][ T7084] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1013'. [ 150.785686][ T7090] CPU: 0 PID: 7090 Comm: syz.0.1015 Not tainted syzkaller #0 [ 150.795375][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.807078][ T7090] Call Trace: [ 150.810570][ T7090] [ 150.813989][ T7090] dump_stack_lvl+0x188/0x250 [ 150.820226][ T7090] ? fib_rules_unregister+0x340/0x340 [ 150.826846][ T7090] ? show_regs_print_info+0x20/0x20 [ 150.832545][ T7090] ? load_image+0x400/0x400 [ 150.837225][ T7090] ? mroute_clean_tables+0xad0/0xad0 [ 150.842539][ T7090] should_fail+0x38c/0x4c0 [ 150.847684][ T7090] should_failslab+0x5/0x20 [ 150.853212][ T7090] slab_pre_alloc_hook+0x51/0xc0 [ 150.858435][ T7090] ? skb_clone+0x1bd/0x350 [ 150.862846][ T7090] kmem_cache_alloc+0x3d/0x290 [ 150.867803][ T7090] skb_clone+0x1bd/0x350 [ 150.872096][ T7090] ? ip6_finish_output2+0x7f2/0x1510 [ 150.877387][ T7090] ip6_finish_output2+0x80a/0x1510 [ 150.882853][ T7090] ? nf_hook+0x360/0x360 [ 150.887368][ T7090] ? ip6_finish_output+0x64c/0x7d0 [ 150.892489][ T7090] ip6_send_skb+0x1b9/0x360 [ 150.897173][ T7090] udp_v6_send_skb+0xa28/0x1680 [ 150.902162][ T7090] udpv6_sendmsg+0x1e11/0x2650 [ 150.906917][ T7090] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 150.911764][ T7090] ? udp_v6_early_demux+0xec0/0xec0 [ 150.917419][ T7090] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 150.923415][ T7090] ? __local_bh_enable_ip+0x136/0x1c0 [ 150.929251][ T7090] ? lockdep_hardirqs_on+0x94/0x140 [ 150.934550][ T7090] ? inet_send_prepare+0x1af/0x260 [ 150.939830][ T7090] ? inet6_sendmsg+0x5b/0xd0 [ 150.944511][ T7090] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 150.949817][ T7090] ____sys_sendmsg+0x5b7/0x8f0 [ 150.954679][ T7090] ? __sys_sendmsg_sock+0x30/0x30 [ 150.959919][ T7090] ? import_iovec+0x6f/0xa0 [ 150.964522][ T7090] ___sys_sendmsg+0x236/0x2e0 [ 150.969456][ T7090] ? __sys_sendmsg+0x2a0/0x2a0 [ 150.974406][ T7090] ? vfs_write+0x8b2/0xd60 [ 150.979133][ T7090] __se_sys_sendmsg+0x1af/0x290 [ 150.984291][ T7090] ? __x64_sys_sendmsg+0x80/0x80 [ 150.989897][ T7090] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 150.996591][ T7090] ? lockdep_hardirqs_on+0x94/0x140 [ 151.001974][ T7090] do_syscall_64+0x4c/0xa0 [ 151.006566][ T7090] ? clear_bhb_loop+0x30/0x80 [ 151.011332][ T7090] ? clear_bhb_loop+0x30/0x80 [ 151.016173][ T7090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.022146][ T7090] RIP: 0033:0x7fb712d8dcb9 [ 151.026562][ T7090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.046773][ T7090] RSP: 002b:00007fb710fe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.055545][ T7090] RAX: ffffffffffffffda RBX: 00007fb713008fa0 RCX: 00007fb712d8dcb9 [ 151.063849][ T7090] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 151.072242][ T7090] RBP: 00007fb710fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 151.080773][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.089131][ T7090] R13: 00007fb713009038 R14: 00007fb713008fa0 R15: 00007ffcd11dc8e8 [ 151.097479][ T7090] [ 151.150780][ T7091] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1014'. [ 151.211426][ T7096] netlink: 'syz.4.1014': attribute type 12 has an invalid length. [ 151.226908][ T7096] netlink: 171020 bytes leftover after parsing attributes in process `syz.4.1014'. [ 151.477272][ T7107] device syzkaller0 entered promiscuous mode [ 151.914431][ T7135] netlink: 'syz.2.1030': attribute type 3 has an invalid length. [ 151.922505][ T7135] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1030'. [ 152.022038][ T7137] netlink: 'syz.0.1031': attribute type 11 has an invalid length. [ 152.319783][ T7151] netlink: 'syz.0.1036': attribute type 7 has an invalid length. [ 152.366579][ T7151] netlink: 148540 bytes leftover after parsing attributes in process `syz.0.1036'. [ 152.567188][ T7163] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1042'. [ 152.574078][ T7161] device syzkaller0 entered promiscuous mode [ 152.728069][ T7165] device syzkaller0 entered promiscuous mode [ 153.161009][ T7187] device syzkaller0 entered promiscuous mode [ 153.202475][ T7188] netlink: 'syz.0.1051': attribute type 3 has an invalid length. [ 153.227217][ T7188] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1051'. [ 155.072200][ T7200] netlink: 'syz.2.1049': attribute type 10 has an invalid length. [ 155.090116][ T7200] device hsr_slave_0 left promiscuous mode [ 155.099825][ T7200] device hsr_slave_1 left promiscuous mode [ 155.287685][ T7216] netlink: 'syz.3.1056': attribute type 8 has an invalid length. [ 155.319196][ T7216] netlink: 'syz.3.1056': attribute type 7 has an invalid length. [ 155.330874][ T7216] netlink: 198628 bytes leftover after parsing attributes in process `syz.3.1056'. [ 155.634956][ T7237] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1066'. [ 155.680307][ T7237] netlink: 'syz.3.1066': attribute type 12 has an invalid length. [ 155.733297][ T7237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1066'. [ 155.876755][ T7259] FAULT_INJECTION: forcing a failure. [ 155.876755][ T7259] name failslab, interval 1, probability 0, space 0, times 0 [ 155.906130][ T7259] CPU: 1 PID: 7259 Comm: syz.0.1073 Not tainted syzkaller #0 [ 155.913747][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.924003][ T7259] Call Trace: [ 155.927290][ T7259] [ 155.930221][ T7259] dump_stack_lvl+0x188/0x250 [ 155.935077][ T7259] ? show_regs_print_info+0x20/0x20 [ 155.940868][ T7259] ? load_image+0x400/0x400 [ 155.945596][ T7259] ? __might_sleep+0xf0/0xf0 [ 155.950198][ T7259] ? __lock_acquire+0x7d10/0x7d10 [ 155.955222][ T7259] ? netlink_insert+0xe95/0x11f0 [ 155.960176][ T7259] should_fail+0x38c/0x4c0 [ 155.964751][ T7259] should_failslab+0x5/0x20 [ 155.969442][ T7259] slab_pre_alloc_hook+0x51/0xc0 [ 155.974473][ T7259] kmem_cache_alloc_node+0x47/0x2d0 [ 155.979685][ T7259] ? __alloc_skb+0xf4/0x750 [ 155.984299][ T7259] __alloc_skb+0xf4/0x750 [ 155.988618][ T7259] netlink_sendmsg+0x654/0xbe0 [ 155.993470][ T7259] ? netlink_getsockopt+0x570/0x570 [ 155.998724][ T7259] ? aa_sock_msg_perm+0x94/0x150 [ 156.003656][ T7259] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 156.008943][ T7259] ? security_socket_sendmsg+0x7c/0xa0 [ 156.014543][ T7259] ? netlink_getsockopt+0x570/0x570 [ 156.019793][ T7259] ____sys_sendmsg+0x5b7/0x8f0 [ 156.024778][ T7259] ? __sys_sendmsg_sock+0x30/0x30 [ 156.030204][ T7259] ? import_iovec+0x6f/0xa0 [ 156.034923][ T7259] ___sys_sendmsg+0x236/0x2e0 [ 156.039626][ T7259] ? __sys_sendmsg+0x2a0/0x2a0 [ 156.044491][ T7259] ? vfs_write+0x8b2/0xd60 [ 156.048941][ T7259] __se_sys_sendmsg+0x1af/0x290 [ 156.054065][ T7259] ? __x64_sys_sendmsg+0x80/0x80 [ 156.059018][ T7259] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 156.065378][ T7259] ? lockdep_hardirqs_on+0x94/0x140 [ 156.070908][ T7259] do_syscall_64+0x4c/0xa0 [ 156.075346][ T7259] ? clear_bhb_loop+0x30/0x80 [ 156.080133][ T7259] ? clear_bhb_loop+0x30/0x80 [ 156.084828][ T7259] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.090732][ T7259] RIP: 0033:0x7fb712d8dcb9 [ 156.095282][ T7259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.115733][ T7259] RSP: 002b:00007fb710fc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.124687][ T7259] RAX: ffffffffffffffda RBX: 00007fb713009090 RCX: 00007fb712d8dcb9 [ 156.132880][ T7259] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 156.141045][ T7259] RBP: 00007fb710fc8090 R08: 0000000000000000 R09: 0000000000000000 [ 156.149506][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.157648][ T7259] R13: 00007fb713009128 R14: 00007fb713009090 R15: 00007ffcd11dc8e8 [ 156.165721][ T7259] [ 156.370385][ T7282] netlink: 'syz.2.1081': attribute type 1 has an invalid length. [ 156.395415][ T7282] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1081'. [ 156.408802][ T7287] netlink: 'syz.3.1083': attribute type 3 has an invalid length. [ 156.441107][ T7279] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1079'. [ 156.450363][ T7287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1083'. [ 156.538956][ T7279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.568712][ T7279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.622612][ T7279] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 156.654832][ T7279] bond0 (unregistering): Released all slaves [ 156.701618][ T7287] netlink: 'syz.3.1083': attribute type 39 has an invalid length. [ 156.710253][ T7292] netlink: 'syz.1.1085': attribute type 39 has an invalid length. [ 156.869282][ T7301] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1089'. [ 157.124474][ T7323] FAULT_INJECTION: forcing a failure. [ 157.124474][ T7323] name failslab, interval 1, probability 0, space 0, times 0 [ 157.165392][ T7323] CPU: 1 PID: 7323 Comm: syz.2.1095 Not tainted syzkaller #0 [ 157.172973][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.183496][ T7323] Call Trace: [ 157.186784][ T7323] [ 157.189815][ T7323] dump_stack_lvl+0x188/0x250 [ 157.194615][ T7323] ? show_regs_print_info+0x20/0x20 [ 157.199826][ T7323] ? load_image+0x400/0x400 [ 157.204379][ T7323] ? __might_sleep+0xf0/0xf0 [ 157.209065][ T7323] ? __lock_acquire+0x7d10/0x7d10 [ 157.214192][ T7323] should_fail+0x38c/0x4c0 [ 157.218885][ T7323] should_failslab+0x5/0x20 [ 157.223403][ T7323] slab_pre_alloc_hook+0x51/0xc0 [ 157.228527][ T7323] ? getname_flags+0xb5/0x500 [ 157.233295][ T7323] kmem_cache_alloc+0x3d/0x290 [ 157.238246][ T7323] getname_flags+0xb5/0x500 [ 157.242789][ T7323] do_sys_openat2+0xdd/0x4b0 [ 157.247474][ T7323] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 157.253929][ T7323] ? rcu_nmi_exit+0x6f/0xf0 [ 157.258448][ T7323] ? do_sys_open+0xe0/0xe0 [ 157.262881][ T7323] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 157.269053][ T7323] ? lock_chain_count+0x20/0x20 [ 157.273917][ T7323] ? vtime_user_exit+0x2c8/0x3e0 [ 157.279049][ T7323] __x64_sys_openat+0x135/0x160 [ 157.284090][ T7323] do_syscall_64+0x4c/0xa0 [ 157.289143][ T7323] ? clear_bhb_loop+0x30/0x80 [ 157.295141][ T7323] ? clear_bhb_loop+0x30/0x80 [ 157.300672][ T7323] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.307670][ T7323] RIP: 0033:0x7f407f218cb9 [ 157.312671][ T7323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.335647][ T7323] RSP: 002b:00007f407d453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.344993][ T7323] RAX: ffffffffffffffda RBX: 00007f407f494090 RCX: 00007f407f218cb9 [ 157.354068][ T7323] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 157.362453][ T7323] RBP: 00007f407d453090 R08: 0000000000000000 R09: 0000000000000000 [ 157.370887][ T7323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.379077][ T7323] R13: 00007f407f494128 R14: 00007f407f494090 R15: 00007ffe8d2247a8 [ 157.387756][ T7323] [ 157.445082][ T7330] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 157.453718][ T7331] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 157.464729][ T7330] netlink: 'syz.4.1100': attribute type 3 has an invalid length. [ 157.474227][ T7330] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1100'. [ 157.498927][ T7330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1100'. [ 157.527848][ T7330] device lo left promiscuous mode [ 157.555662][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.561236][ T7333] FAULT_INJECTION: forcing a failure. [ 157.561236][ T7333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.584051][ T7330] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 157.596972][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.631371][ T7330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.654922][ T7333] CPU: 0 PID: 7333 Comm: syz.2.1101 Not tainted syzkaller #0 [ 157.662597][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.672829][ T7333] Call Trace: [ 157.676198][ T7333] [ 157.679238][ T7333] dump_stack_lvl+0x188/0x250 [ 157.684134][ T7333] ? show_regs_print_info+0x20/0x20 [ 157.689635][ T7333] ? load_image+0x400/0x400 [ 157.694237][ T7333] ? __lock_acquire+0x7d10/0x7d10 [ 157.699440][ T7333] ? vfs_write+0x8b2/0xd60 [ 157.704115][ T7333] should_fail+0x38c/0x4c0 [ 157.708554][ T7333] _copy_from_user+0x2e/0x170 [ 157.713393][ T7333] __sys_bpf+0x26d/0x6f0 [ 157.717771][ T7333] ? bpf_link_show_fdinfo+0x380/0x380 [ 157.723168][ T7333] ? vtime_user_exit+0x2c8/0x3e0 [ 157.728375][ T7333] __x64_sys_bpf+0x78/0x90 [ 157.732963][ T7333] do_syscall_64+0x4c/0xa0 [ 157.737647][ T7333] ? clear_bhb_loop+0x30/0x80 [ 157.742497][ T7333] ? clear_bhb_loop+0x30/0x80 [ 157.747343][ T7333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.753320][ T7333] RIP: 0033:0x7f407f218cb9 [ 157.758010][ T7333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.778525][ T7333] RSP: 002b:00007f407d474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.787120][ T7333] RAX: ffffffffffffffda RBX: 00007f407f493fa0 RCX: 00007f407f218cb9 [ 157.796159][ T7333] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 157.804307][ T7333] RBP: 00007f407d474090 R08: 0000000000000000 R09: 0000000000000000 [ 157.812617][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.820976][ T7333] R13: 00007f407f494038 R14: 00007f407f493fa0 R15: 00007ffe8d2247a8 [ 157.829245][ T7333] [ 158.007426][ T7348] netlink: 181676 bytes leftover after parsing attributes in process `syz.2.1107'. [ 158.146264][ T7355] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 160.172603][ T7361] bridge0: port 3(team0) entered blocking state [ 160.193805][ T7361] bridge0: port 3(team0) entered disabled state [ 160.234105][ T7361] device team0 entered promiscuous mode [ 160.269834][ T7361] device team_slave_0 entered promiscuous mode [ 160.307820][ T7361] device team_slave_1 entered promiscuous mode [ 160.338401][ T7361] bridge0: port 3(team0) entered blocking state [ 160.344802][ T7361] bridge0: port 3(team0) entered forwarding state [ 160.412024][ T7388] validate_nla: 7 callbacks suppressed [ 160.412043][ T7388] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 160.441292][ T7388] __nla_validate_parse: 3 callbacks suppressed [ 160.441306][ T7388] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.1121'. [ 160.498455][ T7391] netlink: 'syz.3.1119': attribute type 12 has an invalid length. [ 160.519696][ T7391] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1119'. [ 160.816369][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 160.928434][ T7408] netlink: 'syz.4.1129': attribute type 11 has an invalid length. [ 160.959757][ T7408] netlink: 'syz.4.1129': attribute type 2 has an invalid length. [ 160.999236][ T7408] netlink: 198236 bytes leftover after parsing attributes in process `syz.4.1129'. [ 161.196496][ T7415] netlink: 'syz.4.1132': attribute type 3 has an invalid length. [ 161.235485][ T7415] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1132'. [ 161.807554][ T7426] delete_channel: no stack [ 161.826982][ T7426] delete_channel: no stack [ 161.985135][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 162.011413][ T7437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.362157][ T7454] netlink: 'syz.3.1147': attribute type 29 has an invalid length. [ 162.413081][ T7454] netlink: 'syz.3.1147': attribute type 29 has an invalid length. [ 162.434408][ T7454] netlink: 'syz.3.1147': attribute type 29 has an invalid length. [ 162.536922][ T7467] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1149'. [ 162.709146][ T7473] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.859043][ T7478] netlink: 'syz.4.1155': attribute type 21 has an invalid length. [ 162.893145][ T7478] netlink: 'syz.4.1155': attribute type 6 has an invalid length. [ 162.901023][ T7478] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1155'. [ 162.959174][ T7485] FAULT_INJECTION: forcing a failure. [ 162.959174][ T7485] name failslab, interval 1, probability 0, space 0, times 0 [ 163.001157][ T7485] CPU: 1 PID: 7485 Comm: syz.3.1158 Not tainted syzkaller #0 [ 163.008658][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.018818][ T7485] Call Trace: [ 163.022105][ T7485] [ 163.025126][ T7485] dump_stack_lvl+0x188/0x250 [ 163.029825][ T7485] ? show_regs_print_info+0x20/0x20 [ 163.035287][ T7485] ? load_image+0x400/0x400 [ 163.039895][ T7485] ? __might_sleep+0xf0/0xf0 [ 163.044507][ T7485] ? __lock_acquire+0x7d10/0x7d10 [ 163.049648][ T7485] should_fail+0x38c/0x4c0 [ 163.054218][ T7485] should_failslab+0x5/0x20 [ 163.058734][ T7485] slab_pre_alloc_hook+0x51/0xc0 [ 163.063915][ T7485] __kmalloc_node_track_caller+0x68/0x3a0 [ 163.069770][ T7485] ? netlink_sendmsg+0x654/0xbe0 [ 163.074819][ T7485] ? kmem_cache_alloc_node+0x162/0x2d0 [ 163.080374][ T7485] ? __alloc_skb+0xf4/0x750 [ 163.084886][ T7485] ? netlink_sendmsg+0x654/0xbe0 [ 163.089922][ T7485] __alloc_skb+0x22c/0x750 [ 163.094458][ T7485] netlink_sendmsg+0x654/0xbe0 [ 163.099352][ T7485] ? netlink_getsockopt+0x570/0x570 [ 163.104771][ T7485] ? aa_sock_msg_perm+0x94/0x150 [ 163.109901][ T7485] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 163.115194][ T7485] ? security_socket_sendmsg+0x7c/0xa0 [ 163.120662][ T7485] ? netlink_getsockopt+0x570/0x570 [ 163.125952][ T7485] ____sys_sendmsg+0x5b7/0x8f0 [ 163.130735][ T7485] ? __sys_sendmsg_sock+0x30/0x30 [ 163.135857][ T7485] ? import_iovec+0x6f/0xa0 [ 163.140554][ T7485] ___sys_sendmsg+0x236/0x2e0 [ 163.145249][ T7485] ? __sys_sendmsg+0x2a0/0x2a0 [ 163.150049][ T7485] ? ktime_get_real_ts64+0x440/0x440 [ 163.155577][ T7485] __se_sys_sendmsg+0x1af/0x290 [ 163.160545][ T7485] ? __x64_sys_sendmsg+0x80/0x80 [ 163.165760][ T7485] ? syscall_enter_from_user_mode+0x2a/0x70 [ 163.171715][ T7485] do_syscall_64+0x4c/0xa0 [ 163.176494][ T7485] ? clear_bhb_loop+0x30/0x80 [ 163.181278][ T7485] ? clear_bhb_loop+0x30/0x80 [ 163.186061][ T7485] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.192170][ T7485] RIP: 0033:0x7fdd1000ecb9 [ 163.196601][ T7485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.216666][ T7485] RSP: 002b:00007fdd0e26a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.225114][ T7485] RAX: ffffffffffffffda RBX: 00007fdd10289fa0 RCX: 00007fdd1000ecb9 [ 163.233854][ T7485] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 163.242103][ T7485] RBP: 00007fdd0e26a090 R08: 0000000000000000 R09: 0000000000000000 [ 163.250442][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.258418][ T7485] R13: 00007fdd1028a038 R14: 00007fdd10289fa0 R15: 00007fffcd2d3f78 [ 163.266408][ T7485] [ 163.393356][ T7497] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1161'. [ 165.274402][ T7536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1175'. [ 165.291134][ T7536] device lo left promiscuous mode [ 165.298228][ T7536] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 165.314252][ T7536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.370085][ T7536] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1175'. [ 165.445284][ T7536] validate_nla: 4 callbacks suppressed [ 165.445302][ T7536] netlink: 'syz.1.1175': attribute type 1 has an invalid length. [ 165.559452][ T7536] __nla_validate_parse: 3 callbacks suppressed [ 165.559476][ T7536] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1175'. [ 165.686749][ T7553] FAULT_INJECTION: forcing a failure. [ 165.686749][ T7553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.701347][ T7553] CPU: 1 PID: 7553 Comm: syz.2.1178 Not tainted syzkaller #0 [ 165.708830][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.719040][ T7553] Call Trace: [ 165.722422][ T7553] [ 165.725538][ T7553] dump_stack_lvl+0x188/0x250 [ 165.731138][ T7553] ? show_regs_print_info+0x20/0x20 [ 165.736364][ T7553] ? load_image+0x400/0x400 [ 165.741214][ T7553] ? __lock_acquire+0x7d10/0x7d10 [ 165.746870][ T7553] should_fail+0x38c/0x4c0 [ 165.751336][ T7553] _copy_from_user+0x2e/0x170 [ 165.756129][ T7553] bpf_test_init+0x136/0x1b0 [ 165.760748][ T7553] bpf_prog_test_run_skb+0x181/0x1180 [ 165.766324][ T7553] ? __fget_files+0x40f/0x480 [ 165.771218][ T7553] ? cpu_online+0x60/0x60 [ 165.775436][ T7555] netlink: 'syz.1.1179': attribute type 3 has an invalid length. [ 165.775653][ T7553] bpf_prog_test_run+0x31e/0x390 [ 165.787860][ T7555] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1179'. [ 165.788863][ T7553] __sys_bpf+0x5a5/0x6f0 [ 165.788893][ T7553] ? bpf_link_show_fdinfo+0x380/0x380 [ 165.808407][ T7553] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 165.814754][ T7553] ? vtime_user_exit+0x2c8/0x3e0 [ 165.819782][ T7553] __x64_sys_bpf+0x78/0x90 [ 165.824389][ T7553] do_syscall_64+0x4c/0xa0 [ 165.828999][ T7553] ? clear_bhb_loop+0x30/0x80 [ 165.833962][ T7553] ? clear_bhb_loop+0x30/0x80 [ 165.838657][ T7553] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.844821][ T7553] RIP: 0033:0x7f407f218cb9 [ 165.849335][ T7553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.869208][ T7553] RSP: 002b:00007f407d474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.877718][ T7553] RAX: ffffffffffffffda RBX: 00007f407f493fa0 RCX: 00007f407f218cb9 [ 165.885775][ T7553] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 165.893991][ T7553] RBP: 00007f407d474090 R08: 0000000000000000 R09: 0000000000000000 [ 165.901971][ T7553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.909945][ T7553] R13: 00007f407f494038 R14: 00007f407f493fa0 R15: 00007ffe8d2247a8 [ 165.918131][ T7553] [ 166.040893][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1174'. [ 166.061939][ T7558] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 166.071625][ T7558] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1180'. [ 168.411910][ T7585] netlink: 191644 bytes leftover after parsing attributes in process `syz.4.1186'. [ 168.695006][ T7601] netlink: 'syz.2.1195': attribute type 12 has an invalid length. [ 168.714822][ T7601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1195'. [ 168.765695][ T7605] netlink: 'syz.1.1196': attribute type 21 has an invalid length. [ 168.773886][ T7605] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 168.781800][ T7605] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1196'. [ 168.930079][ T7607] FAULT_INJECTION: forcing a failure. [ 168.930079][ T7607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.962035][ T7607] CPU: 1 PID: 7607 Comm: syz.2.1197 Not tainted syzkaller #0 [ 168.969962][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.980357][ T7607] Call Trace: [ 168.983648][ T7607] [ 168.986580][ T7607] dump_stack_lvl+0x188/0x250 [ 168.991287][ T7607] ? show_regs_print_info+0x20/0x20 [ 168.996669][ T7607] ? load_image+0x400/0x400 [ 169.001189][ T7607] ? __lock_acquire+0x7d10/0x7d10 [ 169.006353][ T7607] should_fail+0x38c/0x4c0 [ 169.010865][ T7607] _copy_from_iter+0x22e/0x1170 [ 169.015709][ T7607] ? __lock_acquire+0x7d10/0x7d10 [ 169.020975][ T7607] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 169.026462][ T7607] ? __virt_addr_valid+0x3c6/0x470 [ 169.032187][ T7607] ? __phys_addr_symbol+0x2b/0x70 [ 169.037291][ T7607] ? __check_object_size+0x30c/0x410 [ 169.042679][ T7607] netlink_sendmsg+0x758/0xbe0 [ 169.047567][ T7607] ? netlink_getsockopt+0x570/0x570 [ 169.053175][ T7607] ? aa_sock_msg_perm+0x94/0x150 [ 169.058474][ T7607] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 169.063848][ T7607] ? security_socket_sendmsg+0x7c/0xa0 [ 169.069303][ T7607] ? netlink_getsockopt+0x570/0x570 [ 169.074582][ T7607] ____sys_sendmsg+0x5b7/0x8f0 [ 169.079470][ T7607] ? __sys_sendmsg_sock+0x30/0x30 [ 169.084576][ T7607] ? import_iovec+0x6f/0xa0 [ 169.089073][ T7607] ___sys_sendmsg+0x236/0x2e0 [ 169.093999][ T7607] ? __sys_sendmsg+0x2a0/0x2a0 [ 169.099043][ T7607] ? vfs_write+0x8b2/0xd60 [ 169.103492][ T7607] __se_sys_sendmsg+0x1af/0x290 [ 169.108517][ T7607] ? __x64_sys_sendmsg+0x80/0x80 [ 169.113614][ T7607] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 169.119781][ T7607] ? lockdep_hardirqs_on+0x94/0x140 [ 169.125114][ T7607] do_syscall_64+0x4c/0xa0 [ 169.129612][ T7607] ? clear_bhb_loop+0x30/0x80 [ 169.134973][ T7607] ? clear_bhb_loop+0x30/0x80 [ 169.139631][ T7607] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.146306][ T7607] RIP: 0033:0x7f407f218cb9 [ 169.151213][ T7607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.171259][ T7607] RSP: 002b:00007f407d474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.179778][ T7607] RAX: ffffffffffffffda RBX: 00007f407f493fa0 RCX: 00007f407f218cb9 [ 169.187755][ T7607] RDX: ff0f000020000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 169.195814][ T7607] RBP: 00007f407d474090 R08: 0000000000000000 R09: 0000000000000000 [ 169.204083][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.212138][ T7607] R13: 00007f407f494038 R14: 00007f407f493fa0 R15: 00007ffe8d2247a8 [ 169.220440][ T7607] [ 169.447407][ T7638] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.1208'. [ 171.110379][ T7674] device lo left promiscuous mode [ 171.152494][ T7674] device lo entered promiscuous mode [ 171.668548][ T7711] netlink: 'syz.2.1232': attribute type 29 has an invalid length. [ 171.723307][ T7711] netlink: 'syz.2.1232': attribute type 29 has an invalid length. [ 171.779711][ T7713] netlink: 'syz.2.1232': attribute type 29 has an invalid length. [ 172.631691][ T7725] netlink: 'syz.4.1236': attribute type 27 has an invalid length. [ 172.653175][ T7725] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1236'. [ 172.862194][ T7742] device wlan0 left promiscuous mode [ 172.891883][ T7748] netlink: 'syz.1.1246': attribute type 39 has an invalid length. [ 173.099281][ T7766] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1253'. [ 173.118467][ T7766] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 173.131746][ T7766] netlink: 'syz.2.1253': attribute type 4 has an invalid length. [ 173.140938][ T7766] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1253'. [ 174.120385][ T7811] device lo left promiscuous mode [ 174.169430][ T7811] device lo entered promiscuous mode [ 174.209660][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.448016][ T7824] netlink: 'syz.2.1275': attribute type 29 has an invalid length. [ 174.575475][ T7826] netlink: 'syz.3.1276': attribute type 10 has an invalid length. [ 175.105066][ T7858] FAULT_INJECTION: forcing a failure. [ 175.105066][ T7858] name failslab, interval 1, probability 0, space 0, times 0 [ 175.124916][ T7858] CPU: 0 PID: 7858 Comm: syz.0.1288 Not tainted syzkaller #0 [ 175.132321][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.142836][ T7858] Call Trace: [ 175.146127][ T7858] [ 175.149073][ T7858] dump_stack_lvl+0x188/0x250 [ 175.153974][ T7858] ? fib_rules_unregister+0x340/0x340 [ 175.159473][ T7858] ? show_regs_print_info+0x20/0x20 [ 175.165248][ T7858] ? load_image+0x400/0x400 [ 175.170123][ T7858] ? mroute_clean_tables+0xad0/0xad0 [ 175.170769][ T7869] device wlan0 entered promiscuous mode [ 175.175862][ T7858] should_fail+0x38c/0x4c0 [ 175.175919][ T7858] should_failslab+0x5/0x20 [ 175.175937][ T7858] slab_pre_alloc_hook+0x51/0xc0 [ 175.175953][ T7858] ? skb_clone+0x1bd/0x350 [ 175.175968][ T7858] kmem_cache_alloc+0x3d/0x290 [ 175.175988][ T7858] skb_clone+0x1bd/0x350 [ 175.199762][ T7869] netlink: 'syz.4.1292': attribute type 9 has an invalid length. [ 175.201477][ T7858] ? ip6_finish_output2+0x7f2/0x1510 [ 175.201508][ T7858] ip6_finish_output2+0x80a/0x1510 [ 175.201532][ T7858] ? nf_hook+0x360/0x360 [ 175.206671][ T7869] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1292'. [ 175.210879][ T7858] ? ip6_finish_output+0x64c/0x7d0 [ 175.210917][ T7858] ip6_send_skb+0x1b9/0x360 [ 175.210937][ T7858] udp_v6_send_skb+0xa28/0x1680 [ 175.210967][ T7858] udpv6_sendmsg+0x1e11/0x2650 [ 175.224285][ T7858] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 175.224317][ T7858] ? udp_v6_early_demux+0xec0/0xec0 [ 175.224340][ T7858] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 175.224370][ T7858] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 175.288559][ T7858] ? __local_bh_enable_ip+0x136/0x1c0 [ 175.295026][ T7858] ? lockdep_hardirqs_on+0x94/0x140 [ 175.300523][ T7858] ? inet_send_prepare+0x1af/0x260 [ 175.306225][ T7858] ? inet6_sendmsg+0x5b/0xd0 [ 175.310942][ T7858] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 175.317492][ T7858] ____sys_sendmsg+0x5b7/0x8f0 [ 175.322890][ T7858] ? __sys_sendmsg_sock+0x30/0x30 [ 175.328110][ T7858] ? import_iovec+0x6f/0xa0 [ 175.332733][ T7858] ___sys_sendmsg+0x236/0x2e0 [ 175.337906][ T7858] ? __sys_sendmsg+0x2a0/0x2a0 [ 175.343258][ T7858] __se_sys_sendmsg+0x1af/0x290 [ 175.348744][ T7858] ? __x64_sys_sendmsg+0x80/0x80 [ 175.353958][ T7858] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 175.360546][ T7858] ? lockdep_hardirqs_on+0x94/0x140 [ 175.366070][ T7858] do_syscall_64+0x4c/0xa0 [ 175.370498][ T7858] ? clear_bhb_loop+0x30/0x80 [ 175.375273][ T7858] ? clear_bhb_loop+0x30/0x80 [ 175.380143][ T7858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.386412][ T7858] RIP: 0033:0x7fb712d8dcb9 [ 175.390867][ T7858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.411691][ T7858] RSP: 002b:00007fb710fe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.421012][ T7858] RAX: ffffffffffffffda RBX: 00007fb713008fa0 RCX: 00007fb712d8dcb9 [ 175.429135][ T7858] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 175.438325][ T7858] RBP: 00007fb710fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 175.446539][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.454867][ T7858] R13: 00007fb713009038 R14: 00007fb713008fa0 R15: 00007ffcd11dc8e8 [ 175.463746][ T7858] [ 175.747692][ T7898] netlink: 'syz.4.1301': attribute type 3 has an invalid length. [ 175.772877][ T7898] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1301'. [ 175.824940][ T7901] device syzkaller0 entered promiscuous mode [ 175.866035][ T6615] Bluetooth: hci1: command 0x0406 tx timeout [ 175.878134][ T6615] Bluetooth: hci0: command 0x0406 tx timeout [ 175.885324][ T6615] Bluetooth: hci3: command 0x0406 tx timeout [ 175.891739][ T6615] Bluetooth: hci2: command 0x0406 tx timeout [ 175.900959][ T6615] Bluetooth: hci4: command 0x0406 tx timeout [ 176.021474][ T7907] device geneve1 entered promiscuous mode [ 176.041725][ T7907] team0: Port device geneve1 added [ 176.081485][ T7915] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1308'. [ 176.492537][ T7955] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1323'. [ 176.532040][ T7960] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1325'. [ 176.673089][ T7970] validate_nla: 3 callbacks suppressed [ 176.673119][ T7970] netlink: 'syz.3.1330': attribute type 10 has an invalid length. [ 176.944273][ T7970] team0 (unregistering): Port device team_slave_0 removed [ 177.019943][ T7970] team0 (unregistering): Port device team_slave_1 removed [ 177.519775][ T8003] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1341'. [ 177.792149][ T8004] device syzkaller0 entered promiscuous mode [ 177.969736][ T8023] netlink: 'syz.0.1349': attribute type 9 has an invalid length. [ 178.061866][ T8023] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1349'. [ 178.080895][ T8025] netlink: 'syz.1.1350': attribute type 3 has an invalid length. [ 178.127393][ T8030] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1350'. [ 178.151673][ T8030] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1350'. [ 178.156695][ T8038] netlink: 'syz.4.1355': attribute type 3 has an invalid length. [ 178.175139][ T8025] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1350'. [ 178.200988][ T8038] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1355'. [ 178.261543][ T8042] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 178.385009][ T8052] netlink: 170988 bytes leftover after parsing attributes in process `syz.2.1361'. [ 178.411498][ T8052] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1361'. [ 178.431913][ T8055] netlink: 'syz.3.1363': attribute type 9 has an invalid length. [ 178.459704][ T8055] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1363'. [ 178.736674][ T8061] team0: Port device team_slave_0 removed [ 178.758550][ T8061] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 178.925914][ T8060] device syzkaller0 entered promiscuous mode [ 178.968030][ T8070] netlink: 'syz.2.1365': attribute type 4 has an invalid length. [ 178.992986][ T8070] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1365'. [ 179.043920][ T8069] delete_channel: no stack [ 180.043782][ T8122] device syzkaller0 entered promiscuous mode [ 180.170558][ T8142] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1390'. [ 180.401459][ T8158] netlink: 'syz.4.1397': attribute type 10 has an invalid length. [ 180.485248][ T8164] netlink: 'syz.2.1396': attribute type 12 has an invalid length. [ 181.027742][ T8183] FAULT_INJECTION: forcing a failure. [ 181.027742][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 181.111785][ T8183] CPU: 1 PID: 8183 Comm: syz.0.1404 Not tainted syzkaller #0 [ 181.119253][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.129334][ T8183] Call Trace: [ 181.132635][ T8183] [ 181.135586][ T8183] dump_stack_lvl+0x188/0x250 [ 181.140308][ T8183] ? show_regs_print_info+0x20/0x20 [ 181.145535][ T8183] ? load_image+0x400/0x400 [ 181.150089][ T8183] ? __might_sleep+0xf0/0xf0 [ 181.154715][ T8183] ? __lock_acquire+0x7d10/0x7d10 [ 181.160141][ T8183] should_fail+0x38c/0x4c0 [ 181.164611][ T8183] should_failslab+0x5/0x20 [ 181.169429][ T8183] slab_pre_alloc_hook+0x51/0xc0 [ 181.174625][ T8183] __kmalloc_node_track_caller+0x68/0x3a0 [ 181.180492][ T8183] ? netlink_sendmsg+0x654/0xbe0 [ 181.185541][ T8183] ? kmem_cache_alloc_node+0x162/0x2d0 [ 181.191208][ T8183] ? __alloc_skb+0xf4/0x750 [ 181.196035][ T8183] ? netlink_sendmsg+0x654/0xbe0 [ 181.201188][ T8183] __alloc_skb+0x22c/0x750 [ 181.205644][ T8183] netlink_sendmsg+0x654/0xbe0 [ 181.210646][ T8183] ? netlink_getsockopt+0x570/0x570 [ 181.216078][ T8183] ? aa_sock_msg_perm+0x94/0x150 [ 181.221048][ T8183] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 181.226446][ T8183] ? security_socket_sendmsg+0x7c/0xa0 [ 181.232204][ T8183] ? netlink_getsockopt+0x570/0x570 [ 181.237605][ T8183] ____sys_sendmsg+0x5b7/0x8f0 [ 181.242511][ T8183] ? __sys_sendmsg_sock+0x30/0x30 [ 181.247774][ T8183] ? import_iovec+0x6f/0xa0 [ 181.252596][ T8183] ___sys_sendmsg+0x236/0x2e0 [ 181.257413][ T8183] ? __sys_sendmsg+0x2a0/0x2a0 [ 181.262327][ T8183] ? vfs_write+0x8b2/0xd60 [ 181.267011][ T8183] __se_sys_sendmsg+0x1af/0x290 [ 181.272099][ T8183] ? __x64_sys_sendmsg+0x80/0x80 [ 181.277069][ T8183] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 181.283295][ T8183] ? lockdep_hardirqs_on+0x94/0x140 [ 181.288615][ T8183] do_syscall_64+0x4c/0xa0 [ 181.293324][ T8183] ? clear_bhb_loop+0x30/0x80 [ 181.298099][ T8183] ? clear_bhb_loop+0x30/0x80 [ 181.302878][ T8183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.308822][ T8183] RIP: 0033:0x7fb712d8dcb9 [ 181.313266][ T8183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.334257][ T8183] RSP: 002b:00007fb710fe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.342941][ T8183] RAX: ffffffffffffffda RBX: 00007fb713008fa0 RCX: 00007fb712d8dcb9 [ 181.351096][ T8183] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 181.359164][ T8183] RBP: 00007fb710fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 181.367389][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.375666][ T8183] R13: 00007fb713009038 R14: 00007fb713008fa0 R15: 00007ffcd11dc8e8 [ 181.383951][ T8183] [ 181.590347][ T8177] device syzkaller0 entered promiscuous mode [ 182.258503][ T8204] netlink: 'syz.1.1414': attribute type 13 has an invalid length. [ 182.289645][ T8204] erspan0: refused to change device tx_queue_len [ 182.309520][ T8204] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 183.685022][ T8225] netlink: 'syz.0.1419': attribute type 21 has an invalid length. [ 183.823799][ T8243] netlink: 'syz.2.1425': attribute type 21 has an invalid length. [ 183.866118][ T8243] __nla_validate_parse: 5 callbacks suppressed [ 183.866136][ T8243] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1425'. [ 183.903056][ T8247] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1423'. [ 183.974570][ T8232] device syzkaller0 entered promiscuous mode [ 184.000025][ T8260] netlink: 'syz.1.1429': attribute type 21 has an invalid length. [ 184.033914][ T8260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1429'. [ 184.049974][ T8260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1429'. [ 184.288543][ T8275] netlink: 'syz.2.1436': attribute type 3 has an invalid length. [ 184.312845][ T8275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1436'. [ 184.326613][ T8275] netlink: 'syz.2.1436': attribute type 39 has an invalid length. [ 184.346169][ T8281] netlink: 'syz.4.1437': attribute type 39 has an invalid length. [ 184.412359][ T8286] delete_channel: no stack [ 184.433418][ T8286] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1439'. [ 184.476229][ T8286] device batadv0 entered promiscuous mode [ 184.498489][ T8293] netlink: set zone limit has 8 unknown bytes [ 184.520274][ T8295] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1439'. [ 184.559340][ T8295] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 184.599590][ T8289] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1441'. [ 184.857981][ T8299] device syzkaller0 entered promiscuous mode [ 185.034732][ T8329] FAULT_INJECTION: forcing a failure. [ 185.034732][ T8329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.068358][ T8329] CPU: 0 PID: 8329 Comm: syz.2.1452 Not tainted syzkaller #0 [ 185.075850][ T8329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.086009][ T8329] Call Trace: [ 185.089459][ T8329] [ 185.092388][ T8329] dump_stack_lvl+0x188/0x250 [ 185.097254][ T8329] ? show_regs_print_info+0x20/0x20 [ 185.102735][ T8329] ? load_image+0x400/0x400 [ 185.107275][ T8329] ? __lock_acquire+0x7d10/0x7d10 [ 185.112379][ T8329] should_fail+0x38c/0x4c0 [ 185.116969][ T8329] strncpy_from_user+0x32/0x360 [ 185.121891][ T8329] getname_flags+0xef/0x500 [ 185.126405][ T8329] do_sys_openat2+0xdd/0x4b0 [ 185.130992][ T8329] ? __lock_acquire+0x7d10/0x7d10 [ 185.136129][ T8329] ? do_sys_open+0xe0/0xe0 [ 185.140625][ T8329] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 185.146591][ T8329] ? lock_chain_count+0x20/0x20 [ 185.151518][ T8329] ? vtime_user_exit+0x2c8/0x3e0 [ 185.156625][ T8329] __x64_sys_openat+0x135/0x160 [ 185.161531][ T8329] do_syscall_64+0x4c/0xa0 [ 185.166211][ T8329] ? clear_bhb_loop+0x30/0x80 [ 185.171071][ T8329] ? clear_bhb_loop+0x30/0x80 [ 185.176090][ T8329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.182148][ T8329] RIP: 0033:0x7f407f218cb9 [ 185.186730][ T8329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.207019][ T8329] RSP: 002b:00007f407d453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.215784][ T8329] RAX: ffffffffffffffda RBX: 00007f407f494090 RCX: 00007f407f218cb9 [ 185.224015][ T8329] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 185.232059][ T8329] RBP: 00007f407d453090 R08: 0000000000000000 R09: 0000000000000000 [ 185.240280][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.248782][ T8329] R13: 00007f407f494128 R14: 00007f407f494090 R15: 00007ffe8d2247a8 [ 185.257013][ T8329] [ 185.293477][ T8338] FAULT_INJECTION: forcing a failure. [ 185.293477][ T8338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.351412][ T8340] netlink: 'syz.3.1458': attribute type 21 has an invalid length. [ 185.372151][ T8338] CPU: 0 PID: 8338 Comm: syz.1.1456 Not tainted syzkaller #0 [ 185.379653][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.389733][ T8338] Call Trace: [ 185.393023][ T8338] [ 185.395962][ T8338] dump_stack_lvl+0x188/0x250 [ 185.400669][ T8338] ? show_regs_print_info+0x20/0x20 [ 185.405892][ T8338] ? load_image+0x400/0x400 [ 185.411193][ T8338] ? __lock_acquire+0x7d10/0x7d10 [ 185.416342][ T8338] ? perf_trace_lock_acquire+0xed/0x3e0 [ 185.421927][ T8338] should_fail+0x38c/0x4c0 [ 185.426452][ T8338] strncpy_from_user+0x32/0x360 [ 185.431325][ T8338] bpf_prog_load+0x1f0/0x1510 [ 185.436025][ T8338] ? map_freeze+0x350/0x350 [ 185.440541][ T8338] ? __might_fault+0xb7/0x110 [ 185.445255][ T8338] ? __might_fault+0xb3/0x110 [ 185.450292][ T8338] ? bpf_lsm_bpf+0x5/0x10 [ 185.454757][ T8338] ? security_bpf+0x7a/0xa0 [ 185.459278][ T8338] __sys_bpf+0x532/0x6f0 [ 185.463560][ T8338] ? bpf_link_show_fdinfo+0x380/0x380 [ 185.469040][ T8338] ? vtime_user_exit+0x2c8/0x3e0 [ 185.474260][ T8338] __x64_sys_bpf+0x78/0x90 [ 185.478872][ T8338] do_syscall_64+0x4c/0xa0 [ 185.483301][ T8338] ? clear_bhb_loop+0x30/0x80 [ 185.488248][ T8338] ? clear_bhb_loop+0x30/0x80 [ 185.492937][ T8338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.499450][ T8338] RIP: 0033:0x7f87873f5cb9 [ 185.504074][ T8338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.525460][ T8338] RSP: 002b:00007f8785651028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.534371][ T8338] RAX: ffffffffffffffda RBX: 00007f8787670fa0 RCX: 00007f87873f5cb9 [ 185.542634][ T8338] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 185.550969][ T8338] RBP: 00007f8785651090 R08: 0000000000000000 R09: 0000000000000000 [ 185.559299][ T8338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.567809][ T8338] R13: 00007f8787671038 R14: 00007f8787670fa0 R15: 00007fff1d820908 [ 185.576009][ T8338] [ 185.590957][ T8340] netlink: 'syz.3.1458': attribute type 6 has an invalid length. [ 185.599432][ T8340] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1458'. [ 189.058958][ T8368] device syzkaller0 entered promiscuous mode [ 189.060845][ T8381] netlink: 'syz.1.1473': attribute type 1 has an invalid length. [ 189.077329][ T8377] netlink: 'syz.0.1471': attribute type 10 has an invalid length. [ 189.089970][ T8377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1471'. [ 189.106937][ T8379] can: request_module (can-proto-5) failed. [ 189.108348][ T8381] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1473'. [ 189.115061][ T8375] device syzkaller0 entered promiscuous mode [ 189.401629][ T8397] netlink: 'syz.2.1479': attribute type 10 has an invalid length. [ 189.703892][ T8411] netlink: 'syz.3.1485': attribute type 3 has an invalid length. [ 189.719910][ T8411] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1485'. [ 190.091586][ T8424] device syzkaller0 entered promiscuous mode [ 190.290033][ T8430] netlink: 'syz.3.1491': attribute type 13 has an invalid length. [ 190.299337][ T8430] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1491'. [ 190.623884][ T8439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.093955][ T8463] device syzkaller0 entered promiscuous mode [ 191.934071][ T8499] netlink: 'syz.4.1519': attribute type 21 has an invalid length. [ 191.952340][ T8499] netlink: 'syz.4.1519': attribute type 6 has an invalid length. [ 192.002811][ T8499] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1519'. [ 192.117441][ T8513] FAULT_INJECTION: forcing a failure. [ 192.117441][ T8513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.183660][ T8513] CPU: 0 PID: 8513 Comm: syz.2.1524 Not tainted syzkaller #0 [ 192.191521][ T8513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.202319][ T8513] Call Trace: [ 192.205621][ T8513] [ 192.208672][ T8513] dump_stack_lvl+0x188/0x250 [ 192.213455][ T8513] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 192.219806][ T8513] ? show_regs_print_info+0x20/0x20 [ 192.225451][ T8513] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 192.231809][ T8513] ? dump_stack+0x5/0x20 [ 192.236555][ T8513] should_fail+0x38c/0x4c0 [ 192.241648][ T8513] _copy_from_iter+0x22e/0x1170 [ 192.246831][ T8513] ? __lock_acquire+0x7d10/0x7d10 [ 192.252103][ T8513] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 192.255895][ T8503] device syzkaller0 entered promiscuous mode [ 192.257522][ T8513] ? __virt_addr_valid+0x3c6/0x470 [ 192.269074][ T8513] ? __phys_addr_symbol+0x2b/0x70 [ 192.274218][ T8513] ? __check_object_size+0x30c/0x410 [ 192.279894][ T8513] netlink_sendmsg+0x758/0xbe0 [ 192.284692][ T8513] ? netlink_getsockopt+0x570/0x570 [ 192.290060][ T8513] ? aa_sock_msg_perm+0x94/0x150 [ 192.295366][ T8513] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 192.301318][ T8513] ? security_socket_sendmsg+0x7c/0xa0 [ 192.306818][ T8513] ? netlink_getsockopt+0x570/0x570 [ 192.312906][ T8513] ____sys_sendmsg+0x5b7/0x8f0 [ 192.318214][ T8513] ? __sys_sendmsg_sock+0x30/0x30 [ 192.323373][ T8513] ? import_iovec+0x6f/0xa0 [ 192.328858][ T8513] ___sys_sendmsg+0x236/0x2e0 [ 192.333567][ T8513] ? __sys_sendmsg+0x2a0/0x2a0 [ 192.338614][ T8513] ? vfs_write+0x8b2/0xd60 [ 192.343231][ T8513] __se_sys_sendmsg+0x1af/0x290 [ 192.348189][ T8513] ? __x64_sys_sendmsg+0x80/0x80 [ 192.353252][ T8513] ? syscall_enter_from_user_mode+0x2a/0x70 [ 192.359505][ T8513] do_syscall_64+0x4c/0xa0 [ 192.364006][ T8513] ? clear_bhb_loop+0x30/0x80 [ 192.368757][ T8513] ? clear_bhb_loop+0x30/0x80 [ 192.373593][ T8513] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.379795][ T8513] RIP: 0033:0x7f407f218cb9 [ 192.384733][ T8513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.404864][ T8513] RSP: 002b:00007f407d474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.413466][ T8513] RAX: ffffffffffffffda RBX: 00007f407f493fa0 RCX: 00007f407f218cb9 [ 192.421700][ T8513] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 192.429908][ T8513] RBP: 00007f407d474090 R08: 0000000000000000 R09: 0000000000000000 [ 192.438106][ T8513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.446504][ T8513] R13: 00007f407f494038 R14: 00007f407f493fa0 R15: 00007ffe8d2247a8 [ 192.454919][ T8513] [ 192.650774][ T8531] netlink: 'syz.1.1529': attribute type 10 has an invalid length. [ 194.268889][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.275511][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.590065][ T8531] device wlan1 entered promiscuous mode [ 195.597763][ T8529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.613540][ T8531] team0: Port device wlan1 added [ 195.621571][ T8541] netlink: 'syz.3.1535': attribute type 5 has an invalid length. [ 195.736172][ T8562] FAULT_INJECTION: forcing a failure. [ 195.736172][ T8562] name failslab, interval 1, probability 0, space 0, times 0 [ 195.753103][ T8559] netlink: 'syz.3.1540': attribute type 10 has an invalid length. [ 195.772093][ T8562] CPU: 0 PID: 8562 Comm: syz.4.1542 Not tainted syzkaller #0 [ 195.779504][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.789863][ T8562] Call Trace: [ 195.793337][ T8562] [ 195.796274][ T8562] dump_stack_lvl+0x188/0x250 [ 195.800963][ T8562] ? show_regs_print_info+0x20/0x20 [ 195.806175][ T8562] ? load_image+0x400/0x400 [ 195.810863][ T8562] ? __lock_acquire+0x7d10/0x7d10 [ 195.815988][ T8562] should_fail+0x38c/0x4c0 [ 195.820523][ T8562] should_failslab+0x5/0x20 [ 195.825137][ T8562] slab_pre_alloc_hook+0x51/0xc0 [ 195.830094][ T8562] __kmalloc+0x6b/0x330 [ 195.834553][ T8562] ? sk_prot_alloc+0xe7/0x210 [ 195.839314][ T8562] sk_prot_alloc+0xe7/0x210 [ 195.843994][ T8562] ? sk_alloc+0x1d/0x310 [ 195.848247][ T8562] sk_alloc+0x2f/0x310 [ 195.852317][ T8562] bpf_prog_test_run_skb+0x240/0x1180 [ 195.857705][ T8562] ? __fget_files+0x40f/0x480 [ 195.862571][ T8562] ? cpu_online+0x60/0x60 [ 195.867104][ T8562] bpf_prog_test_run+0x31e/0x390 [ 195.872041][ T8562] __sys_bpf+0x5a5/0x6f0 [ 195.876268][ T8562] ? bpf_link_show_fdinfo+0x380/0x380 [ 195.881626][ T8562] ? vtime_user_exit+0x2c8/0x3e0 [ 195.886549][ T8562] __x64_sys_bpf+0x78/0x90 [ 195.891073][ T8562] do_syscall_64+0x4c/0xa0 [ 195.895478][ T8562] ? clear_bhb_loop+0x30/0x80 [ 195.900143][ T8562] ? clear_bhb_loop+0x30/0x80 [ 195.904974][ T8562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.910854][ T8562] RIP: 0033:0x7fbebc27fcb9 [ 195.915254][ T8562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.935145][ T8562] RSP: 002b:00007fbeba4db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.943744][ T8562] RAX: ffffffffffffffda RBX: 00007fbebc4fafa0 RCX: 00007fbebc27fcb9 [ 195.951991][ T8562] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 195.960209][ T8562] RBP: 00007fbeba4db090 R08: 0000000000000000 R09: 0000000000000000 [ 195.968388][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.976517][ T8562] R13: 00007fbebc4fb038 R14: 00007fbebc4fafa0 R15: 00007fffe21aec08 [ 195.984487][ T8562] [ 196.145204][ T8576] netlink: 'syz.4.1545': attribute type 3 has an invalid length. [ 196.159876][ T8581] netlink: 'syz.1.1546': attribute type 10 has an invalid length. [ 196.186382][ T8577] netlink: 191644 bytes leftover after parsing attributes in process `syz.0.1541'. [ 196.203278][ T8576] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1545'. [ 196.216437][ T8581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1546'. [ 196.245054][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 196.264549][ T8581] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 196.290805][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 196.326326][ T8581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.349300][ T8586] netlink: 'syz.2.1549': attribute type 10 has an invalid length. [ 196.374774][ T8586] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1549'. [ 199.180738][ T8608] netlink: 'syz.3.1555': attribute type 21 has an invalid length. [ 199.198420][ T8608] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1555'. [ 199.326059][ T8626] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1562'. [ 199.336229][ T8626] netlink: del zone limit has 8 unknown bytes [ 199.779882][ T8638] device syzkaller0 entered promiscuous mode [ 200.223378][ T8656] netlink: 'syz.1.1571': attribute type 15 has an invalid length. [ 200.231953][ T8656] netlink: 'syz.1.1571': attribute type 7 has an invalid length. [ 200.360201][ T8665] FAULT_INJECTION: forcing a failure. [ 200.360201][ T8665] name failslab, interval 1, probability 0, space 0, times 0 [ 200.392415][ T8665] CPU: 0 PID: 8665 Comm: syz.4.1573 Not tainted syzkaller #0 [ 200.400007][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.410327][ T8665] Call Trace: [ 200.413809][ T8665] [ 200.416914][ T8665] dump_stack_lvl+0x188/0x250 [ 200.421598][ T8665] ? show_regs_print_info+0x20/0x20 [ 200.426890][ T8665] ? load_image+0x400/0x400 [ 200.431403][ T8665] should_fail+0x38c/0x4c0 [ 200.436005][ T8665] should_failslab+0x5/0x20 [ 200.440603][ T8665] slab_pre_alloc_hook+0x51/0xc0 [ 200.445565][ T8665] ? skb_clone+0x1bd/0x350 [ 200.450343][ T8665] kmem_cache_alloc+0x3d/0x290 [ 200.455112][ T8665] skb_clone+0x1bd/0x350 [ 200.459589][ T8665] __netlink_deliver_tap+0x3cd/0x7c0 [ 200.464988][ T8665] netlink_deliver_tap+0x16c/0x180 [ 200.470284][ T8665] netlink_unicast+0x74f/0x920 [ 200.475195][ T8665] netlink_sendmsg+0x8ba/0xbe0 [ 200.480144][ T8665] ? netlink_getsockopt+0x570/0x570 [ 200.485427][ T8665] ? aa_sock_msg_perm+0x94/0x150 [ 200.490557][ T8665] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 200.496025][ T8665] ? security_socket_sendmsg+0x7c/0xa0 [ 200.501673][ T8665] ? netlink_getsockopt+0x570/0x570 [ 200.506892][ T8665] ____sys_sendmsg+0x5b7/0x8f0 [ 200.512029][ T8665] ? __sys_sendmsg_sock+0x30/0x30 [ 200.517155][ T8665] ? import_iovec+0x6f/0xa0 [ 200.521671][ T8665] ___sys_sendmsg+0x236/0x2e0 [ 200.526517][ T8665] ? __sys_sendmsg+0x2a0/0x2a0 [ 200.531290][ T8665] ? vfs_write+0x8b2/0xd60 [ 200.535818][ T8665] __se_sys_sendmsg+0x1af/0x290 [ 200.540670][ T8665] ? __x64_sys_sendmsg+0x80/0x80 [ 200.545701][ T8665] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 200.551699][ T8665] ? lockdep_hardirqs_on+0x94/0x140 [ 200.556897][ T8665] do_syscall_64+0x4c/0xa0 [ 200.561313][ T8665] ? clear_bhb_loop+0x30/0x80 [ 200.565985][ T8665] ? clear_bhb_loop+0x30/0x80 [ 200.570682][ T8665] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.576750][ T8665] RIP: 0033:0x7fbebc27fcb9 [ 200.581182][ T8665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.601344][ T8665] RSP: 002b:00007fbeba4db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.609940][ T8665] RAX: ffffffffffffffda RBX: 00007fbebc4fafa0 RCX: 00007fbebc27fcb9 [ 200.618260][ T8665] RDX: ff0f000020000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 200.626975][ T8665] RBP: 00007fbeba4db090 R08: 0000000000000000 R09: 0000000000000000 [ 200.635206][ T8665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.643269][ T8665] R13: 00007fbebc4fb038 R14: 00007fbebc4fafa0 R15: 00007fffe21aec08 [ 200.651260][ T8665] [ 201.029901][ T8694] device syzkaller0 entered promiscuous mode [ 201.039907][ T8700] netlink: 'syz.0.1586': attribute type 3 has an invalid length. [ 201.073982][ T8700] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1586'. [ 202.790354][ T8717] device lo entered promiscuous mode [ 202.823936][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 203.167953][ T8734] device lo left promiscuous mode [ 203.762270][ T8761] device syzkaller0 entered promiscuous mode [ 203.789045][ T8769] netlink: 'syz.4.1611': attribute type 39 has an invalid length. [ 203.943743][ T8780] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1615'. [ 204.179443][ T8807] device veth1_macvtap left promiscuous mode [ 204.231929][ T8808] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1626'. [ 204.497945][ T8815] device syzkaller0 entered promiscuous mode [ 204.502096][ T8808] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1626'. [ 205.119231][ T8855] netlink: 'syz.4.1635': attribute type 49 has an invalid length. [ 205.152646][ T8853] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1638'. [ 205.323442][ T8866] device lo entered promiscuous mode [ 205.337981][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 205.552790][ T8872] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1641'. [ 205.669213][ T8872] tc_dump_action: action bad kind [ 205.776560][ T8876] device syzkaller0 entered promiscuous mode [ 205.975798][ T8880] device wlan0 entered promiscuous mode [ 206.002598][ T8880] netlink: 'syz.3.1646': attribute type 9 has an invalid length. [ 206.022603][ T8880] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1646'. [ 206.101398][ T8885] device syzkaller0 entered promiscuous mode [ 206.125098][ T8897] FAULT_INJECTION: forcing a failure. [ 206.125098][ T8897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.157891][ T8897] CPU: 0 PID: 8897 Comm: syz.1.1652 Not tainted syzkaller #0 [ 206.165478][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.175818][ T8897] Call Trace: [ 206.179109][ T8897] [ 206.182277][ T8897] dump_stack_lvl+0x188/0x250 [ 206.187200][ T8897] ? show_regs_print_info+0x20/0x20 [ 206.192527][ T8897] ? load_image+0x400/0x400 [ 206.197141][ T8897] ? __lock_acquire+0x7d10/0x7d10 [ 206.202436][ T8897] should_fail+0x38c/0x4c0 [ 206.206982][ T8897] _copy_to_user+0x2e/0x130 [ 206.211477][ T8897] simple_read_from_buffer+0xe3/0x150 [ 206.217088][ T8897] proc_fail_nth_read+0x1a6/0x220 [ 206.222376][ T8897] ? proc_fault_inject_write+0x310/0x310 [ 206.228179][ T8897] ? fsnotify_perm+0x254/0x560 [ 206.232940][ T8897] ? proc_fault_inject_write+0x310/0x310 [ 206.238558][ T8897] vfs_read+0x301/0xd60 [ 206.242726][ T8897] ? kernel_read+0x1e0/0x1e0 [ 206.247667][ T8897] ? __fget_files+0x40f/0x480 [ 206.252337][ T8897] ? mutex_lock_nested+0x17/0x20 [ 206.257283][ T8897] ? __fdget_pos+0x2bf/0x370 [ 206.262114][ T8897] ? ksys_read+0x71/0x260 [ 206.266428][ T8897] ksys_read+0x152/0x260 [ 206.271019][ T8897] ? vfs_write+0xd60/0xd60 [ 206.275700][ T8897] ? lockdep_hardirqs_on+0x94/0x140 [ 206.281029][ T8897] do_syscall_64+0x4c/0xa0 [ 206.285525][ T8897] ? clear_bhb_loop+0x30/0x80 [ 206.290362][ T8897] ? clear_bhb_loop+0x30/0x80 [ 206.295212][ T8897] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.301112][ T8897] RIP: 0033:0x7f87873b658e [ 206.305530][ T8897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 206.325771][ T8897] RSP: 002b:00007f8785650fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.334359][ T8897] RAX: ffffffffffffffda RBX: 00007f87856516c0 RCX: 00007f87873b658e [ 206.342491][ T8897] RDX: 000000000000000f RSI: 00007f87856510a0 RDI: 0000000000000005 [ 206.350717][ T8897] RBP: 00007f8785651090 R08: 0000000000000000 R09: 0000000000000000 [ 206.358939][ T8897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.366984][ T8897] R13: 00007f8787671038 R14: 00007f8787670fa0 R15: 00007fff1d820908 [ 206.375124][ T8897] [ 206.542199][ T8907] netlink: 'syz.1.1656': attribute type 39 has an invalid length. [ 206.694437][ T8914] netlink: 'syz.4.1658': attribute type 3 has an invalid length. [ 206.713095][ T8914] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1658'. [ 206.805729][ T8920] netlink: 'syz.3.1662': attribute type 11 has an invalid length. [ 207.143993][ T8946] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 207.157095][ T8939] device syzkaller0 entered promiscuous mode [ 207.162219][ T8946] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1671'. [ 207.187018][ T8941] netlink: 'syz.3.1671': attribute type 21 has an invalid length. [ 207.209976][ T8941] netlink: 'syz.3.1671': attribute type 6 has an invalid length. [ 207.237216][ T8941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1671'. [ 207.274532][ T8946] netlink: 'syz.3.1671': attribute type 10 has an invalid length. [ 207.297068][ T8946] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1671'. [ 208.482659][ T8993] device syzkaller0 entered promiscuous mode [ 209.075526][ T9028] FAULT_INJECTION: forcing a failure. [ 209.075526][ T9028] name failslab, interval 1, probability 0, space 0, times 0 [ 209.140761][ T9028] CPU: 1 PID: 9028 Comm: syz.3.1704 Not tainted syzkaller #0 [ 209.148531][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.159424][ T9028] Call Trace: [ 209.162940][ T9028] [ 209.165985][ T9028] dump_stack_lvl+0x188/0x250 [ 209.170801][ T9028] ? show_regs_print_info+0x20/0x20 [ 209.176299][ T9028] ? load_image+0x400/0x400 [ 209.181086][ T9028] ? __might_sleep+0xf0/0xf0 [ 209.186191][ T9028] ? __lock_acquire+0x7d10/0x7d10 [ 209.191954][ T9028] should_fail+0x38c/0x4c0 [ 209.196496][ T9028] should_failslab+0x5/0x20 [ 209.201358][ T9028] slab_pre_alloc_hook+0x51/0xc0 [ 209.206320][ T9028] kmem_cache_alloc_node+0x47/0x2d0 [ 209.211709][ T9028] ? dup_task_struct+0x57/0xb30 [ 209.217025][ T9028] dup_task_struct+0x57/0xb30 [ 209.221819][ T9028] ? _raw_spin_unlock_irq+0x1f/0x40 [ 209.227033][ T9028] ? lockdep_hardirqs_on+0x94/0x140 [ 209.232425][ T9028] copy_process+0x5f0/0x3e20 [ 209.237162][ T9028] ? __pidfd_prepare+0x140/0x140 [ 209.242180][ T9028] kernel_clone+0x23f/0x990 [ 209.246959][ T9028] ? trace_event_raw_event_lock+0x270/0x270 [ 209.252962][ T9028] ? trace_event_raw_event_lock+0x270/0x270 [ 209.259433][ T9028] ? vfs_write+0x8b2/0xd60 [ 209.264268][ T9028] ? create_io_thread+0x180/0x180 [ 209.269729][ T9028] __x64_sys_clone+0x19a/0x210 [ 209.274594][ T9028] ? __ia32_sys_vfork+0x130/0x130 [ 209.279650][ T9028] ? lockdep_hardirqs_on+0x94/0x140 [ 209.285139][ T9028] do_syscall_64+0x4c/0xa0 [ 209.289598][ T9028] ? clear_bhb_loop+0x30/0x80 [ 209.294563][ T9028] ? clear_bhb_loop+0x30/0x80 [ 209.299278][ T9028] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.305882][ T9028] RIP: 0033:0x7fdd1000ecb9 [ 209.310410][ T9028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.331800][ T9028] RSP: 002b:00007fdd0e269fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 209.342226][ T9028] RAX: ffffffffffffffda RBX: 00007fdd10289fa0 RCX: 00007fdd1000ecb9 [ 209.351627][ T9028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 209.359702][ T9028] RBP: 00007fdd0e26a090 R08: 0000000000000000 R09: 0000000000000000 [ 209.368630][ T9028] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 209.377615][ T9028] R13: 00007fdd1028a038 R14: 00007fdd10289fa0 R15: 00007fffcd2d3f78 [ 209.386667][ T9028] [ 209.987647][ T9051] syz.2.1712[9051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.987795][ T9051] syz.2.1712[9051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.464168][ T9055] device syzkaller0 entered promiscuous mode [ 210.658830][ T9070] netlink: 'syz.3.1716': attribute type 3 has an invalid length. [ 210.708109][ T9070] __nla_validate_parse: 2 callbacks suppressed [ 210.708125][ T9070] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1716'. [ 211.059441][ T9083] netlink: 'syz.4.1721': attribute type 28 has an invalid length. [ 211.092047][ T9088] netlink: 170988 bytes leftover after parsing attributes in process `syz.3.1724'. [ 211.121039][ T9083] netlink: 'syz.4.1721': attribute type 4 has an invalid length. [ 211.148134][ T9088] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1724'. [ 211.179667][ T9092] netlink: 170988 bytes leftover after parsing attributes in process `syz.4.1721'. [ 211.182152][ T9083] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1721'. [ 211.295309][ T9092] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.1721'. [ 211.369160][ T9093] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1726'. [ 211.455134][ T9106] device syzkaller0 entered promiscuous mode [ 211.486586][ T9108] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1731'. [ 211.539592][ T9110] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1732'. [ 211.558333][ T9107] delete_channel: no stack [ 211.954455][ T9127] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 212.062086][ T9131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1741'. [ 212.145266][ T9138] validate_nla: 2 callbacks suppressed [ 212.145282][ T9138] netlink: 'syz.2.1743': attribute type 10 has an invalid length. [ 212.512115][ T9146] netlink: 'syz.0.1746': attribute type 2 has an invalid length. [ 213.130543][ T9165] netlink: 'syz.2.1754': attribute type 3 has an invalid length. [ 213.244466][ T9157] device syzkaller0 entered promiscuous mode [ 213.681627][ T9179] netlink: 'syz.2.1757': attribute type 1 has an invalid length. [ 213.821985][ T9187] netlink: 'syz.1.1759': attribute type 10 has an invalid length. [ 214.181933][ T9204] netlink: 'syz.3.1768': attribute type 29 has an invalid length. [ 214.216706][ T9205] FAULT_INJECTION: forcing a failure. [ 214.216706][ T9205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.254240][ T9207] netlink: 'syz.2.1767': attribute type 12 has an invalid length. [ 214.265365][ T9204] netlink: 'syz.3.1768': attribute type 29 has an invalid length. [ 214.317265][ T9205] CPU: 0 PID: 9205 Comm: syz.0.1766 Not tainted syzkaller #0 [ 214.323431][ T9209] netlink: 'syz.3.1768': attribute type 29 has an invalid length. [ 214.324721][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.324737][ T9205] Call Trace: [ 214.347002][ T9205] [ 214.349942][ T9205] dump_stack_lvl+0x188/0x250 [ 214.354743][ T9205] ? show_regs_print_info+0x20/0x20 [ 214.360137][ T9205] ? load_image+0x400/0x400 [ 214.364794][ T9205] ? __lock_acquire+0x7d10/0x7d10 [ 214.370039][ T9205] should_fail+0x38c/0x4c0 [ 214.374586][ T9205] _copy_from_iter+0x22e/0x1170 [ 214.379467][ T9205] ? __lock_acquire+0x7d10/0x7d10 [ 214.384625][ T9205] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 214.390228][ T9205] ? __virt_addr_valid+0x3c6/0x470 [ 214.395547][ T9205] ? __phys_addr_symbol+0x2b/0x70 [ 214.400765][ T9205] ? __check_object_size+0x30c/0x410 [ 214.406116][ T9205] netlink_sendmsg+0x758/0xbe0 [ 214.411029][ T9205] ? netlink_getsockopt+0x570/0x570 [ 214.416685][ T9205] ? aa_sock_msg_perm+0x94/0x150 [ 214.421751][ T9205] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 214.427459][ T9205] ? security_socket_sendmsg+0x7c/0xa0 [ 214.432973][ T9205] ? netlink_getsockopt+0x570/0x570 [ 214.438196][ T9205] ____sys_sendmsg+0x5b7/0x8f0 [ 214.443108][ T9205] ? __sys_sendmsg_sock+0x30/0x30 [ 214.448283][ T9205] ? import_iovec+0x6f/0xa0 [ 214.453152][ T9205] ___sys_sendmsg+0x236/0x2e0 [ 214.458015][ T9205] ? __sys_sendmsg+0x2a0/0x2a0 [ 214.462927][ T9205] ? trace_event_raw_event_lock+0x270/0x270 [ 214.468857][ T9205] ? vfs_write+0x8b2/0xd60 [ 214.473465][ T9205] __se_sys_sendmsg+0x1af/0x290 [ 214.478561][ T9205] ? __x64_sys_sendmsg+0x80/0x80 [ 214.483683][ T9205] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 214.489959][ T9205] ? lockdep_hardirqs_on+0x94/0x140 [ 214.495295][ T9205] do_syscall_64+0x4c/0xa0 [ 214.499856][ T9205] ? clear_bhb_loop+0x30/0x80 [ 214.504567][ T9205] ? clear_bhb_loop+0x30/0x80 [ 214.509542][ T9205] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.515542][ T9205] RIP: 0033:0x7fb712d8dcb9 [ 214.520107][ T9205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.540043][ T9205] RSP: 002b:00007fb710fe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.549292][ T9205] RAX: ffffffffffffffda RBX: 00007fb713008fa0 RCX: 00007fb712d8dcb9 [ 214.557737][ T9205] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 214.565760][ T9205] RBP: 00007fb710fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 214.574514][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.582898][ T9205] R13: 00007fb713009038 R14: 00007fb713008fa0 R15: 00007ffcd11dc8e8 [ 214.591298][ T9205] [ 215.022571][ T9223] device syzkaller0 entered promiscuous mode [ 215.680467][ T9253] IPv6: NLM_F_REPLACE set, but no existing node found! [ 215.824362][ T9261] netlink: 'syz.1.1789': attribute type 21 has an invalid length. [ 215.859595][ T9261] __nla_validate_parse: 14 callbacks suppressed [ 215.859612][ T9261] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1789'. [ 215.913204][ T9261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1789'. [ 216.061318][ T9275] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1794'. [ 216.097369][ T9273] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1795'. [ 216.318935][ T9278] device syzkaller0 entered promiscuous mode [ 216.513281][ T9294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 216.649182][ T9297] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1801'. [ 216.734120][ T9297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.781537][ T9297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.835071][ T9297] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 216.862812][ T9297] bond0 (unregistering): Released all slaves [ 216.922072][ T9311] device sit0 entered promiscuous mode [ 217.063934][ T9319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1812'. [ 217.181541][ T9329] FAULT_INJECTION: forcing a failure. [ 217.181541][ T9329] name failslab, interval 1, probability 0, space 0, times 0 [ 217.217788][ T9331] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1817'. [ 217.251969][ T9333] FAULT_INJECTION: forcing a failure. [ 217.251969][ T9333] name failslab, interval 1, probability 0, space 0, times 0 [ 217.270354][ T9333] CPU: 1 PID: 9333 Comm: syz.4.1818 Not tainted syzkaller #0 [ 217.277967][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.288160][ T9333] Call Trace: [ 217.291536][ T9333] [ 217.294517][ T9333] dump_stack_lvl+0x188/0x250 [ 217.299387][ T9333] ? show_regs_print_info+0x20/0x20 [ 217.304734][ T9333] ? load_image+0x400/0x400 [ 217.309433][ T9333] ? __might_sleep+0xf0/0xf0 [ 217.314026][ T9333] ? __lock_acquire+0x7d10/0x7d10 [ 217.319236][ T9333] should_fail+0x38c/0x4c0 [ 217.323838][ T9333] should_failslab+0x5/0x20 [ 217.328528][ T9333] slab_pre_alloc_hook+0x51/0xc0 [ 217.333583][ T9333] kmem_cache_alloc_node_trace+0x4a/0x300 [ 217.339413][ T9333] ? __get_vm_area_node+0x119/0x2d0 [ 217.344916][ T9333] __get_vm_area_node+0x119/0x2d0 [ 217.350048][ T9333] __vmalloc_node_range+0xef/0x8b0 [ 217.355355][ T9333] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 217.361077][ T9333] ? end_current_label_crit_section+0x170/0x170 [ 217.367417][ T9333] ? __lock_acquire+0x7d10/0x7d10 [ 217.372555][ T9333] ? perf_trace_lock_acquire+0xed/0x3e0 [ 217.378203][ T9333] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 217.383763][ T9333] __vmalloc+0x76/0x80 [ 217.387850][ T9333] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 217.393575][ T9333] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 217.399241][ T9333] bpf_prog_alloc+0x1a/0x1e0 [ 217.404042][ T9333] bpf_prog_load+0x7c6/0x1510 [ 217.408997][ T9333] ? map_freeze+0x350/0x350 [ 217.413667][ T9333] ? __might_fault+0xb7/0x110 [ 217.418545][ T9333] ? __might_fault+0xb3/0x110 [ 217.423254][ T9333] ? bpf_lsm_bpf+0x5/0x10 [ 217.427671][ T9333] ? security_bpf+0x7a/0xa0 [ 217.432357][ T9333] __sys_bpf+0x532/0x6f0 [ 217.436620][ T9333] ? bpf_link_show_fdinfo+0x380/0x380 [ 217.442098][ T9333] ? vtime_user_exit+0x2c8/0x3e0 [ 217.447211][ T9333] __x64_sys_bpf+0x78/0x90 [ 217.451820][ T9333] do_syscall_64+0x4c/0xa0 [ 217.456248][ T9333] ? clear_bhb_loop+0x30/0x80 [ 217.460966][ T9333] ? clear_bhb_loop+0x30/0x80 [ 217.465925][ T9333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.472085][ T9333] RIP: 0033:0x7fbebc27fcb9 [ 217.476762][ T9333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.496457][ T9333] RSP: 002b:00007fbeba4db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.505131][ T9333] RAX: ffffffffffffffda RBX: 00007fbebc4fafa0 RCX: 00007fbebc27fcb9 [ 217.513304][ T9333] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 217.521442][ T9333] RBP: 00007fbeba4db090 R08: 0000000000000000 R09: 0000000000000000 [ 217.529496][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.537723][ T9333] R13: 00007fbebc4fb038 R14: 00007fbebc4fafa0 R15: 00007fffe21aec08 [ 217.546143][ T9333] [ 217.562884][ T9329] CPU: 1 PID: 9329 Comm: syz.0.1815 Not tainted syzkaller #0 [ 217.570551][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.580816][ T9329] Call Trace: [ 217.584247][ T9329] [ 217.587234][ T9329] dump_stack_lvl+0x188/0x250 [ 217.591937][ T9329] ? show_regs_print_info+0x20/0x20 [ 217.597243][ T9329] ? load_image+0x400/0x400 [ 217.601848][ T9329] ? __might_sleep+0xf0/0xf0 [ 217.606643][ T9329] ? __lock_acquire+0x7d10/0x7d10 [ 217.611779][ T9329] should_fail+0x38c/0x4c0 [ 217.616318][ T9329] should_failslab+0x5/0x20 [ 217.621029][ T9329] slab_pre_alloc_hook+0x51/0xc0 [ 217.626079][ T9329] ? __alloc_file+0x25/0x240 [ 217.630681][ T9329] kmem_cache_alloc+0x3d/0x290 [ 217.635575][ T9329] __alloc_file+0x25/0x240 [ 217.640042][ T9329] alloc_empty_file+0x90/0x180 [ 217.644825][ T9329] path_openat+0x10f/0x2fa0 [ 217.649365][ T9329] ? perf_trace_lock_acquire+0xed/0x3e0 [ 217.655012][ T9329] ? perf_trace_lock+0xe4/0x390 [ 217.659880][ T9329] ? perf_trace_lock_acquire+0xed/0x3e0 [ 217.665533][ T9329] ? do_filp_open+0x410/0x410 [ 217.670228][ T9329] ? perf_trace_lock+0xe4/0x390 [ 217.675094][ T9329] ? trace_event_raw_event_lock+0x270/0x270 [ 217.681054][ T9329] do_filp_open+0x1e2/0x410 [ 217.685674][ T9329] ? vfs_tmpfile+0x300/0x300 [ 217.690310][ T9329] ? _raw_spin_unlock+0x24/0x40 [ 217.695297][ T9329] ? alloc_fd+0x598/0x630 [ 217.699674][ T9329] do_sys_openat2+0x150/0x4b0 [ 217.704457][ T9329] ? __lock_acquire+0x7d10/0x7d10 [ 217.709524][ T9329] ? do_sys_open+0xe0/0xe0 [ 217.714065][ T9329] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 217.720061][ T9329] ? lock_chain_count+0x20/0x20 [ 217.725286][ T9329] ? vtime_user_exit+0x2c8/0x3e0 [ 217.730277][ T9329] __x64_sys_openat+0x135/0x160 [ 217.735496][ T9329] do_syscall_64+0x4c/0xa0 [ 217.740453][ T9329] ? clear_bhb_loop+0x30/0x80 [ 217.745124][ T9329] ? clear_bhb_loop+0x30/0x80 [ 217.749879][ T9329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.755951][ T9329] RIP: 0033:0x7fb712d8dcb9 [ 217.760380][ T9329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.781206][ T9329] RSP: 002b:00007fb710fc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 217.789886][ T9329] RAX: ffffffffffffffda RBX: 00007fb713009090 RCX: 00007fb712d8dcb9 [ 217.798611][ T9329] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 217.806691][ T9329] RBP: 00007fb710fc8090 R08: 0000000000000000 R09: 0000000000000000 [ 217.814935][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.823085][ T9329] R13: 00007fb713009128 R14: 00007fb713009090 R15: 00007ffcd11dc8e8 [ 217.831370][ T9329] [ 217.931774][ T9331] validate_nla: 6 callbacks suppressed [ 217.931794][ T9331] netlink: 'syz.1.1817': attribute type 28 has an invalid length. [ 217.993292][ T9331] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1817'. [ 218.184740][ T9348] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1821'. [ 218.336513][ T9351] device syzkaller0 entered promiscuous mode [ 218.364194][ T9333] syz.4.1818: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 218.424448][ T9333] CPU: 1 PID: 9333 Comm: syz.4.1818 Not tainted syzkaller #0 [ 218.432352][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.443515][ T9333] Call Trace: [ 218.447088][ T9333] [ 218.450278][ T9333] dump_stack_lvl+0x188/0x250 [ 218.455182][ T9333] ? rcu_lock_release+0x5/0x20 [ 218.460325][ T9333] ? show_regs_print_info+0x20/0x20 [ 218.465894][ T9333] ? load_image+0x400/0x400 [ 218.470616][ T9333] warn_alloc+0x243/0x320 [ 218.475234][ T9333] ? zone_watermark_ok_safe+0x240/0x240 [ 218.481121][ T9333] ? __get_vm_area_node+0x2b5/0x2d0 [ 218.486363][ T9333] __vmalloc_node_range+0x2b1/0x8b0 [ 218.491846][ T9333] ? end_current_label_crit_section+0x170/0x170 [ 218.498455][ T9333] ? __lock_acquire+0x7d10/0x7d10 [ 218.503521][ T9333] ? perf_trace_lock_acquire+0xed/0x3e0 [ 218.509377][ T9333] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 218.515293][ T9333] __vmalloc+0x76/0x80 [ 218.520781][ T9333] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 218.526978][ T9333] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 218.532991][ T9333] bpf_prog_alloc+0x1a/0x1e0 [ 218.538585][ T9333] bpf_prog_load+0x7c6/0x1510 [ 218.543561][ T9333] ? map_freeze+0x350/0x350 [ 218.548469][ T9333] ? __might_fault+0xb7/0x110 [ 218.553364][ T9333] ? __might_fault+0xb3/0x110 [ 218.558060][ T9333] ? bpf_lsm_bpf+0x5/0x10 [ 218.562417][ T9333] ? security_bpf+0x7a/0xa0 [ 218.567119][ T9333] __sys_bpf+0x532/0x6f0 [ 218.571397][ T9333] ? bpf_link_show_fdinfo+0x380/0x380 [ 218.577003][ T9333] ? vtime_user_exit+0x2c8/0x3e0 [ 218.582418][ T9333] __x64_sys_bpf+0x78/0x90 [ 218.587190][ T9333] do_syscall_64+0x4c/0xa0 [ 218.592074][ T9333] ? clear_bhb_loop+0x30/0x80 [ 218.597327][ T9333] ? clear_bhb_loop+0x30/0x80 [ 218.602390][ T9333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.608393][ T9333] RIP: 0033:0x7fbebc27fcb9 [ 218.613082][ T9333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.633150][ T9333] RSP: 002b:00007fbeba4db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.641698][ T9333] RAX: ffffffffffffffda RBX: 00007fbebc4fafa0 RCX: 00007fbebc27fcb9 [ 218.649972][ T9333] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 218.658311][ T9333] RBP: 00007fbeba4db090 R08: 0000000000000000 R09: 0000000000000000 [ 218.666673][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.674921][ T9333] R13: 00007fbebc4fb038 R14: 00007fbebc4fafa0 R15: 00007fffe21aec08 [ 218.683288][ T9333] [ 219.041875][ T9333] Mem-Info: [ 219.045191][ T9333] active_anon:270 inactive_anon:21515 isolated_anon:0 [ 219.045191][ T9333] active_file:21751 inactive_file:36198 isolated_file:0 [ 219.045191][ T9333] unevictable:768 dirty:45 writeback:0 [ 219.045191][ T9333] slab_reclaimable:20790 slab_unreclaimable:107973 [ 219.045191][ T9333] mapped:29740 shmem:18068 pagetables:629 bounce:0 [ 219.045191][ T9333] kernel_misc_reclaimable:0 [ 219.045191][ T9333] free:1344253 free_pcp:6900 free_cma:0 [ 219.090153][ T9333] Node 0 active_anon:1048kB inactive_anon:85552kB active_file:86800kB inactive_file:144792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118960kB dirty:176kB writeback:0kB shmem:70196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12052kB pagetables:2516kB all_unreclaimable? no [ 219.123504][ T9333] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 219.155463][ T9333] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 219.183349][ T9333] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 219.189664][ T9333] Node 0 DMA32 free:1442432kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1048kB inactive_anon:85552kB active_file:86800kB inactive_file:144792kB unevictable:1536kB writepending:176kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:22156kB local_pcp:5980kB free_cma:0kB [ 219.221148][ T9333] lowmem_reserve[]: 0 0 0 0 0 [ 219.235736][ T9333] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 219.262587][ T9333] lowmem_reserve[]: 0 0 0 0 0 [ 219.269230][ T9333] Node 1 Normal free:3919220kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5428kB local_pcp:0kB free_cma:0kB [ 219.299615][ T9333] lowmem_reserve[]: 0 0 0 0 0 [ 219.305535][ T9333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 219.319511][ T9333] Node 0 DMA32: 2521*4kB (UM) 1528*8kB (UM) 2000*16kB (UM) 1183*32kB (UM) 322*64kB (UM) 66*128kB (UME) 4*256kB (UME) 30*512kB (UME) 22*1024kB (ME) 8*2048kB (UME) 309*4096kB (M) = 1442180kB [ 219.339086][ T9333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 219.351062][ T9333] Node 1 Normal: 127*4kB (UME) 31*8kB (UME) 24*16kB (UME) 170*32kB (UME) 71*64kB (UME) 18*128kB (UE) 7*256kB (UM) 3*512kB (U) 1*1024kB (E) 1*2048kB (M) 952*4096kB (M) = 3919220kB [ 219.371535][ T9333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.394461][ T9333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.411341][ T9333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.421687][ T9333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.438137][ T9333] 76017 total pagecache pages [ 219.444771][ T9333] 0 pages in swap cache [ 219.449159][ T9333] Swap cache stats: add 0, delete 0, find 0/0 [ 219.462277][ T9333] Free swap = 124996kB [ 219.467236][ T9333] Total swap = 124996kB [ 219.471808][ T9333] 2097051 pages RAM [ 219.482559][ T9333] 0 pages HighMem/MovableOnly [ 219.487735][ T9333] 411492 pages reserved [ 219.492052][ T9333] 0 pages cma reserved [ 221.334927][ T9380] netlink: 'syz.2.1827': attribute type 10 has an invalid length. [ 221.343634][ T9381] netlink: 'syz.3.1830': attribute type 1 has an invalid length. [ 221.383568][ T9381] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.1830'. [ 221.384953][ T9380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1827'. [ 221.536889][ T9380] bridge0: port 3(team0) entered blocking state [ 221.622986][ T9380] bridge0: port 3(team0) entered disabled state [ 221.699878][ T9380] device team0 entered promiscuous mode [ 221.738179][ T9380] device team_slave_0 entered promiscuous mode [ 221.769936][ T9380] device team_slave_1 entered promiscuous mode [ 221.831332][ T9380] bridge0: port 3(team0) entered blocking state [ 221.837804][ T9380] bridge0: port 3(team0) entered forwarding state [ 221.890789][ T9387] netlink: 'syz.4.1833': attribute type 16 has an invalid length. [ 221.905966][ T9387] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1833'. [ 221.954940][ T9398] wlan1: mtu less than device minimum [ 222.240165][ T9407] netlink: 'syz.1.1840': attribute type 3 has an invalid length. [ 222.282556][ T9407] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1840'. [ 222.304158][ T9409] device syzkaller0 entered promiscuous mode [ 222.649054][ T9431] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 223.302027][ T9455] device syzkaller0 entered promiscuous mode [ 223.562108][ T9478] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1866'. [ 223.776674][ T9492] netlink: 'syz.0.1873': attribute type 21 has an invalid length. [ 223.792304][ T9492] netlink: 'syz.0.1873': attribute type 6 has an invalid length. [ 223.802093][ T9492] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1873'. [ 224.039154][ T9505] netlink: 'syz.3.1877': attribute type 23 has an invalid length. [ 224.058451][ T9511] FAULT_INJECTION: forcing a failure. [ 224.058451][ T9511] name failslab, interval 1, probability 0, space 0, times 0 [ 224.069273][ T9505] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1877'. [ 224.072312][ T9511] CPU: 0 PID: 9511 Comm: syz.4.1879 Not tainted syzkaller #0 [ 224.088063][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.098817][ T9511] Call Trace: [ 224.102113][ T9511] [ 224.105051][ T9511] dump_stack_lvl+0x188/0x250 [ 224.109751][ T9511] ? show_regs_print_info+0x20/0x20 [ 224.114978][ T9511] ? load_image+0x400/0x400 [ 224.119501][ T9511] ? perf_trace_lock+0xe4/0x390 [ 224.124547][ T9511] should_fail+0x38c/0x4c0 [ 224.128988][ T9511] should_failslab+0x5/0x20 [ 224.133715][ T9511] slab_pre_alloc_hook+0x51/0xc0 [ 224.138678][ T9511] ? skb_clone+0x1bd/0x350 [ 224.143117][ T9511] kmem_cache_alloc+0x3d/0x290 [ 224.147977][ T9511] ? lock_chain_count+0x20/0x20 [ 224.153264][ T9511] skb_clone+0x1bd/0x350 [ 224.158053][ T9511] __netlink_deliver_tap+0x3cd/0x7c0 [ 224.163549][ T9511] netlink_deliver_tap+0x16c/0x180 [ 224.169376][ T9511] netlink_unicast+0x74f/0x920 [ 224.174347][ T9511] netlink_sendmsg+0x8ba/0xbe0 [ 224.179776][ T9511] ? netlink_getsockopt+0x570/0x570 [ 224.184996][ T9511] ? aa_sock_msg_perm+0x94/0x150 [ 224.190124][ T9511] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 224.195495][ T9511] ? security_socket_sendmsg+0x7c/0xa0 [ 224.200948][ T9511] ? netlink_getsockopt+0x570/0x570 [ 224.206312][ T9511] ____sys_sendmsg+0x5b7/0x8f0 [ 224.211152][ T9511] ? __sys_sendmsg_sock+0x30/0x30 [ 224.216423][ T9511] ? import_iovec+0x6f/0xa0 [ 224.221029][ T9511] ___sys_sendmsg+0x236/0x2e0 [ 224.225884][ T9511] ? __sys_sendmsg+0x2a0/0x2a0 [ 224.230913][ T9511] ? trace_event_raw_event_lock+0x270/0x270 [ 224.237271][ T9511] __se_sys_sendmsg+0x1af/0x290 [ 224.242110][ T9511] ? __x64_sys_sendmsg+0x80/0x80 [ 224.247125][ T9511] ? syscall_enter_from_user_mode+0x2a/0x70 [ 224.253182][ T9511] do_syscall_64+0x4c/0xa0 [ 224.257763][ T9511] ? clear_bhb_loop+0x30/0x80 [ 224.262607][ T9511] ? clear_bhb_loop+0x30/0x80 [ 224.267269][ T9511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.273147][ T9511] RIP: 0033:0x7fbebc27fcb9 [ 224.277554][ T9511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.298024][ T9511] RSP: 002b:00007fbeba4db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.306604][ T9511] RAX: ffffffffffffffda RBX: 00007fbebc4fafa0 RCX: 00007fbebc27fcb9 [ 224.314746][ T9511] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 224.322809][ T9511] RBP: 00007fbeba4db090 R08: 0000000000000000 R09: 0000000000000000 [ 224.331595][ T9511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.339662][ T9511] R13: 00007fbebc4fb038 R14: 00007fbebc4fafa0 R15: 00007fffe21aec08 [ 224.347826][ T9511] [ 224.372414][ T9505] netlink: 'syz.3.1877': attribute type 9 has an invalid length. [ 224.381519][ T9505] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1877'. [ 224.548428][ T9517] device syzkaller0 entered promiscuous mode [ 227.519504][ T9527] ------------[ cut here ]------------ [ 227.525313][ T9527] WARNING: CPU: 1 PID: 9527 at kernel/events/core.c:6688 perf_pending_task+0x358/0x470 [ 227.535153][ T9527] Modules linked in: [ 227.539051][ T9527] CPU: 1 PID: 9527 Comm: syz.1.1883 Not tainted syzkaller #0 [ 227.546894][ T9527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.557149][ T9527] RIP: 0010:perf_pending_task+0x358/0x470 [ 227.562919][ T9527] Code: ff 84 db 75 14 e8 48 4c de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 4c de ff e8 c7 b9 65 ff eb e5 e8 28 4c de ff <0f> 0b e9 f3 fe ff ff e8 1c 4c de ff 48 c7 c7 20 20 3a 8c 4c 89 f6 [ 227.583426][ T9527] RSP: 0018:ffffc9000342f9d8 EFLAGS: 00010293 [ 227.589884][ T9527] RAX: ffffffff819ac378 RBX: ffff88802370c000 RCX: ffff888045685940 [ 227.598008][ T9527] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 227.606234][ T9527] RBP: 0000000000000001 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 227.614352][ T9527] R10: dffffc0000000000 R11: ffffed1017227662 R12: ffff888045685940 [ 227.622833][ T9527] R13: ffff888062c23558 R14: ffff88802370bdd0 R15: 1ffff110046e17ba [ 227.630909][ T9527] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 227.640273][ T9527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.647168][ T9527] CR2: 00007f87856519a0 CR3: 000000007ada0000 CR4: 00000000003506e0 [ 227.655204][ T9527] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.663570][ T9527] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 227.671915][ T9527] Call Trace: [ 227.675448][ T9527] [ 227.678509][ T9527] task_work_run+0x125/0x1a0 [ 227.683154][ T9527] do_exit+0x626/0x20c0 [ 227.687500][ T9527] ? rcu_nmi_exit+0x6f/0xf0 [ 227.692171][ T9527] ? put_task_struct+0x80/0x80 [ 227.696996][ T9527] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 227.703117][ T9527] ? lock_chain_count+0x20/0x20 [ 227.708074][ T9527] ? _raw_spin_lock_irq+0xb7/0xf0 [ 227.713274][ T9527] do_group_exit+0x12e/0x300 [ 227.718127][ T9527] ? lockdep_hardirqs_on+0x94/0x140 [ 227.723483][ T9527] get_signal+0x6ca/0x12c0 [ 227.727928][ T9527] arch_do_signal_or_restart+0xe7/0x12c0 [ 227.733715][ T9527] ? bpf_prog_free_id+0x190/0x190 [ 227.739308][ T9527] ? cpu_online+0x60/0x60 [ 227.743948][ T9527] ? get_sigframe_size+0x10/0x10 [ 227.748929][ T9527] ? rcu_nmi_exit+0x6f/0xf0 [ 227.753660][ T9527] ? exit_to_user_mode_loop+0x3b/0x130 [ 227.759139][ T9527] exit_to_user_mode_loop+0x9e/0x130 [ 227.764805][ T9527] exit_to_user_mode_prepare+0xee/0x180 [ 227.770547][ T9527] syscall_exit_to_user_mode+0x16/0x40 [ 227.776151][ T9527] do_syscall_64+0x58/0xa0 [ 227.780663][ T9527] ? clear_bhb_loop+0x30/0x80 [ 227.785544][ T9527] ? clear_bhb_loop+0x30/0x80 [ 227.790687][ T9527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.796717][ T9527] RIP: 0033:0x7f87873f5cb9 [ 227.801489][ T9527] Code: Unable to access opcode bytes at RIP 0x7f87873f5c8f. [ 227.809519][ T9527] RSP: 002b:00007f8785651028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.818417][ T9527] RAX: fffffffffffffffc RBX: 00007f8787670fa0 RCX: 00007f87873f5cb9 [ 227.827031][ T9527] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 227.835231][ T9527] RBP: 00007f8787463bf7 R08: 0000000000000000 R09: 0000000000000000 [ 227.843624][ T9527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.851687][ T9527] R13: 00007f8787671038 R14: 00007f8787670fa0 R15: 00007fff1d820908 [ 227.859716][ T9527] [ 227.862883][ T9527] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 227.870340][ T9527] CPU: 1 PID: 9527 Comm: syz.1.1883 Not tainted syzkaller #0 [ 227.877802][ T9527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.888645][ T9527] Call Trace: [ 227.891925][ T9527] [ 227.894958][ T9527] dump_stack_lvl+0x188/0x250 [ 227.899771][ T9527] ? show_regs_print_info+0x20/0x20 [ 227.904968][ T9527] ? load_image+0x400/0x400 [ 227.909476][ T9527] panic+0x2e5/0x810 [ 227.913375][ T9527] ? bpf_jit_dump+0xd0/0xd0 [ 227.917883][ T9527] ? perf_pending_task+0x358/0x470 [ 227.923420][ T9527] __warn+0x248/0x2b0 [ 227.927405][ T9527] ? perf_pending_task+0x358/0x470 [ 227.933020][ T9527] report_bug+0x1b7/0x2e0 [ 227.937380][ T9527] handle_bug+0x3a/0x70 [ 227.941600][ T9527] exc_invalid_op+0x16/0x40 [ 227.946103][ T9527] asm_exc_invalid_op+0x16/0x20 [ 227.951219][ T9527] RIP: 0010:perf_pending_task+0x358/0x470 [ 227.957207][ T9527] Code: ff 84 db 75 14 e8 48 4c de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 4c de ff e8 c7 b9 65 ff eb e5 e8 28 4c de ff <0f> 0b e9 f3 fe ff ff e8 1c 4c de ff 48 c7 c7 20 20 3a 8c 4c 89 f6 [ 227.977435][ T9527] RSP: 0018:ffffc9000342f9d8 EFLAGS: 00010293 [ 227.983673][ T9527] RAX: ffffffff819ac378 RBX: ffff88802370c000 RCX: ffff888045685940 [ 227.991824][ T9527] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 227.999914][ T9527] RBP: 0000000000000001 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 228.007972][ T9527] R10: dffffc0000000000 R11: ffffed1017227662 R12: ffff888045685940 [ 228.016117][ T9527] R13: ffff888062c23558 R14: ffff88802370bdd0 R15: 1ffff110046e17ba [ 228.024633][ T9527] ? perf_pending_task+0x358/0x470 [ 228.029771][ T9527] ? perf_pending_task+0x358/0x470 [ 228.034967][ T9527] task_work_run+0x125/0x1a0 [ 228.039684][ T9527] do_exit+0x626/0x20c0 [ 228.043845][ T9527] ? rcu_nmi_exit+0x6f/0xf0 [ 228.048621][ T9527] ? put_task_struct+0x80/0x80 [ 228.053418][ T9527] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 228.059490][ T9527] ? lock_chain_count+0x20/0x20 [ 228.064420][ T9527] ? _raw_spin_lock_irq+0xb7/0xf0 [ 228.069633][ T9527] do_group_exit+0x12e/0x300 [ 228.074225][ T9527] ? lockdep_hardirqs_on+0x94/0x140 [ 228.079683][ T9527] get_signal+0x6ca/0x12c0 [ 228.084106][ T9527] arch_do_signal_or_restart+0xe7/0x12c0 [ 228.089748][ T9527] ? bpf_prog_free_id+0x190/0x190 [ 228.094868][ T9527] ? cpu_online+0x60/0x60 [ 228.099654][ T9527] ? get_sigframe_size+0x10/0x10 [ 228.104689][ T9527] ? rcu_nmi_exit+0x6f/0xf0 [ 228.109410][ T9527] ? exit_to_user_mode_loop+0x3b/0x130 [ 228.114960][ T9527] exit_to_user_mode_loop+0x9e/0x130 [ 228.120250][ T9527] exit_to_user_mode_prepare+0xee/0x180 [ 228.125786][ T9527] syscall_exit_to_user_mode+0x16/0x40 [ 228.131470][ T9527] do_syscall_64+0x58/0xa0 [ 228.136049][ T9527] ? clear_bhb_loop+0x30/0x80 [ 228.141072][ T9527] ? clear_bhb_loop+0x30/0x80 [ 228.146077][ T9527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.152042][ T9527] RIP: 0033:0x7f87873f5cb9 [ 228.156451][ T9527] Code: Unable to access opcode bytes at RIP 0x7f87873f5c8f. [ 228.163918][ T9527] RSP: 002b:00007f8785651028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.172688][ T9527] RAX: fffffffffffffffc RBX: 00007f8787670fa0 RCX: 00007f87873f5cb9 [ 228.181132][ T9527] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 228.189649][ T9527] RBP: 00007f8787463bf7 R08: 0000000000000000 R09: 0000000000000000 [ 228.197700][ T9527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.205753][ T9527] R13: 00007f8787671038 R14: 00007f8787670fa0 R15: 00007fff1d820908 [ 228.213923][ T9527] [ 228.217478][ T9527] Kernel Offset: disabled [ 228.221809][ T9527] Rebooting in 86400 seconds..