last executing test programs: 3.717624851s ago: executing program 0 (id=14840): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 3.650705545s ago: executing program 3 (id=14841): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000240)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x10000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0xffff0000, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 3.373095051s ago: executing program 0 (id=14844): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f00000038c0)=""/4047, 0xfcf}, {&(0x7f00000048c0)=""/4111, 0x100f}, {&(0x7f0000000140)=""/116, 0x74}], 0x4}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 4) 3.241931609s ago: executing program 4 (id=14846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYRESDEC=r0], 0x0, 0x4e, 0x0, 0x0, 0x1}, 0x28) r1 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) 2.88623596s ago: executing program 3 (id=14849): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) r1 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375e", 0x39}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4c850}, 0x40400c5) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953ed76ade70bd7647d191e1e2c914023ff8454b72b9bc06a3e8f603031acf510663a3e657b852b4e145dc1d591095a7df24baeee76b6ba55f3dda38fb7301a563dc59db4d81ed545d61a53cabf8277dadfa6f19fe842dbf5c9b57e4f0662138ab3860b7e58f052000400000000000064e1109eb58aee280981", 0xd4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) sendmsg$inet(r4, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5e6c68b2ec608327, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x44}, 0x28) 2.808379395s ago: executing program 4 (id=14850): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="2000230c1100"}) 2.790578616s ago: executing program 0 (id=14851): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac0000009500000000000000ebba606e714c844b8b2c39bacb37a2b353e87964e9f7990eaeaf97379545c77ee1b165ea39c7b15f0349050d6016e64d11e2084900e5de1de886"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) 2.742609479s ago: executing program 1 (id=14852): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000140)=""/237, 0x0, 0xed, 0x1}, 0x28) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x110, 0xa}], 0x10, 0x106}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x894a, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x1, 0x2f, 0x2e}, 0x6e, 0x0}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000005c0)}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x9, 0x20, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x44, 0x0, 0xc29a, 0x0, 0x2, 0xfffffffa, 0x0, 0x0, 0xffffff80, 0x0, 0x10000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x16, 0x0, 0x4) 2.616158596s ago: executing program 2 (id=14854): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 2.416541158s ago: executing program 2 (id=14855): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000064006bcd9e3fe3dc6e48aa31086b8703130000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.332334133s ago: executing program 0 (id=14856): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc6004000e000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8927, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000010006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000340)="e7", 0x1}], 0x2, 0x0, 0x0, 0x20000005}, 0x4004) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10b8}, 0x20044010) (async) close(r4) (async) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000006c0)=""/262, 0x106}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000004640)=""/4068, 0xfe4}, {&(0x7f0000000380)=""/198, 0xc6}, {&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000004580)=""/167, 0xa7}, {&(0x7f0000000140)=""/119, 0x77}], 0x8}, 0x40012100) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000), 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0x3) (async) ioctl$SIOCSIFHWADDR(r7, 0x8927, &(0x7f0000000280)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x1008, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 2.190446471s ago: executing program 1 (id=14859): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000240)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x10000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0xffff0000, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 2.075907588s ago: executing program 2 (id=14860): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000}, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x36}}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x10c002, 0xac5d, 0xfffffffc, 0x0, 0x3}, r0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x9, 0xd2, 0x8, 0x2, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0xb}, 0x220, 0x7, 0x1, 0x5, 0x6, 0x8, 0x1ff, 0x0, 0xd, 0x0, 0xffffffffffffffff}, r0, 0x5, r3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x11, 0x0, 0x40019) 2.001673022s ago: executing program 4 (id=14861): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x17, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a104000100fef74b0000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95324fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x541b, &(0x7f0000000080)={'syzkaller1\x00', @remote}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8913, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r7, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x4048800) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20004000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0xfffffffc}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x93, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4800, 0x0, 0x0, 0x5, 0x200000, 0x4, 0x0, 0x0, 0x80009}, 0x0, 0x8, r0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000800)=ANY=[@ANYBLOB="364000001a00913aa4"], 0x82d7) 1.873163479s ago: executing program 0 (id=14862): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="5c0000002e006bfb9e3be35c6e17aa31076b876c1d0020007ea608640400000000000c00040000001fffffff300017d34460bc24eab556a705251e618294ff0051f60a84c9f4d4e786a6d0001000000e4509c5bb5b64f69853000009", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780), &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0xc1, &(0x7f0000000800), 0x4d, 0x10, &(0x7f0000000880), 0x0, 0x0, 0xf0, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000b40)=r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) sendmsg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20009000) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0090000008684e08b04000200000000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd", 0x5c}], 0x1, 0x0, 0x64, 0x1f00c00e}, 0x4000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d38, 0x1f0c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x7, 0x8, 0x9, 0x0, 0x80008000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) r10 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x9, &(0x7f0000000380), 0x98) 1.790280824s ago: executing program 3 (id=14863): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000066000000000000001800"/28], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000005c0)}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x44, 0x0, 0xc29a, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x16, 0x0, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, 0x50) 1.772296835s ago: executing program 1 (id=14864): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000080)=""/227, 0x26, 0xe3, 0x1}, 0x28) (fail_nth: 26) 1.414760076s ago: executing program 3 (id=14865): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff6c) (async, rerun: 32) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x6, 0x8, 0x7, 0x0, 0x35, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x800}, 0x818, 0x100000000, 0x16, 0x0, 0x4, 0x2, 0x3, 0x0, 0x5, 0x0, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 1.396840087s ago: executing program 2 (id=14866): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x4, @perf_bp={0x0}, 0x688, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x311b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.320736622s ago: executing program 1 (id=14867): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2dc8, 0x4}, 0x100c, 0x0, 0xcc, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) syz_clone(0xa1023, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0) 1.17621848s ago: executing program 3 (id=14868): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0xa, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x8, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c7894f90335fc6004001100040003", 0x1b}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="9343000043"], 0xfe33) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, 0x0) getpid() r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10}, 0xfc00) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 880.241348ms ago: executing program 4 (id=14869): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5b, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000004000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000001000018", @ANYRES32=r3, @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xb, 0x0, &(0x7f0000000140)="63eced8e46dc3f2ddf33c9", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xa, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)="296c6c6bb0ba2d10a53be11a67e2c1912e5302873f4d9bf31e34d53f9c0558591d796663d90413533f9fe4816b962d6c32338bb5ba12daf16f43", 0x3a}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffb3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x48}, 0x4008004) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100)=0x8, 0x12) r10 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 548.316508ms ago: executing program 3 (id=14870): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000e18dd0d300009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="020000000400000004977ae5ecfff46858b8482a6c9200000600"/40], 0x50) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x1e, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd416, 0x0, 0x0, 0x0, 0x5}, [@generic={0x2e, 0x1, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x1, 0x9, 0x3, 0x0, 0xfffffffffffffffe, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000006c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x19, '\x00', r4, 0x1a, r5, 0x8, &(0x7f0000000740)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xb, 0x83ca, 0x100}, 0x10, 0x1a238, r2, 0x5, 0x0, &(0x7f0000000800)=[{0x3, 0x5, 0xe, 0x7}, {0x0, 0x5, 0x7, 0x2}, {0x0, 0x1, 0x6, 0x1}, {0x1, 0x2, 0xa, 0x9}, {0x5, 0x3, 0xe, 0x2}], 0x10, 0x100}, 0x94) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d00)={{r6, 0xffffffffffffffff}, &(0x7f0000001c80), &(0x7f0000001cc0)='%pI4 \x00'}, 0x20) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d40)={r3, 0x7, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0x1, &(0x7f0000001b00)=@raw=[@call={0x85, 0x0, 0x0, 0xab}], &(0x7f0000001b40)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x22, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000001c00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001c40)={0x5, 0xe, 0x568b, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[r9, r0, r6, r10, r0, r6, r0], 0x0, 0x10, 0x434}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x9, &(0x7f00000001c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000240)='GPL\x00', 0x9, 0x91, &(0x7f0000000280)=""/145, 0x41000, 0x70, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x3, 0xfffffff5, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0x2}, {0x0, 0x5, 0xe, 0x4}], 0x10, 0x2}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000005000000040000000300000091000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f01006900810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4e}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e419157", 0x8a}], 0x2, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000580)=""/89, 0x59, 0x0, &(0x7f0000000640)=""/218, 0xda}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=r14, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x6, 0x10, &(0x7f0000001b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x547, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ldst={0x1, 0x0, 0x6, 0x6, 0x0, 0x18, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0xfff, 0xf2, &(0x7f0000001e80)=""/242, 0x40f00, 0x39, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001f80)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001fc0)={0x4, 0x4, 0xcc0, 0x400}, 0x10, r14, r11, 0x4, &(0x7f0000002000)=[r12, r12, r9, r9, r0, r9, r12], &(0x7f0000002040)=[{0x1, 0x2, 0x8, 0x9}, {0x4, 0x5, 0x0, 0xc}, {0x5, 0x5, 0xe, 0xa}, {0x3, 0x3, 0x6, 0xa}]}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xc, r12}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000004c0)=r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x89f1, &(0x7f0000000080)) r16 = syz_clone(0x80, &(0x7f0000000a00)="b3a1b9f75cbffd6d8e45e43d530a41857197d5115bf95b2fd0c614eb3ee53aeb0a8fb8aaa080e83bd5644a5834284c1cc8d3089ddc93f50c54f241dd552361eaf2c494b9a8ff6c593b8f7c9b3cd1ea9668921a55cea7aef70802696eec46a44f7fc1e098eeb7e421f0030e78dd00c2d8bfe91180ba9ddcf8030533", 0x7b, &(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)="69d3a18d2a36e7be2204d01959f565d7d985485283dadd7096e4ec75570c1b0f5c5e1c120d5254914dbb33f71e511f6dcc5a95bc722691b0f3b0125f3b7fb433379f4bb74b7cd979201a5e07bf23f1edd20a1a7ea392ff5b304a416997efec4fdf3d3da11ced2bba612887a4ad73b9f5bb19013ce2cd7d5ebf25b7a0cc5add98180318e7e5d9fcb38cc4670e97e9e00ad80a0908367ee0420c604404101aa52caa3131e20a912ab93445f8ca4f3237129d0095f906fb72385d5fd90bf394a8888e814bd6e7437f17da96b24a1b95a7a952ba60c49bedf3c3700ee96567950fdb2c465aaeb7e54249c33c84dd00dc48a682e739c5662bf21e09a6ed75a44bb3c9379f65192dc025f75906efb87650bdfec69f5c3dbe51197a4c842480de0fc02b1c5f0bd2f7414cd3c145a4ca5319a5938a71fb9542effc38186f6eb9df7d073b82de12f141a607388cfb3de5fd935f5c3dac9b4f7be90d750ce8e371bf31b868790240bffa3db7ee4ffdde99f3fecaa17741a3b33a9d843eb8d90639c5a6c468d212b9479ff61c220c8cfa68521ed5d1044e8c2dec277ef3aedb27b40ffb3b1a951c57fec0817492037bf49e0f8390709571282d1ae766160afadec818b51340967e4f61c53471c4077a1aac26c8a6fdc24acc23494609ad5430493510d3872804cd6e017e934ab3c0dd9d2f49a4e9191db2b8f284c9413ca4f20d4af1ec1b2ee16ef1c97e10cc7206457b51bffd80db1653673821cb9db8ec655ae1f953a5e15fb09220d278fa19e6a5bfb4fc7a4b9216b2c89eec4c0ff381b94da734c205ec37d9f0bc75dbdeb41c395f71c7585b07fd5a9efb02c160a51485fe42184c5dc82fdf39c68663a7307add013d67250992eec254c399d8ad4ed33c7236a60e0d26009353b1058e2ed1faecd0248be51391c267ce2b6e31a710d31fec36e806520d704f06d7a9c6a09f0d0de3e6d800e80d25af9afb90bfdca4dc45e58c8efbd26faed213441b46a2c73f929f8b3cd2aacf5a98bb312e439231eabf1ae6060460bf00db32b2fd45fa9671bc3ee11ff0de5f320ed5a4805ed5561305e2ad49efd1934b4e94c283ae8275819cbc5d7d28feb82e7767f8c4f14929d2e0506fe568850e5d61294f7ba1e3774f9fb07576a1fdf79cc0742d0ec53b6a27d00a26490c5578d970617f842e95d33006964d847c6988d3719f57e867f9e75a09ae04bd7b2292a66274cbbc27b9baab043d7493d64a23678b1cf718a0ddf4b49f5ddf4c275125f1f9944c04e6ac6f937807c6504ca19798fb2895a001c7464168a5b0a292209670d45810d1756a330b1004eac9476290ba0c9e82c1b73bad87f07ea3189169610f656f953847ae2ca1bbdfd88a589d49b052854de1a0855aa045cb6532013a7ce113df5b284b669fbee5286d05dcd5640e8d081fd97b38a97299714edc5a0b737c8a0c9526f4f0d9d108a4f130da606605737caeaae9c58c706065d512906994377ed82d2c36b650a3ec8c77378c65485929847296854e37a898d5c049fdc902c50ac2f2c05879fc48c40054cb3225722a9162e548c56b3ac53e51873a9faa4bf7c43b1e67b4da002dd65b6e013d5638e50e9b959759e0a61f05e537c838b7aad4f9acee6f12bac49974535a5998ba68d7ba98819814da2d29e11f3b895638d97089b89e707eb6e47fa1d96c08fd9a1df00ed05ad2311a7fb909531d3627109270f3d225e569e7b68b882de5c9212358246428086ee696826914f285e6987e9edc04038bdc0f727f47716a564a4692fde4b03e4d8ccf5b39beaa1b107358ea46b31565b2e57a1a46b65580494fc468312217859c550399cd1eb79432ed02490e3818b798f54db0041e0feba2a8bd60c32cf2b00771be67a010bed3937b984c66238bdc81b8901cbff4e67af4b1275dfc109aae425196af8c022a724a439cc670c1be54e594ca3bedd7829bceb03857d9c25ebcff0fb1deace07e4641d6864cb4990f5d16367ad02f46d07a5cd8c530536a4927bbb4ab7de195a49b9d66af1093d839391cb02ee70a34bf2fa3b8f2de0b4b10e0a1056a6610ee2ea597e82b8f418064da8c828cecc683f67ee6f3814b781e8cebeac6c35d9b55e9687a0d1b461551b8b02def1a5629fa70db42d1882f16990599a48da356b3e7ec210ce96adc03d23cc10fc3f6036749c395e558d6e9a452529726692128a13735f998dab826789691adbde404303b88fe8f1f8a8a4bfa60be6699397aa85149e9741ea4e23941d70c4dd852d75e2685382bd96f51fd5af32caab5fcf1398e586635564fbd9ada861c30d436426f8194a61ca224a402cbe33e6dfece5957ab4d3d58ae5f1acd8f579a8ce836c50181996df57dcd3ccfa5de1e81f49c85b278c81b91c35aa2c7f65d2c3be8142da8c5a695f966d08c223a243a1f81e21b69ac4985476942633dd5d0862e4856df6b94e7499ca6d53e63754f1bfa71e662320ccc692e461fab2c1f72cb7b5bfd8087f710a843c212c7831ecfea3a4941c948800a1aac64980a62a0a052a30a234388d554c1592a0a8387cc11a2969341de76bc709de1cb0d6869599825787d8f51d7b32a651bc2b9fe104addbf9a1ba47a8699507a8476b7092828fe644942a9abf9efc2b440be6437df1ef2165ad9a8ae101dd0a0499f325a97b17058de902f1737f0e3d9b0841bb8eebcf10bb986d7d00f8e3829d909a56eb23be49bd7624b7f5e75ba39df006bbfdefa8107a2fea79e6611406c0071161aa2f231baa03a84b845a65f421043eab89fd8900c6f8d7ec3baaaf019e03d0296fce3f97820b44c1d08402fe554f8a29a3c00348d863ef9348c4b122d8a732d21f3fd84ad3231ebb69278dc46c5060b50fe976899862f077a621d9bab46aa71225b5b580907eb7829d47c3f39bd65577615adb080f4a87589537604fa5841559ac50831eb2f191f2da4f9b3ef83d44d58e187e683103e40edec2c9c92df28de001462038eed8936fba4810a2bbd56ffe620c22d9808d6e6ff5ee1dbe4c12a28403ab15ab4251dd0ac165ae06586a1761bfee904077e48b157b86e25dd718b3d4231844e9ec99e8a070b988cc8486494f16813f94a3410ddf4d1a75f2f5783e3a501b506cfe0f4d505c4eb4a6c4570c21374951edc709c2bbe469e0d95996000849225f4c1e0a5cfed454e510cbc04e10461df226777ef0ea3c9567e8793b3126f2a949bc176bd04fbb625b808ab58affcc7d11b06a1ceb69d2f5a946e0a20a9d3465cc3a4819a5caf4009b295111636935d7f96778ae906e1d61d0287a300c8954ce634dfc94a88e01e3bbfa0a12e80b81014232b5c157b52397062e135a27f7978535361df0dbec8e4fdd5e054f1f0611ee44d3ed72e537e7baf9bb79055606186c015d0a32b196ed5b3a3340fcbadb00d4b54f14767fb466887f7c231930adf75960f7c840e99880ae3d4409f2b894d8d0e44e9ba6e1811a15b12103eff6ebc196778428cddbcd7e3945ba0edbbbac2c3f4cb60a989a3e623958c930b77ca59c5e4eefd6c9fb462ae2a77bd19b518ee418331ae47b875df7b7d782b1661729440467bf9cac36f6c19848f5d88fe73f06aab9c3dbf1e5b6a0df692b979c17251eff88cbb402687fb448f9da5b1f5d848abd7683332ff5e175a302292d213ac337757f8b72cd7070f2205035680459b04958173bb1ec27e152c30684a14cf4f73b694c2555d48cc0ecb16b728e840f27e10e1ecd990e68720e580a81c8bc6144bbd77ed54294f5827fbbbe9591ce7cc760f3741097918b56de5d9aefc75646673b93e37830a6795a0401c767b967feceb675b1a1fbac4fb86b5a775b3697e2b9eb0919c3173f06abd93ab86d0663de68e7f4600801873dc1bb9be781cca16fbf5741da8f17e7935b94104fb12358293c843c9ec6d451df76cd1d407e84856f749739022fb4cd2c081770845c08faa52dba83990af0aa7b7401478b3e6e16ba374a6707a7d3295241f565762d8293cd5e7e70ed4fc586be4ce9951243605b17a6a6ea09848d801eda365ac3dde97b3180e1399be6fa73a7bd065a08d960a93b5c5993142ea7822be353ae53813a2c3cb1645d29b642413e5fc686084c248911438dad4856e74ed96c8299715b932c25a72cb54ee783d30312e45fd438c5ae47c185c44170a5402f9d3a8a57a4f2af51d7688dc6a949886bacf11a2fdab1d16f8643ebabdfa2d798cdf838b87caa559df4a82fdcf7460c66fe56c2f631625c79f6d4f9517a3ac32e2b2ce5cf387e878c70940c80ff0587ac09d4139c62ca64061095f5346707bdea6024fa615a713d2a48558b87adc6a65e461dc8a1884c0fe676b43207b1d8cc67f9ad57019a1a29c2e666972d12306d67c47b5e2eb6e4ff3959accd50b409c0cce93f8100f3eec1ea0bceea04ee0014ee06821ded7543f0a4758548e93893316a79454f5fe15957d841f71366e0208d48ccb2bcc9eb2d51415bb0fd18edb8aab0f2a8b060536b720dabf104207b86dd304f1f84c2ae7cddff5d1cac40b1b4f454053334854c3d2f6e91299d0ff35cdd317250411ef8e1e7969d30b4a31c7dc659486e5c9cae5ec109509452b944ee1b59a725f2ba71390b9a59cc16f51f9c4b8ed6ba155887ffef13dafa5909f91bc629fc78b7d5868ec4feb8047784c1958ed1b00bab7b45dab922bc9647a72013577645ba9c5597e253f705417f4e9edcdd422780d635a7fc2a78ce7b243a1949069e138594e8de3b79e91a2841163509d3b90be4bb0f520f0e3bcd964b843505e9379a06700f95894e468144c109b9ab3c1cf5771679f67fe92e5f091e53d9e31ea57bb0d08dcdf8038f22a90ecb3a1972cf4e2238ea4c8eeaafcfcc9e4cee6476f79a87cb03d0be7318b485fa88be0b95b766a9d362ac19ae6ed086b8934b355ca15a6f3c1df5e5687bc8244dcba78578b08520a3d249252ea90aea6a6af56dbc261fde66a8b1377004970decb99093c787dc40975e5d9d5eb2c71f0b0e78f2af5e73268e4e2e3637b0a99f3bc9af393b535486c05cc825e0ac5735cb10ce5a012bc2ca3b762d174a4f76a8422759f7ac257e7e6318ffed80589f252e7694ab33db98ea7707a7f466115dc7ccae64dc6731bb0944cd6755b7fa7d26b9302bcca5ed9d1f711dc9c6052ec1c2caa29bf2e0495c9467ca80c2b3969c1ccc7ed06ff9823ace189eb606566fe28100d02ca64b0852c2b26a97e7caf9f5b9c6210b9771473a9c50efcf4bb8445c8d2d4256af3160272b98cee292a88ed79e9ad898d2f9ac49849748a6acce23e4297ff1267c9fc5f6a9bf1d674dbdaa72db8b2dec24ce456331fa9effaa667a5a08034823901eaeded03eca0423451c059b2e58307dc41697510345cb3b8cabcf635fccb37d46a481b7bbca8b4d94c8ea469f2f267c6abdb3a595b94ebfcc8ded0be8e79e94a3498a2f56e9d4fe209ad3c95197056551434b7138e4420b87da14a62a4e02d03a1a85be430f078708310ba6c1b5ba2af663aa72dedb5c2c447ffee4ab7ad5aaae55f9388ab6e882e8c1b51979fab5e3693603e8fa0fbce4c9c8d80b6b6b4bbda2110310f3b09ad07f24eb16bb1a2933446e8de7bb809611c0e51246d00b2adf507d2be59bb2fecd8785ea980152583fd6db76a73b2e4830d939c3a8a84473c4ffff235ffe8db89fcb1d3d027d59d435221b86c7277d157adce0537196b5476ee40c679c1c471dda4a2646f844e1bcaa87b92699d40f88874bf9a1f023ec63d6253ab06ac3af6f799a6d3287f69af2002ea103bdc5a1aff3b95cfd28023") perf_event_open(&(0x7f0000000980)={0x3, 0x80, 0x4, 0x1, 0x9, 0x0, 0x0, 0xe, 0x2d29b, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x1, @perf_bp={&(0x7f0000000940), 0x9}, 0x100, 0xcb28, 0x5, 0x1, 0x8000000000000001, 0x8, 0x2, 0x0, 0x5, 0x0, 0x73e}, r16, 0xd, r7, 0x3) 341.7646ms ago: executing program 2 (id=14871): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x59, 0x9, 0x8, 0x6, 0x0, 0x6, 0x20584, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x2f0, 0x9}, 0x8000, 0x3, 0x101, 0x7, 0x4, 0x81, 0x81, 0x0, 0x8001, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90824fc60", 0x14}], 0x1}, 0x0) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000d602000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0xffffffffffffff14) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000865701d93b25ef07020000000000006b3710fa0604", @ANYRES8=r0], 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000, @value=r3}, 0x28) (async) r4 = socket$kcm(0x2c, 0x3, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000001000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000aab406f242bfde9793685e3440c1a2c323d469277e0500000026aaf6caa85e44cbba0949523cb339a1646f460e9636c486b19973fab6be13f8e30cd0705f780d2c1792ba4bd8"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r6, &(0x7f0000000300), &(0x7f0000000380)=""/67}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000f1ffffffffffffff71123200000001009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x255, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r7 = socket$kcm(0x2, 0x5, 0x84) (async) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x82, &(0x7f0000000000)=r13, 0x8) 296.536142ms ago: executing program 0 (id=14872): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2dc8, 0x4}, 0x100c, 0x0, 0xcc, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001060400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/233, 0x46, 0xa0, 0x6}, 0x28) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0) 174.073269ms ago: executing program 1 (id=14873): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1, 0x40000000}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000020", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008043) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=14874): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) r1 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375e", 0x39}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4c850}, 0x40400c5) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953ed76ade70bd7647d191e1e2c914023ff8454b72b9bc06a3e8f603031acf510663a3e657b852b4e145dc1d591095a7df24baeee76b6ba55f3dda38fb7301a563dc59db4d81ed545d61a53cabf8277dadfa6f19fe842dbf5c9b57e4f0662138ab3860b7e58f052000400000000000064e1109eb58aee280981", 0xd4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) sendmsg$inet(r4, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5e6c68b2ec608327, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x44}, 0x28) kernel console output (not intermixed with test programs): 1 48 [ 2409.137052][T13353] RSP: 002b:00007fc15411a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2409.145504][T13353] RAX: ffffffffffffffda RBX: 00007fc153415fa0 RCX: 00007fc15319acb9 [ 2409.153539][T13353] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2409.161546][T13353] RBP: 00007fc15411a090 R08: 0000000000000000 R09: 0000000000000000 [ 2409.169540][T13353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2409.177533][T13353] R13: 00007fc153416038 R14: 00007fc153415fa0 R15: 00007fffba83c8c8 [ 2409.185546][T13353] [ 2410.023978][T13367] netlink: 'syz.2.13643': attribute type 29 has an invalid length. [ 2410.073619][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13643'. [ 2410.100382][T13367] netlink: 'syz.2.13643': attribute type 29 has an invalid length. [ 2410.144510][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13643'. [ 2410.422960][T13382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13649'. [ 2410.483806][T13383] netlink: 'syz.3.13648': attribute type 2 has an invalid length. [ 2410.612651][T13383] netlink: 'syz.3.13648': attribute type 9 has an invalid length. [ 2410.641017][T13383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13648'. [ 2411.757480][T13408] netlink: 'syz.1.13656': attribute type 10 has an invalid length. [ 2411.849505][T13411] netlink: 'syz.4.13659': attribute type 10 has an invalid length. [ 2412.051627][T13411] device wlan1 entered promiscuous mode [ 2412.083425][T13411] team0: Port device wlan1 added [ 2412.456720][T13425] netlink: 'syz.2.13663': attribute type 1 has an invalid length. [ 2412.500582][T13425] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.13663'. [ 2412.714591][T13432] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13664'. [ 2413.598103][T13450] netlink: 'syz.4.13682': attribute type 29 has an invalid length. [ 2413.666126][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13682'. [ 2413.702018][T13450] netlink: 'syz.4.13682': attribute type 29 has an invalid length. [ 2413.732224][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13682'. [ 2414.112848][T13459] netlink: 'syz.0.13675': attribute type 10 has an invalid length. [ 2414.222347][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13679'. [ 2414.473114][T13459] team0: Port device wlan1 added [ 2414.478741][T13471] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.13678'. [ 2414.528604][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13679'. [ 2415.778991][T13501] validate_nla: 3 callbacks suppressed [ 2415.779032][T13501] netlink: 'syz.3.13695': attribute type 29 has an invalid length. [ 2415.802518][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13695'. [ 2415.830419][T13501] netlink: 'syz.3.13695': attribute type 29 has an invalid length. [ 2415.874939][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13695'. [ 2416.366921][T13514] netlink: 'syz.1.13698': attribute type 10 has an invalid length. [ 2416.916677][T13514] team0: Port device wlan1 added [ 2417.914715][T13544] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13714'. [ 2417.948173][T13544] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13714'. [ 2418.024529][T13549] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13714'. [ 2418.160257][T13548] netlink: 'syz.1.13710': attribute type 29 has an invalid length. [ 2418.236764][T13548] netlink: 'syz.1.13710': attribute type 29 has an invalid length. [ 2419.660655][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2419.796541][T13586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2421.411876][T13616] netlink: 'syz.4.13737': attribute type 29 has an invalid length. [ 2421.452182][T13616] __nla_validate_parse: 3 callbacks suppressed [ 2421.452472][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13737'. [ 2421.525103][T13616] netlink: 'syz.4.13737': attribute type 29 has an invalid length. [ 2421.574416][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13737'. [ 2422.685455][T13645] netlink: 'syz.4.13747': attribute type 21 has an invalid length. [ 2425.847307][T13662] netlink: 'syz.3.13755': attribute type 10 has an invalid length. [ 2425.992973][T13662] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2426.115648][T13665] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13755'. [ 2431.997017][T13710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13769'. [ 2432.274544][T13723] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13774'. [ 2432.513947][T13731] FAULT_INJECTION: forcing a failure. [ 2432.513947][T13731] name failslab, interval 1, probability 0, space 0, times 0 [ 2432.744596][T13731] CPU: 0 PID: 13731 Comm: syz.1.13780 Not tainted syzkaller #0 [ 2432.752243][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2432.762352][T13731] Call Trace: [ 2432.765679][T13731] [ 2432.768655][T13731] dump_stack_lvl+0x188/0x24e [ 2432.773404][T13731] ? show_regs_print_info+0x12/0x12 [ 2432.778662][T13731] ? load_image+0x400/0x400 [ 2432.783208][T13731] ? __might_sleep+0xd0/0xd0 [ 2432.787838][T13731] ? __lock_acquire+0x7d10/0x7d10 [ 2432.792887][T13731] should_fail_ex+0x399/0x4d0 [ 2432.797612][T13731] should_failslab+0x5/0x20 [ 2432.802216][T13731] slab_pre_alloc_hook+0x59/0x310 [ 2432.807305][T13731] kmem_cache_alloc_node+0x5a/0x320 [ 2432.812563][T13731] ? __alloc_skb+0xfc/0x7e0 [ 2432.817174][T13731] __alloc_skb+0xfc/0x7e0 [ 2432.821735][T13731] netlink_ack+0x372/0x1170 [ 2432.824837][T13728] netlink: 'syz.0.13779': attribute type 21 has an invalid length. [ 2432.826274][T13731] ? verify_lock_unused+0x140/0x140 [ 2432.826321][T13731] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2432.826355][T13731] ? netlink_dump+0xd00/0xd00 [ 2432.826400][T13731] netlink_rcv_skb+0x280/0x450 [ 2432.826433][T13731] ? rtnetlink_bind+0x80/0x80 [ 2432.826470][T13731] ? netlink_ack+0x1170/0x1170 [ 2432.826513][T13731] ? netlink_deliver_tap+0x2e/0x1b0 [ 2432.826551][T13731] netlink_unicast+0x74d/0x8d0 [ 2432.875297][T13731] netlink_sendmsg+0x8ad/0xbd0 [ 2432.880135][T13731] ? netlink_getsockopt+0x550/0x550 [ 2432.885408][T13731] ? aa_sock_msg_perm+0x94/0x150 [ 2432.890399][T13731] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2432.895742][T13731] ? security_socket_sendmsg+0x7c/0xa0 [ 2432.901264][T13731] ? netlink_getsockopt+0x550/0x550 [ 2432.906523][T13731] ____sys_sendmsg+0x5be/0x970 [ 2432.911372][T13731] ? __sys_sendmsg_sock+0x30/0x30 [ 2432.916455][T13731] ? __import_iovec+0x315/0x500 [ 2432.921373][T13731] ? import_iovec+0x6f/0xa0 [ 2432.925928][T13731] ___sys_sendmsg+0x2a2/0x360 [ 2432.930719][T13731] ? __sys_sendmsg+0x290/0x290 [ 2432.935564][T13731] ? __lock_acquire+0x7d10/0x7d10 [ 2432.940676][T13731] __se_sys_sendmsg+0x1bb/0x2a0 [ 2432.945589][T13731] ? ct_nmi_exit+0x145/0x1c0 [ 2432.950228][T13731] ? __x64_sys_sendmsg+0x80/0x80 [ 2432.955243][T13731] ? lockdep_hardirqs_on+0x94/0x140 [ 2432.960558][T13731] do_syscall_64+0x4c/0xa0 [ 2432.965029][T13731] ? clear_bhb_loop+0x60/0xb0 [ 2432.969753][T13731] ? clear_bhb_loop+0x60/0xb0 [ 2432.974504][T13731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2432.980450][T13731] RIP: 0033:0x7fc15319acb9 [ 2432.984893][T13731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2433.004535][T13731] RSP: 002b:00007fc15411a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2433.012972][T13731] RAX: ffffffffffffffda RBX: 00007fc153415fa0 RCX: 00007fc15319acb9 [ 2433.020968][T13731] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2433.028978][T13731] RBP: 00007fc15411a090 R08: 0000000000000000 R09: 0000000000000000 [ 2433.036977][T13731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2433.044973][T13731] R13: 00007fc153416038 R14: 00007fc153415fa0 R15: 00007fffba83c8c8 [ 2433.052991][T13731] [ 2433.618012][T13752] netlink: 'syz.2.13787': attribute type 29 has an invalid length. [ 2433.673824][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13787'. [ 2433.716926][T13752] netlink: 'syz.2.13787': attribute type 29 has an invalid length. [ 2433.747733][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13787'. [ 2433.977774][T13770] netlink: 'syz.3.13792': attribute type 21 has an invalid length. [ 2434.067883][T13773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13795'. [ 2434.091641][T13773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13795'. [ 2434.112646][T13773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13795'. [ 2435.431945][T13790] netlink: 'syz.1.13799': attribute type 29 has an invalid length. [ 2435.482517][T13790] netlink: 'syz.1.13799': attribute type 29 has an invalid length. [ 2435.803202][T13800] netlink: 'syz.4.13805': attribute type 29 has an invalid length. [ 2435.841886][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13805'. [ 2435.880418][T13800] netlink: 'syz.4.13805': attribute type 29 has an invalid length. [ 2435.942688][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13805'. [ 2436.102781][T13816] netlink: 'syz.0.13811': attribute type 3 has an invalid length. [ 2436.124626][T13816] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13811'. [ 2436.725822][T13842] netlink: zone id is out of range [ 2436.755221][T13842] netlink: zone id is out of range [ 2436.774732][T13842] netlink: zone id is out of range [ 2436.779975][T13842] netlink: zone id is out of range [ 2436.812618][T13842] netlink: zone id is out of range [ 2436.896889][T13842] netlink: zone id is out of range [ 2436.902114][T13842] netlink: zone id is out of range [ 2436.950481][T13842] netlink: zone id is out of range [ 2437.017133][T13842] netlink: zone id is out of range [ 2437.033679][T13842] netlink: zone id is out of range [ 2437.305672][T13858] __nla_validate_parse: 2 callbacks suppressed [ 2437.305810][T13858] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13824'. [ 2437.330836][T13861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13825'. [ 2438.239988][T13891] netlink: 'syz.4.13836': attribute type 3 has an invalid length. [ 2438.265003][T13891] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13836'. [ 2438.512504][T13902] netlink: 'syz.2.13841': attribute type 10 has an invalid length. [ 2438.883809][T13904] netlink: 'syz.4.13842': attribute type 12 has an invalid length. [ 2438.892293][T13904] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13842'. [ 2439.385469][T13922] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.13849'. [ 2439.433137][T13920] netlink: 'syz.3.13850': attribute type 10 has an invalid length. [ 2440.110860][T13942] device syzkaller0 entered promiscuous mode [ 2440.410130][T13950] netlink: 'syz.4.13860': attribute type 10 has an invalid length. [ 2442.762647][T14014] netlink: 'syz.0.13882': attribute type 10 has an invalid length. [ 2444.541203][T14014] team0: Port device netdevsim0 added [ 2444.925534][T14032] netlink: 'syz.0.13888': attribute type 29 has an invalid length. [ 2444.954694][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13888'. [ 2445.009849][T14032] netlink: 'syz.0.13888': attribute type 29 has an invalid length. [ 2445.031905][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13888'. [ 2445.309199][T14042] netlink: 'syz.2.13893': attribute type 10 has an invalid length. [ 2445.627106][T14042] team0: Port device wlan1 added [ 2449.447052][T14091] netlink: 'syz.2.13910': attribute type 5 has an invalid length. [ 2449.961437][T14111] netlink: 'syz.1.13915': attribute type 10 has an invalid length. [ 2450.451728][T14124] FAULT_INJECTION: forcing a failure. [ 2450.451728][T14124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2450.475608][T14124] CPU: 0 PID: 14124 Comm: syz.1.13920 Not tainted syzkaller #0 [ 2450.483268][T14124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2450.493374][T14124] Call Trace: [ 2450.496704][T14124] [ 2450.499687][T14124] dump_stack_lvl+0x188/0x24e [ 2450.504440][T14124] ? show_regs_print_info+0x12/0x12 [ 2450.509702][T14124] ? load_image+0x400/0x400 [ 2450.514273][T14124] ? __lock_acquire+0x7d10/0x7d10 [ 2450.519368][T14124] should_fail_ex+0x399/0x4d0 [ 2450.524119][T14124] _copy_from_iter+0x1c0/0x1130 [ 2450.529033][T14124] ? __lock_acquire+0x7d10/0x7d10 [ 2450.534147][T14124] ? copyout_mc+0x110/0x110 [ 2450.538724][T14124] ? __virt_addr_valid+0x188/0x540 [ 2450.543910][T14124] ? __virt_addr_valid+0x188/0x540 [ 2450.549095][T14124] ? __virt_addr_valid+0x465/0x540 [ 2450.554286][T14124] ? __check_object_size+0x500/0xa40 [ 2450.559641][T14124] kernfs_fop_write_iter+0x1a0/0x520 [ 2450.565016][T14124] vfs_write+0x4b1/0xa30 [ 2450.569337][T14124] ? file_end_write+0x250/0x250 [ 2450.574263][T14124] ? __fget_files+0x43d/0x4b0 [ 2450.579026][T14124] ? __fdget_pos+0x2ae/0x360 [ 2450.583702][T14124] ? ksys_write+0x71/0x250 [ 2450.588211][T14124] ksys_write+0x14c/0x250 [ 2450.592619][T14124] ? __ia32_sys_read+0x80/0x80 [ 2450.597460][T14124] ? lockdep_hardirqs_on+0x94/0x140 [ 2450.602741][T14124] do_syscall_64+0x4c/0xa0 [ 2450.607227][T14124] ? clear_bhb_loop+0x60/0xb0 [ 2450.611961][T14124] ? clear_bhb_loop+0x60/0xb0 [ 2450.616706][T14124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2450.622667][T14124] RIP: 0033:0x7fc15319acb9 [ 2450.627150][T14124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2450.646911][T14124] RSP: 002b:00007fc15411a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2450.655411][T14124] RAX: ffffffffffffffda RBX: 00007fc153415fa0 RCX: 00007fc15319acb9 [ 2450.663440][T14124] RDX: 000000000000006a RSI: 0000200000000300 RDI: 000000000000000b [ 2450.671473][T14124] RBP: 00007fc15411a090 R08: 0000000000000000 R09: 0000000000000000 [ 2450.679500][T14124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2450.687532][T14124] R13: 00007fc153416038 R14: 00007fc153415fa0 R15: 00007fffba83c8c8 [ 2450.695593][T14124] [ 2452.019342][T14157] FAULT_INJECTION: forcing a failure. [ 2452.019342][T14157] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.130493][T14157] CPU: 1 PID: 14157 Comm: syz.1.13931 Not tainted syzkaller #0 [ 2452.138130][T14157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2452.148244][T14157] Call Trace: [ 2452.151567][T14157] [ 2452.154544][T14157] dump_stack_lvl+0x188/0x24e [ 2452.159283][T14157] ? show_regs_print_info+0x12/0x12 [ 2452.164544][T14157] ? load_image+0x400/0x400 [ 2452.169104][T14157] ? __might_sleep+0xd0/0xd0 [ 2452.173752][T14157] ? __lock_acquire+0x7d10/0x7d10 [ 2452.178848][T14157] should_fail_ex+0x399/0x4d0 [ 2452.183598][T14157] should_failslab+0x5/0x20 [ 2452.188165][T14157] slab_pre_alloc_hook+0x59/0x310 [ 2452.193242][T14157] ? allocate_cgrp_cset_links+0xc9/0x320 [ 2452.198923][T14157] __kmem_cache_alloc_node+0x4f/0x260 [ 2452.204365][T14157] ? allocate_cgrp_cset_links+0xc9/0x320 [ 2452.210047][T14157] kmalloc_trace+0x26/0xe0 [ 2452.214528][T14157] allocate_cgrp_cset_links+0xc9/0x320 [ 2452.220047][T14157] find_css_set+0xa1a/0x15d0 [ 2452.224698][T14157] ? cgroup_migrate_prepare_dst+0x6f0/0x6f0 [ 2452.230663][T14157] cgroup_migrate_prepare_dst+0x12c/0x6f0 [ 2452.236438][T14157] cgroup_attach_task+0x546/0x870 [ 2452.241496][T14157] ? cgroup_attach_task+0x20f/0x870 [ 2452.246776][T14157] ? cgroup_migrate_execute+0xf30/0xf30 [ 2452.252361][T14157] ? get_task_cred+0x1f/0x370 [ 2452.257159][T14157] ? get_task_cred+0x2f0/0x370 [ 2452.261959][T14157] ? get_task_cred+0x1f/0x370 [ 2452.266738][T14157] __cgroup1_procs_write+0x2f5/0x3f0 [ 2452.272073][T14157] ? cgroup_pidlist_destroy_work_fn+0x210/0x210 [ 2452.278377][T14157] ? cgroup_pidlist_stop+0xf0/0xf0 [ 2452.283546][T14157] cgroup_file_write+0x2c5/0x690 [ 2452.288533][T14157] ? read_lock_is_recursive+0x10/0x10 [ 2452.293945][T14157] ? cgroup_seqfile_stop+0xd0/0xd0 [ 2452.299193][T14157] ? cgroup_seqfile_stop+0xd0/0xd0 [ 2452.304337][T14157] kernfs_fop_write_iter+0x3b2/0x520 [ 2452.309715][T14157] vfs_write+0x4b1/0xa30 [ 2452.314002][T14157] ? file_end_write+0x250/0x250 [ 2452.318896][T14157] ? __fget_files+0x43d/0x4b0 [ 2452.323613][T14157] ? __fdget_pos+0x2ae/0x360 [ 2452.328264][T14157] ? ksys_write+0x71/0x250 [ 2452.332724][T14157] ksys_write+0x14c/0x250 [ 2452.337107][T14157] ? __ia32_sys_read+0x80/0x80 [ 2452.341909][T14157] ? lockdep_hardirqs_on+0x94/0x140 [ 2452.347146][T14157] do_syscall_64+0x4c/0xa0 [ 2452.351597][T14157] ? clear_bhb_loop+0x60/0xb0 [ 2452.356304][T14157] ? clear_bhb_loop+0x60/0xb0 [ 2452.361010][T14157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2452.366952][T14157] RIP: 0033:0x7fc15319acb9 [ 2452.371393][T14157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2452.391026][T14157] RSP: 002b:00007fc15411a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2452.399473][T14157] RAX: ffffffffffffffda RBX: 00007fc153415fa0 RCX: 00007fc15319acb9 [ 2452.407653][T14157] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 000000000000000c [ 2452.415649][T14157] RBP: 00007fc15411a090 R08: 0000000000000000 R09: 0000000000000000 [ 2452.423645][T14157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2452.431651][T14157] R13: 00007fc153416038 R14: 00007fc153415fa0 R15: 00007fffba83c8c8 [ 2452.439662][T14157] [ 2452.939147][T14169] netlink: 'syz.4.13932': attribute type 17 has an invalid length. [ 2453.011054][T14169] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13932'. [ 2453.086555][T14169] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2453.233186][T14178] FAULT_INJECTION: forcing a failure. [ 2453.233186][T14178] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.314510][T14178] CPU: 0 PID: 14178 Comm: syz.0.13937 Not tainted syzkaller #0 [ 2453.322156][T14178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2453.332348][T14178] Call Trace: [ 2453.335717][T14178] [ 2453.338718][T14178] dump_stack_lvl+0x188/0x24e [ 2453.343466][T14178] ? show_regs_print_info+0x12/0x12 [ 2453.348721][T14178] ? load_image+0x400/0x400 [ 2453.353280][T14178] ? mark_lock+0x94/0x320 [ 2453.357690][T14178] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2453.363790][T14178] should_fail_ex+0x399/0x4d0 [ 2453.368560][T14178] should_failslab+0x5/0x20 [ 2453.373128][T14178] slab_pre_alloc_hook+0x59/0x310 [ 2453.378207][T14178] ? sctp_add_bind_addr+0x89/0x350 [ 2453.383376][T14178] __kmem_cache_alloc_node+0x4f/0x260 [ 2453.388912][T14178] ? sctp_add_bind_addr+0x89/0x350 [ 2453.394315][T14178] kmalloc_trace+0x26/0xe0 [ 2453.399318][T14178] sctp_add_bind_addr+0x89/0x350 [ 2453.404313][T14178] sctp_copy_local_addr_list+0x311/0x4e0 [ 2453.410026][T14178] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 2453.415810][T14178] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 2453.421948][T14178] ? sctp_v4_is_any+0x31/0x50 [ 2453.426690][T14178] ? sctp_copy_one_addr+0x93/0x660 [ 2453.431864][T14178] sctp_bind_addr_copy+0xaf/0x3c0 [ 2453.436944][T14178] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2453.443337][T14178] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2453.448705][T14178] ? __sctp_connect+0xd80/0xd80 [ 2453.453713][T14178] ? security_sctp_bind_connect+0x5b/0xb0 [ 2453.459493][T14178] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2453.465094][T14178] ? security_sctp_bind_connect+0x85/0xb0 [ 2453.470872][T14178] sctp_sendmsg+0x15b0/0x2940 [ 2453.476306][T14178] ? irqentry_enter+0x33/0x50 [ 2453.481055][T14178] ? sctp_getsockopt+0x8a0/0x8a0 [ 2453.486061][T14178] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2453.492278][T14178] ? lockdep_hardirqs_on+0x94/0x140 [ 2453.497548][T14178] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2453.503780][T14178] ? inet_sendmsg+0x78/0x2f0 [ 2453.508434][T14178] ? inet_send_prepare+0x260/0x260 [ 2453.513612][T14178] ____sys_sendmsg+0x5be/0x970 [ 2453.518497][T14178] ? __sys_sendmsg_sock+0x30/0x30 [ 2453.523604][T14178] ? __import_iovec+0x315/0x500 [ 2453.528517][T14178] ? import_iovec+0x6f/0xa0 [ 2453.533078][T14178] ___sys_sendmsg+0x2a2/0x360 [ 2453.537815][T14178] ? __sys_sendmsg+0x290/0x290 [ 2453.542679][T14178] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2453.548492][T14178] __se_sys_sendmsg+0x1bb/0x2a0 [ 2453.553424][T14178] ? __x64_sys_sendmsg+0x80/0x80 [ 2453.558422][T14178] ? lockdep_hardirqs_on+0x94/0x140 [ 2453.563711][T14178] ? __x64_sys_sendmsg+0x69/0x80 [ 2453.568710][T14178] do_syscall_64+0x4c/0xa0 [ 2453.573184][T14178] ? clear_bhb_loop+0x60/0xb0 [ 2453.577911][T14178] ? clear_bhb_loop+0x60/0xb0 [ 2453.582644][T14178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2453.588592][T14178] RIP: 0033:0x7fb04d99acb9 [ 2453.593071][T14178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2453.612733][T14178] RSP: 002b:00007fb04e83b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2453.621209][T14178] RAX: ffffffffffffffda RBX: 00007fb04dc15fa0 RCX: 00007fb04d99acb9 [ 2453.629235][T14178] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 2453.637262][T14178] RBP: 00007fb04e83b090 R08: 0000000000000000 R09: 0000000000000000 [ 2453.645290][T14178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2453.653319][T14178] R13: 00007fb04dc16038 R14: 00007fb04dc15fa0 R15: 00007fff77cb6a28 [ 2453.661405][T14178] [ 2453.697961][T14169] net_ratelimit: 3655 callbacks suppressed [ 2453.697982][T14169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2456.122274][T14261] netlink: 'syz.3.13970': attribute type 19 has an invalid length. [ 2456.607957][T14280] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.13977'. [ 2457.102762][T14290] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13981'. [ 2457.291218][T14293] netlink: 'syz.0.13981': attribute type 10 has an invalid length. [ 2457.368163][T14293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13981'. [ 2457.458405][T14293] bridge0: port 3(veth0_vlan) entered blocking state [ 2457.506931][T14293] bridge0: port 3(veth0_vlan) entered disabled state [ 2457.539193][T14293] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2457.698854][T14301] netlink: 'syz.3.13985': attribute type 2 has an invalid length. [ 2457.734402][T14301] netlink: 'syz.3.13985': attribute type 4 has an invalid length. [ 2457.742306][T14301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13985'. [ 2458.286313][T14303] delete_channel: no stack [ 2458.956344][T14341] FAULT_INJECTION: forcing a failure. [ 2458.956344][T14341] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.988387][T14345] netlink: 'syz.1.14001': attribute type 21 has an invalid length. [ 2458.996633][T14341] CPU: 1 PID: 14341 Comm: syz.0.13999 Not tainted syzkaller #0 [ 2459.004325][T14341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2459.014430][T14341] Call Trace: [ 2459.017780][T14341] [ 2459.020754][T14341] dump_stack_lvl+0x188/0x24e [ 2459.025493][T14341] ? show_regs_print_info+0x12/0x12 [ 2459.030740][T14341] ? load_image+0x400/0x400 [ 2459.035296][T14341] ? verify_lock_unused+0x140/0x140 [ 2459.040560][T14341] should_fail_ex+0x399/0x4d0 [ 2459.045306][T14341] should_failslab+0x5/0x20 [ 2459.049870][T14341] slab_pre_alloc_hook+0x59/0x310 [ 2459.055017][T14341] kmem_cache_alloc+0x56/0x2f0 [ 2459.059856][T14341] ? skb_clone+0x1e7/0x370 [ 2459.064328][T14341] skb_clone+0x1e7/0x370 [ 2459.068694][T14341] __netlink_deliver_tap+0x3ed/0x800 [ 2459.074021][T14341] ? netlink_deliver_tap+0x2e/0x1b0 [ 2459.079256][T14341] netlink_deliver_tap+0x19c/0x1b0 [ 2459.084399][T14341] netlink_sendskb+0x64/0x130 [ 2459.089145][T14341] netlink_ack+0xcdd/0x1170 [ 2459.093695][T14341] ? netlink_dump+0xd00/0xd00 [ 2459.098400][T14341] ? sock_diag_lock_handler+0x19/0x280 [ 2459.103885][T14341] ? inet_diag_unregister+0xb0/0xb0 [ 2459.109139][T14341] ? sock_diag_rcv_msg+0x3f6/0x5f0 [ 2459.114285][T14341] netlink_rcv_skb+0x280/0x450 [ 2459.119104][T14341] ? sock_diag_bind+0xa0/0xa0 [ 2459.123908][T14341] ? netlink_ack+0x1170/0x1170 [ 2459.128718][T14341] ? netlink_deliver_tap+0x2e/0x1b0 [ 2459.133965][T14341] sock_diag_rcv+0x26/0x40 [ 2459.138440][T14341] netlink_unicast+0x74d/0x8d0 [ 2459.143268][T14341] netlink_sendmsg+0x8ad/0xbd0 [ 2459.148085][T14341] ? netlink_getsockopt+0x550/0x550 [ 2459.153329][T14341] ? aa_sock_msg_perm+0x94/0x150 [ 2459.158308][T14341] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2459.163645][T14341] ? security_socket_sendmsg+0x7c/0xa0 [ 2459.169146][T14341] ? netlink_getsockopt+0x550/0x550 [ 2459.174410][T14341] ____sys_sendmsg+0x5be/0x970 [ 2459.179238][T14341] ? __sys_sendmsg_sock+0x30/0x30 [ 2459.184297][T14341] ? __import_iovec+0x315/0x500 [ 2459.189190][T14341] ? import_iovec+0x6f/0xa0 [ 2459.193729][T14341] ___sys_sendmsg+0x2a2/0x360 [ 2459.198442][T14341] ? __sys_sendmsg+0x290/0x290 [ 2459.203431][T14341] ? __lock_acquire+0x7d10/0x7d10 [ 2459.208523][T14341] __se_sys_sendmsg+0x1bb/0x2a0 [ 2459.213425][T14341] ? __x64_sys_sendmsg+0x80/0x80 [ 2459.218411][T14341] ? lockdep_hardirqs_on+0x94/0x140 [ 2459.223649][T14341] do_syscall_64+0x4c/0xa0 [ 2459.228101][T14341] ? clear_bhb_loop+0x60/0xb0 [ 2459.232811][T14341] ? clear_bhb_loop+0x60/0xb0 [ 2459.237562][T14341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2459.243487][T14341] RIP: 0033:0x7fb04d99acb9 [ 2459.247927][T14341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2459.267567][T14341] RSP: 002b:00007fb04e83b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2459.276023][T14341] RAX: ffffffffffffffda RBX: 00007fb04dc15fa0 RCX: 00007fb04d99acb9 [ 2459.284044][T14341] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 2459.292059][T14341] RBP: 00007fb04e83b090 R08: 0000000000000000 R09: 0000000000000000 [ 2459.300075][T14341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2459.308083][T14341] R13: 00007fb04dc16038 R14: 00007fb04dc15fa0 R15: 00007fff77cb6a28 [ 2459.316095][T14341] [ 2459.343426][T14345] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14001'. [ 2459.353282][T14345] netlink: 'syz.1.14001': attribute type 5 has an invalid length. [ 2459.361360][T14345] netlink: 'syz.1.14001': attribute type 6 has an invalid length. [ 2459.370496][T14345] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14001'. [ 2459.380690][T14349] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 2460.316647][T14365] delete_channel: no stack [ 2460.990046][T14408] netlink: 68 bytes leftover after parsing attributes in process `syz.4.14019'. [ 2461.162981][T14408] netlink: 'syz.4.14019': attribute type 10 has an invalid length. [ 2461.171475][T14408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14019'. [ 2461.630808][T14424] netlink: 'syz.2.14023': attribute type 13 has an invalid length. [ 2461.652334][T14424] netlink: 160 bytes leftover after parsing attributes in process `syz.2.14023'. [ 2462.456841][T14429] delete_channel: no stack [ 2462.676735][T14450] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14034'. [ 2462.821099][T14450] netlink: 'syz.3.14034': attribute type 10 has an invalid length. [ 2462.841311][T14450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14034'. [ 2462.882043][T14450] bridge0: port 3(veth0_vlan) entered blocking state [ 2462.955807][T14450] bridge0: port 3(veth0_vlan) entered disabled state [ 2462.996786][T14450] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2464.165454][T14470] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 2464.234402][T14470] syzkaller1: group set to 778 [ 2464.280812][T14478] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14046'. [ 2464.361777][T14478] netlink: 'syz.1.14046': attribute type 39 has an invalid length. [ 2464.400054][T14478] device veth0_macvtap left promiscuous mode [ 2465.093437][T14495] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 2465.100788][T14495] syzkaller1: group set to 778 [ 2466.278705][T14515] FAULT_INJECTION: forcing a failure. [ 2466.278705][T14515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2466.312570][T14515] CPU: 0 PID: 14515 Comm: syz.2.14059 Not tainted syzkaller #0 [ 2466.320229][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2466.330335][T14515] Call Trace: [ 2466.333660][T14515] [ 2466.336632][T14515] dump_stack_lvl+0x188/0x24e [ 2466.341371][T14515] ? show_regs_print_info+0x12/0x12 [ 2466.346630][T14515] ? load_image+0x400/0x400 [ 2466.351190][T14515] ? __lock_acquire+0x7d10/0x7d10 [ 2466.356284][T14515] should_fail_ex+0x399/0x4d0 [ 2466.361024][T14515] _copy_from_user+0x2c/0x170 [ 2466.365778][T14515] kstrtouint_from_user+0xda/0x170 [ 2466.370955][T14515] ? kstrtol_from_user+0x190/0x190 [ 2466.376162][T14515] proc_fail_nth_write+0x8b/0x200 [ 2466.381297][T14515] ? proc_fail_nth_read+0x220/0x220 [ 2466.386557][T14515] ? common_file_perm+0x171/0x1c0 [ 2466.391641][T14515] ? proc_fail_nth_read+0x220/0x220 [ 2466.396890][T14515] vfs_write+0x2e6/0xa30 [ 2466.401190][T14515] ? file_end_write+0x250/0x250 [ 2466.406114][T14515] ? __fget_files+0x28/0x4b0 [ 2466.410764][T14515] ? __fget_files+0x28/0x4b0 [ 2466.415432][T14515] ? __fget_files+0x43d/0x4b0 [ 2466.420172][T14515] ? __fdget_pos+0x2ae/0x360 [ 2466.424825][T14515] ? ksys_write+0x71/0x250 [ 2466.429298][T14515] ksys_write+0x14c/0x250 [ 2466.433686][T14515] ? __ia32_sys_read+0x80/0x80 [ 2466.438517][T14515] ? lockdep_hardirqs_on+0x94/0x140 [ 2466.443791][T14515] do_syscall_64+0x4c/0xa0 [ 2466.448276][T14515] ? clear_bhb_loop+0x60/0xb0 [ 2466.453005][T14515] ? clear_bhb_loop+0x60/0xb0 [ 2466.457734][T14515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2466.463684][T14515] RIP: 0033:0x7f2919b5b58e [ 2466.468146][T14515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2466.487810][T14515] RSP: 002b:00007f291a976fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2466.496288][T14515] RAX: ffffffffffffffda RBX: 00007f291a9776c0 RCX: 00007f2919b5b58e [ 2466.504314][T14515] RDX: 0000000000000001 RSI: 00007f291a9770a0 RDI: 0000000000000005 [ 2466.512338][T14515] RBP: 00007f291a977090 R08: 0000000000000000 R09: 0000000000000000 [ 2466.520367][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2466.528389][T14515] R13: 00007f2919e16038 R14: 00007f2919e15fa0 R15: 00007ffe709b11f8 [ 2466.536435][T14515] [ 2466.692878][T14521] FAULT_INJECTION: forcing a failure. [ 2466.692878][T14521] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.732577][T14521] CPU: 1 PID: 14521 Comm: syz.1.14061 Not tainted syzkaller #0 [ 2466.740212][T14521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2466.750321][T14521] Call Trace: [ 2466.753647][T14521] [ 2466.756623][T14521] dump_stack_lvl+0x188/0x24e [ 2466.761368][T14521] ? show_regs_print_info+0x12/0x12 [ 2466.766631][T14521] ? load_image+0x400/0x400 [ 2466.771196][T14521] ? __might_sleep+0xd0/0xd0 [ 2466.775843][T14521] ? __lock_acquire+0x7d10/0x7d10 [ 2466.780926][T14521] should_fail_ex+0x399/0x4d0 [ 2466.785670][T14521] should_failslab+0x5/0x20 [ 2466.790254][T14521] slab_pre_alloc_hook+0x59/0x310 [ 2466.795323][T14521] ? rtnl_newlink+0x109/0x2080 [ 2466.800121][T14521] __kmem_cache_alloc_node+0x4f/0x260 [ 2466.805533][T14521] ? rtnl_newlink+0x109/0x2080 [ 2466.810337][T14521] kmalloc_trace+0x26/0xe0 [ 2466.814799][T14521] rtnl_newlink+0x109/0x2080 [ 2466.819443][T14521] ? __mutex_trylock_common+0x155/0x260 [ 2466.825020][T14521] ? rtnl_setlink+0x510/0x510 [ 2466.829728][T14521] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2466.835916][T14521] ? rcu_is_watching+0x11/0xa0 [ 2466.840736][T14521] ? trace_contention_end+0x5f/0x170 [ 2466.846065][T14521] ? __mutex_lock+0x1ab/0xaf0 [ 2466.850785][T14521] ? rtnetlink_rcv_msg+0x824/0xfc0 [ 2466.855930][T14521] ? rcu_read_unlock+0x8c/0xa0 [ 2466.860728][T14521] ? mutex_lock_nested+0x10/0x10 [ 2466.865711][T14521] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 2466.870855][T14521] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 2466.876002][T14521] ? rtnl_setlink+0x510/0x510 [ 2466.880711][T14521] rtnetlink_rcv_msg+0x87c/0xfc0 [ 2466.885692][T14521] ? rtnetlink_bind+0x80/0x80 [ 2466.890404][T14521] ? mark_lock+0x94/0x320 [ 2466.894771][T14521] ? __lock_acquire+0x12f4/0x7d10 [ 2466.899839][T14521] ? verify_lock_unused+0x140/0x140 [ 2466.905097][T14521] ? netlink_sendmsg+0x654/0xbd0 [ 2466.910065][T14521] ? verify_lock_unused+0x140/0x140 [ 2466.915337][T14521] ? ct_nmi_exit+0x145/0x1c0 [ 2466.919951][T14521] ? ct_irq_exit_irqson+0x113/0x170 [ 2466.925178][T14521] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2466.931234][T14521] netlink_rcv_skb+0x1fb/0x450 [ 2466.936037][T14521] ? rtnetlink_bind+0x80/0x80 [ 2466.940748][T14521] ? netlink_ack+0x1170/0x1170 [ 2466.945552][T14521] ? netlink_deliver_tap+0x2e/0x1b0 [ 2466.950791][T14521] netlink_unicast+0x74d/0x8d0 [ 2466.955600][T14521] netlink_sendmsg+0x8ad/0xbd0 [ 2466.960407][T14521] ? netlink_getsockopt+0x550/0x550 [ 2466.965642][T14521] ? aa_sock_msg_perm+0x94/0x150 [ 2466.970610][T14521] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2466.975923][T14521] ? security_socket_sendmsg+0x7c/0xa0 [ 2466.981417][T14521] ? netlink_getsockopt+0x550/0x550 [ 2466.986658][T14521] ____sys_sendmsg+0x5be/0x970 [ 2466.991465][T14521] ? __sys_sendmsg_sock+0x30/0x30 [ 2466.996522][T14521] ? __import_iovec+0x315/0x500 [ 2467.001403][T14521] ? import_iovec+0x6f/0xa0 [ 2467.005933][T14521] ___sys_sendmsg+0x2a2/0x360 [ 2467.010651][T14521] ? __sys_sendmsg+0x290/0x290 [ 2467.015467][T14521] ? __lock_acquire+0x7d10/0x7d10 [ 2467.020545][T14521] __se_sys_sendmsg+0x1bb/0x2a0 [ 2467.025431][T14521] ? __x64_sys_sendmsg+0x80/0x80 [ 2467.030421][T14521] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2467.036341][T14521] do_syscall_64+0x4c/0xa0 [ 2467.040791][T14521] ? clear_bhb_loop+0x60/0xb0 [ 2467.045495][T14521] ? clear_bhb_loop+0x60/0xb0 [ 2467.050210][T14521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2467.056131][T14521] RIP: 0033:0x7fc15319acb9 [ 2467.060568][T14521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2467.080204][T14521] RSP: 002b:00007fc15411a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2467.088641][T14521] RAX: ffffffffffffffda RBX: 00007fc153415fa0 RCX: 00007fc15319acb9 [ 2467.096642][T14521] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 2467.104642][T14521] RBP: 00007fc15411a090 R08: 0000000000000000 R09: 0000000000000000 [ 2467.112636][T14521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2467.120696][T14521] R13: 00007fc153416038 R14: 00007fc153415fa0 R15: 00007fffba83c8c8 [ 2467.128732][T14521] [ 2467.249690][T14527] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14063'. [ 2467.660551][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.666987][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.594072][T14552] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 2468.609285][T14552] syzkaller1: group set to 778 [ 2468.711052][T14560] netlink: 'syz.3.14078': attribute type 10 has an invalid length. [ 2468.855195][T14560] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.14078'. [ 2471.006019][T14609] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 2471.012105][T14609] syzkaller1: group set to 778 [ 2472.631663][T14639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14103'. [ 2473.391209][T14661] IPv6: NLM_F_CREATE should be specified when creating new route [ 2473.616879][T14661] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14111'. [ 2474.266073][T14675] FAULT_INJECTION: forcing a failure. [ 2474.266073][T14675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2474.361081][T14675] CPU: 0 PID: 14675 Comm: syz.1.14119 Not tainted syzkaller #0 [ 2474.368720][T14675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2474.378833][T14675] Call Trace: [ 2474.382145][T14675] [ 2474.385116][T14675] dump_stack_lvl+0x188/0x24e [ 2474.389859][T14675] ? show_regs_print_info+0x12/0x12 [ 2474.395112][T14675] ? load_image+0x400/0x400 [ 2474.399662][T14675] ? __lock_acquire+0x7d10/0x7d10 [ 2474.404742][T14675] should_fail_ex+0x399/0x4d0 [ 2474.409483][T14675] _copy_from_user+0x2c/0x170 [ 2474.414383][T14675] __sys_bpf+0x2ea/0x780 [ 2474.418689][T14675] ? bpf_link_show_fdinfo+0x380/0x380 [ 2474.424133][T14675] ? lock_chain_count+0x20/0x20 [ 2474.429060][T14675] __x64_sys_bpf+0x78/0x90 [ 2474.433540][T14675] do_syscall_64+0x4c/0xa0 [ 2474.438011][T14675] ? clear_bhb_loop+0x60/0xb0 [ 2474.442734][T14675] ? clear_bhb_loop+0x60/0xb0 [ 2474.447467][T14675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2474.453428][T14675] RIP: 0033:0x7fc15319acb9 [ 2474.457893][T14675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2474.477600][T14675] RSP: 002b:00007fc15411a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2474.486093][T14675] RAX: ffffffffffffffda RBX: 00007fc153415fa0 RCX: 00007fc15319acb9 [ 2474.494112][T14675] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 2474.502128][T14675] RBP: 00007fc15411a090 R08: 0000000000000000 R09: 0000000000000000 [ 2474.510146][T14675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2474.518156][T14675] R13: 00007fc153416038 R14: 00007fc153415fa0 R15: 00007fffba83c8c8 [ 2474.526173][T14675] [ 2475.445908][T14707] IPv6: NLM_F_CREATE should be specified when creating new route [ 2475.453955][T14707] netlink: 1 bytes leftover after parsing attributes in process `syz.3.14126'. [ 2475.566447][T14706] netlink: 'syz.3.14126': attribute type 10 has an invalid length. [ 2475.584844][T14706] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.14126'. [ 2475.609093][T14711] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14128'. [ 2475.886617][T14712] netlink: 'syz.0.14128': attribute type 39 has an invalid length. [ 2475.925839][T14712] device veth0_macvtap left promiscuous mode [ 2476.266563][T14729] IPv6: NLM_F_CREATE should be specified when creating new route [ 2476.338124][T14729] netlink: 1 bytes leftover after parsing attributes in process `syz.1.14132'. [ 2476.541889][T14734] syzkaller0: create flow: hash 3447206917 index 2 [ 2476.730288][T14738] netlink: 'syz.4.14138': attribute type 7 has an invalid length. [ 2476.763682][T14742] IPv6: NLM_F_CREATE should be specified when creating new route [ 2476.855097][T23755] syzkaller0: tun_net_xmit 76 [ 2476.860129][T23755] syzkaller0: tun_net_xmit 48 [ 2476.884553][T23754] syzkaller0: tun_net_xmit 76 [ 2476.974481][T23755] syzkaller0: tun_net_xmit 76 [ 2477.037735][T14730] syzkaller0: delete flow: hash 3447206917 index 2 [ 2477.054646][T23755] syzkaller0: tun_net_xmit 76 [ 2477.902719][T14765] netlink: 'syz.1.14147': attribute type 10 has an invalid length. [ 2477.912112][T14765] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.14147'. [ 2480.284964][T14764] netlink: 1 bytes leftover after parsing attributes in process `syz.1.14147'. [ 2480.303693][T14781] netlink: 1 bytes leftover after parsing attributes in process `syz.3.14150'. [ 2480.649323][T14787] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14154'. [ 2480.942433][ T8142] Bluetooth: hci5: unexpected subevent 0x04 length: 150 > 11 [ 2481.861334][T14806] netlink: 'syz.1.14161': attribute type 21 has an invalid length. [ 2481.882538][T14810] netlink: 'syz.4.14163': attribute type 16 has an invalid length. [ 2481.909562][T14810] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14163'. [ 2482.114980][T14821] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14166'. [ 2482.223828][T14821] netlink: 'syz.4.14166': attribute type 10 has an invalid length. [ 2482.244418][T14821] netlink: 3819 bytes leftover after parsing attributes in process `syz.4.14166'. [ 2482.265376][T14820] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14176'. [ 2482.266402][T14828] netlink: 'syz.2.14168': attribute type 4 has an invalid length. [ 2482.298175][T14828] netlink: 'syz.2.14168': attribute type 3 has an invalid length. [ 2482.310180][T14828] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.14168'. [ 2483.160350][ T8142] Bluetooth: hci4: unexpected subevent 0x04 length: 150 > 11 [ 2483.941578][T14879] device syzkaller0 entered promiscuous mode [ 2483.982107][T14877] IPv6: NLM_F_CREATE should be specified when creating new route [ 2484.000364][T14877] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14183'. [ 2484.027092][T14881] netlink: 'syz.2.14183': attribute type 10 has an invalid length. [ 2484.064970][T14881] netlink: 3819 bytes leftover after parsing attributes in process `syz.2.14183'. [ 2488.081008][T14902] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14191'. [ 2488.243575][ T8142] Bluetooth: hci2: ISO packet too small [ 2488.583093][T14925] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14200'. [ 2489.233290][T14937] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.14206'. [ 2489.693226][T14942] device syzkaller0 entered promiscuous mode [ 2489.748127][T14943] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14207'. [ 2490.857981][T14968] netlink: 'syz.1.14213': attribute type 3 has an invalid length. [ 2490.912967][T14968] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.14213'. [ 2493.102041][T14995] netlink: 'syz.3.14223': attribute type 2 has an invalid length. [ 2493.125232][T14995] netlink: 'syz.3.14223': attribute type 1 has an invalid length. [ 2493.145062][T14995] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.14223'. [ 2495.013022][T14966] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14214'. [ 2495.022555][T14975] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14216'. [ 2495.281633][T15006] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14227'. [ 2495.418138][T15004] netlink: 'syz.3.14226': attribute type 3 has an invalid length. [ 2495.444382][T15004] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.14226'. [ 2495.537395][T15004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14226'. [ 2495.596312][T15004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2496.349491][T15033] FAULT_INJECTION: forcing a failure. [ 2496.349491][T15033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2496.435940][T15033] CPU: 1 PID: 15033 Comm: syz.3.14237 Not tainted syzkaller #0 [ 2496.443583][T15033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2496.453683][T15033] Call Trace: [ 2496.457001][T15033] [ 2496.459971][T15033] dump_stack_lvl+0x188/0x24e [ 2496.464747][T15033] ? show_regs_print_info+0x12/0x12 [ 2496.469998][T15033] ? load_image+0x400/0x400 [ 2496.474561][T15033] ? __lock_acquire+0x7d10/0x7d10 [ 2496.479653][T15033] should_fail_ex+0x399/0x4d0 [ 2496.484400][T15033] _copy_from_user+0x2c/0x170 [ 2496.489132][T15033] iovec_from_user+0x143/0x360 [ 2496.493941][T15033] __import_iovec+0x6d/0x500 [ 2496.498590][T15033] ? __might_fault+0xc2/0x120 [ 2496.503318][T15033] import_iovec+0x6f/0xa0 [ 2496.507702][T15033] ___sys_sendmsg+0x252/0x360 [ 2496.512449][T15033] ? __sys_sendmsg+0x290/0x290 [ 2496.517289][T15033] ? ktime_get_real_ts64+0x440/0x440 [ 2496.522652][T15033] __se_sys_sendmsg+0x1bb/0x2a0 [ 2496.527560][T15033] ? __x64_sys_sendmsg+0x80/0x80 [ 2496.532570][T15033] ? lockdep_hardirqs_on+0x94/0x140 [ 2496.537826][T15033] do_syscall_64+0x4c/0xa0 [ 2496.542292][T15033] ? clear_bhb_loop+0x60/0xb0 [ 2496.547018][T15033] ? clear_bhb_loop+0x60/0xb0 [ 2496.551753][T15033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2496.557717][T15033] RIP: 0033:0x7ff475f9acb9 [ 2496.562174][T15033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2496.581834][T15033] RSP: 002b:00007ff476e35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2496.590294][T15033] RAX: ffffffffffffffda RBX: 00007ff476215fa0 RCX: 00007ff475f9acb9 [ 2496.598307][T15033] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2496.606336][T15033] RBP: 00007ff476e35090 R08: 0000000000000000 R09: 0000000000000000 [ 2496.614354][T15033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2496.622455][T15033] R13: 00007ff476216038 R14: 00007ff476215fa0 R15: 00007ffee7ba4218 [ 2496.630492][T15033] [ 2497.016156][T15042] device syzkaller0 entered promiscuous mode [ 2497.059419][T15045] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14242'. [ 2497.391286][T15053] netlink: 'syz.1.14245': attribute type 2 has an invalid length. [ 2497.400118][T15053] netlink: 'syz.1.14245': attribute type 1 has an invalid length. [ 2497.414328][T15053] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.14245'. [ 2497.429678][T15053] netlink: 'syz.1.14245': attribute type 3 has an invalid length. [ 2497.444329][T15053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14245'. [ 2499.024497][T15073] netlink: 188 bytes leftover after parsing attributes in process `syz.2.14251'. [ 2499.033833][T15073] ksmbd: Unknown IPC event: 10, ignore. [ 2500.539605][T15083] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14255'. [ 2503.100398][T15143] netlink: 'syz.1.14274': attribute type 1 has an invalid length. [ 2503.133182][T15143] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.14274'. [ 2503.448487][T15158] FAULT_INJECTION: forcing a failure. [ 2503.448487][T15158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2503.515411][T15158] CPU: 0 PID: 15158 Comm: syz.1.14280 Not tainted syzkaller #0 [ 2503.523051][T15158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2503.533149][T15158] Call Trace: [ 2503.536473][T15158] [ 2503.539428][T15158] dump_stack_lvl+0x188/0x24e [ 2503.544144][T15158] ? show_regs_print_info+0x12/0x12 [ 2503.549378][T15158] ? load_image+0x400/0x400 [ 2503.553912][T15158] ? __lock_acquire+0x7d10/0x7d10 [ 2503.558972][T15158] should_fail_ex+0x399/0x4d0 [ 2503.563688][T15158] _copy_from_user+0x2c/0x170 [ 2503.568412][T15158] iovec_from_user+0x143/0x360 [ 2503.573209][T15158] __import_iovec+0x6d/0x500 [ 2503.577829][T15158] ? __might_fault+0xc2/0x120 [ 2503.582535][T15158] import_iovec+0x6f/0xa0 [ 2503.586890][T15158] ___sys_sendmsg+0x252/0x360 [ 2503.591605][T15158] ? __sys_sendmsg+0x290/0x290 [ 2503.596413][T15158] ? ktime_get_real_ts64+0x440/0x440 [ 2503.601747][T15158] __se_sys_sendmsg+0x1bb/0x2a0 [ 2503.606667][T15158] ? __x64_sys_sendmsg+0x80/0x80 [ 2503.611650][T15158] ? lockdep_hardirqs_on+0x94/0x140 [ 2503.616886][T15158] do_syscall_64+0x4c/0xa0 [ 2503.621332][T15158] ? clear_bhb_loop+0x60/0xb0 [ 2503.626038][T15158] ? clear_bhb_loop+0x60/0xb0 [ 2503.630828][T15158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2503.636747][T15158] RIP: 0033:0x7fc15319acb9 [ 2503.641187][T15158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2503.660813][T15158] RSP: 002b:00007fc15411a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2503.669274][T15158] RAX: ffffffffffffffda RBX: 00007fc153415fa0 RCX: 00007fc15319acb9 [ 2503.677271][T15158] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2503.685270][T15158] RBP: 00007fc15411a090 R08: 0000000000000000 R09: 0000000000000000 [ 2503.693260][T15158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2503.701253][T15158] R13: 00007fc153416038 R14: 00007fc153415fa0 R15: 00007fffba83c8c8 [ 2503.709281][T15158] [ 2507.223753][T15251] bond0: (slave team0): Error: Slave device does not support XDP [ 2510.194349][T15270] netlink: 'syz.1.14317': attribute type 13 has an invalid length. [ 2510.241318][T15271] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.14315'. [ 2510.297749][T15269] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14316'. [ 2510.488763][T15282] netlink: 'syz.1.14320': attribute type 29 has an invalid length. [ 2510.516903][T15282] netlink: 'syz.1.14320': attribute type 29 has an invalid length. [ 2510.553074][T15285] netlink: 'syz.1.14320': attribute type 29 has an invalid length. [ 2510.695890][T15279] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14318'. [ 2511.253101][T15302] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.14327'. [ 2511.314352][T15302] openvswitch: netlink: Flow actions attr not present in new flow. [ 2512.111731][T15313] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14332'. [ 2515.377899][T15346] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14345'. [ 2515.405693][T15353] netlink: 'syz.1.14347': attribute type 1 has an invalid length. [ 2515.413748][T15353] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.14347'. [ 2515.611445][T15355] FAULT_INJECTION: forcing a failure. [ 2515.611445][T15355] name failslab, interval 1, probability 0, space 0, times 0 [ 2515.744923][T15355] CPU: 0 PID: 15355 Comm: syz.3.14350 Not tainted syzkaller #0 [ 2515.752582][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2515.762713][T15355] Call Trace: [ 2515.766044][T15355] [ 2515.769021][T15355] dump_stack_lvl+0x188/0x24e [ 2515.773774][T15355] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2515.780005][T15355] ? show_regs_print_info+0x12/0x12 [ 2515.785268][T15355] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2515.791496][T15355] should_fail_ex+0x399/0x4d0 [ 2515.796245][T15355] should_failslab+0x5/0x20 [ 2515.800821][T15355] slab_pre_alloc_hook+0x59/0x310 [ 2515.805900][T15355] kmem_cache_alloc_node+0x5a/0x320 [ 2515.811147][T15355] ? __alloc_skb+0xfc/0x7e0 [ 2515.815708][T15355] __alloc_skb+0xfc/0x7e0 [ 2515.820096][T15355] netlink_dump+0x1ee/0xd00 [ 2515.824685][T15355] ? netlink_lookup+0x200/0x200 [ 2515.829610][T15355] ? genl_start+0x2e3/0x4a0 [ 2515.834186][T15355] __netlink_dump_start+0x537/0x6f0 [ 2515.839456][T15355] genl_family_rcv_msg_dumpit+0x228/0x3c0 [ 2515.845243][T15355] ? genl_rcv_msg+0x790/0x790 [ 2515.849986][T15355] ? aa_get_newest_label+0xf9/0x5b0 [ 2515.855236][T15355] ? end_current_label_crit_section+0x170/0x170 [ 2515.861512][T15355] ? genl_family_rcv_msg_doit+0x330/0x330 [ 2515.867271][T15355] ? genl_start+0x4a0/0x4a0 [ 2515.871810][T15355] ? genl_lock_dumpit+0x90/0x90 [ 2515.876709][T15355] ? apparmor_capable+0x12c/0x190 [ 2515.881767][T15355] ? bpf_lsm_capable+0x5/0x10 [ 2515.886478][T15355] ? security_capable+0x85/0xb0 [ 2515.891371][T15355] genl_rcv_msg+0x5cb/0x790 [ 2515.895919][T15355] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2515.902133][T15355] ? genl_bind+0x360/0x360 [ 2515.906592][T15355] ? batadv_algo_select+0xc0/0xc0 [ 2515.911662][T15355] netlink_rcv_skb+0x1fb/0x450 [ 2515.916469][T15355] ? genl_bind+0x360/0x360 [ 2515.920932][T15355] ? netlink_ack+0x1170/0x1170 [ 2515.925742][T15355] ? down_read+0x1a8/0x2d0 [ 2515.930199][T15355] genl_rcv+0x24/0x40 [ 2515.934261][T15355] netlink_unicast+0x74d/0x8d0 [ 2515.939082][T15355] netlink_sendmsg+0x8ad/0xbd0 [ 2515.943999][T15355] ? netlink_getsockopt+0x550/0x550 [ 2515.949241][T15355] ? aa_sock_msg_perm+0x94/0x150 [ 2515.954212][T15355] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2515.959527][T15355] ? security_socket_sendmsg+0x7c/0xa0 [ 2515.965036][T15355] ? netlink_getsockopt+0x550/0x550 [ 2515.970274][T15355] ____sys_sendmsg+0x5be/0x970 [ 2515.975082][T15355] ? __sys_sendmsg_sock+0x30/0x30 [ 2515.980137][T15355] ? __import_iovec+0x315/0x500 [ 2515.985039][T15355] ? import_iovec+0x6f/0xa0 [ 2515.989680][T15355] ___sys_sendmsg+0x2a2/0x360 [ 2515.994421][T15355] ? __sys_sendmsg+0x290/0x290 [ 2515.999285][T15355] __se_sys_sendmsg+0x1bb/0x2a0 [ 2516.004200][T15355] ? ct_nmi_exit+0x145/0x1c0 [ 2516.008848][T15355] ? __x64_sys_sendmsg+0x80/0x80 [ 2516.013846][T15355] ? lockdep_hardirqs_on+0x94/0x140 [ 2516.019121][T15355] do_syscall_64+0x4c/0xa0 [ 2516.023603][T15355] ? clear_bhb_loop+0x60/0xb0 [ 2516.028341][T15355] ? clear_bhb_loop+0x60/0xb0 [ 2516.033064][T15355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2516.039000][T15355] RIP: 0033:0x7ff475f9acb9 [ 2516.043455][T15355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2516.063186][T15355] RSP: 002b:00007ff476e35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2516.071677][T15355] RAX: ffffffffffffffda RBX: 00007ff476215fa0 RCX: 00007ff475f9acb9 [ 2516.079676][T15355] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2516.087681][T15355] RBP: 00007ff476e35090 R08: 0000000000000000 R09: 0000000000000000 [ 2516.095682][T15355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2516.103679][T15355] R13: 00007ff476216038 R14: 00007ff476215fa0 R15: 00007ffee7ba4218 [ 2516.111715][T15355] [ 2518.917198][T15378] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14356'. [ 2518.929174][T15380] netlink: 'syz.4.14358': attribute type 3 has an invalid length. [ 2518.938898][T15380] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14358'. [ 2519.023940][T15376] bond0: (slave team0): Error: Slave device does not support XDP [ 2519.230424][T15386] netlink: 'syz.4.14361': attribute type 21 has an invalid length. [ 2519.379587][T15392] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14362'. [ 2519.445623][T15400] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14365'. [ 2519.785072][T15399] delete_channel: no stack [ 2519.916310][T15405] delete_channel: no stack [ 2520.899358][T15436] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14381'. [ 2520.946419][T15440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14382'. [ 2523.042605][T15441] netlink: 'syz.3.14380': attribute type 21 has an invalid length. [ 2523.078543][T15441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14380'. [ 2523.121664][T15440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14382'. [ 2523.299728][T15434] delete_channel: no stack [ 2523.402041][T15451] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14385'. [ 2523.405355][T15450] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.14383'. [ 2525.054650][T15471] FAULT_INJECTION: forcing a failure. [ 2525.054650][T15471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2525.114675][T15471] CPU: 0 PID: 15471 Comm: syz.3.14392 Not tainted syzkaller #0 [ 2525.122313][T15471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2525.132418][T15471] Call Trace: [ 2525.135745][T15471] [ 2525.138723][T15471] dump_stack_lvl+0x188/0x24e [ 2525.143463][T15471] ? show_regs_print_info+0x12/0x12 [ 2525.148726][T15471] ? load_image+0x400/0x400 [ 2525.153273][T15471] ? __lock_acquire+0x7d10/0x7d10 [ 2525.158352][T15471] ? __virt_addr_valid+0x188/0x540 [ 2525.163517][T15471] should_fail_ex+0x399/0x4d0 [ 2525.168282][T15471] _copy_from_user+0x2c/0x170 [ 2525.173016][T15471] bpf_test_init+0xde/0x140 [ 2525.177593][T15471] bpf_prog_test_run_xdp+0x484/0xf10 [ 2525.182923][T15471] ? dev_put+0x80/0x80 [ 2525.187035][T15471] ? dev_put+0x80/0x80 [ 2525.191137][T15471] bpf_prog_test_run+0x31e/0x390 [ 2525.196110][T15471] __sys_bpf+0x62b/0x780 [ 2525.200388][T15471] ? bpf_link_show_fdinfo+0x380/0x380 [ 2525.205806][T15471] ? lock_chain_count+0x20/0x20 [ 2525.210799][T15471] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2525.216823][T15471] __x64_sys_bpf+0x78/0x90 [ 2525.221275][T15471] do_syscall_64+0x4c/0xa0 [ 2525.225718][T15471] ? clear_bhb_loop+0x60/0xb0 [ 2525.230421][T15471] ? clear_bhb_loop+0x60/0xb0 [ 2525.235130][T15471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2525.241053][T15471] RIP: 0033:0x7ff475f9acb9 [ 2525.245502][T15471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2525.265157][T15471] RSP: 002b:00007ff476e35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2525.273706][T15471] RAX: ffffffffffffffda RBX: 00007ff476215fa0 RCX: 00007ff475f9acb9 [ 2525.281729][T15471] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2525.289728][T15471] RBP: 00007ff476e35090 R08: 0000000000000000 R09: 0000000000000000 [ 2525.297726][T15471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2525.305726][T15471] R13: 00007ff476216038 R14: 00007ff476215fa0 R15: 00007ffee7ba4218 [ 2525.313748][T15471] [ 2526.507026][T15494] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14401'. [ 2527.487244][T15526] FAULT_INJECTION: forcing a failure. [ 2527.487244][T15526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2527.534668][T15526] CPU: 1 PID: 15526 Comm: syz.0.14412 Not tainted syzkaller #0 [ 2527.542310][T15526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2527.552417][T15526] Call Trace: [ 2527.555730][T15526] [ 2527.558687][T15526] dump_stack_lvl+0x188/0x24e [ 2527.563404][T15526] ? show_regs_print_info+0x12/0x12 [ 2527.568635][T15526] ? load_image+0x400/0x400 [ 2527.573166][T15526] ? __lock_acquire+0x7d10/0x7d10 [ 2527.578236][T15526] ? __virt_addr_valid+0x188/0x540 [ 2527.583387][T15526] should_fail_ex+0x399/0x4d0 [ 2527.588103][T15526] _copy_from_user+0x2c/0x170 [ 2527.592810][T15526] iovec_from_user+0x143/0x360 [ 2527.597609][T15526] __import_iovec+0x6d/0x500 [ 2527.602237][T15526] import_iovec+0x6f/0xa0 [ 2527.606608][T15526] ___sys_sendmsg+0x252/0x360 [ 2527.611333][T15526] ? __sys_sendmsg+0x290/0x290 [ 2527.616147][T15526] ? __lock_acquire+0x7d10/0x7d10 [ 2527.621241][T15526] __se_sys_sendmsg+0x1bb/0x2a0 [ 2527.626137][T15526] ? __x64_sys_sendmsg+0x80/0x80 [ 2527.631126][T15526] ? lockdep_hardirqs_on+0x94/0x140 [ 2527.636374][T15526] do_syscall_64+0x4c/0xa0 [ 2527.640912][T15526] ? clear_bhb_loop+0x60/0xb0 [ 2527.645621][T15526] ? clear_bhb_loop+0x60/0xb0 [ 2527.650329][T15526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2527.656254][T15526] RIP: 0033:0x7fb04d99acb9 [ 2527.660699][T15526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2527.680343][T15526] RSP: 002b:00007fb04e83b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2527.688786][T15526] RAX: ffffffffffffffda RBX: 00007fb04dc15fa0 RCX: 00007fb04d99acb9 [ 2527.696784][T15526] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2527.704784][T15526] RBP: 00007fb04e83b090 R08: 0000000000000000 R09: 0000000000000000 [ 2527.712786][T15526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2527.720780][T15526] R13: 00007fb04dc16038 R14: 00007fb04dc15fa0 R15: 00007fff77cb6a28 [ 2527.728828][T15526] [ 2528.071188][T15540] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14418'. [ 2528.453974][T15548] FAULT_INJECTION: forcing a failure. [ 2528.453974][T15548] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.467406][T15548] CPU: 1 PID: 15548 Comm: syz.1.14421 Not tainted syzkaller #0 [ 2528.475103][T15548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2528.485208][T15548] Call Trace: [ 2528.488525][T15548] [ 2528.491502][T15548] dump_stack_lvl+0x188/0x24e [ 2528.496248][T15548] ? show_regs_print_info+0x12/0x12 [ 2528.501504][T15548] ? load_image+0x400/0x400 [ 2528.506060][T15548] ? __might_sleep+0xd0/0xd0 [ 2528.510694][T15548] ? __lock_acquire+0x7d10/0x7d10 [ 2528.515784][T15548] should_fail_ex+0x399/0x4d0 [ 2528.520540][T15548] should_failslab+0x5/0x20 [ 2528.525104][T15548] slab_pre_alloc_hook+0x59/0x310 [ 2528.530188][T15548] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2528.535974][T15548] __kmem_cache_alloc_node+0x4f/0x260 [ 2528.541408][T15548] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2528.547183][T15548] __kmalloc+0xa0/0x240 [ 2528.551402][T15548] tomoyo_realpath_from_path+0xdf/0x5d0 [ 2528.557017][T15548] ? tomoyo_path_number_perm+0x205/0x650 [ 2528.562703][T15548] tomoyo_path_number_perm+0x22f/0x650 [ 2528.568225][T15548] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2528.573757][T15548] ? ksys_write+0x1c0/0x250 [ 2528.578311][T15548] ? common_file_perm+0x171/0x1c0 [ 2528.583424][T15548] ? __fget_files+0x28/0x4b0 [ 2528.588075][T15548] ? __fget_files+0x28/0x4b0 [ 2528.592736][T15548] security_file_ioctl+0x6c/0xa0 [ 2528.597738][T15548] __se_sys_ioctl+0x48/0x170 [ 2528.602385][T15548] do_syscall_64+0x4c/0xa0 [ 2528.606844][T15548] ? clear_bhb_loop+0x60/0xb0 [ 2528.611578][T15548] ? clear_bhb_loop+0x60/0xb0 [ 2528.616322][T15548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2528.622278][T15548] RIP: 0033:0x7fc15319acb9 [ 2528.626747][T15548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2528.646406][T15548] RSP: 002b:00007fc15411a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2528.654877][T15548] RAX: ffffffffffffffda RBX: 00007fc153415fa0 RCX: 00007fc15319acb9 [ 2528.662921][T15548] RDX: 0000200000000080 RSI: 000000000000541b RDI: 0000000000000005 [ 2528.670939][T15548] RBP: 00007fc15411a090 R08: 0000000000000000 R09: 0000000000000000 [ 2528.678958][T15548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2528.686973][T15548] R13: 00007fc153416038 R14: 00007fc153415fa0 R15: 00007fffba83c8c8 [ 2528.695010][T15548] [ 2528.705100][T15548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2529.015034][T15560] netlink: 'syz.4.14425': attribute type 13 has an invalid length. [ 2529.030968][T15560] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14425'. [ 2529.064542][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.064619][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.700364][T15583] netlink: 160 bytes leftover after parsing attributes in process `syz.2.14432'. [ 2529.851173][T15583] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2530.147328][T15595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14437'. [ 2530.443124][T15609] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14441'. [ 2537.470095][T15654] netlink: 'syz.4.14452': attribute type 10 has an invalid length. [ 2537.494536][T15669] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.14456'. [ 2537.741480][T15679] FAULT_INJECTION: forcing a failure. [ 2537.741480][T15679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2537.786002][T15679] CPU: 1 PID: 15679 Comm: syz.2.14459 Not tainted syzkaller #0 [ 2537.793637][T15679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2537.803743][T15679] Call Trace: [ 2537.807151][T15679] [ 2537.810116][T15679] dump_stack_lvl+0x188/0x24e [ 2537.814855][T15679] ? show_regs_print_info+0x12/0x12 [ 2537.820103][T15679] ? load_image+0x400/0x400 [ 2537.824655][T15679] ? __lock_acquire+0x7d10/0x7d10 [ 2537.829723][T15679] should_fail_ex+0x399/0x4d0 [ 2537.834453][T15679] _copy_from_user+0x2c/0x170 [ 2537.839179][T15679] ___sys_sendmsg+0x1c3/0x360 [ 2537.843895][T15679] ? __sys_sendmsg+0x290/0x290 [ 2537.848707][T15679] ? __lock_acquire+0x7d10/0x7d10 [ 2537.853817][T15679] __se_sys_sendmsg+0x1bb/0x2a0 [ 2537.858730][T15679] ? __x64_sys_sendmsg+0x80/0x80 [ 2537.863723][T15679] ? lockdep_hardirqs_on+0x94/0x140 [ 2537.868973][T15679] do_syscall_64+0x4c/0xa0 [ 2537.873425][T15679] ? clear_bhb_loop+0x60/0xb0 [ 2537.878145][T15679] ? clear_bhb_loop+0x60/0xb0 [ 2537.882861][T15679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2537.888794][T15679] RIP: 0033:0x7f2919b9acb9 [ 2537.893235][T15679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2537.913075][T15679] RSP: 002b:00007f291a977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2537.923433][T15679] RAX: ffffffffffffffda RBX: 00007f2919e15fa0 RCX: 00007f2919b9acb9 [ 2537.931437][T15679] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 2537.939436][T15679] RBP: 00007f291a977090 R08: 0000000000000000 R09: 0000000000000000 [ 2537.947439][T15679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2537.955451][T15679] R13: 00007f2919e16038 R14: 00007f2919e15fa0 R15: 00007ffe709b11f8 [ 2537.963461][T15679] [ 2538.062739][T15677] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14460'. [ 2539.391448][T15715] netlink: 'syz.2.14470': attribute type 21 has an invalid length. [ 2539.431156][T15715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14470'. [ 2539.471383][T15715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14470'. [ 2539.558163][T15719] netlink: 'syz.2.14470': attribute type 10 has an invalid length. [ 2539.957849][T15737] netlink: 'syz.3.14475': attribute type 21 has an invalid length. [ 2541.834314][T15752] device veth0_vlan left promiscuous mode [ 2541.841528][T15752] device veth0_vlan entered promiscuous mode [ 2542.050296][T15776] syz_tun: refused to change device tx_queue_len [ 2542.180213][T15779] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.14491'. [ 2542.264266][T15779] netlink: zone id is out of range [ 2542.269492][T15779] netlink: zone id is out of range [ 2542.362082][T15782] netlink: 'syz.0.14491': attribute type 3 has an invalid length. [ 2542.375395][T15782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14491'. [ 2542.422675][T15779] netlink: zone id is out of range [ 2542.448623][T15779] netlink: zone id is out of range [ 2542.459945][T15779] netlink: zone id is out of range [ 2542.517264][T15786] device veth0_vlan left promiscuous mode [ 2542.534248][T15779] netlink: zone id is out of range [ 2542.539495][T15779] netlink: zone id is out of range [ 2542.552418][T15779] netlink: zone id is out of range [ 2542.565238][T15786] device veth0_vlan entered promiscuous mode [ 2542.571684][T15779] netlink: zone id is out of range [ 2542.617210][T15779] netlink: zone id is out of range [ 2546.093896][T15893] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14507'. [ 2546.339326][T15910] netlink: 'syz.4.14512': attribute type 29 has an invalid length. [ 2546.367983][T15910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14512'. [ 2546.410024][T15910] netlink: 'syz.4.14512': attribute type 29 has an invalid length. [ 2546.448995][T15910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14512'. [ 2546.589507][T15916] netlink: 'syz.2.14514': attribute type 29 has an invalid length. [ 2546.672632][T15916] netlink: 'syz.2.14514': attribute type 29 has an invalid length. [ 2546.698187][T15922] netlink: 164 bytes leftover after parsing attributes in process `syz.4.14515'. [ 2547.511142][T15947] netlink: 'syz.2.14525': attribute type 29 has an invalid length. [ 2547.536464][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14525'. [ 2547.593380][T15947] netlink: 'syz.2.14525': attribute type 29 has an invalid length. [ 2547.631905][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14525'. [ 2547.768431][T15953] netlink: 'syz.0.14527': attribute type 1 has an invalid length. [ 2548.387664][T15975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2548.436152][T15975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2548.463624][T15975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2548.483344][T15975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2549.143037][T15996] netlink: 'syz.4.14540': attribute type 29 has an invalid length. [ 2549.164178][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14540'. [ 2549.213524][T15996] netlink: 'syz.4.14540': attribute type 29 has an invalid length. [ 2549.237663][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14540'. [ 2549.817032][T16024] netlink: 'syz.2.14551': attribute type 29 has an invalid length. [ 2550.672436][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14556'. [ 2550.711832][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14556'. [ 2551.024894][T16051] net_ratelimit: 3660 callbacks suppressed [ 2551.024919][T16051] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2552.435721][T16093] __nla_validate_parse: 1 callbacks suppressed [ 2552.435741][T16093] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14569'. [ 2552.567583][T16096] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14572'. [ 2552.854388][T16106] validate_nla: 7 callbacks suppressed [ 2552.854410][T16106] netlink: 'syz.1.14571': attribute type 29 has an invalid length. [ 2552.957744][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14571'. [ 2557.449991][T16106] netlink: 'syz.1.14571': attribute type 29 has an invalid length. [ 2557.458037][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14571'. [ 2557.473591][T16115] netlink: 'syz.3.14576': attribute type 6 has an invalid length. [ 2557.484369][T16115] netlink: 140 bytes leftover after parsing attributes in process `syz.3.14576'. [ 2557.509846][T16128] netlink: 3748 bytes leftover after parsing attributes in process `syz.2.14578'. [ 2557.649003][T16127] Ÿë: port 3(syz_tun) entered blocking state [ 2557.664562][T16127] Ÿë: port 3(syz_tun) entered disabled state [ 2557.672331][T16127] device syz_tun entered promiscuous mode [ 2558.829611][T16139] netlink: 'syz.3.14581': attribute type 2 has an invalid length. [ 2558.838455][T16139] netlink: 'syz.3.14581': attribute type 8 has an invalid length. [ 2558.846431][T16139] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14581'. [ 2558.856806][T16142] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.14582'. [ 2558.889430][T16151] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14585'. [ 2559.037177][T16159] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14586'. [ 2561.617171][T16178] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.14591'. [ 2562.910848][T16184] netlink: 'syz.2.14594': attribute type 2 has an invalid length. [ 2563.056200][T16195] FAULT_INJECTION: forcing a failure. [ 2563.056200][T16195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2563.105242][T16196] device bridge_slave_1 left promiscuous mode [ 2563.174385][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 2563.192732][T16195] CPU: 0 PID: 16195 Comm: syz.4.14593 Not tainted syzkaller #0 [ 2563.200372][T16195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2563.210494][T16195] Call Trace: [ 2563.213833][T16195] [ 2563.216816][T16195] dump_stack_lvl+0x188/0x24e [ 2563.221598][T16195] ? show_regs_print_info+0x12/0x12 [ 2563.226866][T16195] ? load_image+0x400/0x400 [ 2563.231463][T16195] ? __lock_acquire+0x7d10/0x7d10 [ 2563.236556][T16195] ? __fget_files+0x28/0x4b0 [ 2563.241230][T16195] should_fail_ex+0x399/0x4d0 [ 2563.245986][T16195] _copy_from_user+0x2c/0x170 [ 2563.250740][T16195] generic_map_update_batch+0x4f3/0x810 [ 2563.256382][T16195] ? rcu_read_unlock+0xa0/0xa0 [ 2563.261319][T16195] ? __fdget+0x17c/0x200 [ 2563.265632][T16195] ? rcu_read_unlock+0xa0/0xa0 [ 2563.270511][T16195] bpf_map_do_batch+0x466/0x600 [ 2563.275514][T16195] __sys_bpf+0x6f7/0x780 [ 2563.279805][T16195] ? bpf_link_show_fdinfo+0x380/0x380 [ 2563.285291][T16195] ? lock_chain_count+0x20/0x20 [ 2563.290212][T16195] __x64_sys_bpf+0x78/0x90 [ 2563.294673][T16195] do_syscall_64+0x4c/0xa0 [ 2563.299127][T16195] ? clear_bhb_loop+0x60/0xb0 [ 2563.303849][T16195] ? clear_bhb_loop+0x60/0xb0 [ 2563.308567][T16195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2563.314496][T16195] RIP: 0033:0x7fd4bef9acb9 [ 2563.318948][T16195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2563.338596][T16195] RSP: 002b:00007fd4bfdce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2563.347054][T16195] RAX: ffffffffffffffda RBX: 00007fd4bf216090 RCX: 00007fd4bef9acb9 [ 2563.355064][T16195] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 2563.363079][T16195] RBP: 00007fd4bfdce090 R08: 0000000000000000 R09: 0000000000000000 [ 2563.371083][T16195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2563.379089][T16195] R13: 00007fd4bf216128 R14: 00007fd4bf216090 R15: 00007ffe0be705b8 [ 2563.387124][T16195] [ 2563.398914][T16203] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14597'. [ 2563.421090][T16196] device bridge_slave_0 left promiscuous mode [ 2563.464550][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 2563.741647][T16203] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14597'. [ 2563.773332][T16202] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14597'. [ 2564.095028][T16210] netlink: 'syz.1.14600': attribute type 6 has an invalid length. [ 2564.103283][T16210] netlink: 140 bytes leftover after parsing attributes in process `syz.1.14600'. [ 2564.211932][T16213] FAULT_INJECTION: forcing a failure. [ 2564.211932][T16213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2564.376001][T16213] CPU: 0 PID: 16213 Comm: syz.4.14602 Not tainted syzkaller #0 [ 2564.383637][T16213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2564.393732][T16213] Call Trace: [ 2564.397047][T16213] [ 2564.400000][T16213] dump_stack_lvl+0x188/0x24e [ 2564.404714][T16213] ? show_regs_print_info+0x12/0x12 [ 2564.409947][T16213] ? load_image+0x400/0x400 [ 2564.414479][T16213] ? __lock_acquire+0x7d10/0x7d10 [ 2564.419542][T16213] should_fail_ex+0x399/0x4d0 [ 2564.424263][T16213] _copy_to_user+0x2c/0x130 [ 2564.428802][T16213] bpf_test_finish+0x198/0x600 [ 2564.433605][T16213] ? convert___skb_to_skb+0x580/0x580 [ 2564.439005][T16213] ? convert_skb_to___skb+0x420/0x420 [ 2564.444406][T16213] ? bpf_test_init+0x119/0x140 [ 2564.449196][T16213] bpf_prog_test_run_xdp+0x80a/0xf10 [ 2564.454519][T16213] ? dev_put+0x80/0x80 [ 2564.458643][T16213] ? dev_put+0x80/0x80 [ 2564.462759][T16213] bpf_prog_test_run+0x31e/0x390 [ 2564.467731][T16213] __sys_bpf+0x62b/0x780 [ 2564.472005][T16213] ? bpf_link_show_fdinfo+0x380/0x380 [ 2564.477418][T16213] ? lock_chain_count+0x20/0x20 [ 2564.482305][T16213] __x64_sys_bpf+0x78/0x90 [ 2564.486761][T16213] do_syscall_64+0x4c/0xa0 [ 2564.491209][T16213] ? clear_bhb_loop+0x60/0xb0 [ 2564.495929][T16213] ? clear_bhb_loop+0x60/0xb0 [ 2564.500643][T16213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2564.506560][T16213] RIP: 0033:0x7fd4bef9acb9 [ 2564.510999][T16213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2564.530629][T16213] RSP: 002b:00007fd4bfdef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2564.539079][T16213] RAX: ffffffffffffffda RBX: 00007fd4bf215fa0 RCX: 00007fd4bef9acb9 [ 2564.547079][T16213] RDX: 0000000000000057 RSI: 0000200000000240 RDI: 000000000000000a [ 2564.555070][T16213] RBP: 00007fd4bfdef090 R08: 0000000000000000 R09: 0000000000000000 [ 2564.563063][T16213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2564.571060][T16213] R13: 00007fd4bf216038 R14: 00007fd4bf215fa0 R15: 00007ffe0be705b8 [ 2564.579246][T16213] [ 2564.983669][T16228] netlink: 'syz.2.14617': attribute type 6 has an invalid length. [ 2565.007794][T16228] netlink: 140 bytes leftover after parsing attributes in process `syz.2.14617'. [ 2565.176998][T16230] device syzkaller0 entered promiscuous mode [ 2565.328766][T16239] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.14608'. [ 2568.298150][T16259] bridge0: port 3(bond0) entered disabled state [ 2568.305978][T16259] device bridge_slave_1 left promiscuous mode [ 2568.312195][T16259] bridge0: port 2(bridge_slave_1) entered disabled state [ 2568.321757][T16259] device bridge_slave_0 left promiscuous mode [ 2568.328758][T16259] bridge0: port 1(bridge_slave_0) entered disabled state [ 2568.503417][T16266] device syzkaller0 entered promiscuous mode [ 2568.769793][T16282] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2568.776333][T16282] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2569.656826][T16297] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.14626'. [ 2572.201338][T16317] device bridge_slave_1 left promiscuous mode [ 2572.249813][T16317] bridge0: port 2(bridge_slave_1) entered disabled state [ 2572.328217][T16317] device bridge_slave_0 left promiscuous mode [ 2572.364498][T16317] bridge0: port 1(bridge_slave_0) entered disabled state [ 2572.386935][ T8142] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 2572.583096][T16323] netlink: 'syz.2.14632': attribute type 10 has an invalid length. [ 2572.614212][T16323] netlink: 55 bytes leftover after parsing attributes in process `syz.2.14632'. [ 2573.216079][T16326] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14636'. [ 2573.665777][T16348] netlink: 'syz.1.14641': attribute type 4 has an invalid length. [ 2573.717072][T16348] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.14641'. [ 2573.730872][T16353] FAULT_INJECTION: forcing a failure. [ 2573.730872][T16353] name failslab, interval 1, probability 0, space 0, times 0 [ 2573.753578][T16353] CPU: 0 PID: 16353 Comm: syz.0.14643 Not tainted syzkaller #0 [ 2573.761225][T16353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2573.771327][T16353] Call Trace: [ 2573.774644][T16353] [ 2573.777612][T16353] dump_stack_lvl+0x188/0x24e [ 2573.782350][T16353] ? show_regs_print_info+0x12/0x12 [ 2573.787607][T16353] ? load_image+0x400/0x400 [ 2573.792154][T16353] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2573.798289][T16353] should_fail_ex+0x399/0x4d0 [ 2573.803049][T16353] should_failslab+0x5/0x20 [ 2573.807608][T16353] slab_pre_alloc_hook+0x59/0x310 [ 2573.812691][T16353] kmem_cache_alloc+0x56/0x2f0 [ 2573.817501][T16353] ? __build_skb+0x2a/0x3c0 [ 2573.822068][T16353] __build_skb+0x2a/0x3c0 [ 2573.826462][T16353] build_skb+0x1e/0x230 [ 2573.830677][T16353] bpf_prog_test_run_skb+0x37e/0x12a0 [ 2573.836097][T16353] ? __fget_files+0x28/0x4b0 [ 2573.840742][T16353] ? __fget_files+0x43d/0x4b0 [ 2573.845480][T16353] ? cpu_online+0xa0/0xa0 [ 2573.849851][T16353] bpf_prog_test_run+0x31e/0x390 [ 2573.854841][T16353] __sys_bpf+0x62b/0x780 [ 2573.859144][T16353] ? bpf_link_show_fdinfo+0x380/0x380 [ 2573.864572][T16353] ? lock_chain_count+0x20/0x20 [ 2573.869485][T16353] __x64_sys_bpf+0x78/0x90 [ 2573.873960][T16353] do_syscall_64+0x4c/0xa0 [ 2573.878479][T16353] ? clear_bhb_loop+0x60/0xb0 [ 2573.883216][T16353] ? clear_bhb_loop+0x60/0xb0 [ 2573.888090][T16353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2573.894045][T16353] RIP: 0033:0x7fb04d99acb9 [ 2573.898505][T16353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2573.918158][T16353] RSP: 002b:00007fb04e83b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2573.926628][T16353] RAX: ffffffffffffffda RBX: 00007fb04dc15fa0 RCX: 00007fb04d99acb9 [ 2573.934669][T16353] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2573.942706][T16353] RBP: 00007fb04e83b090 R08: 0000000000000000 R09: 0000000000000000 [ 2573.950738][T16353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2573.958761][T16353] R13: 00007fb04dc16038 R14: 00007fb04dc15fa0 R15: 00007fff77cb6a28 [ 2573.966807][T16353] [ 2574.024716][T16357] netlink: 'syz.2.14644': attribute type 21 has an invalid length. [ 2574.052810][T16357] netlink: 'syz.2.14644': attribute type 4 has an invalid length. [ 2574.061468][T16357] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14644'. [ 2574.263177][T16363] FAULT_INJECTION: forcing a failure. [ 2574.263177][T16363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2574.294279][T16363] CPU: 0 PID: 16363 Comm: syz.2.14648 Not tainted syzkaller #0 [ 2574.301923][T16363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2574.312005][T16363] Call Trace: [ 2574.315315][T16363] [ 2574.318282][T16363] dump_stack_lvl+0x188/0x24e [ 2574.322997][T16363] ? show_regs_print_info+0x12/0x12 [ 2574.328223][T16363] ? load_image+0x400/0x400 [ 2574.332765][T16363] ? __lock_acquire+0x7d10/0x7d10 [ 2574.337819][T16363] ? lockdep_hardirqs_on+0x94/0x140 [ 2574.343054][T16363] should_fail_ex+0x399/0x4d0 [ 2574.347778][T16363] _copy_from_user+0x2c/0x170 [ 2574.352484][T16363] __copy_msghdr+0x3b7/0x580 [ 2574.357113][T16363] ___sys_sendmsg+0x210/0x360 [ 2574.361825][T16363] ? __sys_sendmsg+0x290/0x290 [ 2574.366647][T16363] ? ktime_get_real_ts64+0x440/0x440 [ 2574.371979][T16363] __se_sys_sendmsg+0x1bb/0x2a0 [ 2574.376881][T16363] ? __x64_sys_sendmsg+0x80/0x80 [ 2574.381864][T16363] ? lockdep_hardirqs_on+0x94/0x140 [ 2574.387100][T16363] do_syscall_64+0x4c/0xa0 [ 2574.391549][T16363] ? clear_bhb_loop+0x60/0xb0 [ 2574.396254][T16363] ? clear_bhb_loop+0x60/0xb0 [ 2574.400967][T16363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2574.406884][T16363] RIP: 0033:0x7f2919b9acb9 [ 2574.411330][T16363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2574.430959][T16363] RSP: 002b:00007f291a977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2574.439405][T16363] RAX: ffffffffffffffda RBX: 00007f2919e15fa0 RCX: 00007f2919b9acb9 [ 2574.447400][T16363] RDX: 0000000000040844 RSI: 00002000000000c0 RDI: 0000000000000008 [ 2574.455393][T16363] RBP: 00007f291a977090 R08: 0000000000000000 R09: 0000000000000000 [ 2574.463385][T16363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2574.471377][T16363] R13: 00007f2919e16038 R14: 00007f2919e15fa0 R15: 00007ffe709b11f8 [ 2574.479385][T16363] [ 2574.723137][T16374] device bridge_slave_1 left promiscuous mode [ 2574.739887][T16374] bridge0: port 2(bridge_slave_1) entered disabled state [ 2574.769109][T16374] device bridge_slave_0 left promiscuous mode [ 2574.820470][T16374] bridge0: port 1(bridge_slave_0) entered disabled state [ 2575.591149][T16386] device syzkaller0 entered promiscuous mode [ 2575.847672][T16400] FAULT_INJECTION: forcing a failure. [ 2575.847672][T16400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2575.892933][T16400] CPU: 0 PID: 16400 Comm: syz.2.14661 Not tainted syzkaller #0 [ 2575.900578][T16400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2575.910697][T16400] Call Trace: [ 2575.914022][T16400] [ 2575.917010][T16400] dump_stack_lvl+0x188/0x24e [ 2575.921761][T16400] ? show_regs_print_info+0x12/0x12 [ 2575.927024][T16400] ? load_image+0x400/0x400 [ 2575.931586][T16400] ? __lock_acquire+0x7d10/0x7d10 [ 2575.936674][T16400] ? snprintf+0xe5/0x140 [ 2575.940975][T16400] should_fail_ex+0x399/0x4d0 [ 2575.945861][T16400] _copy_to_user+0x2c/0x130 [ 2575.950513][T16400] simple_read_from_buffer+0xe3/0x150 [ 2575.955959][T16400] proc_fail_nth_read+0x1a6/0x220 [ 2575.961053][T16400] ? proc_fault_inject_write+0x310/0x310 [ 2575.966745][T16400] ? fsnotify_perm+0x248/0x550 [ 2575.971579][T16400] ? proc_fault_inject_write+0x310/0x310 [ 2575.977275][T16400] vfs_read+0x2de/0xa00 [ 2575.981512][T16400] ? kernel_read+0x1e0/0x1e0 [ 2575.986173][T16400] ? __fget_files+0x28/0x4b0 [ 2575.990814][T16400] ? __fget_files+0x28/0x4b0 [ 2575.995466][T16400] ? __fget_files+0x43d/0x4b0 [ 2576.000206][T16400] ? __fdget_pos+0x2ae/0x360 [ 2576.004869][T16400] ? ksys_read+0x71/0x250 [ 2576.009264][T16400] ksys_read+0x14c/0x250 [ 2576.013570][T16400] ? vfs_write+0xa30/0xa30 [ 2576.018042][T16400] ? lockdep_hardirqs_on+0x94/0x140 [ 2576.023304][T16400] do_syscall_64+0x4c/0xa0 [ 2576.027779][T16400] ? clear_bhb_loop+0x60/0xb0 [ 2576.032510][T16400] ? clear_bhb_loop+0x60/0xb0 [ 2576.037245][T16400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2576.043283][T16400] RIP: 0033:0x7f2919b5b58e [ 2576.047748][T16400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2576.067412][T16400] RSP: 002b:00007f291a976fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2576.075894][T16400] RAX: ffffffffffffffda RBX: 00007f291a9776c0 RCX: 00007f2919b5b58e [ 2576.083935][T16400] RDX: 000000000000000f RSI: 00007f291a9770a0 RDI: 0000000000000004 [ 2576.091959][T16400] RBP: 00007f291a977090 R08: 0000000000000000 R09: 0000000000000000 [ 2576.099989][T16400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2576.108116][T16400] R13: 00007f2919e16038 R14: 00007f2919e15fa0 R15: 00007ffe709b11f8 [ 2576.116162][T16400] [ 2576.280172][T16411] FAULT_INJECTION: forcing a failure. [ 2576.280172][T16411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2576.304275][T16411] CPU: 1 PID: 16411 Comm: syz.2.14665 Not tainted syzkaller #0 [ 2576.311913][T16411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2576.322104][T16411] Call Trace: [ 2576.325420][T16411] [ 2576.328384][T16411] dump_stack_lvl+0x188/0x24e [ 2576.333135][T16411] ? show_regs_print_info+0x12/0x12 [ 2576.338366][T16411] ? load_image+0x400/0x400 [ 2576.342907][T16411] ? __lock_acquire+0x7d10/0x7d10 [ 2576.347957][T16411] should_fail_ex+0x399/0x4d0 [ 2576.352668][T16411] _copy_from_user+0x2c/0x170 [ 2576.357383][T16411] tipc_setsockopt+0x261/0x960 [ 2576.362195][T16411] ? tipc_shutdown+0x560/0x560 [ 2576.366991][T16411] ? aa_sock_opt_perm+0x74/0x100 [ 2576.371971][T16411] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 2576.377549][T16411] ? security_socket_setsockopt+0x7a/0xa0 [ 2576.383314][T16411] ? tipc_shutdown+0x560/0x560 [ 2576.388107][T16411] __sys_setsockopt+0x2bf/0x3d0 [ 2576.393006][T16411] __x64_sys_setsockopt+0xb1/0xc0 [ 2576.398067][T16411] do_syscall_64+0x4c/0xa0 [ 2576.402515][T16411] ? clear_bhb_loop+0x60/0xb0 [ 2576.407225][T16411] ? clear_bhb_loop+0x60/0xb0 [ 2576.411939][T16411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2576.417860][T16411] RIP: 0033:0x7f2919b9acb9 [ 2576.422296][T16411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2576.441928][T16411] RSP: 002b:00007f291a977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2576.450373][T16411] RAX: ffffffffffffffda RBX: 00007f2919e15fa0 RCX: 00007f2919b9acb9 [ 2576.458393][T16411] RDX: 000000000000008a RSI: 000000000000010f RDI: 0000000000000006 [ 2576.466391][T16411] RBP: 00007f291a977090 R08: 0000000000000004 R09: 0000000000000000 [ 2576.474383][T16411] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 2576.482399][T16411] R13: 00007f2919e16038 R14: 00007f2919e15fa0 R15: 00007ffe709b11f8 [ 2576.490430][T16411] [ 2578.671190][T16404] netlink: 'syz.3.14663': attribute type 10 has an invalid length. [ 2578.693613][T16417] netlink: 'syz.2.14666': attribute type 21 has an invalid length. [ 2578.972044][T16429] FAULT_INJECTION: forcing a failure. [ 2578.972044][T16429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2579.080143][T16429] CPU: 0 PID: 16429 Comm: syz.2.14670 Not tainted syzkaller #0 [ 2579.087803][T16429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2579.097909][T16429] Call Trace: [ 2579.101241][T16429] [ 2579.104267][T16429] dump_stack_lvl+0x188/0x24e [ 2579.109040][T16429] ? show_regs_print_info+0x12/0x12 [ 2579.114303][T16429] ? load_image+0x400/0x400 [ 2579.118865][T16429] ? __lock_acquire+0x7d10/0x7d10 [ 2579.123955][T16429] ? cap_capable+0x195/0x230 [ 2579.128607][T16429] should_fail_ex+0x399/0x4d0 [ 2579.133354][T16429] _copy_from_user+0x2c/0x170 [ 2579.138131][T16429] __sys_bpf+0x2ea/0x780 [ 2579.142410][T16429] ? bpf_link_show_fdinfo+0x380/0x380 [ 2579.147835][T16429] ? lock_chain_count+0x20/0x20 [ 2579.152732][T16429] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2579.158753][T16429] __x64_sys_bpf+0x78/0x90 [ 2579.163207][T16429] do_syscall_64+0x4c/0xa0 [ 2579.167661][T16429] ? clear_bhb_loop+0x60/0xb0 [ 2579.172364][T16429] ? clear_bhb_loop+0x60/0xb0 [ 2579.177067][T16429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2579.182992][T16429] RIP: 0033:0x7f2919b9acb9 [ 2579.187431][T16429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2579.207063][T16429] RSP: 002b:00007f291a977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2579.215506][T16429] RAX: ffffffffffffffda RBX: 00007f2919e15fa0 RCX: 00007f2919b9acb9 [ 2579.223506][T16429] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 2579.231508][T16429] RBP: 00007f291a977090 R08: 0000000000000000 R09: 0000000000000000 [ 2579.239505][T16429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2579.247498][T16429] R13: 00007f2919e16038 R14: 00007f2919e15fa0 R15: 00007ffe709b11f8 [ 2579.255850][T16429] [ 2579.316806][T16423] device syzkaller0 entered promiscuous mode [ 2580.611840][T16473] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14686'. [ 2580.630114][T16473] openvswitch: netlink: Message has 6 unknown bytes. [ 2583.023881][T16478] device syzkaller0 entered promiscuous mode [ 2583.045242][T16482] netlink: 'syz.4.14689': attribute type 21 has an invalid length. [ 2583.053307][T16482] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14689'. [ 2583.425519][T16495] FAULT_INJECTION: forcing a failure. [ 2583.425519][T16495] name failslab, interval 1, probability 0, space 0, times 0 [ 2583.464379][T16495] CPU: 1 PID: 16495 Comm: syz.4.14695 Not tainted syzkaller #0 [ 2583.472012][T16495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2583.482103][T16495] Call Trace: [ 2583.485414][T16495] [ 2583.488367][T16495] dump_stack_lvl+0x188/0x24e [ 2583.493082][T16495] ? show_regs_print_info+0x12/0x12 [ 2583.498318][T16495] ? load_image+0x400/0x400 [ 2583.502854][T16495] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2583.508877][T16495] should_fail_ex+0x399/0x4d0 [ 2583.513598][T16495] should_failslab+0x5/0x20 [ 2583.518156][T16495] slab_pre_alloc_hook+0x59/0x310 [ 2583.523217][T16495] kmem_cache_alloc+0x56/0x2f0 [ 2583.528006][T16495] ? __build_skb+0x2a/0x3c0 [ 2583.532551][T16495] __build_skb+0x2a/0x3c0 [ 2583.536914][T16495] build_skb+0x1e/0x230 [ 2583.541098][T16495] bpf_prog_test_run_skb+0x37e/0x12a0 [ 2583.546501][T16495] ? __fget_files+0x28/0x4b0 [ 2583.551131][T16495] ? __fget_files+0x43d/0x4b0 [ 2583.555856][T16495] ? cpu_online+0xa0/0xa0 [ 2583.560219][T16495] bpf_prog_test_run+0x31e/0x390 [ 2583.565201][T16495] __sys_bpf+0x62b/0x780 [ 2583.569482][T16495] ? bpf_link_show_fdinfo+0x380/0x380 [ 2583.574903][T16495] ? lock_chain_count+0x20/0x20 [ 2583.579886][T16495] __x64_sys_bpf+0x78/0x90 [ 2583.584340][T16495] do_syscall_64+0x4c/0xa0 [ 2583.588786][T16495] ? clear_bhb_loop+0x60/0xb0 [ 2583.593501][T16495] ? clear_bhb_loop+0x60/0xb0 [ 2583.598213][T16495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2583.604140][T16495] RIP: 0033:0x7fd4bef9acb9 [ 2583.608585][T16495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2583.628222][T16495] RSP: 002b:00007fd4bfdef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2583.636686][T16495] RAX: ffffffffffffffda RBX: 00007fd4bf215fa0 RCX: 00007fd4bef9acb9 [ 2583.644693][T16495] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2583.652784][T16495] RBP: 00007fd4bfdef090 R08: 0000000000000000 R09: 0000000000000000 [ 2583.660779][T16495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2583.668772][T16495] R13: 00007fd4bf216038 R14: 00007fd4bf215fa0 R15: 00007ffe0be705b8 [ 2583.676792][T16495] [ 2583.916259][T16489] delete_channel: no stack [ 2584.233136][T16507] FAULT_INJECTION: forcing a failure. [ 2584.233136][T16507] name failslab, interval 1, probability 0, space 0, times 0 [ 2584.252441][T16507] CPU: 1 PID: 16507 Comm: syz.0.14699 Not tainted syzkaller #0 [ 2584.260068][T16507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2584.270189][T16507] Call Trace: [ 2584.273506][T16507] [ 2584.276477][T16507] dump_stack_lvl+0x188/0x24e [ 2584.281223][T16507] ? show_regs_print_info+0x12/0x12 [ 2584.286480][T16507] ? load_image+0x400/0x400 [ 2584.291039][T16507] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2584.297263][T16507] should_fail_ex+0x399/0x4d0 [ 2584.302006][T16507] should_failslab+0x5/0x20 [ 2584.306574][T16507] slab_pre_alloc_hook+0x59/0x310 [ 2584.311659][T16507] kmem_cache_alloc+0x56/0x2f0 [ 2584.316468][T16507] ? __build_skb+0x2a/0x3c0 [ 2584.321033][T16507] __build_skb+0x2a/0x3c0 [ 2584.325423][T16507] build_skb+0x1e/0x230 [ 2584.329632][T16507] bpf_prog_test_run_skb+0x37e/0x12a0 [ 2584.335055][T16507] ? __fget_files+0x28/0x4b0 [ 2584.339713][T16507] ? __fget_files+0x43d/0x4b0 [ 2584.344460][T16507] ? cpu_online+0xa0/0xa0 [ 2584.348833][T16507] bpf_prog_test_run+0x31e/0x390 [ 2584.353827][T16507] __sys_bpf+0x62b/0x780 [ 2584.358137][T16507] ? bpf_link_show_fdinfo+0x380/0x380 [ 2584.363582][T16507] ? lock_chain_count+0x20/0x20 [ 2584.368488][T16507] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2584.374533][T16507] __x64_sys_bpf+0x78/0x90 [ 2584.379000][T16507] do_syscall_64+0x4c/0xa0 [ 2584.383462][T16507] ? clear_bhb_loop+0x60/0xb0 [ 2584.388179][T16507] ? clear_bhb_loop+0x60/0xb0 [ 2584.392902][T16507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2584.398841][T16507] RIP: 0033:0x7fb04d99acb9 [ 2584.403325][T16507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2584.423064][T16507] RSP: 002b:00007fb04e83b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2584.431543][T16507] RAX: ffffffffffffffda RBX: 00007fb04dc15fa0 RCX: 00007fb04d99acb9 [ 2584.439596][T16507] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2584.447641][T16507] RBP: 00007fb04e83b090 R08: 0000000000000000 R09: 0000000000000000 [ 2584.455660][T16507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2584.463705][T16507] R13: 00007fb04dc16038 R14: 00007fb04dc15fa0 R15: 00007fff77cb6a28 [ 2584.471744][T16507] [ 2586.621695][T16497] netlink: 'syz.1.14694': attribute type 21 has an invalid length. [ 2586.635732][T16503] netlink: 188 bytes leftover after parsing attributes in process `syz.4.14698'. [ 2586.754216][T16522] device syzkaller0 entered promiscuous mode [ 2587.149190][T16546] FAULT_INJECTION: forcing a failure. [ 2587.149190][T16546] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.162438][T16546] CPU: 1 PID: 16546 Comm: syz.4.14709 Not tainted syzkaller #0 [ 2587.170049][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2587.180161][T16546] Call Trace: [ 2587.183490][T16546] [ 2587.186461][T16546] dump_stack_lvl+0x188/0x24e [ 2587.191282][T16546] ? show_regs_print_info+0x12/0x12 [ 2587.196535][T16546] ? load_image+0x400/0x400 [ 2587.201103][T16546] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2587.207167][T16546] should_fail_ex+0x399/0x4d0 [ 2587.211913][T16546] should_failslab+0x5/0x20 [ 2587.216475][T16546] slab_pre_alloc_hook+0x59/0x310 [ 2587.221572][T16546] kmem_cache_alloc+0x56/0x2f0 [ 2587.226386][T16546] ? __build_skb+0x2a/0x3c0 [ 2587.230961][T16546] __build_skb+0x2a/0x3c0 [ 2587.235357][T16546] build_skb+0x1e/0x230 [ 2587.239576][T16546] bpf_prog_test_run_skb+0x37e/0x12a0 [ 2587.244997][T16546] ? __fget_files+0x28/0x4b0 [ 2587.249642][T16546] ? __fget_files+0x43d/0x4b0 [ 2587.254386][T16546] ? cpu_online+0xa0/0xa0 [ 2587.258775][T16546] bpf_prog_test_run+0x31e/0x390 [ 2587.263784][T16546] __sys_bpf+0x62b/0x780 [ 2587.268079][T16546] ? bpf_link_show_fdinfo+0x380/0x380 [ 2587.273520][T16546] ? lock_chain_count+0x20/0x20 [ 2587.278425][T16546] __x64_sys_bpf+0x78/0x90 [ 2587.282886][T16546] do_syscall_64+0x4c/0xa0 [ 2587.287337][T16546] ? clear_bhb_loop+0x60/0xb0 [ 2587.292087][T16546] ? clear_bhb_loop+0x60/0xb0 [ 2587.296804][T16546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2587.302747][T16546] RIP: 0033:0x7fd4bef9acb9 [ 2587.307194][T16546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2587.326834][T16546] RSP: 002b:00007fd4bfdef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2587.335281][T16546] RAX: ffffffffffffffda RBX: 00007fd4bf215fa0 RCX: 00007fd4bef9acb9 [ 2587.343277][T16546] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2587.351280][T16546] RBP: 00007fd4bfdef090 R08: 0000000000000000 R09: 0000000000000000 [ 2587.359290][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2587.367295][T16546] R13: 00007fd4bf216038 R14: 00007fd4bf215fa0 R15: 00007ffe0be705b8 [ 2587.375307][T16546] [ 2590.476166][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.482679][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.558655][T16539] netlink: 'syz.1.14707': attribute type 10 has an invalid length. [ 2591.595773][T16539] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2591.624022][T16543] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14705'. [ 2591.639838][T16557] FAULT_INJECTION: forcing a failure. [ 2591.639838][T16557] name failslab, interval 1, probability 0, space 0, times 0 [ 2591.664347][T16557] CPU: 0 PID: 16557 Comm: syz.2.14712 Not tainted syzkaller #0 [ 2591.672000][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2591.682108][T16557] Call Trace: [ 2591.685427][T16557] [ 2591.688397][T16557] dump_stack_lvl+0x188/0x24e [ 2591.693136][T16557] ? show_regs_print_info+0x12/0x12 [ 2591.698394][T16557] ? load_image+0x400/0x400 [ 2591.702950][T16557] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2591.708994][T16557] should_fail_ex+0x399/0x4d0 [ 2591.713731][T16557] should_failslab+0x5/0x20 [ 2591.718291][T16557] slab_pre_alloc_hook+0x59/0x310 [ 2591.723373][T16557] kmem_cache_alloc+0x56/0x2f0 [ 2591.728189][T16557] ? __build_skb+0x2a/0x3c0 [ 2591.732747][T16557] __build_skb+0x2a/0x3c0 [ 2591.737142][T16557] build_skb+0x1e/0x230 [ 2591.741365][T16557] bpf_prog_test_run_skb+0x37e/0x12a0 [ 2591.746792][T16557] ? __fget_files+0x28/0x4b0 [ 2591.751425][T16557] ? __fget_files+0x43d/0x4b0 [ 2591.756154][T16557] ? cpu_online+0xa0/0xa0 [ 2591.760514][T16557] bpf_prog_test_run+0x31e/0x390 [ 2591.765535][T16557] __sys_bpf+0x62b/0x780 [ 2591.769818][T16557] ? bpf_link_show_fdinfo+0x380/0x380 [ 2591.775234][T16557] ? lock_chain_count+0x20/0x20 [ 2591.780114][T16557] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2591.786132][T16557] __x64_sys_bpf+0x78/0x90 [ 2591.790579][T16557] do_syscall_64+0x4c/0xa0 [ 2591.795029][T16557] ? clear_bhb_loop+0x60/0xb0 [ 2591.799732][T16557] ? clear_bhb_loop+0x60/0xb0 [ 2591.804444][T16557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2591.810370][T16557] RIP: 0033:0x7f2919b9acb9 [ 2591.814816][T16557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2591.834458][T16557] RSP: 002b:00007f291a977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2591.842899][T16557] RAX: ffffffffffffffda RBX: 00007f2919e15fa0 RCX: 00007f2919b9acb9 [ 2591.850894][T16557] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 2591.858889][T16557] RBP: 00007f291a977090 R08: 0000000000000000 R09: 0000000000000000 [ 2591.866883][T16557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2591.874880][T16557] R13: 00007f2919e16038 R14: 00007f2919e15fa0 R15: 00007ffe709b11f8 [ 2591.882888][T16557] [ 2592.773240][T16578] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 2592.822963][T16578] syzkaller1: group set to 778 [ 2593.303410][T16593] netlink: 'syz.2.14724': attribute type 7 has an invalid length. [ 2593.580039][T16577] delete_channel: no stack [ 2593.733784][T16598] netlink: 'syz.2.14727': attribute type 10 has an invalid length. [ 2593.851873][T16598] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2594.166049][T16617] netlink: 'syz.1.14733': attribute type 16 has an invalid length. [ 2594.174051][T16617] netlink: 168 bytes leftover after parsing attributes in process `syz.1.14733'. [ 2594.341331][T16626] sctp: [Deprecated]: syz.2.14737 (pid 16626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2594.341331][T16626] Use struct sctp_sack_info instead [ 2594.686852][T16637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14741'. [ 2594.712876][T16637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14741'. [ 2594.905075][T16638] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14741'. [ 2594.960056][T16638] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14741'. [ 2595.375616][T16649] FAULT_INJECTION: forcing a failure. [ 2595.375616][T16649] name failslab, interval 1, probability 0, space 0, times 0 [ 2595.406687][T16633] delete_channel: no stack [ 2595.458604][T16649] CPU: 0 PID: 16649 Comm: syz.2.14744 Not tainted syzkaller #0 [ 2595.466255][T16649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2595.476354][T16649] Call Trace: [ 2595.479671][T16649] [ 2595.482628][T16649] dump_stack_lvl+0x188/0x24e [ 2595.487346][T16649] ? show_regs_print_info+0x12/0x12 [ 2595.492587][T16649] ? load_image+0x400/0x400 [ 2595.497130][T16649] ? perf_trace_preemptirq_template+0xa8/0x320 [ 2595.503325][T16649] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2595.509345][T16649] should_fail_ex+0x399/0x4d0 [ 2595.514080][T16649] should_failslab+0x5/0x20 [ 2595.518629][T16649] slab_pre_alloc_hook+0x59/0x310 [ 2595.523682][T16649] ? lockdep_hardirqs_on+0x94/0x140 [ 2595.528918][T16649] kmem_cache_alloc+0x56/0x2f0 [ 2595.533703][T16649] ? __build_skb+0x2a/0x3c0 [ 2595.538241][T16649] __build_skb+0x2a/0x3c0 [ 2595.542693][T16649] build_skb+0x1e/0x230 [ 2595.546882][T16649] bpf_prog_test_run_skb+0x37e/0x12a0 [ 2595.552285][T16649] ? lockdep_hardirqs_on+0x94/0x140 [ 2595.557627][T16649] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2595.563817][T16649] ? cpu_online+0xa0/0xa0 [ 2595.568179][T16649] bpf_prog_test_run+0x31e/0x390 [ 2595.573152][T16649] __sys_bpf+0x62b/0x780 [ 2595.577429][T16649] ? bpf_link_show_fdinfo+0x380/0x380 [ 2595.582942][T16649] ? lock_chain_count+0x20/0x20 [ 2595.587828][T16649] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2595.593843][T16649] __x64_sys_bpf+0x78/0x90 [ 2595.598294][T16649] do_syscall_64+0x4c/0xa0 [ 2595.602745][T16649] ? clear_bhb_loop+0x60/0xb0 [ 2595.607454][T16649] ? clear_bhb_loop+0x60/0xb0 [ 2595.612156][T16649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2595.618072][T16649] RIP: 0033:0x7f2919b9acb9 [ 2595.622517][T16649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2595.642239][T16649] RSP: 002b:00007f291a977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2595.650679][T16649] RAX: ffffffffffffffda RBX: 00007f2919e15fa0 RCX: 00007f2919b9acb9 [ 2595.658671][T16649] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2595.666667][T16649] RBP: 00007f291a977090 R08: 0000000000000000 R09: 0000000000000000 [ 2595.674664][T16649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2595.682656][T16649] R13: 00007f2919e16038 R14: 00007f2919e15fa0 R15: 00007ffe709b11f8 [ 2595.690680][T16649] [ 2596.019168][T16653] netlink: 'syz.0.14747': attribute type 10 has an invalid length. [ 2596.145284][T16653] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2596.490905][T16677] FAULT_INJECTION: forcing a failure. [ 2596.490905][T16677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2596.540673][T16677] CPU: 1 PID: 16677 Comm: syz.3.14753 Not tainted syzkaller #0 [ 2596.548327][T16677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2596.558629][T16677] Call Trace: [ 2596.561946][T16677] [ 2596.564919][T16677] dump_stack_lvl+0x188/0x24e [ 2596.569689][T16677] ? show_regs_print_info+0x12/0x12 [ 2596.574956][T16677] ? load_image+0x400/0x400 [ 2596.579507][T16677] ? __might_fault+0xa6/0x120 [ 2596.584233][T16677] ? format_decode+0xb0b/0x1300 [ 2596.589136][T16677] should_fail_ex+0x399/0x4d0 [ 2596.593879][T16677] copyin+0x1b/0x120 [ 2596.597834][T16677] _copy_from_iter+0x447/0x1130 [ 2596.602763][T16677] ? copyout_mc+0x110/0x110 [ 2596.607330][T16677] ? txopt_get+0x76/0x3f0 [ 2596.611723][T16677] ? txopt_get+0x76/0x3f0 [ 2596.616112][T16677] ? txopt_get+0x340/0x3f0 [ 2596.620599][T16677] ? tomoyo_check_acl+0x378/0x3f0 [ 2596.625684][T16677] ? fl6_sock_lookup+0xc0/0xc0 [ 2596.630507][T16677] rawv6_probe_proto_opt+0x166/0x300 [ 2596.635847][T16677] rawv6_sendmsg+0xa71/0x1700 [ 2596.640594][T16677] ? compat_rawv6_ioctl+0x60/0x60 [ 2596.645767][T16677] ? aa_sk_perm+0x81f/0x950 [ 2596.650354][T16677] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 2596.656867][T16677] ? inet_sendmsg+0x78/0x2f0 [ 2596.661526][T16677] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2596.666858][T16677] ? security_socket_sendmsg+0x7c/0xa0 [ 2596.672392][T16677] ? inet_send_prepare+0x260/0x260 [ 2596.677580][T16677] ____sys_sendmsg+0x5be/0x970 [ 2596.682412][T16677] ? __sys_sendmsg_sock+0x30/0x30 [ 2596.687508][T16677] ? __import_iovec+0x315/0x500 [ 2596.692418][T16677] ? import_iovec+0x6f/0xa0 [ 2596.697057][T16677] ___sys_sendmsg+0x2a2/0x360 [ 2596.701800][T16677] ? __sys_sendmsg+0x290/0x290 [ 2596.706648][T16677] ? __lock_acquire+0x7d10/0x7d10 [ 2596.711753][T16677] __se_sys_sendmsg+0x1bb/0x2a0 [ 2596.716664][T16677] ? __x64_sys_sendmsg+0x80/0x80 [ 2596.721675][T16677] ? lockdep_hardirqs_on+0x94/0x140 [ 2596.726960][T16677] do_syscall_64+0x4c/0xa0 [ 2596.731428][T16677] ? clear_bhb_loop+0x60/0xb0 [ 2596.736174][T16677] ? clear_bhb_loop+0x60/0xb0 [ 2596.740901][T16677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2596.746841][T16677] RIP: 0033:0x7ff475f9acb9 [ 2596.751300][T16677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2596.770972][T16677] RSP: 002b:00007ff476df3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2596.779445][T16677] RAX: ffffffffffffffda RBX: 00007ff476216180 RCX: 00007ff475f9acb9 [ 2596.787492][T16677] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 2596.795517][T16677] RBP: 00007ff476df3090 R08: 0000000000000000 R09: 0000000000000000 [ 2596.803542][T16677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2596.811600][T16677] R13: 00007ff476216218 R14: 00007ff476216180 R15: 00007ffee7ba4218 [ 2596.819639][T16677] [ 2599.229663][T16689] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.14759'. [ 2599.253993][T16693] netlink: 'syz.1.14761': attribute type 21 has an invalid length. [ 2599.265532][T16693] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14761'. [ 2599.293372][T16688] FAULT_INJECTION: forcing a failure. [ 2599.293372][T16688] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2599.318016][T16688] CPU: 0 PID: 16688 Comm: syz.3.14760 Not tainted syzkaller #0 [ 2599.325685][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2599.335800][T16688] Call Trace: [ 2599.339127][T16688] [ 2599.342107][T16688] dump_stack_lvl+0x188/0x24e [ 2599.346858][T16688] ? show_regs_print_info+0x12/0x12 [ 2599.352122][T16688] ? load_image+0x400/0x400 [ 2599.356687][T16688] ? __lock_acquire+0x7d10/0x7d10 [ 2599.361870][T16688] should_fail_ex+0x399/0x4d0 [ 2599.366616][T16688] prepare_alloc_pages+0x1e2/0x5f0 [ 2599.371788][T16688] __alloc_pages+0x130/0x4f0 [ 2599.376443][T16688] ? zone_statistics+0x170/0x170 [ 2599.381435][T16688] ? lockdep_hardirqs_on+0x94/0x140 [ 2599.386692][T16688] __folio_alloc+0xe/0x30 [ 2599.391060][T16688] vma_alloc_folio+0x4a3/0x900 [ 2599.395868][T16688] wp_page_copy+0x28b/0x1680 [ 2599.400509][T16688] ? do_wp_page+0x67f/0x1680 [ 2599.405143][T16688] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 2599.410815][T16688] handle_mm_fault+0x1d19/0x3ee0 [ 2599.415777][T16688] ? mt_find+0x157/0x830 [ 2599.420063][T16688] ? numa_migrate_prep+0x250/0x250 [ 2599.425221][T16688] ? lock_mm_and_find_vma+0xae/0x2f0 [ 2599.430586][T16688] do_user_addr_fault+0x51f/0xb10 [ 2599.435678][T16688] exc_page_fault+0x60/0x100 [ 2599.440411][T16688] asm_exc_page_fault+0x22/0x30 [ 2599.445290][T16688] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 2599.451910][T16688] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 2599.471545][T16688] RSP: 0018:ffffc9000552f628 EFLAGS: 00050206 [ 2599.477639][T16688] RAX: ffffffff840e9a01 RBX: 0000000000000d24 RCX: 0000000000000d24 [ 2599.485728][T16688] RDX: 0000000000000d24 RSI: ffff88803e588150 RDI: 0000200000001500 [ 2599.493730][T16688] RBP: 0000000000000000 R08: ffff88803e588e73 R09: 1ffff11007cb11ce [ 2599.501726][T16688] R10: dffffc0000000000 R11: ffffed1007cb11cf R12: 00007fffffffe2dc [ 2599.509722][T16688] R13: 0000000000000d24 R14: ffff88803e588150 R15: 0000200000001500 [ 2599.517758][T16688] ? copyout+0x21/0x120 [ 2599.521979][T16688] copyout+0xe7/0x120 [ 2599.526017][T16688] _copy_to_iter+0x48b/0x1040 [ 2599.530749][T16688] ? iov_iter_init+0x1f0/0x1f0 [ 2599.535554][T16688] ? __virt_addr_valid+0x188/0x540 [ 2599.540701][T16688] ? __virt_addr_valid+0x465/0x540 [ 2599.545852][T16688] ? __phys_addr_symbol+0x2b/0x70 [ 2599.550909][T16688] ? __check_object_size+0x500/0xa40 [ 2599.556230][T16688] __skb_datagram_iter+0xde/0x740 [ 2599.561332][T16688] ? skb_copy_datagram_iter+0x290/0x290 [ 2599.566948][T16688] skb_copy_datagram_iter+0xd7/0x290 [ 2599.572275][T16688] tipc_recvmsg+0x7c8/0x1400 [ 2599.576917][T16688] ? tipc_send_packet+0x90/0x90 [ 2599.581801][T16688] ? aa_sock_msg_perm+0x94/0x150 [ 2599.586774][T16688] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 2599.592086][T16688] ? security_socket_recvmsg+0x85/0xb0 [ 2599.597583][T16688] ? tipc_send_packet+0x90/0x90 [ 2599.602472][T16688] ____sys_recvmsg+0x2cb/0x5e0 [ 2599.607284][T16688] ? __sys_recvmsg_sock+0x40/0x40 [ 2599.612355][T16688] ? import_iovec+0x6f/0xa0 [ 2599.616893][T16688] ___sys_recvmsg+0x212/0x590 [ 2599.621610][T16688] ? __sys_recvmsg+0x290/0x290 [ 2599.626415][T16688] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2599.632689][T16688] ? __fget_files+0x43d/0x4b0 [ 2599.637413][T16688] __x64_sys_recvmsg+0x205/0x2e0 [ 2599.642388][T16688] ? perf_trace_preemptirq_template+0x268/0x320 [ 2599.648665][T16688] ? ___sys_recvmsg+0x590/0x590 [ 2599.653562][T16688] ? lockdep_hardirqs_on+0x94/0x140 [ 2599.658800][T16688] do_syscall_64+0x4c/0xa0 [ 2599.663250][T16688] ? clear_bhb_loop+0x60/0xb0 [ 2599.667956][T16688] ? clear_bhb_loop+0x60/0xb0 [ 2599.672662][T16688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2599.678583][T16688] RIP: 0033:0x7ff475f9acb9 [ 2599.683021][T16688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2599.702687][T16688] RSP: 002b:00007ff476e35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2599.711131][T16688] RAX: ffffffffffffffda RBX: 00007ff476215fa0 RCX: 00007ff475f9acb9 [ 2599.719135][T16688] RDX: 00000000000101a0 RSI: 0000200000000400 RDI: 0000000000000007 [ 2599.727141][T16688] RBP: 00007ff476e35090 R08: 0000000000000000 R09: 0000000000000000 [ 2599.735136][T16688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2599.743130][T16688] R13: 00007ff476216038 R14: 00007ff476215fa0 R15: 00007ffee7ba4218 [ 2599.751146][T16688] [ 2599.796260][T16693] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14761'. [ 2600.510622][T16721] netlink: 3748 bytes leftover after parsing attributes in process `syz.3.14772'. [ 2600.551467][T16721] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14772'. [ 2601.253268][T16746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14781'. [ 2601.314675][T16746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14781'. [ 2601.443903][T16749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14781'. [ 2601.568103][T16746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14781'. [ 2601.899403][T16757] netlink: 'syz.2.14784': attribute type 10 has an invalid length. [ 2604.691492][T16757] team0 (unregistering): Port device team_slave_0 removed [ 2604.781798][T16757] team0 (unregistering): Port device team_slave_1 removed [ 2604.839853][T16757] team0 (unregistering): Port device wlan1 removed [ 2605.523423][T16783] sctp: [Deprecated]: syz.4.14794 (pid 16783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2605.523423][T16783] Use struct sctp_sack_info instead [ 2605.629620][T16786] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2605.636170][T16786] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2606.308740][T16802] FAULT_INJECTION: forcing a failure. [ 2606.308740][T16802] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.358101][T16802] CPU: 0 PID: 16802 Comm: syz.3.14801 Not tainted syzkaller #0 [ 2606.365780][T16802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2606.375905][T16802] Call Trace: [ 2606.379246][T16802] [ 2606.382235][T16802] dump_stack_lvl+0x188/0x24e [ 2606.386995][T16802] ? show_regs_print_info+0x12/0x12 [ 2606.392278][T16802] ? load_image+0x400/0x400 [ 2606.396857][T16802] ? verify_lock_unused+0x140/0x140 [ 2606.402136][T16802] ? perf_trace_lock+0x301/0x390 [ 2606.407165][T16802] should_fail_ex+0x399/0x4d0 [ 2606.411930][T16802] should_failslab+0x5/0x20 [ 2606.416502][T16802] slab_pre_alloc_hook+0x59/0x310 [ 2606.421600][T16802] kmem_cache_alloc+0x56/0x2f0 [ 2606.426423][T16802] ? skb_clone+0x1e7/0x370 [ 2606.431017][T16802] skb_clone+0x1e7/0x370 [ 2606.435355][T16802] __netlink_deliver_tap+0x3ed/0x800 [ 2606.440753][T16802] ? netlink_deliver_tap+0x2e/0x1b0 [ 2606.446043][T16802] netlink_deliver_tap+0x19c/0x1b0 [ 2606.451238][T16802] netlink_unicast+0x728/0x8d0 [ 2606.456342][T16802] netlink_sendmsg+0x8ad/0xbd0 [ 2606.461260][T16802] ? netlink_getsockopt+0x550/0x550 [ 2606.466546][T16802] ? aa_sock_msg_perm+0x94/0x150 [ 2606.471552][T16802] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2606.476881][T16802] ? security_socket_sendmsg+0x7c/0xa0 [ 2606.482397][T16802] ? netlink_getsockopt+0x550/0x550 [ 2606.487646][T16802] ____sys_sendmsg+0x5be/0x970 [ 2606.492476][T16802] ? __sys_sendmsg_sock+0x30/0x30 [ 2606.497583][T16802] ? __import_iovec+0x315/0x500 [ 2606.502488][T16802] ? import_iovec+0x6f/0xa0 [ 2606.507035][T16802] ___sys_sendmsg+0x2a2/0x360 [ 2606.511765][T16802] ? __sys_sendmsg+0x290/0x290 [ 2606.516608][T16802] ? __lock_acquire+0x7d10/0x7d10 [ 2606.521716][T16802] __se_sys_sendmsg+0x1bb/0x2a0 [ 2606.526629][T16802] ? __x64_sys_sendmsg+0x80/0x80 [ 2606.531662][T16802] ? lockdep_hardirqs_on+0x94/0x140 [ 2606.536916][T16802] do_syscall_64+0x4c/0xa0 [ 2606.541371][T16802] ? clear_bhb_loop+0x60/0xb0 [ 2606.546085][T16802] ? clear_bhb_loop+0x60/0xb0 [ 2606.550825][T16802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2606.556756][T16802] RIP: 0033:0x7ff475f9acb9 [ 2606.561214][T16802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2606.580862][T16802] RSP: 002b:00007ff476e35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2606.589320][T16802] RAX: ffffffffffffffda RBX: 00007ff476215fa0 RCX: 00007ff475f9acb9 [ 2606.597417][T16802] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2606.605435][T16802] RBP: 00007ff476e35090 R08: 0000000000000000 R09: 0000000000000000 [ 2606.613442][T16802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2606.621453][T16802] R13: 00007ff476216038 R14: 00007ff476215fa0 R15: 00007ffee7ba4218 [ 2606.629489][T16802] [ 2606.927975][T16802] netlink: 'syz.3.14801': attribute type 28 has an invalid length. [ 2606.944337][T16802] netlink: 'syz.3.14801': attribute type 29 has an invalid length. [ 2606.973153][T16802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14801'. [ 2609.743988][T16833] netlink: 'syz.3.14809': attribute type 4 has an invalid length. [ 2611.300320][T16867] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14821'. [ 2611.385231][T16875] device syzkaller0 entered promiscuous mode [ 2611.518280][T16871] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.14822'. [ 2611.577863][T16871] openvswitch: netlink: Flow key attr not present in new flow. [ 2611.928525][T16883] netlink: 'syz.3.14826': attribute type 21 has an invalid length. [ 2612.615679][T16884] device syzkaller0 entered promiscuous mode [ 2613.117750][T16906] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14830'. [ 2613.202778][T16906] netlink: 'syz.3.14830': attribute type 1 has an invalid length. [ 2622.454884][T16947] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14844'. [ 2622.474364][T16947] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14844'. [ 2622.504341][T16947] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14844'. [ 2622.525202][T16947] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14844'. [ 2622.544319][T16947] FAULT_INJECTION: forcing a failure. [ 2622.544319][T16947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2622.624154][T16947] CPU: 1 PID: 16947 Comm: syz.0.14844 Not tainted syzkaller #0 [ 2622.631792][T16947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2622.641893][T16947] Call Trace: [ 2622.645212][T16947] [ 2622.648169][T16947] dump_stack_lvl+0x188/0x24e [ 2622.652882][T16947] ? show_regs_print_info+0x12/0x12 [ 2622.658116][T16947] ? load_image+0x400/0x400 [ 2622.662650][T16947] ? __lock_acquire+0x7d10/0x7d10 [ 2622.667738][T16947] ? snprintf+0xe5/0x140 [ 2622.672019][T16947] should_fail_ex+0x399/0x4d0 [ 2622.676739][T16947] _copy_to_user+0x2c/0x130 [ 2622.681277][T16947] simple_read_from_buffer+0xe3/0x150 [ 2622.686690][T16947] proc_fail_nth_read+0x1a6/0x220 [ 2622.691746][T16947] ? proc_fault_inject_write+0x310/0x310 [ 2622.697414][T16947] ? fsnotify_perm+0x248/0x550 [ 2622.702207][T16947] ? proc_fault_inject_write+0x310/0x310 [ 2622.707863][T16947] vfs_read+0x2de/0xa00 [ 2622.712056][T16947] ? kernel_read+0x1e0/0x1e0 [ 2622.716690][T16947] ? __fget_files+0x28/0x4b0 [ 2622.721308][T16947] ? __fget_files+0x28/0x4b0 [ 2622.725938][T16947] ? __fget_files+0x43d/0x4b0 [ 2622.730657][T16947] ? __fdget_pos+0x2ae/0x360 [ 2622.735308][T16947] ? ksys_read+0x71/0x250 [ 2622.739668][T16947] ksys_read+0x14c/0x250 [ 2622.744029][T16947] ? vfs_write+0xa30/0xa30 [ 2622.748497][T16947] ? lockdep_hardirqs_on+0x94/0x140 [ 2622.753739][T16947] do_syscall_64+0x4c/0xa0 [ 2622.758185][T16947] ? clear_bhb_loop+0x60/0xb0 [ 2622.762890][T16947] ? clear_bhb_loop+0x60/0xb0 [ 2622.767626][T16947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2622.773545][T16947] RIP: 0033:0x7fb04d95b58e [ 2622.777994][T16947] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2622.797632][T16947] RSP: 002b:00007fb04e83afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2622.806108][T16947] RAX: ffffffffffffffda RBX: 00007fb04e83b6c0 RCX: 00007fb04d95b58e [ 2622.814102][T16947] RDX: 000000000000000f RSI: 00007fb04e83b0a0 RDI: 0000000000000004 [ 2622.822193][T16947] RBP: 00007fb04e83b090 R08: 0000000000000000 R09: 0000000000000000 [ 2622.830194][T16947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2622.838285][T16947] R13: 00007fb04dc16038 R14: 00007fb04dc15fa0 R15: 00007fff77cb6a28 [ 2622.846301][T16947] [ 2623.520004][T16981] netlink: 'syz.4.14857': attribute type 1 has an invalid length. [ 2623.828851][T16992] Â: renamed from pim6reg1 [ 2623.907680][T16998] netlink: 184 bytes leftover after parsing attributes in process `syz.4.14861'. [ 2623.950774][T16998] netlink: 'syz.4.14861': attribute type 3 has an invalid length. [ 2623.994606][T16998] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14861'. [ 2624.017349][T17000] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14862'. [ 2624.070359][T17005] FAULT_INJECTION: forcing a failure. [ 2624.070359][T17005] name failslab, interval 1, probability 0, space 0, times 0 [ 2624.113656][T17005] CPU: 1 PID: 17005 Comm: syz.1.14864 Not tainted syzkaller #0 [ 2624.121317][T17005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2624.131429][T17005] Call Trace: [ 2624.134754][T17005] [ 2624.137737][T17005] dump_stack_lvl+0x188/0x24e [ 2624.142485][T17005] ? show_regs_print_info+0x12/0x12 [ 2624.147789][T17005] ? load_image+0x400/0x400 [ 2624.152352][T17005] ? __lock_acquire+0x7d10/0x7d10 [ 2624.157448][T17005] should_fail_ex+0x399/0x4d0 [ 2624.162546][T17005] should_failslab+0x5/0x20 [ 2624.167120][T17005] slab_pre_alloc_hook+0x59/0x310 [ 2624.172198][T17005] kmem_cache_alloc+0x56/0x2f0 [ 2624.177012][T17005] ? security_file_alloc+0x30/0x110 [ 2624.182271][T17005] security_file_alloc+0x30/0x110 [ 2624.187531][T17005] __alloc_file+0xc2/0x230 [ 2624.191999][T17005] alloc_empty_file+0x90/0x180 [ 2624.196833][T17005] alloc_file+0x5c/0x5f0 [ 2624.201144][T17005] alloc_file_pseudo+0x180/0x200 [ 2624.206135][T17005] ? alloc_empty_file_noaccount+0x80/0x80 [ 2624.211902][T17005] ? alloc_fd+0x58f/0x630 [ 2624.216315][T17005] anon_inode_getfd+0xc6/0x1c0 [ 2624.221152][T17005] btf_new_fd+0x5f1/0x780 [ 2624.225538][T17005] __sys_bpf+0x612/0x780 [ 2624.229837][T17005] ? bpf_link_show_fdinfo+0x380/0x380 [ 2624.235294][T17005] ? lock_chain_count+0x20/0x20 [ 2624.240211][T17005] __x64_sys_bpf+0x78/0x90 [ 2624.244680][T17005] do_syscall_64+0x4c/0xa0 [ 2624.249145][T17005] ? clear_bhb_loop+0x60/0xb0 [ 2624.253877][T17005] ? clear_bhb_loop+0x60/0xb0 [ 2624.258615][T17005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2624.264562][T17005] RIP: 0033:0x7fc15319acb9 [ 2624.269023][T17005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2624.288682][T17005] RSP: 002b:00007fc15411a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2624.297151][T17005] RAX: ffffffffffffffda RBX: 00007fc153415fa0 RCX: 00007fc15319acb9 [ 2624.305262][T17005] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 2624.313279][T17005] RBP: 00007fc15411a090 R08: 0000000000000000 R09: 0000000000000000 [ 2624.321294][T17005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2624.329305][T17005] R13: 00007fc153416038 R14: 00007fc153415fa0 R15: 00007fffba83c8c8 [ 2624.337341][T17005] [ 2624.875553][T17019] netlink: 'syz.3.14868': attribute type 3 has an invalid length. [ 2625.309142][T17024] Ÿë: port 1(gretap0) entered blocking state [ 2625.333767][T17024] Ÿë: port 1(gretap0) entered disabled state [ 2625.439107][T17031] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14870'. [ 2625.470955][T17024] device gretap0 entered promiscuous mode [ 2625.583303][T17030] Ÿë: port 2(veth0_to_team) entered blocking state [ 2625.649941][T17030] Ÿë: port 2(veth0_to_team) entered disabled state [ 2625.697040][T17030] device veth0_to_team entered promiscuous mode [ 2625.866535][T17045] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 2625.874429][T17045] #PF: supervisor instruction fetch in kernel mode [ 2625.880993][T17045] #PF: error_code(0x0010) - not-present page [ 2625.887015][T17045] PGD 63cdc067 P4D 63cdc067 PUD 0 [ 2625.892184][T17045] Oops: 0010 [#1] PREEMPT SMP KASAN [ 2625.897418][T17045] CPU: 0 PID: 17045 Comm: syz.1.14873 Not tainted syzkaller #0 [ 2625.904999][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2625.915103][T17045] RIP: 0010:0x0 [ 2625.918615][T17045] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2625.926020][T17045] RSP: 0018:ffffc90003607458 EFLAGS: 00010246 [ 2625.932131][T17045] RAX: 1ffffffff162bb77 RBX: 1ffff920006c0e9c RCX: 0000000000000001 [ 2625.940173][T17045] RDX: ffffc90003607500 RSI: 0000000000000001 RDI: ffff88805d678000 [ 2625.948173][T17045] RBP: ffffc90003607570 R08: ffff88805d67803f R09: 1ffff1100bacf007 [ 2625.956170][T17045] R10: dffffc0000000000 R11: ffffed100bacf008 R12: ffffe8ffffc4a700 [ 2625.964193][T17045] R13: ffffffff8b15dbb8 R14: 0000000000000000 R15: ffff88805d678000 [ 2625.972191][T17045] FS: 00007fc15411a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2625.981149][T17045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2625.987764][T17045] CR2: ffffffffffffffd6 CR3: 00000000756af000 CR4: 00000000003506f0 [ 2625.995767][T17045] DR0: 0000200000000380 DR1: 0000000000000000 DR2: 0000000000000000 [ 2626.003764][T17045] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2626.011766][T17045] Call Trace: [ 2626.015072][T17045] [ 2626.018028][T17045] bond_xdp_xmit+0x31e/0x550 [ 2626.022655][T17045] ? bond_xdp_xmit+0x94/0x550 [ 2626.027372][T17045] ? bond_xdp+0x850/0x850 [ 2626.031738][T17045] ? trace_call_bpf+0xbf/0x6b0 [ 2626.036547][T17045] ? trace_call_bpf+0xbf/0x6b0 [ 2626.041343][T17045] ? trace_call_bpf+0x5d6/0x6b0 [ 2626.046222][T17045] bq_xmit_all+0xd3f/0x11b0 [ 2626.050758][T17045] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2626.056606][T17045] ? perf_trace_preemptirq_template+0x268/0x320 [ 2626.062879][T17045] ? irqentry_enter+0x33/0x50 [ 2626.067582][T17045] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2626.073598][T17045] ? lock_chain_count+0x20/0x20 [ 2626.078500][T17045] ? __dev_flush+0x1b0/0x1b0 [ 2626.083137][T17045] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2626.089331][T17045] ? lockdep_hardirqs_on+0x94/0x140 [ 2626.094590][T17045] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2626.100795][T17045] ? bq_enqueue+0x2ee/0x3d0 [ 2626.105345][T17045] ? rcu_is_watching+0x11/0xa0 [ 2626.110155][T17045] ? trace_xdp_redirect+0xb3/0x2b0 [ 2626.115302][T17045] __dev_flush+0xbf/0x1b0 [ 2626.119681][T17045] xdp_do_flush+0xa/0x20 [ 2626.123947][T17045] bpf_test_run_xdp_live+0x1545/0x1a90 [ 2626.129442][T17045] ? 0xffffffffa0004440 [ 2626.133635][T17045] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 2626.139210][T17045] ? xdp_convert_md_to_buff+0x330/0x330 [ 2626.144913][T17045] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2626.151200][T17045] ? bpf_prog_test_run_xdp+0x6ac/0xf10 [ 2626.156694][T17045] bpf_prog_test_run_xdp+0x736/0xf10 [ 2626.162033][T17045] ? __fget_files+0x28/0x4b0 [ 2626.166677][T17045] ? dev_put+0x80/0x80 [ 2626.170800][T17045] ? dev_put+0x80/0x80 [ 2626.174903][T17045] bpf_prog_test_run+0x31e/0x390 [ 2626.179884][T17045] __sys_bpf+0x62b/0x780 [ 2626.184163][T17045] ? bpf_link_show_fdinfo+0x380/0x380 [ 2626.189612][T17045] ? lock_chain_count+0x20/0x20 [ 2626.194502][T17045] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2626.200524][T17045] __x64_sys_bpf+0x78/0x90 [ 2626.204983][T17045] do_syscall_64+0x4c/0xa0 [ 2626.209437][T17045] ? clear_bhb_loop+0x60/0xb0 [ 2626.214143][T17045] ? clear_bhb_loop+0x60/0xb0 [ 2626.218846][T17045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2626.224773][T17045] RIP: 0033:0x7fc15319acb9 [ 2626.229218][T17045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2626.248857][T17045] RSP: 002b:00007fc15411a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2626.257308][T17045] RAX: ffffffffffffffda RBX: 00007fc153415fa0 RCX: 00007fc15319acb9 [ 2626.265345][T17045] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2626.273348][T17045] RBP: 00007fc153208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2626.281344][T17045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2626.289344][T17045] R13: 00007fc153416038 R14: 00007fc153415fa0 R15: 00007fffba83c8c8 [ 2626.297359][T17045] [ 2626.300428][T17045] Modules linked in: [ 2626.304361][T17045] CR2: 0000000000000000 [ 2626.308541][T17045] ---[ end trace 0000000000000000 ]--- [ 2626.314018][T17045] RIP: 0010:0x0 [ 2626.317511][T17045] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2626.324894][T17045] RSP: 0018:ffffc90003607458 EFLAGS: 00010246 [ 2626.330992][T17045] RAX: 1ffffffff162bb77 RBX: 1ffff920006c0e9c RCX: 0000000000000001 [ 2626.338994][T17045] RDX: ffffc90003607500 RSI: 0000000000000001 RDI: ffff88805d678000 [ 2626.346992][T17045] RBP: ffffc90003607570 R08: ffff88805d67803f R09: 1ffff1100bacf007 [ 2626.354993][T17045] R10: dffffc0000000000 R11: ffffed100bacf008 R12: ffffe8ffffc4a700 [ 2626.362989][T17045] R13: ffffffff8b15dbb8 R14: 0000000000000000 R15: ffff88805d678000 [ 2626.370981][T17045] FS: 00007fc15411a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2626.379935][T17045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2626.386560][T17045] CR2: ffffffffffffffd6 CR3: 00000000756af000 CR4: 00000000003506f0 [ 2626.394565][T17045] DR0: 0000200000000380 DR1: 0000000000000000 DR2: 0000000000000000 [ 2626.402557][T17045] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2626.410568][T17045] Kernel panic - not syncing: Fatal exception in interrupt [ 2626.418345][T17045] Kernel Offset: disabled [ 2626.422684][T17045] Rebooting in 86400 seconds..