last executing test programs: 11.275754282s ago: executing program 3 (id=2336): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d080000000000000000070a000a000900142603600e1208001e0000050401a8000900027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3}, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r5, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) close(r6) 10.332792652s ago: executing program 3 (id=2347): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x3406c096) 9.405556092s ago: executing program 3 (id=2351): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_type(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="9e", 0x1}], 0x1}, 0x8000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80041200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x48) 8.450240522s ago: executing program 3 (id=2353): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080002000300010006000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) sendmsg$kcm(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0xc801) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0xb, 0x1, 0xfffff801, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002180)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)}, {&(0x7f0000002140)="9898b4", 0x3}], 0x5, &(0x7f0000002240)}, 0x20000004) socket$kcm(0x10, 0x400000002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x8, 0x14}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 8.275734317s ago: executing program 3 (id=2356): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d080000000000000000070a000a000900142603600e1208001e0000050401a8000900027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3}, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r5, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) close(r7) 7.322449188s ago: executing program 3 (id=2365): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 3.268439656s ago: executing program 1 (id=2396): r0 = gettid() r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4000000000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x17, 0x20000000000002db, &(0x7f0000000940)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x12, &(0x7f0000000080), 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="fa0706009b98afeb280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x4b}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="1700000001000000942a4c2ea455db79a30c38beb5dd05c586e28e3466dce816574fc7ddf5038353649e7b0029e900f64efd8066d69c99365435eaf383ae777e259c808ef6d9d30bdff598dafca95d7f841d61b56d4161361fc66ba37e01555e44842809e56bf448c016927659c171674e0ff0869040ed9e1a99f72e1fc0c6fcabb796294f18b010d5d8f97604bcdf451df5ce9fec94ca79798f305da50f26b729e20a778141de636cc4999837807154b6c14aa82f0f86933ca994f8fcc73bfa4de16fb5bea89d5a325ec4a267ae01c3b2770b8e923d5dd734c48a503ee3b67e44de0f62", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000380)={r5, 0x0, 0xac, 0x0, &(0x7f0000000000)="c53f9ef7231ebbfcc6946f45004c018db913d5cd8cb67aa2986c933ffb65533c7f0301fca05bd5b0f8001e60990dde2bd22e20d7aecd3d9dacdc9ea91e92ee0a7540ed3245ca8c7dff42b1c79d34c2eba33029be6c9a8fc20dd527ff179e95df95738bd0d66107518b72114e4bcdbbfc3d4e0738fb357746cf127aa8c4f44ccf9624aaf60506d59dea4df3173b51824780267959f65fbed51d7c780dbbee746b84208674a93df6413ada2c4e", 0x0, 0x10001, 0x0, 0x91, 0x0, &(0x7f00000002c0)="936314d1952ddb7d8d1f2fc68e269226d99e7eb3dbea58cff463cb87002b329abc2e2f5e881282b5a999df758cac8dc7d8ec08a6e3c66df812ecb8e878f364b32fe1b48ac8e2878bbe1493949393c0a38bc8006275e42208084367e9b1ed2416b97eb9f9518b1ff9ad1008c28e83b1ca16099096fb68398a89f97fb2b61fc4672ce772dcfb8564ecc3c1aac439ada74fc6", 0x0, 0x2, 0x0, 0x6}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES32=r6], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, 0x0, 0xfffffdc2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x5, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r8, 0xffffffffffffff69, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x1b, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@generic={0x6, 0x8, 0x0, 0xfffb, 0x3000}, @ringbuf_query, @ldst={0x1, 0x2, 0x4, 0x2, 0x4, 0x50, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x43}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x89, &(0x7f0000000700)=""/137, 0x41100, 0x0, '\x00', r13, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r10, r10, r10], 0x0, 0x10, 0x6}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r12, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r12, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 2.967669515s ago: executing program 1 (id=2398): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8930, &(0x7f0000000040)={'wg2\x00', @multicast}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x891b, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 2.680670335s ago: executing program 2 (id=2400): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) 2.489923981s ago: executing program 1 (id=2402): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030048000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x88a8ffff) 2.489682361s ago: executing program 2 (id=2403): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="af", 0x1}], 0x1, 0x0, 0x0, 0x1200}, 0x4) 2.315716346s ago: executing program 2 (id=2404): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.170245741s ago: executing program 0 (id=2406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620af3dc000000e9990efb00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x90d8, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001a000000001e0000240004002400000000000000000000000000000200000000000000000000000a00000000000000000000000b000000000000000000"], &(0x7f0000000040)=""/132, 0x3e, 0x84, 0x1}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8924, &(0x7f0000000080)) 1.291179309s ago: executing program 2 (id=2407): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 1.203769242s ago: executing program 1 (id=2408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) 1.186268342s ago: executing program 0 (id=2409): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211003f00040000a118000200ff05140100140e1208150f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.160133353s ago: executing program 2 (id=2410): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x20000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x50000000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 927.5524ms ago: executing program 0 (id=2411): r0 = socket$kcm(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x7, 0x2, 0x2}}, 0x80, 0x0}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a"], 0xfe33) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x240b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x800, 0x5, 0x400010, 0x8, 0x7fff, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x10e, 0x2, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000280)="24a6bb35e769cc14f494f9152a9da9eae1d59f3a70c03339f50191fd9327f66f30aec4eee649090cefc9d5ddd45f5ccf6f7b224c252c45bd4f830b7c658056c0433852c434b0f7a0c48fdac0a2edb8115abe9804b1819c26e301a30060bed7dcc90dabd3086bde64f3c8f6dd5a7d0342f7e60d477bb86bc2f1406e197a797aa224e223b8dd68011c147e4c4ab0183141a81a333e0a85127d9561ee8578a40da65e4414802dab71a1b0eaf182bd72560526fb3f5a14c82e5e9207cf4b5311ca3bc8abad11bcc1a5b7a25acda54a3b1761a115018a7a95c0eb22fb4ae0fd7d647cc9bec9e95927a137e605e4386dff6e718c5b880c99b8"}, 0x20) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) socket$kcm(0x29, 0x0, 0x0) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061120c00000000519e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5}, 0x94) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 827.642493ms ago: executing program 2 (id=2412): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, &(0x7f00000002c0)=""/218}, 0x20) r2 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1, 0x0, 0x0, 0xfffc}, 0x0) 698.810558ms ago: executing program 1 (id=2413): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x106) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) 606.83607ms ago: executing program 0 (id=2414): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x88, 0x56, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x145a7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x5d1, 0x2}, 0x4507, 0x32, 0xfffffbfd, 0x2, 0x7, 0x3, 0xfffa, 0x0, 0xfffffffc, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x30, 0xff, 0x6, 0xfffff00c}, {0x6, 0xff, 0x9, 0x1}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x38d, 0x0}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.events\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x1fffffffffffff43, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=' ', 0x1}], 0x1}, 0x1) sendmsg$kcm(r8, &(0x7f0000000540)={0x0, 0xeffd, 0x0}, 0xc0004) sendmsg$kcm(r8, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1fb6", 0x2f}], 0x1}, 0x0) 469.711835ms ago: executing program 1 (id=2415): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d080000000000000000070a000a000900142603600e1208001e0000050401a8000900027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) close(r7) 164.267864ms ago: executing program 0 (id=2416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x9, &(0x7f00000000c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @ringbuf_query], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0xc}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r1}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r2}, 0x20) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffff7, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000880)={&(0x7f0000000480)="e429107c46a4a55366d5e5aa8444878342ca8d495fd62f49c66bbb4dd1190a2c39f3265dec9d6ec65937c988023143750df68b519ee5cca9f9f9894a3de7bf05c4fb6ee78c7bbf983da416406c26131781df5c0afd0f49cae3cfc1561a14ca94ef05bda009c8b0c26744060f6cb6f360407d0220b4059659326834cfad270b94f54000ec881a6ad9b1be019acb19ad4e868ac07fd1d4dbbcb1600c7d12ef0f7cac1636dc94bf8f1bc46cd51f0d71050b15cd30de560771998aa5dadaf04d55198a789fad8604bed235a852", &(0x7f0000000580)=""/106, &(0x7f0000000680)="d8120961ec80a464b58e4d9fb4ab44a07920f6e6e0f44148429aed762f103de89f5b798cd43368caedba00ee8d19deaf07b1e02c056320be0fc3f7d2d574e792cef4a431851aa8e501b0604aa1f886adc57de1ca61fbaf582eb78f02049e80eb5214660b1ed89098f786eb8182817c5a07235928173d314abfc95fbd2197f868bda0fa884deb8e1978814a173feb02b61f01d93b6e5107088f73c608cd7ac55595d222c2e8417005c867fa5f1b", &(0x7f0000000740)="6426633ba2aeba906f9471fa5915bd7ef576ad7b16de2764fcb2b0aebc0b332825dc7c96f38b56d9890ee702f1bb5e2ab9b08cd902de5ba98751c23b1a302832fe2d654b50fad0ffb3ca1093f7abc6b7d233f365e30100a8a0868efd51e5ed36821a8d8f23bf76a115958d0f44bc8af0203a863ffba37c3d0694590f8d8c99c69fba39c026e63db0221cea37ab214a6eb5", 0x9ff, r5, 0x4}, 0x38) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x3, [@enum={0x5, 0xa, 0x0, 0x6, 0x4, [{0xd, 0x6}, {0xa, 0xfb}, {0x200001, 0x515}, {0xb, 0x3}, {0x1, 0x5}, {0x8, 0xa}, {0x8, 0x9}, {0x8, 0xada}, {0x10, 0x1}, {0xe, 0x5}]}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x1b, 0x0, 0x24, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x2e, 0x1}]}, {0x0, [0x61]}}, &(0x7f00000005c0)=""/216, 0x97, 0xd8, 0x1, 0xa, 0x10000}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x1, 0x7, 0x2, 0x42966, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x4}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6c62, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x5, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x21, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000800000000000000fdffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181b0000", @ANYRES32=r3, @ANYBLOB="000000000000000018580000100000000000000000000000ae1a03000800000018440000ffffffff000000000000000018170000", @ANYRES32=r4, @ANYBLOB="00000000000000001811000036a3ee6772e721bf37aa9d6a1e6b583b3b2764391ac30032ba408403609b96d685b43a519269270ffbb6ee18b95a095820d68a6e97cdca03b0c4d136ac54b726db2e", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x7b, &(0x7f0000000340)=""/123, 0x41100, 0x51, '\x00', 0x0, @cgroup_skb, r6, 0x8, &(0x7f0000000700)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x5, 0xfffffffe, 0xfff}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000008c0)=[r7, r8, r9], 0x0, 0x10, 0xe}, 0x94) 0s ago: executing program 0 (id=2417): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.1.1358'. [ 254.385530][ T9661] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1359'. [ 254.407947][ T9661] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.1359'. [ 254.756218][ T9683] netlink: 'syz.2.1367': attribute type 10 has an invalid length. [ 254.807417][ T9682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.331079][ T9687] netlink: 'syz.2.1369': attribute type 10 has an invalid length. [ 255.477202][ T9691] netlink: 'syz.1.1370': attribute type 16 has an invalid length. [ 255.506358][ T9691] netlink: 'syz.1.1370': attribute type 3 has an invalid length. [ 255.654127][ T9706] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 255.723173][ T9711] FAULT_INJECTION: forcing a failure. [ 255.723173][ T9711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.736471][ T9711] CPU: 0 PID: 9711 Comm: syz.2.1381 Not tainted syzkaller #0 [ 255.743865][ T9711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 255.753954][ T9711] Call Trace: [ 255.757263][ T9711] [ 255.760229][ T9711] dump_stack_lvl+0x18c/0x250 [ 255.764945][ T9711] ? show_regs_print_info+0x20/0x20 [ 255.770178][ T9711] ? load_image+0x420/0x420 [ 255.774709][ T9711] ? __might_fault+0xaa/0x120 [ 255.779427][ T9711] ? __lock_acquire+0x7d40/0x7d40 [ 255.784486][ T9711] should_fail_ex+0x39d/0x4d0 [ 255.789205][ T9711] _copy_from_user+0x2f/0xe0 [ 255.793806][ T9711] ioctl_standard_iw_point+0x5d3/0xcf0 [ 255.799282][ T9711] ? cfg80211_wext_giwauth+0x10/0x10 [ 255.804569][ T9711] ? iw_handler_get_iwstats+0x110/0x110 [ 255.810111][ T9711] ? wext_ioctl_dispatch+0x115/0x600 [ 255.815394][ T9711] ? dev_load+0x21/0x1f0 [ 255.819654][ T9711] ? mutex_lock_nested+0x20/0x20 [ 255.824689][ T9711] ? apparmor_capable+0x137/0x1a0 [ 255.829716][ T9711] ? cfg80211_wext_giwauth+0x10/0x10 [ 255.834996][ T9711] ioctl_standard_call+0xb7/0x2b0 [ 255.840026][ T9711] ? cfg80211_wext_giwauth+0x10/0x10 [ 255.845311][ T9711] wext_ioctl_dispatch+0x1cb/0x600 [ 255.850431][ T9711] ? wext_ioctl_dispatch+0x600/0x600 [ 255.855728][ T9711] ? iw_handler_get_private+0x1f0/0x1f0 [ 255.861291][ T9711] ? wext_handle_ioctl+0x1d0/0x1d0 [ 255.866509][ T9711] ? __might_fault+0xaa/0x120 [ 255.871194][ T9711] ? __might_fault+0xc6/0x120 [ 255.875898][ T9711] ? __might_fault+0xaa/0x120 [ 255.880631][ T9711] wext_handle_ioctl+0x117/0x1d0 [ 255.885588][ T9711] ? call_commit_handler+0xf0/0xf0 [ 255.890742][ T9711] sock_ioctl+0x15d/0x7e0 [ 255.895101][ T9711] ? sock_poll+0x3e0/0x3e0 [ 255.899611][ T9711] ? bpf_lsm_file_ioctl+0x9/0x10 [ 255.904549][ T9711] ? security_file_ioctl+0x80/0xa0 [ 255.909676][ T9711] ? sock_poll+0x3e0/0x3e0 [ 255.914093][ T9711] __se_sys_ioctl+0xfd/0x170 [ 255.918688][ T9711] do_syscall_64+0x55/0xb0 [ 255.923117][ T9711] ? clear_bhb_loop+0x40/0x90 [ 255.927790][ T9711] ? clear_bhb_loop+0x40/0x90 [ 255.932468][ T9711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.938373][ T9711] RIP: 0033:0x7f11a0f9ce59 [ 255.943048][ T9711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.962660][ T9711] RSP: 002b:00007f11a1e8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.971082][ T9711] RAX: ffffffffffffffda RBX: 00007f11a1215fa0 RCX: 00007f11a0f9ce59 [ 255.979053][ T9711] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 255.987026][ T9711] RBP: 00007f11a1e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 255.994995][ T9711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.002960][ T9711] R13: 00007f11a1216038 R14: 00007f11a1215fa0 R15: 00007ffc7a8225b8 [ 256.011128][ T9711] [ 256.028176][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.034576][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.254127][ T9718] netlink: 'syz.2.1383': attribute type 10 has an invalid length. [ 256.428311][ T9720] __nla_validate_parse: 9 callbacks suppressed [ 256.428376][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 256.539271][ T9723] netlink: 'syz.2.1385': attribute type 10 has an invalid length. [ 256.732161][ T9735] netlink: 'syz.3.1389': attribute type 12 has an invalid length. [ 256.757947][ T9735] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1389'. [ 257.103473][ T9751] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1395'. [ 257.683643][ T9767] netlink: 'syz.3.1402': attribute type 16 has an invalid length. [ 257.706359][ T9767] netlink: 'syz.3.1402': attribute type 3 has an invalid length. [ 257.715636][ T9767] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1402'. [ 257.747963][ T9769] netlink: 'syz.2.1403': attribute type 27 has an invalid length. [ 257.755954][ T9769] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1403'. [ 257.769441][ T9769] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1403'. [ 257.936499][ T9774] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1405'. [ 257.951822][ T9774] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.1405'. [ 258.661951][ T9801] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1416'. [ 262.040413][ T9873] syzkaller0: entered promiscuous mode [ 262.046064][ T9873] syzkaller0: entered allmulticast mode [ 264.551907][ T9879] validate_nla: 4 callbacks suppressed [ 264.551921][ T9879] netlink: 'syz.0.1445': attribute type 10 has an invalid length. [ 264.576249][ T9897] netlink: 'syz.1.1451': attribute type 39 has an invalid length. [ 265.016341][ T9921] IPv6: Can't replace route, no match found [ 265.143436][ T9928] netlink: 'syz.1.1462': attribute type 10 has an invalid length. [ 266.271535][ T9952] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1478'. [ 268.307147][ T9963] netlink: 'syz.0.1472': attribute type 10 has an invalid length. [ 268.318443][ T9963] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1472'. [ 268.386380][ T9962] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1473'. [ 268.397398][ T9962] netlink: 'syz.2.1473': attribute type 28 has an invalid length. [ 268.411134][ T9962] netlink: 'syz.2.1473': attribute type 29 has an invalid length. [ 268.420280][ T9962] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1473'. [ 268.434052][ T9966] netlink: 'syz.3.1474': attribute type 10 has an invalid length. [ 268.513123][ T9969] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1476'. [ 269.823958][ T9991] netlink: 'syz.3.1485': attribute type 41 has an invalid length. [ 269.975077][ T9993] netlink: 13822 bytes leftover after parsing attributes in process `syz.2.1486'. [ 270.083600][ T9996] netlink: 'syz.1.1488': attribute type 10 has an invalid length. [ 270.275069][T10010] netlink: 'syz.0.1493': attribute type 1 has an invalid length. [ 270.287936][T10010] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1493'. [ 270.451713][T10021] netlink: 'syz.1.1499': attribute type 41 has an invalid length. [ 270.687186][T10032] FAULT_INJECTION: forcing a failure. [ 270.687186][T10032] name failslab, interval 1, probability 0, space 0, times 0 [ 270.731368][T10032] CPU: 0 PID: 10032 Comm: syz.1.1501 Not tainted syzkaller #0 [ 270.738894][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 270.748977][T10032] Call Trace: [ 270.752266][T10032] [ 270.755271][T10032] dump_stack_lvl+0x18c/0x250 [ 270.759972][T10032] ? sctp_sendmsg+0x15d2/0x2910 [ 270.764838][T10032] ? ___sys_sendmsg+0x2a6/0x360 [ 270.769703][T10032] ? show_regs_print_info+0x20/0x20 [ 270.774922][T10032] ? load_image+0x420/0x420 [ 270.779454][T10032] should_fail_ex+0x39d/0x4d0 [ 270.784164][T10032] should_failslab+0x9/0x20 [ 270.788687][T10032] slab_pre_alloc_hook+0x59/0x310 [ 270.793833][T10032] ? sctp_add_bind_addr+0x8c/0x360 [ 270.798976][T10032] __kmem_cache_alloc_node+0x53/0x250 [ 270.804378][T10032] ? sctp_add_bind_addr+0x8c/0x360 [ 270.809509][T10032] kmalloc_trace+0x2a/0xe0 [ 270.814041][T10032] sctp_add_bind_addr+0x8c/0x360 [ 270.819021][T10032] sctp_copy_local_addr_list+0x315/0x4f0 [ 270.824686][T10032] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 270.830426][T10032] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 270.836523][T10032] ? sctp_v4_is_any+0x35/0x60 [ 270.841398][T10032] ? sctp_copy_one_addr+0x8c/0x350 [ 270.846539][T10032] sctp_bind_addr_copy+0xb3/0x3c0 [ 270.851596][T10032] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 270.857950][T10032] sctp_connect_new_asoc+0x2f9/0x6a0 [ 270.863280][T10032] ? __sctp_connect+0xd80/0xd80 [ 270.868327][T10032] ? __local_bh_enable_ip+0x13a/0x1c0 [ 270.873704][T10032] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 270.879255][T10032] ? security_sctp_bind_connect+0x89/0xb0 [ 270.885070][T10032] sctp_sendmsg+0x15d2/0x2910 [ 270.889770][T10032] ? sctp_getsockopt+0xb60/0xb60 [ 270.894716][T10032] ? aa_sk_perm+0x83c/0x970 [ 270.899223][T10032] ? aa_af_perm+0x330/0x330 [ 270.903720][T10032] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 270.910223][T10032] ? sock_rps_record_flow+0x19/0x3f0 [ 270.915515][T10032] ? inet_sendmsg+0xe9/0x2f0 [ 270.920133][T10032] ? inet_send_prepare+0x260/0x260 [ 270.925265][T10032] ____sys_sendmsg+0x5ba/0x960 [ 270.930038][T10032] ? __lock_acquire+0x7d40/0x7d40 [ 270.935071][T10032] ? __asan_memset+0x22/0x40 [ 270.939666][T10032] ? __sys_sendmsg_sock+0x30/0x30 [ 270.944685][T10032] ? __import_iovec+0x5f2/0x850 [ 270.949542][T10032] ? import_iovec+0x73/0xa0 [ 270.954047][T10032] ___sys_sendmsg+0x2a6/0x360 [ 270.958725][T10032] ? get_pid_task+0x20/0x1e0 [ 270.963319][T10032] ? __sys_sendmsg+0x2a0/0x2a0 [ 270.968114][T10032] ? __lock_acquire+0x7d40/0x7d40 [ 270.973156][T10032] __se_sys_sendmsg+0x1c2/0x2b0 [ 270.978114][T10032] ? __x64_sys_sendmsg+0x80/0x80 [ 270.983068][T10032] ? lockdep_hardirqs_on+0x98/0x150 [ 270.988271][T10032] do_syscall_64+0x55/0xb0 [ 270.992688][T10032] ? clear_bhb_loop+0x40/0x90 [ 270.997367][T10032] ? clear_bhb_loop+0x40/0x90 [ 271.002049][T10032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.007963][T10032] RIP: 0033:0x7f399879ce59 [ 271.012380][T10032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.031983][T10032] RSP: 002b:00007f399961d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.040396][T10032] RAX: ffffffffffffffda RBX: 00007f3998a15fa0 RCX: 00007f399879ce59 [ 271.048366][T10032] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 271.056334][T10032] RBP: 00007f399961d090 R08: 0000000000000000 R09: 0000000000000000 [ 271.064299][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.072264][T10032] R13: 00007f3998a16038 R14: 00007f3998a15fa0 R15: 00007fff5de864f8 [ 271.080338][T10032] [ 271.187380][T10035] netlink: 'syz.2.1503': attribute type 10 has an invalid length. [ 271.269301][T10039] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1504'. [ 271.283203][T10039] batadv_slave_1: entered promiscuous mode [ 273.310173][T10041] netlink: 'syz.3.1505': attribute type 29 has an invalid length. [ 273.328093][T10041] netlink: 'syz.3.1505': attribute type 29 has an invalid length. [ 273.349520][T10041] netlink: 'syz.3.1505': attribute type 29 has an invalid length. [ 273.460366][T10050] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1508'. [ 273.475091][T10050] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 273.487857][T10050] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 273.517456][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1509'. [ 273.620162][T10056] netlink: 'syz.1.1511': attribute type 29 has an invalid length. [ 273.634402][T10056] netlink: 'syz.1.1511': attribute type 29 has an invalid length. [ 273.649781][T10056] sock: sock_timestamping_bind_phc: sock not bind to device [ 274.030403][T10069] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1516'. [ 274.051323][T10069] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 274.199087][T10073] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1517'. [ 274.223863][T10073] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1517'. [ 274.333828][T10076] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1518'. [ 274.776604][T10086] netlink: 119384 bytes leftover after parsing attributes in process `syz.0.1521'. [ 277.284522][T10109] validate_nla: 5 callbacks suppressed [ 277.284540][T10109] netlink: 'syz.2.1529': attribute type 10 has an invalid length. [ 277.766883][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 277.967230][T10120] netlink: 'syz.3.1533': attribute type 10 has an invalid length. [ 278.066407][T10120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.153819][T10120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.505698][T10130] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1537'. [ 278.692817][T10132] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1539'. [ 278.712806][T10132] netlink: 'syz.1.1539': attribute type 28 has an invalid length. [ 278.727617][T10136] netlink: 'syz.3.1540': attribute type 10 has an invalid length. [ 278.736033][T10132] netlink: 'syz.1.1539': attribute type 29 has an invalid length. [ 278.749572][T10132] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1539'. [ 279.000326][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1545'. [ 279.934180][T10164] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 279.992126][T10166] FAULT_INJECTION: forcing a failure. [ 279.992126][T10166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.007924][T10166] CPU: 1 PID: 10166 Comm: syz.3.1553 Not tainted syzkaller #0 [ 280.015458][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.025555][T10166] Call Trace: [ 280.028862][T10166] [ 280.031822][T10166] dump_stack_lvl+0x18c/0x250 [ 280.036557][T10166] ? show_regs_print_info+0x20/0x20 [ 280.041827][T10166] ? load_image+0x420/0x420 [ 280.046386][T10166] ? __lock_acquire+0x7d40/0x7d40 [ 280.051471][T10166] should_fail_ex+0x39d/0x4d0 [ 280.056205][T10166] _copy_from_user+0x2f/0xe0 [ 280.060936][T10166] __copy_msghdr+0x3bb/0x580 [ 280.065672][T10166] ___sys_sendmsg+0x214/0x360 [ 280.070400][T10166] ? __sys_sendmsg+0x2a0/0x2a0 [ 280.075228][T10166] ? __lock_acquire+0x7d40/0x7d40 [ 280.080499][T10166] __se_sys_sendmsg+0x1c2/0x2b0 [ 280.085374][T10166] ? __x64_sys_sendmsg+0x80/0x80 [ 280.090435][T10166] ? lockdep_hardirqs_on+0x98/0x150 [ 280.095676][T10166] do_syscall_64+0x55/0xb0 [ 280.100132][T10166] ? clear_bhb_loop+0x40/0x90 [ 280.104826][T10166] ? clear_bhb_loop+0x40/0x90 [ 280.109516][T10166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.115424][T10166] RIP: 0033:0x7f46da79ce59 [ 280.119869][T10166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.139574][T10166] RSP: 002b:00007f46db727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.148028][T10166] RAX: ffffffffffffffda RBX: 00007f46daa15fa0 RCX: 00007f46da79ce59 [ 280.156040][T10166] RDX: 000000003000c080 RSI: 0000200000000080 RDI: 0000000000000004 [ 280.164118][T10166] RBP: 00007f46db727090 R08: 0000000000000000 R09: 0000000000000000 [ 280.172184][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.180188][T10166] R13: 00007f46daa16038 R14: 00007f46daa15fa0 R15: 00007ffdfd687958 [ 280.188194][T10166] [ 280.352914][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 281.083893][T10194] netlink: 'syz.3.1565': attribute type 6 has an invalid length. [ 281.092758][T10194] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1565'. [ 281.191319][T10196] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 281.209102][T10195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.225088][T10198] FAULT_INJECTION: forcing a failure. [ 281.225088][T10198] name failslab, interval 1, probability 0, space 0, times 0 [ 281.237801][T10198] CPU: 1 PID: 10198 Comm: syz.2.1567 Not tainted syzkaller #0 [ 281.245272][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 281.255420][T10198] Call Trace: [ 281.258703][T10198] [ 281.261624][T10198] dump_stack_lvl+0x18c/0x250 [ 281.266338][T10198] ? show_regs_print_info+0x20/0x20 [ 281.271547][T10198] ? load_image+0x420/0x420 [ 281.276066][T10198] ? __kmem_cache_alloc_node+0x13a/0x250 [ 281.281719][T10198] ? netdev_core_pick_tx+0x340/0x340 [ 281.287010][T10198] should_fail_ex+0x39d/0x4d0 [ 281.291860][T10198] should_failslab+0x9/0x20 [ 281.296473][T10198] slab_pre_alloc_hook+0x59/0x310 [ 281.301520][T10198] kmem_cache_alloc+0x5a/0x2d0 [ 281.308549][T10198] ? skb_clone+0x1eb/0x370 [ 281.312992][T10198] skb_clone+0x1eb/0x370 [ 281.317244][T10198] bpf_clone_redirect+0x167/0x4a0 [ 281.322284][T10198] bpf_prog_c08ef512837047f4+0x61/0x66 [ 281.328178][T10198] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 281.334160][T10198] ? perf_trace_preemptirq_template+0xac/0x330 [ 281.340322][T10198] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 281.346304][T10198] ? lockdep_softirqs_on+0x580/0x580 [ 281.351609][T10198] ? lock_chain_count+0x20/0x20 [ 281.356464][T10198] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 281.362724][T10198] ? __local_bh_disable_ip+0x108/0x1a0 [ 281.368202][T10198] ? __cant_sleep+0x220/0x220 [ 281.372892][T10198] ? __local_bh_enable_ip+0x13a/0x1c0 [ 281.378268][T10198] ? _local_bh_enable+0xa0/0xa0 [ 281.383117][T10198] ? bpf_test_timer_continue+0x135/0x380 [ 281.388747][T10198] ? bpf_test_run+0x174/0x870 [ 281.393425][T10198] bpf_test_run+0x2df/0x870 [ 281.397962][T10198] ? bpf_test_run+0x174/0x870 [ 281.402637][T10198] ? dst_hold+0x70/0x70 [ 281.406795][T10198] ? eth_get_headlen+0x210/0x210 [ 281.411925][T10198] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 281.417311][T10198] ? cpu_online+0x60/0x60 [ 281.421640][T10198] bpf_prog_test_run+0x321/0x390 [ 281.426580][T10198] __sys_bpf+0x49d/0x890 [ 281.430831][T10198] ? bpf_link_show_fdinfo+0x390/0x390 [ 281.436212][T10198] ? lock_chain_count+0x20/0x20 [ 281.441065][T10198] __x64_sys_bpf+0x7c/0x90 [ 281.445510][T10198] do_syscall_64+0x55/0xb0 [ 281.449934][T10198] ? clear_bhb_loop+0x40/0x90 [ 281.454606][T10198] ? clear_bhb_loop+0x40/0x90 [ 281.459280][T10198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.465173][T10198] RIP: 0033:0x7f11a0f9ce59 [ 281.469584][T10198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.489196][T10198] RSP: 002b:00007f11a1e8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.497609][T10198] RAX: ffffffffffffffda RBX: 00007f11a1215fa0 RCX: 00007f11a0f9ce59 [ 281.505686][T10198] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 281.513654][T10198] RBP: 00007f11a1e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 281.521619][T10198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.529581][T10198] R13: 00007f11a1216038 R14: 00007f11a1215fa0 R15: 00007ffc7a8225b8 [ 281.537584][T10198] [ 281.622434][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1568'. [ 283.704534][T10225] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1579'. [ 283.893503][T10233] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1580'. [ 283.916909][T10233] netlink: 'syz.0.1580': attribute type 28 has an invalid length. [ 283.932795][T10233] netlink: 'syz.0.1580': attribute type 29 has an invalid length. [ 283.951082][T10233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1580'. [ 284.030309][T10242] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1589'. [ 284.047556][T10242] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 284.056234][T10242] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 284.650431][T10248] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1590'. [ 284.857034][T10258] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 284.871953][T10254] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1593'. [ 285.829126][T10279] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1603'. [ 286.307543][T10289] netlink: 'syz.1.1606': attribute type 10 has an invalid length. [ 288.011400][T10321] netlink: 'syz.2.1617': attribute type 10 has an invalid length. [ 288.113281][T10326] netlink: 'syz.1.1620': attribute type 9 has an invalid length. [ 288.122713][T10326] netlink: 27575 bytes leftover after parsing attributes in process `syz.1.1620'. [ 289.066049][T10342] FAULT_INJECTION: forcing a failure. [ 289.066049][T10342] name failslab, interval 1, probability 0, space 0, times 0 [ 289.079119][T10342] CPU: 0 PID: 10342 Comm: syz.3.1625 Not tainted syzkaller #0 [ 289.086639][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 289.096751][T10342] Call Trace: [ 289.100119][T10342] [ 289.103082][T10342] dump_stack_lvl+0x18c/0x250 [ 289.107798][T10342] ? show_regs_print_info+0x20/0x20 [ 289.113027][T10342] ? load_image+0x420/0x420 [ 289.117571][T10342] should_fail_ex+0x39d/0x4d0 [ 289.122290][T10342] should_failslab+0x9/0x20 [ 289.126836][T10342] slab_pre_alloc_hook+0x59/0x310 [ 289.131903][T10342] kmem_cache_alloc_node+0x60/0x320 [ 289.137153][T10342] ? __alloc_skb+0x103/0x2c0 [ 289.141795][T10342] __alloc_skb+0x103/0x2c0 [ 289.146249][T10342] skb_segment+0xe78/0x40a0 [ 289.150839][T10342] udp6_ufo_fragment+0x9b7/0xf40 [ 289.155817][T10342] ? udpv6_offload_exit+0x20/0x20 [ 289.160966][T10342] ipv6_gso_segment+0xb8b/0x2140 [ 289.165945][T10342] ? inet6_del_offload+0x50/0x50 [ 289.170997][T10342] ? skb_crc32c_csum_help+0x520/0x520 [ 289.176491][T10342] ? __lock_acquire+0x1273/0x7d40 [ 289.181558][T10342] ? inet6_del_offload+0x50/0x50 [ 289.186526][T10342] skb_mac_gso_segment+0x320/0x640 [ 289.191672][T10342] ? skb_mac_gso_segment+0x185/0x640 [ 289.196983][T10342] ? skb_eth_gso_segment+0x270/0x270 [ 289.202307][T10342] __skb_gso_segment+0x302/0x4a0 [ 289.207288][T10342] validate_xmit_skb+0x565/0xf60 [ 289.212250][T10342] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 289.218096][T10342] ? validate_xmit_skb_list+0x120/0x120 [ 289.223688][T10342] validate_xmit_skb_list+0x84/0x120 [ 289.229015][T10342] sch_direct_xmit+0xe0/0x4c0 [ 289.233723][T10342] ? read_lock_is_recursive+0x20/0x20 [ 289.239125][T10342] ? rcu_read_lock_bh_held+0x7a/0x100 [ 289.244544][T10342] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 289.250568][T10342] __dev_queue_xmit+0x165d/0x3660 [ 289.255666][T10342] ? __dev_queue_xmit+0x265/0x3660 [ 289.260828][T10342] ? netdev_core_pick_tx+0x340/0x340 [ 289.266156][T10342] ? virtio_net_hdr_to_skb+0xa45/0x1510 [ 289.271763][T10342] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 289.277956][T10342] ? skb_copy_datagram_from_iter+0x62e/0x6e0 [ 289.283971][T10342] ? packet_xmit+0x66/0x330 [ 289.288507][T10342] ? packet_sendmsg+0x3916/0x4c30 [ 289.293562][T10342] packet_sendmsg+0x3a0e/0x4c30 [ 289.298599][T10342] ? __might_sleep+0xe0/0xe0 [ 289.303235][T10342] ? mark_lock+0x94/0x320 [ 289.307605][T10342] ? __lock_acquire+0x1273/0x7d40 [ 289.312668][T10342] ? verify_lock_unused+0x140/0x140 [ 289.317931][T10342] ? aa_sk_perm+0x83c/0x970 [ 289.322479][T10342] ? packet_getsockopt+0xad0/0xad0 [ 289.327637][T10342] ? tomoyo_path_number_perm+0x6/0x620 [ 289.333143][T10342] ? aa_sock_msg_perm+0x94/0x150 [ 289.338221][T10342] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 289.343544][T10342] ? security_socket_sendmsg+0x80/0xa0 [ 289.349035][T10342] ? packet_getsockopt+0xad0/0xad0 [ 289.354268][T10342] ____sys_sendmsg+0x5ba/0x960 [ 289.359067][T10342] ? __lock_acquire+0x7d40/0x7d40 [ 289.364129][T10342] ? __asan_memset+0x22/0x40 [ 289.368845][T10342] ? __sys_sendmsg_sock+0x30/0x30 [ 289.374071][T10342] ? __import_iovec+0x3fa/0x850 [ 289.378966][T10342] ? import_iovec+0x73/0xa0 [ 289.383509][T10342] ___sys_sendmsg+0x2a6/0x360 [ 289.388240][T10342] ? __sys_sendmsg+0x2a0/0x2a0 [ 289.393086][T10342] ? trace_call_bpf+0xc3/0x6c0 [ 289.397917][T10342] __se_sys_sendmsg+0x1c2/0x2b0 [ 289.402808][T10342] ? __x64_sys_sendmsg+0x80/0x80 [ 289.407790][T10342] ? lockdep_hardirqs_on+0x98/0x150 [ 289.413029][T10342] do_syscall_64+0x55/0xb0 [ 289.417478][T10342] ? clear_bhb_loop+0x40/0x90 [ 289.422187][T10342] ? clear_bhb_loop+0x40/0x90 [ 289.426900][T10342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.432825][T10342] RIP: 0033:0x7f46da79ce59 [ 289.437264][T10342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.456903][T10342] RSP: 002b:00007f46db727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.465353][T10342] RAX: ffffffffffffffda RBX: 00007f46daa15fa0 RCX: 00007f46da79ce59 [ 289.473358][T10342] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 289.481360][T10342] RBP: 00007f46db727090 R08: 0000000000000000 R09: 0000000000000000 [ 289.489451][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.497454][T10342] R13: 00007f46daa16038 R14: 00007f46daa15fa0 R15: 00007ffdfd687958 [ 289.505558][T10342] [ 289.885234][T10350] netlink: 'syz.3.1626': attribute type 29 has an invalid length. [ 290.040529][T10350] netlink: 'syz.3.1626': attribute type 29 has an invalid length. [ 290.060379][T10352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1628'. [ 290.173991][T10355] netlink: 'syz.1.1629': attribute type 10 has an invalid length. [ 290.302027][T10364] FAULT_INJECTION: forcing a failure. [ 290.302027][T10364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.345545][T10364] CPU: 1 PID: 10364 Comm: syz.2.1632 Not tainted syzkaller #0 [ 290.353078][T10364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 290.363162][T10364] Call Trace: [ 290.366456][T10364] [ 290.369406][T10364] dump_stack_lvl+0x18c/0x250 [ 290.374118][T10364] ? show_regs_print_info+0x20/0x20 [ 290.379626][T10364] ? load_image+0x420/0x420 [ 290.384160][T10364] ? __might_fault+0xaa/0x120 [ 290.388859][T10364] ? __lock_acquire+0x7d40/0x7d40 [ 290.393998][T10364] should_fail_ex+0x39d/0x4d0 [ 290.398712][T10364] _copy_from_user+0x2f/0xe0 [ 290.403335][T10364] generic_map_update_batch+0x59a/0x810 [ 290.409034][T10364] ? rcu_read_unlock+0xa0/0xa0 [ 290.413807][T10364] ? __fdget+0x180/0x210 [ 290.418053][T10364] ? rcu_read_unlock+0xa0/0xa0 [ 290.422808][T10364] bpf_map_do_batch+0x3d7/0x610 [ 290.427668][T10364] __sys_bpf+0x381/0x890 [ 290.431932][T10364] ? bpf_link_show_fdinfo+0x390/0x390 [ 290.437331][T10364] ? lock_chain_count+0x20/0x20 [ 290.442217][T10364] __x64_sys_bpf+0x7c/0x90 [ 290.446653][T10364] do_syscall_64+0x55/0xb0 [ 290.451086][T10364] ? clear_bhb_loop+0x40/0x90 [ 290.455803][T10364] ? clear_bhb_loop+0x40/0x90 [ 290.460508][T10364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.466438][T10364] RIP: 0033:0x7f11a0f9ce59 [ 290.470876][T10364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.491581][T10364] RSP: 002b:00007f11a1e8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.500004][T10364] RAX: ffffffffffffffda RBX: 00007f11a1215fa0 RCX: 00007f11a0f9ce59 [ 290.507978][T10364] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 290.515944][T10364] RBP: 00007f11a1e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 290.523916][T10364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.532058][T10364] R13: 00007f11a1216038 R14: 00007f11a1215fa0 R15: 00007ffc7a8225b8 [ 290.540038][T10364] [ 291.439769][T10382] netlink: 'syz.3.1637': attribute type 9 has an invalid length. [ 291.461313][T10382] netlink: 27575 bytes leftover after parsing attributes in process `syz.3.1637'. [ 292.140747][T10400] netlink: 'syz.0.1642': attribute type 10 has an invalid length. [ 292.386435][T10412] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1650'. [ 292.463199][T10416] FAULT_INJECTION: forcing a failure. [ 292.463199][T10416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.476382][T10416] CPU: 0 PID: 10416 Comm: syz.0.1652 Not tainted syzkaller #0 [ 292.483853][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.493928][T10416] Call Trace: [ 292.497255][T10416] [ 292.500681][T10416] dump_stack_lvl+0x18c/0x250 [ 292.505453][T10416] ? show_regs_print_info+0x20/0x20 [ 292.511017][T10416] ? load_image+0x420/0x420 [ 292.515520][T10416] ? __might_fault+0xaa/0x120 [ 292.520241][T10416] ? __lock_acquire+0x7d40/0x7d40 [ 292.525266][T10416] should_fail_ex+0x39d/0x4d0 [ 292.529961][T10416] _copy_from_user+0x2f/0xe0 [ 292.534572][T10416] ___sys_sendmsg+0x1c7/0x360 [ 292.539250][T10416] ? get_pid_task+0x20/0x1e0 [ 292.543843][T10416] ? __sys_sendmsg+0x2a0/0x2a0 [ 292.548646][T10416] ? __lock_acquire+0x7d40/0x7d40 [ 292.553753][T10416] __se_sys_sendmsg+0x1c2/0x2b0 [ 292.558642][T10416] ? __x64_sys_sendmsg+0x80/0x80 [ 292.563897][T10416] ? lockdep_hardirqs_on+0x98/0x150 [ 292.569148][T10416] do_syscall_64+0x55/0xb0 [ 292.573615][T10416] ? clear_bhb_loop+0x40/0x90 [ 292.578318][T10416] ? clear_bhb_loop+0x40/0x90 [ 292.583022][T10416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.588967][T10416] RIP: 0033:0x7f463239ce59 [ 292.593408][T10416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.613135][T10416] RSP: 002b:00007f463318d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.621704][T10416] RAX: ffffffffffffffda RBX: 00007f4632615fa0 RCX: 00007f463239ce59 [ 292.629706][T10416] RDX: ff0f000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 292.637705][T10416] RBP: 00007f463318d090 R08: 0000000000000000 R09: 0000000000000000 [ 292.645716][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.653738][T10416] R13: 00007f4632616038 R14: 00007f4632615fa0 R15: 00007ffc3d48a658 [ 292.661767][T10416] [ 292.926323][T10429] netlink: 'syz.3.1653': attribute type 9 has an invalid length. [ 292.937869][T10429] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1653'. [ 293.832896][T10439] netlink: 'syz.2.1658': attribute type 10 has an invalid length. [ 299.068861][T10503] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1680'. [ 299.078862][T10509] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1680'. [ 300.567223][T10551] tap0: tun_chr_ioctl cmd 1074025677 [ 300.590450][T10551] tap0: linktype set to 258 [ 300.712956][T10545] netlink: 'syz.0.1695': attribute type 3 has an invalid length. [ 300.722073][T10545] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1695'. [ 301.122395][T10554] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1697'. [ 301.488889][T10557] netlink: 'syz.3.1698': attribute type 10 has an invalid length. [ 301.868970][T10566] netlink: 'syz.1.1702': attribute type 21 has an invalid length. [ 301.877412][T10566] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1702'. [ 303.759616][T10592] netlink: 'syz.3.1711': attribute type 10 has an invalid length. [ 306.115710][T10625] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 307.144954][T10634] netlink: 'syz.0.1727': attribute type 21 has an invalid length. [ 307.178108][T10634] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1727'. [ 309.236646][T10657] netlink: 'syz.2.1735': attribute type 10 has an invalid length. [ 310.357205][T10678] FAULT_INJECTION: forcing a failure. [ 310.357205][T10678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.363999][T10682] sctp: [Deprecated]: syz.2.1742 (pid 10682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.363999][T10682] Use struct sctp_sack_info instead [ 310.382542][T10678] CPU: 0 PID: 10678 Comm: syz.3.1743 Not tainted syzkaller #0 [ 310.394284][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.404356][T10678] Call Trace: [ 310.407653][T10678] [ 310.410605][T10678] dump_stack_lvl+0x18c/0x250 [ 310.415389][T10678] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.421566][T10678] ? show_regs_print_info+0x20/0x20 [ 310.426779][T10678] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.432972][T10678] ? dump_stack+0x9/0x20 [ 310.437241][T10678] should_fail_ex+0x39d/0x4d0 [ 310.441946][T10678] _copy_from_user+0x2f/0xe0 [ 310.446552][T10678] __sys_bpf+0x23e/0x890 [ 310.450823][T10678] ? bpf_link_show_fdinfo+0x390/0x390 [ 310.456242][T10678] ? lock_chain_count+0x20/0x20 [ 310.461126][T10678] __x64_sys_bpf+0x7c/0x90 [ 310.465559][T10678] do_syscall_64+0x55/0xb0 [ 310.469983][T10678] ? clear_bhb_loop+0x40/0x90 [ 310.474666][T10678] ? clear_bhb_loop+0x40/0x90 [ 310.479362][T10678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.485268][T10678] RIP: 0033:0x7f46da79ce59 [ 310.489695][T10678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.509315][T10678] RSP: 002b:00007f46db727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.517769][T10678] RAX: ffffffffffffffda RBX: 00007f46daa15fa0 RCX: 00007f46da79ce59 [ 310.525751][T10678] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 310.533733][T10678] RBP: 00007f46db727090 R08: 0000000000000000 R09: 0000000000000000 [ 310.541831][T10678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.549820][T10678] R13: 00007f46daa16038 R14: 00007f46daa15fa0 R15: 00007ffdfd687958 [ 310.557840][T10678] [ 310.836360][T10687] netlink: 'syz.0.1746': attribute type 10 has an invalid length. [ 312.738271][T10727] syzkaller0: entered promiscuous mode [ 312.743814][T10727] syzkaller0: entered allmulticast mode [ 315.693028][T10765] netlink: 'syz.1.1773': attribute type 10 has an invalid length. [ 316.542321][T10784] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1781'. [ 316.902799][T10795] netlink: 'syz.2.1785': attribute type 41 has an invalid length. [ 317.359279][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.366024][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.559216][T10811] FAULT_INJECTION: forcing a failure. [ 317.559216][T10811] name failslab, interval 1, probability 0, space 0, times 0 [ 317.597866][T10811] CPU: 1 PID: 10811 Comm: syz.2.1791 Not tainted syzkaller #0 [ 317.605399][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.615481][T10811] Call Trace: [ 317.618785][T10811] [ 317.621747][T10811] dump_stack_lvl+0x18c/0x250 [ 317.626460][T10811] ? sctp_sendmsg+0x15d2/0x2910 [ 317.631354][T10811] ? ___sys_sendmsg+0x2a6/0x360 [ 317.636226][T10811] ? show_regs_print_info+0x20/0x20 [ 317.641436][T10811] ? load_image+0x420/0x420 [ 317.645943][T10811] should_fail_ex+0x39d/0x4d0 [ 317.650623][T10811] should_failslab+0x9/0x20 [ 317.655569][T10811] slab_pre_alloc_hook+0x59/0x310 [ 317.660595][T10811] ? sctp_add_bind_addr+0x8c/0x360 [ 317.665705][T10811] __kmem_cache_alloc_node+0x53/0x250 [ 317.671082][T10811] ? sctp_add_bind_addr+0x8c/0x360 [ 317.676193][T10811] kmalloc_trace+0x2a/0xe0 [ 317.680612][T10811] sctp_add_bind_addr+0x8c/0x360 [ 317.685560][T10811] sctp_copy_local_addr_list+0x315/0x4f0 [ 317.691191][T10811] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 317.696907][T10811] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 317.702972][T10811] ? sctp_v4_is_any+0x35/0x60 [ 317.707647][T10811] ? sctp_copy_one_addr+0x8c/0x350 [ 317.712763][T10811] sctp_bind_addr_copy+0xb3/0x3c0 [ 317.717789][T10811] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 317.724118][T10811] sctp_connect_new_asoc+0x2f9/0x6a0 [ 317.729584][T10811] ? __sctp_connect+0xd80/0xd80 [ 317.734427][T10811] ? __local_bh_enable_ip+0x13a/0x1c0 [ 317.739798][T10811] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 317.745441][T10811] ? security_sctp_bind_connect+0x89/0xb0 [ 317.751165][T10811] sctp_sendmsg+0x15d2/0x2910 [ 317.755848][T10811] ? sctp_getsockopt+0xb60/0xb60 [ 317.760802][T10811] ? aa_sk_perm+0x83c/0x970 [ 317.765322][T10811] ? aa_af_perm+0x330/0x330 [ 317.769829][T10811] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 317.776250][T10811] ? sock_rps_record_flow+0x19/0x3f0 [ 317.781543][T10811] ? inet_sendmsg+0xe9/0x2f0 [ 317.786133][T10811] ? inet_send_prepare+0x260/0x260 [ 317.791250][T10811] ____sys_sendmsg+0x5ba/0x960 [ 317.796020][T10811] ? __lock_acquire+0x7d40/0x7d40 [ 317.801098][T10811] ? __asan_memset+0x22/0x40 [ 317.805950][T10811] ? __sys_sendmsg_sock+0x30/0x30 [ 317.810973][T10811] ? __import_iovec+0x5f2/0x850 [ 317.815825][T10811] ? import_iovec+0x73/0xa0 [ 317.820343][T10811] ___sys_sendmsg+0x2a6/0x360 [ 317.825020][T10811] ? get_pid_task+0x20/0x1e0 [ 317.829791][T10811] ? __sys_sendmsg+0x2a0/0x2a0 [ 317.834571][T10811] ? __lock_acquire+0x7d40/0x7d40 [ 317.839612][T10811] __se_sys_sendmsg+0x1c2/0x2b0 [ 317.844464][T10811] ? __x64_sys_sendmsg+0x80/0x80 [ 317.849409][T10811] ? lockdep_hardirqs_on+0x98/0x150 [ 317.854618][T10811] do_syscall_64+0x55/0xb0 [ 317.859035][T10811] ? clear_bhb_loop+0x40/0x90 [ 317.863712][T10811] ? clear_bhb_loop+0x40/0x90 [ 317.868381][T10811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.874310][T10811] RIP: 0033:0x7f11a0f9ce59 [ 317.878721][T10811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.899036][T10811] RSP: 002b:00007f11a1e8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.907488][T10811] RAX: ffffffffffffffda RBX: 00007f11a1215fa0 RCX: 00007f11a0f9ce59 [ 317.915472][T10811] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 317.923567][T10811] RBP: 00007f11a1e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 317.931575][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.939555][T10811] R13: 00007f11a1216038 R14: 00007f11a1215fa0 R15: 00007ffc7a8225b8 [ 317.947545][T10811] [ 318.136268][T10817] netlink: 'syz.2.1794': attribute type 10 has an invalid length. [ 318.182132][T10821] netlink: 'syz.1.1796': attribute type 29 has an invalid length. [ 318.213258][T10821] netlink: 'syz.1.1796': attribute type 29 has an invalid length. [ 318.236802][T10821] netlink: 'syz.1.1796': attribute type 29 has an invalid length. [ 318.387316][T10826] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1799'. [ 318.399576][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'. [ 318.425779][T10830] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 318.443469][T10830] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 318.444824][T10826] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1799'. [ 318.478580][T10826] netlink: zone id is out of range [ 318.484166][T10826] netlink: zone id is out of range [ 318.504518][T10826] netlink: zone id is out of range [ 318.517769][T10826] netlink: zone id is out of range [ 318.536990][T10826] netlink: zone id is out of range [ 318.545473][T10826] netlink: zone id is out of range [ 318.564503][T10826] netlink: zone id is out of range [ 318.584219][T10826] netlink: zone id is out of range [ 318.591799][T10826] netlink: zone id is out of range [ 318.612156][T10826] netlink: zone id is out of range [ 319.542135][T10842] sit0: entered allmulticast mode [ 319.608003][T10844] sit0: entered promiscuous mode [ 320.136138][T10854] netlink: 'syz.0.1808': attribute type 10 has an invalid length. [ 321.661630][T10879] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1816'. [ 321.672926][T10879] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1816'. [ 322.303819][T10895] netlink: 'syz.3.1821': attribute type 10 has an invalid length. [ 322.405798][T10897] syzkaller0: entered promiscuous mode [ 322.415202][T10897] syzkaller0: entered allmulticast mode [ 323.184917][T10911] netlink: 'syz.2.1827': attribute type 1 has an invalid length. [ 323.198428][T10911] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1827'. [ 324.373184][T10904] netlink: 'syz.3.1824': attribute type 10 has an invalid length. [ 324.381324][T10899] netlink: 'syz.0.1823': attribute type 10 has an invalid length. [ 324.397513][T10899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1823'. [ 324.411861][T10899] ipvlan1: entered promiscuous mode [ 324.417571][T10899] ipvlan1: entered allmulticast mode [ 324.423150][T10899] veth0_vlan: entered allmulticast mode [ 324.443761][T10899] net_ratelimit: 331 callbacks suppressed [ 324.443781][T10899] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 324.474059][T10913] netlink: 'syz.2.1827': attribute type 21 has an invalid length. [ 324.725928][T10919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.759730][T10919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.662587][T10919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.672098][T10919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.928760][T10919] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 325.935880][T10919] batman_adv: batadv0: Removing interface: veth0_vlan [ 326.061737][T10935] netlink: 'syz.1.1833': attribute type 10 has an invalid length. [ 326.336510][T10945] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1837'. [ 326.732474][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1843'. [ 327.038003][T10968] netlink: 'syz.1.1847': attribute type 10 has an invalid length. [ 327.053597][T10970] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1849'. [ 327.362685][T10976] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1851'. [ 327.386678][T10976] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1851'. [ 327.417000][T10974] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1851'. [ 327.498888][T10980] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1851'. [ 327.589892][T10974] netlink: 'syz.2.1851': attribute type 10 has an invalid length. [ 327.608250][T10974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1851'. [ 327.633848][T10974] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 327.653979][T10974] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.736819][T10974] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 327.759605][T10982] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1853'. [ 327.787911][T10982] bridge_slave_1: default FDB implementation only supports local addresses [ 328.415360][T10996] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1856'. [ 328.983909][T10999] netlink: 'syz.1.1860': attribute type 10 has an invalid length. [ 329.222836][T11008] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1863'. [ 329.222878][T11012] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 329.240861][T11012] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 329.945778][T11037] FAULT_INJECTION: forcing a failure. [ 329.945778][T11037] name failslab, interval 1, probability 0, space 0, times 0 [ 330.010742][T11037] CPU: 1 PID: 11037 Comm: syz.3.1874 Not tainted syzkaller #0 [ 330.018291][T11037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 330.028540][T11037] Call Trace: [ 330.031841][T11037] [ 330.034797][T11037] dump_stack_lvl+0x18c/0x250 [ 330.039511][T11037] ? show_regs_print_info+0x20/0x20 [ 330.044763][T11037] ? load_image+0x420/0x420 [ 330.049295][T11037] ? __might_sleep+0xe0/0xe0 [ 330.053919][T11037] ? __lock_acquire+0x7d40/0x7d40 [ 330.058967][T11037] should_fail_ex+0x39d/0x4d0 [ 330.063680][T11037] should_failslab+0x9/0x20 [ 330.068207][T11037] slab_pre_alloc_hook+0x59/0x310 [ 330.073262][T11037] kmem_cache_alloc_node+0x60/0x320 [ 330.078493][T11037] ? __alloc_skb+0x103/0x2c0 [ 330.083126][T11037] __alloc_skb+0x103/0x2c0 [ 330.087575][T11037] alloc_skb_with_frags+0xca/0x7b0 [ 330.092720][T11037] sock_alloc_send_pskb+0x883/0x9a0 [ 330.098041][T11037] ? sock_kzfree_s+0x50/0x50 [ 330.102651][T11037] ? perf_trace_lock+0xfc/0x3b0 [ 330.107549][T11037] ? trace_event_raw_event_lock+0x250/0x250 [ 330.113487][T11037] ? perf_trace_preemptirq_template+0xac/0x330 [ 330.120286][T11037] __ip_append_data+0x2a2f/0x3b80 [ 330.125407][T11037] ? trace_event_raw_event_lock+0x250/0x250 [ 330.131610][T11037] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 330.136492][T11037] ? ip_setup_cork+0x860/0x860 [ 330.141365][T11037] ? ip_setup_cork+0x530/0x860 [ 330.146497][T11037] ip_make_skb+0x22b/0x440 [ 330.151031][T11037] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 330.155906][T11037] ? ip_flush_pending_frames+0x250/0x250 [ 330.161589][T11037] udp_sendmsg+0x1ade/0x23b0 [ 330.166313][T11037] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 330.171198][T11037] ? udp_cmsg_send+0x350/0x350 [ 330.176011][T11037] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 330.182200][T11037] ? lock_chain_count+0x20/0x20 [ 330.187079][T11037] ? inet_sendmsg+0x14b/0x2f0 [ 330.191787][T11037] ? __local_bh_enable_ip+0x13a/0x1c0 [ 330.197178][T11037] ? _local_bh_enable+0xa0/0xa0 [ 330.202055][T11037] ? inet_sendmsg+0x14b/0x2f0 [ 330.206766][T11037] ? inet_sendmsg+0x14b/0x2f0 [ 330.211548][T11037] ? inet_send_prepare+0x260/0x260 [ 330.216958][T11037] ____sys_sendmsg+0x5ba/0x960 [ 330.221756][T11037] ? __sys_sendmsg_sock+0x30/0x30 [ 330.227058][T11037] ? __import_iovec+0x3fa/0x850 [ 330.232468][T11037] ? import_iovec+0x73/0xa0 [ 330.236995][T11037] ___sys_sendmsg+0x2a6/0x360 [ 330.242136][T11037] ? __sys_sendmsg+0x2a0/0x2a0 [ 330.247027][T11037] ? __lock_acquire+0x7d40/0x7d40 [ 330.252112][T11037] __se_sys_sendmsg+0x1c2/0x2b0 [ 330.256999][T11037] ? __x64_sys_sendmsg+0x80/0x80 [ 330.261982][T11037] ? lockdep_hardirqs_on+0x98/0x150 [ 330.267208][T11037] do_syscall_64+0x55/0xb0 [ 330.271642][T11037] ? clear_bhb_loop+0x40/0x90 [ 330.276331][T11037] ? clear_bhb_loop+0x40/0x90 [ 330.281025][T11037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.286938][T11037] RIP: 0033:0x7f46da79ce59 [ 330.291489][T11037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.311300][T11037] RSP: 002b:00007f46db727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.319753][T11037] RAX: ffffffffffffffda RBX: 00007f46daa15fa0 RCX: 00007f46da79ce59 [ 330.327766][T11037] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000003 [ 330.335768][T11037] RBP: 00007f46db727090 R08: 0000000000000000 R09: 0000000000000000 [ 330.343755][T11037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.351758][T11037] R13: 00007f46daa16038 R14: 00007f46daa15fa0 R15: 00007ffdfd687958 [ 330.359865][T11037] [ 330.390502][T11041] netlink: 'syz.0.1875': attribute type 10 has an invalid length. [ 331.285214][T11068] netlink: 'syz.3.1886': attribute type 10 has an invalid length. [ 331.336923][T11072] netlink: 'syz.0.1888': attribute type 10 has an invalid length. [ 332.008461][T11076] netlink: 'syz.0.1889': attribute type 3 has an invalid length. [ 332.085294][T11076] __nla_validate_parse: 2 callbacks suppressed [ 332.085312][T11076] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1889'. [ 332.908459][T11100] netlink: 'syz.2.1898': attribute type 10 has an invalid length. [ 333.066987][T11103] netlink: 'syz.1.1899': attribute type 10 has an invalid length. [ 334.380863][T11128] netlink: 'syz.1.1909': attribute type 3 has an invalid length. [ 334.391394][T11128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1909'. [ 334.715764][T11144] netlink: 'syz.3.1914': attribute type 21 has an invalid length. [ 338.486108][T11170] netlink: 'syz.2.1925': attribute type 17 has an invalid length. [ 338.497362][T11170] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1925'. [ 338.517370][T11170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.644078][T11177] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1925'. [ 338.676605][T11177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.719488][T11189] FAULT_INJECTION: forcing a failure. [ 341.719488][T11189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.734937][T11189] CPU: 0 PID: 11189 Comm: syz.1.1929 Not tainted syzkaller #0 [ 341.742454][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.752532][T11189] Call Trace: [ 341.755835][T11189] [ 341.758790][T11189] dump_stack_lvl+0x18c/0x250 [ 341.763600][T11189] ? show_regs_print_info+0x20/0x20 [ 341.768833][T11189] ? load_image+0x420/0x420 [ 341.773369][T11189] ? __might_fault+0xaa/0x120 [ 341.778078][T11189] ? __lock_acquire+0x7d40/0x7d40 [ 341.783151][T11189] should_fail_ex+0x39d/0x4d0 [ 341.787880][T11189] _copy_from_user+0x2f/0xe0 [ 341.792549][T11189] generic_map_update_batch+0x54b/0x810 [ 341.798133][T11189] ? rcu_read_unlock+0xa0/0xa0 [ 341.802928][T11189] ? __fdget+0x180/0x210 [ 341.807314][T11189] ? rcu_read_unlock+0xa0/0xa0 [ 341.812482][T11189] bpf_map_do_batch+0x3d7/0x610 [ 341.817377][T11189] __sys_bpf+0x381/0x890 [ 341.821667][T11189] ? bpf_link_show_fdinfo+0x390/0x390 [ 341.827092][T11189] ? lock_chain_count+0x20/0x20 [ 341.831990][T11189] __x64_sys_bpf+0x7c/0x90 [ 341.836441][T11189] do_syscall_64+0x55/0xb0 [ 341.840895][T11189] ? clear_bhb_loop+0x40/0x90 [ 341.845608][T11189] ? clear_bhb_loop+0x40/0x90 [ 341.850311][T11189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.856242][T11189] RIP: 0033:0x7f399879ce59 [ 341.860684][T11189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.880362][T11189] RSP: 002b:00007f399961d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.888875][T11189] RAX: ffffffffffffffda RBX: 00007f3998a15fa0 RCX: 00007f399879ce59 [ 341.896875][T11189] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 341.904874][T11189] RBP: 00007f399961d090 R08: 0000000000000000 R09: 0000000000000000 [ 341.905391][T11198] netlink: 'syz.0.1932': attribute type 6 has an invalid length. [ 341.912853][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.912873][T11189] R13: 00007f3998a16038 R14: 00007f3998a15fa0 R15: 00007fff5de864f8 [ 341.912896][T11189] [ 342.961869][T11204] netlink: 'syz.0.1935': attribute type 10 has an invalid length. [ 343.136137][T11208] netlink: 'syz.3.1937': attribute type 10 has an invalid length. [ 343.169151][T11212] netlink: 'syz.1.1939': attribute type 17 has an invalid length. [ 343.177249][T11212] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1939'. [ 343.187549][T11212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.327925][T11215] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1939'. [ 343.356822][T11215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.604407][T11227] netlink: 'syz.2.1942': attribute type 10 has an invalid length. [ 346.637851][T11231] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1944'. [ 346.650973][T11235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1946'. [ 346.885509][T11242] netlink: 'syz.0.1949': attribute type 10 has an invalid length. [ 346.923008][T11244] netlink: 'syz.3.1951': attribute type 17 has an invalid length. [ 346.948058][T11244] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1951'. [ 346.957840][T11244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.073776][T11249] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1951'. [ 347.091191][T11249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.227677][T11258] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1954'. [ 348.268709][T11259] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1954'. [ 348.445959][T11268] netlink: 'syz.3.1959': attribute type 10 has an invalid length. [ 349.370481][T11293] syz.0.1966: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 349.410390][T11293] CPU: 0 PID: 11293 Comm: syz.0.1966 Not tainted syzkaller #0 [ 349.417951][T11293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.428067][T11293] Call Trace: [ 349.431398][T11293] [ 349.434376][T11293] dump_stack_lvl+0x18c/0x250 [ 349.439286][T11293] ? show_regs_print_info+0x20/0x20 [ 349.444546][T11293] ? load_image+0x420/0x420 [ 349.449150][T11293] ? __rcu_read_unlock+0x7c/0xd0 [ 349.454208][T11293] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 349.460711][T11293] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 349.467295][T11293] warn_alloc+0x246/0x340 [ 349.471738][T11293] ? stack_trace_save+0xaa/0x100 [ 349.476847][T11293] ? zone_watermark_ok_safe+0x230/0x230 [ 349.482479][T11293] ? kasan_set_track+0x5f/0x70 [ 349.487305][T11293] ? kasan_set_track+0x4e/0x70 [ 349.492086][T11293] ? __kasan_kmalloc+0x8f/0xa0 [ 349.496865][T11293] ? xsk_init_queue+0xad/0x100 [ 349.501715][T11293] ? xsk_setsockopt+0x4e5/0x760 [ 349.506579][T11293] ? do_sock_setsockopt+0x175/0x1a0 [ 349.511888][T11293] ? __x64_sys_setsockopt+0x182/0x200 [ 349.517461][T11293] __vmalloc_node_range+0x126/0x1330 [ 349.522848][T11293] ? free_vm_area+0x50/0x50 [ 349.527396][T11293] vmalloc_user+0x74/0x80 [ 349.531746][T11293] ? xskq_create+0xbf/0x170 [ 349.536265][T11293] xskq_create+0xbf/0x170 [ 349.540645][T11293] xsk_init_queue+0xad/0x100 [ 349.545258][T11293] xsk_setsockopt+0x4e5/0x760 [ 349.549964][T11293] ? xsk_poll+0x680/0x680 [ 349.554317][T11293] ? __fget_files+0x28/0x4b0 [ 349.559037][T11293] ? __fget_files+0x28/0x4b0 [ 349.563645][T11293] ? aa_sock_opt_perm+0x74/0x100 [ 349.568644][T11293] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 349.574258][T11293] ? security_socket_setsockopt+0x7e/0xa0 [ 349.580024][T11293] ? xsk_poll+0x680/0x680 [ 349.584381][T11293] do_sock_setsockopt+0x175/0x1a0 [ 349.589426][T11293] ? __fdget+0x180/0x210 [ 349.593693][T11293] __x64_sys_setsockopt+0x182/0x200 [ 349.598927][T11293] do_syscall_64+0x55/0xb0 [ 349.603359][T11293] ? clear_bhb_loop+0x40/0x90 [ 349.608139][T11293] ? clear_bhb_loop+0x40/0x90 [ 349.612840][T11293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.618829][T11293] RIP: 0033:0x7f463239ce59 [ 349.623270][T11293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.642908][T11293] RSP: 002b:00007f463318d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 349.651351][T11293] RAX: ffffffffffffffda RBX: 00007f4632615fa0 RCX: 00007f463239ce59 [ 349.659364][T11293] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d [ 349.667364][T11293] RBP: 00007f4632432e6f R08: 0000000000000004 R09: 0000000000000000 [ 349.675357][T11293] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 349.683352][T11293] R13: 00007f4632616038 R14: 00007f4632615fa0 R15: 00007ffc3d48a658 [ 349.691389][T11293] [ 349.729491][T11293] Mem-Info: [ 349.732799][T11293] active_anon:19148 inactive_anon:0 isolated_anon:0 [ 349.732799][T11293] active_file:15448 inactive_file:40053 isolated_file:0 [ 349.732799][T11293] unevictable:768 dirty:176 writeback:0 [ 349.732799][T11293] slab_reclaimable:10397 slab_unreclaimable:92924 [ 349.732799][T11293] mapped:33876 shmem:13460 pagetables:598 [ 349.732799][T11293] sec_pagetables:0 bounce:0 [ 349.732799][T11293] kernel_misc_reclaimable:0 [ 349.732799][T11293] free:1334310 free_pcp:10870 free_cma:0 [ 349.783124][T11293] Node 0 active_anon:79592kB inactive_anon:0kB active_file:61792kB inactive_file:160012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135604kB dirty:704kB writeback:0kB shmem:55404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10896kB pagetables:2392kB sec_pagetables:0kB all_unreclaimable? no [ 349.822880][T11293] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 349.860153][T11293] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.942326][T11293] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 349.977731][T11293] Node 0 DMA32 free:1418444kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:87452kB inactive_anon:0kB active_file:63292kB inactive_file:159192kB unevictable:1536kB writepending:604kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:21020kB local_pcp:12044kB free_cma:0kB [ 350.101460][T11293] lowmem_reserve[]: 0 0 0 0 0 [ 350.106404][T11293] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 350.134604][T11309] FAULT_INJECTION: forcing a failure. [ 350.134604][T11309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.156320][T11309] CPU: 1 PID: 11309 Comm: syz.1.1970 Not tainted syzkaller #0 [ 350.163975][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.174068][T11309] Call Trace: [ 350.177419][T11309] [ 350.180377][T11309] dump_stack_lvl+0x18c/0x250 [ 350.182375][T11306] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1969'. [ 350.185161][T11309] ? show_regs_print_info+0x20/0x20 [ 350.185214][T11309] ? load_image+0x420/0x420 [ 350.204324][T11309] ? __might_fault+0xaa/0x120 [ 350.207883][T11293] lowmem_reserve[]: [ 350.209035][T11309] ? __lock_acquire+0x7d40/0x7d40 [ 350.209070][T11309] should_fail_ex+0x39d/0x4d0 [ 350.213182][T11293] 0 [ 350.218226][T11309] _copy_from_user+0x2f/0xe0 [ 350.218265][T11309] kstrtouint_from_user+0xde/0x170 [ 350.218289][T11309] ? kstrtol_from_user+0x190/0x190 [ 350.218327][T11309] proc_fail_nth_write+0x8f/0x250 [ 350.218361][T11309] ? proc_fail_nth_read+0x260/0x260 [ 350.218390][T11309] ? proc_fail_nth_read+0x260/0x260 [ 350.218412][T11309] vfs_write+0x296/0x990 [ 350.223220][T11293] 0 [ 350.225596][T11309] ? file_end_write+0x250/0x250 [ 350.263850][T11293] 0 [ 350.267526][T11309] ? __fget_files+0x28/0x4b0 [ 350.267558][T11309] ? __fget_files+0x28/0x4b0 [ 350.279262][T11309] ? __fget_files+0x43d/0x4b0 [ 350.279303][T11309] ? __fdget_pos+0x2a3/0x330 [ 350.279320][T11309] ? ksys_write+0x75/0x260 [ 350.279346][T11309] ksys_write+0x150/0x260 [ 350.279372][T11309] ? __ia32_sys_read+0x90/0x90 [ 350.279398][T11309] ? lockdep_hardirqs_on+0x98/0x150 [ 350.279425][T11309] do_syscall_64+0x55/0xb0 [ 350.279441][T11309] ? clear_bhb_loop+0x40/0x90 [ 350.279457][T11309] ? clear_bhb_loop+0x40/0x90 [ 350.279476][T11309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.279499][T11309] RIP: 0033:0x7f399875d68e [ 350.279518][T11309] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 350.279533][T11309] RSP: 002b:00007f399961cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.279555][T11309] RAX: ffffffffffffffda RBX: 00007f399961d6c0 RCX: 00007f399875d68e [ 350.279568][T11309] RDX: 0000000000000001 RSI: 00007f399961d0a0 RDI: 0000000000000006 [ 350.279581][T11309] RBP: 00007f399961d090 R08: 0000000000000000 R09: 0000000000000000 [ 350.279592][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.279610][T11309] R13: 00007f3998a16038 R14: 00007f3998a15fa0 R15: 00007fff5de864f8 [ 350.279643][T11309] [ 350.382083][T11293] 0 0 [ 350.437879][T11293] Node 1 Normal free:3891088kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22836kB local_pcp:11672kB free_cma:0kB [ 350.479785][T11293] lowmem_reserve[]: 0 0 0 0 0 [ 350.484638][T11293] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 350.514267][T11293] Node 0 DMA32: 119*4kB (UM) 23*8kB (E) 142*16kB (UM) 329*32kB (UME) 355*64kB (U) 139*128kB (UE) 84*256kB (UME) 51*512kB (U) 29*1024kB (UME) 8*2048kB (UM) 308*4096kB (UM) = 1409236kB [ 350.553894][T11293] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 350.576145][T11293] Node 1 Normal: 116*4kB (UME) 56*8kB (UME) 44*16kB (UME) 42*32kB (UME) 20*64kB (UE) 4*128kB (UME) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3891088kB [ 350.608064][T11293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.636251][T11293] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.659032][T11293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.681772][T11293] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.704778][T11293] 75002 total pagecache pages [ 350.717788][T11293] 0 pages in swap cache [ 350.732389][T11293] Free swap = 124996kB [ 350.736770][T11293] Total swap = 124996kB [ 350.748059][T11293] 2097051 pages RAM [ 350.752057][T11293] 0 pages HighMem/MovableOnly [ 350.769057][T11293] 416933 pages reserved [ 350.778191][T11293] 0 pages cma reserved [ 350.908879][T11312] netlink: 'syz.2.1971': attribute type 10 has an invalid length. [ 350.978516][T11317] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 351.042036][T11317] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1972'. [ 351.129776][T11317] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.1972'. [ 351.226390][T11317] tipc: Started in network mode [ 351.286718][T11317] tipc: Node identity b, cluster identity 73 [ 351.423859][T11317] tipc: Node number set to 11 [ 352.387893][T11342] netlink: 'syz.3.1980': attribute type 29 has an invalid length. [ 352.415556][T11342] netlink: 'syz.3.1980': attribute type 29 has an invalid length. [ 352.548526][T11346] netlink: 'syz.1.1981': attribute type 10 has an invalid length. [ 352.595031][T11346] veth1_vlan: left promiscuous mode [ 352.654312][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1982'. [ 352.989128][T11354] netlink: 'syz.0.1984': attribute type 10 has an invalid length. [ 353.110118][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1987'. [ 353.220447][T11361] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1987'. [ 353.240800][T11361] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 354.152051][T11371] netlink: 'syz.3.1990': attribute type 10 has an invalid length. [ 354.202185][T11371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1990'. [ 354.269926][T11371] batman_adv: batadv0: Adding interface: virt_wifi0 [ 354.297440][T11371] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.373968][T11371] batman_adv: batadv0: Interface activated: virt_wifi0 [ 354.516902][T11379] netlink: 'syz.1.1992': attribute type 1 has an invalid length. [ 354.551575][T11379] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.1992'. [ 354.563648][T11380] netlink: 'syz.1.1992': attribute type 10 has an invalid length. [ 354.582587][T11380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1992'. [ 354.607896][T11380] caif0: entered promiscuous mode [ 354.613069][T11380] caif0: entered allmulticast mode [ 354.637812][T11380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.679680][T11406] netlink: 'syz.2.2002': attribute type 21 has an invalid length. [ 356.702424][T11408] FAULT_INJECTION: forcing a failure. [ 356.702424][T11408] name failslab, interval 1, probability 0, space 0, times 0 [ 356.715800][T11406] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2002'. [ 356.731085][T11408] CPU: 0 PID: 11408 Comm: syz.0.2004 Not tainted syzkaller #0 [ 356.738631][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.748716][T11408] Call Trace: [ 356.752000][T11408] [ 356.754930][T11408] dump_stack_lvl+0x18c/0x250 [ 356.759612][T11408] ? show_regs_print_info+0x20/0x20 [ 356.764812][T11408] ? load_image+0x420/0x420 [ 356.769315][T11408] ? kasan_check_range+0x67/0x290 [ 356.774424][T11408] ? trace_event_raw_event_lock+0x250/0x250 [ 356.780321][T11408] should_fail_ex+0x39d/0x4d0 [ 356.785005][T11408] should_failslab+0x9/0x20 [ 356.789689][T11408] slab_pre_alloc_hook+0x59/0x310 [ 356.794748][T11408] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 356.800410][T11408] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 356.805993][T11408] __kmem_cache_alloc_node+0x53/0x250 [ 356.811371][T11408] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 356.816917][T11408] __kmalloc+0xa4/0x230 [ 356.821075][T11408] bpf_prog_test_run_skb+0x245/0x18c0 [ 356.826446][T11408] ? __fget_files+0x28/0x4b0 [ 356.831035][T11408] ? __fget_files+0x28/0x4b0 [ 356.835724][T11408] ? __fget_files+0x43d/0x4b0 [ 356.840505][T11408] ? cpu_online+0x60/0x60 [ 356.844856][T11408] bpf_prog_test_run+0x321/0x390 [ 356.849790][T11408] __sys_bpf+0x49d/0x890 [ 356.854027][T11408] ? bpf_link_show_fdinfo+0x390/0x390 [ 356.859407][T11408] ? lock_chain_count+0x20/0x20 [ 356.864286][T11408] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 356.870375][T11408] __x64_sys_bpf+0x7c/0x90 [ 356.874797][T11408] do_syscall_64+0x55/0xb0 [ 356.879217][T11408] ? clear_bhb_loop+0x40/0x90 [ 356.884168][T11408] ? clear_bhb_loop+0x40/0x90 [ 356.888859][T11408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.894847][T11408] RIP: 0033:0x7f463239ce59 [ 356.899264][T11408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.919137][T11408] RSP: 002b:00007f463318d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.927549][T11408] RAX: ffffffffffffffda RBX: 00007f4632615fa0 RCX: 00007f463239ce59 [ 356.935512][T11408] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 356.943476][T11408] RBP: 00007f463318d090 R08: 0000000000000000 R09: 0000000000000000 [ 356.951439][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.959409][T11408] R13: 00007f4632616038 R14: 00007f4632615fa0 R15: 00007ffc3d48a658 [ 356.967392][T11408] [ 357.352072][T11416] netlink: 'syz.1.2008': attribute type 9 has an invalid length. [ 357.376281][T11416] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2008'. [ 357.401841][T11424] netlink: 'syz.0.2007': attribute type 39 has an invalid length. [ 358.669763][T11424] veth0_macvtap: left promiscuous mode [ 358.913641][T11435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2015'. [ 358.970163][T11438] FAULT_INJECTION: forcing a failure. [ 358.970163][T11438] name failslab, interval 1, probability 0, space 0, times 0 [ 358.982905][T11438] CPU: 1 PID: 11438 Comm: syz.2.2014 Not tainted syzkaller #0 [ 358.990392][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.000491][T11438] Call Trace: [ 359.003801][T11438] [ 359.006764][T11438] dump_stack_lvl+0x18c/0x250 [ 359.011493][T11438] ? show_regs_print_info+0x20/0x20 [ 359.016806][T11438] ? load_image+0x420/0x420 [ 359.021333][T11438] ? netdev_core_pick_tx+0x340/0x340 [ 359.026739][T11438] ? rcu_is_watching+0x15/0xb0 [ 359.031883][T11438] should_fail_ex+0x39d/0x4d0 [ 359.036596][T11438] should_failslab+0x9/0x20 [ 359.041131][T11438] slab_pre_alloc_hook+0x59/0x310 [ 359.046201][T11438] kmem_cache_alloc+0x5a/0x2d0 [ 359.050986][T11438] ? skb_clone+0x1eb/0x370 [ 359.055430][T11438] skb_clone+0x1eb/0x370 [ 359.059712][T11438] bpf_clone_redirect+0x167/0x4a0 [ 359.064884][T11438] bpf_prog_de5959beb1c8948f+0x5a/0x5f [ 359.070372][T11438] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 359.076387][T11438] ? perf_trace_preemptirq_template+0xac/0x330 [ 359.082572][T11438] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 359.088575][T11438] ? lockdep_softirqs_on+0x580/0x580 [ 359.093888][T11438] ? lock_chain_count+0x20/0x20 [ 359.098758][T11438] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 359.105030][T11438] ? __local_bh_disable_ip+0x108/0x1a0 [ 359.110547][T11438] ? __cant_sleep+0x220/0x220 [ 359.115242][T11438] ? __local_bh_enable_ip+0x13a/0x1c0 [ 359.120637][T11438] ? _local_bh_enable+0xa0/0xa0 [ 359.125528][T11438] ? bpf_test_timer_continue+0x135/0x380 [ 359.131190][T11438] ? bpf_test_run+0x174/0x870 [ 359.135905][T11438] bpf_test_run+0x2df/0x870 [ 359.140451][T11438] ? bpf_test_run+0x174/0x870 [ 359.145690][T11438] ? dst_hold+0x70/0x70 [ 359.150443][T11438] ? eth_get_headlen+0x210/0x210 [ 359.155549][T11438] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 359.160978][T11438] ? cpu_online+0x60/0x60 [ 359.165394][T11438] bpf_prog_test_run+0x321/0x390 [ 359.170360][T11438] __sys_bpf+0x49d/0x890 [ 359.174625][T11438] ? bpf_link_show_fdinfo+0x390/0x390 [ 359.180080][T11438] ? lock_chain_count+0x20/0x20 [ 359.184998][T11438] __x64_sys_bpf+0x7c/0x90 [ 359.189437][T11438] do_syscall_64+0x55/0xb0 [ 359.194048][T11438] ? clear_bhb_loop+0x40/0x90 [ 359.198737][T11438] ? clear_bhb_loop+0x40/0x90 [ 359.203439][T11438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.209358][T11438] RIP: 0033:0x7f11a0f9ce59 [ 359.213797][T11438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.233429][T11438] RSP: 002b:00007f11a1e8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.241872][T11438] RAX: ffffffffffffffda RBX: 00007f11a1215fa0 RCX: 00007f11a0f9ce59 [ 359.249864][T11438] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 359.257857][T11438] RBP: 00007f11a1e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 359.265846][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 359.273839][T11438] R13: 00007f11a1216038 R14: 00007f11a1215fa0 R15: 00007ffc7a8225b8 [ 359.281939][T11438] [ 359.589765][T11442] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2017'. [ 359.756930][T11441] netlink: 'syz.3.2016': attribute type 10 has an invalid length. [ 359.816619][T11441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2016'. [ 360.269053][T11457] netlink: 'syz.3.2022': attribute type 10 has an invalid length. [ 360.362277][T11457] team0: Device wg1 is of different type [ 361.651584][T11484] FAULT_INJECTION: forcing a failure. [ 361.651584][T11484] name failslab, interval 1, probability 0, space 0, times 0 [ 361.683476][T11484] CPU: 0 PID: 11484 Comm: syz.3.2030 Not tainted syzkaller #0 [ 361.691023][T11484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.701107][T11484] Call Trace: [ 361.704409][T11484] [ 361.707359][T11484] dump_stack_lvl+0x18c/0x250 [ 361.712079][T11484] ? show_regs_print_info+0x20/0x20 [ 361.717583][T11484] ? load_image+0x420/0x420 [ 361.722112][T11484] ? perf_trace_lock_acquire+0x104/0x410 [ 361.727958][T11484] ? verify_lock_unused+0x140/0x140 [ 361.733196][T11484] ? perf_trace_lock_acquire+0x104/0x410 [ 361.738865][T11484] should_fail_ex+0x39d/0x4d0 [ 361.743585][T11484] should_failslab+0x9/0x20 [ 361.748307][T11484] slab_pre_alloc_hook+0x59/0x310 [ 361.753364][T11484] kmem_cache_alloc+0x5a/0x2d0 [ 361.758329][T11484] ? skb_clone+0x1eb/0x370 [ 361.762771][T11484] skb_clone+0x1eb/0x370 [ 361.767043][T11484] __netlink_deliver_tap+0x41c/0x830 [ 361.772542][T11484] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.777860][T11484] netlink_deliver_tap+0x19c/0x1b0 [ 361.782995][T11484] netlink_sendskb+0x68/0x130 [ 361.787700][T11484] netlink_ack+0xce1/0x1180 [ 361.792222][T11484] ? __inet_diag_dump+0x380/0x380 [ 361.797364][T11484] ? netlink_dump+0xe50/0xe50 [ 361.802068][T11484] ? __inet_diag_dump+0x380/0x380 [ 361.807124][T11484] ? sock_diag_rcv_msg+0x402/0x600 [ 361.812269][T11484] netlink_rcv_skb+0x2c5/0x4d0 [ 361.817060][T11484] ? sock_diag_bind+0xb0/0xb0 [ 361.821763][T11484] ? netlink_ack+0x1180/0x1180 [ 361.826562][T11484] ? __lock_acquire+0x7d40/0x7d40 [ 361.831616][T11484] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.836845][T11484] sock_diag_rcv+0x2a/0x40 [ 361.841294][T11484] netlink_unicast+0x751/0x8d0 [ 361.846091][T11484] netlink_sendmsg+0x8d0/0xbf0 [ 361.850898][T11484] ? netlink_getsockopt+0x590/0x590 [ 361.856118][T11484] ? aa_sock_msg_perm+0x94/0x150 [ 361.861085][T11484] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 361.866385][T11484] ? security_socket_sendmsg+0x80/0xa0 [ 361.871854][T11484] ? netlink_getsockopt+0x590/0x590 [ 361.877324][T11484] ____sys_sendmsg+0x5ba/0x960 [ 361.882157][T11484] ? __asan_memset+0x22/0x40 [ 361.886878][T11484] ? __sys_sendmsg_sock+0x30/0x30 [ 361.891940][T11484] ? __import_iovec+0x5f2/0x850 [ 361.896822][T11484] ? import_iovec+0x73/0xa0 [ 361.901349][T11484] ___sys_sendmsg+0x2a6/0x360 [ 361.906135][T11484] ? get_pid_task+0x20/0x1e0 [ 361.910751][T11484] ? __sys_sendmsg+0x2a0/0x2a0 [ 361.915562][T11484] ? __lock_acquire+0x7d40/0x7d40 [ 361.920647][T11484] __se_sys_sendmsg+0x1c2/0x2b0 [ 361.925518][T11484] ? __x64_sys_sendmsg+0x80/0x80 [ 361.930576][T11484] ? lockdep_hardirqs_on+0x98/0x150 [ 361.935809][T11484] do_syscall_64+0x55/0xb0 [ 361.940244][T11484] ? clear_bhb_loop+0x40/0x90 [ 361.944932][T11484] ? clear_bhb_loop+0x40/0x90 [ 361.949632][T11484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.955549][T11484] RIP: 0033:0x7f46da79ce59 [ 361.959986][T11484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.979974][T11484] RSP: 002b:00007f46db706028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.988429][T11484] RAX: ffffffffffffffda RBX: 00007f46daa16090 RCX: 00007f46da79ce59 [ 361.996431][T11484] RDX: 0000000004000800 RSI: 0000200000000640 RDI: 0000000000000005 [ 362.004419][T11484] RBP: 00007f46db706090 R08: 0000000000000000 R09: 0000000000000000 [ 362.012495][T11484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.020599][T11484] R13: 00007f46daa16128 R14: 00007f46daa16090 R15: 00007ffdfd687958 [ 362.028803][T11484] [ 362.806664][T11497] netlink: 'syz.1.2035': attribute type 10 has an invalid length. [ 362.930171][T11497] team0: Device wg1 is of different type [ 363.477920][T11515] FAULT_INJECTION: forcing a failure. [ 363.477920][T11515] name failslab, interval 1, probability 0, space 0, times 0 [ 363.504461][T11515] CPU: 0 PID: 11515 Comm: syz.3.2041 Not tainted syzkaller #0 [ 363.511995][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 363.522076][T11515] Call Trace: [ 363.525365][T11515] [ 363.528310][T11515] dump_stack_lvl+0x18c/0x250 [ 363.533110][T11515] ? show_regs_print_info+0x20/0x20 [ 363.538324][T11515] ? load_image+0x420/0x420 [ 363.542842][T11515] ? __might_sleep+0xe0/0xe0 [ 363.547445][T11515] ? __lock_acquire+0x7d40/0x7d40 [ 363.552503][T11515] should_fail_ex+0x39d/0x4d0 [ 363.557207][T11515] should_failslab+0x9/0x20 [ 363.561733][T11515] slab_pre_alloc_hook+0x59/0x310 [ 363.566768][T11515] ? tomoyo_encode+0x28b/0x540 [ 363.571532][T11515] ? tomoyo_encode+0x28b/0x540 [ 363.576294][T11515] __kmem_cache_alloc_node+0x53/0x250 [ 363.581692][T11515] ? tomoyo_encode+0x28b/0x540 [ 363.586470][T11515] __kmalloc+0xa4/0x230 [ 363.590643][T11515] tomoyo_encode+0x28b/0x540 [ 363.595243][T11515] tomoyo_realpath_from_path+0x592/0x5d0 [ 363.600885][T11515] tomoyo_path_number_perm+0x248/0x620 [ 363.606338][T11515] ? tomoyo_path_number_perm+0x217/0x620 [ 363.611965][T11515] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 363.617422][T11515] ? ksys_write+0x1c4/0x260 [ 363.621950][T11515] ? __fget_files+0x28/0x4b0 [ 363.626536][T11515] ? __fget_files+0x28/0x4b0 [ 363.631333][T11515] security_file_ioctl+0x70/0xa0 [ 363.636537][T11515] __se_sys_ioctl+0x48/0x170 [ 363.641129][T11515] do_syscall_64+0x55/0xb0 [ 363.645630][T11515] ? clear_bhb_loop+0x40/0x90 [ 363.650305][T11515] ? clear_bhb_loop+0x40/0x90 [ 363.655410][T11515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.661590][T11515] RIP: 0033:0x7f46da79ce59 [ 363.666014][T11515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.685709][T11515] RSP: 002b:00007f46db727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.694126][T11515] RAX: ffffffffffffffda RBX: 00007f46daa15fa0 RCX: 00007f46da79ce59 [ 363.702179][T11515] RDX: 0000200000000400 RSI: 000000000000891b RDI: 0000000000000006 [ 363.710149][T11515] RBP: 00007f46db727090 R08: 0000000000000000 R09: 0000000000000000 [ 363.718115][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.726079][T11515] R13: 00007f46daa16038 R14: 00007f46daa15fa0 R15: 00007ffdfd687958 [ 363.734160][T11515] [ 363.806788][T11515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 364.471489][T11524] netlink: 'syz.1.2051': attribute type 10 has an invalid length. [ 364.874909][T11529] netlink: 'syz.0.2044': attribute type 9 has an invalid length. [ 364.887523][T11529] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2044'. [ 365.270367][T11540] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2047'. [ 365.703398][T11555] netlink: 'syz.2.2053': attribute type 10 has an invalid length. [ 365.716952][T11555] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2053'. [ 365.834716][T11553] netlink: 'syz.3.2054': attribute type 10 has an invalid length. [ 366.436975][T11562] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2057'. [ 366.985856][T11576] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2062'. [ 367.009095][T11576] bridge_slave_1: default FDB implementation only supports local addresses [ 367.030386][T11578] netlink: 'syz.3.2063': attribute type 41 has an invalid length. [ 367.368682][T11592] netlink: 'syz.1.2067': attribute type 10 has an invalid length. [ 368.082407][T11596] FAULT_INJECTION: forcing a failure. [ 368.082407][T11596] name failslab, interval 1, probability 0, space 0, times 0 [ 368.095540][T11596] CPU: 1 PID: 11596 Comm: syz.2.2069 Not tainted syzkaller #0 [ 368.103036][T11596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.113117][T11596] Call Trace: [ 368.116419][T11596] [ 368.119373][T11596] dump_stack_lvl+0x18c/0x250 [ 368.124065][T11596] ? sctp_sendmsg+0x15d2/0x2910 [ 368.129020][T11596] ? ___sys_sendmsg+0x2a6/0x360 [ 368.133900][T11596] ? show_regs_print_info+0x20/0x20 [ 368.139136][T11596] ? load_image+0x420/0x420 [ 368.143686][T11596] should_fail_ex+0x39d/0x4d0 [ 368.148400][T11596] should_failslab+0x9/0x20 [ 368.153000][T11596] slab_pre_alloc_hook+0x59/0x310 [ 368.158061][T11596] ? sctp_add_bind_addr+0x8c/0x360 [ 368.163237][T11596] __kmem_cache_alloc_node+0x53/0x250 [ 368.168649][T11596] ? sctp_add_bind_addr+0x8c/0x360 [ 368.173801][T11596] kmalloc_trace+0x2a/0xe0 [ 368.178265][T11596] sctp_add_bind_addr+0x8c/0x360 [ 368.183234][T11596] sctp_copy_local_addr_list+0x315/0x4f0 [ 368.188997][T11596] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 368.194746][T11596] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 368.200839][T11596] ? sctp_v4_is_any+0x35/0x60 [ 368.205508][T11596] ? sctp_copy_one_addr+0x8c/0x350 [ 368.210628][T11596] sctp_bind_addr_copy+0xb3/0x3c0 [ 368.215660][T11596] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 368.222005][T11596] sctp_connect_new_asoc+0x2f9/0x6a0 [ 368.227318][T11596] ? __sctp_connect+0xd80/0xd80 [ 368.232193][T11596] ? __local_bh_enable_ip+0x13a/0x1c0 [ 368.237782][T11596] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 368.243356][T11596] ? security_sctp_bind_connect+0x89/0xb0 [ 368.249115][T11596] sctp_sendmsg+0x15d2/0x2910 [ 368.253847][T11596] ? sctp_getsockopt+0xb60/0xb60 [ 368.258822][T11596] ? aa_sk_perm+0x83c/0x970 [ 368.263555][T11596] ? aa_af_perm+0x330/0x330 [ 368.268079][T11596] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 368.274541][T11596] ? sock_rps_record_flow+0x19/0x3f0 [ 368.279895][T11596] ? inet_sendmsg+0xe9/0x2f0 [ 368.284521][T11596] ? inet_send_prepare+0x260/0x260 [ 368.289661][T11596] ____sys_sendmsg+0x5ba/0x960 [ 368.294437][T11596] ? __lock_acquire+0x7d40/0x7d40 [ 368.299498][T11596] ? __asan_memset+0x22/0x40 [ 368.304119][T11596] ? __sys_sendmsg_sock+0x30/0x30 [ 368.309142][T11596] ? __import_iovec+0x5f2/0x850 [ 368.314046][T11596] ? import_iovec+0x73/0xa0 [ 368.318571][T11596] ___sys_sendmsg+0x2a6/0x360 [ 368.323257][T11596] ? get_pid_task+0x20/0x1e0 [ 368.327854][T11596] ? __sys_sendmsg+0x2a0/0x2a0 [ 368.332635][T11596] ? __lock_acquire+0x7d40/0x7d40 [ 368.337682][T11596] __se_sys_sendmsg+0x1c2/0x2b0 [ 368.342546][T11596] ? __x64_sys_sendmsg+0x80/0x80 [ 368.347509][T11596] ? lockdep_hardirqs_on+0x98/0x150 [ 368.352733][T11596] do_syscall_64+0x55/0xb0 [ 368.357149][T11596] ? clear_bhb_loop+0x40/0x90 [ 368.361819][T11596] ? clear_bhb_loop+0x40/0x90 [ 368.366490][T11596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.372378][T11596] RIP: 0033:0x7f11a0f9ce59 [ 368.376788][T11596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.396395][T11596] RSP: 002b:00007f11a1e8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.404817][T11596] RAX: ffffffffffffffda RBX: 00007f11a1215fa0 RCX: 00007f11a0f9ce59 [ 368.412809][T11596] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 368.420781][T11596] RBP: 00007f11a1e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 368.428753][T11596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.436728][T11596] R13: 00007f11a1216038 R14: 00007f11a1215fa0 R15: 00007ffc7a8225b8 [ 368.444718][T11596] [ 368.515876][T11609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2073'. [ 368.801346][T11625] netlink: 119384 bytes leftover after parsing attributes in process `syz.3.2080'. [ 369.145494][T11635] netlink: 'syz.1.2081': attribute type 10 has an invalid length. [ 371.300593][T11662] netlink: 'syz.2.2090': attribute type 21 has an invalid length. [ 371.308906][T11662] netlink: 'syz.2.2090': attribute type 1 has an invalid length. [ 371.320679][T11662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2090'. [ 371.336320][T11659] netlink: 'syz.1.2087': attribute type 3 has an invalid length. [ 371.354734][T11659] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.2087'. [ 371.380951][T11659] netlink: 'syz.1.2087': attribute type 12 has an invalid length. [ 371.398348][T11659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2087'. [ 371.420932][T11660] netlink: 'syz.1.2087': attribute type 12 has an invalid length. [ 371.449762][T11660] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2087'. [ 371.482655][T11667] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2091'. [ 371.644475][T11670] netlink: 'syz.1.2093': attribute type 10 has an invalid length. [ 372.844714][T11692] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 373.136293][T11709] netlink: 'syz.2.2103': attribute type 22 has an invalid length. [ 373.344044][T11705] netlink: 'syz.1.2104': attribute type 10 has an invalid length. [ 374.163436][T11724] FAULT_INJECTION: forcing a failure. [ 374.163436][T11724] name failslab, interval 1, probability 0, space 0, times 0 [ 374.185031][T11724] CPU: 0 PID: 11724 Comm: syz.2.2110 Not tainted syzkaller #0 [ 374.192560][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.202815][T11724] Call Trace: [ 374.206238][T11724] [ 374.209211][T11724] dump_stack_lvl+0x18c/0x250 [ 374.213947][T11724] ? show_regs_print_info+0x20/0x20 [ 374.219178][T11724] ? load_image+0x420/0x420 [ 374.223729][T11724] should_fail_ex+0x39d/0x4d0 [ 374.228452][T11724] should_failslab+0x9/0x20 [ 374.232992][T11724] slab_pre_alloc_hook+0x59/0x310 [ 374.238126][T11724] kmem_cache_alloc+0x5a/0x2d0 [ 374.242956][T11724] ? dst_alloc+0x105/0x170 [ 374.247421][T11724] dst_alloc+0x105/0x170 [ 374.251711][T11724] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 374.257898][T11724] ? ip_route_output_key_hash_rcu+0x1321/0x2370 [ 374.264183][T11724] ? ip_route_output_key_hash+0x13d/0x330 [ 374.269949][T11724] ip_route_output_key_hash+0x1f3/0x330 [ 374.275626][T11724] ? stack_trace_save+0x100/0x100 [ 374.280743][T11724] ? ip_route_input_rcu+0x30f0/0x30f0 [ 374.286180][T11724] tcp_v4_connect+0x6ec/0x18e0 [ 374.289287][T11734] netlink: 'syz.3.2113': attribute type 10 has an invalid length. [ 374.290975][T11724] ? __stack_depot_save+0x1f/0x630 [ 374.291024][T11724] ? tcp_twsk_unique+0x990/0x990 [ 374.308948][T11724] __inet_stream_connect+0x254/0xdc0 [ 374.314294][T11724] ? inet_dgram_connect+0x360/0x360 [ 374.319554][T11724] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 374.324786][T11724] tcp_sendmsg_locked+0x4621/0x4bd0 [ 374.330190][T11724] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 374.335937][T11724] ? perf_trace_lock+0x304/0x3b0 [ 374.340900][T11724] ? trace_event_raw_event_lock+0x250/0x250 [ 374.346807][T11724] ? mark_lock+0x94/0x320 [ 374.351149][T11724] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 374.357134][T11724] ? lock_chain_count+0x20/0x20 [ 374.362012][T11724] ? tcp_set_state+0x680/0x680 [ 374.366793][T11724] tcp_sendmsg+0x2f/0x50 [ 374.371043][T11724] ? inet_send_prepare+0x260/0x260 [ 374.376288][T11724] ____sys_sendmsg+0x5ba/0x960 [ 374.381094][T11724] ? __lock_acquire+0x7d40/0x7d40 [ 374.386178][T11724] ? __asan_memset+0x22/0x40 [ 374.390808][T11724] ? __sys_sendmsg_sock+0x30/0x30 [ 374.395876][T11724] ? __import_iovec+0x3fa/0x850 [ 374.400800][T11724] ? import_iovec+0x73/0xa0 [ 374.405351][T11724] ___sys_sendmsg+0x2a6/0x360 [ 374.410249][T11724] ? __sys_sendmsg+0x2a0/0x2a0 [ 374.415350][T11724] ? __lock_acquire+0x7d40/0x7d40 [ 374.420454][T11724] __se_sys_sendmsg+0x1c2/0x2b0 [ 374.425356][T11724] ? __x64_sys_sendmsg+0x80/0x80 [ 374.430357][T11724] ? lockdep_hardirqs_on+0x98/0x150 [ 374.435607][T11724] do_syscall_64+0x55/0xb0 [ 374.440062][T11724] ? clear_bhb_loop+0x40/0x90 [ 374.444773][T11724] ? clear_bhb_loop+0x40/0x90 [ 374.449495][T11724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.455418][T11724] RIP: 0033:0x7f11a0f9ce59 [ 374.459833][T11724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.479474][T11724] RSP: 002b:00007f11a1e8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.487932][T11724] RAX: ffffffffffffffda RBX: 00007f11a1215fa0 RCX: 00007f11a0f9ce59 [ 374.496014][T11724] RDX: 000000003000c080 RSI: 0000200000000080 RDI: 0000000000000004 [ 374.504092][T11724] RBP: 00007f11a1e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 374.512083][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.520055][T11724] R13: 00007f11a1216038 R14: 00007f11a1215fa0 R15: 00007ffc7a8225b8 [ 374.528041][T11724] [ 374.600109][T11737] syzkaller0: entered promiscuous mode [ 374.605933][T11737] syzkaller0: entered allmulticast mode [ 375.508114][T11743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.374877][T11744] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2115'. [ 376.436672][T11754] netlink: 'syz.2.2117': attribute type 10 has an invalid length. [ 376.941461][T11777] netlink: 'syz.3.2128': attribute type 10 has an invalid length. [ 377.000824][T11772] delete_channel: no stack [ 377.044969][T11779] netlink: 'syz.3.2129': attribute type 10 has an invalid length. [ 377.051783][T11782] FAULT_INJECTION: forcing a failure. [ 377.051783][T11782] name failslab, interval 1, probability 0, space 0, times 0 [ 377.068528][T11782] CPU: 0 PID: 11782 Comm: syz.0.2130 Not tainted syzkaller #0 [ 377.076048][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 377.086133][T11782] Call Trace: [ 377.089519][T11782] [ 377.092477][T11782] dump_stack_lvl+0x18c/0x250 [ 377.097221][T11782] ? show_regs_print_info+0x20/0x20 [ 377.102462][T11782] ? load_image+0x420/0x420 [ 377.107171][T11782] ? __might_sleep+0xe0/0xe0 [ 377.111789][T11782] ? __lock_acquire+0x7d40/0x7d40 [ 377.116848][T11782] should_fail_ex+0x39d/0x4d0 [ 377.121533][T11782] should_failslab+0x9/0x20 [ 377.126042][T11782] slab_pre_alloc_hook+0x59/0x310 [ 377.131095][T11782] ? lockdep_hardirqs_on+0x98/0x150 [ 377.136349][T11782] kmem_cache_alloc_node+0x60/0x320 [ 377.141598][T11782] ? __alloc_skb+0x103/0x2c0 [ 377.146247][T11782] __alloc_skb+0x103/0x2c0 [ 377.150721][T11782] netlink_sendmsg+0x66a/0xbf0 [ 377.155510][T11782] ? netlink_getsockopt+0x590/0x590 [ 377.160719][T11782] ? aa_sock_msg_perm+0x94/0x150 [ 377.165788][T11782] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 377.171191][T11782] ? security_socket_sendmsg+0x80/0xa0 [ 377.176666][T11782] ? netlink_getsockopt+0x590/0x590 [ 377.181873][T11782] ____sys_sendmsg+0x5ba/0x960 [ 377.186771][T11782] ? __asan_memset+0x22/0x40 [ 377.191627][T11782] ? __sys_sendmsg_sock+0x30/0x30 [ 377.196651][T11782] ? __import_iovec+0x5f2/0x850 [ 377.201506][T11782] ? import_iovec+0x73/0xa0 [ 377.206011][T11782] ___sys_sendmsg+0x2a6/0x360 [ 377.210719][T11782] ? __sys_sendmsg+0x2a0/0x2a0 [ 377.215556][T11782] __se_sys_sendmsg+0x1c2/0x2b0 [ 377.220426][T11782] ? __x64_sys_sendmsg+0x80/0x80 [ 377.225384][T11782] ? syscall_enter_from_user_mode+0x2e/0x80 [ 377.231290][T11782] do_syscall_64+0x55/0xb0 [ 377.235708][T11782] ? clear_bhb_loop+0x40/0x90 [ 377.240381][T11782] ? clear_bhb_loop+0x40/0x90 [ 377.245054][T11782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.250966][T11782] RIP: 0033:0x7f463239ce59 [ 377.255380][T11782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.275077][T11782] RSP: 002b:00007f463318d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.283527][T11782] RAX: ffffffffffffffda RBX: 00007f4632615fa0 RCX: 00007f463239ce59 [ 377.291502][T11782] RDX: 0000000000040000 RSI: 0000200000000600 RDI: 000000000000000c [ 377.299476][T11782] RBP: 00007f463318d090 R08: 0000000000000000 R09: 0000000000000000 [ 377.307444][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.315415][T11782] R13: 00007f4632616038 R14: 00007f4632615fa0 R15: 00007ffc3d48a658 [ 377.323572][T11782] [ 377.343199][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2130'. [ 377.747049][T11799] @: port 1(netdevsim3) entered blocking state [ 377.790135][T11799] @: port 1(netdevsim3) entered disabled state [ 377.796851][T11799] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 377.837361][T11799] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 377.923455][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'. [ 378.278035][T11811] netlink: 'syz.0.2139': attribute type 22 has an invalid length. [ 378.287831][T11818] netlink: 'syz.2.2144': attribute type 10 has an invalid length. [ 378.584847][T11829] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2145'. [ 378.610537][T11829] netlink: zone id is out of range [ 378.625115][T11829] netlink: zone id is out of range [ 378.663443][T11829] netlink: zone id is out of range [ 378.674075][T11829] netlink: zone id is out of range [ 378.681266][T11829] netlink: zone id is out of range [ 378.690696][T11829] netlink: zone id is out of range [ 378.696931][T11829] netlink: zone id is out of range [ 378.705282][T11829] netlink: zone id is out of range [ 378.715418][T11829] netlink: zone id is out of range [ 378.724346][T11829] netlink: zone id is out of range [ 378.738509][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.745076][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.833652][T11827] netlink: 'syz.3.2142': attribute type 10 has an invalid length. [ 379.455305][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'. [ 379.734304][T11861] netlink: 'syz.0.2159': attribute type 1 has an invalid length. [ 379.763010][T11861] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2159'. [ 379.801828][T11859] netlink: 'syz.3.2157': attribute type 10 has an invalid length. [ 381.920962][T11903] FAULT_INJECTION: forcing a failure. [ 381.920962][T11903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.947747][T11899] netlink: 'syz.2.2174': attribute type 10 has an invalid length. [ 381.956866][T11903] CPU: 0 PID: 11903 Comm: syz.3.2176 Not tainted syzkaller #0 [ 381.964384][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.974523][T11903] Call Trace: [ 381.977841][T11903] [ 381.980772][T11903] dump_stack_lvl+0x18c/0x250 [ 381.985457][T11903] ? show_regs_print_info+0x20/0x20 [ 381.990650][T11903] ? load_image+0x420/0x420 [ 381.995146][T11903] ? __might_fault+0xaa/0x120 [ 381.999820][T11903] ? __lock_acquire+0x7d40/0x7d40 [ 382.004845][T11903] should_fail_ex+0x39d/0x4d0 [ 382.009699][T11903] _copy_from_user+0x2f/0xe0 [ 382.014284][T11903] __sys_bpf+0x23e/0x890 [ 382.018526][T11903] ? bpf_link_show_fdinfo+0x390/0x390 [ 382.023902][T11903] ? lock_chain_count+0x20/0x20 [ 382.028753][T11903] __x64_sys_bpf+0x7c/0x90 [ 382.033163][T11903] do_syscall_64+0x55/0xb0 [ 382.037575][T11903] ? clear_bhb_loop+0x40/0x90 [ 382.042246][T11903] ? clear_bhb_loop+0x40/0x90 [ 382.046916][T11903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.052811][T11903] RIP: 0033:0x7f46da79ce59 [ 382.057219][T11903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.076824][T11903] RSP: 002b:00007f46db727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.085238][T11903] RAX: ffffffffffffffda RBX: 00007f46daa15fa0 RCX: 00007f46da79ce59 [ 382.093232][T11903] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 382.101392][T11903] RBP: 00007f46db727090 R08: 0000000000000000 R09: 0000000000000000 [ 382.109370][T11903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.117338][T11903] R13: 00007f46daa16038 R14: 00007f46daa15fa0 R15: 00007ffdfd687958 [ 382.125320][T11903] [ 382.435454][T11914] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2178'. [ 383.242392][T11936] netlink: 'syz.1.2189': attribute type 22 has an invalid length. [ 383.280796][T11940] netlink: 'syz.2.2190': attribute type 10 has an invalid length. [ 384.646463][T11963] netlink: 'syz.2.2201': attribute type 10 has an invalid length. [ 384.802058][T11970] netlink: 'syz.0.2203': attribute type 10 has an invalid length. [ 385.011505][T11970] team0: Device veth0_vlan failed to register rx_handler [ 385.290810][T11978] netpci0: tun_chr_ioctl cmd 2147767519 [ 385.490699][T11970] syz.0.2203 (11970) used greatest stack depth: 17896 bytes left [ 385.956596][T11999] netlink: 'syz.2.2214': attribute type 10 has an invalid length. [ 386.973567][T12013] FAULT_INJECTION: forcing a failure. [ 386.973567][T12013] name failslab, interval 1, probability 0, space 0, times 0 [ 386.986310][T12013] CPU: 0 PID: 12013 Comm: syz.2.2218 Not tainted syzkaller #0 [ 386.993795][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.003855][T12013] Call Trace: [ 387.007154][T12013] [ 387.010083][T12013] dump_stack_lvl+0x18c/0x250 [ 387.014766][T12013] ? show_regs_print_info+0x20/0x20 [ 387.019960][T12013] ? load_image+0x420/0x420 [ 387.024459][T12013] ? __kmem_cache_alloc_node+0x13a/0x250 [ 387.030136][T12013] ? netdev_core_pick_tx+0x340/0x340 [ 387.035598][T12013] should_fail_ex+0x39d/0x4d0 [ 387.040296][T12013] should_failslab+0x9/0x20 [ 387.044801][T12013] slab_pre_alloc_hook+0x59/0x310 [ 387.049838][T12013] kmem_cache_alloc+0x5a/0x2d0 [ 387.054602][T12013] ? skb_clone+0x1eb/0x370 [ 387.059302][T12013] skb_clone+0x1eb/0x370 [ 387.063572][T12013] bpf_clone_redirect+0x167/0x4a0 [ 387.068655][T12013] bpf_prog_bf17f61a12bc632f+0x5e/0x63 [ 387.074143][T12013] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 387.080131][T12013] ? lock_chain_count+0x20/0x20 [ 387.085156][T12013] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 387.091133][T12013] ? lockdep_softirqs_on+0x580/0x580 [ 387.096419][T12013] ? lock_chain_count+0x20/0x20 [ 387.101275][T12013] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 387.107521][T12013] ? __local_bh_disable_ip+0x108/0x1a0 [ 387.113158][T12013] ? __cant_sleep+0x220/0x220 [ 387.117835][T12013] ? __local_bh_enable_ip+0x13a/0x1c0 [ 387.123216][T12013] ? _local_bh_enable+0xa0/0xa0 [ 387.128079][T12013] ? bpf_test_timer_continue+0x135/0x380 [ 387.133722][T12013] ? bpf_test_run+0x174/0x870 [ 387.138589][T12013] bpf_test_run+0x2df/0x870 [ 387.143190][T12013] ? bpf_test_run+0x174/0x870 [ 387.147886][T12013] ? dst_hold+0x70/0x70 [ 387.152136][T12013] ? eth_get_headlen+0x210/0x210 [ 387.157096][T12013] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 387.162523][T12013] ? cpu_online+0x60/0x60 [ 387.166857][T12013] bpf_prog_test_run+0x321/0x390 [ 387.171812][T12013] __sys_bpf+0x49d/0x890 [ 387.176101][T12013] ? bpf_link_show_fdinfo+0x390/0x390 [ 387.181480][T12013] ? lock_chain_count+0x20/0x20 [ 387.186332][T12013] __x64_sys_bpf+0x7c/0x90 [ 387.190747][T12013] do_syscall_64+0x55/0xb0 [ 387.195167][T12013] ? clear_bhb_loop+0x40/0x90 [ 387.199851][T12013] ? clear_bhb_loop+0x40/0x90 [ 387.204528][T12013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.210511][T12013] RIP: 0033:0x7f11a0f9ce59 [ 387.214926][T12013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.234544][T12013] RSP: 002b:00007f11a1e8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 387.242976][T12013] RAX: ffffffffffffffda RBX: 00007f11a1215fa0 RCX: 00007f11a0f9ce59 [ 387.251004][T12013] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 387.259066][T12013] RBP: 00007f11a1e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 387.267038][T12013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.275184][T12013] R13: 00007f11a1216038 R14: 00007f11a1215fa0 R15: 00007ffc7a8225b8 [ 387.283433][T12013] [ 387.520835][T12027] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2225'. [ 387.770729][T12033] netlink: 'syz.3.2227': attribute type 10 has an invalid length. [ 387.963136][T12039] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2229'. [ 388.026793][T12039] net_ratelimit: 40 callbacks suppressed [ 388.026830][T12039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.035250][T12049] netlink: 'syz.2.2229': attribute type 29 has an invalid length. [ 388.103631][T12049] netlink: 'syz.2.2229': attribute type 29 has an invalid length. [ 388.139160][T12053] netlink: 'syz.2.2229': attribute type 29 has an invalid length. [ 388.311409][T12039] netlink: 'syz.2.2229': attribute type 29 has an invalid length. [ 388.374045][T12039] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2229'. [ 391.205209][T12065] netlink: 'syz.1.2238': attribute type 11 has an invalid length. [ 391.245078][T12065] netlink: 'syz.1.2238': attribute type 1 has an invalid length. [ 391.263222][T12065] netlink: 'syz.1.2238': attribute type 1 has an invalid length. [ 391.291893][T12065] netlink: 'syz.1.2238': attribute type 2 has an invalid length. [ 391.324318][T12065] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.2238'. [ 391.338453][T12073] netlink: 'syz.0.2242': attribute type 10 has an invalid length. [ 391.359331][T12073] team0: Device veth0_vlan failed to register rx_handler [ 391.520417][T12076] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.2243'. [ 391.752569][T12086] netlink: 'syz.1.2245': attribute type 29 has an invalid length. [ 391.760976][T12087] netlink: 'syz.2.2246': attribute type 1 has an invalid length. [ 391.777869][T12087] netlink: 'syz.2.2246': attribute type 2 has an invalid length. [ 391.804087][T12087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2246'. [ 394.335277][T12079] netlink: 'syz.0.2244': attribute type 6 has an invalid length. [ 394.350692][T12081] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2245'. [ 394.386775][T12081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.414498][T12086] netlink: 'syz.1.2245': attribute type 29 has an invalid length. [ 394.425893][T12095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2245'. [ 394.442003][T12100] FAULT_INJECTION: forcing a failure. [ 394.442003][T12100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.471010][T12100] CPU: 1 PID: 12100 Comm: syz.2.2248 Not tainted syzkaller #0 [ 394.478970][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 394.489050][T12100] Call Trace: [ 394.492346][T12100] [ 394.495288][T12100] dump_stack_lvl+0x18c/0x250 [ 394.499996][T12100] ? show_regs_print_info+0x20/0x20 [ 394.505216][T12100] ? load_image+0x420/0x420 [ 394.509743][T12100] ? __might_fault+0xaa/0x120 [ 394.514446][T12100] ? __lock_acquire+0x7d40/0x7d40 [ 394.519501][T12100] should_fail_ex+0x39d/0x4d0 [ 394.524223][T12100] _copy_from_user+0x2f/0xe0 [ 394.528845][T12100] generic_map_update_batch+0x59a/0x810 [ 394.534432][T12100] ? rcu_read_unlock+0xa0/0xa0 [ 394.539227][T12100] ? __fdget+0x180/0x210 [ 394.543510][T12100] ? rcu_read_unlock+0xa0/0xa0 [ 394.548298][T12100] bpf_map_do_batch+0x3d7/0x610 [ 394.553190][T12100] __sys_bpf+0x381/0x890 [ 394.557462][T12100] ? bpf_link_show_fdinfo+0x390/0x390 [ 394.562886][T12100] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 394.569253][T12100] __x64_sys_bpf+0x7c/0x90 [ 394.573680][T12100] do_syscall_64+0x55/0xb0 [ 394.578099][T12100] ? clear_bhb_loop+0x40/0x90 [ 394.582772][T12100] ? clear_bhb_loop+0x40/0x90 [ 394.587446][T12100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.593371][T12100] RIP: 0033:0x7f11a0f9ce59 [ 394.597779][T12100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.617662][T12100] RSP: 002b:00007f11a1e8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 394.626081][T12100] RAX: ffffffffffffffda RBX: 00007f11a1215fa0 RCX: 00007f11a0f9ce59 [ 394.634047][T12100] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 394.642010][T12100] RBP: 00007f11a1e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 394.650021][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.658024][T12100] R13: 00007f11a1216038 R14: 00007f11a1215fa0 R15: 00007ffc7a8225b8 [ 394.666004][T12100] [ 394.787531][T12108] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 394.823980][T12108] batman_adv: batadv0: Removing interface: veth0_vlan [ 394.833103][T12108] veth0_vlan: left promiscuous mode [ 394.848737][T12108] veth0_vlan: entered promiscuous mode [ 394.860809][T12108] team0: Device veth0_vlan failed to register rx_handler [ 395.836083][T12137] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2263'. [ 395.884360][T12137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.950292][T12143] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 396.016810][T12143] batman_adv: batadv0: Removing interface: veth0_vlan [ 396.136346][T12147] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2267'. [ 396.185624][T12137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2263'. [ 396.205115][T12147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2267'. [ 396.230317][T12147] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 396.429040][T12154] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2270'. [ 396.521094][T12158] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2272'. [ 396.604885][T12154] validate_nla: 7 callbacks suppressed [ 396.604902][T12154] netlink: 'syz.2.2270': attribute type 39 has an invalid length. [ 396.639659][T12160] netlink: 'syz.1.2273': attribute type 10 has an invalid length. [ 396.791391][T12169] netlink: 'syz.0.2277': attribute type 2 has an invalid length. [ 396.939796][T12173] netlink: 'syz.1.2279': attribute type 10 has an invalid length. [ 396.955964][T12173] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.973020][T12173] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.982671][T12173] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.995595][T12173] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.032456][T12173] geneve0: entered promiscuous mode [ 397.103741][T12172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.194805][T12185] netlink: 'syz.2.2282': attribute type 10 has an invalid length. [ 397.411452][T12198] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2287'. [ 397.443936][T12198] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 397.546257][T12200] netlink: 'syz.2.2288': attribute type 10 has an invalid length. [ 397.851310][T12217] netlink: 'syz.2.2295': attribute type 12 has an invalid length. [ 397.885470][T12221] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2296'. [ 398.007259][T12223] netlink: 'syz.2.2298': attribute type 29 has an invalid length. [ 398.021121][T12223] netlink: 'syz.2.2298': attribute type 29 has an invalid length. [ 398.096621][T12227] netlink: 'syz.3.2300': attribute type 10 has an invalid length. [ 399.416937][T12278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.815147][T12298] __nla_validate_parse: 3 callbacks suppressed [ 399.815164][T12298] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2330'. [ 399.976261][T12302] team0: Device veth0_vlan failed to register rx_handler [ 400.656697][T12325] FAULT_INJECTION: forcing a failure. [ 400.656697][T12325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.673036][T12325] CPU: 1 PID: 12325 Comm: syz.0.2340 Not tainted syzkaller #0 [ 400.680541][T12325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.690623][T12325] Call Trace: [ 400.693934][T12325] [ 400.696908][T12325] dump_stack_lvl+0x18c/0x250 [ 400.701632][T12325] ? show_regs_print_info+0x20/0x20 [ 400.706888][T12325] ? load_image+0x420/0x420 [ 400.711427][T12325] ? __lock_acquire+0x7d40/0x7d40 [ 400.716498][T12325] ? __virt_addr_valid+0x18c/0x540 [ 400.721682][T12325] should_fail_ex+0x39d/0x4d0 [ 400.726416][T12325] _copy_from_user+0x2f/0xe0 [ 400.731127][T12325] bpf_prog_test_run_skb+0x26c/0x18c0 [ 400.736712][T12325] ? __fget_files+0x28/0x4b0 [ 400.741341][T12325] ? __fget_files+0x28/0x4b0 [ 400.745979][T12325] ? __fget_files+0x43d/0x4b0 [ 400.750790][T12325] ? cpu_online+0x60/0x60 [ 400.755156][T12325] bpf_prog_test_run+0x321/0x390 [ 400.760134][T12325] __sys_bpf+0x49d/0x890 [ 400.764421][T12325] ? bpf_link_show_fdinfo+0x390/0x390 [ 400.769855][T12325] ? lock_chain_count+0x20/0x20 [ 400.774793][T12325] __x64_sys_bpf+0x7c/0x90 [ 400.779246][T12325] do_syscall_64+0x55/0xb0 [ 400.783697][T12325] ? clear_bhb_loop+0x40/0x90 [ 400.788399][T12325] ? clear_bhb_loop+0x40/0x90 [ 400.793113][T12325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.799042][T12325] RIP: 0033:0x7f463239ce59 [ 400.803461][T12325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.823088][T12325] RSP: 002b:00007f463318d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 400.831509][T12325] RAX: ffffffffffffffda RBX: 00007f4632615fa0 RCX: 00007f463239ce59 [ 400.839483][T12325] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 400.847457][T12325] RBP: 00007f463318d090 R08: 0000000000000000 R09: 0000000000000000 [ 400.855419][T12325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.863386][T12325] R13: 00007f4632616038 R14: 00007f4632615fa0 R15: 00007ffc3d48a658 [ 400.871460][T12325] [ 400.892279][T12329] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2342'. [ 401.676922][T12354] FAULT_INJECTION: forcing a failure. [ 401.676922][T12354] name failslab, interval 1, probability 0, space 0, times 0 [ 401.689707][T12354] CPU: 1 PID: 12354 Comm: syz.2.2350 Not tainted syzkaller #0 [ 401.697275][T12354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.707351][T12354] Call Trace: [ 401.710643][T12354] [ 401.713594][T12354] dump_stack_lvl+0x18c/0x250 [ 401.718314][T12354] ? show_regs_print_info+0x20/0x20 [ 401.723550][T12354] ? load_image+0x420/0x420 [ 401.728092][T12354] ? netdev_core_pick_tx+0x340/0x340 [ 401.733408][T12354] ? rcu_is_watching+0x15/0xb0 [ 401.738199][T12354] should_fail_ex+0x39d/0x4d0 [ 401.742913][T12354] should_failslab+0x9/0x20 [ 401.747439][T12354] slab_pre_alloc_hook+0x59/0x310 [ 401.752506][T12354] kmem_cache_alloc+0x5a/0x2d0 [ 401.757467][T12354] ? skb_clone+0x1eb/0x370 [ 401.761910][T12354] skb_clone+0x1eb/0x370 [ 401.766264][T12354] bpf_clone_redirect+0x167/0x4a0 [ 401.771333][T12354] bpf_prog_de5959beb1c8948f+0x5a/0x5f [ 401.776820][T12354] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 401.782893][T12354] ? preempt_schedule+0xc0/0xd0 [ 401.787883][T12354] ? perf_trace_preemptirq_template+0xac/0x330 [ 401.794159][T12354] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 401.800165][T12354] ? lockdep_softirqs_on+0x580/0x580 [ 401.805648][T12354] ? lock_chain_count+0x20/0x20 [ 401.810701][T12354] ? __local_bh_disable_ip+0x108/0x1a0 [ 401.816180][T12354] ? __cant_sleep+0x220/0x220 [ 401.820880][T12354] ? __local_bh_enable_ip+0x13a/0x1c0 [ 401.826266][T12354] ? _local_bh_enable+0xa0/0xa0 [ 401.831222][T12354] ? bpf_test_timer_continue+0x135/0x380 [ 401.836877][T12354] ? bpf_test_run+0x174/0x870 [ 401.841663][T12354] bpf_test_run+0x2df/0x870 [ 401.846212][T12354] ? bpf_test_run+0x174/0x870 [ 401.850915][T12354] ? dst_hold+0x70/0x70 [ 401.855095][T12354] ? eth_get_headlen+0x210/0x210 [ 401.860065][T12354] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 401.865483][T12354] ? cpu_online+0x60/0x60 [ 401.869847][T12354] bpf_prog_test_run+0x321/0x390 [ 401.874987][T12354] __sys_bpf+0x49d/0x890 [ 401.879322][T12354] ? bpf_link_show_fdinfo+0x390/0x390 [ 401.884729][T12354] ? lock_chain_count+0x20/0x20 [ 401.889608][T12354] __x64_sys_bpf+0x7c/0x90 [ 401.894042][T12354] do_syscall_64+0x55/0xb0 [ 401.898481][T12354] ? clear_bhb_loop+0x40/0x90 [ 401.903176][T12354] ? clear_bhb_loop+0x40/0x90 [ 401.907874][T12354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.913786][T12354] RIP: 0033:0x7f11a0f9ce59 [ 401.918219][T12354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.937944][T12354] RSP: 002b:00007f11a1e8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.946385][T12354] RAX: ffffffffffffffda RBX: 00007f11a1215fa0 RCX: 00007f11a0f9ce59 [ 401.954392][T12354] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 401.962381][T12354] RBP: 00007f11a1e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 401.970552][T12354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.978549][T12354] R13: 00007f11a1216038 R14: 00007f11a1215fa0 R15: 00007ffc7a8225b8 [ 401.986558][T12354] [ 402.889259][T12362] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2352'. [ 402.898894][T12362] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2352'. [ 402.910737][T12360] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2352'. [ 402.920416][T12362] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2352'. [ 403.001395][T12360] validate_nla: 11 callbacks suppressed [ 403.001413][T12360] netlink: 'syz.2.2352': attribute type 10 has an invalid length. [ 403.025100][T12360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2352'. [ 403.133966][T12368] IPv6: Can't replace route, no match found [ 403.527528][T12393] netlink: 'syz.1.2362': attribute type 10 has an invalid length. [ 403.542316][T12393] team0: Device veth0_vlan failed to register rx_handler [ 404.430921][T12406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2369'. [ 404.712922][T12417] netlink: 'syz.1.2372': attribute type 10 has an invalid length. [ 404.738784][T12417] team0: Device veth0_vlan failed to register rx_handler [ 404.970469][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 404.987150][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 404.996335][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.005458][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.014003][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 405.028248][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 405.213419][T12433] netlink: 'syz.2.2378': attribute type 10 has an invalid length. [ 405.230272][T12433] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2378'. [ 405.413211][ T8020] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.621863][ T8020] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.758988][ T8020] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.829619][T12455] netlink: 'syz.2.2383': attribute type 29 has an invalid length. [ 405.903711][ T8020] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.933825][T12455] netlink: 'syz.2.2383': attribute type 29 has an invalid length. [ 405.945556][T12423] chnl_net:caif_netlink_parms(): no params data found [ 406.347096][T12471] netlink: 'syz.1.2387': attribute type 10 has an invalid length. [ 406.392259][T12471] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2387'. [ 406.461538][T12423] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.476004][T12423] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.488917][T12423] bridge_slave_0: entered allmulticast mode [ 406.499451][T12423] bridge_slave_0: entered promiscuous mode [ 406.515796][T12423] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.539342][T12423] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.614599][T12423] bridge_slave_1: entered allmulticast mode [ 406.640978][T12423] bridge_slave_1: entered promiscuous mode [ 406.771719][T12423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.791407][T12423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.818082][T12485] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2384'. [ 406.839449][T12423] team0: Port device team_slave_0 added [ 406.859611][T12423] team0: Port device team_slave_1 added [ 406.892065][T12485] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2384'. [ 407.020813][T12492] FAULT_INJECTION: forcing a failure. [ 407.020813][T12492] name failslab, interval 1, probability 0, space 0, times 0 [ 407.046022][T12492] CPU: 0 PID: 12492 Comm: syz.1.2391 Not tainted syzkaller #0 [ 407.053629][T12492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 407.063691][T12492] Call Trace: [ 407.066986][T12492] [ 407.069909][T12492] dump_stack_lvl+0x18c/0x250 [ 407.074578][T12492] ? sctp_sendmsg+0x15d2/0x2910 [ 407.079426][T12492] ? ___sys_sendmsg+0x2a6/0x360 [ 407.084273][T12492] ? show_regs_print_info+0x20/0x20 [ 407.089490][T12492] ? load_image+0x420/0x420 [ 407.094113][T12492] should_fail_ex+0x39d/0x4d0 [ 407.098799][T12492] should_failslab+0x9/0x20 [ 407.103302][T12492] slab_pre_alloc_hook+0x59/0x310 [ 407.108334][T12492] ? sctp_add_bind_addr+0x8c/0x360 [ 407.113443][T12492] __kmem_cache_alloc_node+0x53/0x250 [ 407.118821][T12492] ? sctp_add_bind_addr+0x8c/0x360 [ 407.123944][T12492] kmalloc_trace+0x2a/0xe0 [ 407.128383][T12492] sctp_add_bind_addr+0x8c/0x360 [ 407.133364][T12492] sctp_copy_local_addr_list+0x315/0x4f0 [ 407.139034][T12492] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 407.144769][T12492] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 407.150914][T12492] ? sctp_v4_is_any+0x35/0x60 [ 407.155730][T12492] ? sctp_copy_one_addr+0x8c/0x350 [ 407.161065][T12492] sctp_bind_addr_copy+0xb3/0x3c0 [ 407.166635][T12492] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 407.172973][T12492] sctp_connect_new_asoc+0x2f9/0x6a0 [ 407.178289][T12492] ? __sctp_connect+0xd80/0xd80 [ 407.183135][T12492] ? __local_bh_enable_ip+0x13a/0x1c0 [ 407.188512][T12492] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 407.194056][T12492] ? security_sctp_bind_connect+0x89/0xb0 [ 407.199794][T12492] sctp_sendmsg+0x15d2/0x2910 [ 407.204487][T12492] ? sctp_getsockopt+0xb60/0xb60 [ 407.209423][T12492] ? aa_sk_perm+0x83c/0x970 [ 407.214023][T12492] ? aa_af_perm+0x330/0x330 [ 407.218517][T12492] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 407.224930][T12492] ? sock_rps_record_flow+0x19/0x3f0 [ 407.230247][T12492] ? inet_sendmsg+0xe9/0x2f0 [ 407.234839][T12492] ? inet_send_prepare+0x260/0x260 [ 407.239950][T12492] ____sys_sendmsg+0x5ba/0x960 [ 407.244714][T12492] ? __lock_acquire+0x7d40/0x7d40 [ 407.249807][T12492] ? __asan_memset+0x22/0x40 [ 407.254412][T12492] ? __sys_sendmsg_sock+0x30/0x30 [ 407.259435][T12492] ? __import_iovec+0x5f2/0x850 [ 407.264287][T12492] ? import_iovec+0x73/0xa0 [ 407.268786][T12492] ___sys_sendmsg+0x2a6/0x360 [ 407.273461][T12492] ? get_pid_task+0x20/0x1e0 [ 407.278059][T12492] ? __sys_sendmsg+0x2a0/0x2a0 [ 407.282834][T12492] ? __lock_acquire+0x7d40/0x7d40 [ 407.287891][T12492] __se_sys_sendmsg+0x1c2/0x2b0 [ 407.292753][T12492] ? __x64_sys_sendmsg+0x80/0x80 [ 407.298049][T12492] ? lockdep_hardirqs_on+0x98/0x150 [ 407.303252][T12492] do_syscall_64+0x55/0xb0 [ 407.307725][T12492] ? clear_bhb_loop+0x40/0x90 [ 407.312394][T12492] ? clear_bhb_loop+0x40/0x90 [ 407.317063][T12492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.322960][T12492] RIP: 0033:0x7f399879ce59 [ 407.327483][T12492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.347304][T12492] RSP: 002b:00007f399961d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.355726][T12492] RAX: ffffffffffffffda RBX: 00007f3998a15fa0 RCX: 00007f399879ce59 [ 407.363702][T12492] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 407.371684][T12492] RBP: 00007f399961d090 R08: 0000000000000000 R09: 0000000000000000 [ 407.379694][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 407.387747][T12492] R13: 00007f3998a16038 R14: 00007f3998a15fa0 R15: 00007fff5de864f8 [ 407.395728][T12492] [ 407.409898][ T5780] Bluetooth: hci4: command tx timeout [ 407.511917][T12465] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2384'. [ 407.522920][T12423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.534611][T12423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.577253][T12423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.608976][T12423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.616296][T12423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.644998][T12423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.667967][T12485] netlink: 'syz.0.2384': attribute type 10 has an invalid length. [ 407.675812][T12485] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2384'. [ 407.690193][T12485] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 407.720752][T12487] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2384'. [ 408.649915][T12423] hsr_slave_0: entered promiscuous mode [ 408.678934][T12423] hsr_slave_1: entered promiscuous mode [ 408.793502][T12525] netlink: 'syz.0.2397': attribute type 10 has an invalid length. [ 408.814264][T12525] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2397'. [ 409.096263][T12539] netlink: 'syz.1.2402': attribute type 3 has an invalid length. [ 409.119845][T12539] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2402'. [ 409.472010][ T5780] Bluetooth: hci4: command tx timeout [ 410.383073][T12558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2409'. [ 410.455945][T12560] netlink: 668 bytes leftover after parsing attributes in process `syz.2.2410'. [ 410.514015][T12560] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 410.548118][T12560] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 410.718027][T12570] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2411'. [ 411.005373][T12582] netlink: 'syz.0.2414': attribute type 10 has an invalid length. [ 411.466623][ T8020] [ 411.469029][ T8020] ====================================================== [ 411.476057][ T8020] WARNING: possible circular locking dependency detected [ 411.483098][ T8020] syzkaller #0 Not tainted [ 411.487524][ T8020] ------------------------------------------------------ [ 411.494543][ T8020] kworker/u4:18/8020 is trying to acquire lock: [ 411.500774][ T8020] ffff8880304f8d80 (team->team_lock_key#4){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 411.510386][ T8020] [ 411.510386][ T8020] but task is already holding lock: [ 411.517733][ T8020] ffff88801cbf0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 411.528251][ T8020] [ 411.528251][ T8020] which lock already depends on the new lock. [ 411.528251][ T8020] [ 411.538656][ T8020] [ 411.538656][ T8020] the existing dependency chain (in reverse order) is: [ 411.547678][ T8020] [ 411.547678][ T8020] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 411.555408][ T8020] __mutex_lock+0x136/0xcc0 [ 411.560433][ T8020] ieee80211_open+0x144/0x200 [ 411.565625][ T8020] __dev_open+0x2cb/0x430 [ 411.570480][ T8020] dev_open+0xab/0x190 [ 411.575081][ T8020] team_add_slave+0x75f/0x29a0 [ 411.580379][ T8020] do_setlink+0xdfe/0x4130 [ 411.585322][ T8020] rtnl_newlink+0x17da/0x20a0 [ 411.590524][ T8020] rtnetlink_rcv_msg+0x869/0xfa0 [ 411.596239][ T8020] netlink_rcv_skb+0x241/0x4d0 [ 411.601519][ T8020] netlink_unicast+0x751/0x8d0 [ 411.606883][ T8020] netlink_sendmsg+0x8d0/0xbf0 [ 411.612159][ T8020] ____sys_sendmsg+0x5ba/0x960 [ 411.617436][ T8020] ___sys_sendmsg+0x2a6/0x360 [ 411.622624][ T8020] __se_sys_sendmsg+0x1c2/0x2b0 [ 411.627985][ T8020] do_syscall_64+0x55/0xb0 [ 411.632912][ T8020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.639334][ T8020] [ 411.639334][ T8020] -> #0 (team->team_lock_key#4){+.+.}-{3:3}: [ 411.647865][ T8020] __lock_acquire+0x2df1/0x7d40 [ 411.653293][ T8020] lock_acquire+0x19e/0x420 [ 411.658532][ T8020] __mutex_lock+0x136/0xcc0 [ 411.663546][ T8020] team_del_slave+0x32/0x1c0 [ 411.668646][ T8020] team_device_event+0x28d/0xa20 [ 411.674094][ T8020] notifier_call_chain+0x197/0x380 [ 411.679726][ T8020] unregister_netdevice_many_notify+0x100d/0x1900 [ 411.686661][ T8020] unregister_netdevice_queue+0x32c/0x370 [ 411.693064][ T8020] _cfg80211_unregister_wdev+0x16b/0x580 [ 411.699301][ T8020] ieee80211_remove_interfaces+0x49e/0x690 [ 411.705645][ T8020] ieee80211_unregister_hw+0x5d/0x2a0 [ 411.711574][ T8020] mac80211_hwsim_del_radio+0x289/0x480 [ 411.717644][ T8020] hwsim_exit_net+0x58d/0x650 [ 411.722838][ T8020] cleanup_net+0x70a/0xbb0 [ 411.727775][ T8020] process_scheduled_works+0xa5d/0x15d0 [ 411.733857][ T8020] worker_thread+0xa55/0xfc0 [ 411.738966][ T8020] kthread+0x2fa/0x390 [ 411.743813][ T8020] ret_from_fork+0x48/0x80 [ 411.748742][ T8020] ret_from_fork_asm+0x11/0x20 [ 411.754043][ T8020] [ 411.754043][ T8020] other info that might help us debug this: [ 411.754043][ T8020] [ 411.764257][ T8020] Possible unsafe locking scenario: [ 411.764257][ T8020] [ 411.771745][ T8020] CPU0 CPU1 [ 411.777105][ T8020] ---- ---- [ 411.782465][ T8020] lock(&rdev->wiphy.mtx); [ 411.786964][ T8020] lock(team->team_lock_key#4); [ 411.794419][ T8020] lock(&rdev->wiphy.mtx); [ 411.801449][ T8020] lock(team->team_lock_key#4); [ 411.806379][ T8020] [ 411.806379][ T8020] *** DEADLOCK *** [ 411.806379][ T8020] [ 411.814508][ T8020] 5 locks held by kworker/u4:18/8020: [ 411.819866][ T8020] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 411.830744][ T8020] #1: ffffc900058ffd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 411.841293][ T8020] #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 411.850683][ T8020] #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 411.860511][ T8020] #4: ffff88801cbf0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 411.871305][ T8020] [ 411.871305][ T8020] stack backtrace: [ 411.877207][ T8020] CPU: 1 PID: 8020 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 411.885038][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.895195][ T8020] Workqueue: netns cleanup_net [ 411.899978][ T8020] Call Trace: [ 411.903253][ T8020] [ 411.906176][ T8020] dump_stack_lvl+0x18c/0x250 [ 411.910936][ T8020] ? load_image+0x420/0x420 [ 411.915426][ T8020] ? show_regs_print_info+0x20/0x20 [ 411.920633][ T8020] ? print_circular_bug+0x12b/0x1a0 [ 411.925830][ T8020] check_noncircular+0x2fc/0x400 [ 411.930771][ T8020] ? print_deadlock_bug+0x5d0/0x5d0 [ 411.935961][ T8020] ? lockdep_lock+0xf5/0x230 [ 411.940548][ T8020] ? __lock_acquire+0x1273/0x7d40 [ 411.945571][ T8020] ? _find_first_zero_bit+0xd3/0x100 [ 411.950941][ T8020] __lock_acquire+0x2df1/0x7d40 [ 411.955796][ T8020] ? verify_lock_unused+0x140/0x140 [ 411.961075][ T8020] ? verify_lock_unused+0x140/0x140 [ 411.966279][ T8020] lock_acquire+0x19e/0x420 [ 411.970779][ T8020] ? team_del_slave+0x32/0x1c0 [ 411.975537][ T8020] ? __might_sleep+0xe0/0xe0 [ 411.980119][ T8020] ? read_lock_is_recursive+0x20/0x20 [ 411.985533][ T8020] __mutex_lock+0x136/0xcc0 [ 411.990030][ T8020] ? team_del_slave+0x32/0x1c0 [ 411.994781][ T8020] ? __lock_acquire+0x7d40/0x7d40 [ 411.999800][ T8020] ? rcu_is_watching+0x15/0xb0 [ 412.004555][ T8020] ? trace_contention_end+0x39/0xe0 [ 412.009750][ T8020] ? __mutex_lock+0x315/0xcc0 [ 412.014428][ T8020] ? team_del_slave+0x32/0x1c0 [ 412.019271][ T8020] ? mutex_lock_nested+0x20/0x20 [ 412.024372][ T8020] ? bond_netdev_event+0xeb/0xf20 [ 412.029475][ T8020] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 412.035104][ T8020] team_del_slave+0x32/0x1c0 [ 412.039740][ T8020] team_device_event+0x28d/0xa20 [ 412.044676][ T8020] notifier_call_chain+0x197/0x380 [ 412.049781][ T8020] unregister_netdevice_many_notify+0x100d/0x1900 [ 412.056199][ T8020] ? lock_chain_count+0x20/0x20 [ 412.061044][ T8020] ? unregister_netdevice_many+0x20/0x20 [ 412.066700][ T8020] ? kernfs_remove_by_name_ns+0x117/0x150 [ 412.072415][ T8020] ? __lock_acquire+0x7d40/0x7d40 [ 412.077436][ T8020] unregister_netdevice_queue+0x32c/0x370 [ 412.083150][ T8020] ? list_netdevice+0x730/0x730 [ 412.087992][ T8020] ? kernfs_remove_by_name_ns+0x117/0x150 [ 412.093702][ T8020] _cfg80211_unregister_wdev+0x16b/0x580 [ 412.099330][ T8020] ieee80211_remove_interfaces+0x49e/0x690 [ 412.105132][ T8020] ? ieee80211_do_stop+0x1e20/0x1e20 [ 412.110432][ T8020] ? rcu_is_watching+0x15/0xb0 [ 412.115191][ T8020] ieee80211_unregister_hw+0x5d/0x2a0 [ 412.120557][ T8020] mac80211_hwsim_del_radio+0x289/0x480 [ 412.126096][ T8020] ? rhashtable_remove_fast+0xc00/0xc00 [ 412.131647][ T8020] hwsim_exit_net+0x58d/0x650 [ 412.136589][ T8020] ? hwsim_init_net+0x90/0x90 [ 412.141260][ T8020] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 412.147126][ T8020] cleanup_net+0x70a/0xbb0 [ 412.151624][ T8020] ? ops_free_list+0x3b0/0x3b0 [ 412.156388][ T8020] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.161580][ T8020] ? process_scheduled_works+0x96f/0x15d0 [ 412.167298][ T8020] ? process_scheduled_works+0x96f/0x15d0 [ 412.173040][ T8020] process_scheduled_works+0xa5d/0x15d0 [ 412.178590][ T8020] ? worker_attach_to_pool+0x380/0x380 [ 412.184041][ T8020] ? assign_work+0x3d2/0x5d0 [ 412.188622][ T8020] worker_thread+0xa55/0xfc0 [ 412.193230][ T8020] kthread+0x2fa/0x390 [ 412.197637][ T8020] ? pr_cont_work+0x560/0x560 [ 412.202306][ T8020] ? kthread_blkcg+0xd0/0xd0 [ 412.206977][ T8020] ret_from_fork+0x48/0x80 [ 412.211385][ T8020] ? kthread_blkcg+0xd0/0xd0 [ 412.215961][ T8020] ret_from_fork_asm+0x11/0x20 [ 412.220721][ T8020] [ 412.225062][ T5780] Bluetooth: hci4: command tx timeout [ 412.235513][ T8020] team0: Port device wlan1 removed [ 412.262010][T12423] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 412.272117][T12423] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 412.285443][T12423] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 412.309165][T12423] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 412.402889][ T8020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.418389][ T8020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.426507][ T8020] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 412.434623][ T8020] batman_adv: batadv0: Removing interface: virt_wifi0 [ 412.444003][ T8020] veth1_macvtap: left promiscuous mode [ 412.449887][ T8020] veth0_macvtap: left promiscuous mode [ 412.455605][ T8020] veth1_vlan: left promiscuous mode [ 412.815739][ T8020] team0 (unregistering): Port device team_slave_1 removed [ 413.092868][T12423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.124562][T12423] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.139011][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.146542][ T8014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.165010][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.172243][ T8017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.391804][T12423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.434489][T12423] veth0_vlan: entered promiscuous mode [ 413.450741][T12423] veth1_vlan: entered promiscuous mode [ 413.481010][T12423] veth0_macvtap: entered promiscuous mode [ 413.493140][T12423] veth1_macvtap: entered promiscuous mode [ 413.509063][T12423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.520322][T12423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.530996][T12423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.542251][T12423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.552854][T12423] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.564944][T12423] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.573882][T12423] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.582722][T12423] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.611687][T12423] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 413.633362][ T8024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.634945][T12423] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 413.646473][ T8024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.665258][ T8020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.675286][ T8020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.247819][ T5780] Bluetooth: hci4: command tx timeout