last executing test programs: 4.540692494s ago: executing program 0 (id=5305): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000500), 0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xffffff7f}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0xc4, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0x2, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x85}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0xb, 0x40, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x5, 0xc6, &(0x7f0000000200)=""/198, 0x40f00, 0x4c, '\x00', 0x0, @tracing=0xebdcb6744cb0fbbb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0xd, 0x9, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x5, 0x2, 0xc, 0x5}, {0x2, 0x3, 0x8, 0xa}], 0x10, 0x3}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@fallback=r5, r4, 0x1e}, 0x20) 4.330264607s ago: executing program 3 (id=5307): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x40100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x9}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8af77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc287220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e8c7776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) 4.329745617s ago: executing program 1 (id=5308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffffffffd98, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x3, 0x3, 0x3, 0x100, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0xe}, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x35, 0x0, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x6}, 0x28) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230041) (async) close(r5) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x32, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8b) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x88ad, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) (async) r10 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x1f, &(0x7f0000000080), 0x4) recvmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000020) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pI4 \x00'}, 0x20) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r13}, 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e0000000300000000000000", @ANYRES32=r13, @ANYRES64], 0x20) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup=r14, r3, 0x2c, 0x0, 0x0, @void, @value=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x6, &(0x7f0000000140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x0, 0x0, 0x2, 0x4, 0x6, 0x4, 0xfffffffffffffff0}, @ldst={0x0, 0x2, 0x6, 0x6, 0x2, 0xffffffffffffffe6, 0xfffffffffffffff0}], &(0x7f00000002c0)='GPL\x00', 0x8e3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r0, r7, r8, r9, r11, r12, r15], &(0x7f0000000700), 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000200)="b9ff03076804268c989e14f088a847e08906", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.323244867s ago: executing program 2 (id=5309): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ea00"/16], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x34, 0x1, 0x210, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0xa}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x9}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x401c5820, &(0x7f0000000240)={'bridge_slave_1\x00', @random="576e0723ca13"}) socket$kcm(0x10, 0x2, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) sendmsg$inet(r7, 0x0, 0x7e8166965e22236a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0xc, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018000000db000000000000000700000085000000150000009500000000000000186800000600000000000000010000008527defff0ffffff9500000000000000"], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000013c0)=""/4096, 0x60700, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0xc, 0x2cd, 0xfffffffb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r0], &(0x7f0000000a40)=[{0x5, 0x3, 0xd, 0x8}, {0x5, 0x1, 0x4, 0x6}, {0x3, 0x0, 0xb, 0x5}, {0x3, 0x5, 0xd, 0x7}], 0x10, 0x3}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 4.151878687s ago: executing program 3 (id=5311): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0xfefb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0xffffffab, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r3, 0x84, 0x77, &(0x7f0000000ac0), 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000001d80), &(0x7f0000000640)=r4}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020003030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e97030000000000000000000000003341000000", 0xd8}], 0x1}, 0x0) sendmsg(r5, &(0x7f0000000440)={&(0x7f0000000200)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0xfd}, {&(0x7f0000000380)="d82431ce41b84777d4f4a51a18dcbf13908f14bad5a37ea8cb2bdef3dee5038b6a0b4197e1e9044601f19aa8487622f74a929d6249f443c311b57683ff5db49c0bc1859fc7c20aacfd0a93668dfc6ea4494573f99bcce09632d82f5159a291ebdc0305ffc572618b9c2d7f3a7b2271c32b5435ff623beac86c6ddb79947c75bd05cb847aaf3005cc79ae042fcc486a68a8c3976c5bdd88f3cc3bd2b3c3d5b4765a0361eb6fcd1feb32", 0xa9}], 0x2, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x4d8}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r5) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x11ce04fe71d9a665, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000c", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x7}, 0x8) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 4.143260437s ago: executing program 1 (id=5312): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) recvmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000017"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r4, 0x37, 0x0, 0xc762, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r6, 0xffffffffffffffff, 0x4, 0x0, 0x0, @void, @value, @void, @void, r7}, 0x20) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r6, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) 4.140628347s ago: executing program 0 (id=5313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r7) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) recvmsg(r8, 0x0, 0x102) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r9}, 0xc) 4.032079304s ago: executing program 2 (id=5314): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10102) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='E', 0x1}], 0x1}, 0x4000040) close(r3) 3.906550371s ago: executing program 4 (id=5315): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x9, &(0x7f00000001c0)=r1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)="14", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) r5 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r4, 0x10e, 0x2, &(0x7f0000000300)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01e318"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r8}, 0x8) 3.776637459s ago: executing program 2 (id=5316): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xe8}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009080) (fail_nth: 3) 3.649748706s ago: executing program 3 (id=5317): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="d7", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x2, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wg0\x00', 0x400}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x10c002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000280)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400060416000b63d25a80648c2594f92624fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000640), 0x4) close(0xffffffffffffffff) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) socket$kcm(0xa, 0x1, 0x0) 3.225989541s ago: executing program 4 (id=5318): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xd, 0x7fe6, 0xffffffff, 0x42}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f0000000b00)=[{0xb, 0x10d}, {0x10, 0x84, 0x7}], 0xffffffffffffff3d}, 0x40081) 3.087318689s ago: executing program 1 (id=5319): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x28, 0x0, 0xc) 3.067401341s ago: executing program 4 (id=5320): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xe8}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009080) 881.038149ms ago: executing program 1 (id=5321): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4f, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xfd90, &(0x7f0000000080)=""/208, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x0, 0x10000075, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000540), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000b00), 0x4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000680)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @map_fd={0x18, 0x3}, @map_fd={0x18, 0x5}, @ldst={0x2, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}], &(0x7f0000000740)='syzkaller\x00', 0xcc, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xc, 0x6, 0xf6}, 0x10, 0x278d1, r1, 0x5, 0x0, &(0x7f0000000800)=[{0x0, 0x4, 0x1, 0xe}, {0x0, 0x3, 0x6, 0x6}, {0x4, 0x5, 0xf, 0xb}, {0x0, 0x3, 0x8, 0x4}, {0x0, 0x3, 0x2, 0x2}], 0x10, 0x401}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r6, 0x4}, 0x38) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x2, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffe}, @jmp={0x5, 0x0, 0x6, 0x9, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x42}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', r4, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x2, 0x3, 0x9}, 0x10, 0x0, r5, 0x6, &(0x7f0000000980)=[r6, r0, 0x1, r7], &(0x7f00000009c0)=[{0x4, 0x5, 0x9, 0x6}, {0x2, 0x3, 0x8, 0xc}, {0x1, 0x5, 0xb, 0x8}, {0x1, 0x5, 0x10, 0xa}, {0x0, 0x1, 0xa, 0x1}, {0x1, 0x4, 0xf, 0x1}], 0x10, 0x1ec1}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x2b, 0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000000010000010000", @ANYRES32], 0x50) socketpair(0x11, 0xa, 0x300, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x4840) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'netdevsim0\x00', @random="0003230c1100"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000680)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0xa15, 0xb5a, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) 880.360319ms ago: executing program 2 (id=5322): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000040000000000200000000000000000"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) socket$kcm(0x10, 0x2, 0x10) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e80)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r0, 0x58, &(0x7f0000000b40)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r0, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x14, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x2, 0x2, 0x0, 0xb, 0x0, 0xffffffffffffffe8, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x4, 0x3, 0x8, 0x100, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xb9}, @call={0x85, 0x0, 0x0, 0xc2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x24, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0xc, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[r0], &(0x7f0000000c80)=[{0x4, 0x4, 0x5, 0x6}, {0x1, 0x4, 0x400009, 0xc}, {0x3, 0x4, 0x5, 0xc}], 0x10, 0xb4}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100001, 0xca, 0x0, 0x5, 0x1000000000000, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c07e8fe55a1040008400100142603600e120800060000000401a80008000800104003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r11 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0xf, &(0x7f00000002c0), 0x161) (async) setsockopt$sock_attach_bpf(r11, 0x1, 0xf, &(0x7f00000002c0), 0x161) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f00000001c0), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000008000000080000000400000008000000010000840000000004000000010000e7ffffff00020000000000002e5f00"], &(0x7f0000000700)=""/149, 0x46, 0x95, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000008000000080000000400000008000000010000840000000004000000010000e7ffffff00020000000000002e5f00"], &(0x7f0000000700)=""/149, 0x46, 0x95, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff]}}], 0x18}, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[@ANYRES8=r8, @ANYRES8=r13], 0x12) (async) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[@ANYRES8=r8, @ANYRES8=r13], 0x12) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000004000000850000007d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000200850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000004000000850000007d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000200850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 880.067639ms ago: executing program 4 (id=5323): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000500), 0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xffffff7f}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0xc4, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0x2, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x85}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0xb, 0x40, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x5, 0xc6, &(0x7f0000000200)=""/198, 0x40f00, 0x4c, '\x00', 0x0, @tracing=0xebdcb6744cb0fbbb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0xd, 0x9, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x5, 0x2, 0xc, 0x5}, {0x2, 0x3, 0x8, 0xa}], 0x10, 0x3}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@fallback=r5, r4, 0x1e}, 0x20) 786.376274ms ago: executing program 0 (id=5324): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x40100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x9}, 0x5000, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r0}, 0x18) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8af77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e8c7776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) 635.613383ms ago: executing program 3 (id=5325): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ea00"/16], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x34, 0x1, 0x210, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0xa}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x9}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x401c5820, &(0x7f0000000240)={'bridge_slave_1\x00', @random="576e0723ca13"}) socket$kcm(0x10, 0x2, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) sendmsg$inet(r7, 0x0, 0x7e8166965e22236a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000018000000db000000000000000700000085000000150000009500000000000000186800000600000000000000010000008527defff0ffffff9500000000000000"], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000013c0)=""/4096, 0x60700, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0xc, 0x2cd, 0xfffffffb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r0], &(0x7f0000000a40)=[{0x5, 0x3, 0xd, 0x8}, {0x5, 0x1, 0x4, 0x6}, {0x3, 0x0, 0xb, 0x5}, {0x3, 0x5, 0xd, 0x7}], 0x10, 0x3}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 571.136577ms ago: executing program 1 (id=5326): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10102) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='E', 0x1}], 0x1}, 0x4000040) close(r3) 485.218362ms ago: executing program 0 (id=5327): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x8, &(0x7f0000000000)=r4, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631480fc00082cd0032e7d9aa9513b8e53151cdd1e1e857962b8d5b7055870f42b8b82bcf6df019f32c2a4fb1db030a6de7a4478e4fadf774afadc6718b971aa05ce9c790510cdedc7e0008c81cb2b2ce9c6be7ff85fb12c6c2b899cb5d135d7c3e86be83a246f679129e9d4c90612bc3a12907e8d01a37a1f9d5873a5166956f2ec72263eef5cdb62246e43c2f3999abc19e8e90918be82f7df001708cc423653193a937575c9494aee4daa798823598108e160be9c60a5f2521c37349a034664d130850b"], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) 477.571482ms ago: executing program 4 (id=5328): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, 0x0, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r2}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0) 380.194708ms ago: executing program 2 (id=5329): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0000000400000008000000070000b6c3344ae5", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r2, 0x20, &(0x7f0000000340)={&(0x7f0000000140)=""/179, 0xb3, 0x0, &(0x7f0000000240)=""/214, 0xd6}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) 313.168301ms ago: executing program 3 (id=5330): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x9, 0x0, 0x8, 0x0, 0x3, 0x100, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0xbc69}, 0x2000, 0x4, 0x8, 0x3, 0x4, 0x8, 0x6d7, 0x0, 0xffffd809}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xef, 0x7, 0x7, 0x9, 0x0, 0x6, 0x14a00, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0xe}, 0x4, 0x7, 0x8001, 0x5, 0x6, 0x3000, 0x6, 0x0, 0xffff, 0x0, 0x3}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 268.891394ms ago: executing program 1 (id=5331): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x34, 0x1, 0x210, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0xa}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x81084000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x9}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x401c5820, &(0x7f0000000240)={'bridge_slave_1\x00', @random="576e0723ca13"}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=r4, 0x0, 0x1, 0x4a7, &(0x7f0000000740)=[0x0], 0x1, 0x0, &(0x7f0000000780)=[0x0], 0x0, &(0x7f0000000800)=[0x0]}, 0x40) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00'], 0x30}, 0x7e8166965e22236a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000005000000000000000000008018230000", @ANYRES32=r3, @ANYBLOB="000000000000000018000000db000000000000000700000085000000150000009500000000000000186800000600000000000000010000008527defff0ffffff9500000000000000"], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000013c0)=""/4096, 0x60700, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0xc, 0x2cd, 0xfffffffb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[r6, r3, 0xffffffffffffffff, r5, r8, r1], &(0x7f0000000a40)=[{0x5, 0x3, 0xd, 0x8}, {0x5, 0x1, 0x4, 0x6}, {0x3, 0x0, 0xb, 0x5}, {0x3, 0x5, 0xd, 0x7}], 0x10, 0x3}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 225.146857ms ago: executing program 0 (id=5332): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) write$cgroup_int(r3, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000) setsockopt$sock_attach_bpf(r1, 0x84, 0x82, &(0x7f0000000000), 0x8) 223.833507ms ago: executing program 4 (id=5333): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x9db155b4338cbebb, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) close(r1) r3 = socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xfffffffffffffffd, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000240)={r3}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x74, 0x1ff}, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000e6ffffff00000000000000"], 0x0, 0x26}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000380)={0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0xc8, 0x2, 0x7, 0x0, 0x10001, 0xa}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 75.944256ms ago: executing program 2 (id=5334): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 36.233888ms ago: executing program 0 (id=5335): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000000bd00"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), 0x0, 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x408000, @loopback, 0x40003}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="8acc", 0x2}], 0x1, 0x0, 0x2, 0x900}, 0x60) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x10000000000001, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x400000000000001, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f03", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0xbf636bd3915f4950, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x5, &(0x7f0000000200)=ANY=[@ANYRES8=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000d00)={r5, &(0x7f0000000cc0)="7f054d27772c4582c9a78868e0ab02298661f4af1f793124e47157"}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000c40), 0x8) 0s ago: executing program 3 (id=5336): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 124915][T15831] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3656'. [ 733.631837][T15840] netlink: 'syz.2.3659': attribute type 11 has an invalid length. [ 733.712081][T15840] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3659'. [ 733.728065][T15840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.855186][T15840] netlink: 'syz.2.3659': attribute type 2 has an invalid length. [ 733.989525][T15840] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3659'. [ 734.516974][T15864] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3666'. [ 735.184223][T15881] netlink: 'syz.4.3671': attribute type 25 has an invalid length. [ 735.294611][T15881] netlink: 'syz.4.3671': attribute type 1 has an invalid length. [ 735.368082][T15881] bridge0: port 1(bridge_slave_0) entered learning state [ 736.750765][T15908] netlink: 'syz.1.3680': attribute type 11 has an invalid length. [ 736.766993][T15908] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3680'. [ 736.779622][T15908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.871322][T15908] netlink: 'syz.1.3680': attribute type 2 has an invalid length. [ 736.888738][T15908] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3680'. [ 737.305210][T15918] FAULT_INJECTION: forcing a failure. [ 737.305210][T15918] name failslab, interval 1, probability 0, space 0, times 0 [ 737.330970][T15918] CPU: 1 PID: 15918 Comm: syz.3.3684 Not tainted syzkaller #0 [ 737.338507][T15918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 737.348617][T15918] Call Trace: [ 737.351933][T15918] [ 737.354893][T15918] dump_stack_lvl+0x188/0x24e [ 737.359616][T15918] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 737.365820][T15918] ? show_regs_print_info+0x12/0x12 [ 737.371068][T15918] ? load_image+0x400/0x400 [ 737.375706][T15918] ? kasan_check_range+0xe/0x290 [ 737.380703][T15918] should_fail_ex+0x399/0x4d0 [ 737.385440][T15918] should_failslab+0x5/0x20 [ 737.390011][T15918] slab_pre_alloc_hook+0x59/0x310 [ 737.395097][T15918] ? kvmalloc_node+0x6c/0x180 [ 737.399835][T15918] __kmem_cache_alloc_node+0x4f/0x260 [ 737.405260][T15918] ? kvmalloc_node+0x6c/0x180 [ 737.410001][T15918] __kmalloc_node+0xa0/0x240 [ 737.414650][T15918] kvmalloc_node+0x6c/0x180 [ 737.419209][T15918] bpf_test_run_xdp_live+0x209/0x1a90 [ 737.424638][T15918] ? 0xffffffffa00041c0 [ 737.428861][T15918] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 737.434905][T15918] ? 0xffffffffa00041c0 [ 737.439121][T15918] ? xdp_convert_md_to_buff+0x330/0x330 [ 737.444767][T15918] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 737.451079][T15918] ? xdp_convert_md_to_buff+0x5b/0x330 [ 737.456597][T15918] bpf_prog_test_run_xdp+0x736/0xf10 [ 737.461955][T15918] ? __fget_files+0x6b/0x4b0 [ 737.466609][T15918] ? dev_put+0x80/0x80 [ 737.470746][T15918] ? dev_put+0x80/0x80 [ 737.474863][T15918] bpf_prog_test_run+0x31e/0x390 [ 737.479864][T15918] __sys_bpf+0x62b/0x780 [ 737.484178][T15918] ? bpf_link_show_fdinfo+0x380/0x380 [ 737.489616][T15918] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 737.495836][T15918] __x64_sys_bpf+0x78/0x90 [ 737.500307][T15918] do_syscall_64+0x4c/0xa0 [ 737.504783][T15918] ? clear_bhb_loop+0x60/0xb0 [ 737.509521][T15918] ? clear_bhb_loop+0x60/0xb0 [ 737.514247][T15918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.520192][T15918] RIP: 0033:0x7f6a3f79aeb9 [ 737.524672][T15918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.544344][T15918] RSP: 002b:00007f6a4062e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 737.552807][T15918] RAX: ffffffffffffffda RBX: 00007f6a3fa15fa0 RCX: 00007f6a3f79aeb9 [ 737.560808][T15918] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 737.568804][T15918] RBP: 00007f6a4062e090 R08: 0000000000000000 R09: 0000000000000000 [ 737.576810][T15918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.584815][T15918] R13: 00007f6a3fa16038 R14: 00007f6a3fa15fa0 R15: 00007ffd105c2238 [ 737.592824][T15918] [ 737.880966][T15921] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3685'. [ 739.048567][T13089] Bluetooth: hci2: command 0x0406 tx timeout [ 739.736333][T15958] netlink: 'syz.4.3696': attribute type 11 has an invalid length. [ 739.807212][T15958] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3696'. [ 739.828335][T15964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.768091][T16012] netlink: 'syz.3.3709': attribute type 2 has an invalid length. [ 742.972316][T16021] netlink: 'syz.2.3713': attribute type 11 has an invalid length. [ 742.986243][T16021] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3713'. [ 743.026563][T16021] netlink: 'syz.2.3713': attribute type 11 has an invalid length. [ 743.071721][T16021] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3713'. [ 743.114890][T16025] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3713'. [ 743.222966][T16025] device team_slave_0 left promiscuous mode [ 743.556294][T16025] team0: Port device team_slave_0 removed [ 743.609607][T16025] net_ratelimit: 20 callbacks suppressed [ 743.609647][T16025] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 743.726400][T16019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.253405][T16070] delete_channel: no stack [ 746.756139][T16089] netlink: 'syz.1.3735': attribute type 10 has an invalid length. [ 747.117685][T16089] team0: Port device geneve1 added [ 747.211511][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.217968][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.644522][T16106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3741'. [ 748.050028][T16114] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3745'. [ 748.706581][T16134] netlink: 'syz.1.3751': attribute type 21 has an invalid length. [ 748.743839][T16134] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3751'. [ 748.795401][T16138] netlink: 'syz.1.3751': attribute type 2 has an invalid length. [ 748.896005][T16138] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3751'. [ 751.877071][T16153] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3757'. [ 753.519097][T16181] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3767'. [ 753.666372][T16188] netlink: 'syz.2.3769': attribute type 11 has an invalid length. [ 753.695822][T16188] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3769'. [ 753.759455][T16188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.077848][T16191] netlink: 'syz.2.3769': attribute type 2 has an invalid length. [ 754.104146][T16191] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3769'. [ 754.614276][T16205] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.3773'. [ 754.662920][T16205] openvswitch: netlink: Message has 48126 unknown bytes. [ 755.175161][T16221] FAULT_INJECTION: forcing a failure. [ 755.175161][T16221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.200837][T16221] CPU: 0 PID: 16221 Comm: syz.1.3780 Not tainted syzkaller #0 [ 755.208400][T16221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 755.218510][T16221] Call Trace: [ 755.221828][T16221] [ 755.224806][T16221] dump_stack_lvl+0x188/0x24e [ 755.229546][T16221] ? show_regs_print_info+0x12/0x12 [ 755.234802][T16221] ? load_image+0x400/0x400 [ 755.239353][T16221] ? __lock_acquire+0x7d10/0x7d10 [ 755.244437][T16221] should_fail_ex+0x399/0x4d0 [ 755.249184][T16221] _copy_from_user+0x2c/0x170 [ 755.253915][T16221] __copy_msghdr+0x3b7/0x580 [ 755.258570][T16221] ___sys_sendmsg+0x210/0x360 [ 755.263317][T16221] ? __sys_sendmsg+0x290/0x290 [ 755.268159][T16221] ? __lock_acquire+0x7d10/0x7d10 [ 755.273274][T16221] __se_sys_sendmsg+0x1bb/0x2a0 [ 755.278182][T16221] ? __x64_sys_sendmsg+0x80/0x80 [ 755.283192][T16221] ? lockdep_hardirqs_on+0x94/0x140 [ 755.288451][T16221] do_syscall_64+0x4c/0xa0 [ 755.292953][T16221] ? clear_bhb_loop+0x60/0xb0 [ 755.297691][T16221] ? clear_bhb_loop+0x60/0xb0 [ 755.302425][T16221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 755.308539][T16221] RIP: 0033:0x7fc3ab59aeb9 [ 755.313015][T16221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.332756][T16221] RSP: 002b:00007fc3ac4ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 755.341226][T16221] RAX: ffffffffffffffda RBX: 00007fc3ab815fa0 RCX: 00007fc3ab59aeb9 [ 755.349269][T16221] RDX: 0000000000008080 RSI: 00002000000031c0 RDI: 0000000000000003 [ 755.357300][T16221] RBP: 00007fc3ac4ae090 R08: 0000000000000000 R09: 0000000000000000 [ 755.365326][T16221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.373351][T16221] R13: 00007fc3ab816038 R14: 00007fc3ab815fa0 R15: 00007ffc01bb2628 [ 755.381394][T16221] [ 756.115111][T16232] netlink: 'syz.2.3785': attribute type 11 has an invalid length. [ 756.154001][T16232] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3785'. [ 756.188475][T16232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.286565][T16232] netlink: 'syz.2.3785': attribute type 2 has an invalid length. [ 756.332954][T16232] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3785'. [ 756.414329][T16241] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3786'. [ 757.487175][T16265] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3794'. [ 757.497394][T16265] netlink: zone id is out of range [ 757.523483][T16265] netlink: zone id is out of range [ 757.559173][T16265] netlink: zone id is out of range [ 757.615170][T16265] netlink: zone id is out of range [ 757.636239][T16265] netlink: zone id is out of range [ 757.655647][T16265] netlink: zone id is out of range [ 757.697126][T16265] netlink: zone id is out of range [ 757.702415][T16265] netlink: zone id is out of range [ 757.755212][T16265] netlink: zone id is out of range [ 758.705649][T16286] netlink: 'syz.0.3801': attribute type 11 has an invalid length. [ 758.757644][T16286] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3801'. [ 758.780443][T16286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.861820][T16286] netlink: 'syz.0.3801': attribute type 2 has an invalid length. [ 758.935140][T16286] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3801'. [ 759.526995][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 759.583268][T16304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3807'. [ 760.587614][T16326] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3815'. [ 761.049558][T16339] netlink: 'syz.0.3819': attribute type 11 has an invalid length. [ 761.068976][T16341] netlink: 'syz.2.3820': attribute type 10 has an invalid length. [ 761.099143][T16339] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3819'. [ 761.184174][T16341] device geneve1 entered promiscuous mode [ 761.299472][T16339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.337855][T16341] team0: Port device geneve1 added [ 763.364112][T16382] netlink: 'syz.4.3836': attribute type 11 has an invalid length. [ 763.397240][T16382] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3836'. [ 763.419794][T16388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.506232][T16382] netlink: 'syz.4.3836': attribute type 2 has an invalid length. [ 763.581216][T16382] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3836'. [ 765.617287][T16417] netlink: 'syz.2.3849': attribute type 11 has an invalid length. [ 765.694818][T16417] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3849'. [ 765.700520][T16423] netlink: 'syz.1.3850': attribute type 2 has an invalid length. [ 765.965641][T16428] netlink: 'syz.4.3852': attribute type 11 has an invalid length. [ 766.026391][T16428] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3852'. [ 766.057670][T16416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.170647][T16428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.360960][T16428] netlink: 'syz.4.3852': attribute type 2 has an invalid length. [ 766.456774][T16428] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3852'. [ 770.598145][T16478] netlink: 'syz.0.3867': attribute type 11 has an invalid length. [ 770.606071][T16478] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3867'. [ 770.738503][T16478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.818017][T16476] netlink: 'syz.0.3867': attribute type 2 has an invalid length. [ 770.867486][T16476] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3867'. [ 773.494673][T16518] netlink: 'syz.0.3882': attribute type 11 has an invalid length. [ 773.548479][T16518] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3882'. [ 773.579030][T16518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.676609][T16518] netlink: 'syz.0.3882': attribute type 2 has an invalid length. [ 773.757125][T16518] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3882'. [ 774.762394][T16542] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3890'. [ 774.991950][T16549] FAULT_INJECTION: forcing a failure. [ 774.991950][T16549] name failslab, interval 1, probability 0, space 0, times 0 [ 775.116254][T16549] CPU: 0 PID: 16549 Comm: syz.4.3893 Not tainted syzkaller #0 [ 775.123843][T16549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 775.134136][T16549] Call Trace: [ 775.137463][T16549] [ 775.140442][T16549] dump_stack_lvl+0x188/0x24e [ 775.145183][T16549] ? sctp_sendmsg+0x15b0/0x2940 [ 775.150142][T16549] ? ___sys_sendmsg+0x2a2/0x360 [ 775.155059][T16549] ? show_regs_print_info+0x12/0x12 [ 775.160309][T16549] ? load_image+0x400/0x400 [ 775.164889][T16549] should_fail_ex+0x399/0x4d0 [ 775.169652][T16549] should_failslab+0x5/0x20 [ 775.174219][T16549] slab_pre_alloc_hook+0x59/0x310 [ 775.179301][T16549] ? sctp_add_bind_addr+0x89/0x350 [ 775.184448][T16549] __kmem_cache_alloc_node+0x4f/0x260 [ 775.189856][T16549] ? sctp_add_bind_addr+0x89/0x350 [ 775.195002][T16549] kmalloc_trace+0x26/0xe0 [ 775.199460][T16549] sctp_add_bind_addr+0x89/0x350 [ 775.204437][T16549] sctp_copy_local_addr_list+0x311/0x4e0 [ 775.210109][T16549] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 775.216388][T16549] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 775.222511][T16549] ? sctp_v4_is_any+0x31/0x50 [ 775.227216][T16549] ? sctp_copy_one_addr+0x93/0x660 [ 775.232357][T16549] sctp_bind_addr_copy+0xaf/0x3c0 [ 775.237413][T16549] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 775.243803][T16549] sctp_connect_new_asoc+0x2f5/0x6a0 [ 775.249179][T16549] ? __sctp_connect+0xd80/0xd80 [ 775.254079][T16549] ? __local_bh_enable_ip+0x136/0x1c0 [ 775.259489][T16549] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 775.265064][T16549] ? security_sctp_bind_connect+0x85/0xb0 [ 775.270838][T16549] sctp_sendmsg+0x15b0/0x2940 [ 775.275568][T16549] ? aa_sk_perm+0x721/0x950 [ 775.280106][T16549] ? sctp_getsockopt+0x8a0/0x8a0 [ 775.285074][T16549] ? __might_fault+0xa6/0x120 [ 775.289780][T16549] ? aa_af_perm+0x340/0x340 [ 775.294310][T16549] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 775.300765][T16549] ? inet_sendmsg+0xe5/0x2f0 [ 775.305392][T16549] ? inet_send_prepare+0x260/0x260 [ 775.310535][T16549] ____sys_sendmsg+0x5be/0x970 [ 775.315342][T16549] ? __sys_sendmsg_sock+0x30/0x30 [ 775.320391][T16549] ? __import_iovec+0x315/0x500 [ 775.325275][T16549] ? import_iovec+0x6f/0xa0 [ 775.329807][T16549] ___sys_sendmsg+0x2a2/0x360 [ 775.334544][T16549] ? __sys_sendmsg+0x290/0x290 [ 775.339375][T16549] ? trace_call_bpf+0xbf/0x6b0 [ 775.344219][T16549] __se_sys_sendmsg+0x1bb/0x2a0 [ 775.349117][T16549] ? __x64_sys_sendmsg+0x80/0x80 [ 775.354106][T16549] ? trace_sys_enter+0x22/0x80 [ 775.358914][T16549] do_syscall_64+0x4c/0xa0 [ 775.363398][T16549] ? clear_bhb_loop+0x60/0xb0 [ 775.368108][T16549] ? clear_bhb_loop+0x60/0xb0 [ 775.372825][T16549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 775.378744][T16549] RIP: 0033:0x7f6ccbf9aeb9 [ 775.383191][T16549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.402927][T16549] RSP: 002b:00007f6cccdc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.411383][T16549] RAX: ffffffffffffffda RBX: 00007f6ccc215fa0 RCX: 00007f6ccbf9aeb9 [ 775.419390][T16549] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 775.427426][T16549] RBP: 00007f6cccdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 775.435423][T16549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 775.443418][T16549] R13: 00007f6ccc216038 R14: 00007f6ccc215fa0 R15: 00007ffe9cfc9a38 [ 775.451437][T16549] [ 777.031481][T16571] netlink: 'syz.4.3899': attribute type 11 has an invalid length. [ 777.347877][T16571] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3899'. [ 777.398816][T16571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.906565][T16618] netlink: 'syz.1.3919': attribute type 11 has an invalid length. [ 779.968813][T16618] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3919'. [ 780.047726][T16618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.278041][T16627] netlink: 'syz.1.3919': attribute type 2 has an invalid length. [ 780.324121][T16627] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3919'. [ 781.501315][T16642] netlink: 'syz.4.3925': attribute type 3 has an invalid length. [ 781.522293][T16642] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3925'. [ 783.141704][T16679] netlink: 'syz.2.3938': attribute type 11 has an invalid length. [ 783.181209][T16679] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3938'. [ 783.225319][T16683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.302915][T16679] netlink: 'syz.2.3938': attribute type 2 has an invalid length. [ 783.345299][T16679] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3938'. [ 785.127495][T13089] Bluetooth: hci3: command 0x0406 tx timeout [ 786.308811][T16721] netlink: 'syz.1.3952': attribute type 2 has an invalid length. [ 787.682047][T16748] netlink: 'syz.1.3964': attribute type 10 has an invalid length. [ 787.994623][T16748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.032908][T16748] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 788.810190][T16771] netlink: 'syz.1.3973': attribute type 11 has an invalid length. [ 788.911740][T16771] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3973'. [ 789.118608][T16771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.343408][T16775] netlink: 'syz.1.3973': attribute type 2 has an invalid length. [ 789.407464][T16775] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3973'. [ 789.488663][T16782] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 789.527957][T16782] syzkaller1: linktype set to 823 [ 791.005033][T16811] team0: Port device team_slave_0 removed [ 791.029667][T16811] net_ratelimit: 184 callbacks suppressed [ 791.029687][T16811] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 791.667950][T16830] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.3990'. [ 791.677694][T16830] openvswitch: netlink: Flow actions attr not present in new flow. [ 791.946204][T16832] netlink: 'syz.2.3991': attribute type 11 has an invalid length. [ 792.008635][T16832] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3991'. [ 792.070607][T16832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.138882][T16832] netlink: 'syz.2.3991': attribute type 2 has an invalid length. [ 792.192712][T16832] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3991'. [ 792.229546][T16839] netlink: 'syz.3.3992': attribute type 10 has an invalid length. [ 792.452577][T16839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.515885][T16839] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 793.426058][T16863] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 793.490875][T16863] syzkaller1: linktype set to 823 [ 794.116646][T16883] netlink: 'syz.3.4011': attribute type 11 has an invalid length. [ 794.143993][T16883] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4011'. [ 794.195393][T16886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.292471][T16883] netlink: 'syz.3.4011': attribute type 2 has an invalid length. [ 794.327598][T16883] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4011'. [ 795.134859][T16905] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 795.174827][T16905] syzkaller1: linktype set to 823 [ 795.327805][T16911] netlink: 'syz.0.4022': attribute type 4 has an invalid length. [ 795.584332][T16918] netlink: 'syz.0.4027': attribute type 11 has an invalid length. [ 795.626714][T16918] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4027'. [ 795.667521][T16922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.777723][T16918] netlink: 'syz.0.4027': attribute type 2 has an invalid length. [ 795.786103][T16918] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4027'. [ 797.180024][T16960] netlink: 'syz.3.4042': attribute type 10 has an invalid length. [ 797.200114][T16960] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4042'. [ 797.231316][T16960] device batadv_slave_1 entered promiscuous mode [ 797.251350][T16960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.276124][T16960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.431816][T16964] netlink: 'syz.1.4043': attribute type 11 has an invalid length. [ 797.445479][T16968] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4044'. [ 797.454687][T16964] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4043'. [ 797.464921][T16968] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4044'. [ 797.482776][T16968] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4044'. [ 797.492360][T16969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.558933][T16964] netlink: 'syz.1.4043': attribute type 2 has an invalid length. [ 797.599499][T16964] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4043'. [ 799.468868][T17012] netlink: 'syz.2.4059': attribute type 11 has an invalid length. [ 799.495533][T17012] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4059'. [ 799.617422][T17013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.157215][T17013] netlink: 'syz.2.4059': attribute type 2 has an invalid length. [ 800.175594][T17013] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4059'. [ 800.949674][T17019] netlink: 'syz.1.4061': attribute type 4 has an invalid length. [ 801.010372][T17017] netlink: 'syz.4.4060': attribute type 10 has an invalid length. [ 801.194458][T17017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.267697][T17017] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 801.396679][T17033] netlink: 'syz.3.4070': attribute type 21 has an invalid length. [ 801.480282][T17033] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4070'. [ 801.623944][T17034] netlink: 'syz.2.4063': attribute type 27 has an invalid length. [ 801.993796][T17034] bond0: (slave bond_slave_0): Releasing backup interface [ 802.046277][T17044] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4068'. [ 802.157805][T17044] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4068'. [ 802.187405][T17045] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4068'. [ 802.956626][T17061] netlink: 'syz.1.4074': attribute type 11 has an invalid length. [ 803.004810][T17063] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4076'. [ 803.029593][T17061] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4074'. [ 803.088612][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4076'. [ 803.121068][T17061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.184388][T17065] netlink: 'syz.1.4074': attribute type 2 has an invalid length. [ 803.220523][T17065] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4074'. [ 804.264682][T17089] netlink: 'syz.4.4082': attribute type 21 has an invalid length. [ 805.450430][T17111] __nla_validate_parse: 1 callbacks suppressed [ 805.450470][T17111] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4088'. [ 806.172690][T17125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4093'. [ 806.206908][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4093'. [ 806.579086][T17132] netlink: 'syz.0.4095': attribute type 11 has an invalid length. [ 806.737948][T17132] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4095'. [ 806.773394][T17132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.845914][T17142] netlink: 'syz.0.4095': attribute type 2 has an invalid length. [ 806.861214][T17142] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4095'. [ 806.928372][T17140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4100'. [ 807.603093][T17157] netlink: 'syz.4.4107': attribute type 29 has an invalid length. [ 807.649382][T17157] netlink: 'syz.4.4107': attribute type 29 has an invalid length. [ 807.693117][T17157] netlink: 'syz.4.4107': attribute type 29 has an invalid length. [ 808.061307][T17165] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4109'. [ 808.365355][T17179] netlink: 'syz.1.4112': attribute type 10 has an invalid length. [ 808.501558][T17179] team0: Port device wlan1 added [ 808.589915][T17181] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4114'. [ 808.651927][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.658365][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.726002][T17188] netlink: 'syz.2.4117': attribute type 3 has an invalid length. [ 808.765118][T17188] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4117'. [ 809.043253][T17196] netlink: 'syz.1.4118': attribute type 11 has an invalid length. [ 809.192592][T17196] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4118'. [ 809.287908][T17196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.967541][T17251] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4135'. [ 811.018612][T17252] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4135'. [ 811.744234][T17263] FAULT_INJECTION: forcing a failure. [ 811.744234][T17263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.846308][T17263] CPU: 1 PID: 17263 Comm: syz.0.4136 Not tainted syzkaller #0 [ 811.853849][T17263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 811.863945][T17263] Call Trace: [ 811.867301][T17263] [ 811.870270][T17263] dump_stack_lvl+0x188/0x24e [ 811.874996][T17263] ? show_regs_print_info+0x12/0x12 [ 811.880249][T17263] ? load_image+0x400/0x400 [ 811.884805][T17263] ? __lock_acquire+0x7d10/0x7d10 [ 811.889886][T17263] should_fail_ex+0x399/0x4d0 [ 811.894624][T17263] _copy_from_user+0x2c/0x170 [ 811.899355][T17263] __sys_bpf+0x2ea/0x780 [ 811.903678][T17263] ? bpf_link_show_fdinfo+0x380/0x380 [ 811.909123][T17263] ? lock_chain_count+0x20/0x20 [ 811.914070][T17263] __x64_sys_bpf+0x78/0x90 [ 811.918563][T17263] do_syscall_64+0x4c/0xa0 [ 811.923030][T17263] ? clear_bhb_loop+0x60/0xb0 [ 811.927757][T17263] ? clear_bhb_loop+0x60/0xb0 [ 811.932494][T17263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.938425][T17263] RIP: 0033:0x7f9b6e39aeb9 [ 811.942886][T17263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.962539][T17263] RSP: 002b:00007f9b6c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 811.970992][T17263] RAX: ffffffffffffffda RBX: 00007f9b6e616090 RCX: 00007f9b6e39aeb9 [ 811.979005][T17263] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 811.987048][T17263] RBP: 00007f9b6c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 811.995053][T17263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.003060][T17263] R13: 00007f9b6e616128 R14: 00007f9b6e616090 R15: 00007ffd70fd95a8 [ 812.011122][T17263] [ 813.365704][T17292] netlink: 'syz.1.4148': attribute type 10 has an invalid length. [ 813.620604][T17292] device veth0_vlan left promiscuous mode [ 813.661664][T17292] device veth0_vlan entered promiscuous mode [ 813.750963][T17292] team0: Device veth0_vlan failed to register rx_handler [ 813.973710][T17295] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4148'. [ 814.302515][T17314] FAULT_INJECTION: forcing a failure. [ 814.302515][T17314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.348590][T17314] CPU: 0 PID: 17314 Comm: syz.1.4154 Not tainted syzkaller #0 [ 814.356134][T17314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 814.366244][T17314] Call Trace: [ 814.369576][T17314] [ 814.372552][T17314] dump_stack_lvl+0x188/0x24e [ 814.377285][T17314] ? show_regs_print_info+0x12/0x12 [ 814.382536][T17314] ? load_image+0x400/0x400 [ 814.387110][T17314] ? __lock_acquire+0x7d10/0x7d10 [ 814.392192][T17314] should_fail_ex+0x399/0x4d0 [ 814.396911][T17314] _copy_from_user+0x2c/0x170 [ 814.401630][T17314] __sys_bpf+0x2ea/0x780 [ 814.405908][T17314] ? bpf_link_show_fdinfo+0x380/0x380 [ 814.411330][T17314] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 814.417523][T17314] __x64_sys_bpf+0x78/0x90 [ 814.421973][T17314] do_syscall_64+0x4c/0xa0 [ 814.426415][T17314] ? clear_bhb_loop+0x60/0xb0 [ 814.431115][T17314] ? clear_bhb_loop+0x60/0xb0 [ 814.435824][T17314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 814.441826][T17314] RIP: 0033:0x7fc3ab59aeb9 [ 814.446263][T17314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.465895][T17314] RSP: 002b:00007fc3ac4ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 814.474331][T17314] RAX: ffffffffffffffda RBX: 00007fc3ab815fa0 RCX: 00007fc3ab59aeb9 [ 814.482327][T17314] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 814.490322][T17314] RBP: 00007fc3ac4ae090 R08: 0000000000000000 R09: 0000000000000000 [ 814.498332][T17314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.506325][T17314] R13: 00007fc3ab816038 R14: 00007fc3ab815fa0 R15: 00007ffc01bb2628 [ 814.514342][T17314] [ 815.010062][T17329] netlink: 'syz.4.4158': attribute type 27 has an invalid length. [ 815.036984][T17329] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4158'. [ 815.159303][T17331] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.4159'. [ 815.367884][T17341] netlink: 'syz.3.4162': attribute type 10 has an invalid length. [ 815.375924][T17341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.493428][T17341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.574814][T17341] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 816.314533][T17368] netlink: 'syz.4.4170': attribute type 41 has an invalid length. [ 816.324939][T17368] netlink: 'syz.4.4170': attribute type 4 has an invalid length. [ 816.335575][T17368] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4170'. [ 816.494064][T17368] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 816.701463][T17379] netlink: 'syz.0.4174': attribute type 3 has an invalid length. [ 816.753416][T17379] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4174'. [ 817.282128][T17390] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4175'. [ 817.870172][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4181'. [ 818.164489][T17409] tipc: Started in network mode [ 818.187096][T17409] tipc: Node identity 9215a268, cluster identity 4711 [ 818.207166][T17409] tipc: Node number set to 2450891368 [ 819.320447][T17433] tipc: Started in network mode [ 819.325500][T17433] tipc: Node identity 9215a268, cluster identity 4711 [ 819.400808][T17433] tipc: Node number set to 2450891368 [ 819.551850][T17437] netlink: 'syz.0.4193': attribute type 11 has an invalid length. [ 819.579507][T17437] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4193'. [ 819.638063][T17437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.780194][T17435] netlink: 'syz.0.4193': attribute type 2 has an invalid length. [ 819.813249][T17435] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4193'. [ 821.116121][T17467] netlink: 'syz.4.4203': attribute type 39 has an invalid length. [ 821.213863][T17467] device veth0_macvtap left promiscuous mode [ 821.835841][T17485] netlink: 'syz.2.4209': attribute type 11 has an invalid length. [ 821.877035][T17485] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4209'. [ 821.992589][T17485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.608095][T17521] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4220'. [ 823.848048][T17531] netlink: 'syz.2.4223': attribute type 39 has an invalid length. [ 823.885533][T17531] device veth0_macvtap left promiscuous mode [ 824.370568][T17540] netlink: 'syz.1.4225': attribute type 11 has an invalid length. [ 824.396943][T17540] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4225'. [ 824.467679][T17540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.648937][T17539] netlink: 'syz.1.4225': attribute type 2 has an invalid length. [ 824.656750][T17539] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4225'. [ 824.695228][T17544] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4226'. [ 825.717385][T17555] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4230'. [ 825.889073][T17555] netlink: 'syz.4.4230': attribute type 1 has an invalid length. [ 825.979078][T17555] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.4230'. [ 826.999561][T17580] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4239'. [ 827.176538][T17585] netlink: 'syz.3.4242': attribute type 11 has an invalid length. [ 827.196897][T17585] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4242'. [ 827.224631][T17588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.335890][T17585] netlink: 'syz.3.4242': attribute type 2 has an invalid length. [ 827.382452][T17585] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4242'. [ 829.191983][T17628] netlink: 'syz.0.4257': attribute type 10 has an invalid length. [ 829.373604][T17633] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4258'. [ 829.762217][T17635] netlink: 'syz.3.4261': attribute type 3 has an invalid length. [ 829.794722][T17635] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4261'. [ 830.048619][T17644] delete_channel: no stack [ 834.706859][T17767] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4304'. [ 834.778622][T17770] netlink: 'syz.4.4305': attribute type 21 has an invalid length. [ 834.786578][T17770] netlink: 'syz.4.4305': attribute type 6 has an invalid length. [ 834.797256][T17770] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4305'. [ 834.877318][T17767] device aaaaaaaaaaaaaaa entered promiscuous mode [ 835.377572][T17784] syzkaller0: tun_chr_ioctl cmd 35092 [ 835.576326][T17792] FAULT_INJECTION: forcing a failure. [ 835.576326][T17792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.615956][T17790] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.4313'. [ 835.637859][T17792] CPU: 0 PID: 17792 Comm: syz.0.4315 Not tainted syzkaller #0 [ 835.645425][T17792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 835.655535][T17792] Call Trace: [ 835.658871][T17792] [ 835.661861][T17792] dump_stack_lvl+0x188/0x24e [ 835.666606][T17792] ? show_regs_print_info+0x12/0x12 [ 835.671874][T17792] ? load_image+0x400/0x400 [ 835.676458][T17792] ? __lock_acquire+0x7d10/0x7d10 [ 835.681572][T17792] should_fail_ex+0x399/0x4d0 [ 835.686334][T17792] _copy_from_user+0x2c/0x170 [ 835.691091][T17792] iovec_from_user+0x143/0x360 [ 835.695935][T17792] __import_iovec+0x6d/0x500 [ 835.697557][T17790] openvswitch: netlink: Flow actions attr not present in new flow. [ 835.700579][T17792] import_iovec+0x6f/0xa0 [ 835.700618][T17792] ___sys_sendmsg+0x252/0x360 [ 835.717662][T17792] ? __sys_sendmsg+0x290/0x290 [ 835.722542][T17792] ? __lock_acquire+0x7d10/0x7d10 [ 835.727681][T17792] __se_sys_sendmsg+0x1bb/0x2a0 [ 835.732625][T17792] ? __x64_sys_sendmsg+0x80/0x80 [ 835.737660][T17792] ? lockdep_hardirqs_on+0x94/0x140 [ 835.742918][T17792] do_syscall_64+0x4c/0xa0 [ 835.747392][T17792] ? clear_bhb_loop+0x60/0xb0 [ 835.752124][T17792] ? clear_bhb_loop+0x60/0xb0 [ 835.756875][T17792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.762814][T17792] RIP: 0033:0x7f9b6e39aeb9 [ 835.767264][T17792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.786927][T17792] RSP: 002b:00007f9b6f17d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.795399][T17792] RAX: ffffffffffffffda RBX: 00007f9b6e615fa0 RCX: 00007f9b6e39aeb9 [ 835.803420][T17792] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 835.811437][T17792] RBP: 00007f9b6f17d090 R08: 0000000000000000 R09: 0000000000000000 [ 835.819453][T17792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.827482][T17792] R13: 00007f9b6e616038 R14: 00007f9b6e615fa0 R15: 00007ffd70fd95a8 [ 835.835544][T17792] [ 836.904235][T17798] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.4318'. [ 836.926997][T17802] netlink: 'syz.3.4318': attribute type 21 has an invalid length. [ 836.939119][T17802] netlink: 'syz.3.4318': attribute type 6 has an invalid length. [ 836.947383][T17802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4318'. [ 837.715025][T17830] netlink: 'syz.4.4326': attribute type 11 has an invalid length. [ 837.736186][T17830] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4326'. [ 837.765852][T17836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.831276][T17830] netlink: 'syz.4.4326': attribute type 2 has an invalid length. [ 837.934130][T17830] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4326'. [ 840.074342][T17872] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4341'. [ 840.150849][T17872] device aaaaaaaaaaaaaaa entered promiscuous mode [ 840.514086][T17878] tipc: Started in network mode [ 840.533978][T17878] tipc: Node identity 9215a268, cluster identity 4711 [ 840.591535][T17882] netlink: 'syz.3.4345': attribute type 2 has an invalid length. [ 840.610436][T17878] tipc: Node number set to 2450891368 [ 840.627300][T17882] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4345'. [ 840.638430][T17880] netlink: 'syz.3.4345': attribute type 11 has an invalid length. [ 840.709838][T17880] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4345'. [ 840.777947][T17880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.198506][T17932] netlink: 'syz.2.4362': attribute type 11 has an invalid length. [ 843.206428][T17932] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4362'. [ 843.266483][T17936] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.4364'. [ 843.273646][T17938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.299321][T17940] netlink: 'syz.4.4366': attribute type 25 has an invalid length. [ 843.347339][T17940] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.4366'. [ 843.417595][T17932] netlink: 'syz.2.4362': attribute type 2 has an invalid length. [ 843.426286][T17932] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4362'. [ 844.408234][T17970] tipc: Started in network mode [ 844.413472][T17970] tipc: Node identity 9215a268, cluster identity 4711 [ 844.469514][T17970] tipc: Node number set to 2450891368 [ 845.613212][T17992] netlink: 'syz.3.4383': attribute type 11 has an invalid length. [ 845.645662][T17992] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4383'. [ 845.678263][T17992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.745986][T17992] netlink: 'syz.3.4383': attribute type 2 has an invalid length. [ 845.830666][T17992] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4383'. [ 846.429145][T18014] FAULT_INJECTION: forcing a failure. [ 846.429145][T18014] name failslab, interval 1, probability 0, space 0, times 0 [ 846.443958][T18014] CPU: 0 PID: 18014 Comm: syz.1.4390 Not tainted syzkaller #0 [ 846.451505][T18014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 846.461609][T18014] Call Trace: [ 846.464941][T18014] [ 846.467915][T18014] dump_stack_lvl+0x188/0x24e [ 846.472656][T18014] ? show_regs_print_info+0x12/0x12 [ 846.477913][T18014] ? load_image+0x400/0x400 [ 846.482470][T18014] ? __might_sleep+0xd0/0xd0 [ 846.487112][T18014] ? __lock_acquire+0x7d10/0x7d10 [ 846.492203][T18014] should_fail_ex+0x399/0x4d0 [ 846.496950][T18014] should_failslab+0x5/0x20 [ 846.501508][T18014] slab_pre_alloc_hook+0x59/0x310 [ 846.506578][T18014] ? perf_trace_lock+0xf8/0x390 [ 846.511480][T18014] ? dev_ethtool+0x125/0x12f0 [ 846.516213][T18014] __kmem_cache_alloc_node+0x4f/0x260 [ 846.521650][T18014] ? dev_ethtool+0x125/0x12f0 [ 846.526391][T18014] kmalloc_trace+0x26/0xe0 [ 846.530875][T18014] dev_ethtool+0x125/0x12f0 [ 846.535442][T18014] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 846.541740][T18014] ? __lock_acquire+0x7d10/0x7d10 [ 846.546842][T18014] ? __kmem_cache_free+0xb6/0x1f0 [ 846.551914][T18014] ? full_name_hash+0xac/0xe0 [ 846.556751][T18014] ? dev_load+0x1d/0x1e0 [ 846.561039][T18014] ? dev_load+0x1d/0x1e0 [ 846.565319][T18014] dev_ioctl+0x474/0xe80 [ 846.569604][T18014] sock_do_ioctl+0x245/0x320 [ 846.574224][T18014] ? sock_show_fdinfo+0xb0/0xb0 [ 846.579635][T18014] sock_ioctl+0x4d2/0x710 [ 846.584007][T18014] ? sock_poll+0x410/0x410 [ 846.588470][T18014] ? bpf_lsm_file_ioctl+0x5/0x10 [ 846.593447][T18014] ? security_file_ioctl+0x7c/0xa0 [ 846.598604][T18014] ? sock_poll+0x410/0x410 [ 846.603061][T18014] __se_sys_ioctl+0xfa/0x170 [ 846.607688][T18014] do_syscall_64+0x4c/0xa0 [ 846.612142][T18014] ? clear_bhb_loop+0x60/0xb0 [ 846.616872][T18014] ? clear_bhb_loop+0x60/0xb0 [ 846.621595][T18014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.627523][T18014] RIP: 0033:0x7fc3ab59aeb9 [ 846.631973][T18014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.651694][T18014] RSP: 002b:00007fc3ac4ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.660152][T18014] RAX: ffffffffffffffda RBX: 00007fc3ab815fa0 RCX: 00007fc3ab59aeb9 [ 846.668160][T18014] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 846.676156][T18014] RBP: 00007fc3ac4ae090 R08: 0000000000000000 R09: 0000000000000000 [ 846.684156][T18014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.692152][T18014] R13: 00007fc3ab816038 R14: 00007fc3ab815fa0 R15: 00007ffc01bb2628 [ 846.700169][T18014] [ 847.014589][T18021] netlink: 'syz.4.4391': attribute type 10 has an invalid length. [ 848.953526][T18066] netlink: 'syz.2.4406': attribute type 11 has an invalid length. [ 848.969772][T18066] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4406'. [ 849.040905][T18071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.086863][T18064] delete_channel: no stack [ 849.198108][T18073] device bond_slave_1 entered promiscuous mode [ 849.405581][T18071] netlink: 'syz.2.4406': attribute type 2 has an invalid length. [ 849.415824][T18071] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4406'. [ 849.768630][T18084] netlink: 'syz.4.4414': attribute type 21 has an invalid length. [ 849.786971][T18084] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4414'. [ 850.758166][T18109] netlink: 'syz.1.4423': attribute type 25 has an invalid length. [ 850.886071][T18111] netlink: 'syz.3.4425': attribute type 11 has an invalid length. [ 850.960803][T18111] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4425'. [ 851.077648][T18111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.229805][T18111] netlink: 'syz.3.4425': attribute type 2 has an invalid length. [ 851.382335][T18112] delete_channel: no stack [ 851.388224][T18111] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4425'. [ 852.228331][T18132] netlink: 'syz.0.4429': attribute type 21 has an invalid length. [ 852.563570][T18140] netlink: 'syz.2.4433': attribute type 10 has an invalid length. [ 852.625921][T18140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4433'. [ 852.767066][T18140] bridge0: port 4(ipvlan1) entered blocking state [ 852.889451][T18140] bridge0: port 4(ipvlan1) entered disabled state [ 853.070423][T18140] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 853.217201][T18144] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4433'. [ 854.536082][T18167] netlink: 'syz.2.4442': attribute type 11 has an invalid length. [ 854.635448][T18167] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4442'. [ 854.711100][T18167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.867203][T18176] netlink: 'syz.2.4442': attribute type 2 has an invalid length. [ 854.875026][T18176] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4442'. [ 856.577681][T18203] netlink: 'syz.3.4451': attribute type 25 has an invalid length. [ 857.549644][T18229] netlink: 'syz.3.4457': attribute type 11 has an invalid length. [ 857.576939][T18229] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4457'. [ 857.600535][T18235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 857.740860][T18229] netlink: 'syz.3.4457': attribute type 2 has an invalid length. [ 857.805867][T18229] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4457'. [ 858.207379][T18247] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4464'. [ 858.893681][T18260] netlink: 'syz.2.4468': attribute type 3 has an invalid length. [ 858.929014][T18260] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4468'. [ 859.362394][T18269] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4471'. [ 859.408881][T18275] netlink: 'syz.2.4472': attribute type 3 has an invalid length. [ 859.416684][T18275] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4472'. [ 859.678765][T18280] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4473'. [ 860.163846][T18292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4476'. [ 860.222935][T18289] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.4479'. [ 860.244096][T18289] openvswitch: netlink: Key type 386 is out of range max 32 [ 860.444236][T18292] bond0: (slave batadv0): Releasing backup interface [ 861.085014][T18316] netlink: 'syz.1.4483': attribute type 3 has an invalid length. [ 861.120684][T18316] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4483'. [ 861.174142][T18318] FAULT_INJECTION: forcing a failure. [ 861.174142][T18318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.271576][T18318] CPU: 0 PID: 18318 Comm: syz.2.4484 Not tainted syzkaller #0 [ 861.279145][T18318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 861.289259][T18318] Call Trace: [ 861.292628][T18318] [ 861.295616][T18318] dump_stack_lvl+0x188/0x24e [ 861.300371][T18318] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 861.306584][T18318] ? show_regs_print_info+0x12/0x12 [ 861.311875][T18318] ? load_image+0x400/0x400 [ 861.316477][T18318] should_fail_ex+0x399/0x4d0 [ 861.321229][T18318] _copy_from_user+0x2c/0x170 [ 861.325962][T18318] wext_handle_ioctl+0xc4/0x1d0 [ 861.330875][T18318] ? call_commit_handler+0xf0/0xf0 [ 861.336078][T18318] sock_ioctl+0x143/0x710 [ 861.340479][T18318] ? sock_poll+0x410/0x410 [ 861.345000][T18318] ? bpf_lsm_file_ioctl+0x5/0x10 [ 861.350000][T18318] ? security_file_ioctl+0x7c/0xa0 [ 861.355173][T18318] ? sock_poll+0x410/0x410 [ 861.359671][T18318] __se_sys_ioctl+0xfa/0x170 [ 861.364351][T18318] do_syscall_64+0x4c/0xa0 [ 861.368836][T18318] ? clear_bhb_loop+0x60/0xb0 [ 861.373560][T18318] ? clear_bhb_loop+0x60/0xb0 [ 861.378309][T18318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 861.384275][T18318] RIP: 0033:0x7f87bc79aeb9 [ 861.388747][T18318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.408422][T18318] RSP: 002b:00007f87ba9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.416907][T18318] RAX: ffffffffffffffda RBX: 00007f87bca15fa0 RCX: 00007f87bc79aeb9 [ 861.424930][T18318] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 000000000000000e [ 861.433088][T18318] RBP: 00007f87ba9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 861.441106][T18318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.449129][T18318] R13: 00007f87bca16038 R14: 00007f87bca15fa0 R15: 00007ffeda886888 [ 861.457172][T18318] [ 864.925897][T18340] netlink: 'syz.1.4492': attribute type 21 has an invalid length. [ 865.117943][T18359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4497'. [ 865.189401][T18359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.208595][T18367] netlink: 'syz.3.4500': attribute type 3 has an invalid length. [ 865.223099][T18359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.235944][T18367] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4500'. [ 865.272709][T18359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.294144][T18359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.767567][T18426] netlink: 'syz.2.4520': attribute type 15 has an invalid length. [ 867.827024][T18426] netlink: 'syz.2.4520': attribute type 7 has an invalid length. [ 868.552360][T18446] netlink: 'syz.4.4526': attribute type 2 has an invalid length. [ 868.656599][T18446] device .d entered promiscuous mode [ 870.092437][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.098898][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.136003][T18474] netlink: 'syz.3.4536': attribute type 15 has an invalid length. [ 870.175727][T18474] netlink: 'syz.3.4536': attribute type 7 has an invalid length. [ 871.177979][T18492] netlink: 'syz.4.4540': attribute type 2 has an invalid length. [ 872.244272][T18514] netlink: 'syz.0.4550': attribute type 15 has an invalid length. [ 872.325164][T18514] netlink: 'syz.0.4550': attribute type 7 has an invalid length. [ 874.425525][T18576] netlink: 'syz.0.4575': attribute type 10 has an invalid length. [ 874.450431][T18578] netlink: 'syz.4.4574': attribute type 12 has an invalid length. [ 874.467964][T18578] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4574'. [ 874.890284][T18589] netlink: 'syz.2.4578': attribute type 1 has an invalid length. [ 874.909583][T18589] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4578'. [ 875.598932][T13089] Bluetooth: Frame is too long (len 13, expected len 4) [ 876.775706][T18651] netlink: 'syz.2.4602': attribute type 21 has an invalid length. [ 876.810213][T18654] netlink: 'syz.4.4604': attribute type 4 has an invalid length. [ 876.852190][T18654] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4604'. [ 876.901447][T18654] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 876.977102][T18655] netlink: 'syz.3.4603': attribute type 12 has an invalid length. [ 876.985217][T18655] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4603'. [ 877.361030][T18669] FAULT_INJECTION: forcing a failure. [ 877.361030][T18669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.468280][T18669] CPU: 0 PID: 18669 Comm: syz.2.4609 Not tainted syzkaller #0 [ 877.475851][T18669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 877.485953][T18669] Call Trace: [ 877.489266][T18669] [ 877.492236][T18669] dump_stack_lvl+0x188/0x24e [ 877.496969][T18669] ? show_regs_print_info+0x12/0x12 [ 877.502243][T18669] ? load_image+0x400/0x400 [ 877.506893][T18669] ? __lock_acquire+0x7d10/0x7d10 [ 877.511981][T18669] should_fail_ex+0x399/0x4d0 [ 877.516728][T18669] _copy_from_user+0x2c/0x170 [ 877.521470][T18669] __sys_bpf+0x2ea/0x780 [ 877.525768][T18669] ? bpf_link_show_fdinfo+0x380/0x380 [ 877.531217][T18669] ? lock_chain_count+0x20/0x20 [ 877.536151][T18669] __x64_sys_bpf+0x78/0x90 [ 877.540662][T18669] do_syscall_64+0x4c/0xa0 [ 877.545167][T18669] ? clear_bhb_loop+0x60/0xb0 [ 877.549912][T18669] ? clear_bhb_loop+0x60/0xb0 [ 877.554643][T18669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 877.560583][T18669] RIP: 0033:0x7f87bc79aeb9 [ 877.565046][T18669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.584702][T18669] RSP: 002b:00007f87ba9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 877.593174][T18669] RAX: ffffffffffffffda RBX: 00007f87bca15fa0 RCX: 00007f87bc79aeb9 [ 877.601200][T18669] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 877.609223][T18669] RBP: 00007f87ba9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 877.617330][T18669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.625355][T18669] R13: 00007f87bca16038 R14: 00007f87bca15fa0 R15: 00007ffeda886888 [ 877.633391][T18669] [ 878.631597][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4614'. [ 878.642051][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4614'. [ 878.662461][T18689] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4615'. [ 878.714278][T18689] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4615'. [ 878.893404][T18700] netlink: 'syz.3.4619': attribute type 29 has an invalid length. [ 878.914695][T18700] netlink: 'syz.3.4619': attribute type 29 has an invalid length. [ 879.215414][T18706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4615'. [ 881.321992][T18725] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4625'. [ 881.556020][T18743] netlink: 'syz.2.4631': attribute type 10 has an invalid length. [ 881.576120][T18743] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4631'. [ 883.816627][T18798] delete_channel: no stack [ 883.822617][T18798] delete_channel: no stack [ 885.079506][T18817] netlink: 'syz.0.4651': attribute type 12 has an invalid length. [ 885.097974][T18817] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4651'. [ 885.800993][T18832] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4657'. [ 885.873622][T18832] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 886.044965][T18837] netlink: 'syz.1.4657': attribute type 11 has an invalid length. [ 886.073998][T18837] netlink: 196676 bytes leftover after parsing attributes in process `syz.1.4657'. [ 886.112411][T18837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.193024][T18880] netlink: 'syz.0.4670': attribute type 11 has an invalid length. [ 888.222083][T18880] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4670'. [ 888.388121][T18880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.607315][T18884] netlink: 'syz.0.4670': attribute type 2 has an invalid length. [ 888.674407][T18884] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4670'. [ 894.217245][T18990] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4713'. [ 896.141167][T19030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4728'. [ 896.172533][T19028] netlink: 'syz.4.4726': attribute type 3 has an invalid length. [ 896.193414][T19028] netlink: 'syz.4.4726': attribute type 1 has an invalid length. [ 896.218505][T19028] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.4726'. [ 896.322327][T19033] netlink: 'syz.2.4727': attribute type 11 has an invalid length. [ 896.366014][T19033] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4727'. [ 896.399177][T19040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.470422][T19033] netlink: 'syz.2.4727': attribute type 2 has an invalid length. [ 896.517095][T19033] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4727'. [ 896.554067][T19042] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.4732'. [ 897.936333][T19079] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4743'. [ 898.224878][T19089] netlink: 'syz.1.4747': attribute type 11 has an invalid length. [ 898.271319][T19097] netlink: 'syz.1.4747': attribute type 2 has an invalid length. [ 898.279642][T19089] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4747'. [ 898.315043][T19097] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4747'. [ 898.339636][T19089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.022065][T19141] netlink: 'syz.1.4766': attribute type 11 has an invalid length. [ 900.060626][T19141] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4766'. [ 900.114448][T19145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.174337][T19141] netlink: 'syz.1.4766': attribute type 2 has an invalid length. [ 900.352358][T19141] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4766'. [ 901.692717][T19182] netlink: 'syz.4.4780': attribute type 11 has an invalid length. [ 901.714050][T19182] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4780'. [ 901.779569][T19182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.864711][T19182] netlink: 'syz.4.4780': attribute type 2 has an invalid length. [ 901.897111][T19182] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4780'. [ 903.087239][T19218] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4793'. [ 903.117287][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.165950][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.196944][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.227826][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.248383][T19218] device batadv_slave_1 entered promiscuous mode [ 903.359465][T19229] netlink: 'syz.3.4797': attribute type 11 has an invalid length. [ 903.407079][T19229] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4797'. [ 903.469871][T19229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.538918][T19229] netlink: 'syz.3.4797': attribute type 2 has an invalid length. [ 903.637100][T19229] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4797'. [ 905.686301][T19258] tipc: Started in network mode [ 905.708075][T19258] tipc: Node identity 9215a268, cluster identity 4711 [ 905.714947][T19258] tipc: Node number set to 2450891368 [ 907.001109][T19286] netlink: 'syz.3.4816': attribute type 11 has an invalid length. [ 907.019179][T13089] Bluetooth: hci2: Malformed LE Event: 0x0d [ 907.066127][T19286] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4816'. [ 907.285351][T19286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.314852][T19294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4818'. [ 907.384780][T19294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4818'. [ 907.421668][T19294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4818'. [ 907.442183][T19294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4818'. [ 907.798634][T19304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4821'. [ 908.264969][T19310] netlink: 12415 bytes leftover after parsing attributes in process `syz.3.4822'. [ 910.497220][T19339] pimreg: tun_chr_ioctl cmd 2147767520 [ 910.606588][T19340] netlink: 'syz.1.4832': attribute type 11 has an invalid length. [ 910.692032][T19340] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4832'. [ 910.778547][T19340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.952002][T19341] netlink: 'syz.1.4832': attribute type 2 has an invalid length. [ 910.969319][T19349] FAULT_INJECTION: forcing a failure. [ 910.969319][T19349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.007621][T19341] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4832'. [ 911.042393][T19349] CPU: 0 PID: 19349 Comm: syz.4.4834 Not tainted syzkaller #0 [ 911.049939][T19349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 911.060042][T19349] Call Trace: [ 911.063358][T19349] [ 911.066332][T19349] dump_stack_lvl+0x188/0x24e [ 911.071077][T19349] ? show_regs_print_info+0x12/0x12 [ 911.076340][T19349] ? load_image+0x400/0x400 [ 911.080896][T19349] ? __lock_acquire+0x7d10/0x7d10 [ 911.085982][T19349] ? trace_call_bpf+0x5d6/0x6b0 [ 911.090908][T19349] should_fail_ex+0x399/0x4d0 [ 911.095654][T19349] _copy_from_user+0x2c/0x170 [ 911.100388][T19349] __sys_bpf+0x2ea/0x780 [ 911.104692][T19349] ? bpf_link_show_fdinfo+0x380/0x380 [ 911.110139][T19349] ? lock_chain_count+0x20/0x20 [ 911.115053][T19349] __x64_sys_bpf+0x78/0x90 [ 911.119522][T19349] do_syscall_64+0x4c/0xa0 [ 911.124002][T19349] ? clear_bhb_loop+0x60/0xb0 [ 911.128769][T19349] ? clear_bhb_loop+0x60/0xb0 [ 911.133511][T19349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.139477][T19349] RIP: 0033:0x7f6ccbf9aeb9 [ 911.143945][T19349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.163611][T19349] RSP: 002b:00007f6cccdc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 911.172079][T19349] RAX: ffffffffffffffda RBX: 00007f6ccc215fa0 RCX: 00007f6ccbf9aeb9 [ 911.180099][T19349] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 911.188104][T19349] RBP: 00007f6cccdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 911.196148][T19349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.204190][T19349] R13: 00007f6ccc216038 R14: 00007f6ccc215fa0 R15: 00007ffe9cfc9a38 [ 911.212219][T19349] [ 911.396901][T19352] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4835'. [ 913.771689][T19386] device syzkaller0 entered promiscuous mode [ 913.818927][T19386] netlink: 'syz.2.4843': attribute type 27 has an invalid length. [ 913.836301][T19386] C: renamed from team_slave_0 [ 914.079109][T19396] FAULT_INJECTION: forcing a failure. [ 914.079109][T19396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.130152][T19396] CPU: 0 PID: 19396 Comm: syz.0.4847 Not tainted syzkaller #0 [ 914.137698][T19396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 914.147906][T19396] Call Trace: [ 914.151237][T19396] [ 914.154304][T19396] dump_stack_lvl+0x188/0x24e [ 914.159042][T19396] ? show_regs_print_info+0x12/0x12 [ 914.164312][T19396] ? load_image+0x400/0x400 [ 914.168864][T19396] ? __lock_acquire+0x7d10/0x7d10 [ 914.173974][T19396] should_fail_ex+0x399/0x4d0 [ 914.178736][T19396] _copy_from_user+0x2c/0x170 [ 914.183640][T19396] ___sys_sendmsg+0x1c3/0x360 [ 914.188554][T19396] ? __sys_sendmsg+0x290/0x290 [ 914.193398][T19396] ? __lock_acquire+0x7d10/0x7d10 [ 914.198523][T19396] __se_sys_sendmsg+0x1bb/0x2a0 [ 914.201581][T19400] __nla_validate_parse: 2 callbacks suppressed [ 914.201621][T19400] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4850'. [ 914.203431][T19396] ? __x64_sys_sendmsg+0x80/0x80 [ 914.223634][T19396] ? lockdep_hardirqs_on+0x94/0x140 [ 914.228880][T19396] do_syscall_64+0x4c/0xa0 [ 914.233347][T19396] ? clear_bhb_loop+0x60/0xb0 [ 914.238074][T19396] ? clear_bhb_loop+0x60/0xb0 [ 914.242808][T19396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 914.248745][T19396] RIP: 0033:0x7f9b6e39aeb9 [ 914.253198][T19396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.272839][T19396] RSP: 002b:00007f9b6c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.281298][T19396] RAX: ffffffffffffffda RBX: 00007f9b6e616090 RCX: 00007f9b6e39aeb9 [ 914.289304][T19396] RDX: 00000000000009fc RSI: 0000200000001180 RDI: 0000000000000003 [ 914.297309][T19396] RBP: 00007f9b6c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 914.305313][T19396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.313319][T19396] R13: 00007f9b6e616128 R14: 00007f9b6e616090 R15: 00007ffd70fd95a8 [ 914.321353][T19396] [ 914.630373][T19415] netlink: 'syz.2.4855': attribute type 21 has an invalid length. [ 914.670838][T19415] netlink: 15647 bytes leftover after parsing attributes in process `syz.2.4855'. [ 915.451512][T19431] FAULT_INJECTION: forcing a failure. [ 915.451512][T19431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.525968][T19431] CPU: 0 PID: 19431 Comm: syz.4.4861 Not tainted syzkaller #0 [ 915.533512][T19431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 915.544338][T19431] Call Trace: [ 915.547657][T19431] [ 915.550627][T19431] dump_stack_lvl+0x188/0x24e [ 915.555375][T19431] ? show_regs_print_info+0x12/0x12 [ 915.560631][T19431] ? load_image+0x400/0x400 [ 915.565186][T19431] ? __might_fault+0xa6/0x120 [ 915.569919][T19431] should_fail_ex+0x399/0x4d0 [ 915.574655][T19431] copyout+0x1b/0x120 [ 915.578699][T19431] _copy_to_iter+0x48b/0x1040 [ 915.583439][T19431] ? iov_iter_init+0x1f0/0x1f0 [ 915.588258][T19431] ? __virt_addr_valid+0x188/0x540 [ 915.593428][T19431] ? __virt_addr_valid+0x465/0x540 [ 915.598592][T19431] ? __phys_addr_symbol+0x2b/0x70 [ 915.603667][T19431] ? __check_object_size+0x500/0xa40 [ 915.609006][T19431] __skb_datagram_iter+0xde/0x740 [ 915.614080][T19431] ? skb_copy_datagram_iter+0x290/0x290 [ 915.619688][T19431] skb_copy_datagram_iter+0xd7/0x290 [ 915.625028][T19431] netlink_recvmsg+0x2d0/0xe00 [ 915.629847][T19431] ? netlink_sendmsg+0xbd0/0xbd0 [ 915.634821][T19431] ? aa_af_perm+0x340/0x340 [ 915.639378][T19431] ? __might_fault+0xa6/0x120 [ 915.644081][T19431] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 915.649391][T19431] ? security_socket_recvmsg+0x85/0xb0 [ 915.654881][T19431] ? netlink_sendmsg+0xbd0/0xbd0 [ 915.659851][T19431] ____sys_recvmsg+0x2cb/0x5e0 [ 915.664650][T19431] ? __sys_recvmsg_sock+0x40/0x40 [ 915.669712][T19431] ? import_iovec+0x6f/0xa0 [ 915.674239][T19431] ___sys_recvmsg+0x212/0x590 [ 915.678955][T19431] ? __sys_recvmsg+0x290/0x290 [ 915.683753][T19431] ? trace_call_bpf+0xbf/0x6b0 [ 915.688549][T19431] ? trace_call_bpf+0x5d6/0x6b0 [ 915.693440][T19431] ? __fget_files+0x43d/0x4b0 [ 915.698160][T19431] __x64_sys_recvmsg+0x205/0x2e0 [ 915.703146][T19431] ? perf_trace_preemptirq_template+0x268/0x320 [ 915.709420][T19431] ? ___sys_recvmsg+0x590/0x590 [ 915.714317][T19431] ? lockdep_hardirqs_on+0x94/0x140 [ 915.719539][T19431] do_syscall_64+0x4c/0xa0 [ 915.723982][T19431] ? clear_bhb_loop+0x60/0xb0 [ 915.728690][T19431] ? clear_bhb_loop+0x60/0xb0 [ 915.733396][T19431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.739313][T19431] RIP: 0033:0x7f6ccbf9aeb9 [ 915.743749][T19431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.763375][T19431] RSP: 002b:00007f6cccdc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 915.771836][T19431] RAX: ffffffffffffffda RBX: 00007f6ccc215fa0 RCX: 00007f6ccbf9aeb9 [ 915.779831][T19431] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 915.787828][T19431] RBP: 00007f6cccdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 915.795817][T19431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.803814][T19431] R13: 00007f6ccc216038 R14: 00007f6ccc215fa0 R15: 00007ffe9cfc9a38 [ 915.811815][T19431] [ 915.827514][T19435] netlink: 'syz.1.4864': attribute type 39 has an invalid length. [ 917.173220][T19458] netlink: 'syz.0.4871': attribute type 3 has an invalid length. [ 917.201908][T19458] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4871'. [ 917.675585][T19470] FAULT_INJECTION: forcing a failure. [ 917.675585][T19470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.718228][T19470] CPU: 1 PID: 19470 Comm: syz.0.4876 Not tainted syzkaller #0 [ 917.725764][T19470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 917.735865][T19470] Call Trace: [ 917.739197][T19470] [ 917.742168][T19470] dump_stack_lvl+0x188/0x24e [ 917.746903][T19470] ? show_regs_print_info+0x12/0x12 [ 917.752156][T19470] ? load_image+0x400/0x400 [ 917.756703][T19470] ? __lock_acquire+0x7d10/0x7d10 [ 917.761786][T19470] ? snprintf+0xe5/0x140 [ 917.766079][T19470] should_fail_ex+0x399/0x4d0 [ 917.770824][T19470] _copy_to_user+0x2c/0x130 [ 917.775379][T19470] simple_read_from_buffer+0xe3/0x150 [ 917.780825][T19470] proc_fail_nth_read+0x1a6/0x220 [ 917.785896][T19470] ? proc_fault_inject_write+0x310/0x310 [ 917.791574][T19470] ? fsnotify_perm+0x248/0x550 [ 917.796382][T19470] ? proc_fault_inject_write+0x310/0x310 [ 917.802058][T19470] vfs_read+0x2de/0xa00 [ 917.806301][T19470] ? kernel_read+0x1e0/0x1e0 [ 917.810956][T19470] ? __fget_files+0x28/0x4b0 [ 917.815641][T19470] ? __fget_files+0x28/0x4b0 [ 917.820281][T19470] ? __fget_files+0x43d/0x4b0 [ 917.825011][T19470] ? __fdget_pos+0x2ae/0x360 [ 917.829645][T19470] ? ksys_read+0x71/0x250 [ 917.834026][T19470] ksys_read+0x14c/0x250 [ 917.838321][T19470] ? vfs_write+0xa30/0xa30 [ 917.842798][T19470] ? trace_sys_enter+0x22/0x80 [ 917.847619][T19470] do_syscall_64+0x4c/0xa0 [ 917.852090][T19470] ? clear_bhb_loop+0x60/0xb0 [ 917.856822][T19470] ? clear_bhb_loop+0x60/0xb0 [ 917.861552][T19470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 917.867507][T19470] RIP: 0033:0x7f9b6e35b78e [ 917.871964][T19470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 917.891617][T19470] RSP: 002b:00007f9b6f17cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 917.900091][T19470] RAX: ffffffffffffffda RBX: 00007f9b6f17d6c0 RCX: 00007f9b6e35b78e [ 917.908098][T19470] RDX: 000000000000000f RSI: 00007f9b6f17d0a0 RDI: 0000000000000005 [ 917.916109][T19470] RBP: 00007f9b6f17d090 R08: 0000000000000000 R09: 0000000000000000 [ 917.924118][T19470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.932130][T19470] R13: 00007f9b6e616038 R14: 00007f9b6e615fa0 R15: 00007ffd70fd95a8 [ 917.940159][T19470] [ 919.260664][T19504] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4885'. [ 920.928593][T19527] netlink: 'syz.3.4894': attribute type 10 has an invalid length. [ 921.145856][T13089] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 921.153920][T13089] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 921.165836][T13089] CPU: 1 PID: 13089 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 921.173535][T13089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 921.183653][T13089] Workqueue: hci2 hci_rx_work [ 921.188406][T13089] Call Trace: [ 921.191730][T13089] [ 921.194726][T13089] dump_stack_lvl+0x188/0x24e [ 921.199483][T13089] ? show_regs_print_info+0x12/0x12 [ 921.204749][T13089] ? load_image+0x400/0x400 [ 921.209335][T13089] sysfs_create_dir_ns+0x26a/0x290 [ 921.214509][T13089] ? sysfs_warn_dup+0xa0/0xa0 [ 921.219228][T13089] ? do_raw_spin_unlock+0x11d/0x230 [ 921.224458][T13089] kobject_add_internal+0x61c/0xcc0 [ 921.229695][T13089] kobject_add+0x160/0x230 [ 921.234167][T13089] ? kobject_init+0x1d0/0x1d0 [ 921.238887][T13089] ? klist_children_get+0x50/0x50 [ 921.243947][T13089] ? get_device_parent+0x121/0x3f0 [ 921.249174][T13089] device_add+0x483/0xfb0 [ 921.253587][T13089] ? kmem_cache_free+0xf7/0x290 [ 921.258519][T13089] hci_conn_add_sysfs+0xd1/0x1e0 [ 921.263537][T13089] le_conn_complete_evt+0x105f/0x1670 [ 921.268984][T13089] ? le_conn_complete_evt+0xe6/0x1670 [ 921.274447][T13089] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 921.280762][T13089] ? bt_info+0x180/0x180 [ 921.285092][T13089] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 921.290810][T13089] ? skb_pull_data+0xf7/0x200 [ 921.295619][T13089] hci_le_enh_conn_complete_evt+0x185/0x460 [ 921.301599][T13089] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 921.308098][T13089] ? hci_remote_host_features_evt+0x270/0x270 [ 921.314248][T13089] hci_event_packet+0x7b6/0x1280 [ 921.319287][T13089] ? bis_list+0x280/0x280 [ 921.323710][T13089] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 921.329679][T13089] ? kcov_remote_start+0x4c7/0x7e0 [ 921.334863][T13089] ? bt_warn+0x30/0x180 [ 921.339089][T13089] ? hci_send_to_monitor+0x9c/0x4a0 [ 921.344354][T13089] hci_rx_work+0x3eb/0xd40 [ 921.348847][T13089] ? _raw_spin_unlock+0x40/0x40 [ 921.353776][T13089] ? process_one_work+0x7b0/0x1160 [ 921.358941][T13089] process_one_work+0x8a2/0x1160 [ 921.363969][T13089] ? worker_detach_from_pool+0x240/0x240 [ 921.369671][T13089] ? _raw_spin_lock_irq+0xb7/0xf0 [ 921.374785][T13089] ? _raw_spin_lock_irqsave+0x100/0x100 [ 921.380393][T13089] ? kthread_data+0x4b/0xc0 [ 921.384983][T13089] worker_thread+0xaa2/0x1270 [ 921.389743][T13089] ? __kthread_parkme+0x162/0x1c0 [ 921.394858][T13089] kthread+0x29d/0x330 [ 921.399142][T13089] ? worker_clr_flags+0x1a0/0x1a0 [ 921.404236][T13089] ? kthread_blkcg+0xd0/0xd0 [ 921.408941][T13089] ret_from_fork+0x1f/0x30 [ 921.413451][T13089] [ 921.421480][T13089] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 921.434850][T13089] Bluetooth: hci2: failed to register connection device [ 921.922180][T19527] bond0: (slave bond_slave_0): Releasing backup interface [ 922.142788][T19544] netlink: 'syz.4.4897': attribute type 10 has an invalid length. [ 922.232478][T19544] bond0: (slave bond_slave_0): Releasing backup interface [ 922.772839][T19556] netlink: 'syz.0.4903': attribute type 2 has an invalid length. [ 922.833790][T19556] netlink: 185076 bytes leftover after parsing attributes in process `syz.0.4903'. [ 923.453747][T13089] Bluetooth: hci2: command 0x2016 tx timeout [ 924.195449][T19575] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.4908'. [ 924.242724][T19579] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4910'. [ 924.606134][T19593] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4915'. [ 924.673446][T19593] netlink: 'syz.4.4915': attribute type 1 has an invalid length. [ 925.616661][T19609] netlink: 'syz.1.4919': attribute type 3 has an invalid length. [ 925.658558][T19609] netlink: 'syz.1.4919': attribute type 4 has an invalid length. [ 925.666366][T19609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4919'. [ 925.996935][T19616] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4922'. [ 926.366434][T19628] netlink: 'syz.4.4927': attribute type 2 has an invalid length. [ 926.396348][T19628] netlink: 'syz.4.4927': attribute type 8 has an invalid length. [ 926.527849][T19628] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4927'. [ 926.685529][T19637] netlink: 'syz.4.4927': attribute type 10 has an invalid length. [ 926.988987][T19644] netlink: 'syz.3.4931': attribute type 11 has an invalid length. [ 927.017024][T19644] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4931'. [ 927.084345][T19644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.336068][T19637] device veth0_vlan left promiscuous mode [ 927.360556][T19637] device veth0_vlan entered promiscuous mode [ 927.477004][T19637] team0: Device veth0_vlan failed to register rx_handler [ 927.544321][T19655] netlink: 'syz.0.4934': attribute type 2 has an invalid length. [ 927.574159][T19655] netlink: 'syz.0.4934': attribute type 1 has an invalid length. [ 927.583363][T19655] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4934'. [ 927.723661][T19648] netlink: 'syz.1.4930': attribute type 27 has an invalid length. [ 927.732589][T19648] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 927.797433][T19656] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.4934'. [ 928.200550][T19666] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4938'. [ 928.316626][T19666] netlink: 'syz.0.4938': attribute type 1 has an invalid length. [ 929.732372][T19702] netlink: 'syz.1.4947': attribute type 2 has an invalid length. [ 929.763745][T19702] netlink: 'syz.1.4947': attribute type 8 has an invalid length. [ 929.824244][T19702] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4947'. [ 929.929773][T19702] netlink: 'syz.1.4947': attribute type 10 has an invalid length. [ 930.002786][T19702] device veth0_vlan left promiscuous mode [ 930.014998][T19710] netlink: 'syz.4.4949': attribute type 11 has an invalid length. [ 930.025940][T19702] device veth0_vlan entered promiscuous mode [ 930.054992][T19702] team0: Device veth0_vlan failed to register rx_handler [ 930.064105][T19710] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4949'. [ 930.109701][T19710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.531361][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.537780][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.414579][T19754] netlink: 'syz.1.4965': attribute type 10 has an invalid length. [ 932.430827][T19754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4965'. [ 932.451558][T19754] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 932.477040][T19754] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.521052][T19758] netlink: 'syz.2.4966': attribute type 11 has an invalid length. [ 932.540624][T19758] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4966'. [ 932.552065][T19754] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 932.585551][T19759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.659852][T19753] delete_channel: no stack [ 933.320611][T19780] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.4973'. [ 934.342058][T19800] netlink: 'syz.4.4982': attribute type 11 has an invalid length. [ 934.373162][T19800] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4982'. [ 934.440251][T19800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 935.083462][T19817] netlink: 'syz.3.4987': attribute type 2 has an invalid length. [ 935.129266][T19817] netlink: 'syz.3.4987': attribute type 8 has an invalid length. [ 935.144845][T19817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4987'. [ 937.625002][T19872] netlink: 'syz.2.5005': attribute type 11 has an invalid length. [ 937.638869][T19877] netlink: 'syz.0.5003': attribute type 2 has an invalid length. [ 937.643832][T19872] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5005'. [ 937.667859][T19872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.679768][T19877] netlink: 'syz.0.5003': attribute type 8 has an invalid length. [ 937.717372][T19877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5003'. [ 938.149920][T19892] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 938.156531][T19892] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 939.379149][T19917] netlink: 'syz.1.5019': attribute type 11 has an invalid length. [ 939.431907][T19917] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5019'. [ 939.543704][T19926] netlink: 'syz.3.5023': attribute type 2 has an invalid length. [ 939.653603][T19926] netlink: 'syz.3.5023': attribute type 8 has an invalid length. [ 939.728052][T19917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.795067][T19926] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5023'. [ 941.564131][T19956] delete_channel: no stack [ 941.812536][T19970] netlink: 'syz.4.5037': attribute type 2 has an invalid length. [ 941.830297][T19970] netlink: 'syz.4.5037': attribute type 8 has an invalid length. [ 941.846700][T19970] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5037'. [ 941.884484][T19972] netlink: 'syz.3.5036': attribute type 11 has an invalid length. [ 941.934815][T19972] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5036'. [ 941.953293][T19980] netlink: 'syz.1.5041': attribute type 2 has an invalid length. [ 941.966009][T19980] netlink: 'syz.1.5041': attribute type 8 has an invalid length. [ 941.985058][T19972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 941.995177][T19980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5041'. [ 943.963103][T20033] netlink: 'syz.3.5055': attribute type 11 has an invalid length. [ 944.060193][T20033] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5055'. [ 944.211489][T20038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.022168][T20045] netlink: 'syz.3.5060': attribute type 10 has an invalid length. [ 945.183173][T20050] netlink: 'syz.0.5062': attribute type 16 has an invalid length. [ 945.227170][T20050] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5062'. [ 945.955001][T20072] netlink: 'syz.2.5070': attribute type 11 has an invalid length. [ 946.006100][T20072] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5070'. [ 946.153530][T20072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 947.233575][T20101] FAULT_INJECTION: forcing a failure. [ 947.233575][T20101] name failslab, interval 1, probability 0, space 0, times 0 [ 947.260698][T20101] CPU: 0 PID: 20101 Comm: syz.2.5077 Not tainted syzkaller #0 [ 947.268334][T20101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 947.278433][T20101] Call Trace: [ 947.281746][T20101] [ 947.284725][T20101] dump_stack_lvl+0x188/0x24e [ 947.289470][T20101] ? sctp_sendmsg+0x15b0/0x2940 [ 947.294391][T20101] ? ___sys_sendmsg+0x2a2/0x360 [ 947.299311][T20101] ? show_regs_print_info+0x12/0x12 [ 947.304573][T20101] ? load_image+0x400/0x400 [ 947.309148][T20101] should_fail_ex+0x399/0x4d0 [ 947.313906][T20101] should_failslab+0x5/0x20 [ 947.318467][T20101] slab_pre_alloc_hook+0x59/0x310 [ 947.323547][T20101] ? sctp_add_bind_addr+0x89/0x350 [ 947.328718][T20101] __kmem_cache_alloc_node+0x4f/0x260 [ 947.334148][T20101] ? sctp_add_bind_addr+0x89/0x350 [ 947.339314][T20101] kmalloc_trace+0x26/0xe0 [ 947.343813][T20101] sctp_add_bind_addr+0x89/0x350 [ 947.348816][T20101] sctp_copy_local_addr_list+0x311/0x4e0 [ 947.354506][T20101] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 947.360283][T20101] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 947.366446][T20101] ? sctp_v4_is_any+0x31/0x50 [ 947.371204][T20101] ? sctp_copy_one_addr+0x93/0x660 [ 947.376371][T20101] sctp_bind_addr_copy+0xaf/0x3c0 [ 947.381452][T20101] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 947.387875][T20101] sctp_connect_new_asoc+0x2f5/0x6a0 [ 947.393213][T20101] ? __sctp_connect+0xd80/0xd80 [ 947.398131][T20101] ? __local_bh_enable_ip+0x136/0x1c0 [ 947.403556][T20101] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 947.409140][T20101] ? security_sctp_bind_connect+0x85/0xb0 [ 947.414905][T20101] sctp_sendmsg+0x15b0/0x2940 [ 947.419650][T20101] ? aa_sk_perm+0x721/0x950 [ 947.424207][T20101] ? sctp_getsockopt+0x8a0/0x8a0 [ 947.429203][T20101] ? __might_fault+0xa6/0x120 [ 947.433957][T20101] ? aa_af_perm+0x340/0x340 [ 947.438513][T20101] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 947.445091][T20101] ? inet_sendmsg+0xe5/0x2f0 [ 947.449733][T20101] ? inet_send_prepare+0x260/0x260 [ 947.454892][T20101] ____sys_sendmsg+0x5be/0x970 [ 947.459721][T20101] ? __sys_sendmsg_sock+0x30/0x30 [ 947.464786][T20101] ? __import_iovec+0x315/0x500 [ 947.469680][T20101] ? import_iovec+0x6f/0xa0 [ 947.474220][T20101] ___sys_sendmsg+0x2a2/0x360 [ 947.478945][T20101] ? __sys_sendmsg+0x290/0x290 [ 947.483783][T20101] ? __lock_acquire+0x7d10/0x7d10 [ 947.488891][T20101] __se_sys_sendmsg+0x1bb/0x2a0 [ 947.493793][T20101] ? __x64_sys_sendmsg+0x80/0x80 [ 947.498799][T20101] ? lockdep_hardirqs_on+0x94/0x140 [ 947.504047][T20101] do_syscall_64+0x4c/0xa0 [ 947.508508][T20101] ? clear_bhb_loop+0x60/0xb0 [ 947.513222][T20101] ? clear_bhb_loop+0x60/0xb0 [ 947.517951][T20101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.523894][T20101] RIP: 0033:0x7f87bc79aeb9 [ 947.528343][T20101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.547995][T20101] RSP: 002b:00007f87ba9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 947.556461][T20101] RAX: ffffffffffffffda RBX: 00007f87bca15fa0 RCX: 00007f87bc79aeb9 [ 947.564470][T20101] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 947.572474][T20101] RBP: 00007f87ba9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 947.580486][T20101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 947.588493][T20101] R13: 00007f87bca16038 R14: 00007f87bca15fa0 R15: 00007ffeda886888 [ 947.596523][T20101] [ 948.237225][T13089] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 948.702057][T20123] FAULT_INJECTION: forcing a failure. [ 948.702057][T20123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 948.765524][T20123] CPU: 0 PID: 20123 Comm: syz.4.5084 Not tainted syzkaller #0 [ 948.773058][T20123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 948.783143][T20123] Call Trace: [ 948.786445][T20123] [ 948.789408][T20123] dump_stack_lvl+0x188/0x24e [ 948.794118][T20123] ? show_regs_print_info+0x12/0x12 [ 948.799342][T20123] ? load_image+0x400/0x400 [ 948.803863][T20123] ? __lock_acquire+0x7d10/0x7d10 [ 948.808924][T20123] should_fail_ex+0x399/0x4d0 [ 948.813633][T20123] prepare_alloc_pages+0x1e2/0x5f0 [ 948.818790][T20123] __alloc_pages+0x130/0x4f0 [ 948.823410][T20123] ? zone_statistics+0x170/0x170 [ 948.828380][T20123] ? __sanitizer_cov_trace_switch+0x35/0xe0 [ 948.834319][T20123] ? alloc_pages+0x4d8/0x740 [ 948.838949][T20123] alloc_skb_with_frags+0x20c/0x710 [ 948.844172][T20123] sock_alloc_send_pskb+0x87f/0x9a0 [ 948.849403][T20123] ? sock_kzfree_s+0x50/0x50 [ 948.854030][T20123] ? dev_get_by_index+0x1e/0x2d0 [ 948.859029][T20123] ? dev_get_by_index+0x1e/0x2d0 [ 948.864022][T20123] packet_sendmsg+0x32b0/0x4e60 [ 948.868958][T20123] ? __might_sleep+0xd0/0xd0 [ 948.873571][T20123] ? perf_trace_preemptirq_template+0x268/0x320 [ 948.879844][T20123] ? irqentry_enter+0x33/0x50 [ 948.884546][T20123] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 948.890574][T20123] ? aa_sk_perm+0x81f/0x950 [ 948.895118][T20123] ? rcu_is_watching+0x11/0xa0 [ 948.899929][T20123] ? packet_getsockopt+0x9a0/0x9a0 [ 948.905092][T20123] ? aa_sock_msg_perm+0x94/0x150 [ 948.910075][T20123] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 948.915400][T20123] ? security_socket_sendmsg+0x7c/0xa0 [ 948.920897][T20123] ? packet_getsockopt+0x9a0/0x9a0 [ 948.926051][T20123] ____sys_sendmsg+0x5be/0x970 [ 948.930869][T20123] ? __sys_sendmsg_sock+0x30/0x30 [ 948.935920][T20123] ? __import_iovec+0x315/0x500 [ 948.940806][T20123] ? import_iovec+0x6f/0xa0 [ 948.945336][T20123] ___sys_sendmsg+0x2a2/0x360 [ 948.950054][T20123] ? __sys_sendmsg+0x290/0x290 [ 948.954876][T20123] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 948.960656][T20123] __se_sys_sendmsg+0x1bb/0x2a0 [ 948.965550][T20123] ? __x64_sys_sendmsg+0x80/0x80 [ 948.970540][T20123] ? syscall_enter_from_user_mode+0x2a/0x80 [ 948.976460][T20123] do_syscall_64+0x4c/0xa0 [ 948.980914][T20123] ? clear_bhb_loop+0x60/0xb0 [ 948.985614][T20123] ? clear_bhb_loop+0x60/0xb0 [ 948.990313][T20123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 948.996218][T20123] RIP: 0033:0x7f6ccbf9aeb9 [ 949.000662][T20123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.020296][T20123] RSP: 002b:00007f6cccdc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.028738][T20123] RAX: ffffffffffffffda RBX: 00007f6ccc215fa0 RCX: 00007f6ccbf9aeb9 [ 949.036738][T20123] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 949.044734][T20123] RBP: 00007f6cccdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 949.052728][T20123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 949.060717][T20123] R13: 00007f6ccc216038 R14: 00007f6ccc215fa0 R15: 00007ffe9cfc9a38 [ 949.068735][T20123] [ 950.363206][T13089] Bluetooth: hci2: command 0x2016 tx timeout [ 951.081106][T20181] netlink: 'syz.1.5100': attribute type 2 has an invalid length. [ 951.093528][T20181] netlink: 'syz.1.5100': attribute type 8 has an invalid length. [ 951.102131][T20181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5100'. [ 951.182748][T20174] netlink: 'syz.1.5100': attribute type 10 has an invalid length. [ 951.208341][T20174] device veth0_vlan left promiscuous mode [ 951.221471][T20174] device veth0_vlan entered promiscuous mode [ 951.250358][T20174] team0: Device veth0_vlan failed to register rx_handler [ 951.364766][T20185] FAULT_INJECTION: forcing a failure. [ 951.364766][T20185] name failslab, interval 1, probability 0, space 0, times 0 [ 951.420728][T20185] CPU: 0 PID: 20185 Comm: syz.3.5103 Not tainted syzkaller #0 [ 951.428273][T20185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 951.438370][T20185] Call Trace: [ 951.441686][T20185] [ 951.444650][T20185] dump_stack_lvl+0x188/0x24e [ 951.449377][T20185] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 951.455321][T20185] ? show_regs_print_info+0x12/0x12 [ 951.460571][T20185] ? load_image+0x400/0x400 [ 951.465123][T20185] ? verify_lock_unused+0x140/0x140 [ 951.470383][T20185] should_fail_ex+0x399/0x4d0 [ 951.475125][T20185] should_failslab+0x5/0x20 [ 951.479682][T20185] slab_pre_alloc_hook+0x59/0x310 [ 951.484758][T20185] kmem_cache_alloc+0x56/0x2f0 [ 951.489564][T20185] ? skb_clone+0x1e7/0x370 [ 951.494035][T20185] skb_clone+0x1e7/0x370 [ 951.498337][T20185] __netlink_deliver_tap+0x3ed/0x800 [ 951.503688][T20185] ? netlink_deliver_tap+0x2e/0x1b0 [ 951.508937][T20185] netlink_deliver_tap+0x19c/0x1b0 [ 951.514100][T20185] netlink_unicast+0x728/0x8d0 [ 951.518922][T20185] netlink_sendmsg+0x8ad/0xbd0 [ 951.523747][T20185] ? netlink_getsockopt+0x550/0x550 [ 951.529006][T20185] ? netlink_getsockopt+0x550/0x550 [ 951.534255][T20185] ____sys_sendmsg+0x5be/0x970 [ 951.539072][T20185] ? __sys_sendmsg_sock+0x30/0x30 [ 951.544140][T20185] ? __import_iovec+0x315/0x500 [ 951.549032][T20185] ? import_iovec+0x6f/0xa0 [ 951.553574][T20185] ___sys_sendmsg+0x2a2/0x360 [ 951.558305][T20185] ? migrate_enable+0x148/0x220 [ 951.563213][T20185] ? __sys_sendmsg+0x290/0x290 [ 951.568092][T20185] __se_sys_sendmsg+0x1bb/0x2a0 [ 951.572993][T20185] ? __x64_sys_sendmsg+0x80/0x80 [ 951.578006][T20185] ? syscall_enter_from_user_mode+0x2a/0x80 [ 951.583952][T20185] do_syscall_64+0x4c/0xa0 [ 951.588417][T20185] ? clear_bhb_loop+0x60/0xb0 [ 951.593137][T20185] ? clear_bhb_loop+0x60/0xb0 [ 951.597870][T20185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.603813][T20185] RIP: 0033:0x7f6a3f79aeb9 [ 951.608276][T20185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.627930][T20185] RSP: 002b:00007f6a4062e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.636384][T20185] RAX: ffffffffffffffda RBX: 00007f6a3fa15fa0 RCX: 00007f6a3f79aeb9 [ 951.644398][T20185] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 951.652438][T20185] RBP: 00007f6a4062e090 R08: 0000000000000000 R09: 0000000000000000 [ 951.660447][T20185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.668464][T20185] R13: 00007f6a3fa16038 R14: 00007f6a3fa15fa0 R15: 00007ffd105c2238 [ 951.676498][T20185] [ 951.749338][T20185] netlink: 'syz.3.5103': attribute type 5 has an invalid length. [ 952.043760][T20200] netlink: 'syz.2.5108': attribute type 27 has an invalid length. [ 952.099597][T20207] netlink: 'syz.2.5108': attribute type 16 has an invalid length. [ 952.136638][T20207] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5108'. [ 952.395910][T20213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.419503][T20213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.443840][T20213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.459193][T20213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.530745][T20213] bond0: (slave batadv0): Releasing backup interface [ 953.748468][T20228] netlink: 'syz.2.5117': attribute type 2 has an invalid length. [ 953.777085][T20228] netlink: 'syz.2.5117': attribute type 8 has an invalid length. [ 953.785150][T20228] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5117'. [ 953.959761][T20228] netlink: 'syz.2.5117': attribute type 10 has an invalid length. [ 954.323869][T20228] device veth0_vlan left promiscuous mode [ 954.472808][T20228] device veth0_vlan entered promiscuous mode [ 954.589033][T20228] team0: Device veth0_vlan failed to register rx_handler [ 954.972301][T20252] netlink: 'syz.1.5123': attribute type 5 has an invalid length. [ 956.022555][T20274] netlink: 'syz.3.5131': attribute type 11 has an invalid length. [ 956.031093][T20274] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5131'. [ 956.043591][T20274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.489413][T20288] netlink: 'syz.1.5135': attribute type 10 has an invalid length. [ 956.517175][T20288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5135'. [ 956.766625][T20295] netlink: 'syz.0.5138': attribute type 2 has an invalid length. [ 956.808615][T20295] netlink: 'syz.0.5138': attribute type 8 has an invalid length. [ 956.839060][T20295] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5138'. [ 956.907673][T20283] delete_channel: no stack [ 956.915169][T20297] netlink: 'syz.0.5138': attribute type 10 has an invalid length. [ 957.133006][T20297] device veth0_vlan left promiscuous mode [ 957.184804][T20297] device veth0_vlan entered promiscuous mode [ 957.393946][T20297] team0: Device veth0_vlan failed to register rx_handler [ 957.604553][T20313] FAULT_INJECTION: forcing a failure. [ 957.604553][T20313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.653767][T20313] CPU: 1 PID: 20313 Comm: syz.4.5143 Not tainted syzkaller #0 [ 957.661354][T20313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 957.671503][T20313] Call Trace: [ 957.674865][T20313] [ 957.677868][T20313] dump_stack_lvl+0x188/0x24e [ 957.682644][T20313] ? show_regs_print_info+0x12/0x12 [ 957.687940][T20313] ? load_image+0x400/0x400 [ 957.692569][T20313] ? __lock_acquire+0x7d10/0x7d10 [ 957.697684][T20313] ? __lock_acquire+0x7d10/0x7d10 [ 957.702819][T20313] should_fail_ex+0x399/0x4d0 [ 957.707628][T20313] _copy_from_user+0x2c/0x170 [ 957.712405][T20313] bpf_copy_from_user+0x49/0xa0 [ 957.717357][T20313] bpf_prog_16296157b39f6341+0x51/0x55 [ 957.722919][T20313] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 957.728401][T20313] bpf_prog_test_run_syscall+0x313/0x4a0 [ 957.734169][T20313] ? sock_gen_cookie+0x60/0x60 [ 957.739042][T20313] ? sock_gen_cookie+0x60/0x60 [ 957.743886][T20313] bpf_prog_test_run+0x31e/0x390 [ 957.748948][T20313] __sys_bpf+0x62b/0x780 [ 957.753312][T20313] ? bpf_link_show_fdinfo+0x380/0x380 [ 957.758874][T20313] ? lock_chain_count+0x20/0x20 [ 957.763856][T20313] __x64_sys_bpf+0x78/0x90 [ 957.768372][T20313] do_syscall_64+0x4c/0xa0 [ 957.772868][T20313] ? clear_bhb_loop+0x60/0xb0 [ 957.777627][T20313] ? clear_bhb_loop+0x60/0xb0 [ 957.782400][T20313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.788372][T20313] RIP: 0033:0x7f6ccbf9aeb9 [ 957.792866][T20313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.812568][T20313] RSP: 002b:00007f6cccdc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 957.821066][T20313] RAX: ffffffffffffffda RBX: 00007f6ccc215fa0 RCX: 00007f6ccbf9aeb9 [ 957.829108][T20313] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 957.837161][T20313] RBP: 00007f6cccdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 957.845199][T20313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.853242][T20313] R13: 00007f6ccc216038 R14: 00007f6ccc215fa0 R15: 00007ffe9cfc9a38 [ 957.861561][T20313] [ 957.958481][T20297] syz.0.5138 (20297) used greatest stack depth: 17552 bytes left [ 958.178569][T20319] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5145'. [ 958.522452][T20327] netlink: 'syz.2.5147': attribute type 11 has an invalid length. [ 958.590456][T20327] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5147'. [ 958.659856][T20327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.806389][T20356] netlink: 'syz.0.5158': attribute type 10 has an invalid length. [ 961.884745][T20356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5158'. [ 961.935665][T20356] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 961.957106][T20356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 962.512034][T20369] netlink: 'syz.0.5164': attribute type 3 has an invalid length. [ 962.520226][T20369] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5164'. [ 962.692089][T20378] FAULT_INJECTION: forcing a failure. [ 962.692089][T20378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.729395][T20378] CPU: 0 PID: 20378 Comm: syz.1.5166 Not tainted syzkaller #0 [ 962.736928][T20378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 962.747018][T20378] Call Trace: [ 962.750363][T20378] [ 962.753328][T20378] dump_stack_lvl+0x188/0x24e [ 962.758069][T20378] ? show_regs_print_info+0x12/0x12 [ 962.763322][T20378] ? load_image+0x400/0x400 [ 962.767874][T20378] ? __might_fault+0xa6/0x120 [ 962.772605][T20378] should_fail_ex+0x399/0x4d0 [ 962.777340][T20378] copyout+0x1b/0x120 [ 962.781376][T20378] _copy_to_iter+0x48b/0x1040 [ 962.786115][T20378] ? iov_iter_init+0x1f0/0x1f0 [ 962.790925][T20378] ? __virt_addr_valid+0x188/0x540 [ 962.796167][T20378] ? __virt_addr_valid+0x465/0x540 [ 962.801322][T20378] ? __phys_addr_symbol+0x2b/0x70 [ 962.806409][T20378] ? __check_object_size+0x500/0xa40 [ 962.811742][T20378] __skb_datagram_iter+0xde/0x740 [ 962.816827][T20378] ? skb_copy_datagram_iter+0x290/0x290 [ 962.822413][T20378] skb_copy_datagram_iter+0xd7/0x290 [ 962.827741][T20378] netlink_recvmsg+0x2d0/0xe00 [ 962.832563][T20378] ? netlink_sendmsg+0xbd0/0xbd0 [ 962.837578][T20378] ? aa_af_perm+0x340/0x340 [ 962.842125][T20378] ? __might_fault+0xa6/0x120 [ 962.846880][T20378] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 962.852197][T20378] ? security_socket_recvmsg+0x85/0xb0 [ 962.857710][T20378] ? netlink_sendmsg+0xbd0/0xbd0 [ 962.862700][T20378] ____sys_recvmsg+0x2cb/0x5e0 [ 962.867537][T20378] ? __sys_recvmsg_sock+0x40/0x40 [ 962.872631][T20378] ? import_iovec+0x6f/0xa0 [ 962.877179][T20378] ___sys_recvmsg+0x212/0x590 [ 962.881909][T20378] ? __sys_recvmsg+0x290/0x290 [ 962.886738][T20378] ? common_file_perm+0x171/0x1c0 [ 962.891822][T20378] ? __fget_files+0x43d/0x4b0 [ 962.896640][T20378] __x64_sys_recvmsg+0x205/0x2e0 [ 962.901624][T20378] ? ct_nmi_exit+0x145/0x1c0 [ 962.906264][T20378] ? ___sys_recvmsg+0x590/0x590 [ 962.911207][T20378] ? lockdep_hardirqs_on+0x94/0x140 [ 962.916445][T20378] do_syscall_64+0x4c/0xa0 [ 962.920904][T20378] ? clear_bhb_loop+0x60/0xb0 [ 962.925627][T20378] ? clear_bhb_loop+0x60/0xb0 [ 962.930352][T20378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.936289][T20378] RIP: 0033:0x7fc3ab59aeb9 [ 962.940733][T20378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.960391][T20378] RSP: 002b:00007fc3ac4ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 962.968890][T20378] RAX: ffffffffffffffda RBX: 00007fc3ab815fa0 RCX: 00007fc3ab59aeb9 [ 962.976902][T20378] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 962.984906][T20378] RBP: 00007fc3ac4ae090 R08: 0000000000000000 R09: 0000000000000000 [ 962.992910][T20378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.000920][T20378] R13: 00007fc3ab816038 R14: 00007fc3ab815fa0 R15: 00007ffc01bb2628 [ 963.008949][T20378] [ 963.585926][T20387] netlink: 'syz.2.5169': attribute type 2 has an invalid length. [ 963.594643][T20387] netlink: 'syz.2.5169': attribute type 8 has an invalid length. [ 963.606349][T20387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5169'. [ 963.660758][T20387] netlink: 'syz.2.5169': attribute type 10 has an invalid length. [ 963.673437][T20387] device veth0_vlan left promiscuous mode [ 963.683822][T20387] device veth0_vlan entered promiscuous mode [ 963.705194][T20387] team0: Device veth0_vlan failed to register rx_handler [ 963.838400][T20395] netlink: 'syz.4.5170': attribute type 2 has an invalid length. [ 963.872813][T20395] netlink: 'syz.4.5170': attribute type 8 has an invalid length. [ 963.907221][T20395] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5170'. [ 963.981125][T20395] netlink: 'syz.4.5170': attribute type 10 has an invalid length. [ 964.017587][T20395] device veth0_vlan left promiscuous mode [ 964.031790][T20395] device veth0_vlan entered promiscuous mode [ 964.076383][T20395] team0: Device veth0_vlan failed to register rx_handler [ 964.475607][T20400] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5171'. [ 964.866664][T20413] netlink: 'syz.2.5176': attribute type 2 has an invalid length. [ 964.902474][T20413] netlink: 'syz.2.5176': attribute type 8 has an invalid length. [ 964.987546][T20413] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5176'. [ 965.163078][T20413] device veth0_vlan left promiscuous mode [ 965.235450][T20413] device veth0_vlan entered promiscuous mode [ 965.398809][T20413] team0: Device veth0_vlan failed to register rx_handler [ 967.328773][T20438] validate_nla: 1 callbacks suppressed [ 967.328806][T20438] netlink: 'syz.1.5183': attribute type 2 has an invalid length. [ 967.361023][T20438] netlink: 'syz.1.5183': attribute type 8 has an invalid length. [ 967.371540][T20438] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5183'. [ 967.407500][T20438] netlink: 'syz.1.5183': attribute type 10 has an invalid length. [ 967.416555][T20438] device veth0_vlan left promiscuous mode [ 967.466510][T20438] device veth0_vlan entered promiscuous mode [ 967.508354][T20438] team0: Device veth0_vlan failed to register rx_handler [ 967.571225][T20447] netlink: 'syz.0.5184': attribute type 11 has an invalid length. [ 967.616696][T20448] netlink: 'syz.2.5186': attribute type 2 has an invalid length. [ 967.625571][T20447] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5184'. [ 967.638847][T20441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.650914][T20448] netlink: 'syz.2.5186': attribute type 8 has an invalid length. [ 967.663227][T20448] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5186'. [ 967.753872][T20451] netlink: 'syz.2.5186': attribute type 10 has an invalid length. [ 967.792340][T20451] device veth0_vlan left promiscuous mode [ 967.823191][T20451] device veth0_vlan entered promiscuous mode [ 967.884006][T20451] team0: Device veth0_vlan failed to register rx_handler [ 970.444034][T20486] netlink: 'syz.4.5199': attribute type 2 has an invalid length. [ 970.464273][T20486] netlink: 'syz.4.5199': attribute type 8 has an invalid length. [ 970.502823][T20486] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5199'. [ 970.532889][T20491] netlink: 'syz.4.5199': attribute type 10 has an invalid length. [ 970.574211][T20491] device veth0_vlan left promiscuous mode [ 970.610183][T20491] device veth0_vlan entered promiscuous mode [ 970.642885][T20491] team0: Device veth0_vlan failed to register rx_handler [ 970.785092][T20501] netlink: 'syz.2.5204': attribute type 11 has an invalid length. [ 970.794234][T20501] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5204'. [ 970.817787][T20497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.773597][T20514] FAULT_INJECTION: forcing a failure. [ 972.773597][T20514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.916969][T20514] CPU: 0 PID: 20514 Comm: syz.1.5209 Not tainted syzkaller #0 [ 972.924534][T20514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 972.934663][T20514] Call Trace: [ 972.938015][T20514] [ 972.941010][T20514] dump_stack_lvl+0x188/0x24e [ 972.945779][T20514] ? show_regs_print_info+0x12/0x12 [ 972.951056][T20514] ? load_image+0x400/0x400 [ 972.955641][T20514] ? __lock_acquire+0x7d10/0x7d10 [ 972.960750][T20514] ? snprintf+0xe5/0x140 [ 972.965067][T20514] should_fail_ex+0x399/0x4d0 [ 972.969844][T20514] _copy_to_user+0x2c/0x130 [ 972.974430][T20514] simple_read_from_buffer+0xe3/0x150 [ 972.979902][T20514] proc_fail_nth_read+0x1a6/0x220 [ 972.985001][T20514] ? proc_fault_inject_write+0x310/0x310 [ 972.990727][T20514] ? fsnotify_perm+0x248/0x550 [ 972.995581][T20514] ? proc_fault_inject_write+0x310/0x310 [ 973.001284][T20514] vfs_read+0x2de/0xa00 [ 973.005531][T20514] ? kernel_read+0x1e0/0x1e0 [ 973.010199][T20514] ? __fget_files+0x28/0x4b0 [ 973.014837][T20514] ? __fget_files+0x28/0x4b0 [ 973.019477][T20514] ? __fget_files+0x43d/0x4b0 [ 973.024225][T20514] ? __fdget_pos+0x2ae/0x360 [ 973.028861][T20514] ? ksys_read+0x71/0x250 [ 973.033245][T20514] ksys_read+0x14c/0x250 [ 973.037547][T20514] ? vfs_write+0xa30/0xa30 [ 973.042029][T20514] ? trace_sys_enter+0x22/0x80 [ 973.046867][T20514] do_syscall_64+0x4c/0xa0 [ 973.051344][T20514] ? clear_bhb_loop+0x60/0xb0 [ 973.056060][T20514] ? clear_bhb_loop+0x60/0xb0 [ 973.060792][T20514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 973.066737][T20514] RIP: 0033:0x7fc3ab55b78e [ 973.071203][T20514] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 973.090933][T20514] RSP: 002b:00007fc3ac4adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 973.099390][T20514] RAX: ffffffffffffffda RBX: 00007fc3ac4ae6c0 RCX: 00007fc3ab55b78e [ 973.107442][T20514] RDX: 000000000000000f RSI: 00007fc3ac4ae0a0 RDI: 0000000000000004 [ 973.115480][T20514] RBP: 00007fc3ac4ae090 R08: 0000000000000000 R09: 0000000000000000 [ 973.123575][T20514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.131582][T20514] R13: 00007fc3ab816038 R14: 00007fc3ab815fa0 R15: 00007ffc01bb2628 [ 973.139658][T20514] [ 974.883195][T20536] netlink: 'syz.3.5217': attribute type 2 has an invalid length. [ 974.905849][T20536] netlink: 'syz.3.5217': attribute type 8 has an invalid length. [ 974.930692][T20536] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5217'. [ 974.972117][T20536] netlink: 'syz.3.5217': attribute type 10 has an invalid length. [ 975.415972][T20536] device veth0_vlan left promiscuous mode [ 975.582242][T20536] device veth0_vlan entered promiscuous mode [ 975.687315][T20536] team0: Device veth0_vlan failed to register rx_handler [ 978.192412][T20598] netlink: 'syz.1.5235': attribute type 11 has an invalid length. [ 978.223635][T20598] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5235'. [ 978.297581][T20600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 978.733185][T20607] netlink: 'syz.4.5237': attribute type 21 has an invalid length. [ 978.797284][T20609] netlink: 'syz.3.5238': attribute type 2 has an invalid length. [ 978.818718][T20609] netlink: 'syz.3.5238': attribute type 8 has an invalid length. [ 978.838347][T20609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5238'. [ 978.882027][T20614] netlink: 'syz.3.5238': attribute type 10 has an invalid length. [ 978.900558][T20614] device veth0_vlan left promiscuous mode [ 978.961140][T20614] device veth0_vlan entered promiscuous mode [ 979.011729][T20614] team0: Device veth0_vlan failed to register rx_handler [ 980.629424][T20655] device bond0 entered promiscuous mode [ 980.642420][T20655] device bond_slave_1 entered promiscuous mode [ 980.652368][T20655] device netdevsim0 entered promiscuous mode [ 980.661840][T20657] netlink: 'syz.0.5257': attribute type 2 has an invalid length. [ 980.685516][T20657] netlink: 'syz.0.5257': attribute type 8 has an invalid length. [ 980.715281][T20657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5257'. [ 981.473907][T20671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5260'. [ 981.725341][T20670] netlink: 142940 bytes leftover after parsing attributes in process `syz.2.5260'. [ 981.745809][T20670] netlink: zone id is out of range [ 981.763493][T20670] netlink: zone id is out of range [ 981.787363][T20670] netlink: zone id is out of range [ 981.792785][T20670] netlink: zone id is out of range [ 981.833502][T20670] netlink: zone id is out of range [ 981.871275][T20670] netlink: zone id is out of range [ 981.917762][T20670] netlink: zone id is out of range [ 981.933117][T20670] netlink: zone id is out of range [ 981.957327][T20670] netlink: zone id is out of range [ 981.980006][T20670] netlink: zone id is out of range [ 983.150524][T20704] netlink: 'syz.2.5272': attribute type 2 has an invalid length. [ 983.218884][T20704] netlink: 'syz.2.5272': attribute type 8 has an invalid length. [ 983.279947][T20704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5272'. [ 983.865268][T20730] netlink: 'syz.0.5279': attribute type 11 has an invalid length. [ 983.887261][T20730] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5279'. [ 983.921589][T20730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.471425][T20734] netlink: 'syz.4.5281': attribute type 2 has an invalid length. [ 984.482976][T20734] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5281'. [ 984.614831][T20749] netlink: 'syz.2.5286': attribute type 10 has an invalid length. [ 984.769169][T20753] netlink: 'syz.3.5287': attribute type 2 has an invalid length. [ 984.817159][T20753] netlink: 'syz.3.5287': attribute type 8 has an invalid length. [ 984.846035][T20753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5287'. [ 985.522493][T20777] netlink: 'syz.0.5296': attribute type 3 has an invalid length. [ 985.553808][T20777] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5296'. [ 985.910307][T20786] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.5300'. [ 985.948005][T20788] FAULT_INJECTION: forcing a failure. [ 985.948005][T20788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.962154][T20788] CPU: 1 PID: 20788 Comm: syz.3.5302 Not tainted syzkaller #0 [ 985.969665][T20788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 985.979749][T20788] Call Trace: [ 985.983050][T20788] [ 985.986010][T20788] dump_stack_lvl+0x188/0x24e [ 985.990757][T20788] ? show_regs_print_info+0x12/0x12 [ 985.995981][T20788] ? load_image+0x400/0x400 [ 986.000511][T20788] ? __lock_acquire+0x7d10/0x7d10 [ 986.005579][T20788] should_fail_ex+0x399/0x4d0 [ 986.010285][T20788] _copy_from_user+0x2c/0x170 [ 986.015023][T20788] vmemdup_user+0xa8/0x1d0 [ 986.019476][T20788] map_get_next_key+0x225/0x620 [ 986.024463][T20788] ? __might_fault+0xa6/0x120 [ 986.029163][T20788] ? bpf_lsm_bpf+0x5/0x10 [ 986.033516][T20788] __sys_bpf+0x466/0x780 [ 986.037787][T20788] ? bpf_link_show_fdinfo+0x380/0x380 [ 986.043203][T20788] ? lock_chain_count+0x20/0x20 [ 986.048098][T20788] __x64_sys_bpf+0x78/0x90 [ 986.052541][T20788] do_syscall_64+0x4c/0xa0 [ 986.056986][T20788] ? clear_bhb_loop+0x60/0xb0 [ 986.061692][T20788] ? clear_bhb_loop+0x60/0xb0 [ 986.066393][T20788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.072315][T20788] RIP: 0033:0x7f6a3f79aeb9 [ 986.076752][T20788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.096375][T20788] RSP: 002b:00007f6a4062e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 986.104813][T20788] RAX: ffffffffffffffda RBX: 00007f6a3fa15fa0 RCX: 00007f6a3f79aeb9 [ 986.112807][T20788] RDX: 0000000000000020 RSI: 0000200000000680 RDI: 0000000000000004 [ 986.120891][T20788] RBP: 00007f6a4062e090 R08: 0000000000000000 R09: 0000000000000000 [ 986.128878][T20788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.136866][T20788] R13: 00007f6a3fa16038 R14: 00007f6a3fa15fa0 R15: 00007ffd105c2238 [ 986.144882][T20788] [ 986.276576][T20792] netlink: 'syz.1.5304': attribute type 3 has an invalid length. [ 986.332401][T20792] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5304'. [ 986.379773][T20799] netlink: 'syz.0.5305': attribute type 2 has an invalid length. [ 986.401905][T20799] netlink: 'syz.0.5305': attribute type 8 has an invalid length. [ 986.419446][T20799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5305'. [ 986.452357][T20800] device bond0 entered promiscuous mode [ 986.468061][T20800] device bond_slave_1 entered promiscuous mode [ 986.497317][T20800] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 986.745631][T20818] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5311'. [ 986.786505][T20816] device syzkaller0 entered promiscuous mode [ 986.861449][T20818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5311'. [ 986.876673][T20822] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5312'. [ 987.238882][T20830] FAULT_INJECTION: forcing a failure. [ 987.238882][T20830] name failslab, interval 1, probability 0, space 0, times 0 [ 987.255019][T20830] CPU: 1 PID: 20830 Comm: syz.2.5316 Not tainted syzkaller #0 [ 987.262538][T20830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 987.272635][T20830] Call Trace: [ 987.275950][T20830] [ 987.278914][T20830] dump_stack_lvl+0x188/0x24e [ 987.283774][T20830] ? show_regs_print_info+0x12/0x12 [ 987.289027][T20830] ? load_image+0x400/0x400 [ 987.293581][T20830] ? __might_sleep+0xd0/0xd0 [ 987.298212][T20830] ? __lock_acquire+0x7d10/0x7d10 [ 987.303305][T20830] should_fail_ex+0x399/0x4d0 [ 987.308068][T20830] should_failslab+0x5/0x20 [ 987.312642][T20830] slab_pre_alloc_hook+0x59/0x310 [ 987.317709][T20830] ? __lock_acquire+0x13cf/0x7d10 [ 987.322796][T20830] kmem_cache_alloc_node+0x5a/0x320 [ 987.328140][T20830] ? __alloc_skb+0xfc/0x7e0 [ 987.332700][T20830] __alloc_skb+0xfc/0x7e0 [ 987.337088][T20830] tcp_stream_alloc_skb+0x3e/0x330 [ 987.342256][T20830] tcp_sendmsg_locked+0xd2a/0x3f50 [ 987.347412][T20830] ? verify_lock_unused+0x140/0x140 [ 987.352722][T20830] ? mark_lock+0x94/0x320 [ 987.357136][T20830] ? tcp_set_state+0x520/0x520 [ 987.361979][T20830] tcp_sendmsg+0x2b/0x40 [ 987.366287][T20830] ? inet_send_prepare+0x260/0x260 [ 987.371458][T20830] ____sys_sendmsg+0x5be/0x970 [ 987.376293][T20830] ? __sys_sendmsg_sock+0x30/0x30 [ 987.381365][T20830] ? __import_iovec+0x315/0x500 [ 987.386270][T20830] ? import_iovec+0x6f/0xa0 [ 987.390822][T20830] ___sys_sendmsg+0x2a2/0x360 [ 987.395589][T20830] ? __sys_sendmsg+0x290/0x290 [ 987.400430][T20830] ? __lock_acquire+0x7d10/0x7d10 [ 987.405543][T20830] __se_sys_sendmsg+0x1bb/0x2a0 [ 987.410449][T20830] ? __x64_sys_sendmsg+0x80/0x80 [ 987.415492][T20830] ? lockdep_hardirqs_on+0x94/0x140 [ 987.420744][T20830] do_syscall_64+0x4c/0xa0 [ 987.425217][T20830] ? clear_bhb_loop+0x60/0xb0 [ 987.429948][T20830] ? clear_bhb_loop+0x60/0xb0 [ 987.434683][T20830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.440621][T20830] RIP: 0033:0x7f87bc79aeb9 [ 987.445087][T20830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.464774][T20830] RSP: 002b:00007f87ba9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.473239][T20830] RAX: ffffffffffffffda RBX: 00007f87bca15fa0 RCX: 00007f87bc79aeb9 [ 987.481251][T20830] RDX: 0000000004009080 RSI: 0000200000000040 RDI: 0000000000000007 [ 987.489263][T20830] RBP: 00007f87ba9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 987.497270][T20830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.505279][T20830] R13: 00007f87bca16038 R14: 00007f87bca15fa0 R15: 00007ffeda886888 [ 987.513303][T20830] [ 989.989160][T20844] netlink: 'syz.4.5323': attribute type 2 has an invalid length. [ 990.025724][T20847] netlink: 'syz.2.5322': attribute type 3 has an invalid length. [ 990.045285][T20844] netlink: 'syz.4.5323': attribute type 8 has an invalid length. [ 990.051271][T20847] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5322'. [ 990.087554][T20844] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5323'. [ 990.106908][T20849] device bond0 entered promiscuous mode [ 990.112853][T20849] device bond_slave_1 entered promiscuous mode [ 990.119923][T20849] device batadv0 entered promiscuous mode [ 990.126065][T20849] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 990.594538][T20870] netlink: 'syz.3.5330': attribute type 10 has an invalid length. [ 990.825815][T20876] netlink: 'syz.4.5333': attribute type 10 has an invalid length. [ 990.858493][T20878] FAULT_INJECTION: forcing a failure. [ 990.858493][T20878] name failslab, interval 1, probability 0, space 0, times 0 [ 990.949824][T20878] CPU: 1 PID: 20878 Comm: syz.2.5334 Not tainted syzkaller #0 [ 990.957366][T20878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 990.967461][T20878] Call Trace: [ 990.970777][T20878] [ 990.973762][T20878] dump_stack_lvl+0x188/0x24e [ 990.978497][T20878] ? show_regs_print_info+0x12/0x12 [ 990.983753][T20878] ? load_image+0x400/0x400 [ 990.988302][T20878] ? __might_sleep+0xd0/0xd0 [ 990.992937][T20878] ? __lock_acquire+0x7d10/0x7d10 [ 990.998019][T20878] should_fail_ex+0x399/0x4d0 [ 991.002758][T20878] should_failslab+0x5/0x20 [ 991.007311][T20878] slab_pre_alloc_hook+0x59/0x310 [ 991.012386][T20878] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 991.017987][T20878] __kmem_cache_alloc_node+0x4f/0x260 [ 991.023425][T20878] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 991.029017][T20878] __kmalloc+0xa0/0x240 [ 991.033229][T20878] bpf_prog_test_run_skb+0x234/0x12a0 [ 991.038647][T20878] ? __fget_files+0x28/0x4b0 [ 991.043300][T20878] ? __fget_files+0x28/0x4b0 [ 991.047948][T20878] ? __fget_files+0x43d/0x4b0 [ 991.052699][T20878] ? cpu_online+0xa0/0xa0 [ 991.057094][T20878] bpf_prog_test_run+0x31e/0x390 [ 991.062083][T20878] __sys_bpf+0x62b/0x780 [ 991.066377][T20878] ? bpf_link_show_fdinfo+0x380/0x380 [ 991.071819][T20878] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 991.078100][T20878] __x64_sys_bpf+0x78/0x90 [ 991.082546][T20878] do_syscall_64+0x4c/0xa0 [ 991.087019][T20878] ? clear_bhb_loop+0x60/0xb0 [ 991.091727][T20878] ? clear_bhb_loop+0x60/0xb0 [ 991.096431][T20878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 991.102346][T20878] RIP: 0033:0x7f87bc79aeb9 [ 991.106795][T20878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.126424][T20878] RSP: 002b:00007f87ba9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 991.134860][T20878] RAX: ffffffffffffffda RBX: 00007f87bca15fa0 RCX: 00007f87bc79aeb9 [ 991.142857][T20878] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 991.150866][T20878] RBP: 00007f87ba9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 991.158870][T20878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.166861][T20878] R13: 00007f87bca16038 R14: 00007f87bca15fa0 R15: 00007ffeda886888 [ 991.174867][T20878] [ 991.232775][T20876] team0: Device wlan1 is of different type [ 991.382928][T20876] ------------[ cut here ]------------ [ 991.388797][T20876] WARNING: CPU: 1 PID: 20876 at kernel/kcov.c:869 kcov_remote_start+0x54d/0x7e0 [ 991.397916][T20876] Modules linked in: [ 991.399402][T20883] netlink: 'syz.0.5335': attribute type 3 has an invalid length. [ 991.401849][T20876] CPU: 1 PID: 20876 Comm: syz.4.5333 Not tainted syzkaller #0 [ 991.401906][T20876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 991.401923][T20876] RIP: 0010:kcov_remote_start+0x54d/0x7e0 [ 991.401960][T20876] Code: ff ff 4c 89 ff be 03 00 00 00 e8 6e 60 8e 02 e9 f0 fa ff ff e8 34 15 aa 08 f7 c3 00 02 00 00 0f 84 df fa ff ff e9 5a fc ff ff <0f> 0b e8 bc 29 aa 08 89 c0 48 c7 c7 70 b1 02 00 48 03 3c c5 80 f9 [ 991.401986][T20876] RSP: 0018:ffffc90004b1e270 EFLAGS: 00010002 [ 991.402014][T20876] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 991.402033][T20876] RDX: dffffc0000000000 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0d20 [ 991.402055][T20876] RBP: ffffc90004b1e4d0 R08: dffffc0000000000 R09: 1ffffffff215e854 [ 991.410958][T20883] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.5335'. [ 991.417250][T20876] R10: dffffc0000000000 R11: fffffbfff215e855 R12: ffff8880b8f2b170 [ 991.417274][T20876] R13: ffffffff81827b9b R14: ffff88802e43bb80 R15: 0000000000000000 [ 991.417292][T20876] FS: 00007f6cccdc26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 991.417315][T20876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 991.417335][T20876] CR2: 0000001b35603000 CR3: 0000000042f7e000 CR4: 00000000003506e0 [ 991.417357][T20876] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 991.417376][T20876] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 991.417394][T20876] Call Trace: [ 991.417409][T20876] [ 991.417441][T20876] ieee80211_rx_list+0x504/0x2e60 [ 991.417619][T20876] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 991.565259][T20876] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 991.571292][T20876] ? read_lock_is_recursive+0x10/0x10 [ 991.576728][T20876] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 991.582669][T20876] ? ieee80211_rx_napi+0xd0/0x3d0 [ 991.587759][T20876] ieee80211_rx_napi+0x1ae/0x3d0 [ 991.592786][T20876] ? ieee80211_rx_list+0x2e60/0x2e60 [ 991.598121][T20876] ? skb_dequeue+0x120/0x150 [ 991.602751][T20876] ieee80211_handle_queued_frames+0x105/0x1b0 [ 991.608865][T20876] ? ieee80211_stop_device+0x12/0xa0 [ 991.614191][T20876] ieee80211_stop_device+0x27/0xa0 [ 991.619342][T20876] ieee80211_do_stop+0x1724/0x1e20 [ 991.624517][T20876] ? __mutex_lock+0x1ab/0xaf0 [ 991.629231][T20876] ? ieee80211_sdata_stop+0x80/0x80 [ 991.634492][T20876] ? mutex_lock_nested+0x10/0x10 [ 991.639464][T20876] ? __local_bh_enable_ip+0x136/0x1c0 [ 991.644879][T20876] ? do_raw_spin_unlock+0x11d/0x230 [ 991.650134][T20876] ieee80211_stop+0x432/0x4a0 [ 991.654854][T20876] ? dev_deactivate_many+0x244/0xcb0 [ 991.660183][T20876] ? ieee80211_open+0x200/0x200 [ 991.665076][T20876] __dev_close_many+0x1d1/0x2b0 [ 991.669973][T20876] ? dev_close_many+0x400/0x400 [ 991.674864][T20876] ? call_rcu+0x6a8/0x990 [ 991.679253][T20876] ? lockdep_hardirqs_on+0x94/0x140 [ 991.684494][T20876] dev_close_many+0x21f/0x400 [ 991.689226][T20876] ? __dev_open+0x430/0x430 [ 991.693771][T20876] ? rcu_force_quiescent_state+0x230/0x230 [ 991.699650][T20876] dev_close+0x154/0x210 [ 991.703958][T20876] ? __dev_close_many+0x2b0/0x2b0 [ 991.709038][T20876] ? vlan_vids_del_by_dev+0x29e/0x2f0 [ 991.714472][T20876] team_add_slave+0x181b/0x2870 [ 991.719368][T20876] ? rtmsg_ifinfo_build_skb+0xdf/0x180 [ 991.724916][T20876] ? team_netpoll_cleanup+0xf0/0xf0 [ 991.730165][T20876] ? dev_get_flags+0x1c0/0x1c0 [ 991.735003][T20876] ? mutex_is_locked+0xe/0x40 [ 991.739729][T20876] do_setlink+0xd3a/0x3e60 [ 991.744201][T20876] ? _printk+0xda/0x130 [ 991.748392][T20876] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 991.754591][T20876] ? load_image+0x400/0x400 [ 991.759143][T20876] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 991.764916][T20876] ? perf_trace_preemptirq_template+0x268/0x320 [ 991.771216][T20876] ? mark_lock+0x94/0x320 [ 991.775593][T20876] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 991.781629][T20876] ? lock_chain_count+0x20/0x20 [ 991.786535][T20876] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 991.792723][T20876] ? lockdep_hardirqs_on+0x94/0x140 [ 991.797959][T20876] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 991.804161][T20876] ? validate_linkmsg+0x3db/0x4c0 [ 991.809232][T20876] rtnl_newlink+0x177c/0x2080 [ 991.813974][T20876] ? rtnl_newlink+0x551/0x2080 [ 991.818792][T20876] ? rtnl_setlink+0x510/0x510 [ 991.823505][T20876] ? trace_raw_output_contention_end+0xd0/0xd0 [ 991.829699][T20876] ? rcu_is_watching+0x11/0xa0 [ 991.834501][T20876] ? trace_contention_end+0x5f/0x170 [ 991.839820][T20876] ? __mutex_lock+0x1ab/0xaf0 [ 991.844546][T20876] ? rcu_read_unlock+0x8c/0xa0 [ 991.849379][T20876] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 991.854529][T20876] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 991.859709][T20876] ? rtnl_setlink+0x510/0x510 [ 991.864430][T20876] rtnetlink_rcv_msg+0x87c/0xfc0 [ 991.869514][T20876] ? rtnetlink_bind+0x80/0x80 [ 991.874232][T20876] ? __local_bh_enable_ip+0x136/0x1c0 [ 991.879633][T20876] ? lockdep_hardirqs_on+0x94/0x140 [ 991.884902][T20876] ? __local_bh_enable_ip+0x136/0x1c0 [ 991.890408][T20876] ? _local_bh_enable+0xa0/0xa0 [ 991.895302][T20876] ? __dev_queue_xmit+0x26b/0x37f0 [ 991.900440][T20876] ? __dev_queue_xmit+0x26b/0x37f0 [ 991.905592][T20876] ? __dev_queue_xmit+0x1c61/0x37f0 [ 991.910844][T20876] ? __dev_queue_xmit+0x26b/0x37f0 [ 991.916008][T20876] ? ref_tracker_free+0x68c/0x840 [ 991.921073][T20876] ? __copy_skb_header+0x3ba/0x4f0 [ 991.926235][T20876] ? refcount_inc+0x70/0x70 [ 991.930771][T20876] ? memcpy+0x3c/0x60 [ 991.934791][T20876] ? __copy_skb_header+0x3ba/0x4f0 [ 991.939964][T20876] ? __skb_clone+0x480/0x790 [ 991.944632][T20876] netlink_rcv_skb+0x1fb/0x450 [ 991.949436][T20876] ? rtnetlink_bind+0x80/0x80 [ 991.954158][T20876] ? netlink_ack+0x1170/0x1170 [ 991.958975][T20876] ? netlink_deliver_tap+0x2e/0x1b0 [ 991.964241][T20876] netlink_unicast+0x74d/0x8d0 [ 991.969072][T20876] netlink_sendmsg+0x8ad/0xbd0 [ 991.973890][T20876] ? netlink_getsockopt+0x550/0x550 [ 991.979147][T20876] ? aa_sock_msg_perm+0x94/0x150 [ 991.984123][T20876] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 991.989450][T20876] ? security_socket_sendmsg+0x7c/0xa0 [ 991.994955][T20876] ? netlink_getsockopt+0x550/0x550 [ 992.000190][T20876] ____sys_sendmsg+0x5be/0x970 [ 992.005029][T20876] ? __sys_sendmsg_sock+0x30/0x30 [ 992.010093][T20876] ? __import_iovec+0x315/0x500 [ 992.014996][T20876] ? import_iovec+0x6f/0xa0 [ 992.019563][T20876] ___sys_sendmsg+0x2a2/0x360 [ 992.024282][T20876] ? try_to_wake_up+0x6ae/0x1080 [ 992.029261][T20876] ? __sys_sendmsg+0x290/0x290 [ 992.034154][T20876] __se_sys_sendmsg+0x1bb/0x2a0 [ 992.039045][T20876] ? __x64_sys_sendmsg+0x80/0x80 [ 992.044046][T20876] ? trace_sys_enter+0x22/0x80 [ 992.048854][T20876] do_syscall_64+0x4c/0xa0 [ 992.053326][T20876] ? clear_bhb_loop+0x60/0xb0 [ 992.058053][T20876] ? clear_bhb_loop+0x60/0xb0 [ 992.062772][T20876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 992.068700][T20876] RIP: 0033:0x7f6ccbf9aeb9 [ 992.073150][T20876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.092788][T20876] RSP: 002b:00007f6cccdc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 992.101237][T20876] RAX: ffffffffffffffda RBX: 00007f6ccc215fa0 RCX: 00007f6ccbf9aeb9 [ 992.109242][T20876] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000e [ 992.117516][T20876] RBP: 00007f6ccc008c1f R08: 0000000000000000 R09: 0000000000000000 [ 992.125539][T20876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.133537][T20876] R13: 00007f6ccc216038 R14: 00007f6ccc215fa0 R15: 00007ffe9cfc9a38 [ 992.141573][T20876] [ 992.144619][T20876] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 992.151924][T20876] CPU: 1 PID: 20876 Comm: syz.4.5333 Not tainted syzkaller #0 [ 992.159495][T20876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 992.169627][T20876] Call Trace: [ 992.172933][T20876] [ 992.175910][T20876] dump_stack_lvl+0x188/0x24e [ 992.180629][T20876] ? memcpy+0x3c/0x60 [ 992.184645][T20876] ? show_regs_print_info+0x12/0x12 [ 992.189882][T20876] ? load_image+0x400/0x400 [ 992.194438][T20876] panic+0x2e5/0x730 [ 992.198374][T20876] ? bpf_jit_dump+0xd0/0xd0 [ 992.202951][T20876] __warn+0x2f8/0x4f0 [ 992.206961][T20876] ? kcov_remote_start+0x54d/0x7e0 [ 992.212104][T20876] ? kcov_remote_start+0x54d/0x7e0 [ 992.217268][T20876] report_bug+0x2ba/0x4f0 [ 992.221627][T20876] ? kcov_remote_start+0x54d/0x7e0 [ 992.226780][T20876] handle_bug+0x3a/0x70 [ 992.230989][T20876] exc_invalid_op+0x16/0x40 [ 992.235526][T20876] asm_exc_invalid_op+0x16/0x20 [ 992.240401][T20876] RIP: 0010:kcov_remote_start+0x54d/0x7e0 [ 992.246150][T20876] Code: ff ff 4c 89 ff be 03 00 00 00 e8 6e 60 8e 02 e9 f0 fa ff ff e8 34 15 aa 08 f7 c3 00 02 00 00 0f 84 df fa ff ff e9 5a fc ff ff <0f> 0b e8 bc 29 aa 08 89 c0 48 c7 c7 70 b1 02 00 48 03 3c c5 80 f9 [ 992.265883][T20876] RSP: 0018:ffffc90004b1e270 EFLAGS: 00010002 [ 992.271998][T20876] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 992.279993][T20876] RDX: dffffc0000000000 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0d20 [ 992.287990][T20876] RBP: ffffc90004b1e4d0 R08: dffffc0000000000 R09: 1ffffffff215e854 [ 992.295988][T20876] R10: dffffc0000000000 R11: fffffbfff215e855 R12: ffff8880b8f2b170 [ 992.303989][T20876] R13: ffffffff81827b9b R14: ffff88802e43bb80 R15: 0000000000000000 [ 992.311994][T20876] ? kcov_remote_start+0x8b/0x7e0 [ 992.317080][T20876] ieee80211_rx_list+0x504/0x2e60 [ 992.322171][T20876] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 992.328368][T20876] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 992.334389][T20876] ? read_lock_is_recursive+0x10/0x10 [ 992.339828][T20876] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 992.345769][T20876] ? ieee80211_rx_napi+0xd0/0x3d0 [ 992.350860][T20876] ieee80211_rx_napi+0x1ae/0x3d0 [ 992.355834][T20876] ? ieee80211_rx_list+0x2e60/0x2e60 [ 992.361155][T20876] ? skb_dequeue+0x120/0x150 [ 992.365779][T20876] ieee80211_handle_queued_frames+0x105/0x1b0 [ 992.371906][T20876] ? ieee80211_stop_device+0x12/0xa0 [ 992.377228][T20876] ieee80211_stop_device+0x27/0xa0 [ 992.382369][T20876] ieee80211_do_stop+0x1724/0x1e20 [ 992.387568][T20876] ? __mutex_lock+0x1ab/0xaf0 [ 992.392276][T20876] ? ieee80211_sdata_stop+0x80/0x80 [ 992.397523][T20876] ? mutex_lock_nested+0x10/0x10 [ 992.402518][T20876] ? __local_bh_enable_ip+0x136/0x1c0 [ 992.407951][T20876] ? do_raw_spin_unlock+0x11d/0x230 [ 992.413214][T20876] ieee80211_stop+0x432/0x4a0 [ 992.417948][T20876] ? dev_deactivate_many+0x244/0xcb0 [ 992.423269][T20876] ? ieee80211_open+0x200/0x200 [ 992.428175][T20876] __dev_close_many+0x1d1/0x2b0 [ 992.433099][T20876] ? dev_close_many+0x400/0x400 [ 992.437986][T20876] ? call_rcu+0x6a8/0x990 [ 992.442348][T20876] ? lockdep_hardirqs_on+0x94/0x140 [ 992.447587][T20876] dev_close_many+0x21f/0x400 [ 992.452312][T20876] ? __dev_open+0x430/0x430 [ 992.456860][T20876] ? rcu_force_quiescent_state+0x230/0x230 [ 992.462719][T20876] dev_close+0x154/0x210 [ 992.467011][T20876] ? __dev_close_many+0x2b0/0x2b0 [ 992.472095][T20876] ? vlan_vids_del_by_dev+0x29e/0x2f0 [ 992.477516][T20876] team_add_slave+0x181b/0x2870 [ 992.482401][T20876] ? rtmsg_ifinfo_build_skb+0xdf/0x180 [ 992.487938][T20876] ? team_netpoll_cleanup+0xf0/0xf0 [ 992.493179][T20876] ? dev_get_flags+0x1c0/0x1c0 [ 992.497992][T20876] ? mutex_is_locked+0xe/0x40 [ 992.502702][T20876] do_setlink+0xd3a/0x3e60 [ 992.507186][T20876] ? _printk+0xda/0x130 [ 992.511370][T20876] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 992.517569][T20876] ? load_image+0x400/0x400 [ 992.522125][T20876] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 992.527897][T20876] ? perf_trace_preemptirq_template+0x268/0x320 [ 992.534175][T20876] ? mark_lock+0x94/0x320 [ 992.538543][T20876] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 992.544995][T20876] ? lock_chain_count+0x20/0x20 [ 992.549887][T20876] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 992.556077][T20876] ? lockdep_hardirqs_on+0x94/0x140 [ 992.561309][T20876] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 992.567506][T20876] ? validate_linkmsg+0x3db/0x4c0 [ 992.572572][T20876] rtnl_newlink+0x177c/0x2080 [ 992.577391][T20876] ? rtnl_newlink+0x551/0x2080 [ 992.582239][T20876] ? rtnl_setlink+0x510/0x510 [ 992.586954][T20876] ? trace_raw_output_contention_end+0xd0/0xd0 [ 992.593144][T20876] ? rcu_is_watching+0x11/0xa0 [ 992.597951][T20876] ? trace_contention_end+0x5f/0x170 [ 992.603276][T20876] ? __mutex_lock+0x1ab/0xaf0 [ 992.608003][T20876] ? rcu_read_unlock+0x8c/0xa0 [ 992.612824][T20876] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 992.617978][T20876] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 992.623121][T20876] ? rtnl_setlink+0x510/0x510 [ 992.627823][T20876] rtnetlink_rcv_msg+0x87c/0xfc0 [ 992.632814][T20876] ? rtnetlink_bind+0x80/0x80 [ 992.637538][T20876] ? __local_bh_enable_ip+0x136/0x1c0 [ 992.642943][T20876] ? lockdep_hardirqs_on+0x94/0x140 [ 992.648165][T20876] ? __local_bh_enable_ip+0x136/0x1c0 [ 992.653591][T20876] ? _local_bh_enable+0xa0/0xa0 [ 992.658484][T20876] ? __dev_queue_xmit+0x26b/0x37f0 [ 992.663623][T20876] ? __dev_queue_xmit+0x26b/0x37f0 [ 992.668779][T20876] ? __dev_queue_xmit+0x1c61/0x37f0 [ 992.674020][T20876] ? __dev_queue_xmit+0x26b/0x37f0 [ 992.679179][T20876] ? ref_tracker_free+0x68c/0x840 [ 992.684263][T20876] ? __copy_skb_header+0x3ba/0x4f0 [ 992.689413][T20876] ? refcount_inc+0x70/0x70 [ 992.693965][T20876] ? memcpy+0x3c/0x60 [ 992.697986][T20876] ? __copy_skb_header+0x3ba/0x4f0 [ 992.703222][T20876] ? __skb_clone+0x480/0x790 [ 992.707856][T20876] netlink_rcv_skb+0x1fb/0x450 [ 992.712678][T20876] ? rtnetlink_bind+0x80/0x80 [ 992.717389][T20876] ? netlink_ack+0x1170/0x1170 [ 992.722222][T20876] ? netlink_deliver_tap+0x2e/0x1b0 [ 992.727466][T20876] netlink_unicast+0x74d/0x8d0 [ 992.732295][T20876] netlink_sendmsg+0x8ad/0xbd0 [ 992.737102][T20876] ? netlink_getsockopt+0x550/0x550 [ 992.742336][T20876] ? aa_sock_msg_perm+0x94/0x150 [ 992.747316][T20876] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 992.752670][T20876] ? security_socket_sendmsg+0x7c/0xa0 [ 992.758169][T20876] ? netlink_getsockopt+0x550/0x550 [ 992.763406][T20876] ____sys_sendmsg+0x5be/0x970 [ 992.768229][T20876] ? __sys_sendmsg_sock+0x30/0x30 [ 992.773289][T20876] ? __import_iovec+0x315/0x500 [ 992.778179][T20876] ? import_iovec+0x6f/0xa0 [ 992.782712][T20876] ___sys_sendmsg+0x2a2/0x360 [ 992.787433][T20876] ? try_to_wake_up+0x6ae/0x1080 [ 992.792428][T20876] ? __sys_sendmsg+0x290/0x290 [ 992.797310][T20876] __se_sys_sendmsg+0x1bb/0x2a0 [ 992.802198][T20876] ? __x64_sys_sendmsg+0x80/0x80 [ 992.807197][T20876] ? trace_sys_enter+0x22/0x80 [ 992.811998][T20876] do_syscall_64+0x4c/0xa0 [ 992.816450][T20876] ? clear_bhb_loop+0x60/0xb0 [ 992.821155][T20876] ? clear_bhb_loop+0x60/0xb0 [ 992.825870][T20876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 992.831791][T20876] RIP: 0033:0x7f6ccbf9aeb9 [ 992.836251][T20876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.855976][T20876] RSP: 002b:00007f6cccdc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 992.864425][T20876] RAX: ffffffffffffffda RBX: 00007f6ccc215fa0 RCX: 00007f6ccbf9aeb9 [ 992.872428][T20876] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000e [ 992.880423][T20876] RBP: 00007f6ccc008c1f R08: 0000000000000000 R09: 0000000000000000 [ 992.888414][T20876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.896667][T20876] R13: 00007f6ccc216038 R14: 00007f6ccc215fa0 R15: 00007ffe9cfc9a38 [ 992.904697][T20876] [ 992.908315][T20876] Kernel Offset: disabled [ 992.912722][T20876] Rebooting in 86400 seconds..