last executing test programs: 1.446118788s ago: executing program 1 (id=3131): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b501000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000402be16ad10a48b243ccc40806d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb775505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d36c62785f32ecc294a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fcd097728955cf04fec692b01fadfc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab61a19"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.123265318s ago: executing program 3 (id=3134): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0xfffffffffffffffd, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x3d4}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x500, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000480)={'ip_vti0\x00', 0x1}) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESHEX=r2, @ANYRES32, @ANYRES32=r2], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, r3}, 0x38) setsockopt$sock_attach_bpf(r2, 0x1, 0x46, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000042c0)="86", 0x1}, {&(0x7f00000002c0)="794ab6f05259d1b3bd29a47757ca01b92304ad7ac7dece9d204c4b1eea2feb32c12013dc3fdf2ae40958dc", 0x2b}, {&(0x7f0000000340)="d94469a91874fde3d54cf0261ed019a1743de9ea6aeb3a48c84fe243355bc50d49c475f6d7a83e162ee4ce52ba34872f5e0b62e54f0a669d25e869930f3f5858fc7ac5b45884996460645187518e98e83d588712c97a64a4806cdc8053118fbd297dd87bfb7675df60e9c6bb3ad691f5e2448ab0f83f31ebcbffcefdc4a23f8d01de480e6fccdb9923918a967f67c55799ecf0f6aaccbbeba00809f8977a0a5b", 0xa0}], 0x3}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f00000000c0), 0x4) close(r5) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(0x4) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10001, 0x7ff, 0x0, 0x5, 0x0, 0x4, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r9, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="2e0000003b000511d25a80698c6394090124fc602f6e35401000018025581d00d1bd000000000001000000000000", 0x2e}, {&(0x7f0000000700)="3e4424ae52e757e7a61b12d0e5e6e165a612aba533c6477cbc17d9f0df92230a72c9d5bc71054fd7a5b6a1e0312bdc2f87b20a190b199a80a0c83aa84befff27ea6a520643fda65e530462", 0x4b}, {&(0x7f0000000780)="f578bc2907bc3e303cc57aa02a6be08a6490eb433f18d45a88433f8be56f0239fe76df2f082aaec85c4a0429934d45e7daff53d01584c0f617c6b23bdcf4a4d784a4c1c8b745c77dfb042e9d924b265784b5eff65d84799f54fb58cdbdae38d7a70b1ceee00a0cc693179a0df6d5e542a850b172b909118e94926d805df4e6e34465cf797c25b60597fa66c9570f573eafd6d4d316fa1e41", 0x98}], 0x3, 0x0, 0x0, 0x39c}, 0x4) 1.123026238s ago: executing program 1 (id=3135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40503c2b, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{}, {0x95, 0x0, 0x0, 0xa00}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94) 1.122037368s ago: executing program 0 (id=3136): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007110b300000000009500009f1ae97d4b"], 0x0}, 0x94) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700), 0x8) (async, rerun: 64) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x5, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000001304000000005f5f"], 0x0, 0x28, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r0, 0x20, &(0x7f0000000840)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) close(r1) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x60e79, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1200000016000000080000000200", @ANYRES32=0x0], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f00000002c0)="468db75efeb4706248c7300a000000216b4bafcd6e6eb260c830610e3d4db08b1d084dff56e4b0805a98006341bbe876a117af4a2a9e05dd9aa35d8f4ae5f530bd4cf98e10766061723ef2126a652ce3f663424b60e6cd93fad4ff2e4df8aff6be77776a2348"}, 0x20) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5c31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0) (async) close(r4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03"], 0xffdd) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (rerun: 32) 1.121943118s ago: executing program 1 (id=3137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffc56aaaf8130f647c00b7030000500dff80850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x3c, &(0x7f0000000040)=""/60, 0x41100, 0x24, '\x00', 0x0, 0x40000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.121546718s ago: executing program 3 (id=3138): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1000000000000001, 0x12) (async) write$cgroup_int(r1, &(0x7f0000000200)=0x1000000000000001, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x20, 0x0, 0xc, 0x1}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x7}, 0x28) socket$kcm(0x2, 0x2, 0x0) (async) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000640)=r3, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'wg0\x00'}) 1.074110899s ago: executing program 0 (id=3139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000003f000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000a70500000800000085000000a50000009500000000f8ff00"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 968.65696ms ago: executing program 1 (id=3141): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000001101000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 968.008939ms ago: executing program 0 (id=3142): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup, 0x33, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0xffffffb0}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0x1}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x85) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) 947.830386ms ago: executing program 3 (id=3143): r0 = socket$kcm(0x29, 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@bloom_filter={0x1e, 0x3, 0xd, 0x5, 0x309f, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0xb}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001200)={&(0x7f0000000000)="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", &(0x7f0000000100)=""/4096, &(0x7f0000001100)="7ad38059ba496150f6122c5ad91875010a08d4ad98fb8fbad5f008eef74b1bc2c12f889210a463420e82ac216d9c7e85ecf1", &(0x7f0000001140)="4e518e28fa11562be1", 0x1, r1}, 0x38) socketpair(0x1f, 0x2, 0x2, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_clone(0x0, &(0x7f0000001280)="2d6cf7b6e60221763fa20438e6e6ee8acc9806f4e96472d2800900e1a3fb3e42fbd8cbe33d90f6e58f62bd813c86912bb891d4a1ee7746b15ca784bf12942e74f9eda51f12840b34c0c41e497c07416225c7820524e81be4490ff3f2a4104779f6f1dbe1cd1a7919e054509fbfb9a662b81fb6e7af1bcec3a54f5e7a15315cc47f0faeb74c695f6c1bded09a5e20b5562b3d995d069f9f200384e08eaac084b193787af7b5946dcdea3d6d80c876a00894f4d697b623e4654f4f268ab938ce789099612cc0d40265ca3412ee13d45e57077ac9580409705e1865d2f5c9b7cd4b8a9602c1e1aedd584af50082a7ebc27a042840a16de2adb6c2a654c2b650f20fce2d7bdbd9adb9106ecf1c8a7af37a8ad918a278bfdb6bcaeb215b8641abb23932d0499fdf81fa9e913811c52d32f8782d7c3863557a7051e3e99cc442459f152ba67837243abc3a3330012ecda4f426d75f77309a65befa93b8bb77414d43f46acb5d94eb9591b41692764d8da1365e2f206cda9b2e8c8fb8173b43095ed36202d243f19c8ac049aefa49467352822a30ceabe13120e9b827643f2090704d103044b29a670e734db9ff149a639ac973a9df943db8e41d00dd8ea0b08e4a22c27530725c83a8f2be6e9da1b4b3b34a25a371133a310c15a717d31998650f7daf466ade7bd3198fbc1a5eb1e93e69585255b87f0e3aec7699c1e1c899942f4bf7a5213b5790c2253b21da95e978eff0fcbfb400e920ba86d7430cf9f97897776a3fdc87e967d505de7428c927b8250362b6bb966841afb9193c73ccea8d3d44219c80d398a8901e4df291d041cbcd9593c86b055e46b3d23c5f1e0927cf52532193cf155e33bbdbfe9d98f0a25e2fd8108c70bf47f85e6811be17731a48cbe33237fb03a96a92141cf1759878ca9a898cf4d7733268e23b1df133ba5bdba2c77c18d5edbe653d55aa7c45aebb27d2d272d7b249d68382f2bc5cacf2b8aaab14bf6485c0625832fefe542e2e5f6a35addbe22c182178526c980dcd18b6e60f77c934522960a390793185e76e77b91b66a9ecdfc8e41a733a9341fbec5baac21beccbd0af34a3a8b960d72f61900f3437dfeb7cb8f27b7428748a47644e214767809621e1c0be2320500b56fb0dced6ee7fe509358cf2d8341e44471d92de85718df9b87c77171f07040f3df573d64fb84849dc22407b5547e1f446548691bedd63c04446de0bffc3410c7ba9841a4adc2c3a3647d53a9e86c720f91e324d11690ae1d5109fc8f2fcf94acfdca14c414410ae705e5823dae3f7068e39dbbd6ab0b5336d0e986c241d6f4df26287ffd0c89edb900687232337e96338bdf0096ac63c3e3547356c1437094fd3f97f59e10a43e0d05f5c90e4c1b6158f7237bd3d97afad251db5ab389c1a9356148b08683aa797e0335b818d49a196c508fee7062b96ed9e7a30f28ec0f392559550f67335c4cb600d6819c1a896ef77dff0db32f6ad105dd93c9a6e3297122cfc17016b6c0bf2a95b12cdd4cb382425ee601d4c8635eac38408a682944f7cf6315bfc36d8c64678c7b7638db9c9e5d8d689a321475d6a8534b203a09168bc8930cc7681bb9d18c12d679992d7074d0675211c92b41c09c21fafaa407dfaefe920d65751731fc6773e524e820c396c16ba6ade9062e091810906e94228d589d6cf04a953fe792038cb544b3f617c8d571a32d952f25c6ef1ee3943fe22d58153da1c20e17b52adfe7d3f93d426f520c2ed424b3d13423fe379caeea500b32bae073cd247ca8b8620578598e7568d4e4db2ef2dcfe5527c859e9998d637c6e744802fd0ba7903493775fdb2e54b1ca0850e40fc0a329a4a8cc2659a17c0fcc41dd74a25890dd8d9287f518f070640642ae2e3277835a15d1b0afea347055120929da77b83f57214b2a89f7be015d64a6952db1e1723a397f5ad6a5f1cee90f94769e6bedb0032da2278b0272b151cb020d85113dd0151bef982ec8bb9e3e25d491343f80b1299253e4f1287df5ec1410d7cfe5cc9df6cd842ee557156861b76618a90b997d9acbdb3c2845c30241c1cdd5d60c386b7bebd6716d7530f806df737db357cb67f2c93b5c628d8c9c542cea086282d89ec5c28be9e45328fcd71c5fd6339838f4ec1b29d3c9da4d29c0641658ac5a782fdfdf895b8c4aab556a380b1d5b1bff66ec1e2830dc1bdcfc09afea535899a97f7b839906ce212eaee9af099046821064e126ba9e953495cced58b37559587bd39bafef6dd2a892b229a9778b6ea4c6120cc8191768b8bede89b16289185aea71ae3118ee29b2d3bd3a82cdfba484e54dcef04a45ec72c08b3dd08d9384518b5891090b35f131e5ac22748ad38dabd80e9f3fb190c4fc056f107084ca9318f7e40fc5daa46f5951c2edbb772697835349025e5a0fa52e22b206cf44deb2db101f44331f266c525ed99e0a64caad3e27e24d080ebcfaf692a16ce736c58f8c831d288efb365716955c3b52cee77de79a1a9b2d36610edc83ec93a87806742cae66fdf43bba425dfcca825dd106a3318a5fc1d36c3e904030b31e4fa9ae3ae04b153dcb2d1bd50c0dfa442eed9c1556b15eaa5b7b6d000b638e00e5cdddc4fa535488df6e574d8f84a0ffa84927428dc5148c0da557c7512dfb970e74968e3ba31b39c51202a0e62c3b3cfe09657623f28aa631b868b95807858732d3a1fb75380ef277cc609f9dfec0478fbdf235dce268e62390f04ef1a249a27522a905f52f221470f0518b097c6a7119aa5f425b585f154af0549c2d5aaf279440a4d879058d8271b920a5a6fd1bc19b35d33aa09b233cf66a9a28df03a0949007e9ebeb1e3cfe2ca02d75a694c0d741787b05103dacaf8c63ec6ec50c71705c3a8edd3a7590e81f5c2bb82434e5a3f9c111121d9a3922d930540015604e9c5033a712dbad064b9854c9a3d138478291bd6cf606583dee79279fa951a862173e27402efde5771126355fc029084aaa60cc0175fdef3f7fb2b338218ab9450515f0f581babda4f4155931a262b69833922bcfa28da29f296205ee2e7de225eb2741520f1f936e1e4f488689d806e12480d31a241bda1935ad165195255adc290af5175aa1a07e08c59163a8e1a3cbe31a00815dcc072bfa2d98691a49d7f62bd3a2c2aa3cccf6902e391a176fda9521f58ff529bdc6d48dccb795a376222aec4f2eba24c5f92c2c482c5bdc0e7b36251f739585c3e9ad7cafcd65298b05b5415c0c1b83fd043d627a20c335b097fa2cf772c212208377ef322f0159eae63bb4e8d883fc322cee6c41ff9cb65eeefe48f11ae0d53abdfa0e4a454fc04682a53ec9574ce9791370bce9af7ea63ebde3b4d615a527c91870a45787442c44159bf31267402e1464ed33ab7cf5962e553ba2e61c94370c1a7f785053e971e315c4d7ed3056bffda2e06a567ddafa2c783654d8b366b8b06e4db989ac4881fd6607d6f26ea814876062f8a3f453e129d65a74623237952fc63c7bbe2d68c4c6ed4aca67a08ecd00e740f10c30395f368504f4254918e69cb773384896f2721ef561c7f5978b6a61ccb94c4a3d4723923679aaaa415497072eef5fbd386b5d7e581dbb57c8898ab4f5fe2e7d01586e95e586defbbb4e76ec5c198852debce0906fcf8e7d9c5b4b27be15e99862d4a846f6a7c6eacc1324975569d4c6ec186bca0f839e50eb06cbe377bc16ae77caf6551759e6a7345c6d1725c2fd20c61e43b2a02e3fef64e2efad59f09000734f786139c995b433896dc84d87b6640f7d0af66cf18be68d3f7fe4025607dd2a07caaa2aa866954a366d082b815981e6272c928e8f648c18d2649e378f63fed96c618a480078a2f3d495f3b6d025abec15ee9a6edb607567b3e252c4ca41c4efcfdb8b5f10dcf637530c7f9010b2f6fa5eb7316c602c458748388a0ac5b270cf20da890019f2ab1fcba7447b025652abd27c8e7e5f74afc19c06478537a4f120e15cf13a4b37bbd9165591e0e02bb6d61b92469c016a71be557b43e2ec47b17ce62ccb2581b51e62c61901fc3be2a13e064ada61e2f6f5a4e0d91dc381b1f122b826d70034a311e670cab590f46be4139145fc1a68b5e2c2c8596154984d1df40bceebacdd25b2a1771373153932cf01dd3a5e9ceea26e383fbb9aa6a9d9a5f0b5dbf9f4a5f2a6d7626a2dde10a05d2cfa4e4d4f5961bde233bf8088e87af9009c55da7643658a2140ab7d1eebd6fb3305b087163b22efe321e90ad0ea8b92a1724443c611c18d099ec00cc23d2a95be51b2f150370e0d4cf740af5ffa6730c1e48b3f77b138dfbc300896c7c44f6eb9411e4090d70c5143244317a763b64ab69cfc42d8e2c1b6d756bbdc7400e5d269f5a83a3c04b2e83aa6274ce2e1fc6bf02542274b8026a38aa4f232b71b34deb3ff05123cfd875ca9cd27d5cb48862ff851a871441c9d485a4bf807fd133efa6c70267ef4bb8c6b9b7135c0b3bf617d3c82272b82e964613139a4b58adcfb1bdae4ac2eab3b4ab20dfcaec1990ec19593ba14310663d97e715cc701048b60b5ce5c8feb8d82f6edada345e1e9f4cf1818135f55973600a61a4f5ad54386094117544f0608b622ca7d00edf57dbeec5a4abb66ea40bbef666940ea2682974e9b1fac78a13552084ebc8972d262da1a549d790bdd99b6dc4843ba0f7c30a98c5d57fe8719beec3d51b210de30262bb328cb2adb5651098a0035e92809e7dd1f926095276b2e4968296ac9a970a6b5d5c5a23571075b18faea4b4715b75d95e8e6cab766ae9767d5bdfbb32f0cf8799bf3ff8e78052c3fa897184111a2e811ab31f264e016c0c8bc5ed460837d3fa2146fdbb97150ca3c676581f10326a0ef664788dec8b33ced5b12c6ac7d8791c29e7801f7afc1b05049bd7826fe9b0d7bafffabde948623fd698e5f5a7a8a82b67c936de53380102094ed6e7858e6d645d8d2a96e1f69ce5d18c37e73b0af6d80a3fd4cd63ffbe32e78d4418074032ea07dfe27750a03c8f31a279614db90d05c3d4f50fba66d5737f8dfb126b740e30327374eebb65b370b74be8c033a8864aba29ce9bdc90d5d14765ea25d9dfd2bfd26f63e7ba1f18173e96d221ee3f8f4736fb114a4d8fd7cffd671b82ac67bbdc15b84275526c13e592647e19be675b1c4d6aadb45e6ee6fd04781ee0459f6c147d855451dcf18ec3880ebcb6b58b9069e6c51ceeeb7c909927f93b5903cf78e15847e5573f3bd657d14a21bb93df6089d4b566cdb0604436390d5c7c8df34a2c69142670709ecbf37acf38aa00cb9e3939b9851444fd8a2b135b3ca475277adc1a0e9039464383bac9c305e94391c9647b31554d099924322ce5a0d13293b7c58ac7ed1e904db273de086c0e0520d11f03601a84ba61077a2618b846d25d01c31120babd0d723f05e15a672f7189135a22b4f5a9e415d9137a18f0dd6d87e1e6decb9e138b3d1c38feee36f90530bac085761a19565e2ad70ea42be1c457680430e8f6d9d561e4f854e92fb3b0d2945d825e90d3322b0781aa169f1e108271f4e122ea9525fa5ca9d220992cc4470127470a380107420126638c6d4e37540962630dcf6f649e61261bbea5d6f10e3bd53eb26a3d67b4ec650575fe931608b9be184061dd3899d7c29119c98e6c5d7be4eca90d0ef1c361c57dec5349c42e4db9ec59e0d415b10a15f101a145dc48229b2317ca274e52e74a3122e2161bae9fc0c8f4bf41d93c68f9e4594f68aaacafe0ad0ae7681bac52b70eb58adcf8b6f88c1ffd1d03cc1ca0dd120b0e5fef7a89698d47", 0x1000, &(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300)="4953b742ecbedfee71e84c4ad69f80fbaaa0b1002be76460eb26b3990112496f03c542073e3a371ac29f67ed6aba92ee5b7a8706789ad15d2cd825f7b040abd464854ffb9a28be03c7d0f64d4c39e59cbfcc92d6d3c796cc2c1db0bec626facca30fbd46720b9607d496aaf2f221205940bd36ad5c") r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002380)='ns/pid\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000023c0)={0x0, 0x80, 0x5, 0x3, 0x4, 0x59, 0x0, 0x2, 0x2, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x8, 0x3}, 0x180, 0x7f, 0x8, 0x6, 0x4, 0x8, 0xff81, 0x0, 0x1, 0x0, 0x5}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000024c0)={r5, 0x58, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) close(r5) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000026c0)={r1, &(0x7f0000002500)="c5c202e26c1b68ac1ebada9023b9f550dc8b267928130b6c39b6da948dcca9057abb4245cf9639c3fa61ee6fbd341d480b5e617f7390d8bd9680dfa92edf6e80d7f5997dedd6a27bcb03950f48c35897761b41beb8c46c9e1f1f8391bd535f0522b64ba1d71398c8046c01d93d4c11ad0172c69c3fb15dbd99c8d8e858a9bb93a45e91bdd6937345f80c9a84f183bd88f6f4381c7edb3fa771efea60b2421123a3f020048fd85147b911435613af2899da63fc6b8d408471c9d76b3c69360c9883b7e7da8115854bd8264247e8545e049864f6946321854163", &(0x7f0000002600)=""/158}, 0x20) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002780)=@o_path={&(0x7f0000002740)='./file0\x00', 0x0, 0x0, r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002800)={{r5, 0xffffffffffffffff}, &(0x7f0000002700), &(0x7f00000027c0)=r7}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002840)='blkio.bfq.io_queued\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$cgroup_type(r9, &(0x7f0000003e00), 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000003ec0)={&(0x7f0000002880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000002900)="4ba8f440f1594c3e6464396b91be3b20d02191027ac4d656bd0523b88875ab70f184d4776f02126320b7", 0x2a}, {&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000003940)="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", 0xfa}, {&(0x7f0000003a40)="de8b470409cc1074fefc17b90f2769796ef1bc56eca6a112dbde474a76d8a4b5946e76ed593a2f6ae5cf57ef64bc82ffd7057939f5f16d7b8b709d9e793a025308b6e2e700b2da506cb22324af377a5e2681b88f87dd626dad1df8a3981139193e050d0a74c5e94bb2d19dd09f5b04b5ce49d3fe41613c08bdac0e40a6664409d1835d723d1c7e1f7bf37655eadb09c8c419e15a6e7828874b8d1e785dd85a0382beca1619200fc97249c1", 0xab}, {&(0x7f0000003b00)="2437ebd481c52ae74622fd914525294203d08c5280f4519260439560e720f501898e51b17ff646fc5a76af9dfe7b46cb9a81d71ea9e8626eef5a7be2f5e51903347c8d85b538fb49d422f8f6de40ceb639251dbf33bcdcc3861dd0b1966d", 0x5e}, {&(0x7f0000003b80)="067f7e6e24a058d6203012", 0xb}, {&(0x7f0000003bc0)="b04036259b62e58b62d4e7243453bac246967392e47a7da583ec5f7875c10c0c2c2aac32a9f66bc65d0910f1f8ed28adf47af482f370aa7276b54e", 0x3b}, {&(0x7f0000003c00)="aa5aa5714c2121c521a31bd7ad1993dc2472ede2e731ed4f1e2496bdbde95f7af4828b6fb176823a2cccc0e7f36b1d36016277600bd9e46d0dcd559c5890eeb81cacf38513c5e627bc053282dd88d0b982b03c6227105161c1163867d6f9adbaf1a76b8756373a926f004091c72dd5bd7caaefe2c22a66a9812777476ef0ab053f63a73a595a", 0x86}, {&(0x7f0000003cc0)="e788c6e884304d3e5a160f8a0dbb1cc64fc655", 0x13}], 0x9, &(0x7f0000003e40)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee01, 0xee00}}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [r3, r8, r10, r9, r0, r11, r1]}}], 0x60, 0x1}, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000003f40)=@generic={&(0x7f0000003f00)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000003fc0)=@generic={&(0x7f0000003f80)='./file0\x00'}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004000)={@fallback=r11, r9, 0x19, 0x0, 0x0, @void, @value=r7}, 0x20) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000004080)=@generic={&(0x7f0000004040)='./file0\x00', 0x0, 0x8}, 0x18) r13 = openat$cgroup_ro(r9, &(0x7f00000040c0)='memory.current\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000004100)={r12, r13}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000004140)=@bloom_filter={0x1e, 0x1, 0x1ff00, 0x40, 0x2800, r13, 0x0, '\x00', r6, r13, 0x1, 0x5, 0x2, 0x7}, 0x50) r14 = openat$cgroup(r13, &(0x7f00000041c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r14, &(0x7f0000004200)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r13) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000004240)={r13}) r15 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000004680)={&(0x7f0000004280)=@pptp={0x18, 0x2, {0x3, @rand_addr=0x64010102}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004300)="d298b495a63d3bfe27b11a84ace3a08034e49af89e760eee98e2302658e879dc2ae3aa99e86e4d348974e2274e82d1d0963ffe77fa3e792411f54d8c4d0de957fa55df3361e2b12e148faa511770414d5fbd7e274e034162222f0ad801652a48bdf62569035f44d5f4c2bddf6d719627bc0bf3a95391d9fedc84b6e3dec0572bdfd917220ab47bcd8b5b42f0456270794e900c6c0ebf216c3e47cf1f4df1aafcf40fb221cb28a6722b8517587859e32d7e3a323c536e3910f3850a8c5be58218caabe8155ec486e4a09b63daa91d440ed91755acdcc0cf29417b5e2631322da5b152440b665ff824a21aa12aa2fce3ee2830682694d46de74a", 0xf9}, {&(0x7f0000004400)=';', 0x1}, {&(0x7f0000004440)}], 0x3, &(0x7f00000044c0)=[{0xb8, 0x116, 0x7, "adbb8e6421554de34408dbc583d8d3354c15b25a499206163ee9185582ba433e1a09483e8020e9f267dc20f23c73faa32770a078d3483787c8984c0bb1703c069d9e822ec6d1077874907b8f996c84e03fc09b56c2b35e1353d9c5d7b5efb67ebc9295c85b5061ef0bfd2a68d429e6d09b93c405f291af75f98dec27d4ea738f45619014828bc9d75f729e0f0bf73967f02261f687e7895d2029d7ee1e3b0ba2e50598c34b10"}, {0xa0, 0x10e, 0x1, "bb4d287803f2547f3fd212d1cb82a49316161656bb40e8244f528c754f1c2bd864e5c806ed7e2963eaf011a5206d452c712152174720018c4a0b823642c43587194bf956e852da88e6ff98fa250d16b62cf4c2e215997b89fd97e6ee94002d37f30aeef4a206ca43681b993b32919e47a91970517313041cd001c1bd3bc23115c7a98684beed65a760e0feaaf2212f"}, {0x58, 0x1, 0x59, "89848db436d8355217d5030c059f26abff3c7d0d0415245b94f439c24dab3509ec309d6993a8a03d2eb1ca9d967980df52b656fbb667db923cff310ad386efda7875e1"}], 0x1b0}, 0x40008c0) perf_event_open$cgroup(&(0x7f0000004700)={0x5, 0x80, 0x2, 0x3, 0x0, 0x82, 0x0, 0xe7, 0x99180, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000046c0), 0x8}, 0x8024, 0x0, 0x0, 0x7, 0x8, 0x3, 0x3ff, 0x0, 0xfffffe00, 0x0, 0x6}, r13, 0x9, r13, 0x0) 881.045483ms ago: executing program 1 (id=3144): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b70800f8ff0000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000003000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000}, 0x50) 816.017651ms ago: executing program 2 (id=3145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x15, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000ff7fffff850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010010008500000082000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000710c0000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) 710.251482ms ago: executing program 0 (id=3146): r0 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0xfffffffffffffffe, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x8044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x5, 0x8, 0x9b9b, 0x6fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f, 0x61, 0x2e, 0x30]}}, 0x0, 0x38}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000000)=0x5) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x19) ioctl$TUNSETLINK(r4, 0x400454cd, 0x312) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0xfffffffe}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x4a, &(0x7f0000000040)=r8, 0x4) openat$cgroup_pressure(r8, 0x0, 0x2, 0x0) ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f0000000080)=0x6) 709.393832ms ago: executing program 3 (id=3147): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0xfffffffffffffffd, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x3d4}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x500, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000480)={'ip_vti0\x00', 0x1}) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESHEX=r2, @ANYRES32, @ANYRES32=r2], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, r3}, 0x38) setsockopt$sock_attach_bpf(r2, 0x1, 0x46, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000042c0)="86", 0x1}, {&(0x7f00000002c0)="794ab6f05259d1b3bd29a47757ca01b92304ad7ac7dece9d204c4b1eea2feb32c12013dc3fdf2ae40958dc", 0x2b}, {&(0x7f0000000340)="d94469a91874fde3d54cf0261ed019a1743de9ea6aeb3a48c84fe243355bc50d49c475f6d7a83e162ee4ce52ba34872f5e0b62e54f0a669d25e869930f3f5858fc7ac5b45884996460645187518e98e83d588712c97a64a4806cdc8053118fbd297dd87bfb7675df60e9c6bb3ad691f5e2448ab0f83f31ebcbffcefdc4a23f8d01de480e6fccdb9923918a967f67c55799ecf0f6aaccbbeba00809f8977a0a5b", 0xa0}], 0x3}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f00000000c0), 0x4) close(r5) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(0x4) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10001, 0x7ff, 0x0, 0x5, 0x0, 0x4, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r9, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="2e0000003b000511d25a80698c6394090124fc602f6e35401000018025581d00d1bd000000000001000000000000", 0x2e}, {&(0x7f0000000700)="3e4424ae52e757e7a61b12d0e5e6e165a612aba533c6477cbc17d9f0df92230a72c9d5bc71054fd7a5b6a1e0312bdc2f87b20a190b199a80a0c83aa84befff27ea6a520643fda65e530462", 0x4b}, {&(0x7f0000000780)="f578bc2907bc3e303cc57aa02a6be08a6490eb433f18d45a88433f8be56f0239fe76df2f082aaec85c4a0429934d45e7daff53d01584c0f617c6b23bdcf4a4d784a4c1c8b745c77dfb042e9d924b265784b5eff65d84799f54fb58cdbdae38d7a70b1ceee00a0cc693179a0df6d5e542a850b172b909118e94926d805df4e6e34465cf797c25b60597fa66c9570f573eafd6d4d316fa1e41", 0x98}], 0x3, 0x0, 0x0, 0x39c}, 0x4) 709.052081ms ago: executing program 2 (id=3148): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5000}, 0x90) 640.458199ms ago: executing program 1 (id=3149): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x1, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x11, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x4}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc) socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000380)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)={r7}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, 0x0, 0x0) 594.08469ms ago: executing program 2 (id=3150): socket$kcm(0x22, 0x2, 0x21) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f0000000000000100000000000000000014000000000000000000000002000000000000000000000014000000000000000000000002f22fff7f00000000000000110000000000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a00"/158], 0xf}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x8, 0x3, 0x1, 0x5, 0x0, 0x2, 0x400, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0x2}, 0x101000, 0x1, 0x5, 0x3, 0x5, 0x8d70, 0xf001, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 447.882033ms ago: executing program 3 (id=3151): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xe9) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={&(0x7f0000000200)="7392eedf6c894af6db987c9d4e41ff88cc1fd59b0151dc67e71745d26ac9ca9f9990132124dcb2519411877db846842992d01d3a6637a6365b30272b7526c84d65e4c98fb181a285e39633c1bd2d5bdc150f47f72265d3b48f09f9647193a4ffac3d80786bbf73d0bff54e9ce7c4f4c24d0cab69af2eb6e1b84536ffe679b31aa6ade1e2476316d171438e936f1338ee2cb4016eb4557212812d8a0d2ea0b2570cc374a8fdb6d6f8f0e28a53828aec3d983401f458751c888efb", &(0x7f00000002c0)=""/251, &(0x7f00000003c0), &(0x7f0000000400)="82889a1f18bcab114f0b8ee2f485b745c6d94b1c9d28e1dd86ac472e844a116747b9276adc443be0436d64", 0x5, r4}, 0x38) r5 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r6 = getpid() write$cgroup_pid(r5, &(0x7f0000000500)=r6, 0x12) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000540), 0x2, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1a, &(0x7f0000000580)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @ldst={0x2, 0x2, 0x2, 0x4, 0x9, 0xffffffffffffffc0, 0xffffffffffffffff}, @exit, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f0000000680)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r4, r4], &(0x7f0000000740)=[{0x2, 0x3, 0xa, 0x6}, {0x4, 0x4, 0x8, 0xa}], 0x10, 0x5a62}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x4, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x63d810d8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000880)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x8, 0x8, 0x7c3}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000940)=[r4, r1, r4, r1, r4], &(0x7f0000000980)=[{0x2, 0x5, 0x9, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@ifindex=0x0, 0x32, 0x0, 0xfffffffb, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0], 0x0}, 0x40) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={&(0x7f0000000c00)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000c80)=@raw=[@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0xb, 0x9, 0x7, 0x2, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x4, 0x0, 0xb36597ee12d32a07, 0x100}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff}], &(0x7f0000000d00)='GPL\x00', 0x6, 0xb2, &(0x7f0000000d40)=""/178, 0x40f00, 0x29, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x3, 0xe, 0x1, 0x285}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[0x1, r4, r1, r1, r1, r1, r4, r1, r4, r1], &(0x7f0000000ec0)=[{0x5, 0x5, 0xf}, {0x0, 0x5, 0x1, 0x9}, {0x0, 0x3, 0x8, 0x8}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@map=r11, r7, 0x2c, 0x6, r8, @void, @value=r12, @void, @void, r10}, 0x20) openat$cgroup_int(r0, &(0x7f0000000fc0)='memory.max\x00', 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80, '\x00', r9, r1, 0x3, 0x0, 0x5}, 0x50) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000010c0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001080)={@ifindex=r9, r7, 0x6, 0x10, r7, @void, @value=r13, @void, @void, r10}, 0x20) r14 = openat$cgroup_ro(r0, &(0x7f0000001100)='memory.current\x00', 0x0, 0x0) recvmsg$unix(r14, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001140)=""/55, 0x37}, {&(0x7f0000001180)=""/12, 0xc}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/167, 0xa7}, {&(0x7f0000002280)=""/241, 0xf1}], 0x5, &(0x7f0000002400)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002840)={{r17, 0xffffffffffffffff}, &(0x7f00000027c0), &(0x7f0000002800)=r16}, 0x20) r25 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x11, 0x22, &(0x7f0000002500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0xd, 0x9, 0x5, 0xffffffffffffffe0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}, @ldst={0x1, 0x0, 0x0, 0xb, 0x1, 0xffffffffffffffc8, 0xffffffffffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, r23, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r19}}]}, &(0x7f0000002640)='GPL\x00', 0x7, 0xb6, &(0x7f0000002680)=""/182, 0x41100, 0x10, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002740)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000002780)={0x5, 0xf, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002900)=[r20, r21, r1, r24, r18, r25, r22], &(0x7f0000002940)=[{0x1, 0x2, 0x8, 0x4}], 0x10, 0x5}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000002a40), 0x8401, 0x0) openat$cgroup_int(r18, &(0x7f0000002a80)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000002b00), 0x8) 400.575914ms ago: executing program 0 (id=3152): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x4008080) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x11e, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x81000000}, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 400.081474ms ago: executing program 2 (id=3153): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33) recvmsg(r0, 0x0, 0x12022) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000570200b702000014000000b7030000000000008500000086000000bf090000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffdd, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94) 329.063721ms ago: executing program 0 (id=3154): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c12d8f714000000002f1eafbcf706e105000000894f000f1102ee1680ca8286cee844000000000019", 0x2b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x2000000}, 0x40010002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702002008000000c50300000000410085000000720000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000084000000000000000000007ea5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 310.950168ms ago: executing program 3 (id=3155): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000010000000000000000000000370001000000000095002b43990800125e000000000000"], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x40000000000000, 0x4}, 0x0, 0x701, 0x43a1bd76, 0x0, 0x5, 0x6, 0xa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x18, &(0x7f0000000100), 0x120) recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000000000031f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001a2ac15ed0fa7bd3a74d39449b27c22017b826223b33fe548b633451b4a4e62cb0da6ee11b15d50463afb0173faf5c61e7982d01a063be05b83e8f9dea1351f6c01f34acbdd4a1ea3ba17d9b8c08f7597d45c34871f387ca8faf7617924c410b5f0ac07d506f652f81d28cdadc0fa91806f5aec38cffcfae1e3d15ee34e053208948b52c07841a3089104e7a176e87420cfb2761d37603884abae2262bde16f5ab8ebdbfbe1d2936ca18d74edf452d6f909df7b447", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) 127.574974ms ago: executing program 2 (id=3156): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x22) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xf, 0x0, &(0x7f0000000ac0)="3d25ab555b19c4cbd0017085080040", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 15) 0s ago: executing program 2 (id=3157): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620700000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0xdb, &(0x7f0000000700)=""/219}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0x84, 0x1}], 0x10}, 0x8844) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="1811181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000bf9800000000000056080000030000008500000007000000b7000000000000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) (async) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c031a02000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100, 0x1}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0xc}, 0x10}, 0x94) kernel console output (not intermixed with test programs): mac_address [ 339.943048][T11509] syz.0.2092 (11509) used greatest stack depth: 18984 bytes left [ 340.024519][T11538] netlink: 'syz.0.2098': attribute type 10 has an invalid length. [ 340.044250][T11538] team0: Device wg1 is of different type [ 340.267188][T11547] netlink: 'syz.0.2102': attribute type 21 has an invalid length. [ 340.685283][T11561] netlink: 'syz.0.2109': attribute type 10 has an invalid length. [ 340.743546][T11562] netlink: 'syz.0.2109': attribute type 10 has an invalid length. [ 342.035065][ T5772] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 342.268644][T11603] __nla_validate_parse: 1 callbacks suppressed [ 342.268660][T11603] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2121'. [ 342.389376][T11606] validate_nla: 1 callbacks suppressed [ 342.389391][T11606] netlink: 'syz.2.2124': attribute type 21 has an invalid length. [ 342.904551][T11612] delete_channel: no stack [ 343.035112][T11621] netlink: 'syz.2.2130': attribute type 10 has an invalid length. [ 343.053303][T11621] `: Device wg1 is of different type [ 343.428695][T11633] netlink: 'syz.3.2135': attribute type 21 has an invalid length. [ 343.815520][T11654] netlink: 'syz.2.2142': attribute type 2 has an invalid length. [ 343.840842][T11654] netlink: 'syz.2.2142': attribute type 8 has an invalid length. [ 343.849929][T11654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2142'. [ 343.931040][T11651] netlink: 'syz.2.2142': attribute type 2 has an invalid length. [ 343.943520][T11651] netlink: 'syz.2.2142': attribute type 8 has an invalid length. [ 343.951669][T11651] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2142'. [ 344.194945][T11668] netlink: 'syz.1.2149': attribute type 21 has an invalid length. [ 344.434279][T11662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.020555][T11698] netlink: 'syz.3.2161': attribute type 21 has an invalid length. [ 345.217026][T11701] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2162'. [ 346.449468][T11730] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2173'. [ 346.539783][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'. [ 346.650152][T11738] netlink: 'syz.2.2175': attribute type 21 has an invalid length. [ 346.830310][T11740] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2176'. [ 347.113983][T11757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2181'. [ 347.318445][T11756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.453517][T11756] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 347.536262][T11764] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2184'. [ 347.726035][T11772] validate_nla: 3 callbacks suppressed [ 347.726050][T11772] netlink: 'syz.2.2190': attribute type 21 has an invalid length. [ 347.783431][T11774] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2189'. [ 347.849390][ T5772] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 347.911544][T11774] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 347.943600][T11782] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2192'. [ 348.377328][T11797] netlink: 'syz.0.2197': attribute type 10 has an invalid length. [ 348.517301][T11797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.557047][T11797] .`: (slave batadv0): Enslaving as an active interface with an up link [ 349.050499][T11818] netlink: 'syz.1.2205': attribute type 21 has an invalid length. [ 349.469667][T11833] netlink: 'syz.1.2213': attribute type 21 has an invalid length. [ 349.566363][T11831] netlink: 'syz.2.2211': attribute type 10 has an invalid length. [ 349.645309][T11831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.658113][T11831] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 349.862352][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 350.101659][T11854] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2221'. [ 350.568264][T11860] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2223'. [ 350.670047][T11862] À: port 1(vlan0) entered blocking state [ 350.734639][T11862] À: port 1(vlan0) entered disabled state [ 350.790948][T11862] vlan0: entered allmulticast mode [ 350.797805][T11862] vlan0: entered promiscuous mode [ 351.066610][T11873] netlink: 'syz.0.2228': attribute type 21 has an invalid length. [ 351.594299][T11882] syzkaller0: entered promiscuous mode [ 351.599956][T11882] syzkaller0: entered allmulticast mode [ 352.592839][T11897] netlink: 'syz.0.2236': attribute type 21 has an invalid length. [ 352.762538][T11902] netlink: 'syz.3.2238': attribute type 21 has an invalid length. [ 354.943796][T11914] netlink: 'syz.0.2243': attribute type 10 has an invalid length. [ 354.968033][T11914] team0: Device wg1 is of different type [ 355.121706][T11924] netlink: 'syz.0.2247': attribute type 21 has an invalid length. [ 356.124654][T11947] netlink: 'syz.3.2257': attribute type 21 has an invalid length. [ 356.370217][T11951] netlink: zone id is out of range [ 356.381500][T11951] netlink: set zone limit has 8 unknown bytes [ 356.476539][T11955] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2260'. [ 356.620266][T11963] netlink: 'syz.2.2262': attribute type 21 has an invalid length. [ 356.886381][T11961] netlink: 'syz.0.2270': attribute type 10 has an invalid length. [ 356.897284][T11961] batman_adv: batadv0: Removing interface: netdevsim0 [ 356.966003][T11961] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 356.978022][T11974] netlink: 'syz.1.2267': attribute type 21 has an invalid length. [ 357.163497][T11978] FAULT_INJECTION: forcing a failure. [ 357.163497][T11978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.178427][T11978] CPU: 1 PID: 11978 Comm: syz.1.2268 Not tainted syzkaller #0 [ 357.185969][T11978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.196254][T11978] Call Trace: [ 357.199591][T11978] [ 357.202556][T11978] dump_stack_lvl+0x18c/0x250 [ 357.207277][T11978] ? show_regs_print_info+0x20/0x20 [ 357.212510][T11978] ? load_image+0x400/0x400 [ 357.217130][T11978] ? __lock_acquire+0x7d40/0x7d40 [ 357.222180][T11978] ? snprintf+0xe9/0x140 [ 357.226456][T11978] should_fail_ex+0x39d/0x4d0 [ 357.231173][T11978] _copy_to_user+0x2f/0xa0 [ 357.235620][T11978] simple_read_from_buffer+0xe7/0x150 [ 357.241031][T11978] proc_fail_nth_read+0x1e8/0x260 [ 357.246093][T11978] ? proc_fault_inject_write+0x360/0x360 [ 357.251850][T11978] ? fsnotify_perm+0x271/0x5e0 [ 357.256875][T11978] ? proc_fault_inject_write+0x360/0x360 [ 357.262711][T11978] vfs_read+0x28b/0x970 [ 357.266894][T11978] ? kernel_read+0x1e0/0x1e0 [ 357.271512][T11978] ? __fget_files+0x28/0x4b0 [ 357.276126][T11978] ? __fget_files+0x28/0x4b0 [ 357.280743][T11978] ? __fget_files+0x43d/0x4b0 [ 357.285460][T11978] ? __fdget_pos+0x2a3/0x330 [ 357.290311][T11978] ? ksys_read+0x75/0x260 [ 357.294728][T11978] ksys_read+0x150/0x260 [ 357.299239][T11978] ? vfs_write+0x990/0x990 [ 357.303742][T11978] ? lockdep_hardirqs_on+0x98/0x150 [ 357.308978][T11978] do_syscall_64+0x55/0xa0 [ 357.313503][T11978] ? clear_bhb_loop+0x40/0x90 [ 357.318278][T11978] ? clear_bhb_loop+0x40/0x90 [ 357.323132][T11978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.329291][T11978] RIP: 0033:0x7f718875cfce [ 357.333803][T11978] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 357.353512][T11978] RSP: 002b:00007f71896c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.362211][T11978] RAX: ffffffffffffffda RBX: 00007f71896c56c0 RCX: 00007f718875cfce [ 357.370186][T11978] RDX: 000000000000000f RSI: 00007f71896c50a0 RDI: 0000000000000004 [ 357.378331][T11978] RBP: 00007f71896c5090 R08: 0000000000000000 R09: 0000000000000000 [ 357.386394][T11978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.394708][T11978] R13: 00007f7188a16038 R14: 00007f7188a15fa0 R15: 00007ffed3e70848 [ 357.402716][T11978] [ 357.447898][T11987] netlink: 'syz.3.2274': attribute type 10 has an invalid length. [ 357.618201][T11996] netlink: 'syz.2.2278': attribute type 21 has an invalid length. [ 358.006753][T11998] netlink: 'syz.3.2280': attribute type 10 has an invalid length. [ 358.081404][T11998] batman_adv: batadv0: Removing interface: netdevsim0 [ 358.131049][T11998] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 358.377808][T12015] FAULT_INJECTION: forcing a failure. [ 358.377808][T12015] name failslab, interval 1, probability 0, space 0, times 0 [ 358.390861][T12015] CPU: 0 PID: 12015 Comm: syz.3.2285 Not tainted syzkaller #0 [ 358.398343][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.408520][T12015] Call Trace: [ 358.412006][T12015] [ 358.414991][T12015] dump_stack_lvl+0x18c/0x250 [ 358.419777][T12015] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.425987][T12015] ? show_regs_print_info+0x20/0x20 [ 358.431376][T12015] ? load_image+0x400/0x400 [ 358.435980][T12015] ? finish_task_switch+0x26a/0x8f0 [ 358.441291][T12015] ? finish_task_switch+0x265/0x8f0 [ 358.446518][T12015] should_fail_ex+0x39d/0x4d0 [ 358.451227][T12015] should_failslab+0x9/0x20 [ 358.455842][T12015] slab_pre_alloc_hook+0x59/0x310 [ 358.461196][T12015] kmem_cache_alloc+0x5a/0x2d0 [ 358.466238][T12015] ? skb_clone+0x1eb/0x370 [ 358.470674][T12015] skb_clone+0x1eb/0x370 [ 358.474936][T12015] bpf_clone_redirect+0x167/0x4a0 [ 358.480016][T12015] bpf_prog_c9d58f5b8698340d+0x5e/0x63 [ 358.485590][T12015] ? perf_output_read+0x370/0x14c0 [ 358.490732][T12015] ? preempt_schedule+0xc0/0xd0 [ 358.495611][T12015] ? bpf_test_run+0x174/0x870 [ 358.500315][T12015] ? preempt_schedule_common+0x82/0xc0 [ 358.505803][T12015] ? schedule_preempt_disabled+0x20/0x20 [ 358.511553][T12015] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 358.517831][T12015] ? lockdep_softirqs_on+0x580/0x580 [ 358.523227][T12015] ? lock_chain_count+0x20/0x20 [ 358.528103][T12015] ? preempt_schedule_thunk+0x1a/0x30 [ 358.533504][T12015] ? __local_bh_disable_ip+0x108/0x1a0 [ 358.538988][T12015] ? __cant_sleep+0x220/0x220 [ 358.543769][T12015] ? __local_bh_enable_ip+0x14b/0x1c0 [ 358.549428][T12015] ? _local_bh_enable+0xa0/0xa0 [ 358.554469][T12015] ? bpf_test_timer_continue+0x135/0x380 [ 358.560294][T12015] ? bpf_test_run+0x174/0x870 [ 358.564996][T12015] bpf_test_run+0x2df/0x870 [ 358.569617][T12015] ? bpf_test_run+0x174/0x870 [ 358.574313][T12015] ? convert___skb_to_skb+0x590/0x590 [ 358.579710][T12015] ? eth_get_headlen+0x210/0x210 [ 358.584779][T12015] ? slab_build_skb+0x25f/0x3f0 [ 358.589739][T12015] ? convert___skb_to_skb+0x3d/0x590 [ 358.595055][T12015] bpf_prog_test_run_skb+0xad2/0x12b0 [ 358.600471][T12015] ? cpu_online+0x60/0x60 [ 358.604822][T12015] bpf_prog_test_run+0x321/0x390 [ 358.609780][T12015] __sys_bpf+0x49d/0x890 [ 358.614040][T12015] ? bpf_link_show_fdinfo+0x390/0x390 [ 358.619472][T12015] ? lock_chain_count+0x20/0x20 [ 358.624342][T12015] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 358.630346][T12015] __x64_sys_bpf+0x7c/0x90 [ 358.634786][T12015] do_syscall_64+0x55/0xa0 [ 358.639228][T12015] ? clear_bhb_loop+0x40/0x90 [ 358.644437][T12015] ? clear_bhb_loop+0x40/0x90 [ 358.649124][T12015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.655032][T12015] RIP: 0033:0x7fca0c39c799 [ 358.659579][T12015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.679359][T12015] RSP: 002b:00007fca0d26e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.687884][T12015] RAX: ffffffffffffffda RBX: 00007fca0c615fa0 RCX: 00007fca0c39c799 [ 358.695969][T12015] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 358.704217][T12015] RBP: 00007fca0d26e090 R08: 0000000000000000 R09: 0000000000000000 [ 358.712292][T12015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.720545][T12015] R13: 00007fca0c616038 R14: 00007fca0c615fa0 R15: 00007ffeaaeb57a8 [ 358.728645][T12015] [ 359.413804][T12036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.421733][T12036] IPv6: NLM_F_CREATE should be set when creating new route [ 359.429193][T12036] IPv6: NLM_F_CREATE should be set when creating new route [ 359.436650][T12036] IPv6: NLM_F_CREATE should be set when creating new route [ 359.462089][T12039] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 359.469280][T12039] syzkaller0: Linktype set failed because interface is up [ 359.477767][T12040] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 359.484175][T12040] syzkaller0: Linktype set failed because interface is up [ 359.583539][T12043] netlink: 'syz.2.2294': attribute type 10 has an invalid length. [ 359.596998][T12043] batman_adv: batadv0: Removing interface: netdevsim0 [ 359.639554][T12043] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 359.881781][T12059] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2299'. [ 361.064513][T12083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2307'. [ 361.082917][T12083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2307'. [ 361.093873][T12080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2307'. [ 362.204906][T12104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.212742][T12104] IPv6: NLM_F_CREATE should be set when creating new route [ 362.220119][T12104] IPv6: NLM_F_CREATE should be set when creating new route [ 362.227631][T12104] IPv6: NLM_F_CREATE should be set when creating new route [ 362.532855][T12123] netlink: 'syz.0.2324': attribute type 2 has an invalid length. [ 362.560969][T12123] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2324'. [ 363.699486][T12136] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2331'. [ 363.916810][T12137] syzkaller0: entered promiscuous mode [ 363.960913][T12137] syzkaller0: entered allmulticast mode [ 364.126529][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.136823][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.148744][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.158259][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.167037][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 364.176111][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.256499][ T5772] Bluetooth: hci4: command tx timeout [ 366.314547][T12157] netlink: 'syz.1.2336': attribute type 10 has an invalid length. [ 366.568887][T10255] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.675401][T10255] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.706164][T12147] chnl_net:caif_netlink_parms(): no params data found [ 366.778070][T10255] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.878087][T10255] bond0: (slave netdevsim0): Releasing backup interface [ 366.898003][T10255] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.003880][T12191] netlink: 'syz.0.2347': attribute type 10 has an invalid length. [ 367.012557][T12147] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.019786][T12191] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2347'. [ 367.034323][T12147] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.043348][T12147] bridge_slave_0: entered allmulticast mode [ 367.050302][T12147] bridge_slave_0: entered promiscuous mode [ 367.116831][T12194] syzkaller0: entered promiscuous mode [ 367.125997][T12194] syzkaller0: entered allmulticast mode [ 367.140374][T12147] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.155138][T12147] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.162958][T12147] bridge_slave_1: entered allmulticast mode [ 367.170459][T12147] bridge_slave_1: entered promiscuous mode [ 367.219456][T12147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.231959][T12147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.409298][T12147] team0: Port device team_slave_0 added [ 368.331719][ T5772] Bluetooth: hci4: command tx timeout [ 368.845246][T12215] delete_channel: no stack [ 369.558772][T12147] team0: Port device team_slave_1 added [ 369.618440][T12147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.641259][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.724730][T12147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.887215][T10255] ip6gretap0 (unregistering): left allmulticast mode [ 369.907745][T10255] ip6gretap0 (unregistering): left promiscuous mode [ 369.923850][T10255] Ÿë: port 2(ip6gretap0) entered disabled state [ 370.031588][T12147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.056652][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.105511][T12147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.125701][T12222] netlink: 'syz.0.2357': attribute type 21 has an invalid length. [ 370.136148][T12222] netlink: 'syz.0.2357': attribute type 1 has an invalid length. [ 370.157525][T12229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2359'. [ 370.410900][ T5772] Bluetooth: hci4: command tx timeout [ 370.856082][T12147] hsr_slave_0: entered promiscuous mode [ 370.879452][T12147] hsr_slave_1: entered promiscuous mode [ 370.906550][T12147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.935496][T12147] Cannot create hsr debugfs directory [ 371.109076][T12261] netlink: 'syz.0.2365': attribute type 10 has an invalid length. [ 371.131811][T12261] team0: Device wg1 is of different type [ 371.426543][T10255] gretap0 (unregistering): left allmulticast mode [ 371.433657][T10255] gretap0 (unregistering): left promiscuous mode [ 371.441138][T10255] Ÿë: port 1(gretap0) entered disabled state [ 371.794144][T12280] netlink: 'syz.1.2370': attribute type 2 has an invalid length. [ 371.836542][T12280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2370'. [ 372.492278][ T5772] Bluetooth: hci4: command tx timeout [ 373.897795][T12316] delete_channel: no stack [ 374.234196][T12147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 374.976677][T12147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 375.189015][T12147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 375.273955][T12147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 375.296314][T12343] netlink: 'syz.0.2383': attribute type 6 has an invalid length. [ 375.376199][T10255] hsr_slave_0: left promiscuous mode [ 375.387599][T10255] hsr_slave_1: left promiscuous mode [ 375.468216][T10255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.489411][T10255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.514673][T10255] bridge_slave_1: left allmulticast mode [ 375.520475][T10255] bridge_slave_1: left promiscuous mode [ 375.541048][T10255] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.567536][T10255] bridge_slave_0: left allmulticast mode [ 375.573356][T10255] bridge_slave_0: left promiscuous mode [ 375.579907][T10255] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.645661][T10255] veth0_macvtap: left promiscuous mode [ 377.997658][T10255] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 378.120072][T10255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.165184][T10255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.420560][T10255] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 378.507117][T10255] bond0 (unregistering): Released all slaves [ 378.604277][T12371] netlink: 'syz.1.2391': attribute type 2 has an invalid length. [ 378.618150][T12371] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2391'. [ 378.895012][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.901665][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.004382][T12147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.094519][T12147] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.183278][T10596] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.190796][T10596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.214257][T10596] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.221676][T10596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.368259][T12400] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2400'. [ 379.818072][T12425] netlink: 'syz.0.2407': attribute type 41 has an invalid length. [ 379.840656][T12147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.900811][T12425] netlink: 'syz.0.2407': attribute type 41 has an invalid length. [ 380.031958][T12147] veth0_vlan: entered promiscuous mode [ 380.063362][T12147] veth1_vlan: entered promiscuous mode [ 380.126500][T12436] netlink: 'syz.0.2411': attribute type 10 has an invalid length. [ 380.152458][T12436] team0: Device wg1 is of different type [ 380.219141][T12147] veth0_macvtap: entered promiscuous mode [ 380.256428][T12147] veth1_macvtap: entered promiscuous mode [ 380.314348][T12147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.371019][T12147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.404563][T12147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.438711][T12147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.481036][T12147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.520911][T12147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.551338][T12147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.581433][T12147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.633845][T12147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.660899][T12147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.669745][T12147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.721186][T12147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.930052][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.966358][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.995658][T10597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.005215][T10597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.139297][T12468] netlink: 'syz.3.2329': attribute type 10 has an invalid length. [ 381.153841][T12468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2329'. [ 381.166752][T12468] ipvlan1: entered promiscuous mode [ 381.183122][T12468] ipvlan1: entered allmulticast mode [ 381.196502][T12468] veth0_vlan: entered allmulticast mode [ 381.222523][T12468] bridge0: port 3(ipvlan1) entered blocking state [ 381.239585][T12468] bridge0: port 3(ipvlan1) entered disabled state [ 381.262877][T12468] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 381.730695][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.739518][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.762896][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.784431][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.808410][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.822244][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 381.844227][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.936880][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.105313][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.277451][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.802437][T12501] netlink: 'syz.2.2430': attribute type 2 has an invalid length. [ 382.837179][T12501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2430'. [ 382.889134][T12479] chnl_net:caif_netlink_parms(): no params data found [ 383.214687][ T59] ip6gretap0 (unregistering): left allmulticast mode [ 383.231939][ T59] ip6gretap0 (unregistering): left promiscuous mode [ 383.249036][ T59] Ÿë: port 1(ip6gretap0) entered disabled state [ 383.781664][T12547] netlink: 'syz.2.2441': attribute type 29 has an invalid length. [ 383.802922][T12532] delete_channel: no stack [ 383.932026][ T51] Bluetooth: hci0: command tx timeout [ 383.952055][T12479] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.959410][T12479] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.997050][T12479] bridge_slave_0: entered allmulticast mode [ 384.006610][T12479] bridge_slave_0: entered promiscuous mode [ 384.022585][T12547] netlink: 'syz.2.2441': attribute type 29 has an invalid length. [ 384.119495][T12479] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.129324][T12479] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.145248][T12479] bridge_slave_1: entered allmulticast mode [ 384.156847][T12479] bridge_slave_1: entered promiscuous mode [ 384.167725][T12545] netlink: 'syz.2.2441': attribute type 29 has an invalid length. [ 384.323752][T12479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.350541][T12479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.957267][T12479] team0: Port device team_slave_0 added [ 384.990399][T12479] team0: Port device team_slave_1 added [ 385.033942][T12570] netlink: 'syz.3.2447': attribute type 13 has an invalid length. [ 385.100322][T12570] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.2447'. [ 385.411087][T12479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.442757][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.534102][T12479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.560147][T12479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.572285][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.660816][T12479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.022597][ T51] Bluetooth: hci0: command tx timeout [ 386.301460][T12479] hsr_slave_0: entered promiscuous mode [ 386.332150][T12479] hsr_slave_1: entered promiscuous mode [ 386.355867][T12479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.365030][T12479] Cannot create hsr debugfs directory [ 386.401520][T12607] netlink: 'syz.0.2455': attribute type 10 has an invalid length. [ 386.591101][T12614] netlink: 'syz.2.2458': attribute type 2 has an invalid length. [ 386.598941][T12614] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2458'. [ 386.783553][T12616] netlink: 'syz.0.2459': attribute type 10 has an invalid length. [ 386.964447][ T59] hsr_slave_0: left promiscuous mode [ 387.021227][ T59] hsr_slave_1: left promiscuous mode [ 387.036998][ T59] bridge_slave_1: left allmulticast mode [ 387.045847][ T59] bridge_slave_1: left promiscuous mode [ 387.057625][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.097032][ T59] bridge_slave_0: left allmulticast mode [ 387.110930][ T59] bridge_slave_0: left promiscuous mode [ 387.133363][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.202104][ T59] veth1_vlan: left promiscuous mode [ 387.211587][ T59] veth0_vlan: left promiscuous mode [ 388.090910][ T51] Bluetooth: hci0: command tx timeout [ 388.375577][T12637] delete_channel: no stack [ 388.737589][ T59] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.796469][ T59] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.108485][ T59] .` (unregistering): Released all slaves [ 389.444839][T12656] netlink: 'syz.0.2474': attribute type 10 has an invalid length. [ 389.468410][T12656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2474'. [ 390.072274][T12684] netlink: 'syz.3.2482': attribute type 39 has an invalid length. [ 390.174930][ T51] Bluetooth: hci0: command tx timeout [ 390.529062][T12694] FAULT_INJECTION: forcing a failure. [ 390.529062][T12694] name failslab, interval 1, probability 0, space 0, times 0 [ 390.590901][T12694] CPU: 1 PID: 12694 Comm: syz.3.2484 Not tainted syzkaller #0 [ 390.598433][T12694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.608708][T12694] Call Trace: [ 390.612124][T12694] [ 390.615241][T12694] dump_stack_lvl+0x18c/0x250 [ 390.620053][T12694] ? show_regs_print_info+0x20/0x20 [ 390.625389][T12694] ? load_image+0x400/0x400 [ 390.628783][T12479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 390.630004][T12694] ? __might_sleep+0xe0/0xe0 [ 390.630042][T12694] ? __lock_acquire+0x7d40/0x7d40 [ 390.646490][T12694] should_fail_ex+0x39d/0x4d0 [ 390.651309][T12694] should_failslab+0x9/0x20 [ 390.656280][T12694] slab_pre_alloc_hook+0x59/0x310 [ 390.661350][T12694] ? tomoyo_encode+0x28b/0x540 [ 390.666236][T12694] ? tomoyo_encode+0x28b/0x540 [ 390.671129][T12694] __kmem_cache_alloc_node+0x53/0x250 [ 390.676564][T12694] ? tomoyo_encode+0x28b/0x540 [ 390.681380][T12694] __kmalloc+0xa4/0x230 [ 390.685819][T12694] tomoyo_encode+0x28b/0x540 [ 390.690557][T12694] tomoyo_realpath_from_path+0x592/0x5d0 [ 390.696258][T12694] tomoyo_path_number_perm+0x248/0x620 [ 390.701782][T12694] ? tomoyo_path_number_perm+0x217/0x620 [ 390.707473][T12694] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 390.712986][T12694] ? ksys_write+0x1c4/0x260 [ 390.717597][T12694] ? __fget_files+0x28/0x4b0 [ 390.722228][T12694] ? __fget_files+0x28/0x4b0 [ 390.726913][T12694] security_file_ioctl+0x70/0xa0 [ 390.731915][T12694] __se_sys_ioctl+0x48/0x170 [ 390.736563][T12694] do_syscall_64+0x55/0xa0 [ 390.741027][T12694] ? clear_bhb_loop+0x40/0x90 [ 390.746097][T12694] ? clear_bhb_loop+0x40/0x90 [ 390.751033][T12694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.757004][T12694] RIP: 0033:0x7f5a13f9c799 [ 390.761460][T12694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.781591][T12694] RSP: 002b:00007f5a14e72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.790145][T12694] RAX: ffffffffffffffda RBX: 00007f5a14215fa0 RCX: 00007f5a13f9c799 [ 390.798163][T12694] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 390.806261][T12694] RBP: 00007f5a14e72090 R08: 0000000000000000 R09: 0000000000000000 [ 390.814445][T12694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.822454][T12694] R13: 00007f5a14216038 R14: 00007f5a14215fa0 R15: 00007ffdbb69a8f8 [ 390.830584][T12694] [ 390.843177][T12479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 390.850087][T12694] ERROR: Out of memory at tomoyo_realpath_from_path. [ 390.869214][T12479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 390.894343][T12479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 391.086994][T12479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.129406][T12479] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.172495][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.179685][ T8795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.230848][T12701] netlink: 'syz.2.2488': attribute type 2 has an invalid length. [ 391.235955][T12704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2489'. [ 391.242294][T12701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2488'. [ 391.262483][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.269587][ T8795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.294005][T12704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2489'. [ 391.307918][T12706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2489'. [ 391.349970][T12704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2489'. [ 391.385965][T12479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.421555][T12704] netlink: 'syz.0.2489': attribute type 1 has an invalid length. [ 391.441031][T12704] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2489'. [ 391.703453][T12716] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2491'. [ 392.010642][T12479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.130245][T12479] veth0_vlan: entered promiscuous mode [ 392.174369][T12479] veth1_vlan: entered promiscuous mode [ 392.290102][T12479] veth0_macvtap: entered promiscuous mode [ 392.345369][T12479] veth1_macvtap: entered promiscuous mode [ 392.442155][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.486680][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.509303][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.557956][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.582139][T12479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.614511][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.640869][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.656798][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.680860][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.693863][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.724857][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.749384][T12479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.774624][T12479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.803604][T12479] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.851173][T12479] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.860018][T12479] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.915374][T12749] netlink: 'syz.3.2499': attribute type 10 has an invalid length. [ 392.932760][T12749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2499'. [ 392.951852][T12749] bridge0: port 3(ipvlan1) entered blocking state [ 392.958361][T12749] bridge0: port 3(ipvlan1) entered disabled state [ 392.989256][T12749] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 393.088633][T12762] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2501'. [ 393.120019][T12762] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 393.136369][T12754] syzkaller0: entered promiscuous mode [ 393.142860][T12754] syzkaller0: entered allmulticast mode [ 396.309820][ T8795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.347202][ T8795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.453849][T10596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.484915][T10596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.551093][T12802] FAULT_INJECTION: forcing a failure. [ 396.551093][T12802] name failslab, interval 1, probability 0, space 0, times 0 [ 396.556714][T12805] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2509'. [ 396.564283][T12802] CPU: 1 PID: 12802 Comm: syz.0.2508 Not tainted syzkaller #0 [ 396.564315][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.564328][T12802] Call Trace: [ 396.564338][T12802] [ 396.564350][T12802] dump_stack_lvl+0x18c/0x250 [ 396.602707][T12802] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.609101][T12802] ? show_regs_print_info+0x20/0x20 [ 396.614445][T12802] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.620792][T12802] should_fail_ex+0x39d/0x4d0 [ 396.625543][T12802] should_failslab+0x9/0x20 [ 396.630283][T12802] slab_pre_alloc_hook+0x59/0x310 [ 396.635357][T12802] ? lockdep_hardirqs_on+0x98/0x150 [ 396.640615][T12802] kmem_cache_alloc+0x5a/0x2d0 [ 396.645545][T12802] ? skb_clone+0x1eb/0x370 [ 396.650035][T12802] skb_clone+0x1eb/0x370 [ 396.654341][T12802] bpf_clone_redirect+0x167/0x4a0 [ 396.659571][T12802] bpf_prog_c9d58f5b8698340d+0x5e/0x63 [ 396.665184][T12802] ? lock_chain_count+0x20/0x20 [ 396.670088][T12802] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 396.676121][T12802] ? preempt_schedule+0xc0/0xd0 [ 396.681116][T12802] ? bpf_test_run+0x174/0x870 [ 396.684573][ T51] Bluetooth: hci4: SCO packet for unknown connection handle 255 [ 396.685825][T12802] ? preempt_schedule_common+0x82/0xc0 [ 396.685869][T12802] ? schedule_preempt_disabled+0x20/0x20 [ 396.704625][T12802] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 396.710757][T12802] ? lockdep_softirqs_on+0x580/0x580 [ 396.716181][T12802] ? lock_chain_count+0x20/0x20 [ 396.721156][T12802] ? preempt_schedule_thunk+0x1a/0x30 [ 396.726566][T12802] ? __local_bh_disable_ip+0x108/0x1a0 [ 396.732219][T12802] ? __cant_sleep+0x220/0x220 [ 396.736913][T12802] ? __local_bh_enable_ip+0x14b/0x1c0 [ 396.742299][T12802] ? _local_bh_enable+0xa0/0xa0 [ 396.747166][T12802] ? bpf_test_timer_continue+0x135/0x380 [ 396.752808][T12802] ? bpf_test_run+0x174/0x870 [ 396.757493][T12802] bpf_test_run+0x2df/0x870 [ 396.762030][T12802] ? bpf_test_run+0x174/0x870 [ 396.766808][T12802] ? convert___skb_to_skb+0x590/0x590 [ 396.772324][T12802] ? eth_get_headlen+0x210/0x210 [ 396.777303][T12802] ? slab_build_skb+0x25f/0x3f0 [ 396.782165][T12802] ? convert___skb_to_skb+0x3d/0x590 [ 396.787553][T12802] bpf_prog_test_run_skb+0xad2/0x12b0 [ 396.792982][T12802] ? cpu_online+0x60/0x60 [ 396.797322][T12802] bpf_prog_test_run+0x321/0x390 [ 396.802278][T12802] __sys_bpf+0x49d/0x890 [ 396.806896][T12802] ? bpf_link_show_fdinfo+0x390/0x390 [ 396.812317][T12802] ? lock_chain_count+0x20/0x20 [ 396.817247][T12802] __x64_sys_bpf+0x7c/0x90 [ 396.821864][T12802] do_syscall_64+0x55/0xa0 [ 396.826294][T12802] ? clear_bhb_loop+0x40/0x90 [ 396.830984][T12802] ? clear_bhb_loop+0x40/0x90 [ 396.835857][T12802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.841848][T12802] RIP: 0033:0x7f4e2a99c799 [ 396.846361][T12802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.866589][T12802] RSP: 002b:00007f4e2b8c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.875113][T12802] RAX: ffffffffffffffda RBX: 00007f4e2ac15fa0 RCX: 00007f4e2a99c799 [ 396.883180][T12802] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 396.891160][T12802] RBP: 00007f4e2b8c9090 R08: 0000000000000000 R09: 0000000000000000 [ 396.899166][T12802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.907161][T12802] R13: 00007f4e2ac16038 R14: 00007f4e2ac15fa0 R15: 00007ffea7d5cfd8 [ 396.915407][T12802] [ 397.572741][T12817] FAULT_INJECTION: forcing a failure. [ 397.572741][T12817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.630953][T12817] CPU: 0 PID: 12817 Comm: syz.0.2512 Not tainted syzkaller #0 [ 397.638488][T12817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.648758][T12817] Call Trace: [ 397.652243][T12817] [ 397.655201][T12817] dump_stack_lvl+0x18c/0x250 [ 397.659926][T12817] ? show_regs_print_info+0x20/0x20 [ 397.665172][T12817] ? load_image+0x400/0x400 [ 397.669828][T12817] ? __might_fault+0xaa/0x120 [ 397.674627][T12817] ? __lock_acquire+0x7d40/0x7d40 [ 397.679792][T12817] should_fail_ex+0x39d/0x4d0 [ 397.684521][T12817] _copy_from_user+0x2f/0xe0 [ 397.688455][T12818] tap0: tun_chr_ioctl cmd 1074025675 [ 397.689133][T12817] get_user_ifreq+0x6b/0x180 [ 397.696009][T12818] tap0: persist enabled [ 397.699086][T12817] sock_ioctl+0x6f1/0x7e0 [ 397.699117][T12817] ? sock_poll+0x3e0/0x3e0 [ 397.699157][T12817] ? bpf_lsm_file_ioctl+0x9/0x10 [ 397.699178][T12817] ? security_file_ioctl+0x80/0xa0 [ 397.722513][T12817] ? sock_poll+0x3e0/0x3e0 [ 397.726940][T12817] __se_sys_ioctl+0xfd/0x170 [ 397.731550][T12817] do_syscall_64+0x55/0xa0 [ 397.735975][T12817] ? clear_bhb_loop+0x40/0x90 [ 397.740744][T12817] ? clear_bhb_loop+0x40/0x90 [ 397.745435][T12817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.751420][T12817] RIP: 0033:0x7f4e2a99c799 [ 397.755927][T12817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.775622][T12817] RSP: 002b:00007f4e2b8c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.784222][T12817] RAX: ffffffffffffffda RBX: 00007f4e2ac15fa0 RCX: 00007f4e2a99c799 [ 397.792327][T12817] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 397.800295][T12817] RBP: 00007f4e2b8c9090 R08: 0000000000000000 R09: 0000000000000000 [ 397.808368][T12817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.816346][T12817] R13: 00007f4e2ac16038 R14: 00007f4e2ac15fa0 R15: 00007ffea7d5cfd8 [ 397.824446][T12817] [ 397.921661][T12818] tap1: tun_chr_ioctl cmd 1074025677 [ 397.938248][T12818] tap1: linktype set to 778 [ 397.964051][T12818] tap0: tun_chr_ioctl cmd 1074025675 [ 397.969611][T12818] tap0: persist enabled [ 398.464448][T12837] netlink: 'syz.1.2519': attribute type 10 has an invalid length. [ 398.479475][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 398.489745][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 398.499671][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 398.509276][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.528725][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 398.537608][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.605016][T12837] team0: Device wg1 is of different type [ 398.821276][T12851] netlink: 'syz.1.2523': attribute type 2 has an invalid length. [ 398.840976][T12851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2523'. [ 398.964021][T10258] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.022858][T12860] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2525'. [ 399.114388][T10258] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.157235][T12860] pim6reg: tun_chr_ioctl cmd 2147767521 [ 399.292148][T10258] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.571085][ T51] Bluetooth: hci2: command tx timeout [ 401.417424][T12876] netlink: 'syz.3.2529': attribute type 28 has an invalid length. [ 401.430921][T12876] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2529'. [ 401.450247][T12879] netlink: 65023 bytes leftover after parsing attributes in process `syz.3.2529'. [ 401.492307][T10258] bond0: (slave netdevsim0): Releasing backup interface [ 401.503935][T10258] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.758662][T12838] chnl_net:caif_netlink_parms(): no params data found [ 401.812114][T12889] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2532'. [ 401.868710][ T51] Bluetooth: hci1: SCO packet for unknown connection handle 255 [ 402.245623][T12899] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2535'. [ 402.283604][T12906] FAULT_INJECTION: forcing a failure. [ 402.283604][T12906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.320407][T12906] CPU: 0 PID: 12906 Comm: syz.3.2538 Not tainted syzkaller #0 [ 402.328374][T12906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.338471][T12906] Call Trace: [ 402.341782][T12906] [ 402.344746][T12906] dump_stack_lvl+0x18c/0x250 [ 402.349643][T12906] ? show_regs_print_info+0x20/0x20 [ 402.354891][T12906] ? load_image+0x400/0x400 [ 402.359438][T12906] ? __might_fault+0xaa/0x120 [ 402.364218][T12906] ? __lock_acquire+0x7d40/0x7d40 [ 402.369474][T12906] should_fail_ex+0x39d/0x4d0 [ 402.374197][T12906] _copy_from_user+0x2f/0xe0 [ 402.378827][T12906] br_dev_siocdevprivate+0x119/0x1540 [ 402.384233][T12906] ? do_raw_spin_unlock+0x121/0x230 [ 402.389542][T12906] ? br_handle_local_finish+0x20/0x20 [ 402.394939][T12906] ? __mutex_lock+0x956/0xcc0 [ 402.399646][T12906] ? __mutex_lock+0x4f9/0xcc0 [ 402.404789][T12906] ? dev_ioctl+0x83c/0x1140 [ 402.409407][T12906] ? mutex_lock_nested+0x20/0x20 [ 402.414386][T12906] ? full_name_hash+0x92/0xe0 [ 402.419302][T12906] ? dev_ifsioc+0x958/0xc40 [ 402.423921][T12906] dev_ioctl+0x84c/0x1140 [ 402.428370][T12906] sock_ioctl+0x74c/0x7e0 [ 402.432732][T12906] ? sock_poll+0x3e0/0x3e0 [ 402.437362][T12906] ? bpf_lsm_file_ioctl+0x9/0x10 [ 402.442428][T12906] ? security_file_ioctl+0x80/0xa0 [ 402.447653][T12906] ? sock_poll+0x3e0/0x3e0 [ 402.452170][T12906] __se_sys_ioctl+0xfd/0x170 [ 402.456796][T12906] do_syscall_64+0x55/0xa0 [ 402.461405][T12906] ? clear_bhb_loop+0x40/0x90 [ 402.466361][T12906] ? clear_bhb_loop+0x40/0x90 [ 402.471235][T12906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.477320][T12906] RIP: 0033:0x7f5a13f9c799 [ 402.481754][T12906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.501644][T12906] RSP: 002b:00007f5a14e72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.510253][T12906] RAX: ffffffffffffffda RBX: 00007f5a14215fa0 RCX: 00007f5a13f9c799 [ 402.518341][T12906] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 402.526421][T12906] RBP: 00007f5a14e72090 R08: 0000000000000000 R09: 0000000000000000 [ 402.534579][T12906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.542830][T12906] R13: 00007f5a14216038 R14: 00007f5a14215fa0 R15: 00007ffdbb69a8f8 [ 402.551032][T12906] [ 402.650960][ T51] Bluetooth: hci2: command tx timeout [ 403.584796][T12838] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.610231][T12838] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.629302][T12838] bridge_slave_0: entered allmulticast mode [ 403.662455][T12838] bridge_slave_0: entered promiscuous mode [ 403.729520][T12838] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.743579][T12838] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.754554][T12838] bridge_slave_1: entered allmulticast mode [ 403.775717][T12838] bridge_slave_1: entered promiscuous mode [ 403.791517][T12937] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2546'. [ 403.844616][ T51] Bluetooth: hci0: SCO packet for unknown connection handle 255 [ 403.910513][T12838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.969401][T12838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.160494][T12838] team0: Port device team_slave_0 added [ 404.180638][T12838] team0: Port device team_slave_1 added [ 404.343126][T12838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.354385][T12838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.390328][T12838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.429552][T12838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.437102][T12838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.443682][T12961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2550'. [ 404.469972][T12838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.600842][T12961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2550'. [ 404.633704][T12965] C: renamed from team_slave_0 (while UP) [ 404.679800][T12965] netlink: 'syz.3.2550': attribute type 3 has an invalid length. [ 404.710918][T12965] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2550'. [ 404.720036][T12965] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 404.740833][ T51] Bluetooth: hci2: command tx timeout [ 404.778945][T12959] netlink: 'syz.3.2550': attribute type 29 has an invalid length. [ 404.833666][T12838] hsr_slave_0: entered promiscuous mode [ 404.850886][T12838] hsr_slave_1: entered promiscuous mode [ 404.877447][T12838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.891415][T12838] Cannot create hsr debugfs directory [ 404.907056][T12959] netlink: 'syz.3.2550': attribute type 29 has an invalid length. [ 404.969612][T12961] netlink: 'syz.3.2550': attribute type 29 has an invalid length. [ 405.029819][T12978] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2555'. [ 405.064920][ T51] Bluetooth: hci1: SCO packet for unknown connection handle 255 [ 405.342459][T12983] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2557'. [ 405.378935][T10258] vlan0: left allmulticast mode [ 405.410840][T10258] vlan0: left promiscuous mode [ 405.415970][T10258] À: port 1(vlan0) entered disabled state [ 405.462716][T10258] hsr_slave_0: left promiscuous mode [ 405.496804][T10258] hsr_slave_1: left promiscuous mode [ 405.510399][T10258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.532670][T10258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.561781][T10258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.569607][T10258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.605784][T10258] bridge_slave_1: left allmulticast mode [ 405.698424][T10258] bridge_slave_1: left promiscuous mode [ 405.723650][T10258] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.745154][T10258] bridge_slave_0: left allmulticast mode [ 405.758489][T10258] bridge_slave_0: left promiscuous mode [ 405.765826][T10258] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.874227][T10258] veth1_macvtap: left promiscuous mode [ 405.879973][T10258] veth1_vlan: left promiscuous mode [ 405.906088][T10258] veth0_vlan: left promiscuous mode [ 405.956808][T13007] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2564'. [ 406.002320][ T51] Bluetooth: hci1: SCO packet for unknown connection handle 255 [ 406.811229][ T51] Bluetooth: hci2: command tx timeout [ 409.737452][T10258] ` (unregistering): Port device team_slave_1 removed [ 409.784842][T10258] ` (unregistering): Port device team_slave_0 removed [ 409.828275][T10258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.878751][T10258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.129111][T10258] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 410.208599][T10258] bond0 (unregistering): Released all slaves [ 410.352407][T13005] netlink: 'syz.3.2560': attribute type 2 has an invalid length. [ 410.360415][T13009] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2560'. [ 410.444747][T13027] netlink: 'syz.0.2569': attribute type 5 has an invalid length. [ 410.703771][T13040] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2571'. [ 410.747500][T13042] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2572'. [ 410.814027][ T51] Bluetooth: hci0: SCO packet for unknown connection handle 255 [ 410.861666][T13040] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2571'. [ 410.926046][T13044] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2571'. [ 411.119576][T13049] netlink: 'syz.3.2573': attribute type 10 has an invalid length. [ 411.178397][T13049] team0: Device wg1 is of different type [ 411.480064][T13069] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2577'. [ 411.746494][T13074] syzkaller0: entered promiscuous mode [ 411.767220][T13074] syzkaller0: entered allmulticast mode [ 411.795770][T13080] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2581'. [ 411.962967][T12838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 413.874576][T12838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 413.885525][T13097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2587'. [ 413.904488][T12838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 413.946018][T12838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 414.221430][T12838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.259699][T12838] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.274249][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.282109][ T8795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.329850][T10255] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.337102][T10255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.429019][T13119] netlink: 'syz.0.2595': attribute type 10 has an invalid length. [ 414.454781][T13119] team0: Device wg1 is of different type [ 414.473947][T13122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2597'. [ 414.862200][T13126] netlink: 'syz.1.2598': attribute type 8 has an invalid length. [ 414.871621][T13126] netlink: 'syz.1.2598': attribute type 1 has an invalid length. [ 414.886385][T13126] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2598'. [ 415.013456][T12838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.119871][T12838] veth0_vlan: entered promiscuous mode [ 415.174728][T12838] veth1_vlan: entered promiscuous mode [ 415.234468][ T51] Bluetooth: hci0: SCO packet for unknown connection handle 255 [ 415.363882][T12838] veth0_macvtap: entered promiscuous mode [ 415.406955][T13156] delete_channel: no stack [ 415.421192][T13156] delete_channel: no stack [ 415.428094][T12838] veth1_macvtap: entered promiscuous mode [ 415.478729][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.511060][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.524834][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.558500][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.582802][T12838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.598736][T13159] netlink: 'syz.0.2605': attribute type 10 has an invalid length. [ 415.618774][T13159] __nla_validate_parse: 1 callbacks suppressed [ 415.618787][T13159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2605'. [ 415.676307][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.698430][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.720813][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.760758][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.780030][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.800840][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.814938][T12838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.831393][T12838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.840496][T12838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.870846][T12838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.879866][T12838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.925822][T13166] netlink: 'syz.1.2608': attribute type 10 has an invalid length. [ 415.979549][T13166] team0: Device wg1 is of different type [ 416.254987][T13187] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2611'. [ 416.328746][T10255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.376918][T10255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.426410][ T8795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.460826][ T8795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.492495][T13195] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2615'. [ 416.721055][T13205] netlink: 'syz.2.2513': attribute type 2 has an invalid length. [ 416.754746][T13205] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2513'. [ 417.315027][T13220] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2623'. [ 417.354326][T13215] syzkaller0: entered promiscuous mode [ 417.359886][T13215] syzkaller0: entered allmulticast mode [ 417.661606][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 417.681507][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 417.692415][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 417.702350][T13229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2624'. [ 417.711902][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 417.713476][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 417.713899][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.771226][ T5772] Bluetooth: hci1: command tx timeout [ 420.531521][T13258] netlink: 'syz.1.2628': attribute type 2 has an invalid length. [ 420.539600][T13258] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2628'. [ 420.723198][ T8795] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.809409][T13281] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2632'. [ 420.936021][ T8795] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.431487][ T8795] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.638167][ T8795] .`: (slave netdevsim0): Releasing backup interface [ 421.717826][ T8795] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.765853][T13314] netlink: 'syz.1.2644': attribute type 10 has an invalid length. [ 421.788584][T13314] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2644'. [ 421.818520][T13314] ipvlan1: entered promiscuous mode [ 421.830880][T13314] ipvlan1: entered allmulticast mode [ 421.839464][T13314] veth0_vlan: entered allmulticast mode [ 421.851067][ T5772] Bluetooth: hci1: command tx timeout [ 421.854454][T13314] bridge0: port 3(ipvlan1) entered blocking state [ 421.886258][T13314] bridge0: port 3(ipvlan1) entered disabled state [ 421.919289][T13314] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 421.963380][T13233] chnl_net:caif_netlink_parms(): no params data found [ 421.997940][T13318] netlink: 'syz.3.2637': attribute type 2 has an invalid length. [ 422.011393][T13318] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2637'. [ 422.311912][T13340] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2641'. [ 422.353115][T13233] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.360489][T13233] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.381050][T13233] bridge_slave_0: entered allmulticast mode [ 422.398858][T13233] bridge_slave_0: entered promiscuous mode [ 422.422251][T13233] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.429587][T13233] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.451066][T13233] bridge_slave_1: entered allmulticast mode [ 422.470996][T13233] bridge_slave_1: entered promiscuous mode [ 422.641901][T13233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.703511][T13233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.069989][T13233] team0: Port device team_slave_0 added [ 423.097758][T13233] team0: Port device team_slave_1 added [ 423.107799][T13365] tap1: tun_chr_ioctl cmd 1074025675 [ 423.124268][T13365] tap1: persist enabled [ 423.130614][T13371] tap1: tun_chr_ioctl cmd 21731 [ 423.238455][T13372] netlink: 'syz.2.2651': attribute type 10 has an invalid length. [ 423.325093][T13372] team0: Device wg1 is of different type [ 423.363078][T13361] tap1: tun_chr_ioctl cmd 1074025675 [ 423.371708][T13361] tap1: persist enabled [ 423.458989][T13377] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2653'. [ 423.504321][T13233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.511959][ T5772] Bluetooth: hci4: SCO packet for unknown connection handle 255 [ 423.533243][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.579879][T13233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.626551][T13233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.633812][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.664503][T13233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.885036][T13233] hsr_slave_0: entered promiscuous mode [ 423.905695][T13233] hsr_slave_1: entered promiscuous mode [ 423.930822][ T5772] Bluetooth: hci1: command tx timeout [ 424.356763][T13404] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2662'. [ 424.378360][T13400] netlink: 185784 bytes leftover after parsing attributes in process `syz.2.2661'. [ 424.410345][T13400] netlink: zone id is out of range [ 424.416960][T13400] netlink: zone id is out of range [ 424.431774][T13400] netlink: zone id is out of range [ 424.437164][T13400] netlink: zone id is out of range [ 424.457030][T13400] netlink: zone id is out of range [ 424.467069][T13400] netlink: zone id is out of range [ 424.474725][T13400] netlink: zone id is out of range [ 424.484621][T13400] netlink: zone id is out of range [ 424.494207][T13400] netlink: zone id is out of range [ 424.512217][T13408] netlink: 'syz.2.2661': attribute type 6 has an invalid length. [ 424.538306][T13408] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2661'. [ 424.609393][T13400] netlink: 'syz.2.2661': attribute type 3 has an invalid length. [ 424.670882][T13400] netlink: 117816 bytes leftover after parsing attributes in process `syz.2.2661'. [ 425.116911][T13417] netlink: 'syz.3.2665': attribute type 21 has an invalid length. [ 425.154814][T13418] netlink: 'syz.3.2665': attribute type 39 has an invalid length. [ 425.417909][T13427] FAULT_INJECTION: forcing a failure. [ 425.417909][T13427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.474914][T13427] CPU: 0 PID: 13427 Comm: syz.1.2668 Not tainted syzkaller #0 [ 425.482625][T13427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.492942][T13427] Call Trace: [ 425.496257][T13427] [ 425.499390][T13427] dump_stack_lvl+0x18c/0x250 [ 425.504119][T13427] ? show_regs_print_info+0x20/0x20 [ 425.509363][T13427] ? load_image+0x400/0x400 [ 425.514008][T13427] ? __lock_acquire+0x7d40/0x7d40 [ 425.519076][T13427] ? snprintf+0xe9/0x140 [ 425.523375][T13427] should_fail_ex+0x39d/0x4d0 [ 425.528114][T13427] _copy_to_user+0x2f/0xa0 [ 425.532591][T13427] simple_read_from_buffer+0xe7/0x150 [ 425.538285][T13427] proc_fail_nth_read+0x1e8/0x260 [ 425.543366][T13427] ? proc_fault_inject_write+0x360/0x360 [ 425.549234][T13427] ? fsnotify_perm+0x271/0x5e0 [ 425.554054][T13427] ? proc_fault_inject_write+0x360/0x360 [ 425.559731][T13427] vfs_read+0x28b/0x970 [ 425.563938][T13427] ? kernel_read+0x1e0/0x1e0 [ 425.568657][T13427] ? __fget_files+0x28/0x4b0 [ 425.573281][T13427] ? __fget_files+0x28/0x4b0 [ 425.577922][T13427] ? __fget_files+0x43d/0x4b0 [ 425.582815][T13427] ? __fdget_pos+0x2a3/0x330 [ 425.587425][T13427] ? ksys_read+0x75/0x260 [ 425.591880][T13427] ksys_read+0x150/0x260 [ 425.596145][T13427] ? vfs_write+0x990/0x990 [ 425.600600][T13427] ? lockdep_hardirqs_on+0x98/0x150 [ 425.605921][T13427] do_syscall_64+0x55/0xa0 [ 425.610495][T13427] ? clear_bhb_loop+0x40/0x90 [ 425.615285][T13427] ? clear_bhb_loop+0x40/0x90 [ 425.620003][T13427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.626014][T13427] RIP: 0033:0x7fad2d75cfce [ 425.630459][T13427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 425.650099][T13427] RSP: 002b:00007fad2e5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.658616][T13427] RAX: ffffffffffffffda RBX: 00007fad2e5f66c0 RCX: 00007fad2d75cfce [ 425.666691][T13427] RDX: 000000000000000f RSI: 00007fad2e5f60a0 RDI: 0000000000000006 [ 425.674675][T13427] RBP: 00007fad2e5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 425.683088][T13427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.691149][T13427] R13: 00007fad2da16038 R14: 00007fad2da15fa0 R15: 00007ffc72f3cc98 [ 425.699147][T13427] [ 425.765081][T13435] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2671'. [ 426.011530][ T5772] Bluetooth: hci1: command tx timeout [ 426.153259][T13446] netlink: 'syz.3.2673': attribute type 29 has an invalid length. [ 426.294341][T13446] netlink: 'syz.3.2673': attribute type 29 has an invalid length. [ 426.375806][ T8795] hsr_slave_0: left promiscuous mode [ 426.386402][ T8795] hsr_slave_1: left promiscuous mode [ 426.404329][ T8795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.430187][ T8795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.440116][ T8795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.448055][ T8795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.460496][ T8795] bridge_slave_0: left allmulticast mode [ 426.474590][ T8795] bridge_slave_0: left promiscuous mode [ 426.480651][ T8795] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.529595][ T8795] veth0_macvtap: left promiscuous mode [ 427.147228][T13477] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2680'. [ 427.180218][ T5772] Bluetooth: hci0: SCO packet for unknown connection handle 255 [ 427.490298][ T8795] team0 (unregistering): Port device team_slave_1 removed [ 427.589084][ T8795] team0 (unregistering): Port device team_slave_0 removed [ 427.633495][ T8795] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.686114][ T8795] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.735296][ T8795] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 427.953575][ T8795] .` (unregistering): (slave batadv0): Releasing backup interface [ 428.057168][ T8795] .` (unregistering): Released all slaves [ 428.443095][T13233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 428.488664][T13233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 428.548767][T13233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 428.579166][T13233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 428.817201][T13502] net_ratelimit: 10 callbacks suppressed [ 428.817216][T13502] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 428.829917][T13502] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 428.957194][T13233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.019546][T13233] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.050458][T10255] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.057773][T10255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.089171][T10255] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.096546][T10255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.251833][T13516] syzkaller0: entered promiscuous mode [ 429.257530][T13516] syzkaller0: entered allmulticast mode [ 430.644062][T13541] delete_channel: no stack [ 431.868065][T13565] netlink: 'syz.2.2699': attribute type 21 has an invalid length. [ 431.888458][T13233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.101512][T13566] netlink: 'syz.2.2699': attribute type 39 has an invalid length. [ 432.269809][T13568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2700'. [ 432.346917][T13233] veth0_vlan: entered promiscuous mode [ 432.366259][T13233] veth1_vlan: entered promiscuous mode [ 432.394030][T13575] FAULT_INJECTION: forcing a failure. [ 432.394030][T13575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.403608][T13233] veth0_macvtap: entered promiscuous mode [ 432.421015][T13575] CPU: 0 PID: 13575 Comm: syz.3.2703 Not tainted syzkaller #0 [ 432.428539][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.439219][T13575] Call Trace: [ 432.442620][T13575] [ 432.445586][T13575] dump_stack_lvl+0x18c/0x250 [ 432.450526][T13575] ? show_regs_print_info+0x20/0x20 [ 432.455834][T13575] ? load_image+0x400/0x400 [ 432.460520][T13575] ? __might_fault+0xaa/0x120 [ 432.465281][T13575] ? __lock_acquire+0x7d40/0x7d40 [ 432.470310][T13575] should_fail_ex+0x39d/0x4d0 [ 432.474991][T13575] _copy_from_user+0x2f/0xe0 [ 432.479576][T13575] bpf_prog_test_run_skb+0x266/0x12b0 [ 432.485031][T13575] ? __fget_files+0x28/0x4b0 [ 432.489816][T13575] ? __fget_files+0x28/0x4b0 [ 432.494435][T13575] ? __fget_files+0x43d/0x4b0 [ 432.499119][T13575] ? cpu_online+0x60/0x60 [ 432.503709][T13575] bpf_prog_test_run+0x321/0x390 [ 432.508667][T13575] __sys_bpf+0x49d/0x890 [ 432.512909][T13575] ? bpf_link_show_fdinfo+0x390/0x390 [ 432.518373][T13575] ? lock_chain_count+0x20/0x20 [ 432.523229][T13575] __x64_sys_bpf+0x7c/0x90 [ 432.528168][T13575] do_syscall_64+0x55/0xa0 [ 432.532589][T13575] ? clear_bhb_loop+0x40/0x90 [ 432.537258][T13575] ? clear_bhb_loop+0x40/0x90 [ 432.541938][T13575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.547917][T13575] RIP: 0033:0x7f5a13f9c799 [ 432.552340][T13575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.572031][T13575] RSP: 002b:00007f5a14e72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 432.580441][T13575] RAX: ffffffffffffffda RBX: 00007f5a14215fa0 RCX: 00007f5a13f9c799 [ 432.588512][T13575] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 432.596580][T13575] RBP: 00007f5a14e72090 R08: 0000000000000000 R09: 0000000000000000 [ 432.604634][T13575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.612709][T13575] R13: 00007f5a14216038 R14: 00007f5a14215fa0 R15: 00007ffdbb69a8f8 [ 432.620973][T13575] [ 432.647148][T13233] veth1_macvtap: entered promiscuous mode [ 432.698525][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.709754][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.722330][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.751616][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.782144][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.796484][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.812294][T13233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.827784][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.840627][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.854018][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.880839][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.894960][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.905828][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.917731][T13233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.929698][T13233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.939530][T13233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.949260][T13233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.980281][T13233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.142952][T10596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.161147][T10596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.212397][ T8818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.229916][ T8818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.501657][T13598] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2711'. [ 433.538180][T13598] openvswitch: netlink: Flow actions attr not present in new flow. [ 433.603959][T13601] syzkaller0: entered promiscuous mode [ 433.609581][T13601] syzkaller0: entered allmulticast mode [ 434.471114][ T5772] Bluetooth: hci2: SCO packet for unknown connection handle 255 [ 436.176175][T13640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2728'. [ 436.352877][T13650] FAULT_INJECTION: forcing a failure. [ 436.352877][T13650] name failslab, interval 1, probability 0, space 0, times 0 [ 436.393496][T13650] CPU: 0 PID: 13650 Comm: syz.2.2731 Not tainted syzkaller #0 [ 436.401071][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.411428][T13650] Call Trace: [ 436.414832][T13650] [ 436.417774][T13650] dump_stack_lvl+0x18c/0x250 [ 436.422479][T13650] ? show_regs_print_info+0x20/0x20 [ 436.428040][T13650] ? load_image+0x400/0x400 [ 436.432571][T13650] ? __might_sleep+0xe0/0xe0 [ 436.437269][T13650] ? __lock_acquire+0x7d40/0x7d40 [ 436.442326][T13650] should_fail_ex+0x39d/0x4d0 [ 436.447341][T13650] should_failslab+0x9/0x20 [ 436.452028][T13650] slab_pre_alloc_hook+0x59/0x310 [ 436.457069][T13650] ? sk_prot_alloc+0xe7/0x210 [ 436.461803][T13650] ? sk_prot_alloc+0xe7/0x210 [ 436.466614][T13650] __kmem_cache_alloc_node+0x53/0x250 [ 436.472052][T13650] ? sk_prot_alloc+0xe7/0x210 [ 436.476748][T13650] __kmalloc+0xa4/0x230 [ 436.481021][T13650] sk_prot_alloc+0xe7/0x210 [ 436.485534][T13650] ? sk_alloc+0x24/0x360 [ 436.489885][T13650] sk_alloc+0x3a/0x360 [ 436.493969][T13650] ? bpf_ctx_init+0x163/0x1a0 [ 436.498828][T13650] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 436.504424][T13650] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 436.509813][T13650] ? __fget_files+0x28/0x4b0 [ 436.514419][T13650] ? __fget_files+0x28/0x4b0 [ 436.519052][T13650] ? __fget_files+0x43d/0x4b0 [ 436.523771][T13650] ? cpu_online+0x60/0x60 [ 436.528402][T13650] bpf_prog_test_run+0x321/0x390 [ 436.533450][T13650] __sys_bpf+0x49d/0x890 [ 436.537804][T13650] ? bpf_link_show_fdinfo+0x390/0x390 [ 436.543233][T13650] ? lock_chain_count+0x20/0x20 [ 436.548242][T13650] __x64_sys_bpf+0x7c/0x90 [ 436.552677][T13650] do_syscall_64+0x55/0xa0 [ 436.557107][T13650] ? clear_bhb_loop+0x40/0x90 [ 436.561802][T13650] ? clear_bhb_loop+0x40/0x90 [ 436.566498][T13650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.572487][T13650] RIP: 0033:0x7fba9699c799 [ 436.577226][T13650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.597023][T13650] RSP: 002b:00007fba97876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 436.605456][T13650] RAX: ffffffffffffffda RBX: 00007fba96c15fa0 RCX: 00007fba9699c799 [ 436.613476][T13650] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 436.621573][T13650] RBP: 00007fba97876090 R08: 0000000000000000 R09: 0000000000000000 [ 436.629818][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.637887][T13650] R13: 00007fba96c16038 R14: 00007fba96c15fa0 R15: 00007ffd035d4b28 [ 436.646016][T13650] [ 436.737764][ T5772] Bluetooth: hci4: SCO packet for unknown connection handle 255 [ 436.870998][T13659] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2736'. [ 436.909235][T13659] bridge_slave_1: default FDB implementation only supports local addresses [ 437.301384][T13670] delete_channel: no stack [ 437.461580][T13684] netlink: 'syz.1.2746': attribute type 29 has an invalid length. [ 437.486920][T13684] netlink: 'syz.1.2746': attribute type 29 has an invalid length. [ 437.513346][T13689] netlink: 'syz.1.2746': attribute type 29 has an invalid length. [ 438.230059][T13707] netlink: 'syz.2.2753': attribute type 17 has an invalid length. [ 438.250120][T13707] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2753'. [ 438.581697][ T5772] Bluetooth: hci2: SCO packet for unknown connection handle 255 [ 438.605821][T13719] netlink: 'syz.1.2758': attribute type 10 has an invalid length. [ 438.624698][T13719] veth1_macvtap: left promiscuous mode [ 438.752927][T13723] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2759'. [ 439.078045][T13735] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2762'. [ 439.137662][T13730] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 439.155909][T13730] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 439.246305][T13742] FAULT_INJECTION: forcing a failure. [ 439.246305][T13742] name failslab, interval 1, probability 0, space 0, times 0 [ 439.269894][T13742] CPU: 0 PID: 13742 Comm: syz.0.2765 Not tainted syzkaller #0 [ 439.277676][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.287928][T13742] Call Trace: [ 439.291224][T13742] [ 439.294178][T13742] dump_stack_lvl+0x18c/0x250 [ 439.298886][T13742] ? show_regs_print_info+0x20/0x20 [ 439.304218][T13742] ? load_image+0x400/0x400 [ 439.308860][T13742] ? __might_sleep+0xe0/0xe0 [ 439.313476][T13742] ? __lock_acquire+0x7d40/0x7d40 [ 439.318540][T13742] should_fail_ex+0x39d/0x4d0 [ 439.323434][T13742] should_failslab+0x9/0x20 [ 439.327989][T13742] slab_pre_alloc_hook+0x59/0x310 [ 439.333324][T13742] ? apparmor_sk_alloc_security+0x77/0x100 [ 439.339234][T13742] __kmem_cache_alloc_node+0x53/0x250 [ 439.344662][T13742] ? apparmor_sk_alloc_security+0x77/0x100 [ 439.350468][T13742] kmalloc_trace+0x2a/0xe0 [ 439.354885][T13742] apparmor_sk_alloc_security+0x77/0x100 [ 439.360522][T13742] security_sk_alloc+0x6e/0xa0 [ 439.365283][T13742] sk_prot_alloc+0x101/0x210 [ 439.369870][T13742] ? sk_alloc+0x24/0x360 [ 439.374112][T13742] sk_alloc+0x3a/0x360 [ 439.378193][T13742] ? bpf_ctx_init+0x163/0x1a0 [ 439.382868][T13742] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 439.388493][T13742] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 439.393954][T13742] ? __fget_files+0x28/0x4b0 [ 439.398536][T13742] ? __fget_files+0x28/0x4b0 [ 439.403119][T13742] ? __fget_files+0x43d/0x4b0 [ 439.407803][T13742] ? cpu_online+0x60/0x60 [ 439.412221][T13742] bpf_prog_test_run+0x321/0x390 [ 439.417180][T13742] __sys_bpf+0x49d/0x890 [ 439.421421][T13742] ? bpf_link_show_fdinfo+0x390/0x390 [ 439.426794][T13742] ? lock_chain_count+0x20/0x20 [ 439.431647][T13742] __x64_sys_bpf+0x7c/0x90 [ 439.436161][T13742] do_syscall_64+0x55/0xa0 [ 439.440681][T13742] ? clear_bhb_loop+0x40/0x90 [ 439.445381][T13742] ? clear_bhb_loop+0x40/0x90 [ 439.450052][T13742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.455940][T13742] RIP: 0033:0x7f55c479c799 [ 439.460358][T13742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.480149][T13742] RSP: 002b:00007f55c29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.488995][T13742] RAX: ffffffffffffffda RBX: 00007f55c4a15fa0 RCX: 00007f55c479c799 [ 439.497268][T13742] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 439.505361][T13742] RBP: 00007f55c29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 439.513441][T13742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.521784][T13742] R13: 00007f55c4a16038 R14: 00007f55c4a15fa0 R15: 00007fff4dda1ed8 [ 439.530049][T13742] [ 439.665384][ T5772] Bluetooth: hci0: SCO packet for unknown connection handle 255 [ 440.027783][T13766] sit0: entered allmulticast mode [ 440.124628][T13766] sit0: entered promiscuous mode [ 440.363817][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.380550][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.928824][T13782] netlink: 'syz.3.2784': attribute type 10 has an invalid length. [ 440.951086][T13782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2784'. [ 440.970549][T13782] bridge0: port 3(ipvlan1) entered blocking state [ 440.982239][T13782] bridge0: port 3(ipvlan1) entered disabled state [ 440.992261][T13782] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 441.571055][ T5772] Bluetooth: hci0: SCO packet for unknown connection handle 255 [ 441.768546][T13812] sit0: entered allmulticast mode [ 441.869768][T13812] sit0: entered promiscuous mode [ 442.503069][T13832] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2802'. [ 442.512898][T13832] openvswitch: netlink: Flow actions attr not present in new flow. [ 442.872997][T13837] netlink: 'syz.1.2806': attribute type 10 has an invalid length. [ 442.907972][T13837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2806'. [ 442.924078][T13837] bridge0: port 3(ipvlan1) entered blocking state [ 442.931484][T13837] bridge0: port 3(ipvlan1) entered disabled state [ 442.983109][T13837] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 443.277392][T13850] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2811'. [ 443.324788][T13850] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 443.355690][T13850] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 443.376154][T13862] sit0: entered allmulticast mode [ 443.459972][T13863] sit0: entered promiscuous mode [ 444.200938][ T5772] Bluetooth: hci2: SCO packet for unknown connection handle 255 [ 444.449077][T13890] netlink: 'syz.2.2823': attribute type 10 has an invalid length. [ 444.480203][T13890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2823'. [ 444.490090][T13890] ipvlan1: entered promiscuous mode [ 444.495564][T13890] ipvlan1: entered allmulticast mode [ 444.503434][T13890] veth0_vlan: entered allmulticast mode [ 444.516850][T13890] bridge0: port 3(ipvlan1) entered blocking state [ 444.541493][T13890] bridge0: port 3(ipvlan1) entered disabled state [ 444.559449][T13890] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 444.635781][T13889] syzkaller0: entered promiscuous mode [ 444.642501][T13889] syzkaller0: entered allmulticast mode [ 445.506646][ T5772] Bluetooth: hci2: SCO packet for unknown connection handle 255 [ 445.744678][T13937] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2843'. [ 445.789439][T13937] openvswitch: netlink: Flow actions attr not present in new flow. [ 446.148372][T13942] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2844'. [ 446.160184][T13942] openvswitch: netlink: Flow actions attr not present in new flow. [ 446.497168][T13944] netlink: 'syz.2.2845': attribute type 29 has an invalid length. [ 447.975269][T13944] netlink: 'syz.2.2845': attribute type 29 has an invalid length. [ 448.425838][T13968] netlink: 'syz.2.2855': attribute type 4 has an invalid length. [ 448.754672][T13970] netlink: 'syz.0.2856': attribute type 29 has an invalid length. [ 448.793299][T13970] netlink: 'syz.0.2856': attribute type 29 has an invalid length. [ 448.992138][T13978] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2859'. [ 449.010872][T13978] openvswitch: netlink: Flow actions attr not present in new flow. [ 449.633711][T14002] FAULT_INJECTION: forcing a failure. [ 449.633711][T14002] name failslab, interval 1, probability 0, space 0, times 0 [ 449.649147][T14001] netlink: 'syz.1.2870': attribute type 10 has an invalid length. [ 449.664306][T14002] CPU: 1 PID: 14002 Comm: syz.2.2871 Not tainted syzkaller #0 [ 449.671829][T14002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.681999][T14002] Call Trace: [ 449.685295][T14002] [ 449.688238][T14002] dump_stack_lvl+0x18c/0x250 [ 449.693036][T14002] ? show_regs_print_info+0x20/0x20 [ 449.698286][T14002] ? load_image+0x400/0x400 [ 449.702821][T14002] ? __might_sleep+0xe0/0xe0 [ 449.707446][T14002] ? __lock_acquire+0x7d40/0x7d40 [ 449.712623][T14002] should_fail_ex+0x39d/0x4d0 [ 449.717440][T14002] should_failslab+0x9/0x20 [ 449.722070][T14002] slab_pre_alloc_hook+0x59/0x310 [ 449.727225][T14002] ? tomoyo_encode+0x28b/0x540 [ 449.732020][T14002] ? tomoyo_encode+0x28b/0x540 [ 449.737081][T14002] __kmem_cache_alloc_node+0x53/0x250 [ 449.742871][T14002] ? tomoyo_encode+0x28b/0x540 [ 449.747756][T14002] __kmalloc+0xa4/0x230 [ 449.752318][T14002] tomoyo_encode+0x28b/0x540 [ 449.757054][T14002] tomoyo_realpath_from_path+0x592/0x5d0 [ 449.762927][T14002] tomoyo_path_number_perm+0x248/0x620 [ 449.768518][T14002] ? tomoyo_path_number_perm+0x217/0x620 [ 449.774167][T14002] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 449.779631][T14002] ? ksys_write+0x1c4/0x260 [ 449.784167][T14002] ? __fget_files+0x28/0x4b0 [ 449.788777][T14002] ? __fget_files+0x28/0x4b0 [ 449.793415][T14002] security_file_ioctl+0x70/0xa0 [ 449.798564][T14002] __se_sys_ioctl+0x48/0x170 [ 449.803170][T14002] do_syscall_64+0x55/0xa0 [ 449.807672][T14002] ? clear_bhb_loop+0x40/0x90 [ 449.812437][T14002] ? clear_bhb_loop+0x40/0x90 [ 449.817244][T14002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.823135][T14002] RIP: 0033:0x7fba9699c799 [ 449.827545][T14002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.847419][T14002] RSP: 002b:00007fba97876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.855922][T14002] RAX: ffffffffffffffda RBX: 00007fba96c15fa0 RCX: 00007fba9699c799 [ 449.864159][T14002] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000004 [ 449.872314][T14002] RBP: 00007fba97876090 R08: 0000000000000000 R09: 0000000000000000 [ 449.880461][T14002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.888538][T14002] R13: 00007fba96c16038 R14: 00007fba96c15fa0 R15: 00007ffd035d4b28 [ 449.896719][T14002] [ 449.903310][T14001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2870'. [ 449.916569][T14001] bridge0: port 3(ipvlan1) entered blocking state [ 449.927801][T14001] bridge0: port 3(ipvlan1) entered disabled state [ 449.970105][T14001] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 449.973007][T14002] ERROR: Out of memory at tomoyo_realpath_from_path. [ 450.195654][T14012] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2875'. [ 450.205575][T14012] openvswitch: netlink: Flow actions attr not present in new flow. [ 450.581843][T14031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2883'. [ 450.593414][T14027] netlink: 'syz.0.2882': attribute type 10 has an invalid length. [ 450.602375][T14027] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2882'. [ 450.614329][T14027] ipvlan1: entered promiscuous mode [ 450.620287][T14027] ipvlan1: entered allmulticast mode [ 450.626340][T14027] veth0_vlan: entered allmulticast mode [ 450.635219][T14027] bridge0: port 3(ipvlan1) entered blocking state [ 450.642483][T14027] bridge0: port 3(ipvlan1) entered disabled state [ 450.653493][T14027] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 450.678686][T14030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2881'. [ 450.879346][T14039] netlink: 'syz.0.2885': attribute type 4 has an invalid length. [ 450.883392][ T5772] Bluetooth: hci0: SCO packet for unknown connection handle 255 [ 450.919760][T14039] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2885'. [ 450.982678][T14039] .`: renamed from bond0 (while UP) [ 451.028864][T14045] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2887'. [ 451.048340][T14045] openvswitch: netlink: Flow actions attr not present in new flow. [ 451.522444][T14050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.530083][T14050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.555513][T14050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.575856][T14050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.645570][T14053] netlink: 'syz.2.2890': attribute type 3 has an invalid length. [ 451.670840][T14053] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.2890'. [ 452.087508][T14065] netlink: 'syz.2.2895': attribute type 10 has an invalid length. [ 452.110537][T14065] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2895'. [ 452.123282][T14065] bridge0: port 3(ipvlan1) entered blocking state [ 452.130064][T14065] bridge0: port 3(ipvlan1) entered disabled state [ 452.148207][T14065] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 452.297984][T14067] syzkaller0: entered promiscuous mode [ 452.341771][T14067] syzkaller0: entered allmulticast mode [ 452.628333][T14082] FAULT_INJECTION: forcing a failure. [ 452.628333][T14082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.647817][T14082] CPU: 0 PID: 14082 Comm: syz.3.2897 Not tainted syzkaller #0 [ 452.655345][T14082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.665741][T14082] Call Trace: [ 452.669068][T14082] [ 452.672130][T14082] dump_stack_lvl+0x18c/0x250 [ 452.676934][T14082] ? show_regs_print_info+0x20/0x20 [ 452.682264][T14082] ? load_image+0x400/0x400 [ 452.686879][T14082] ? __might_fault+0xaa/0x120 [ 452.691673][T14082] ? __lock_acquire+0x7d40/0x7d40 [ 452.696911][T14082] should_fail_ex+0x39d/0x4d0 [ 452.701638][T14082] _copy_from_user+0x2f/0xe0 [ 452.706256][T14082] __sys_bpf+0x23e/0x890 [ 452.710503][T14082] ? bpf_link_show_fdinfo+0x390/0x390 [ 452.716152][T14082] ? lock_chain_count+0x20/0x20 [ 452.721055][T14082] __x64_sys_bpf+0x7c/0x90 [ 452.725813][T14082] do_syscall_64+0x55/0xa0 [ 452.730235][T14082] ? clear_bhb_loop+0x40/0x90 [ 452.734907][T14082] ? clear_bhb_loop+0x40/0x90 [ 452.739755][T14082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.745662][T14082] RIP: 0033:0x7f5a13f9c799 [ 452.750098][T14082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.770229][T14082] RSP: 002b:00007f5a14e72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.778740][T14082] RAX: ffffffffffffffda RBX: 00007f5a14215fa0 RCX: 00007f5a13f9c799 [ 452.786793][T14082] RDX: 0000000000000090 RSI: 00002000000004c0 RDI: 0000000000000005 [ 452.794781][T14082] RBP: 00007f5a14e72090 R08: 0000000000000000 R09: 0000000000000000 [ 452.802757][T14082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.810896][T14082] R13: 00007f5a14216038 R14: 00007f5a14215fa0 R15: 00007ffdbb69a8f8 [ 452.819051][T14082] [ 455.369889][T14115] netlink: 'syz.1.2915': attribute type 10 has an invalid length. [ 455.389830][T14115] team0: Device wg1 is of different type [ 455.418926][T14114] netlink: 'syz.0.2914': attribute type 19 has an invalid length. [ 455.450916][T14114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2914'. [ 456.101550][T14129] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2920'. [ 456.289593][T14138] FAULT_INJECTION: forcing a failure. [ 456.289593][T14138] name failslab, interval 1, probability 0, space 0, times 0 [ 456.302624][T14138] CPU: 0 PID: 14138 Comm: syz.0.2931 Not tainted syzkaller #0 [ 456.310368][T14138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.320644][T14138] Call Trace: [ 456.324120][T14138] [ 456.327160][T14138] dump_stack_lvl+0x18c/0x250 [ 456.331968][T14138] ? show_regs_print_info+0x20/0x20 [ 456.337280][T14138] ? load_image+0x400/0x400 [ 456.341861][T14138] should_fail_ex+0x39d/0x4d0 [ 456.346579][T14138] should_failslab+0x9/0x20 [ 456.351457][T14138] slab_pre_alloc_hook+0x59/0x310 [ 456.352459][T14134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.356487][T14138] ? netif_rx_internal+0x119/0x4e0 [ 456.356513][T14138] kmem_cache_alloc+0x5a/0x2d0 [ 456.356534][T14138] ? skb_clone+0x1eb/0x370 [ 456.356555][T14138] skb_clone+0x1eb/0x370 [ 456.390499][T14138] bpf_clone_redirect+0x167/0x4a0 [ 456.395532][T14138] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 456.401696][T14138] bpf_prog_6d7b890af21d8cfe+0x61/0x66 [ 456.407148][T14138] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 456.412953][T14138] ? perf_trace_preemptirq_template+0x269/0x330 [ 456.419211][T14138] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 456.425210][T14138] ? lockdep_softirqs_on+0x580/0x580 [ 456.430504][T14138] ? lock_chain_count+0x20/0x20 [ 456.435350][T14138] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 456.441596][T14138] ? __local_bh_disable_ip+0x108/0x1a0 [ 456.447149][T14138] ? __cant_sleep+0x220/0x220 [ 456.451851][T14138] ? __local_bh_enable_ip+0x13a/0x1c0 [ 456.457477][T14138] ? _local_bh_enable+0xa0/0xa0 [ 456.462416][T14138] ? bpf_test_timer_continue+0x135/0x380 [ 456.468051][T14138] ? bpf_test_run+0x174/0x870 [ 456.472810][T14138] bpf_test_run+0x2df/0x870 [ 456.477402][T14138] ? bpf_test_run+0x174/0x870 [ 456.482079][T14138] ? convert___skb_to_skb+0x590/0x590 [ 456.487534][T14138] ? eth_get_headlen+0x210/0x210 [ 456.492555][T14138] ? slab_build_skb+0x25f/0x3f0 [ 456.497398][T14138] ? convert___skb_to_skb+0x3d/0x590 [ 456.502672][T14138] bpf_prog_test_run_skb+0xad2/0x12b0 [ 456.508048][T14138] ? cpu_online+0x60/0x60 [ 456.512375][T14138] bpf_prog_test_run+0x321/0x390 [ 456.517309][T14138] __sys_bpf+0x49d/0x890 [ 456.521722][T14138] ? bpf_link_show_fdinfo+0x390/0x390 [ 456.527284][T14138] ? lock_chain_count+0x20/0x20 [ 456.532135][T14138] __x64_sys_bpf+0x7c/0x90 [ 456.536553][T14138] do_syscall_64+0x55/0xa0 [ 456.541057][T14138] ? clear_bhb_loop+0x40/0x90 [ 456.545733][T14138] ? clear_bhb_loop+0x40/0x90 [ 456.550508][T14138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.556479][T14138] RIP: 0033:0x7f55c479c799 [ 456.560906][T14138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.580620][T14138] RSP: 002b:00007f55c29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.589153][T14138] RAX: ffffffffffffffda RBX: 00007f55c4a15fa0 RCX: 00007f55c479c799 [ 456.597313][T14138] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 456.605279][T14138] RBP: 00007f55c29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.613590][T14138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.621832][T14138] R13: 00007f55c4a16038 R14: 00007f55c4a15fa0 R15: 00007fff4dda1ed8 [ 456.629947][T14138] [ 456.672954][T14133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.766596][T14144] netlink: 'syz.2.2924': attribute type 19 has an invalid length. [ 456.777513][T14144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2924'. [ 456.815242][T14148] netlink: 'syz.3.2926': attribute type 21 has an invalid length. [ 457.283498][T14163] netlink: 'syz.1.2932': attribute type 10 has an invalid length. [ 457.320784][T14163] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.367274][T14163] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.635416][T14163] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.643259][T14163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.651624][T14163] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.654452][T14167] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2935'. [ 457.659424][T14163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.714416][T14163] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 458.044945][T14172] netlink: 'syz.3.2936': attribute type 19 has an invalid length. [ 458.061250][T14172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2936'. [ 458.126243][T14174] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2937'. [ 458.409295][T14179] delete_channel: no stack [ 458.536163][T14193] netlink: 'syz.3.2945': attribute type 3 has an invalid length. [ 458.545920][T14193] netlink: 'syz.3.2945': attribute type 16 has an invalid length. [ 458.556261][T14196] netlink: 'syz.0.2943': attribute type 39 has an invalid length. [ 458.557780][T14193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2945'. [ 458.579690][T14195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2944'. [ 458.783851][T14202] syzkaller0: entered promiscuous mode [ 458.789496][T14202] syzkaller0: entered allmulticast mode [ 459.394990][T14217] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.2952'. [ 459.413309][T14217] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 459.450029][T14217] openvswitch: netlink: Message has 4 unknown bytes. [ 461.574412][T14241] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2961'. [ 461.813822][T14254] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2967'. [ 461.994493][T14263] netlink: 'syz.3.2971': attribute type 22 has an invalid length. [ 462.003116][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 462.163048][T14261] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2970'. [ 462.274330][T14277] netlink: 'syz.1.2975': attribute type 10 has an invalid length. [ 462.324638][T14277] team0: Device wg1 is of different type [ 462.383145][T14279] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2976'. [ 462.404162][T14279] bridge_slave_1: default FDB implementation only supports local addresses [ 462.591204][T14289] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2980'. [ 463.157955][T14312] FAULT_INJECTION: forcing a failure. [ 463.157955][T14312] name failslab, interval 1, probability 0, space 0, times 0 [ 463.187127][T14312] CPU: 1 PID: 14312 Comm: syz.2.2989 Not tainted syzkaller #0 [ 463.194923][T14312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 463.205100][T14312] Call Trace: [ 463.208499][T14312] [ 463.211564][T14312] dump_stack_lvl+0x18c/0x250 [ 463.216375][T14312] ? show_regs_print_info+0x20/0x20 [ 463.220101][T14308] IPv6: Can't replace route, no match found [ 463.221605][T14312] ? load_image+0x400/0x400 [ 463.221636][T14312] ? __might_sleep+0xe0/0xe0 [ 463.221656][T14312] ? __lock_acquire+0x7d40/0x7d40 [ 463.242424][T14312] ? mark_lock+0x94/0x320 [ 463.246902][T14312] should_fail_ex+0x39d/0x4d0 [ 463.251715][T14312] should_failslab+0x9/0x20 [ 463.256250][T14312] slab_pre_alloc_hook+0x59/0x310 [ 463.261399][T14312] ? __get_vm_area_node+0x125/0x370 [ 463.266640][T14312] __kmem_cache_alloc_node+0x53/0x250 [ 463.272050][T14312] ? __get_vm_area_node+0x125/0x370 [ 463.277292][T14312] kmalloc_node_trace+0x26/0xe0 [ 463.282269][T14312] __get_vm_area_node+0x125/0x370 [ 463.287407][T14312] __vmalloc_node_range+0x36e/0x1330 [ 463.292984][T14312] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 463.298737][T14312] ? mark_lock+0x94/0x320 [ 463.303452][T14312] ? __lock_acquire+0x1347/0x7d40 [ 463.308781][T14312] ? verify_lock_unused+0x140/0x140 [ 463.314099][T14312] ? free_vm_area+0x50/0x50 [ 463.318620][T14312] ? end_current_label_crit_section+0x170/0x170 [ 463.324969][T14312] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 463.330690][T14312] __vmalloc+0x7a/0x90 [ 463.335027][T14312] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 463.340569][T14312] bpf_prog_alloc_no_stats+0x47/0x440 [ 463.345952][T14312] ? bpf_prog_alloc+0x2b/0x1a0 [ 463.350719][T14312] bpf_prog_alloc+0x3d/0x1a0 [ 463.355580][T14312] bpf_prog_load+0x6eb/0x1670 [ 463.360264][T14312] ? map_freeze+0x420/0x420 [ 463.364896][T14312] ? __might_fault+0xaa/0x120 [ 463.369659][T14312] ? __lock_acquire+0x7d40/0x7d40 [ 463.374712][T14312] ? file_end_write+0x159/0x250 [ 463.379578][T14312] ? __might_fault+0xaa/0x120 [ 463.384265][T14312] ? __might_fault+0xc6/0x120 [ 463.389126][T14312] ? __might_fault+0xaa/0x120 [ 463.394067][T14312] ? bpf_lsm_bpf+0x9/0x10 [ 463.398672][T14312] ? security_bpf+0x7e/0xa0 [ 463.403231][T14312] __sys_bpf+0x5ba/0x890 [ 463.407747][T14312] ? bpf_link_show_fdinfo+0x390/0x390 [ 463.413400][T14312] ? lock_chain_count+0x20/0x20 [ 463.418383][T14312] __x64_sys_bpf+0x7c/0x90 [ 463.422897][T14312] do_syscall_64+0x55/0xa0 [ 463.427402][T14312] ? clear_bhb_loop+0x40/0x90 [ 463.432076][T14312] ? clear_bhb_loop+0x40/0x90 [ 463.436923][T14312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.442815][T14312] RIP: 0033:0x7fba9699c799 [ 463.447348][T14312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.467651][T14312] RSP: 002b:00007fba97876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.476707][T14312] RAX: ffffffffffffffda RBX: 00007fba96c15fa0 RCX: 00007fba9699c799 [ 463.484789][T14312] RDX: 0000000000000085 RSI: 00002000000000c0 RDI: 0000000000000005 [ 463.493022][T14312] RBP: 00007fba97876090 R08: 0000000000000000 R09: 0000000000000000 [ 463.501451][T14312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.509944][T14312] R13: 00007fba96c16038 R14: 00007fba96c15fa0 R15: 00007ffd035d4b28 [ 463.518018][T14312] [ 463.556378][T14312] syz.2.2989: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 463.599963][T14312] CPU: 0 PID: 14312 Comm: syz.2.2989 Not tainted syzkaller #0 [ 463.607685][T14312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 463.617925][T14312] Call Trace: [ 463.621214][T14312] [ 463.624152][T14312] dump_stack_lvl+0x18c/0x250 [ 463.628851][T14312] ? show_regs_print_info+0x20/0x20 [ 463.634066][T14312] ? load_image+0x400/0x400 [ 463.638591][T14312] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 463.645204][T14312] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 463.652070][T14312] warn_alloc+0x246/0x340 [ 463.656436][T14312] ? __get_vm_area_node+0x125/0x370 [ 463.661822][T14312] ? zone_watermark_ok_safe+0x230/0x230 [ 463.667388][T14312] ? rcu_is_watching+0x15/0xb0 [ 463.672347][T14312] ? __get_vm_area_node+0x356/0x370 [ 463.677654][T14312] __vmalloc_node_range+0x393/0x1330 [ 463.682956][T14312] ? mark_lock+0x94/0x320 [ 463.687354][T14312] ? __lock_acquire+0x1347/0x7d40 [ 463.692589][T14312] ? verify_lock_unused+0x140/0x140 [ 463.697899][T14312] ? free_vm_area+0x50/0x50 [ 463.702491][T14312] ? end_current_label_crit_section+0x170/0x170 [ 463.708777][T14312] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 463.714608][T14312] __vmalloc+0x7a/0x90 [ 463.718790][T14312] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 463.724453][T14312] bpf_prog_alloc_no_stats+0x47/0x440 [ 463.729926][T14312] ? bpf_prog_alloc+0x2b/0x1a0 [ 463.734718][T14312] bpf_prog_alloc+0x3d/0x1a0 [ 463.739497][T14312] bpf_prog_load+0x6eb/0x1670 [ 463.744287][T14312] ? map_freeze+0x420/0x420 [ 463.749064][T14312] ? __might_fault+0xaa/0x120 [ 463.753786][T14312] ? __lock_acquire+0x7d40/0x7d40 [ 463.758827][T14312] ? file_end_write+0x159/0x250 [ 463.763691][T14312] ? __might_fault+0xaa/0x120 [ 463.768469][T14312] ? __might_fault+0xc6/0x120 [ 463.773244][T14312] ? __might_fault+0xaa/0x120 [ 463.778106][T14312] ? bpf_lsm_bpf+0x9/0x10 [ 463.782536][T14312] ? security_bpf+0x7e/0xa0 [ 463.787058][T14312] __sys_bpf+0x5ba/0x890 [ 463.791406][T14312] ? bpf_link_show_fdinfo+0x390/0x390 [ 463.797238][T14312] ? lock_chain_count+0x20/0x20 [ 463.802383][T14312] __x64_sys_bpf+0x7c/0x90 [ 463.806990][T14312] do_syscall_64+0x55/0xa0 [ 463.811515][T14312] ? clear_bhb_loop+0x40/0x90 [ 463.816305][T14312] ? clear_bhb_loop+0x40/0x90 [ 463.820995][T14312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.826895][T14312] RIP: 0033:0x7fba9699c799 [ 463.831341][T14312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.851063][T14312] RSP: 002b:00007fba97876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.859502][T14312] RAX: ffffffffffffffda RBX: 00007fba96c15fa0 RCX: 00007fba9699c799 [ 463.867859][T14312] RDX: 0000000000000085 RSI: 00002000000000c0 RDI: 0000000000000005 [ 463.875948][T14312] RBP: 00007fba97876090 R08: 0000000000000000 R09: 0000000000000000 [ 463.883946][T14312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.891931][T14312] R13: 00007fba96c16038 R14: 00007fba96c15fa0 R15: 00007ffd035d4b28 [ 463.900210][T14312] [ 463.914132][T14312] Mem-Info: [ 463.918260][T14312] active_anon:5575 inactive_anon:0 isolated_anon:0 [ 463.918260][T14312] active_file:17513 inactive_file:40091 isolated_file:0 [ 463.918260][T14312] unevictable:768 dirty:186 writeback:0 [ 463.918260][T14312] slab_reclaimable:10429 slab_unreclaimable:96116 [ 463.918260][T14312] mapped:24409 shmem:1361 pagetables:584 [ 463.918260][T14312] sec_pagetables:0 bounce:0 [ 463.918260][T14312] kernel_misc_reclaimable:0 [ 463.918260][T14312] free:1343012 free_pcp:7333 free_cma:0 [ 463.987526][T14312] Node 0 active_anon:22300kB inactive_anon:0kB active_file:70052kB inactive_file:160160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97636kB dirty:744kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11240kB pagetables:2336kB sec_pagetables:0kB all_unreclaimable? no [ 464.040558][T14312] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 464.071695][T14312] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.100146][T14312] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 464.106116][T14312] Node 0 DMA32 free:1462412kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22256kB inactive_anon:0kB active_file:70052kB inactive_file:159344kB unevictable:1536kB writepending:744kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:14452kB local_pcp:3220kB free_cma:0kB [ 464.138963][T14312] lowmem_reserve[]: 0 0 0 0 0 [ 464.145078][T14312] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 464.173542][T14312] lowmem_reserve[]: 0 0 0 0 0 [ 464.178378][T14312] Node 1 Normal free:3894276kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15200kB local_pcp:8704kB free_cma:0kB [ 464.240883][T14312] lowmem_reserve[]: 0 0 0 0 0 [ 464.260011][T14312] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 464.290790][T14312] Node 0 DMA32: 57*4kB (UME) 1255*8kB (UME) 841*16kB (UME) 519*32kB (UM) 138*64kB (ME) 233*128kB (UME) 64*256kB (UM) 46*512kB (UME) 10*1024kB (UM) 1*2048kB (E) 325*4096kB (UM) = 1462412kB [ 464.322960][T14312] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 464.335419][T14312] Node 1 Normal: 219*4kB (UME) 51*8kB (UME) 38*16kB (UME) 153*32kB (UME) 40*64kB (UME) 9*128kB (UME) 1*256kB (M) 1*512kB (U) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3894276kB [ 464.353571][T14312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.363847][T14312] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 464.399918][T14312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.411361][T14312] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 464.422955][T14312] 58965 total pagecache pages [ 464.435065][T14312] 0 pages in swap cache [ 464.439474][T14312] Free swap = 124996kB [ 464.444584][T14312] Total swap = 124996kB [ 464.457695][T14322] netlink: 'syz.0.2993': attribute type 1 has an invalid length. [ 464.470259][T14322] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2993'. [ 464.501502][T14312] 2097051 pages RAM [ 464.506263][T14312] 0 pages HighMem/MovableOnly [ 464.511087][T14312] 416924 pages reserved [ 464.515391][T14312] 0 pages cma reserved [ 464.934307][T14338] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2996'. [ 466.369445][T14322] netlink: 'syz.0.2993': attribute type 2 has an invalid length. [ 466.377433][T14322] netlink: 'syz.0.2993': attribute type 8 has an invalid length. [ 466.388615][T14322] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2993'. [ 466.420769][T14334] netlink: 'syz.1.3005': attribute type 10 has an invalid length. [ 466.442506][T14334] team0: Device wg1 is of different type [ 466.874389][T14361] delete_channel: no stack [ 466.961170][T14368] netlink: 'syz.0.3008': attribute type 10 has an invalid length. [ 467.019401][T14368] team0: Device wg1 is of different type [ 467.133072][T14372] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3009'. [ 467.145765][T14372] bridge_slave_1: default FDB implementation only supports local addresses [ 467.158505][T14375] netlink: 'syz.0.3010': attribute type 4 has an invalid length. [ 467.169981][T14375] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3010'. [ 467.197883][T14375] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 467.788507][T14395] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3018'. [ 467.798353][T14395] openvswitch: netlink: Flow actions attr not present in new flow. [ 468.292203][T14407] wg2: entered promiscuous mode [ 468.316624][T14407] wg2: entered allmulticast mode [ 468.499150][T14415] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3027'. [ 468.516294][T14415] openvswitch: netlink: Flow actions attr not present in new flow. [ 469.122121][T14438] netlink: 'syz.0.3036': attribute type 10 has an invalid length. [ 469.345336][T14438] team0 (unregistering): Port device team_slave_0 removed [ 469.392510][T14452] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3040'. [ 469.420927][T14452] openvswitch: netlink: Flow actions attr not present in new flow. [ 469.432496][T14438] team0 (unregistering): Port device team_slave_1 removed [ 469.634518][T14459] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.3042'. [ 469.759408][T14469] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3046'. [ 469.786374][T14466] netlink: 'syz.0.3045': attribute type 39 has an invalid length. [ 469.958617][T14475] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3048'. [ 470.146478][T14481] netlink: 'syz.1.3050': attribute type 10 has an invalid length. [ 470.159255][T14481] team0: Device wg1 is of different type [ 470.319691][T14485] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3052'. [ 470.330239][T14485] openvswitch: netlink: Flow actions attr not present in new flow. [ 470.938205][T14504] netlink: 'syz.2.3058': attribute type 1 has an invalid length. [ 470.949518][T14504] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3058'. [ 470.986505][T14504] netlink: 'syz.2.3058': attribute type 2 has an invalid length. [ 470.995144][T14504] netlink: 'syz.2.3058': attribute type 8 has an invalid length. [ 471.116804][T14510] openvswitch: netlink: Flow actions attr not present in new flow. [ 472.011130][T14541] openvswitch: netlink: Flow actions attr not present in new flow. [ 472.616102][T14560] netlink: 'syz.1.3078': attribute type 27 has an invalid length. [ 472.662175][T14560] __nla_validate_parse: 3 callbacks suppressed [ 472.662193][T14560] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3078'. [ 472.742858][T14559] netlink: 'syz.1.3078': attribute type 27 has an invalid length. [ 472.772726][T14559] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3078'. [ 472.893893][T14567] netlink: 'syz.0.3081': attribute type 1 has an invalid length. [ 473.101065][T14578] FAULT_INJECTION: forcing a failure. [ 473.101065][T14578] name failslab, interval 1, probability 0, space 0, times 0 [ 473.114310][T14578] CPU: 1 PID: 14578 Comm: syz.3.3086 Not tainted syzkaller #0 [ 473.121919][T14578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.132167][T14578] Call Trace: [ 473.135448][T14578] [ 473.138373][T14578] dump_stack_lvl+0x18c/0x250 [ 473.143058][T14578] ? show_regs_print_info+0x20/0x20 [ 473.148255][T14578] ? load_image+0x400/0x400 [ 473.152756][T14578] ? kasan_quarantine_put+0xd8/0x220 [ 473.158166][T14578] should_fail_ex+0x39d/0x4d0 [ 473.162908][T14578] should_failslab+0x9/0x20 [ 473.167417][T14578] slab_pre_alloc_hook+0x59/0x310 [ 473.172445][T14578] ? kmem_cache_free+0xf8/0x270 [ 473.177304][T14578] kmem_cache_alloc+0x5a/0x2d0 [ 473.182072][T14578] ? skb_clone+0x1eb/0x370 [ 473.186488][T14578] skb_clone+0x1eb/0x370 [ 473.190739][T14578] bpf_clone_redirect+0x167/0x4a0 [ 473.195781][T14578] bpf_prog_6d7b890af21d8cfe+0x61/0x66 [ 473.201329][T14578] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 473.207313][T14578] ? lock_chain_count+0x20/0x20 [ 473.212173][T14578] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 473.218616][T14578] ? lockdep_softirqs_on+0x580/0x580 [ 473.224057][T14578] ? lock_chain_count+0x20/0x20 [ 473.228915][T14578] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 473.235342][T14578] ? __local_bh_disable_ip+0x108/0x1a0 [ 473.240889][T14578] ? __cant_sleep+0x220/0x220 [ 473.245563][T14578] ? __local_bh_enable_ip+0x13a/0x1c0 [ 473.251209][T14578] ? _local_bh_enable+0xa0/0xa0 [ 473.256147][T14578] ? bpf_test_timer_continue+0x135/0x380 [ 473.261792][T14578] ? bpf_test_run+0x174/0x870 [ 473.266553][T14578] bpf_test_run+0x2df/0x870 [ 473.271253][T14578] ? bpf_test_run+0x174/0x870 [ 473.276115][T14578] ? convert___skb_to_skb+0x590/0x590 [ 473.281490][T14578] ? eth_get_headlen+0x210/0x210 [ 473.286455][T14578] ? slab_build_skb+0x25f/0x3f0 [ 473.291315][T14578] ? convert___skb_to_skb+0x3d/0x590 [ 473.296658][T14578] bpf_prog_test_run_skb+0xad2/0x12b0 [ 473.302223][T14578] ? cpu_online+0x60/0x60 [ 473.306553][T14578] bpf_prog_test_run+0x321/0x390 [ 473.311758][T14578] __sys_bpf+0x49d/0x890 [ 473.316007][T14578] ? bpf_link_show_fdinfo+0x390/0x390 [ 473.321474][T14578] ? lock_chain_count+0x20/0x20 [ 473.326439][T14578] __x64_sys_bpf+0x7c/0x90 [ 473.330888][T14578] do_syscall_64+0x55/0xa0 [ 473.335416][T14578] ? clear_bhb_loop+0x40/0x90 [ 473.340103][T14578] ? clear_bhb_loop+0x40/0x90 [ 473.344775][T14578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.350668][T14578] RIP: 0033:0x7f5a13f9c799 [ 473.355196][T14578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.375155][T14578] RSP: 002b:00007f5a14e72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.383654][T14578] RAX: ffffffffffffffda RBX: 00007f5a14215fa0 RCX: 00007f5a13f9c799 [ 473.392067][T14578] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 473.400125][T14578] RBP: 00007f5a14e72090 R08: 0000000000000000 R09: 0000000000000000 [ 473.408198][T14578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.416178][T14578] R13: 00007f5a14216038 R14: 00007f5a14215fa0 R15: 00007ffdbb69a8f8 [ 473.424426][T14578] [ 473.514395][T14575] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3083'. [ 473.541515][T14575] openvswitch: netlink: Flow actions attr not present in new flow. [ 475.140094][T14619] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3098'. [ 475.161482][T14619] openvswitch: netlink: Flow actions attr not present in new flow. [ 475.484532][T14635] delete_channel: no stack [ 475.968463][T14649] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3110'. [ 475.988049][T14649] openvswitch: netlink: Flow actions attr not present in new flow. [ 476.464003][T14665] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.3117'. [ 476.718750][T14676] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3121'. [ 476.740874][T14676] openvswitch: netlink: Flow actions attr not present in new flow. [ 476.833837][T14679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3123'. [ 476.941260][T14682] netlink: 'syz.0.3125': attribute type 7 has an invalid length. [ 476.977984][T14688] netlink: 'syz.3.3127': attribute type 10 has an invalid length. [ 477.021948][T14688] team0: Device wg1 is of different type [ 477.405739][T14704] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3134'. [ 477.415595][T14704] openvswitch: netlink: Flow actions attr not present in new flow. [ 478.035442][T14742] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 478.044113][T14742] syzkaller1: linktype set to 786 [ 478.050320][T14744] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3147'. [ 478.069522][T14742] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3146'. [ 478.083949][T14744] openvswitch: netlink: Flow actions attr not present in new flow. [ 478.162089][T14746] delete_channel: no stack [ 478.378957][T14759] FAULT_INJECTION: forcing a failure. [ 478.378957][T14759] name failslab, interval 1, probability 0, space 0, times 0 [ 478.391773][T14759] CPU: 1 PID: 14759 Comm: syz.2.3156 Not tainted syzkaller #0 [ 478.399340][T14759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.409423][T14759] Call Trace: [ 478.412816][T14759] [ 478.415764][T14759] dump_stack_lvl+0x18c/0x250 [ 478.420558][T14759] ? show_regs_print_info+0x20/0x20 [ 478.425791][T14759] ? load_image+0x400/0x400 [ 478.430429][T14759] ? kasan_quarantine_put+0xd8/0x220 [ 478.435756][T14759] should_fail_ex+0x39d/0x4d0 [ 478.440466][T14759] should_failslab+0x9/0x20 [ 478.445259][T14759] slab_pre_alloc_hook+0x59/0x310 [ 478.450413][T14759] ? kmem_cache_free+0xf8/0x270 [ 478.455301][T14759] kmem_cache_alloc+0x5a/0x2d0 [ 478.460194][T14759] ? skb_clone+0x1eb/0x370 [ 478.464740][T14759] skb_clone+0x1eb/0x370 [ 478.469022][T14759] bpf_clone_redirect+0x167/0x4a0 [ 478.474279][T14759] bpf_prog_6d7b890af21d8cfe+0x61/0x66 [ 478.479871][T14759] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 478.484240][T14758] netlink: 'syz.3.3155': attribute type 29 has an invalid length. [ 478.486035][T14759] ? perf_trace_preemptirq_template+0xac/0x330 [ 478.486070][T14759] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 478.486090][T14759] ? lockdep_softirqs_on+0x580/0x580 [ 478.486110][T14759] ? lock_chain_count+0x20/0x20 [ 478.486126][T14759] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 478.486152][T14759] ? __local_bh_disable_ip+0x108/0x1a0 [ 478.499074][T14758] netlink: 'syz.3.3155': attribute type 29 has an invalid length. [ 478.500130][T14759] ? __cant_sleep+0x220/0x220 [ 478.500157][T14759] ? __local_bh_enable_ip+0x13a/0x1c0 [ 478.500176][T14759] ? _local_bh_enable+0xa0/0xa0 [ 478.500197][T14759] ? bpf_test_timer_continue+0x135/0x380 [ 478.500217][T14759] ? bpf_test_run+0x174/0x870 [ 478.500236][T14759] bpf_test_run+0x2df/0x870 [ 478.500267][T14759] ? bpf_test_run+0x174/0x870 [ 478.500287][T14759] ? convert___skb_to_skb+0x590/0x590 [ 478.500309][T14759] ? eth_get_headlen+0x210/0x210 [ 478.500335][T14759] ? slab_build_skb+0x25f/0x3f0 [ 478.500357][T14759] ? convert___skb_to_skb+0x3d/0x590 [ 478.500378][T14759] bpf_prog_test_run_skb+0xad2/0x12b0 [ 478.500417][T14759] ? cpu_online+0x60/0x60 [ 478.500436][T14759] bpf_prog_test_run+0x321/0x390 [ 478.500458][T14759] __sys_bpf+0x49d/0x890 [ 478.500479][T14759] ? bpf_link_show_fdinfo+0x390/0x390 [ 478.500511][T14759] ? lock_chain_count+0x20/0x20 [ 478.500540][T14759] __x64_sys_bpf+0x7c/0x90 [ 478.500556][T14759] do_syscall_64+0x55/0xa0 [ 478.500574][T14759] ? clear_bhb_loop+0x40/0x90 [ 478.500594][T14759] ? clear_bhb_loop+0x40/0x90 [ 478.500614][T14759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.500632][T14759] RIP: 0033:0x7fba9699c799 [ 478.500649][T14759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.500663][T14759] RSP: 002b:00007fba97876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.500683][T14759] RAX: ffffffffffffffda RBX: 00007fba96c15fa0 RCX: 00007fba9699c799 [ 478.500693][T14759] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 478.500703][T14759] RBP: 00007fba97876090 R08: 0000000000000000 R09: 0000000000000000 [ 478.500712][T14759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.500721][T14759] R13: 00007fba96c16038 R14: 00007fba96c15fa0 R15: 00007ffd035d4b28 [ 478.500747][T14759] [ 478.631646][T14765] ================================================================== [ 478.631661][T14765] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 478.631693][T14765] Write of size 72 at addr ffff888024619c90 by task syz.2.3157/14765 [ 478.631708][T14765] [ 478.631714][T14765] CPU: 1 PID: 14765 Comm: syz.2.3157 Not tainted syzkaller #0 [ 478.631730][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.631741][T14765] Call Trace: [ 478.631747][T14765] [ 478.631754][T14765] dump_stack_lvl+0x18c/0x250 [ 478.631778][T14765] ? __lock_acquire+0x7d40/0x7d40 [ 478.631796][T14765] ? show_regs_print_info+0x20/0x20 [ 478.631817][T14765] ? load_image+0x400/0x400 [ 478.631836][T14765] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 478.631856][T14765] ? __virt_addr_valid+0x18c/0x540 [ 478.631875][T14765] ? __virt_addr_valid+0x469/0x540 [ 478.631894][T14765] print_report+0xa8/0x210 [ 478.631914][T14765] ? __bpf_get_stackid+0x6bf/0x900 [ 478.631930][T14765] kasan_report+0x117/0x150 [ 478.631950][T14765] ? __bpf_get_stackid+0x6bf/0x900 [ 478.631972][T14765] kasan_check_range+0x241/0x290 [ 478.631989][T14765] ? __bpf_get_stackid+0x6bf/0x900 [ 478.632008][T14765] __asan_memcpy+0x40/0x70 [ 478.632028][T14765] __bpf_get_stackid+0x6bf/0x900 [ 478.632050][T14765] bpf_get_stackid_pe+0x343/0x410 [ 478.632073][T14765] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 478.632091][T14765] bpf_overflow_handler+0x1fc/0x510 [ 478.632112][T14765] ? perf_prepare_header+0x1e0/0x1e0 [ 478.632133][T14765] ? bpf_overflow_handler+0xde/0x510 [ 478.632153][T14765] ? tp_perf_event_destroy+0x20/0x20 [ 478.632171][T14765] ? unwind_get_return_address+0x91/0xc0 [ 478.632190][T14765] ? __perf_event_account_interrupt+0x187/0x280 [ 478.632209][T14765] __perf_event_overflow+0x447/0x630 [ 478.632229][T14765] perf_swevent_event+0x324/0x630 [ 478.632249][T14765] ? perf_tp_event+0x1450/0x1450 [ 478.632270][T14765] ___perf_sw_event+0x4a7/0x730 [ 478.632289][T14765] ? ___perf_sw_event+0x199/0x730 [ 478.632313][T14765] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 478.632332][T14765] ? __lock_acquire+0x1347/0x7d40 [ 478.632351][T14765] ? rep_movs_alternative+0x4a/0x90 [ 478.632382][T14765] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 478.632409][T14765] ? lock_chain_count+0x20/0x20 [ 478.632428][T14765] __perf_sw_event+0x139/0x270 [ 478.632447][T14765] do_user_addr_fault+0x123e/0x12c0 [ 478.632469][T14765] ? rcu_is_watching+0x15/0xb0 [ 478.632491][T14765] exc_page_fault+0x64/0x100 [ 478.632509][T14765] asm_exc_page_fault+0x26/0x30 [ 478.632526][T14765] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 478.632550][T14765] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 478.632564][T14765] RSP: 0018:ffffc9000e91f798 EFLAGS: 00050206 [ 478.632580][T14765] RAX: ffffffff84276a01 RBX: 0000000000033fe0 RCX: 0000000000032020 [ 478.632593][T14765] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffffc9000e975fc0 [ 478.632605][T14765] RBP: ffffc9000e91f8f0 R08: ffffc9000e9a7fdf R09: 1ffff92001d34ffb [ 478.632616][T14765] R10: dffffc0000000000 R11: fffff52001d34ffc R12: ffffc9000e974000 [ 478.632628][T14765] R13: 0000200000000040 R14: ffffc9000e91fe38 R15: 1ffff92001d23fc7 [ 478.632643][T14765] ? _copy_from_iter+0x201/0x12e0 [ 478.632669][T14765] _copy_from_iter+0x24e/0x12e0 [ 478.632688][T14765] ? find_vmap_area+0xfc/0x110 [ 478.632708][T14765] ? __lock_acquire+0x7d40/0x7d40 [ 478.632728][T14765] ? copyout_mc+0x70/0x70 [ 478.632746][T14765] ? do_raw_spin_unlock+0x121/0x230 [ 478.632767][T14765] ? _raw_spin_unlock+0x28/0x40 [ 478.632783][T14765] ? find_vmap_area+0xfc/0x110 [ 478.632801][T14765] ? __check_object_size+0x506/0xa20 [ 478.632826][T14765] netlink_sendmsg+0x76b/0xbf0 [ 478.632851][T14765] ? netlink_getsockopt+0x590/0x590 [ 478.632872][T14765] ? aa_sock_msg_perm+0x94/0x150 [ 478.632892][T14765] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 478.632910][T14765] ? security_socket_sendmsg+0x80/0xa0 [ 478.632927][T14765] ? netlink_getsockopt+0x590/0x590 [ 478.632948][T14765] ____sys_sendmsg+0x5ba/0x960 [ 478.632968][T14765] ? __asan_memset+0x22/0x40 [ 478.632986][T14765] ? __sys_sendmsg_sock+0x30/0x30 [ 478.633000][T14765] ? __import_iovec+0x5f2/0x850 [ 478.633024][T14765] ? import_iovec+0x73/0xa0 [ 478.633040][T14765] ___sys_sendmsg+0x2a6/0x360 [ 478.633058][T14765] ? __sys_sendmsg+0x2a0/0x2a0 [ 478.633093][T14765] __se_sys_sendmsg+0x1c2/0x2b0 [ 478.633109][T14765] ? __x64_sys_sendmsg+0x80/0x80 [ 478.633129][T14765] ? lockdep_hardirqs_on+0x98/0x150 [ 478.633146][T14765] do_syscall_64+0x55/0xa0 [ 478.633166][T14765] ? clear_bhb_loop+0x40/0x90 [ 478.633183][T14765] ? clear_bhb_loop+0x40/0x90 [ 478.633201][T14765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.633218][T14765] RIP: 0033:0x7fba9699c799 [ 478.633231][T14765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.633244][T14765] RSP: 002b:00007fba97876028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.633260][T14765] RAX: ffffffffffffffda RBX: 00007fba96c15fa0 RCX: 00007fba9699c799 [ 478.633272][T14765] RDX: 3500000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 478.633283][T14765] RBP: 00007fba96a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 478.633293][T14765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.633303][T14765] R13: 00007fba96c16038 R14: 00007fba96c15fa0 R15: 00007ffd035d4b28 [ 478.633321][T14765] [ 478.633327][T14765] [ 478.633330][T14765] Allocated by task 14766: [ 478.633337][T14765] kasan_set_track+0x4e/0x70 [ 478.633353][T14765] __kasan_kmalloc+0x8f/0xa0 [ 478.633368][T14765] __kmalloc_node+0xb4/0x230 [ 478.633385][T14765] bpf_map_area_alloc+0x5e/0x110 [ 478.633412][T14765] prealloc_elems_and_freelist+0x86/0x1c0 [ 478.633430][T14765] stack_map_alloc+0x33a/0x4c0 [ 478.633445][T14765] map_create+0x877/0x12f0 [ 478.633459][T14765] __sys_bpf+0x651/0x890 [ 478.633472][T14765] __x64_sys_bpf+0x7c/0x90 [ 478.633486][T14765] do_syscall_64+0x55/0xa0 [ 478.633503][T14765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.633519][T14765] [ 478.633522][T14765] The buggy address belongs to the object at ffff888024619c80 [ 478.633522][T14765] which belongs to the cache kmalloc-cg-64 of size 64 [ 478.633535][T14765] The buggy address is located 16 bytes inside of [ 478.633535][T14765] allocated 40-byte region [ffff888024619c80, ffff888024619ca8) [ 478.633552][T14765] [ 478.633555][T14765] The buggy address belongs to the physical page: [ 478.633569][T14765] page:ffffea0000918640 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24619 [ 478.633586][T14765] memcg:ffff8880260b5201 [ 478.633592][T14765] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 478.633606][T14765] page_type: 0xffffffff() [ 478.633620][T14765] raw: 00fff00000000800 ffff888017c4da00 dead000000000122 0000000000000000 [ 478.633634][T14765] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880260b5201 [ 478.633642][T14765] page dumped because: kasan: bad access detected [ 478.633653][T14765] page_owner tracks the page as allocated [ 478.633659][T14765] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 12838, tgid 12838 (syz-executor), ts 476406947900, free_ts 476406346997 [ 478.633685][T14765] post_alloc_hook+0x1c1/0x200 [ 478.633704][T14765] get_page_from_freelist+0x1951/0x19e0 [ 478.633719][T14765] __alloc_pages+0x1f0/0x460 [ 478.633731][T14765] alloc_slab_page+0x5d/0x160 [ 478.633744][T14765] new_slab+0x87/0x2d0 [ 478.633762][T14765] ___slab_alloc+0xc5d/0x12f0 [ 478.633780][T14765] __kmem_cache_alloc_node+0x19e/0x250 [ 478.633799][T14765] kmalloc_trace+0x2a/0xe0 [ 478.633815][T14765] alloc_fdtable+0xca/0x2c0 [ 478.633833][T14765] dup_fd+0x786/0xa50 [ 478.633848][T14765] copy_files+0xc3/0x120 [ 478.633862][T14765] copy_process+0x15ab/0x3d80 [ 478.633876][T14765] kernel_clone+0x24b/0x8a0 [ 478.633890][T14765] __x64_sys_clone+0x1b7/0x230 [ 478.633905][T14765] do_syscall_64+0x55/0xa0 [ 478.633923][T14765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.633938][T14765] page last free stack trace: [ 478.633943][T14765] free_unref_page_prepare+0x7b2/0x8c0 [ 478.633962][T14765] free_unref_page+0x32/0x2e0 [ 478.633980][T14765] __slab_free+0x35a/0x400 [ 478.633993][T14765] qlist_free_all+0x75/0xd0 [ 478.634010][T14765] kasan_quarantine_reduce+0x143/0x160 [ 478.634028][T14765] __kasan_slab_alloc+0x22/0x80 [ 478.634043][T14765] slab_post_alloc_hook+0x6e/0x4b0 [ 478.634061][T14765] kmem_cache_alloc_node+0x14c/0x320 [ 478.634080][T14765] dup_task_struct+0x57/0x7c0 [ 478.634094][T14765] copy_process+0x586/0x3d80 [ 478.634108][T14765] kernel_clone+0x24b/0x8a0 [ 478.634122][T14765] __x64_sys_clone+0x1b7/0x230 [ 478.634136][T14765] do_syscall_64+0x55/0xa0 [ 478.634154][T14765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.634170][T14765] [ 478.634173][T14765] Memory state around the buggy address: [ 478.634181][T14765] ffff888024619b80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 478.634191][T14765] ffff888024619c00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 478.634202][T14765] >ffff888024619c80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 478.634209][T14765] ^ [ 478.634217][T14765] ffff888024619d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 478.634227][T14765] ffff888024619d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 478.634235][T14765] ================================================================== [ 478.634269][T14765] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 478.634276][T14765] CPU: 1 PID: 14765 Comm: syz.2.3157 Not tainted syzkaller #0 [ 478.634290][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.634299][T14765] Call Trace: [ 478.634305][T14765] [ 478.634311][T14765] dump_stack_lvl+0x18c/0x250 [ 478.634332][T14765] ? show_regs_print_info+0x20/0x20 [ 478.634353][T14765] ? load_image+0x400/0x400 [ 478.634376][T14765] panic+0x2dc/0x730 [ 478.634392][T14765] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 478.634419][T14765] ? bpf_jit_dump+0xd0/0xd0 [ 478.634436][T14765] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 478.634454][T14765] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 478.634471][T14765] ? _raw_spin_unlock+0x40/0x40 [ 478.634489][T14765] ? __bpf_get_stackid+0x6bf/0x900 [ 478.634506][T14765] check_panic_on_warn+0x84/0xa0 [ 478.634524][T14765] ? __bpf_get_stackid+0x6bf/0x900 [ 478.634542][T14765] end_report+0x6f/0x130 [ 478.634558][T14765] kasan_report+0x128/0x150 [ 478.634577][T14765] ? __bpf_get_stackid+0x6bf/0x900 [ 478.634597][T14765] kasan_check_range+0x241/0x290 [ 478.634615][T14765] ? __bpf_get_stackid+0x6bf/0x900 [ 478.634632][T14765] __asan_memcpy+0x40/0x70 [ 478.634651][T14765] __bpf_get_stackid+0x6bf/0x900 [ 478.634674][T14765] bpf_get_stackid_pe+0x343/0x410 [ 478.634694][T14765] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 478.634711][T14765] bpf_overflow_handler+0x1fc/0x510 [ 478.634732][T14765] ? perf_prepare_header+0x1e0/0x1e0 [ 478.634748][T14765] ? bpf_overflow_handler+0xde/0x510 [ 478.634767][T14765] ? tp_perf_event_destroy+0x20/0x20 [ 478.634786][T14765] ? unwind_get_return_address+0x91/0xc0 [ 478.634804][T14765] ? __perf_event_account_interrupt+0x187/0x280 [ 478.634822][T14765] __perf_event_overflow+0x447/0x630 [ 478.634842][T14765] perf_swevent_event+0x324/0x630 [ 478.634861][T14765] ? perf_tp_event+0x1450/0x1450 [ 478.634882][T14765] ___perf_sw_event+0x4a7/0x730 [ 478.634900][T14765] ? ___perf_sw_event+0x199/0x730 [ 478.634916][T14765] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 478.634934][T14765] ? __lock_acquire+0x1347/0x7d40 [ 478.634952][T14765] ? rep_movs_alternative+0x4a/0x90 [ 478.634983][T14765] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 478.635001][T14765] ? lock_chain_count+0x20/0x20 [ 478.635019][T14765] __perf_sw_event+0x139/0x270 [ 478.635038][T14765] do_user_addr_fault+0x123e/0x12c0 [ 478.635059][T14765] ? rcu_is_watching+0x15/0xb0 [ 478.635079][T14765] exc_page_fault+0x64/0x100 [ 478.635096][T14765] asm_exc_page_fault+0x26/0x30 [ 478.635112][T14765] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 478.635134][T14765] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 478.635147][T14765] RSP: 0018:ffffc9000e91f798 EFLAGS: 00050206 [ 478.635161][T14765] RAX: ffffffff84276a01 RBX: 0000000000033fe0 RCX: 0000000000032020 [ 478.635172][T14765] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffffc9000e975fc0 [ 478.635183][T14765] RBP: ffffc9000e91f8f0 R08: ffffc9000e9a7fdf R09: 1ffff92001d34ffb [ 478.635194][T14765] R10: dffffc0000000000 R11: fffff52001d34ffc R12: ffffc9000e974000 [ 478.635205][T14765] R13: 0000200000000040 R14: ffffc9000e91fe38 R15: 1ffff92001d23fc7 [ 478.635220][T14765] ? _copy_from_iter+0x201/0x12e0 [ 478.635243][T14765] _copy_from_iter+0x24e/0x12e0 [ 478.635263][T14765] ? find_vmap_area+0xfc/0x110 [ 478.635281][T14765] ? __lock_acquire+0x7d40/0x7d40 [ 478.635299][T14765] ? copyout_mc+0x70/0x70 [ 478.635317][T14765] ? do_raw_spin_unlock+0x121/0x230 [ 478.635336][T14765] ? _raw_spin_unlock+0x28/0x40 [ 478.635352][T14765] ? find_vmap_area+0xfc/0x110 [ 478.635370][T14765] ? __check_object_size+0x506/0xa20 [ 478.635393][T14765] netlink_sendmsg+0x76b/0xbf0 [ 478.635423][T14765] ? netlink_getsockopt+0x590/0x590 [ 478.635444][T14765] ? aa_sock_msg_perm+0x94/0x150 [ 478.635462][T14765] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 478.635480][T14765] ? security_socket_sendmsg+0x80/0xa0 [ 478.635495][T14765] ? netlink_getsockopt+0x590/0x590 [ 478.635516][T14765] ____sys_sendmsg+0x5ba/0x960 [ 478.635533][T14765] ? __asan_memset+0x22/0x40 [ 478.635550][T14765] ? __sys_sendmsg_sock+0x30/0x30 [ 478.635564][T14765] ? __import_iovec+0x5f2/0x850 [ 478.635587][T14765] ? import_iovec+0x73/0xa0 [ 478.635602][T14765] ___sys_sendmsg+0x2a6/0x360 [ 478.635620][T14765] ? __sys_sendmsg+0x2a0/0x2a0 [ 478.635654][T14765] __se_sys_sendmsg+0x1c2/0x2b0 [ 478.635671][T14765] ? __x64_sys_sendmsg+0x80/0x80 [ 478.635692][T14765] ? lockdep_hardirqs_on+0x98/0x150 [ 478.635710][T14765] do_syscall_64+0x55/0xa0 [ 478.635730][T14765] ? clear_bhb_loop+0x40/0x90 [ 478.635746][T14765] ? clear_bhb_loop+0x40/0x90 [ 478.635763][T14765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.635780][T14765] RIP: 0033:0x7fba9699c799 [ 478.635792][T14765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.635805][T14765] RSP: 002b:00007fba97876028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.635820][T14765] RAX: ffffffffffffffda RBX: 00007fba96c15fa0 RCX: 00007fba9699c799 [ 478.635832][T14765] RDX: 3500000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 478.635842][T14765] RBP: 00007fba96a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 478.635852][T14765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.635862][T14765] R13: 00007fba96c16038 R14: 00007fba96c15fa0 R15: 00007ffd035d4b28 [ 478.635880][T14765] [ 478.636414][T14765] Kernel Offset: disabled