last executing test programs: 2.526052945s ago: executing program 3 (id=4760): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc022, 0xa}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)="e700", 0x2}], 0x1}, 0x4000001) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.672050817s ago: executing program 2 (id=4773): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b000885000000070000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284862186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x91, 0x0, 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[], 0xfdef) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.598563099s ago: executing program 0 (id=4776): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xcf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000003377fbac141416e000000107079ffeb180008615050f00845002f2075f0039010586038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afb", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b2388a84b83"], 0xffdd) 1.495869491s ago: executing program 3 (id=4778): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 1.398732834s ago: executing program 2 (id=4781): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x46, 0x0, 0x1, 0x0, 0xc0d4, 0x40068, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x100000000, 0x80000001}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x8, 0x7, 0xfffd, 0x0, 0xfffffffb, 0x0, 0x8000000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xc, r0, 0x4}, 0x38) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.283945037s ago: executing program 3 (id=4782): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x4e32, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$TUNGETVNETHDRSZ(r1, 0xb701, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0xfffffffe, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x101, 0x7fe2, 0xff, 0x1, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0x5, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r5}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$SIOCSIFHWADDR(r0, 0x4b47, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x40, 0x3, 0x41, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 1.283695347s ago: executing program 4 (id=4783): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.283400357s ago: executing program 0 (id=4784): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x1, 0x20040, 0x100, 0x41, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.247076557s ago: executing program 2 (id=4786): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x3}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x81, 0x100000000}, 0x110000, 0x0, 0x8ffff, 0x8, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) 1.17351167s ago: executing program 0 (id=4787): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc, 0xa}, 0x8601, 0x2000000, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000200, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 992.188415ms ago: executing program 1 (id=4788): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/233, 0x46, 0xe9, 0x6}, 0x28) 984.965715ms ago: executing program 1 (id=4789): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x402, 0x8, 0x0, 0xe80a6b4847db2a6d, 0x6, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x7, 0x10, 0xfc, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[], 0x12) 882.713207ms ago: executing program 4 (id=4790): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x9, 0x20020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 868.266298ms ago: executing program 3 (id=4791): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x4044) sendmsg(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="d80000000000"], 0xd8}, 0x20000000) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) 824.225329ms ago: executing program 2 (id=4792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000480)="b9ff03076804268c989e14f088a847e08906", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 823.931639ms ago: executing program 1 (id=4793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b000885000000070000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284862186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x91, 0x0, 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[], 0xfdef) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 805.726139ms ago: executing program 2 (id=4794): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x5, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="01000600"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xd7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xf0, 0x8, 0x8, &(0x7f0000000040)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xc7\x9b\x1cH\x95\xf3'}, 0x30) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, 0x0, 0x66) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x18404, 0x0, 0xfffffffe, 0x1, 0x5, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000, 0x8d30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0}, 0x28) 755.29267ms ago: executing program 3 (id=4795): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="8500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 653.403003ms ago: executing program 0 (id=4796): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000019c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000000000000071e000014000000000000000000000001", @ANYRES32, @ANYBLOB="e0000001640101000000"], 0x68}, 0x804) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001480)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000001700), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000600), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x6, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x1028, 0x0, 0x3ff, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[], 0x50) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) 579.170795ms ago: executing program 3 (id=4797): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r5) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 496.070947ms ago: executing program 4 (id=4798): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100080, 0x9, 0x9, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) 480.255247ms ago: executing program 1 (id=4799): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], &(0x7f0000000040)=""/233, 0x46, 0xe9, 0x6}, 0x28) 400.24151ms ago: executing program 0 (id=4800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x1, 0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x2000, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x4}, {0x60, 0x8}, {0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x10000000}]}) 392.32021ms ago: executing program 4 (id=4801): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x4e32, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$TUNGETVNETHDRSZ(r1, 0xb701, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0xfffffffe, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x101, 0x7fe2, 0xff, 0x1, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0x5, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r5}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$SIOCSIFHWADDR(r0, 0x4b47, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x40, 0x3, 0x41, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 350.353821ms ago: executing program 1 (id=4802): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000001c0)="b15dd7cf1c00000400000000000036af1747da", 0x0, 0x5845, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 180.228545ms ago: executing program 0 (id=4803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 131.698327ms ago: executing program 4 (id=4804): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000480)="b9ff03076804268c989e14f088a847e08906", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 111.116977ms ago: executing program 1 (id=4805): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x9, 0x84, 0x154}, 0x50) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) socketpair(0x2, 0xa, 0x0, &(0x7f0000000080)) 164.13µs ago: executing program 2 (id=4806): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x22120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000000c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_pressure(r5, &(0x7f00000001c0)={'some', 0x20, 0xff, 0x20, 0x1000000000000008}, 0x2f) 0s ago: executing program 4 (id=4807): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7991, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x8880, 0x10000, 0x0, 0x9, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): 0000000000000000 [ 343.790689][T13499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.798899][T13499] R13: 00007f82ee32e038 R14: 00007f82ee32dfa0 R15: 00007ffc4c6ceda8 [ 343.808307][T13499] [ 343.841931][ T4753] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 343.851642][ T4753] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 344.013753][T13512] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3213'. [ 344.064923][T13512] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 344.440398][T13524] device wlan1 entered promiscuous mode [ 344.692825][T13533] device wlan1 entered promiscuous mode [ 344.718306][T13535] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3219'. [ 344.757074][T13541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3220'. [ 344.867581][T13537] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3220'. [ 344.912406][T13537] device hsr_slave_0 left promiscuous mode [ 344.919426][T13537] device hsr_slave_1 left promiscuous mode [ 345.036692][T13549] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.3221'. [ 345.186156][T13389] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 345.208247][T13389] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 345.247030][T13389] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 345.290296][T13389] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 345.471357][ T2238] Bluetooth: hci4: command 0x040f tx timeout [ 345.635765][T13389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.727795][T13389] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.778351][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.800257][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.849100][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.869904][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.881020][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.888636][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.990936][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.013786][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.042405][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.063262][ T4732] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.070691][ T4732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.117505][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.140074][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.177617][T13591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3234'. [ 346.200812][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 346.255906][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 346.274797][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 346.309400][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 346.380493][T13603] netlink: 'syz.4.3237': attribute type 29 has an invalid length. [ 346.401184][T13594] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3235'. [ 346.429742][T13594] bridge_slave_1: default FDB implementation only supports local addresses [ 346.520823][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 346.546792][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.570747][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.591987][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.602532][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.613598][T13603] netlink: 'syz.4.3237': attribute type 29 has an invalid length. [ 346.629539][T13605] netlink: 'syz.4.3237': attribute type 29 has an invalid length. [ 346.673569][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 346.693544][T13609] netlink: 'syz.4.3237': attribute type 29 has an invalid length. [ 346.736175][T13603] netlink: 'syz.4.3237': attribute type 29 has an invalid length. [ 346.890517][T13623] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3241'. [ 346.912845][T13623] netlink: 'syz.1.3241': attribute type 1 has an invalid length. [ 347.147070][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.158649][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.182691][T13639] FAULT_INJECTION: forcing a failure. [ 347.182691][T13639] name failslab, interval 1, probability 0, space 0, times 0 [ 347.196212][T13639] CPU: 0 PID: 13639 Comm: syz.2.3246 Not tainted syzkaller #0 [ 347.206535][T13639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.221463][T13639] Call Trace: [ 347.225816][T13639] [ 347.230628][T13639] dump_stack_lvl+0x188/0x250 [ 347.236539][T13639] ? show_regs_print_info+0x20/0x20 [ 347.237947][T13389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.243394][T13639] ? load_image+0x410/0x410 [ 347.243436][T13639] should_fail+0x383/0x4b0 [ 347.243459][T13639] should_failslab+0x5/0x20 [ 347.243474][T13639] slab_pre_alloc_hook+0x51/0xc0 [ 347.243492][T13639] ? __build_skb+0x26/0x2e0 [ 347.243509][T13639] kmem_cache_alloc+0x3d/0x280 [ 347.243530][T13639] __build_skb+0x26/0x2e0 [ 347.295656][T13639] build_skb+0x1e/0x160 [ 347.300985][T13639] bpf_prog_test_run_skb+0x25c/0x1190 [ 347.306746][T13639] ? __fget_files+0x402/0x470 [ 347.307732][T13389] device veth0_vlan entered promiscuous mode [ 347.312095][T13639] ? cpu_online+0x60/0x60 [ 347.312120][T13639] bpf_prog_test_run+0x31c/0x390 [ 347.312145][T13639] __sys_bpf+0x5a5/0x6f0 [ 347.327203][T13389] device veth1_vlan entered promiscuous mode [ 347.329091][T13639] ? bpf_link_show_fdinfo+0x380/0x380 [ 347.345986][T13639] __x64_sys_bpf+0x78/0x90 [ 347.352396][T13639] do_syscall_64+0x4c/0xa0 [ 347.357094][T13639] ? clear_bhb_loop+0x30/0x80 [ 347.361908][T13639] ? clear_bhb_loop+0x30/0x80 [ 347.366923][T13639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.373347][T13639] RIP: 0033:0x7f50c9048019 [ 347.378428][T13639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.400935][T13639] RSP: 002b:00007f50c72a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.409350][T13639] RAX: ffffffffffffffda RBX: 00007f50c92cffa0 RCX: 00007f50c9048019 [ 347.420537][T13639] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 347.428591][T13639] RBP: 00007f50c72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 347.436680][T13639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.444810][T13639] R13: 00007f50c92d0038 R14: 00007f50c92cffa0 R15: 00007ffcf67da778 [ 347.452982][T13639] [ 347.463171][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.488433][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.497866][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.507972][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.517564][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 347.529915][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 347.539672][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.551602][ T2304] Bluetooth: hci4: command 0x0419 tx timeout [ 347.596387][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.625660][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.657299][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.735269][T13389] device veth0_macvtap entered promiscuous mode [ 347.812807][T13389] device veth1_macvtap entered promiscuous mode [ 347.899385][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.932262][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.951224][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.977912][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.008418][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.030031][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.053479][T13389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.107544][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.122214][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.152891][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.172540][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.212370][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.250956][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.269313][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.287181][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.298127][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.312710][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.327135][T13389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.368761][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.379657][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.395246][ T4730] device veth1_macvtap left promiscuous mode [ 348.409621][ T4730] device veth0_macvtap left promiscuous mode [ 348.435449][ T4730] device veth1_vlan left promiscuous mode [ 348.623204][ T4730] device team_slave_1 left promiscuous mode [ 348.633480][ T4730] team0 (unregistering): Port device team_slave_1 removed [ 348.651649][ T4730] device team_slave_0 left promiscuous mode [ 348.658684][ T4730] team0 (unregistering): Port device team_slave_0 removed [ 348.677259][ T4730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.686749][ T4730] device bond_slave_1 left promiscuous mode [ 348.703458][ T4730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.782714][ T4730] bond0 (unregistering): Released all slaves [ 348.803178][T13389] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.818469][T13389] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.841353][T13389] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.851087][T13389] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.061937][ T4732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.107182][ T4732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.149641][T13684] __nla_validate_parse: 2 callbacks suppressed [ 349.149676][T13684] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3262'. [ 349.169778][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.225372][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.236450][T13684] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 349.246503][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.294349][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.509387][T13701] device syzkaller0 entered promiscuous mode [ 350.003121][T13723] FAULT_INJECTION: forcing a failure. [ 350.003121][T13723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.078497][T13723] CPU: 0 PID: 13723 Comm: syz.4.3275 Not tainted syzkaller #0 [ 350.086195][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.096275][T13723] Call Trace: [ 350.099583][T13723] [ 350.102883][T13723] dump_stack_lvl+0x188/0x250 [ 350.107671][T13723] ? show_regs_print_info+0x20/0x20 [ 350.112897][T13723] ? load_image+0x410/0x410 [ 350.117533][T13723] ? __lock_acquire+0x7b50/0x7b50 [ 350.123022][T13723] should_fail+0x383/0x4b0 [ 350.127733][T13723] _copy_from_user+0x2e/0x170 [ 350.132703][T13723] __sys_bpf+0x26d/0x6f0 [ 350.138030][T13723] ? bpf_link_show_fdinfo+0x380/0x380 [ 350.144282][T13723] __x64_sys_bpf+0x78/0x90 [ 350.148729][T13723] do_syscall_64+0x4c/0xa0 [ 350.153284][T13723] ? clear_bhb_loop+0x30/0x80 [ 350.158372][T13723] ? clear_bhb_loop+0x30/0x80 [ 350.163079][T13723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.169626][T13723] RIP: 0033:0x7f023a607019 [ 350.174053][T13723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.194632][T13723] RSP: 002b:00007f023885f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.203342][T13723] RAX: ffffffffffffffda RBX: 00007f023a88efa0 RCX: 00007f023a607019 [ 350.211414][T13723] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 350.219413][T13723] RBP: 00007f023885f090 R08: 0000000000000000 R09: 0000000000000000 [ 350.228629][T13723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.236896][T13723] R13: 00007f023a88f038 R14: 00007f023a88efa0 R15: 00007ffc6a722f98 [ 350.244923][T13723] [ 350.306264][T13725] netlink: 'syz.1.3276': attribute type 21 has an invalid length. [ 350.671005][T13740] netlink: 'syz.2.3281': attribute type 21 has an invalid length. [ 350.679883][T13740] IPv6: NLM_F_CREATE should be specified when creating new route [ 350.690754][T13740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.698345][T13740] IPv6: NLM_F_CREATE should be set when creating new route [ 350.706022][T13740] IPv6: NLM_F_CREATE should be set when creating new route [ 350.713589][T13740] IPv6: NLM_F_CREATE should be set when creating new route [ 350.915867][T13741] device syzkaller0 entered promiscuous mode [ 351.085575][T13727] chnl_net:caif_netlink_parms(): no params data found [ 351.310515][T13769] netlink: 'syz.1.3288': attribute type 27 has an invalid length. [ 351.397962][T13769] bond0: (slave bond_slave_0): Releasing backup interface [ 351.665098][T13727] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.707781][T13727] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.746138][T13727] device bridge_slave_0 entered promiscuous mode [ 351.797251][T13727] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.824064][T13727] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.834706][T13727] device bridge_slave_1 entered promiscuous mode [ 351.845469][T13783] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3293'. [ 352.040516][T13785] netlink: 'syz.1.3292': attribute type 10 has an invalid length. [ 352.060815][T13793] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3296'. [ 352.068303][T13785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3292'. [ 352.216613][T13791] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 352.247297][T13785] batman_adv: batadv0: Adding interface: veth0_vlan [ 352.254744][T13785] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.286581][T13785] batman_adv: batadv0: Interface activated: veth0_vlan [ 352.324562][T13727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.345613][ T2238] Bluetooth: hci1: command 0x0409 tx timeout [ 352.477467][T13727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.520961][T13803] FAULT_INJECTION: forcing a failure. [ 352.520961][T13803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.547687][T13803] CPU: 1 PID: 13803 Comm: syz.1.3299 Not tainted syzkaller #0 [ 352.555346][T13803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.565426][T13803] Call Trace: [ 352.568719][T13803] [ 352.571673][T13803] dump_stack_lvl+0x188/0x250 [ 352.576513][T13803] ? show_regs_print_info+0x20/0x20 [ 352.581739][T13803] ? load_image+0x410/0x410 [ 352.586358][T13803] ? __lock_acquire+0x7b50/0x7b50 [ 352.591438][T13803] should_fail+0x383/0x4b0 [ 352.595904][T13803] _copy_from_user+0x2e/0x170 [ 352.600766][T13803] __copy_msghdr_from_user+0xc9/0x630 [ 352.606263][T13803] ? verify_lock_unused+0x140/0x140 [ 352.611574][T13803] ? mark_lock+0x94/0x320 [ 352.615913][T13803] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 352.621243][T13803] ___sys_sendmsg+0x19a/0x2e0 [ 352.625950][T13803] ? __sys_sendmsg+0x290/0x290 [ 352.630919][T13803] ? trace_event_raw_event_lock+0x250/0x250 [ 352.636992][T13803] __se_sys_sendmsg+0x1b7/0x2a0 [ 352.641946][T13803] ? __x64_sys_sendmsg+0x80/0x80 [ 352.646886][T13803] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 352.652889][T13803] ? lockdep_hardirqs_on+0x94/0x140 [ 352.658091][T13803] do_syscall_64+0x4c/0xa0 [ 352.662505][T13803] ? clear_bhb_loop+0x30/0x80 [ 352.667190][T13803] ? clear_bhb_loop+0x30/0x80 [ 352.671867][T13803] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.677758][T13803] RIP: 0033:0x7f505ce7b019 [ 352.682195][T13803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.701811][T13803] RSP: 002b:00007f505b0d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.710234][T13803] RAX: ffffffffffffffda RBX: 00007f505d102fa0 RCX: 00007f505ce7b019 [ 352.718205][T13803] RDX: 0000000000048100 RSI: 0000200000000000 RDI: 0000000000000003 [ 352.726281][T13803] RBP: 00007f505b0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 352.734529][T13803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.742511][T13803] R13: 00007f505d103038 R14: 00007f505d102fa0 R15: 00007ffddc92e788 [ 352.750520][T13803] [ 352.785025][T13727] team0: Port device team_slave_0 added [ 352.820032][T13727] team0: Port device team_slave_1 added [ 352.917471][T13727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.946083][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.979187][T13727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.997439][T13814] netlink: 198628 bytes leftover after parsing attributes in process `syz.3.3304'. [ 353.003631][T13727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.014588][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.042115][T13727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.063368][T13809] netlink: 'syz.4.3302': attribute type 27 has an invalid length. [ 353.107117][T13809] bond0: (slave bond_slave_0): Releasing backup interface [ 353.160497][T13815] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3303'. [ 353.171449][T13817] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3303'. [ 353.194280][T13814] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3304'. [ 353.282305][T13727] device hsr_slave_0 entered promiscuous mode [ 353.301770][T13727] device hsr_slave_1 entered promiscuous mode [ 353.354837][T13727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.377421][T13727] Cannot create hsr debugfs directory [ 353.396406][T13825] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3308'. [ 353.512222][ T4730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.685104][ T4730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.795031][ T4730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.867667][T13853] FAULT_INJECTION: forcing a failure. [ 353.867667][T13853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.920969][T13847] device wlan1 entered promiscuous mode [ 353.922106][T13853] CPU: 0 PID: 13853 Comm: syz.1.3317 Not tainted syzkaller #0 [ 353.934843][T13853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.944963][T13853] Call Trace: [ 353.948256][T13853] [ 353.951200][T13853] dump_stack_lvl+0x188/0x250 [ 353.956949][T13853] ? show_regs_print_info+0x20/0x20 [ 353.962254][T13853] ? load_image+0x410/0x410 [ 353.966830][T13853] ? __lock_acquire+0x7b50/0x7b50 [ 353.972058][T13853] should_fail+0x383/0x4b0 [ 353.976509][T13853] _copy_from_user+0x2e/0x170 [ 353.981210][T13853] __copy_msghdr_from_user+0x48a/0x630 [ 353.986780][T13853] ? verify_lock_unused+0x140/0x140 [ 353.992032][T13853] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 353.997333][T13853] ? __lock_acquire+0x13dc/0x7b50 [ 354.002408][T13853] ___sys_sendmsg+0x19a/0x2e0 [ 354.007141][T13853] ? __sys_sendmsg+0x290/0x290 [ 354.011960][T13853] __se_sys_sendmsg+0x1b7/0x2a0 [ 354.016866][T13853] ? __x64_sys_sendmsg+0x80/0x80 [ 354.021818][T13853] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 354.027825][T13853] ? lockdep_hardirqs_on+0x94/0x140 [ 354.033046][T13853] do_syscall_64+0x4c/0xa0 [ 354.037574][T13853] ? clear_bhb_loop+0x30/0x80 [ 354.042282][T13853] ? clear_bhb_loop+0x30/0x80 [ 354.046980][T13853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 354.048671][T13860] netlink: 'syz.3.3319': attribute type 27 has an invalid length. [ 354.052888][T13853] RIP: 0033:0x7f505ce7b019 [ 354.052913][T13853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.052927][T13853] RSP: 002b:00007f505b0d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.052946][T13853] RAX: ffffffffffffffda RBX: 00007f505d102fa0 RCX: 00007f505ce7b019 [ 354.052960][T13853] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 354.052970][T13853] RBP: 00007f505b0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 354.052982][T13853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.052993][T13853] R13: 00007f505d103038 R14: 00007f505d102fa0 R15: 00007ffddc92e788 [ 354.053019][T13853] [ 354.323897][T13860] bond0: (slave bond_slave_0): Releasing backup interface [ 354.420125][T13867] netlink: 'syz.1.3322': attribute type 4 has an invalid length. [ 354.431424][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 354.458118][T13867] netlink: 150428 bytes leftover after parsing attributes in process `syz.1.3322'. [ 354.628274][ T4730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.209240][T13890] pim6reg: tun_chr_ioctl cmd 1074025677 [ 355.251342][T13890] pim6reg: linktype set to 823 [ 355.677140][T13916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3332'. [ 355.705772][T13920] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3332'. [ 355.790838][T13920] device hsr_slave_0 left promiscuous mode [ 355.805691][T13920] device hsr_slave_1 left promiscuous mode [ 355.950763][T13924] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3335'. [ 355.984215][T13922] delete_channel: no stack [ 355.991919][T13931] netlink: 'syz.4.3340': attribute type 10 has an invalid length. [ 355.999803][T13931] device geneve0 entered promiscuous mode [ 356.123518][T13937] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3342'. [ 356.194507][T13936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3350'. [ 356.215375][T13727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.284324][T13727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.337131][T13946] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3350'. [ 356.462620][T13727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.491698][T13727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.501591][ T2304] Bluetooth: hci1: command 0x040f tx timeout [ 357.091840][T13973] pim6reg: tun_chr_ioctl cmd 1074025677 [ 357.116295][T13973] pim6reg: linktype set to 823 [ 357.137588][T13727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.174943][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 357.184630][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.204877][T13727] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.238335][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 357.253082][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.281987][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.289348][ T4736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.349493][T13983] netlink: 'syz.1.3349': attribute type 11 has an invalid length. [ 357.361758][T13985] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3352'. [ 357.373526][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 357.420860][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 357.440407][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.474831][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.482006][ T4736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.604031][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 357.694146][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 357.706614][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.718108][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 357.729951][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.761836][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.781033][T14006] FAULT_INJECTION: forcing a failure. [ 357.781033][T14006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.796594][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.816791][T14006] CPU: 0 PID: 14006 Comm: syz.1.3359 Not tainted syzkaller #0 [ 357.816934][T13997] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3355'. [ 357.824323][T14006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.824341][T14006] Call Trace: [ 357.824352][T14006] [ 357.824366][T14006] dump_stack_lvl+0x188/0x250 [ 357.824402][T14006] ? show_regs_print_info+0x20/0x20 [ 357.824426][T14006] ? load_image+0x410/0x410 [ 357.824458][T14006] ? __lock_acquire+0x7b50/0x7b50 [ 357.824499][T14006] should_fail+0x383/0x4b0 [ 357.824537][T14006] _copy_from_user+0x2e/0x170 [ 357.824570][T14006] iovec_from_user+0x142/0x370 [ 357.824605][T14006] __import_iovec+0x70/0x490 [ 357.824652][T14006] import_iovec+0x6f/0xa0 [ 357.824684][T14006] ___sys_sendmsg+0x1fd/0x2e0 [ 357.824726][T14006] ? __sys_sendmsg+0x290/0x290 [ 357.824777][T14006] ? trace_event_raw_event_lock+0x250/0x250 [ 357.824862][T14006] __se_sys_sendmsg+0x1b7/0x2a0 [ 357.824893][T14006] ? __x64_sys_sendmsg+0x80/0x80 [ 357.824911][T14006] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 357.824967][T14006] ? lockdep_hardirqs_on+0x94/0x140 [ 357.825003][T14006] do_syscall_64+0x4c/0xa0 [ 357.825021][T14006] ? clear_bhb_loop+0x30/0x80 [ 357.825040][T14006] ? clear_bhb_loop+0x30/0x80 [ 357.825067][T14006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 357.825088][T14006] RIP: 0033:0x7f505ce7b019 [ 357.825113][T14006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.825131][T14006] RSP: 002b:00007f505b0d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.825159][T14006] RAX: ffffffffffffffda RBX: 00007f505d102fa0 RCX: 00007f505ce7b019 [ 357.825175][T14006] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 357.825189][T14006] RBP: 00007f505b0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 357.825206][T14006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.825219][T14006] R13: 00007f505d103038 R14: 00007f505d102fa0 R15: 00007ffddc92e788 [ 357.825282][T14006] [ 357.911920][T14011] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.3361'. [ 358.046084][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.073829][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.103209][T13727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.209097][T13727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.233419][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.258496][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.602248][ T4261] Bluetooth: hci1: command 0x0419 tx timeout [ 358.819360][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.844627][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.929218][T13727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.980265][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 359.044200][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 359.176436][ T4730] device veth1_macvtap left promiscuous mode [ 359.199322][ T4730] device veth0_macvtap left promiscuous mode [ 359.216756][ T4730] device veth1_vlan left promiscuous mode [ 359.229155][ T4730] device veth0_vlan left promiscuous mode [ 359.575965][ T4730] team0 (unregistering): Port device team_slave_1 removed [ 359.665335][T13727] device veth0_vlan entered promiscuous mode [ 359.673191][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 359.682834][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.692344][T14074] __nla_validate_parse: 3 callbacks suppressed [ 359.692426][T14074] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3384'. [ 359.716561][T14084] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3384'. [ 359.741232][T14093] netlink: 'syz.2.3391': attribute type 21 has an invalid length. [ 359.782062][T13727] device veth1_vlan entered promiscuous mode [ 359.808825][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.820027][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.827567][T14101] netlink: 'syz.3.3394': attribute type 29 has an invalid length. [ 359.893314][T14101] netlink: 'syz.3.3394': attribute type 29 has an invalid length. [ 359.914878][T14106] netlink: 'syz.3.3394': attribute type 29 has an invalid length. [ 359.933621][T14108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3397'. [ 359.955190][T13727] device veth0_macvtap entered promiscuous mode [ 359.976761][T14101] netlink: 'syz.3.3394': attribute type 29 has an invalid length. [ 359.997170][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.035182][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.065399][T14114] netlink: 'syz.2.3398': attribute type 10 has an invalid length. [ 360.085615][T14114] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.3398'. [ 360.089604][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 360.119462][T14108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3397'. [ 360.136176][T13727] device veth1_macvtap entered promiscuous mode [ 360.180377][T14110] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3397'. [ 360.191215][T14114] openvswitch: netlink: Flow key attr not present in new flow. [ 360.227354][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.248564][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.308479][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.324918][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.352151][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.363621][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.374397][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.394145][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.406614][T13727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.419109][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.434482][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.445237][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.456129][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.467329][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.478220][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.493533][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.508257][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.527216][T13727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.540077][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 360.562288][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 360.603149][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 360.616908][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 360.628194][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 360.650435][T13727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.660494][T13727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.674537][T13727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.710881][T13727] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.727181][T14134] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3406'. [ 360.770296][T14141] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3406'. [ 360.783599][T14146] netlink: 'syz.2.3409': attribute type 10 has an invalid length. [ 360.806938][T14146] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.815191][T14146] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.849813][T14146] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.857201][T14146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.866617][T14146] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.873878][T14146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.898019][T14146] team0: Port device bridge0 added [ 361.127084][T14159] netlink: 'syz.2.3411': attribute type 2 has an invalid length. [ 361.220600][T14159] netlink: 'syz.2.3411': attribute type 1 has an invalid length. [ 361.241722][T14159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.301072][ T4736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.338033][ T4736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.370803][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 361.456174][ T4732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.487111][ T4732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.518957][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 361.663814][T14182] device wlan1 entered promiscuous mode [ 361.774733][T14185] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3422'. [ 362.396851][T14226] validate_nla: 2 callbacks suppressed [ 362.396899][T14226] netlink: 'syz.0.3436': attribute type 29 has an invalid length. [ 362.440335][T14226] netlink: 'syz.0.3436': attribute type 29 has an invalid length. [ 362.483938][T14236] netlink: 'syz.0.3436': attribute type 29 has an invalid length. [ 362.518325][T14235] netlink: 'syz.4.3439': attribute type 4 has an invalid length. [ 363.052373][T14255] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3446'. [ 363.960860][T14268] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 364.032206][T14268] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 364.299740][T14281] device wlan1 left promiscuous mode [ 365.310470][T14337] __nla_validate_parse: 5 callbacks suppressed [ 365.310574][T14337] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3475'. [ 365.554356][T14355] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3478'. [ 365.643724][T14355] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 366.136720][T14383] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3492'. [ 366.497909][T14401] netlink: 2220 bytes leftover after parsing attributes in process `syz.2.3499'. [ 366.630697][T14401] device wlan1 left promiscuous mode [ 366.696860][T14401] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3499'. [ 366.720017][T14403] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3500'. [ 366.767172][T14403] openvswitch: netlink: IP tunnel dst address not specified [ 366.871521][T14422] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3507'. [ 366.918103][T14422] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3507'. [ 367.332452][T14431] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3511'. [ 367.597768][T14447] device wlan1 entered promiscuous mode [ 367.872865][T14461] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3520'. [ 368.083783][T14465] netlink: 'syz.1.3524': attribute type 27 has an invalid length. [ 368.162240][T14467] device hsr_slave_0 left promiscuous mode [ 368.193995][T14467] device hsr_slave_1 left promiscuous mode [ 369.820042][T14551] netlink: 'syz.2.3557': attribute type 21 has an invalid length. [ 369.962571][T14562] netlink: 'syz.4.3559': attribute type 9 has an invalid length. [ 369.987640][T14557] netlink: 'syz.3.3560': attribute type 25 has an invalid length. [ 370.011357][T14557] netlink: 'syz.3.3560': attribute type 9 has an invalid length. [ 370.129006][T14571] netlink: 'syz.1.3566': attribute type 19 has an invalid length. [ 370.693460][T14592] __nla_validate_parse: 12 callbacks suppressed [ 370.693493][T14592] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3572'. [ 370.859212][T14603] device syzkaller0 entered promiscuous mode [ 370.872705][T14605] netlink: 'syz.1.3575': attribute type 10 has an invalid length. [ 370.948691][T14614] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3577'. [ 370.999127][T14619] netlink: 'syz.0.3578': attribute type 3 has an invalid length. [ 371.027960][T14619] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3578'. [ 371.149140][T14627] device wlan1 entered promiscuous mode [ 371.395012][T14635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3586'. [ 371.438896][T14645] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3586'. [ 371.703702][T14659] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3593'. [ 371.779440][T14652] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3591'. [ 371.828220][T14664] netlink: 'syz.2.3596': attribute type 10 has an invalid length. [ 372.045842][T14664] device veth0_vlan left promiscuous mode [ 372.090993][T14664] device veth0_vlan entered promiscuous mode [ 372.103032][T14664] team0: Device veth0_vlan failed to register rx_handler [ 372.427173][T14690] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3605'. [ 372.458765][T14690] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3605'. [ 372.656062][T14696] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3609'. [ 372.684793][T14694] pim6reg: tun_chr_ioctl cmd 1074025677 [ 372.716183][T14694] pim6reg: linktype set to 823 [ 374.618560][T14770] FAULT_INJECTION: forcing a failure. [ 374.618560][T14770] name failslab, interval 1, probability 0, space 0, times 0 [ 374.767939][T14770] CPU: 0 PID: 14770 Comm: syz.3.3636 Not tainted syzkaller #0 [ 374.775681][T14770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.785756][T14770] Call Trace: [ 374.789056][T14770] [ 374.792010][T14770] dump_stack_lvl+0x188/0x250 [ 374.796808][T14770] ? show_regs_print_info+0x20/0x20 [ 374.802025][T14770] ? load_image+0x410/0x410 [ 374.806552][T14770] ? __lock_acquire+0x7b50/0x7b50 [ 374.811699][T14770] should_fail+0x383/0x4b0 [ 374.816146][T14770] should_failslab+0x5/0x20 [ 374.820784][T14770] slab_pre_alloc_hook+0x51/0xc0 [ 374.825794][T14770] kmem_cache_alloc_trace+0x47/0x290 [ 374.831089][T14770] ? apparmor_sk_alloc_security+0x74/0x100 [ 374.836990][T14770] apparmor_sk_alloc_security+0x74/0x100 [ 374.842653][T14770] security_sk_alloc+0x6a/0xa0 [ 374.847598][T14770] sk_prot_alloc+0x101/0x210 [ 374.852217][T14770] ? sk_alloc+0x1d/0x310 [ 374.856674][T14770] sk_alloc+0x2f/0x310 [ 374.860765][T14770] bpf_prog_test_run_skb+0x23c/0x1190 [ 374.866356][T14770] ? __fget_files+0x402/0x470 [ 374.871075][T14770] ? cpu_online+0x60/0x60 [ 374.875449][T14770] bpf_prog_test_run+0x31c/0x390 [ 374.880406][T14770] __sys_bpf+0x5a5/0x6f0 [ 374.884692][T14770] ? bpf_link_show_fdinfo+0x380/0x380 [ 374.890094][T14770] __x64_sys_bpf+0x78/0x90 [ 374.894507][T14770] do_syscall_64+0x4c/0xa0 [ 374.898930][T14770] ? clear_bhb_loop+0x30/0x80 [ 374.903610][T14770] ? clear_bhb_loop+0x30/0x80 [ 374.908314][T14770] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.914226][T14770] RIP: 0033:0x7fbe27b8f019 [ 374.918683][T14770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.938302][T14770] RSP: 002b:00007fbe25de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.946724][T14770] RAX: ffffffffffffffda RBX: 00007fbe27e16fa0 RCX: 00007fbe27b8f019 [ 374.954722][T14770] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 374.963134][T14770] RBP: 00007fbe25de7090 R08: 0000000000000000 R09: 0000000000000000 [ 374.971291][T14770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.980281][T14770] R13: 00007fbe27e17038 R14: 00007fbe27e16fa0 R15: 00007ffcfe295968 [ 374.988373][T14770] [ 375.327964][T14786] pim6reg: tun_chr_ioctl cmd 1074025677 [ 375.353287][T14786] pim6reg: linktype set to 823 [ 375.731221][T14822] pim6reg: tun_chr_ioctl cmd 1074025677 [ 375.770470][T14822] pim6reg: linktype set to 823 [ 375.986323][T14832] __nla_validate_parse: 9 callbacks suppressed [ 375.986362][T14832] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3654'. [ 376.028766][T14832] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3654'. [ 376.045170][T14837] FAULT_INJECTION: forcing a failure. [ 376.045170][T14837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.110697][T14837] CPU: 1 PID: 14837 Comm: syz.3.3656 Not tainted syzkaller #0 [ 376.118373][T14837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.128483][T14837] Call Trace: [ 376.131784][T14837] [ 376.134725][T14837] dump_stack_lvl+0x188/0x250 [ 376.139437][T14837] ? show_regs_print_info+0x20/0x20 [ 376.144651][T14837] ? load_image+0x410/0x410 [ 376.149502][T14837] ? __lock_acquire+0x7b50/0x7b50 [ 376.154527][T14837] should_fail+0x383/0x4b0 [ 376.159101][T14837] _copy_from_user+0x2e/0x170 [ 376.163877][T14837] __sys_bpf+0x26d/0x6f0 [ 376.168143][T14837] ? bpf_link_show_fdinfo+0x380/0x380 [ 376.173557][T14837] __x64_sys_bpf+0x78/0x90 [ 376.178903][T14837] do_syscall_64+0x4c/0xa0 [ 376.183954][T14837] ? clear_bhb_loop+0x30/0x80 [ 376.188823][T14837] ? clear_bhb_loop+0x30/0x80 [ 376.193612][T14837] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.199703][T14837] RIP: 0033:0x7fbe27b8f019 [ 376.204132][T14837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.223977][T14837] RSP: 002b:00007fbe25de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.232415][T14837] RAX: ffffffffffffffda RBX: 00007fbe27e16fa0 RCX: 00007fbe27b8f019 [ 376.240410][T14837] RDX: 0000000000000020 RSI: 0000200000001340 RDI: 0000000000000012 [ 376.248387][T14837] RBP: 00007fbe25de7090 R08: 0000000000000000 R09: 0000000000000000 [ 376.256490][T14837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.264568][T14837] R13: 00007fbe27e17038 R14: 00007fbe27e16fa0 R15: 00007ffcfe295968 [ 376.272916][T14837] [ 376.627748][T14862] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3666'. [ 376.705678][T14862] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 378.599337][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.607996][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.014475][T14860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.037845][T14879] netlink: 'syz.4.3666': attribute type 46 has an invalid length. [ 379.038357][T14877] delete_channel: no stack [ 379.058152][T14879] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3666'. [ 379.250327][T14891] netlink: 'syz.1.3675': attribute type 3 has an invalid length. [ 379.279067][T14891] netlink: 'syz.1.3675': attribute type 6 has an invalid length. [ 379.305849][T14891] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.3675'. [ 379.473793][T14896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3676'. [ 379.648472][T14912] FAULT_INJECTION: forcing a failure. [ 379.648472][T14912] name failslab, interval 1, probability 0, space 0, times 0 [ 379.721213][T14912] CPU: 0 PID: 14912 Comm: syz.2.3683 Not tainted syzkaller #0 [ 379.728853][T14912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.738942][T14912] Call Trace: [ 379.742224][T14912] [ 379.745180][T14912] dump_stack_lvl+0x188/0x250 [ 379.749858][T14912] ? show_regs_print_info+0x20/0x20 [ 379.755057][T14912] ? load_image+0x410/0x410 [ 379.759603][T14912] should_fail+0x383/0x4b0 [ 379.764020][T14912] should_failslab+0x5/0x20 [ 379.768527][T14912] slab_pre_alloc_hook+0x51/0xc0 [ 379.773481][T14912] ? skb_clone+0x1bd/0x350 [ 379.777966][T14912] kmem_cache_alloc+0x3d/0x280 [ 379.782748][T14912] skb_clone+0x1bd/0x350 [ 379.787012][T14912] __netlink_deliver_tap+0x3cb/0x7c0 [ 379.792331][T14912] netlink_deliver_tap+0x16c/0x180 [ 379.797453][T14912] netlink_unicast+0x759/0x940 [ 379.802261][T14912] netlink_sendmsg+0x8ba/0xbe0 [ 379.807057][T14912] ? netlink_getsockopt+0x570/0x570 [ 379.812283][T14912] ? aa_sock_msg_perm+0x94/0x150 [ 379.817247][T14912] ? apparmor_socket_sendmsg+0x88/0x230 [ 379.822808][T14912] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 379.828183][T14912] ? security_socket_sendmsg+0x7c/0xa0 [ 379.833642][T14912] ? netlink_getsockopt+0x570/0x570 [ 379.838865][T14912] ____sys_sendmsg+0x5be/0x8f0 [ 379.843659][T14912] ? __sys_sendmsg_sock+0x30/0x30 [ 379.848886][T14912] ? import_iovec+0x6f/0xa0 [ 379.853414][T14912] ___sys_sendmsg+0x236/0x2e0 [ 379.858104][T14912] ? __sys_sendmsg+0x290/0x290 [ 379.862896][T14912] __se_sys_sendmsg+0x1b7/0x2a0 [ 379.868088][T14912] ? __x64_sys_sendmsg+0x80/0x80 [ 379.873161][T14912] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 379.880555][T14912] ? lockdep_hardirqs_on+0x94/0x140 [ 379.885908][T14912] do_syscall_64+0x4c/0xa0 [ 379.890353][T14912] ? clear_bhb_loop+0x30/0x80 [ 379.895089][T14912] ? clear_bhb_loop+0x30/0x80 [ 379.899798][T14912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 379.905876][T14912] RIP: 0033:0x7f50c9048019 [ 379.910456][T14912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.930174][T14912] RSP: 002b:00007f50c72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.938590][T14912] RAX: ffffffffffffffda RBX: 00007f50c92cffa0 RCX: 00007f50c9048019 [ 379.946738][T14912] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 379.954723][T14912] RBP: 00007f50c72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 379.962778][T14912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.971070][T14912] R13: 00007f50c92d0038 R14: 00007f50c92cffa0 R15: 00007ffcf67da778 [ 379.979163][T14912] [ 380.022487][T14912] netlink: 'syz.2.3683': attribute type 46 has an invalid length. [ 380.030921][T14912] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3683'. [ 380.040985][T14918] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3684'. [ 380.059348][T14923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3684'. [ 380.349790][T14939] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.3695'. [ 380.607407][T14949] netlink: 'syz.1.3698': attribute type 46 has an invalid length. [ 380.911878][T14963] netlink: 'syz.3.3704': attribute type 2 has an invalid length. [ 381.534097][T15013] __nla_validate_parse: 1 callbacks suppressed [ 381.534156][T15013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3725'. [ 381.593893][T15013] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3725'. [ 381.790779][T15019] FAULT_INJECTION: forcing a failure. [ 381.790779][T15019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.824989][T15019] CPU: 0 PID: 15019 Comm: syz.1.3728 Not tainted syzkaller #0 [ 381.832495][T15019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.842808][T15019] Call Trace: [ 381.846080][T15019] [ 381.849026][T15019] dump_stack_lvl+0x188/0x250 [ 381.853721][T15019] ? show_regs_print_info+0x20/0x20 [ 381.858929][T15019] ? load_image+0x410/0x410 [ 381.863430][T15019] ? __lock_acquire+0x7b50/0x7b50 [ 381.868455][T15019] should_fail+0x383/0x4b0 [ 381.872871][T15019] _copy_from_user+0x2e/0x170 [ 381.877540][T15019] __copy_msghdr_from_user+0xc9/0x630 [ 381.883022][T15019] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 381.888313][T15019] ___sys_sendmsg+0x19a/0x2e0 [ 381.893014][T15019] ? __sys_sendmsg+0x290/0x290 [ 381.897822][T15019] ? rcu_nmi_exit+0x6f/0xf0 [ 381.902367][T15019] __se_sys_sendmsg+0x1b7/0x2a0 [ 381.907229][T15019] ? __x64_sys_sendmsg+0x80/0x80 [ 381.912176][T15019] ? syscall_enter_from_user_mode+0x2a/0x70 [ 381.918083][T15019] do_syscall_64+0x4c/0xa0 [ 381.922522][T15019] ? clear_bhb_loop+0x30/0x80 [ 381.927365][T15019] ? clear_bhb_loop+0x30/0x80 [ 381.932037][T15019] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 381.937933][T15019] RIP: 0033:0x7f505ce7b019 [ 381.942344][T15019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.962121][T15019] RSP: 002b:00007f505b0d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.970535][T15019] RAX: ffffffffffffffda RBX: 00007f505d102fa0 RCX: 00007f505ce7b019 [ 381.978613][T15019] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 381.986592][T15019] RBP: 00007f505b0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 381.994827][T15019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.002889][T15019] R13: 00007f505d103038 R14: 00007f505d102fa0 R15: 00007ffddc92e788 [ 382.010869][T15019] [ 382.286917][T15023] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 382.409648][T15023] device syzkaller0 entered promiscuous mode [ 382.662306][T15048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3739'. [ 382.699080][T15051] FAULT_INJECTION: forcing a failure. [ 382.699080][T15051] name failslab, interval 1, probability 0, space 0, times 0 [ 382.736165][T15051] CPU: 1 PID: 15051 Comm: syz.1.3740 Not tainted syzkaller #0 [ 382.743675][T15051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.753750][T15051] Call Trace: [ 382.757037][T15051] [ 382.759987][T15051] dump_stack_lvl+0x188/0x250 [ 382.764691][T15051] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 382.770869][T15051] ? show_regs_print_info+0x20/0x20 [ 382.776135][T15051] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 382.782325][T15051] should_fail+0x383/0x4b0 [ 382.786767][T15051] should_failslab+0x5/0x20 [ 382.791279][T15051] slab_pre_alloc_hook+0x51/0xc0 [ 382.796229][T15051] kmem_cache_alloc_node+0x47/0x2c0 [ 382.801430][T15051] ? perf_event_alloc+0x14a/0x21d0 [ 382.806665][T15051] perf_event_alloc+0x14a/0x21d0 [ 382.811625][T15051] ? __fdget+0x18b/0x210 [ 382.815882][T15051] ? perf_fget_light+0x14/0x130 [ 382.820918][T15051] __se_sys_perf_event_open+0x5de/0x1bb0 [ 382.826568][T15051] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 382.832230][T15051] ? lockdep_hardirqs_on+0x94/0x140 [ 382.837450][T15051] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 382.843102][T15051] do_syscall_64+0x4c/0xa0 [ 382.847527][T15051] ? clear_bhb_loop+0x30/0x80 [ 382.852205][T15051] ? clear_bhb_loop+0x30/0x80 [ 382.856892][T15051] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.862789][T15051] RIP: 0033:0x7f505ce7b019 [ 382.867214][T15051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.887438][T15051] RSP: 002b:00007f505b0d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 382.895863][T15051] RAX: ffffffffffffffda RBX: 00007f505d102fa0 RCX: 00007f505ce7b019 [ 382.903835][T15051] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000500 [ 382.911817][T15051] RBP: 00007f505b0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 382.919796][T15051] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 382.928204][T15051] R13: 00007f505d103038 R14: 00007f505d102fa0 R15: 00007ffddc92e788 [ 382.936219][T15051] [ 383.535208][T15090] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3757'. [ 383.590730][T15090] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3757'. [ 383.652135][T15097] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3759'. [ 383.730013][T15097] netlink: 'syz.4.3759': attribute type 2 has an invalid length. [ 384.060930][T15117] netlink: 'syz.4.3768': attribute type 10 has an invalid length. [ 384.268299][T15125] netlink: 'syz.2.3771': attribute type 4 has an invalid length. [ 384.295234][T15125] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3771'. [ 384.369530][T15134] netlink: 'syz.0.3774': attribute type 3 has an invalid length. [ 384.383128][T15134] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3774'. [ 384.505938][T15140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3775'. [ 384.537965][T15138] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3775'. [ 384.669404][T15150] netlink: 'syz.0.3778': attribute type 1 has an invalid length. [ 384.731461][T15150] netlink: 'syz.0.3778': attribute type 4 has an invalid length. [ 385.270458][T15165] FAULT_INJECTION: forcing a failure. [ 385.270458][T15165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.310973][T15165] CPU: 0 PID: 15165 Comm: syz.3.3784 Not tainted syzkaller #0 [ 385.318788][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.328863][T15165] Call Trace: [ 385.332155][T15165] [ 385.335083][T15165] dump_stack_lvl+0x188/0x250 [ 385.339772][T15165] ? show_regs_print_info+0x20/0x20 [ 385.344968][T15165] ? load_image+0x410/0x410 [ 385.349478][T15165] ? __lock_acquire+0x7b50/0x7b50 [ 385.354748][T15165] should_fail+0x383/0x4b0 [ 385.359232][T15165] _copy_from_user+0x2e/0x170 [ 385.364031][T15165] iovec_from_user+0x142/0x370 [ 385.368863][T15165] __import_iovec+0x70/0x490 [ 385.373536][T15165] import_iovec+0x6f/0xa0 [ 385.377900][T15165] ___sys_sendmsg+0x1fd/0x2e0 [ 385.382618][T15165] ? __sys_sendmsg+0x290/0x290 [ 385.387489][T15165] ? trace_event_raw_event_lock+0x250/0x250 [ 385.393443][T15165] __se_sys_sendmsg+0x1b7/0x2a0 [ 385.398322][T15165] ? __x64_sys_sendmsg+0x80/0x80 [ 385.403450][T15165] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 385.409480][T15165] ? lockdep_hardirqs_on+0x94/0x140 [ 385.415107][T15165] do_syscall_64+0x4c/0xa0 [ 385.419671][T15165] ? clear_bhb_loop+0x30/0x80 [ 385.424360][T15165] ? clear_bhb_loop+0x30/0x80 [ 385.429127][T15165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 385.435013][T15165] RIP: 0033:0x7fbe27b8f019 [ 385.439519][T15165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.459403][T15165] RSP: 002b:00007fbe25de7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.467950][T15165] RAX: ffffffffffffffda RBX: 00007fbe27e16fa0 RCX: 00007fbe27b8f019 [ 385.475946][T15165] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 385.483934][T15165] RBP: 00007fbe25de7090 R08: 0000000000000000 R09: 0000000000000000 [ 385.491954][T15165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.500064][T15165] R13: 00007fbe27e17038 R14: 00007fbe27e16fa0 R15: 00007ffcfe295968 [ 385.508074][T15165] [ 386.239385][T15201] netlink: 'syz.2.3795': attribute type 1 has an invalid length. [ 386.345170][T15201] netlink: 'syz.2.3795': attribute type 4 has an invalid length. [ 386.582859][T15207] netlink: 'syz.0.3796': attribute type 46 has an invalid length. [ 386.607202][T15207] __nla_validate_parse: 6 callbacks suppressed [ 386.607239][T15207] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3796'. [ 386.719897][T15212] netlink: 'syz.3.3800': attribute type 10 has an invalid length. [ 386.862234][T15212] device veth0_vlan left promiscuous mode [ 386.943153][T15212] device veth0_vlan entered promiscuous mode [ 387.001357][T15212] team0: Device veth0_vlan failed to register rx_handler [ 387.171945][T15233] netlink: 'syz.0.3805': attribute type 21 has an invalid length. [ 387.191390][T15233] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.199419][T15233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.207030][T15233] IPv6: NLM_F_CREATE should be set when creating new route [ 387.214461][T15233] IPv6: NLM_F_CREATE should be set when creating new route [ 387.717625][T15249] device syzkaller0 entered promiscuous mode [ 387.757621][T15251] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3812'. [ 388.114131][T15263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3817'. [ 388.162135][T15266] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3818'. [ 388.554224][T15290] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3829'. [ 388.674889][T15294] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3831'. [ 389.413275][T15312] validate_nla: 2 callbacks suppressed [ 389.413314][T15312] netlink: 'syz.1.3838': attribute type 4 has an invalid length. [ 389.475898][T15312] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3838'. [ 389.692251][T15321] netlink: 'syz.3.3840': attribute type 4 has an invalid length. [ 389.731303][T15321] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3840'. [ 390.163735][T15334] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3845'. [ 390.670703][T15357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3855'. [ 390.923262][T15368] netlink: 'syz.4.3859': attribute type 21 has an invalid length. [ 390.950947][T15368] IPv6: NLM_F_CREATE should be specified when creating new route [ 390.979129][T15368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.986828][T15368] IPv6: NLM_F_CREATE should be set when creating new route [ 390.994782][T15368] IPv6: NLM_F_CREATE should be set when creating new route [ 391.725717][T15398] __nla_validate_parse: 2 callbacks suppressed [ 391.725756][T15398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3871'. [ 391.819304][T15405] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3871'. [ 391.872573][T15400] netlink: 'syz.3.3872': attribute type 21 has an invalid length. [ 391.887080][T15400] netlink: 'syz.3.3872': attribute type 19 has an invalid length. [ 391.915373][T15400] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.3872'. [ 392.298332][T15428] pim6reg: tun_chr_ioctl cmd 1074025677 [ 392.350540][T15428] pim6reg: linktype set to 823 [ 392.579524][T15445] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3888'. [ 392.624798][T15445] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3888'. [ 392.707470][T15449] netlink: 'syz.3.3887': attribute type 21 has an invalid length. [ 392.720190][T15451] netlink: 'syz.2.3889': attribute type 11 has an invalid length. [ 392.728964][T15449] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.753923][T15451] netlink: 198172 bytes leftover after parsing attributes in process `syz.2.3889'. [ 392.764640][T15449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.772147][T15449] IPv6: NLM_F_CREATE should be set when creating new route [ 392.779544][T15449] IPv6: NLM_F_CREATE should be set when creating new route [ 392.797622][T15456] FAULT_INJECTION: forcing a failure. [ 392.797622][T15456] name failslab, interval 1, probability 0, space 0, times 0 [ 392.818207][T15456] CPU: 0 PID: 15456 Comm: syz.4.3891 Not tainted syzkaller #0 [ 392.825724][T15456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.835802][T15456] Call Trace: [ 392.839100][T15456] [ 392.842065][T15456] dump_stack_lvl+0x188/0x250 [ 392.846773][T15456] ? show_regs_print_info+0x20/0x20 [ 392.852006][T15456] ? load_image+0x410/0x410 [ 392.856544][T15456] ? __might_sleep+0xf0/0xf0 [ 392.861256][T15456] ? __lock_acquire+0x7b50/0x7b50 [ 392.866324][T15456] should_fail+0x383/0x4b0 [ 392.870773][T15456] should_failslab+0x5/0x20 [ 392.875402][T15456] slab_pre_alloc_hook+0x51/0xc0 [ 392.880404][T15456] kmem_cache_alloc_trace+0x47/0x290 [ 392.885717][T15456] ? rxrpc_alloc_call+0x333/0xbf0 [ 392.891057][T15456] rxrpc_alloc_call+0x333/0xbf0 [ 392.895936][T15456] rxrpc_new_client_call+0xe7/0xe10 [ 392.901267][T15456] ? rxrpc_do_sendmsg+0xbc7/0x10c0 [ 392.906402][T15456] ? do_raw_read_unlock+0x39/0x70 [ 392.911709][T15456] ? _raw_read_unlock+0x24/0x40 [ 392.916596][T15456] rxrpc_do_sendmsg+0xbc7/0x10c0 [ 392.921566][T15456] ? rxrpc_process_local_events+0x920/0x920 [ 392.927599][T15456] ? rcu_lock_release+0x20/0x20 [ 392.932479][T15456] ? __local_bh_enable_ip+0x136/0x1c0 [ 392.937993][T15456] ? rxrpc_sendmsg+0x45b/0x890 [ 392.942805][T15456] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 392.948114][T15456] ? rxrpc_getsockopt+0x150/0x150 [ 392.953245][T15456] ____sys_sendmsg+0x5be/0x8f0 [ 392.958025][T15456] ? __sys_sendmsg_sock+0x30/0x30 [ 392.963065][T15456] ? import_iovec+0x6f/0xa0 [ 392.967579][T15456] ___sys_sendmsg+0x236/0x2e0 [ 392.972799][T15456] ? __sys_sendmsg+0x290/0x290 [ 392.977608][T15456] __se_sys_sendmsg+0x1b7/0x2a0 [ 392.982466][T15456] ? __x64_sys_sendmsg+0x80/0x80 [ 392.987396][T15456] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 392.993383][T15456] ? lockdep_hardirqs_on+0x94/0x140 [ 392.998573][T15456] do_syscall_64+0x4c/0xa0 [ 393.002978][T15456] ? clear_bhb_loop+0x30/0x80 [ 393.007651][T15456] ? clear_bhb_loop+0x30/0x80 [ 393.012415][T15456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 393.018843][T15456] RIP: 0033:0x7f023a607019 [ 393.023288][T15456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.042888][T15456] RSP: 002b:00007f023885f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.051298][T15456] RAX: ffffffffffffffda RBX: 00007f023a88efa0 RCX: 00007f023a607019 [ 393.059262][T15456] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 393.067227][T15456] RBP: 00007f023885f090 R08: 0000000000000000 R09: 0000000000000000 [ 393.075307][T15456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.083276][T15456] R13: 00007f023a88f038 R14: 00007f023a88efa0 R15: 00007ffc6a722f98 [ 393.091255][T15456] [ 393.825154][T15486] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3901'. [ 393.936104][T15489] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3903'. [ 393.988010][T15489] netlink: 'syz.3.3903': attribute type 1 has an invalid length. [ 394.002263][T15489] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3903'. [ 394.019056][T15489] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3903'. [ 394.163977][T15504] FAULT_INJECTION: forcing a failure. [ 394.163977][T15504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.200223][T15503] netlink: 'syz.4.3906': attribute type 3 has an invalid length. [ 394.257529][T15504] CPU: 1 PID: 15504 Comm: syz.0.3908 Not tainted syzkaller #0 [ 394.265134][T15504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.275235][T15504] Call Trace: [ 394.278536][T15504] [ 394.281493][T15504] dump_stack_lvl+0x188/0x250 [ 394.286232][T15504] ? show_regs_print_info+0x20/0x20 [ 394.291469][T15504] ? load_image+0x410/0x410 [ 394.296049][T15504] ? __lock_acquire+0x7b50/0x7b50 [ 394.301171][T15504] should_fail+0x383/0x4b0 [ 394.305637][T15504] _copy_from_user+0x2e/0x170 [ 394.310469][T15504] __copy_msghdr_from_user+0x48a/0x630 [ 394.316101][T15504] ? verify_lock_unused+0x140/0x140 [ 394.321473][T15504] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 394.327078][T15504] ___sys_sendmsg+0x19a/0x2e0 [ 394.331918][T15504] ? __sys_sendmsg+0x290/0x290 [ 394.336759][T15504] ? trace_event_raw_event_lock+0x250/0x250 [ 394.342758][T15504] __se_sys_sendmsg+0x1b7/0x2a0 [ 394.347849][T15504] ? __x64_sys_sendmsg+0x80/0x80 [ 394.352902][T15504] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 394.358933][T15504] ? lockdep_hardirqs_on+0x94/0x140 [ 394.364147][T15504] do_syscall_64+0x4c/0xa0 [ 394.368578][T15504] ? clear_bhb_loop+0x30/0x80 [ 394.373270][T15504] ? clear_bhb_loop+0x30/0x80 [ 394.378176][T15504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.384088][T15504] RIP: 0033:0x7ff359d43019 [ 394.389037][T15504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.408649][T15504] RSP: 002b:00007ff357f9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.417360][T15504] RAX: ffffffffffffffda RBX: 00007ff359fcafa0 RCX: 00007ff359d43019 [ 394.425525][T15504] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 394.433587][T15504] RBP: 00007ff357f9b090 R08: 0000000000000000 R09: 0000000000000000 [ 394.441744][T15504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.449799][T15504] R13: 00007ff359fcb038 R14: 00007ff359fcafa0 R15: 00007ffc6549dd78 [ 394.457852][T15504] [ 394.630421][T15514] netlink: 'syz.3.3909': attribute type 1 has an invalid length. [ 394.691861][T15514] netlink: 'syz.3.3909': attribute type 4 has an invalid length. [ 394.785502][T15524] FAULT_INJECTION: forcing a failure. [ 394.785502][T15524] name failslab, interval 1, probability 0, space 0, times 0 [ 394.811575][T15524] CPU: 0 PID: 15524 Comm: syz.0.3913 Not tainted syzkaller #0 [ 394.812867][T15522] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 394.819089][T15524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.834964][T15524] Call Trace: [ 394.838261][T15524] [ 394.841205][T15524] dump_stack_lvl+0x188/0x250 [ 394.845909][T15524] ? show_regs_print_info+0x20/0x20 [ 394.851211][T15524] ? load_image+0x410/0x410 [ 394.855919][T15524] ? __might_sleep+0xf0/0xf0 [ 394.860522][T15524] ? __lock_acquire+0x7b50/0x7b50 [ 394.865649][T15524] should_fail+0x383/0x4b0 [ 394.870176][T15524] should_failslab+0x5/0x20 [ 394.874963][T15524] slab_pre_alloc_hook+0x51/0xc0 [ 394.880523][T15524] ? __d_alloc+0x27/0x6d0 [ 394.884896][T15524] kmem_cache_alloc+0x3d/0x280 [ 394.889778][T15524] __d_alloc+0x27/0x6d0 [ 394.894058][T15524] d_alloc_parallel+0x7b/0x1320 [ 394.898945][T15524] ? __init_waitqueue_head+0xa4/0x140 [ 394.905041][T15524] __lookup_slow+0x134/0x410 [ 394.909682][T15524] ? lookup_one_len+0x2d0/0x2d0 [ 394.914582][T15524] ? step_into+0x363/0xcd0 [ 394.919018][T15524] ? down_read+0x1aa/0x2e0 [ 394.923960][T15524] lookup_slow+0x53/0x70 [ 394.928226][T15524] walk_component+0x314/0x460 [ 394.933266][T15524] link_path_walk+0x688/0xde0 [ 394.938070][T15524] ? handle_lookup_down+0x130/0x130 [ 394.943468][T15524] path_openat+0x28e/0x2fb0 [ 394.948679][T15524] ? perf_trace_lock_acquire+0xed/0x3f0 [ 394.955317][T15524] ? do_filp_open+0x400/0x400 [ 394.960302][T15524] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 394.967705][T15524] do_filp_open+0x1df/0x400 [ 394.972871][T15524] ? vfs_tmpfile+0x300/0x300 [ 394.978065][T15524] ? noop_direct_IO+0x10/0x10 [ 394.983735][T15524] ? _raw_spin_unlock+0x24/0x40 [ 394.988867][T15524] ? alloc_fd+0x59e/0x650 [ 394.993359][T15524] do_sys_openat2+0x14b/0x500 [ 394.998201][T15524] ? __lock_acquire+0x7b50/0x7b50 [ 395.004458][T15524] ? do_sys_open+0xe0/0xe0 [ 395.009062][T15524] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 395.015069][T15524] ? lock_chain_count+0x20/0x20 [ 395.019932][T15524] __x64_sys_openat+0x135/0x160 [ 395.025214][T15524] do_syscall_64+0x4c/0xa0 [ 395.029976][T15524] ? clear_bhb_loop+0x30/0x80 [ 395.034678][T15524] ? clear_bhb_loop+0x30/0x80 [ 395.039370][T15524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 395.045258][T15524] RIP: 0033:0x7ff359d0384e [ 395.049668][T15524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 395.069461][T15524] RSP: 002b:00007ff357f9aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 395.077888][T15524] RAX: ffffffffffffffda RBX: 00007ff357f9b6c0 RCX: 00007ff359d0384e [ 395.086121][T15524] RDX: 0000000000000002 RSI: 00007ff357f9af90 RDI: ffffffffffffff9c [ 395.094293][T15524] RBP: 00007ff357f9b090 R08: 0000000000000000 R09: 0000000000000000 [ 395.102365][T15524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.110344][T15524] R13: 00007ff359fcb038 R14: 00007ff359fcafa0 R15: 00007ffc6549dd78 [ 395.118331][T15524] [ 395.820795][T15556] netlink: 'syz.1.3925': attribute type 12 has an invalid length. [ 395.980092][T15558] mac80211_hwsim hwsim47 »»»»»»: renamed from wlan0 [ 396.294895][T15577] netlink: 'syz.2.3928': attribute type 1 has an invalid length. [ 396.343407][T15577] netlink: 'syz.2.3928': attribute type 4 has an invalid length. [ 396.426210][T15583] netlink: 'syz.1.3934': attribute type 10 has an invalid length. [ 396.458303][T15583] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 396.553787][T15583] batman_adv: batadv0: Removing interface: veth0_vlan [ 396.575801][T15583] device veth0_vlan left promiscuous mode [ 396.590603][T15583] device veth0_vlan entered promiscuous mode [ 396.613044][T15583] team0: Device veth0_vlan failed to register rx_handler [ 396.828810][T15595] __nla_validate_parse: 6 callbacks suppressed [ 396.828846][T15595] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.3938'. [ 396.915847][T15601] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3939'. [ 396.940468][T15601] bridge_slave_1: default FDB implementation only supports local addresses [ 396.949730][T15598] netlink: 'syz.0.3936': attribute type 39 has an invalid length. [ 396.966853][T15595] netlink: 'syz.2.3938': attribute type 1 has an invalid length. [ 396.985354][T15595] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3938'. [ 397.010589][T15595] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3938'. [ 397.728927][T15639] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.3952'. [ 397.810695][T15639] netlink: 'syz.4.3952': attribute type 1 has an invalid length. [ 397.836400][T15639] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.3952'. [ 397.860064][T15639] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3952'. [ 398.683635][T15676] netlink: 668 bytes leftover after parsing attributes in process `syz.2.3966'. [ 398.726008][T15676] openvswitch: netlink: Key type 15645 is out of range max 29 [ 398.751595][T15680] netlink: 'syz.0.3968': attribute type 39 has an invalid length. [ 398.907655][T15685] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3969'. [ 398.958558][T15685] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3969'. [ 399.687137][T15708] device syzkaller0 entered promiscuous mode [ 399.702476][T15713] validate_nla: 2 callbacks suppressed [ 399.702495][T15713] netlink: 'syz.4.3978': attribute type 3 has an invalid length. [ 399.724934][T15715] FAULT_INJECTION: forcing a failure. [ 399.724934][T15715] name failslab, interval 1, probability 0, space 0, times 0 [ 399.747676][T15713] netlink: 'syz.4.3978': attribute type 1 has an invalid length. [ 399.772996][T15715] CPU: 1 PID: 15715 Comm: syz.3.3979 Not tainted syzkaller #0 [ 399.780673][T15715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.790740][T15715] Call Trace: [ 399.794019][T15715] [ 399.797040][T15715] dump_stack_lvl+0x188/0x250 [ 399.801718][T15715] ? show_regs_print_info+0x20/0x20 [ 399.806914][T15715] ? load_image+0x410/0x410 [ 399.811445][T15715] ? __might_sleep+0xf0/0xf0 [ 399.816029][T15715] ? __lock_acquire+0x7b50/0x7b50 [ 399.821052][T15715] should_fail+0x383/0x4b0 [ 399.825473][T15715] should_failslab+0x5/0x20 [ 399.829974][T15715] slab_pre_alloc_hook+0x51/0xc0 [ 399.834930][T15715] __kmalloc_node_track_caller+0x68/0x3a0 [ 399.840655][T15715] ? netlink_dump+0x1cc/0xdd0 [ 399.845462][T15715] ? __alloc_skb+0xf4/0x750 [ 399.850104][T15715] ? netlink_dump+0x1cc/0xdd0 [ 399.854818][T15715] __alloc_skb+0x22c/0x750 [ 399.859249][T15715] netlink_dump+0x1cc/0xdd0 [ 399.863751][T15715] ? __netlink_dump_start+0xf5/0x720 [ 399.869029][T15715] ? rcu_lock_release+0x5/0x20 [ 399.873791][T15715] ? netlink_lookup+0x1d0/0x1d0 [ 399.878653][T15715] __netlink_dump_start+0x4e4/0x720 [ 399.883864][T15715] rtnetlink_rcv_msg+0xd91/0xf10 [ 399.888889][T15715] ? rtnl_dellink+0x7b0/0x7b0 [ 399.893561][T15715] ? rtnetlink_bind+0x80/0x80 [ 399.898259][T15715] ? __local_bh_enable_ip+0x136/0x1c0 [ 399.903629][T15715] ? lockdep_hardirqs_on+0x94/0x140 [ 399.908830][T15715] ? __local_bh_enable_ip+0x136/0x1c0 [ 399.914206][T15715] ? _local_bh_enable+0xa0/0xa0 [ 399.919067][T15715] ? __dev_queue_xmit+0x1b64/0x2e50 [ 399.924314][T15715] ? dev_queue_xmit+0x20/0x20 [ 399.929016][T15715] ? rtnl_dellink+0x7b0/0x7b0 [ 399.933695][T15715] netlink_rcv_skb+0x1e9/0x430 [ 399.938459][T15715] ? rtnetlink_bind+0x80/0x80 [ 399.943129][T15715] ? netlink_ack+0xb10/0xb10 [ 399.947726][T15715] netlink_unicast+0x78f/0x940 [ 399.952493][T15715] netlink_sendmsg+0x8ba/0xbe0 [ 399.957258][T15715] ? netlink_getsockopt+0x570/0x570 [ 399.962444][T15715] ? aa_sock_msg_perm+0x94/0x150 [ 399.967378][T15715] ? apparmor_socket_sendmsg+0x88/0x230 [ 399.972936][T15715] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 399.978234][T15715] ? security_socket_sendmsg+0x7c/0xa0 [ 399.983721][T15715] ? netlink_getsockopt+0x570/0x570 [ 399.989009][T15715] ____sys_sendmsg+0x5be/0x8f0 [ 399.993779][T15715] ? __sys_sendmsg_sock+0x30/0x30 [ 399.998802][T15715] ? import_iovec+0x6f/0xa0 [ 400.003304][T15715] ___sys_sendmsg+0x236/0x2e0 [ 400.008015][T15715] ? __sys_sendmsg+0x290/0x290 [ 400.012901][T15715] __se_sys_sendmsg+0x1b7/0x2a0 [ 400.017794][T15715] ? __x64_sys_sendmsg+0x80/0x80 [ 400.022719][T15715] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 400.028703][T15715] ? lockdep_hardirqs_on+0x94/0x140 [ 400.033896][T15715] do_syscall_64+0x4c/0xa0 [ 400.038312][T15715] ? clear_bhb_loop+0x30/0x80 [ 400.042988][T15715] ? clear_bhb_loop+0x30/0x80 [ 400.047664][T15715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.053593][T15715] RIP: 0033:0x7fbe27b8f019 [ 400.058203][T15715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.077883][T15715] RSP: 002b:00007fbe25dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.086466][T15715] RAX: ffffffffffffffda RBX: 00007fbe27e17090 RCX: 00007fbe27b8f019 [ 400.094430][T15715] RDX: 0000000000000000 RSI: 0000200000000a40 RDI: 0000000000000005 [ 400.102422][T15715] RBP: 00007fbe25dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.110406][T15715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.118368][T15715] R13: 00007fbe27e17128 R14: 00007fbe27e17090 R15: 00007ffcfe295968 [ 400.126349][T15715] [ 400.454433][T15708] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 400.489810][T15708] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 400.511271][T15708] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 401.519348][T15760] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 401.849026][T15771] netlink: 'syz.0.3999': attribute type 10 has an invalid length. [ 402.099369][T15771] device veth0_vlan left promiscuous mode [ 402.209346][T15771] device veth0_vlan entered promiscuous mode [ 402.269494][T15771] team0: Device veth0_vlan failed to register rx_handler [ 402.503856][T15796] __nla_validate_parse: 10 callbacks suppressed [ 402.503878][T15796] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4006'. [ 402.755255][T15788] device syzkaller0 entered promiscuous mode [ 402.893391][T15806] netlink: 'syz.0.4007': attribute type 29 has an invalid length. [ 402.932039][T15806] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4007'. [ 403.006996][T15806] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 403.029272][T15815] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4011'. [ 403.059819][T15815] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4011'. [ 403.269592][T15824] netlink: 'syz.4.4016': attribute type 21 has an invalid length. [ 403.290009][T15826] netlink: 'syz.2.4018': attribute type 10 has an invalid length. [ 403.306537][T15826] device veth0_vlan left promiscuous mode [ 403.334763][T15826] device veth0_vlan entered promiscuous mode [ 403.346404][T15826] team0: Device veth0_vlan failed to register rx_handler [ 403.937753][T15837] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4019'. [ 404.119432][T15848] netlink: 'syz.2.4024': attribute type 10 has an invalid length. [ 404.258813][T15852] netlink: 'syz.1.4025': attribute type 7 has an invalid length. [ 404.267162][T15852] netlink: 'syz.1.4025': attribute type 6 has an invalid length. [ 404.276099][T15855] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4026'. [ 404.298993][T15855] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4026'. [ 404.489195][T15863] device syzkaller0 entered promiscuous mode [ 404.498397][T15866] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4030'. [ 404.773807][T15881] netlink: 'syz.4.4034': attribute type 1 has an invalid length. [ 404.791669][T15881] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.4034'. [ 404.906180][T15884] netlink: 'syz.2.4036': attribute type 10 has an invalid length. [ 404.944825][T15884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4036'. [ 405.021601][T15884] device veth0_vlan left promiscuous mode [ 405.031747][T15884] device veth0_vlan entered promiscuous mode [ 405.088686][T15884] batman_adv: batadv0: Adding interface: veth0_vlan [ 405.118155][T15884] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.155238][T15884] batman_adv: batadv0: Interface activated: veth0_vlan [ 405.198685][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.224735][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 405.291876][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 405.414841][T15902] FAULT_INJECTION: forcing a failure. [ 405.414841][T15902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.492894][T15902] CPU: 1 PID: 15902 Comm: syz.2.4042 Not tainted syzkaller #0 [ 405.500401][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.510608][T15902] Call Trace: [ 405.513885][T15902] [ 405.516951][T15902] dump_stack_lvl+0x188/0x250 [ 405.521653][T15902] ? show_regs_print_info+0x20/0x20 [ 405.527022][T15902] ? load_image+0x410/0x410 [ 405.531989][T15902] ? __lock_acquire+0x7b50/0x7b50 [ 405.537160][T15902] should_fail+0x383/0x4b0 [ 405.541856][T15902] _copy_from_user+0x2e/0x170 [ 405.546730][T15902] __copy_msghdr_from_user+0x48a/0x630 [ 405.552320][T15902] ? verify_lock_unused+0x140/0x140 [ 405.557869][T15902] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 405.563172][T15902] ? __lock_acquire+0x13dc/0x7b50 [ 405.568240][T15902] ___sys_sendmsg+0x19a/0x2e0 [ 405.572943][T15902] ? __sys_sendmsg+0x290/0x290 [ 405.577831][T15902] __se_sys_sendmsg+0x1b7/0x2a0 [ 405.582853][T15902] ? __x64_sys_sendmsg+0x80/0x80 [ 405.588022][T15902] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 405.594075][T15902] ? lockdep_hardirqs_on+0x94/0x140 [ 405.600001][T15902] do_syscall_64+0x4c/0xa0 [ 405.604505][T15902] ? clear_bhb_loop+0x30/0x80 [ 405.609210][T15902] ? clear_bhb_loop+0x30/0x80 [ 405.613902][T15902] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 405.620012][T15902] RIP: 0033:0x7f50c9048019 [ 405.624432][T15902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.644545][T15902] RSP: 002b:00007f50c72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.653071][T15902] RAX: ffffffffffffffda RBX: 00007f50c92cffa0 RCX: 00007f50c9048019 [ 405.661187][T15902] RDX: 0000000000048100 RSI: 0000200000000000 RDI: 0000000000000003 [ 405.669269][T15902] RBP: 00007f50c72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 405.677503][T15902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.685931][T15902] R13: 00007f50c92d0038 R14: 00007f50c92cffa0 R15: 00007ffcf67da778 [ 405.694549][T15902] [ 405.840129][T15907] netlink: 'syz.1.4044': attribute type 10 has an invalid length. [ 405.909842][T15907] device veth0_vlan left promiscuous mode [ 405.958841][T15907] device veth0_vlan entered promiscuous mode [ 406.189025][T15907] batman_adv: batadv0: Adding interface: veth0_vlan [ 406.211355][T15907] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.246975][T15907] batman_adv: batadv0: Interface activated: veth0_vlan [ 406.302798][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.340213][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.372140][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.400603][T15924] netlink: 'syz.4.4050': attribute type 1 has an invalid length. [ 406.575833][T15928] device syzkaller0 entered promiscuous mode [ 407.237123][T15928] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 407.304270][T15928] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 407.322782][T15928] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 407.519414][T15962] FAULT_INJECTION: forcing a failure. [ 407.519414][T15962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.577941][T15962] CPU: 0 PID: 15962 Comm: syz.2.4060 Not tainted syzkaller #0 [ 407.585455][T15962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.595533][T15962] Call Trace: [ 407.598829][T15962] [ 407.601904][T15962] dump_stack_lvl+0x188/0x250 [ 407.606697][T15962] ? show_regs_print_info+0x20/0x20 [ 407.611910][T15962] ? load_image+0x410/0x410 [ 407.616569][T15962] ? __lock_acquire+0x7b50/0x7b50 [ 407.619284][T15961] __nla_validate_parse: 7 callbacks suppressed [ 407.619301][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4061'. [ 407.621795][T15962] ? __lock_acquire+0x7b50/0x7b50 [ 407.621825][T15962] should_fail+0x383/0x4b0 [ 407.621848][T15962] _copy_from_user+0x2e/0x170 [ 407.621877][T15962] ____sys_sendmsg+0x313/0x8f0 [ 407.656384][T15962] ? __sys_sendmsg_sock+0x30/0x30 [ 407.661539][T15962] ? import_iovec+0x6f/0xa0 [ 407.666066][T15962] ___sys_sendmsg+0x236/0x2e0 [ 407.671116][T15962] ? __sys_sendmsg+0x290/0x290 [ 407.675910][T15962] __se_sys_sendmsg+0x1b7/0x2a0 [ 407.680771][T15962] ? __x64_sys_sendmsg+0x80/0x80 [ 407.685720][T15962] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 407.691730][T15962] ? lockdep_hardirqs_on+0x94/0x140 [ 407.696965][T15962] do_syscall_64+0x4c/0xa0 [ 407.701384][T15962] ? clear_bhb_loop+0x30/0x80 [ 407.706066][T15962] ? clear_bhb_loop+0x30/0x80 [ 407.710744][T15962] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 407.716909][T15962] RIP: 0033:0x7f50c9048019 [ 407.721797][T15962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.741509][T15962] RSP: 002b:00007f50c72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.749943][T15962] RAX: ffffffffffffffda RBX: 00007f50c92cffa0 RCX: 00007f50c9048019 [ 407.758117][T15962] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 407.766139][T15962] RBP: 00007f50c72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 407.774214][T15962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.782201][T15962] R13: 00007f50c92d0038 R14: 00007f50c92cffa0 R15: 00007ffcf67da778 [ 407.790501][T15962] [ 408.378345][T15996] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4073'. [ 408.465736][T15996] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4073'. [ 408.639180][T16004] netlink: 'syz.3.4075': attribute type 11 has an invalid length. [ 408.810099][T16023] FAULT_INJECTION: forcing a failure. [ 408.810099][T16023] name failslab, interval 1, probability 0, space 0, times 0 [ 408.859709][T16023] CPU: 1 PID: 16023 Comm: syz.2.4081 Not tainted syzkaller #0 [ 408.867407][T16023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.877484][T16023] Call Trace: [ 408.880781][T16023] [ 408.883736][T16023] dump_stack_lvl+0x188/0x250 [ 408.888450][T16023] ? show_regs_print_info+0x20/0x20 [ 408.893712][T16023] ? load_image+0x410/0x410 [ 408.898270][T16023] ? __might_sleep+0xf0/0xf0 [ 408.902881][T16023] ? __lock_acquire+0x7b50/0x7b50 [ 408.907911][T16023] ? netlink_insert+0xe90/0x11f0 [ 408.912863][T16023] should_fail+0x383/0x4b0 [ 408.917322][T16023] should_failslab+0x5/0x20 [ 408.921848][T16023] slab_pre_alloc_hook+0x51/0xc0 [ 408.926908][T16023] kmem_cache_alloc_node+0x47/0x2c0 [ 408.932143][T16023] ? __alloc_skb+0xf4/0x750 [ 408.937651][T16023] __alloc_skb+0xf4/0x750 [ 408.942027][T16023] netlink_sendmsg+0x654/0xbe0 [ 408.947297][T16023] ? netlink_getsockopt+0x570/0x570 [ 408.953636][T16023] ? aa_sock_msg_perm+0x94/0x150 [ 408.959600][T16023] ? apparmor_socket_sendmsg+0x88/0x230 [ 408.965369][T16023] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 408.971076][T16023] ? security_socket_sendmsg+0x7c/0xa0 [ 408.976585][T16023] ? netlink_getsockopt+0x570/0x570 [ 408.981810][T16023] ____sys_sendmsg+0x5be/0x8f0 [ 408.986765][T16023] ? __sys_sendmsg_sock+0x30/0x30 [ 408.992096][T16023] ? import_iovec+0x6f/0xa0 [ 408.996644][T16023] ___sys_sendmsg+0x236/0x2e0 [ 409.001373][T16023] ? __sys_sendmsg+0x290/0x290 [ 409.006176][T16023] ? trace_event_raw_event_lock+0x250/0x250 [ 409.012150][T16023] __se_sys_sendmsg+0x1b7/0x2a0 [ 409.017276][T16023] ? __x64_sys_sendmsg+0x80/0x80 [ 409.022484][T16023] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 409.028521][T16023] ? lockdep_hardirqs_on+0x94/0x140 [ 409.033752][T16023] do_syscall_64+0x4c/0xa0 [ 409.038176][T16023] ? clear_bhb_loop+0x30/0x80 [ 409.042873][T16023] ? clear_bhb_loop+0x30/0x80 [ 409.047567][T16023] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 409.053972][T16023] RIP: 0033:0x7f50c9048019 [ 409.058408][T16023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.078028][T16023] RSP: 002b:00007f50c72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.086645][T16023] RAX: ffffffffffffffda RBX: 00007f50c92cffa0 RCX: 00007f50c9048019 [ 409.094816][T16023] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 409.103546][T16023] RBP: 00007f50c72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 409.111623][T16023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.119602][T16023] R13: 00007f50c92d0038 R14: 00007f50c92cffa0 R15: 00007ffcf67da778 [ 409.127828][T16023] [ 409.149150][T16028] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4082'. [ 409.295688][T16012] device syzkaller0 entered promiscuous mode [ 409.624236][T16045] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4088'. [ 409.729546][T16049] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4089'. [ 409.784325][T16049] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4089'. [ 410.277608][T16087] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4103'. [ 410.344512][T16087] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4103'. [ 410.688281][T16101] netlink: 'syz.3.4107': attribute type 40 has an invalid length. [ 410.750104][T16101] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.958318][T16113] netlink: 'syz.2.4112': attribute type 29 has an invalid length. [ 411.155052][T16127] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4118'. [ 411.214618][T16113] netlink: 'syz.2.4112': attribute type 29 has an invalid length. [ 411.447384][T16119] netlink: 'syz.2.4112': attribute type 29 has an invalid length. [ 411.773359][T16153] netlink: 'syz.3.4127': attribute type 29 has an invalid length. [ 411.794939][T16154] netlink: 'syz.4.4125': attribute type 21 has an invalid length. [ 411.864451][T16153] netlink: 'syz.3.4127': attribute type 29 has an invalid length. [ 411.921386][T16156] netlink: 'syz.3.4127': attribute type 29 has an invalid length. [ 411.951727][T16160] netlink: 'syz.3.4127': attribute type 29 has an invalid length. [ 411.991878][T16157] netlink: 'syz.2.4126': attribute type 10 has an invalid length. [ 412.102824][T16157] team0: Device wg1 is of different type [ 412.714668][T16192] __nla_validate_parse: 4 callbacks suppressed [ 412.714690][T16192] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4137'. [ 412.982226][T16199] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4140'. [ 413.109900][T16210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.156657][T16213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4146'. [ 413.199831][T16214] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4146'. [ 413.388489][T16226] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4150'. [ 413.623234][T16234] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4153'. [ 413.979838][T16246] FAULT_INJECTION: forcing a failure. [ 413.979838][T16246] name failslab, interval 1, probability 0, space 0, times 0 [ 414.047522][T16246] CPU: 1 PID: 16246 Comm: syz.1.4157 Not tainted syzkaller #0 [ 414.055421][T16246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.066177][T16246] Call Trace: [ 414.069477][T16246] [ 414.072431][T16246] dump_stack_lvl+0x188/0x250 [ 414.077147][T16246] ? show_regs_print_info+0x20/0x20 [ 414.082458][T16246] ? load_image+0x410/0x410 [ 414.087270][T16246] should_fail+0x383/0x4b0 [ 414.091724][T16246] should_failslab+0x5/0x20 [ 414.096735][T16246] slab_pre_alloc_hook+0x51/0xc0 [ 414.101701][T16246] kmem_cache_alloc_trace+0x47/0x290 [ 414.107052][T16246] ? sctp_add_bind_addr+0x89/0x350 [ 414.112473][T16246] sctp_add_bind_addr+0x89/0x350 [ 414.117585][T16246] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 414.123691][T16246] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 414.131061][T16246] ? sctp_v4_is_any+0x31/0x50 [ 414.135768][T16246] ? sctp_copy_one_addr+0x93/0x660 [ 414.140911][T16246] sctp_bind_addr_copy+0xaf/0x3c0 [ 414.146087][T16246] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 414.152912][T16246] sctp_connect_new_asoc+0x2f5/0x6a0 [ 414.158256][T16246] ? __sctp_connect+0xd80/0xd80 [ 414.163164][T16246] ? __local_bh_enable_ip+0x136/0x1c0 [ 414.168581][T16246] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 414.174493][T16246] ? security_sctp_bind_connect+0x85/0xb0 [ 414.180328][T16246] sctp_sendmsg+0x15e1/0x2940 [ 414.186954][T16246] ? sctp_getsockopt+0x8a0/0x8a0 [ 414.192540][T16246] ? aa_af_perm+0x340/0x340 [ 414.198276][T16246] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 414.205222][T16246] ? aa_sock_msg_perm+0x94/0x150 [ 414.210588][T16246] ? sock_rps_record_flow+0x17/0x3b0 [ 414.215961][T16246] ? inet_sendmsg+0xca/0x2a0 [ 414.221519][T16246] ? inet_send_prepare+0x250/0x250 [ 414.226833][T16246] ____sys_sendmsg+0x5be/0x8f0 [ 414.231709][T16246] ? __sys_sendmsg_sock+0x30/0x30 [ 414.236768][T16246] ? import_iovec+0x6f/0xa0 [ 414.241958][T16246] ___sys_sendmsg+0x236/0x2e0 [ 414.246938][T16246] ? __sys_sendmsg+0x290/0x290 [ 414.252459][T16246] ? trace_event_raw_event_lock+0x250/0x250 [ 414.259011][T16246] __se_sys_sendmsg+0x1b7/0x2a0 [ 414.264077][T16246] ? __x64_sys_sendmsg+0x80/0x80 [ 414.269049][T16246] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 414.276466][T16246] ? lockdep_hardirqs_on+0x94/0x140 [ 414.281957][T16246] do_syscall_64+0x4c/0xa0 [ 414.286471][T16246] ? clear_bhb_loop+0x30/0x80 [ 414.292388][T16246] ? clear_bhb_loop+0x30/0x80 [ 414.298281][T16246] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 414.305039][T16246] RIP: 0033:0x7f505ce7b019 [ 414.309573][T16246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.329800][T16246] RSP: 002b:00007f505b0d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.338527][T16246] RAX: ffffffffffffffda RBX: 00007f505d102fa0 RCX: 00007f505ce7b019 [ 414.347447][T16246] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 414.356167][T16246] RBP: 00007f505b0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 414.365745][T16246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.373827][T16246] R13: 00007f505d103038 R14: 00007f505d102fa0 R15: 00007ffddc92e788 [ 414.382018][T16246] [ 414.429022][T16258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4160'. [ 414.486716][T16258] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4160'. [ 414.569689][T16265] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4164'. [ 415.908720][T16293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4177'. [ 417.773099][T16373] __nla_validate_parse: 6 callbacks suppressed [ 417.773133][T16373] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4205'. [ 417.830391][T16352] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 417.859390][T16352] CPU: 0 PID: 16352 Comm: syz.2.4196 Not tainted syzkaller #0 [ 417.866919][T16352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.877086][T16352] Call Trace: [ 417.880379][T16352] [ 417.883650][T16352] dump_stack_lvl+0x188/0x250 [ 417.888628][T16352] ? show_regs_print_info+0x20/0x20 [ 417.893972][T16352] ? load_image+0x410/0x410 [ 417.898523][T16352] sysfs_warn_dup+0x8a/0xa0 [ 417.903223][T16352] sysfs_do_create_link_sd+0xc0/0x110 [ 417.908949][T16352] device_add+0x83b/0x1050 [ 417.913613][T16352] wiphy_register+0x1e74/0x2c40 [ 417.918659][T16352] ? cfg80211_event_work+0x40/0x40 [ 417.923805][T16352] ? minstrel_ht_alloc+0x807/0x980 [ 417.929029][T16352] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 417.935301][T16352] ieee80211_register_hw+0x2a03/0x3a60 [ 417.940873][T16352] ? ieee80211_register_hw+0xae1/0x3a60 [ 417.946592][T16352] ? ieee80211_tasklet_handler+0x20/0x20 [ 417.952263][T16352] ? rcu_is_watching+0x11/0xa0 [ 417.961677][T16352] ? hrtimer_init+0x10c/0x220 [ 417.968497][T16352] mac80211_hwsim_new_radio+0x209d/0x4050 [ 417.975365][T16352] hwsim_new_radio_nl+0xa7d/0xc50 [ 417.981322][T16352] genl_rcv_msg+0xd0b/0xfa0 [ 417.985972][T16352] ? genl_bind+0x370/0x370 [ 417.990508][T16352] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 417.996269][T16352] ? verify_lock_unused+0x140/0x140 [ 418.001644][T16352] ? perf_trace_lock_acquire+0x341/0x3f0 [ 418.007323][T16352] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 418.013947][T16352] ? perf_trace_lock+0xe4/0x390 [ 418.018836][T16352] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 418.025303][T16352] netlink_rcv_skb+0x1e9/0x430 [ 418.030128][T16352] ? genl_bind+0x370/0x370 [ 418.034706][T16352] ? netlink_ack+0xb10/0xb10 [ 418.039377][T16352] ? down_read+0x1aa/0x2e0 [ 418.043838][T16352] genl_rcv+0x24/0x40 [ 418.047848][T16352] netlink_unicast+0x78f/0x940 [ 418.052738][T16352] netlink_sendmsg+0x8ba/0xbe0 [ 418.057542][T16352] ? netlink_getsockopt+0x570/0x570 [ 418.062863][T16352] ? aa_sock_msg_perm+0x94/0x150 [ 418.067839][T16352] ? apparmor_socket_sendmsg+0x88/0x230 [ 418.073458][T16352] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 418.078965][T16352] ? security_socket_sendmsg+0x7c/0xa0 [ 418.084462][T16352] ? netlink_getsockopt+0x570/0x570 [ 418.089693][T16352] ____sys_sendmsg+0x5be/0x8f0 [ 418.095129][T16352] ? __sys_sendmsg_sock+0x30/0x30 [ 418.100596][T16352] ? import_iovec+0x6f/0xa0 [ 418.105518][T16352] ___sys_sendmsg+0x236/0x2e0 [ 418.110622][T16352] ? __sys_sendmsg+0x290/0x290 [ 418.115436][T16352] ? rcu_lock_release+0x9/0x20 [ 418.120255][T16352] __se_sys_sendmsg+0x1b7/0x2a0 [ 418.125311][T16352] ? __x64_sys_sendmsg+0x80/0x80 [ 418.130465][T16352] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 418.136492][T16352] ? lockdep_hardirqs_on+0x94/0x140 [ 418.141728][T16352] do_syscall_64+0x4c/0xa0 [ 418.146378][T16352] ? clear_bhb_loop+0x30/0x80 [ 418.151355][T16352] ? clear_bhb_loop+0x30/0x80 [ 418.157087][T16352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.163311][T16352] RIP: 0033:0x7f50c9048019 [ 418.167757][T16352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.187477][T16352] RSP: 002b:00007f50c72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.196186][T16352] RAX: ffffffffffffffda RBX: 00007f50c92cffa0 RCX: 00007f50c9048019 [ 418.204192][T16352] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 418.212188][T16352] RBP: 00007f50c90df00c R08: 0000000000000000 R09: 0000000000000000 [ 418.220183][T16352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.228190][T16352] R13: 00007f50c92d0038 R14: 00007f50c92cffa0 R15: 00007ffcf67da778 [ 418.236207][T16352] [ 418.457967][T16413] validate_nla: 11 callbacks suppressed [ 418.457990][T16413] netlink: 'syz.0.4216': attribute type 1 has an invalid length. [ 418.531886][T16413] netlink: 'syz.0.4216': attribute type 4 has an invalid length. [ 418.556532][T16413] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4216'. [ 418.640450][T16415] netlink: 'syz.1.4217': attribute type 1 has an invalid length. [ 418.662793][T16415] netlink: 'syz.1.4217': attribute type 4 has an invalid length. [ 418.696019][T16415] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4217'. [ 419.176880][T16439] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4223'. [ 419.575991][T16454] netlink: 'syz.0.4232': attribute type 1 has an invalid length. [ 419.611341][T16454] netlink: 'syz.0.4232': attribute type 4 has an invalid length. [ 419.656620][T16454] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4232'. [ 419.746188][T16460] netlink: 'syz.3.4233': attribute type 1 has an invalid length. [ 419.778438][T16460] netlink: 'syz.3.4233': attribute type 4 has an invalid length. [ 419.809372][T16460] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4233'. [ 420.303415][T16469] netlink: 'syz.1.4237': attribute type 10 has an invalid length. [ 421.028871][T16497] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4248'. [ 421.084179][T16502] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4248'. [ 421.234107][T16503] netlink: 'syz.2.4247': attribute type 1 has an invalid length. [ 421.293527][T16503] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4247'. [ 422.150951][T16543] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4262'. [ 422.961700][T16570] __nla_validate_parse: 1 callbacks suppressed [ 422.961719][T16570] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4271'. [ 423.639973][T16588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4278'. [ 423.689373][T16593] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4278'. [ 423.819945][T16597] validate_nla: 1 callbacks suppressed [ 423.819964][T16597] netlink: 'syz.3.4280': attribute type 10 has an invalid length. [ 423.978844][T16601] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4282'. [ 424.176239][T16606] netlink: 15318 bytes leftover after parsing attributes in process `syz.0.4283'. [ 424.426134][T16623] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4289'. [ 424.752187][T16635] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4293'. [ 424.798432][T16638] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4293'. [ 424.889996][T16642] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4296'. [ 425.252831][T16657] netlink: 'syz.2.4300': attribute type 10 has an invalid length. [ 425.275556][T16657] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.4300'. [ 425.748240][T16692] device wlan1 left promiscuous mode [ 425.767982][T16695] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 425.821510][T16684] netlink: 'syz.2.4309': attribute type 1 has an invalid length. [ 425.871676][T16684] netlink: 'syz.2.4309': attribute type 4 has an invalid length. [ 426.025331][T16713] FAULT_INJECTION: forcing a failure. [ 426.025331][T16713] name failslab, interval 1, probability 0, space 0, times 0 [ 426.071196][T16713] CPU: 1 PID: 16713 Comm: syz.1.4319 Not tainted syzkaller #0 [ 426.078895][T16713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.089570][T16713] Call Trace: [ 426.092857][T16713] [ 426.095817][T16713] dump_stack_lvl+0x188/0x250 [ 426.100503][T16713] ? show_regs_print_info+0x20/0x20 [ 426.105699][T16713] ? load_image+0x410/0x410 [ 426.110755][T16713] should_fail+0x383/0x4b0 [ 426.115711][T16713] should_failslab+0x5/0x20 [ 426.120219][T16713] slab_pre_alloc_hook+0x51/0xc0 [ 426.125641][T16713] ? __build_skb+0x26/0x2e0 [ 426.130171][T16713] kmem_cache_alloc+0x3d/0x280 [ 426.135040][T16713] __build_skb+0x26/0x2e0 [ 426.139607][T16713] build_skb+0x1e/0x160 [ 426.143806][T16713] bpf_prog_test_run_skb+0x25c/0x1190 [ 426.149461][T16713] ? __fget_files+0x402/0x470 [ 426.154156][T16713] ? cpu_online+0x60/0x60 [ 426.158477][T16713] bpf_prog_test_run+0x31c/0x390 [ 426.163410][T16713] __sys_bpf+0x5a5/0x6f0 [ 426.167653][T16713] ? bpf_link_show_fdinfo+0x380/0x380 [ 426.173016][T16713] ? rcu_nmi_exit+0x6f/0xf0 [ 426.177791][T16713] __x64_sys_bpf+0x78/0x90 [ 426.182499][T16713] do_syscall_64+0x4c/0xa0 [ 426.189106][T16713] ? clear_bhb_loop+0x30/0x80 [ 426.193799][T16713] ? clear_bhb_loop+0x30/0x80 [ 426.199009][T16713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 426.205332][T16713] RIP: 0033:0x7f505ce7b019 [ 426.210186][T16713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.231523][T16713] RSP: 002b:00007f505b0d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.240835][T16713] RAX: ffffffffffffffda RBX: 00007f505d102fa0 RCX: 00007f505ce7b019 [ 426.249594][T16713] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 426.258452][T16713] RBP: 00007f505b0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 426.269455][T16713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.277745][T16713] R13: 00007f505d103038 R14: 00007f505d102fa0 R15: 00007ffddc92e788 [ 426.285759][T16713] [ 426.585797][T16725] netlink: 'syz.2.4322': attribute type 1 has an invalid length. [ 426.637420][T16725] netlink: 'syz.2.4322': attribute type 4 has an invalid length. [ 427.200303][T16759] netlink: 'syz.2.4332': attribute type 1 has an invalid length. [ 427.321971][T16759] netlink: 'syz.2.4332': attribute type 4 has an invalid length. [ 427.628450][T16784] netlink: 'syz.0.4341': attribute type 3 has an invalid length. [ 427.810137][T16786] FAULT_INJECTION: forcing a failure. [ 427.810137][T16786] name failslab, interval 1, probability 0, space 0, times 0 [ 427.874006][T16786] CPU: 1 PID: 16786 Comm: syz.1.4346 Not tainted syzkaller #0 [ 427.882155][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.893088][T16786] Call Trace: [ 427.896680][T16786] [ 427.899703][T16786] dump_stack_lvl+0x188/0x250 [ 427.904551][T16786] ? show_regs_print_info+0x20/0x20 [ 427.911013][T16786] ? load_image+0x410/0x410 [ 427.916264][T16786] ? __lock_acquire+0x7b50/0x7b50 [ 427.921431][T16786] ? aa_get_newest_label+0xf5/0x5a0 [ 427.926867][T16786] should_fail+0x383/0x4b0 [ 427.932862][T16786] should_failslab+0x5/0x20 [ 427.937589][T16786] slab_pre_alloc_hook+0x51/0xc0 [ 427.943087][T16786] kmem_cache_alloc_trace+0x47/0x290 [ 427.949324][T16786] ? btf_new_fd+0x110/0x910 [ 427.954614][T16786] btf_new_fd+0x110/0x910 [ 427.958993][T16786] ? capable+0x84/0xe0 [ 427.963550][T16786] __sys_bpf+0x58c/0x6f0 [ 427.967951][T16786] ? bpf_link_show_fdinfo+0x380/0x380 [ 427.973519][T16786] __x64_sys_bpf+0x78/0x90 [ 427.978196][T16786] do_syscall_64+0x4c/0xa0 [ 427.982684][T16786] ? clear_bhb_loop+0x30/0x80 [ 427.987385][T16786] ? clear_bhb_loop+0x30/0x80 [ 427.992369][T16786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 427.998496][T16786] RIP: 0033:0x7f505ce7b019 [ 428.002964][T16786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.023471][T16786] RSP: 002b:00007f505b0d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.032470][T16786] RAX: ffffffffffffffda RBX: 00007f505d102fa0 RCX: 00007f505ce7b019 [ 428.042707][T16786] RDX: 0000000000000020 RSI: 0000200000001340 RDI: 0000000000000012 [ 428.050710][T16786] RBP: 00007f505b0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 428.059231][T16786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.067271][T16786] R13: 00007f505d103038 R14: 00007f505d102fa0 R15: 00007ffddc92e788 [ 428.075313][T16786] [ 428.344257][T16794] __nla_validate_parse: 14 callbacks suppressed [ 428.344292][T16794] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4349'. [ 428.379995][T16794] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4349'. [ 428.648795][T16806] netlink: 4093 bytes leftover after parsing attributes in process `syz.0.4354'. [ 428.720249][T16806] netlink: 'syz.0.4354': attribute type 21 has an invalid length. [ 428.840125][T16816] validate_nla: 1 callbacks suppressed [ 428.840143][T16816] netlink: 'syz.2.4355': attribute type 1 has an invalid length. [ 428.910096][T16816] netlink: 'syz.2.4355': attribute type 4 has an invalid length. [ 428.944291][T16816] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4355'. [ 429.400645][T16831] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4363'. [ 429.430570][T16831] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4363'. [ 429.615879][T16838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.757380][T16849] netlink: 143108 bytes leftover after parsing attributes in process `syz.3.4369'. [ 429.895346][T16849] device syzkaller0 entered promiscuous mode [ 430.239965][T16860] netlink: 'syz.1.4370': attribute type 1 has an invalid length. [ 430.251376][T16860] netlink: 'syz.1.4370': attribute type 4 has an invalid length. [ 430.279096][T16860] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4370'. [ 430.314784][T16862] netlink: 'syz.0.4373': attribute type 1 has an invalid length. [ 430.336070][T16862] netlink: 'syz.0.4373': attribute type 4 has an invalid length. [ 430.366848][T16862] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4373'. [ 430.786568][T16876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4378'. [ 431.433177][T16897] device syzkaller0 entered promiscuous mode [ 431.513706][T16909] netlink: 'syz.3.4388': attribute type 1 has an invalid length. [ 431.531940][T16909] netlink: 'syz.3.4388': attribute type 4 has an invalid length. [ 431.871801][ T2304] Bluetooth: hci5: command 0x0406 tx timeout [ 432.014255][T16924] netlink: 'syz.1.4395': attribute type 1 has an invalid length. [ 432.042811][T16924] netlink: 'syz.1.4395': attribute type 4 has an invalid length. [ 433.403796][T16970] device syzkaller0 entered promiscuous mode [ 433.444720][T16977] __nla_validate_parse: 11 callbacks suppressed [ 433.444741][T16977] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4409'. [ 433.472739][T16980] device wlan1 entered promiscuous mode [ 433.513295][T16984] bridge0: port 3(batadv0) entered disabled state [ 433.708510][T16997] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4412'. [ 434.018928][T17011] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4421'. [ 434.403801][T17020] validate_nla: 9 callbacks suppressed [ 434.403824][T17020] netlink: 'syz.1.4423': attribute type 1 has an invalid length. [ 434.461278][T17020] netlink: 'syz.1.4423': attribute type 4 has an invalid length. [ 434.493521][T17020] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4423'. [ 434.592161][T17022] netlink: 'syz.4.4426': attribute type 21 has an invalid length. [ 434.616415][T17022] netlink: 'syz.4.4426': attribute type 1 has an invalid length. [ 434.918479][T17034] netlink: 143108 bytes leftover after parsing attributes in process `syz.2.4431'. [ 434.948979][T17040] netlink: 'syz.0.4432': attribute type 13 has an invalid length. [ 434.991264][T17040] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.4432'. [ 434.999200][T17037] FAULT_INJECTION: forcing a failure. [ 434.999200][T17037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.039682][T17032] device syzkaller0 entered promiscuous mode [ 435.073518][T17037] CPU: 1 PID: 17037 Comm: syz.1.4430 Not tainted syzkaller #0 [ 435.081459][T17037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.091531][T17037] Call Trace: [ 435.094835][T17037] [ 435.097961][T17037] dump_stack_lvl+0x188/0x250 [ 435.102699][T17037] ? show_regs_print_info+0x20/0x20 [ 435.108389][T17037] ? load_image+0x410/0x410 [ 435.113172][T17037] ? __lock_acquire+0x7b50/0x7b50 [ 435.118327][T17037] should_fail+0x383/0x4b0 [ 435.122885][T17037] _copy_from_user+0x2e/0x170 [ 435.127863][T17037] __copy_msghdr_from_user+0x48a/0x630 [ 435.133356][T17037] ? verify_lock_unused+0x140/0x140 [ 435.138680][T17037] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 435.144205][T17037] ___sys_sendmsg+0x19a/0x2e0 [ 435.148939][T17037] ? __sys_sendmsg+0x290/0x290 [ 435.153742][T17037] ? trace_event_raw_event_lock+0x250/0x250 [ 435.159691][T17037] __se_sys_sendmsg+0x1b7/0x2a0 [ 435.164731][T17037] ? __x64_sys_sendmsg+0x80/0x80 [ 435.170066][T17037] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 435.176110][T17037] ? lockdep_hardirqs_on+0x94/0x140 [ 435.181350][T17037] do_syscall_64+0x4c/0xa0 [ 435.185789][T17037] ? clear_bhb_loop+0x30/0x80 [ 435.190483][T17037] ? clear_bhb_loop+0x30/0x80 [ 435.195187][T17037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 435.201128][T17037] RIP: 0033:0x7f505ce7b019 [ 435.205569][T17037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.225374][T17037] RSP: 002b:00007f505b0b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.233921][T17037] RAX: ffffffffffffffda RBX: 00007f505d103090 RCX: 00007f505ce7b019 [ 435.241997][T17037] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 435.250005][T17037] RBP: 00007f505b0b2090 R08: 0000000000000000 R09: 0000000000000000 [ 435.258101][T17037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.266266][T17037] R13: 00007f505d103128 R14: 00007f505d103090 R15: 00007ffddc92e788 [ 435.274275][T17037] [ 435.455219][T17041] device syzkaller0 entered promiscuous mode [ 435.626961][T17061] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4436'. [ 436.043145][T17079] netlink: 'syz.1.4441': attribute type 1 has an invalid length. [ 436.089590][T17079] netlink: 'syz.1.4441': attribute type 4 has an invalid length. [ 436.142131][T17079] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4441'. [ 436.223844][T17088] FAULT_INJECTION: forcing a failure. [ 436.223844][T17088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.245050][T17087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4446'. [ 436.283628][T17087] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4446'. [ 436.310623][T17088] CPU: 1 PID: 17088 Comm: syz.3.4445 Not tainted syzkaller #0 [ 436.318969][T17088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.331032][T17088] Call Trace: [ 436.335510][T17088] [ 436.339531][T17088] dump_stack_lvl+0x188/0x250 [ 436.344902][T17088] ? show_regs_print_info+0x20/0x20 [ 436.351136][T17088] ? load_image+0x410/0x410 [ 436.356600][T17088] ? __lock_acquire+0x7b50/0x7b50 [ 436.363515][T17088] should_fail+0x383/0x4b0 [ 436.368223][T17088] _copy_to_user+0x2e/0x130 [ 436.373145][T17088] simple_read_from_buffer+0xe3/0x150 [ 436.379146][T17088] proc_fail_nth_read+0x1a6/0x220 [ 436.385235][T17088] ? proc_fault_inject_write+0x310/0x310 [ 436.390927][T17088] ? fsnotify_perm+0x254/0x560 [ 436.395757][T17088] ? proc_fault_inject_write+0x310/0x310 [ 436.401506][T17088] vfs_read+0x2ff/0xd50 [ 436.406426][T17088] ? __lock_acquire+0x7b50/0x7b50 [ 436.412311][T17088] ? kernel_read+0x1e0/0x1e0 [ 436.417585][T17088] ? mutex_lock_nested+0x17/0x20 [ 436.423304][T17088] ? __fdget_pos+0x2bf/0x370 [ 436.428101][T17088] ? ksys_read+0x70/0x260 [ 436.432576][T17088] ksys_read+0x153/0x260 [ 436.437016][T17088] ? vfs_write+0xd70/0xd70 [ 436.441610][T17088] ? lockdep_hardirqs_on+0x94/0x140 [ 436.447262][T17088] do_syscall_64+0x4c/0xa0 [ 436.452745][T17088] ? clear_bhb_loop+0x30/0x80 [ 436.458640][T17088] ? clear_bhb_loop+0x30/0x80 [ 436.463741][T17088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.469654][T17088] RIP: 0033:0x7fbe27b4f84e [ 436.474130][T17088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.494617][T17088] RSP: 002b:00007fbe25de6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.503400][T17088] RAX: ffffffffffffffda RBX: 00007fbe25de76c0 RCX: 00007fbe27b4f84e [ 436.511650][T17088] RDX: 000000000000000f RSI: 00007fbe25de70a0 RDI: 0000000000000006 [ 436.520112][T17088] RBP: 00007fbe25de7090 R08: 0000000000000000 R09: 0000000000000000 [ 436.528850][T17088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.538323][T17088] R13: 00007fbe27e17038 R14: 00007fbe27e16fa0 R15: 00007ffcfe295968 [ 436.546457][T17088] [ 437.528163][T17129] netlink: 'syz.1.4462': attribute type 10 has an invalid length. [ 437.595457][T17134] netlink: 'syz.4.4463': attribute type 1 has an invalid length. [ 437.631465][T17134] netlink: 'syz.4.4463': attribute type 4 has an invalid length. [ 438.167420][T17151] FAULT_INJECTION: forcing a failure. [ 438.167420][T17151] name failslab, interval 1, probability 0, space 0, times 0 [ 438.183670][T17151] CPU: 1 PID: 17151 Comm: syz.3.4468 Not tainted syzkaller #0 [ 438.191175][T17151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.201273][T17151] Call Trace: [ 438.204570][T17151] [ 438.207515][T17151] dump_stack_lvl+0x188/0x250 [ 438.212484][T17151] ? show_regs_print_info+0x20/0x20 [ 438.217912][T17151] ? load_image+0x410/0x410 [ 438.222782][T17151] ? __might_sleep+0xf0/0xf0 [ 438.227430][T17151] ? __lock_acquire+0x7b50/0x7b50 [ 438.232547][T17151] ? netlink_insert+0xe90/0x11f0 [ 438.237625][T17151] should_fail+0x383/0x4b0 [ 438.242243][T17151] should_failslab+0x5/0x20 [ 438.246851][T17151] slab_pre_alloc_hook+0x51/0xc0 [ 438.252002][T17151] kmem_cache_alloc_node+0x47/0x2c0 [ 438.257236][T17151] ? __alloc_skb+0xf4/0x750 [ 438.262031][T17151] __alloc_skb+0xf4/0x750 [ 438.266385][T17151] netlink_sendmsg+0x654/0xbe0 [ 438.271176][T17151] ? lockdep_hardirqs_on+0x94/0x140 [ 438.276410][T17151] ? netlink_getsockopt+0x570/0x570 [ 438.281623][T17151] ? aa_sock_msg_perm+0x94/0x150 [ 438.286687][T17151] ? apparmor_socket_sendmsg+0x88/0x230 [ 438.292361][T17151] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 438.298270][T17151] ? security_socket_sendmsg+0x7c/0xa0 [ 438.303751][T17151] ? netlink_getsockopt+0x570/0x570 [ 438.309370][T17151] ____sys_sendmsg+0x5be/0x8f0 [ 438.314622][T17151] ? __sys_sendmsg_sock+0x30/0x30 [ 438.319665][T17151] ? import_iovec+0x6f/0xa0 [ 438.324546][T17151] ___sys_sendmsg+0x236/0x2e0 [ 438.329488][T17151] ? __sys_sendmsg+0x290/0x290 [ 438.334323][T17151] ? __x64_sys_sendmsg+0x71/0x80 [ 438.339329][T17151] ? kasan_check_range+0xc/0x290 [ 438.344302][T17151] __se_sys_sendmsg+0x1b7/0x2a0 [ 438.349159][T17151] ? __x64_sys_sendmsg+0x80/0x80 [ 438.354114][T17151] ? syscall_enter_from_user_mode+0x2a/0x70 [ 438.360735][T17151] do_syscall_64+0x4c/0xa0 [ 438.365255][T17151] ? clear_bhb_loop+0x30/0x80 [ 438.370040][T17151] ? clear_bhb_loop+0x30/0x80 [ 438.374831][T17151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.380867][T17151] RIP: 0033:0x7fbe27b8f019 [ 438.385433][T17151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.406047][T17151] RSP: 002b:00007fbe25dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.415170][T17151] RAX: ffffffffffffffda RBX: 00007fbe27e17090 RCX: 00007fbe27b8f019 [ 438.424143][T17151] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 438.432499][T17151] RBP: 00007fbe25dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 438.441345][T17151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.449635][T17151] R13: 00007fbe27e17128 R14: 00007fbe27e17090 R15: 00007ffcfe295968 [ 438.458116][T17151] [ 438.485212][T17149] __nla_validate_parse: 6 callbacks suppressed [ 438.485357][T17149] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4470'. [ 438.659594][T17162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4473'. [ 438.889671][T17174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4478'. [ 438.990212][T17174] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4478'. [ 439.157706][T17190] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4479'. [ 439.327635][T17197] device syzkaller0 entered promiscuous mode [ 439.390498][T17204] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.4488'. [ 439.940904][T17217] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4493'. [ 440.011261][T17220] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4493'. [ 440.033757][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.040499][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.218945][T17234] validate_nla: 4 callbacks suppressed [ 440.218995][T17234] netlink: 'syz.0.4500': attribute type 29 has an invalid length. [ 440.265446][T17234] netlink: 'syz.0.4500': attribute type 29 has an invalid length. [ 440.270528][T17237] netlink: 'syz.3.4501': attribute type 3 has an invalid length. [ 440.286926][T17237] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4501'. [ 440.320412][T17234] netlink: 'syz.0.4500': attribute type 3 has an invalid length. [ 440.345570][T17241] netlink: 'syz.1.4503': attribute type 1 has an invalid length. [ 440.358199][T17234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4500'. [ 440.399290][T17244] netlink: 'syz.2.4502': attribute type 1 has an invalid length. [ 440.439801][T17242] netlink: 'syz.0.4500': attribute type 29 has an invalid length. [ 440.505767][T17247] netlink: 'syz.3.4504': attribute type 4 has an invalid length. [ 440.977831][T17280] netlink: 'syz.4.4517': attribute type 29 has an invalid length. [ 441.004992][T17280] netlink: 'syz.4.4517': attribute type 29 has an invalid length. [ 441.558721][T17308] netlink: 'syz.4.4526': attribute type 11 has an invalid length. [ 441.597820][T17310] device syzkaller0 entered promiscuous mode [ 441.671565][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 442.123577][T17336] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 442.368972][T17349] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 442.448410][T17349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.464421][T17384] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.472713][T17384] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.104937][T17516] device wlan1 left promiscuous mode [ 446.192806][T17519] device wlan1 entered promiscuous mode [ 446.892398][T17547] device lo entered promiscuous mode [ 447.221371][ T2238] Bluetooth: hci0: command 0x0406 tx timeout [ 447.892227][T17597] sock: sock_set_timeout: `syz.2.4643' (pid 17597) tries to set negative timeout [ 452.517447][T17693] device wlan1 left promiscuous mode [ 456.456848][T17820] device syzkaller0 entered promiscuous mode [ 457.461383][ T2238] Bluetooth: hci3: command 0x0406 tx timeout [ 458.134262][T17897] device syzkaller0 entered promiscuous mode [ 459.290268][T17949] device syzkaller0 entered promiscuous mode [ 459.867740][T17963] ------------[ cut here ]------------ [ 459.873661][T17963] WARNING: CPU: 0 PID: 17963 at kernel/events/core.c:6688 perf_pending_task+0x353/0x480 [ 459.884770][T17963] Modules linked in: [ 459.888695][T17963] CPU: 0 PID: 17963 Comm: syz.1.4805 Not tainted syzkaller #0 [ 459.896420][T17963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.906556][T17963] RIP: 0010:perf_pending_task+0x353/0x480 [ 459.912931][T17963] Code: e8 92 4a de ff 84 db 75 10 e8 29 48 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 19 48 de ff e8 8c c8 65 ff eb e9 e8 0d 48 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 459.933153][T17963] RSP: 0018:ffffc9000320f9c0 EFLAGS: 00010293 [ 459.939427][T17963] RAX: ffffffff819ab4a3 RBX: ffff88805e7aa228 RCX: ffff888029911dc0 [ 459.947734][T17963] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 459.955861][T17963] RBP: ffff88805e7a9ff8 R08: ffff8880299127d3 R09: 1ffff110053224fa [ 459.964187][T17963] R10: dffffc0000000000 R11: ffffed10053224fb R12: ffff888029911dc0 [ 459.972276][T17963] R13: ffff8880629c6958 R14: 0000000000000000 R15: 1ffff1100bcf53ff [ 459.980317][T17963] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 459.989360][T17963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.997070][T17963] CR2: 00007f505ac70000 CR3: 0000000061e57000 CR4: 00000000003506f0 [ 460.005478][T17963] DR0: 0000000000000000 DR1: 0000000000000b6e DR2: 0000000000000000 [ 460.013961][T17963] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 460.022133][T17963] Call Trace: [ 460.025606][T17963] [ 460.028559][T17963] task_work_run+0x125/0x1a0 [ 460.033352][T17963] do_exit+0x635/0x2110 [ 460.037766][T17963] ? preempt_schedule+0xbc/0xd0 [ 460.042766][T17963] ? put_task_struct+0x80/0x80 [ 460.047550][T17963] ? preempt_schedule_common+0xa5/0xd0 [ 460.053191][T17963] ? preempt_schedule+0xbc/0xd0 [ 460.058082][T17963] do_group_exit+0x12c/0x2f0 [ 460.062773][T17963] get_signal+0x7eb/0x12e0 [ 460.067232][T17963] arch_do_signal_or_restart+0xe6/0x12a0 [ 460.073060][T17963] ? lockdep_hardirqs_on+0x94/0x140 [ 460.078754][T17963] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 460.084490][T17963] ? get_sigframe_size+0x10/0x10 [ 460.089845][T17963] ? ksys_write+0x203/0x260 [ 460.094483][T17963] ? exit_to_user_mode_loop+0x3b/0x130 [ 460.100079][T17963] exit_to_user_mode_loop+0x9e/0x130 [ 460.105450][T17963] exit_to_user_mode_prepare+0xee/0x180 [ 460.111387][T17963] syscall_exit_to_user_mode+0x16/0x40 [ 460.117084][T17963] do_syscall_64+0x58/0xa0 [ 460.122288][T17963] ? clear_bhb_loop+0x30/0x80 [ 460.127200][T17963] ? clear_bhb_loop+0x30/0x80 [ 460.132129][T17963] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.138279][T17963] RIP: 0033:0x7f505ce7b019 [ 460.142953][T17963] Code: Unable to access opcode bytes at RIP 0x7f505ce7afef. [ 460.151064][T17963] RSP: 002b:00007f505b0d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.160161][T17963] RAX: 0000000000000012 RBX: 00007f505d102fa0 RCX: 00007f505ce7b019 [ 460.168341][T17963] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 460.176386][T17963] RBP: 00007f505cf1200c R08: 0000000000000000 R09: 0000000000000000 [ 460.184438][T17963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.192659][T17963] R13: 00007f505d103038 R14: 00007f505d102fa0 R15: 00007ffddc92e788 [ 460.200765][T17963] [ 460.203860][T17963] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 460.211156][T17963] CPU: 0 PID: 17963 Comm: syz.1.4805 Not tainted syzkaller #0 [ 460.218874][T17963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.229204][T17963] Call Trace: [ 460.232501][T17963] [ 460.235445][T17963] dump_stack_lvl+0x188/0x250 [ 460.240149][T17963] ? show_regs_print_info+0x20/0x20 [ 460.245369][T17963] ? load_image+0x410/0x410 [ 460.249905][T17963] panic+0x2f8/0x850 [ 460.253824][T17963] ? bpf_jit_dump+0xd0/0xd0 [ 460.258356][T17963] ? perf_pending_task+0x353/0x480 [ 460.263674][T17963] __warn+0x248/0x2b0 [ 460.267675][T17963] ? perf_pending_task+0x353/0x480 [ 460.272819][T17963] report_bug+0x1b9/0x2e0 [ 460.277281][T17963] handle_bug+0x3a/0x70 [ 460.281557][T17963] exc_invalid_op+0x16/0x40 [ 460.286125][T17963] asm_exc_invalid_op+0x16/0x20 [ 460.291152][T17963] RIP: 0010:perf_pending_task+0x353/0x480 [ 460.297305][T17963] Code: e8 92 4a de ff 84 db 75 10 e8 29 48 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 19 48 de ff e8 8c c8 65 ff eb e9 e8 0d 48 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 460.317046][T17963] RSP: 0018:ffffc9000320f9c0 EFLAGS: 00010293 [ 460.323119][T17963] RAX: ffffffff819ab4a3 RBX: ffff88805e7aa228 RCX: ffff888029911dc0 [ 460.331136][T17963] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 460.339149][T17963] RBP: ffff88805e7a9ff8 R08: ffff8880299127d3 R09: 1ffff110053224fa [ 460.347263][T17963] R10: dffffc0000000000 R11: ffffed10053224fb R12: ffff888029911dc0 [ 460.355678][T17963] R13: ffff8880629c6958 R14: 0000000000000000 R15: 1ffff1100bcf53ff [ 460.364816][T17963] ? perf_pending_task+0x353/0x480 [ 460.370839][T17963] task_work_run+0x125/0x1a0 [ 460.375627][T17963] do_exit+0x635/0x2110 [ 460.380092][T17963] ? preempt_schedule+0xbc/0xd0 [ 460.385345][T17963] ? put_task_struct+0x80/0x80 [ 460.390231][T17963] ? preempt_schedule_common+0xa5/0xd0 [ 460.396310][T17963] ? preempt_schedule+0xbc/0xd0 [ 460.401299][T17963] do_group_exit+0x12c/0x2f0 [ 460.406037][T17963] get_signal+0x7eb/0x12e0 [ 460.411042][T17963] arch_do_signal_or_restart+0xe6/0x12a0 [ 460.417053][T17963] ? lockdep_hardirqs_on+0x94/0x140 [ 460.422698][T17963] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 460.428515][T17963] ? get_sigframe_size+0x10/0x10 [ 460.433502][T17963] ? ksys_write+0x203/0x260 [ 460.438017][T17963] ? exit_to_user_mode_loop+0x3b/0x130 [ 460.443472][T17963] exit_to_user_mode_loop+0x9e/0x130 [ 460.448842][T17963] exit_to_user_mode_prepare+0xee/0x180 [ 460.454660][T17963] syscall_exit_to_user_mode+0x16/0x40 [ 460.460371][T17963] do_syscall_64+0x58/0xa0 [ 460.464947][T17963] ? clear_bhb_loop+0x30/0x80 [ 460.469760][T17963] ? clear_bhb_loop+0x30/0x80 [ 460.474451][T17963] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.480628][T17963] RIP: 0033:0x7f505ce7b019 [ 460.485178][T17963] Code: Unable to access opcode bytes at RIP 0x7f505ce7afef. [ 460.492804][T17963] RSP: 002b:00007f505b0d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.501695][T17963] RAX: 0000000000000012 RBX: 00007f505d102fa0 RCX: 00007f505ce7b019 [ 460.509876][T17963] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 460.518778][T17963] RBP: 00007f505cf1200c R08: 0000000000000000 R09: 0000000000000000 [ 460.526893][T17963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.535320][T17963] R13: 00007f505d103038 R14: 00007f505d102fa0 R15: 00007ffddc92e788 [ 460.543430][T17963] [ 460.546779][T17963] Kernel Offset: disabled [ 460.551181][T17963] Rebooting in 86400 seconds..