last executing test programs: 2m32.630053793s ago: executing program 2 (id=5083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x400000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=r3, 0x1f, 0x1, 0x39d, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='7\x00\x00\x00 \x00\x00\x00', @ANYRES32=r1, @ANYBLOB="73653e336c34845e2406a890832e1e91c652b4a95b42900f8fa8a8f29755d144e096f1d66ffda46be37ba6e0c329762a9b3269426c1fbb34afd0b54444ded05a4ef68d96d8fbf475f4d45c4c44f49cffcf69487c7137d9214eb826e6773121c73bae787fae185577049f4b9d617e526916da87f8649ee51d7645236030fe7e95cdfee78d86b1a96383205200"/152, @ANYRES32=0x0, @ANYRES64=r4], 0x20) perf_event_open$cgroup(&(0x7f0000000580)={0x7, 0x80, 0xa, 0x5, 0x3c, 0x4, 0x0, 0x8, 0x800, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x26b3, 0x5}, 0xb28d, 0x74fa, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x10d, 0x11, &(0x7f0000000000), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000004f"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000740)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x40) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x6a, 0x87, 0x7, 0x9, 0x0, 0x2, 0x82000, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x74, 0x2}, 0x900f, 0xe3, 0x0, 0x6, 0xffff, 0x2, 0x862, 0x0, 0x200, 0x0, 0xc55}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m31.282233328s ago: executing program 2 (id=5089): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850) 2m31.044662653s ago: executing program 2 (id=5092): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000340), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x5, 0x20}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'batadv_slave_1\x00', 0x800}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000500000000000000090000000f174000c36f10ae07e7b39e467c7e234b1d0800000009cf"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x26, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r3, r1, r2, r3], 0x0, 0x10, 0xef}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x9, 0xf9, 0x9, 0x0, 0x0, 0x2221, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x1, 0x7, 0x1, 0x8, 0x4c9c, 0x5, 0x800, 0x0, 0x5, 0x0, 0x404000}, r4, 0xa, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES8=r2, @ANYRES16=r3, @ANYRESHEX=0x0, @ANYRES32, @ANYRES64=0x0], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000022131008500000015000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x21, 0x2, 0xa) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r7, r6}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x430fa2, 0x0) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000bdee4fbe000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r10, 0xffffffffffffffff, 0x48000000}, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r11 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x0, 0xffffffff}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, r3, 0xa) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESDEC=0x0, @ANYBLOB="d083ea849f97e5a66bc55f7e0aa3"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r13, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=ANY=[], 0x2f8}, 0x20000080) 2m30.708571982s ago: executing program 2 (id=5094): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xe, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x1, 0xeff4cc61646f7291, 0x6, 0xfffffffffffffff8, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000001c0)='GPL\x00', 0x9, 0x22, &(0x7f00000002c0)=""/34, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x1, 0x6, 0x40}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0xb, 0x8}], 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x6, 0x9, 0xfffffffe, 0x280, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0xe}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback=r3, r0, 0x2e, 0x21, r1, @void, @void, @void, @value=r4, r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce0320e0d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m29.712863108s ago: executing program 2 (id=5096): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000030000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701005788596000b703000000000020850004000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x6, 0x0, 0x6f, 0x0, 0x400, 0xe4101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0xffff, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='memory.swap.current\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000002c0), 0xc}, 0x8000, 0x9, 0x43a1bd76, 0x3, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r3, 0x2) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x11ba21, 0xfffffffffffffffd, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x18}, 0x80c0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m29.260941359s ago: executing program 2 (id=5101): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfffffffd, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, r0}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x420482, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'ipvlan1\x00', 0x2000}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0xffffffffffffffdb) (async) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (async) r7 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0xce20, @rand_addr=0x64010101}}, 0x80, 0x0}, 0x40048a1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) (async) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x9, 0x84, 0x154}, 0x50) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={&(0x7f0000000440)="862e8afa476ffa29cc510c085edd4c84561d3737e0aecf815151d6740751c908b6c7d9b6d7ab57826394207cb13ff293ad329be55cc283d5ba01e83ef3d66865690dfdc9d7e50592fa403c8d672dadd3a960b887704a53ff3a77d797b18edceafb4efb7cbbd780e170044db5daa85fd28026a12f", &(0x7f00000004c0), &(0x7f0000000500)="cde52e39cf01a64d721ca390ae8f19d30f925d050f89b6b788b91599495642014ed13b45778642a9e8096dfcd952d0dd1fff6f58cabb47b67a8cadda53704723ae28a2d262b856de351f9ca0efcb6251b7a1af8d07c0a72f21aa1f4159fd06c605f031e531843ee6ab67198944ecd561455c21e7694e67bd5af871b88d5bf4ddcbd310d6448253a0099f2e320174c5688ced5e48ace685f00536b42e562f1bfd34f0e5", &(0x7f00000005c0)="dae6a09ad50e7b98c8d7407bba2e69cc61c0bf6f8b619654dd82a5b6e83086f2390bcde0ab06b06357c5c13a63772e0ce738aa27291b07632388856d9188fe80a559a7", 0x5, r6, 0x4}, 0x38) (async) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) 2m13.993610571s ago: executing program 32 (id=5101): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfffffffd, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, r0}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x420482, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'ipvlan1\x00', 0x2000}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0xffffffffffffffdb) (async) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (async) r7 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0xce20, @rand_addr=0x64010101}}, 0x80, 0x0}, 0x40048a1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) (async) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x9, 0x84, 0x154}, 0x50) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={&(0x7f0000000440)="862e8afa476ffa29cc510c085edd4c84561d3737e0aecf815151d6740751c908b6c7d9b6d7ab57826394207cb13ff293ad329be55cc283d5ba01e83ef3d66865690dfdc9d7e50592fa403c8d672dadd3a960b887704a53ff3a77d797b18edceafb4efb7cbbd780e170044db5daa85fd28026a12f", &(0x7f00000004c0), &(0x7f0000000500)="cde52e39cf01a64d721ca390ae8f19d30f925d050f89b6b788b91599495642014ed13b45778642a9e8096dfcd952d0dd1fff6f58cabb47b67a8cadda53704723ae28a2d262b856de351f9ca0efcb6251b7a1af8d07c0a72f21aa1f4159fd06c605f031e531843ee6ab67198944ecd561455c21e7694e67bd5af871b88d5bf4ddcbd310d6448253a0099f2e320174c5688ced5e48ace685f00536b42e562f1bfd34f0e5", &(0x7f00000005c0)="dae6a09ad50e7b98c8d7407bba2e69cc61c0bf6f8b619654dd82a5b6e83086f2390bcde0ab06b06357c5c13a63772e0ce738aa27291b07632388856d9188fe80a559a7", 0x5, r6, 0x4}, 0x38) (async) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) 5.752097392s ago: executing program 3 (id=5895): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000033da572cb1951e93351a604c00080000ec64672500000000070000000003714c4c245079a0aa88c8750300000000000008010000000000000000c0847aa28f9222ade5815d32611491f48ae95188b5274c43e13e70276ac4ee703825c92ec7a5bb4ce60404a04a231a55a4cca4182ac3635498a3039daa9926f0ed96111be9c60a518f73aa8dfb0fdf04eafd592363aeb8ded0e9f5f247e4669f2b3e8968f97e401acb"], 0x0, 0x44}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, r0, 0x3, 0x5}, 0x50) 5.655374894s ago: executing program 3 (id=5897): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000600)={'tunl0\x00', @local}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1c1c41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r8, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100), &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x5f, 0x30, 0x2e]}}, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@exit]}, 0x0, 0x179, 0x0, 0x0, 0x41000, 0x48, '\x00', r9, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[{0x1, 0x2, 0x1, 0x9}], 0x10, 0x8}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r11) ioctl$SIOCSIFHWADDR(r11, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', r9, r11, 0x2, 0x4}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000180)=r12) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 4.709997009s ago: executing program 1 (id=5902): socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) 4.587993412s ago: executing program 1 (id=5903): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = socket$kcm(0x10, 0xf, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f0000000280), 0x4) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{0x0}], 0x1}, 0x8040) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000)=r4, 0x4) close(r1) close(r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000000000"], 0x50) recvmsg(r1, 0x0, 0x2002) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[], 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ac0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000037c0)={0x5, 0x14, &(0x7f0000001b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0xad}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000001bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000003740)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000003780)={0x2, 0xe, 0x4d, 0x45}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001a80)={@fallback=r4, 0xffffffffffffffff, 0x24, 0x28}, 0x20) 4.335228328s ago: executing program 0 (id=5905): close(0x3) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000040) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=""/97, 0x0, 0x61, 0x1, 0x5a3}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x4100, 0x0, 0x61, 0x10, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4.204329442s ago: executing program 0 (id=5906): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000000000000000000000000000000000000951105b162684e2ddc63ffff94def22c9df0a853f221ed648c872252d5f85e7d47444153bc80b3897fcbb94d43f07cd3ffffffff000000009b58d0fc73ff2c"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x28, 0x2, 0x2, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x24000, 0x8e83}, 0x0, 0xff, 0x2, 0x6, 0x8, 0x2020005, 0x8001, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x100000000a, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff51ae00"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 4.100031215s ago: executing program 0 (id=5907): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x9589, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x400, 0x80000004, 0x98, 0x0, 0x2, 0xf7fff271, 0xffff, 0x0, 0x3, 0x0, 0x8000000020}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xf, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x8800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[], 0x48) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000000c0)=r7) 2.497981766s ago: executing program 1 (id=5909): socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10884, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x10001, 0x7, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r3 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) 2.497652376s ago: executing program 3 (id=5910): socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) 1.983205059s ago: executing program 0 (id=5911): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b07, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0xf, 0x0, 0x5d31, 0x10820, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x2, 0xe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800be1bca0000b703000000000000850000000e0000009599a937ac71409a7a692b80c6363f21f1c8e205f96e092beaacaf7b6ba05172596270db98602ce03171b56994e175ae7cc0ab2e0358d992b17c6bc524558ae813"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x20000000000001e5, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socket$kcm(0xa, 0x2, 0x3a) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000740)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r4], 0xffffffffffffff35}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4543], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 1.95354279s ago: executing program 3 (id=5912): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x2, 0x40}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000fbffffff00"/20, @ANYRES32=r1, @ANYBLOB="00000000e8d005"], 0x48) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f\x00'], 0xfe33) ioctl$SIOCSIFHWADDR(r0, 0x8971, &(0x7f0000000000)={'dummy0\x00'}) 1.855804732s ago: executing program 3 (id=5914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feff0900000000000900000085000000180000001801000020756c2500000000002020207b1af8ff00000000fe982b6c7134b0a8f3bfa100000000000007010000f8ffffff85000000170000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0x1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000008400000002000000fe000000000000009200df334b"], 0x20}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a073f0006007c09e8fc55a10a0015000600142603600e120800020081000401a8000180f2ffffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x13, &(0x7f0000000480)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7ed}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x9, 0x9, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18}], &(0x7f0000000540)='GPL\x00', 0x4, 0xdf, &(0x7f0000000580)=""/223, 0x40f00, 0x8, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x3, 0xc, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[r3], &(0x7f00000008c0)=[{0x4, 0x5, 0x9, 0x5}, {0x0, 0x4, 0x4}, {0x3, 0x4, 0x10, 0x7}, {0x1, 0x4, 0x5, 0xa}, {0x4, 0x5, 0xd, 0x8}, {0x2, 0x1, 0x8, 0x2}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811208000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x407}, 0x94) 1.824562503s ago: executing program 4 (id=5915): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632177fbac141416ac141416449f9f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000000000000000000000000000000000000951105b162684e2ddc63ffff94def22c9df0a853f221ed648c872252d5f85e7d47444153bc80b3897fcbb94d43f07cd3ffffffff000000009b58d0fc73ff2c"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x28, 0x2, 0x2, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x24000, 0x8e83}, 0x0, 0xff, 0x2, 0x6, 0x8, 0x2020005, 0x8001, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x100000000a, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff51ae00"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.679426677s ago: executing program 1 (id=5916): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.372454585s ago: executing program 4 (id=5917): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6007f03000000000000040014000d000a000f0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb4a00f6985b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x1000000000000) 1.131455661s ago: executing program 1 (id=5918): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(r2) close(0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000006000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x95c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xfffffffffffffff2, 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xffff, 0x0, 0x0, 0x0, 0x8000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r5}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000900)="2000000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb44a93abb3327ba23872f0a2fba24107c7d0009000e000a0010000000ba80010000005a8c377432d6d5f7ce23718ab40fbf426d43d35096eb2839557f6039", 0x5a}], 0x1}, 0x4080) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c0000001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.058149933s ago: executing program 4 (id=5919): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="180100002020642500000000002020207b1a78ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @tracing=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x100040, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x21000000, 0x0, 0xffffffffffffff44, 0x0, 0x0, 0x0) 987.949725ms ago: executing program 0 (id=5920): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) socket$kcm(0x10, 0x0, 0x10) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000010007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) recvmsg(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001700)=""/4094, 0xffe}, {&(0x7f0000000040)=""/233, 0xe9}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 841.838618ms ago: executing program 4 (id=5921): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xa) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 192.701175ms ago: executing program 0 (id=5922): socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) 192.468675ms ago: executing program 4 (id=5923): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="85100000040000009500000000000000180000000000000000000000000000009500000000000000851000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) close(r1) 189.073485ms ago: executing program 3 (id=5924): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) 92.598518ms ago: executing program 1 (id=5925): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000000000000000000000000000000000000951105b162684e2ddc63ffff94def22c9df0a853f221ed648c872252d5f85e7d47444153bc80b3897fcbb94d43f07cd3ffffffff000000009b58d0fc73ff2c"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x28, 0x2, 0x2, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x24000, 0x8e83}, 0x0, 0xff, 0x2, 0x6, 0x8, 0x2020005, 0x8001, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x100000000a, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff51ae00"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 0s ago: executing program 4 (id=5926): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): on: batadv_slave_0 [ 882.804444][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.832965][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.857592][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.885979][T21406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.945420][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.976968][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.002942][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.029141][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.039401][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.050367][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.062920][T21406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.103093][T21406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.122789][T21406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.133069][T21406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.142489][T21406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.297840][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.306465][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.386466][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.395291][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.958963][T21616] netlink: 'syz.1.5000': attribute type 1 has an invalid length. [ 883.966810][T21616] netlink: 'syz.1.5000': attribute type 4 has an invalid length. [ 884.010336][T21616] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5000'. [ 884.717331][T21634] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.5048'. [ 884.844652][T21640] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5050'. [ 884.872662][T21640] netlink: 'syz.1.5050': attribute type 21 has an invalid length. [ 884.893872][T21640] IPv6: NLM_F_CREATE should be specified when creating new route [ 884.917875][T21640] IPv6: Can't replace route, no match found [ 885.119758][T21640] netlink: 'syz.1.5050': attribute type 10 has an invalid length. [ 886.327276][T21640] team0: Device wg1 is of different type [ 886.416478][T21658] netlink: 'syz.0.5056': attribute type 10 has an invalid length. [ 886.458336][T21661] syzkaller0: entered promiscuous mode [ 886.481905][T21661] syzkaller0: entered allmulticast mode [ 887.523981][T21693] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 888.121329][T21711] netlink: 'syz.2.5071': attribute type 10 has an invalid length. [ 888.193059][T21711] team0 (unregistering): Port device team_slave_0 removed [ 888.270674][T21711] team0 (unregistering): Port device team_slave_1 removed [ 888.321922][T21714] syzkaller0: entered promiscuous mode [ 888.327459][T21714] syzkaller0: entered allmulticast mode [ 888.463750][T21722] __nla_validate_parse: 5 callbacks suppressed [ 888.463769][T21722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5072'. [ 888.485508][T21722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5072'. [ 888.503015][T21722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5072'. [ 888.536578][T21722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5072'. [ 888.996209][T21733] netlink: 'syz.1.5078': attribute type 10 has an invalid length. [ 889.009604][T21733] hsr0: entered promiscuous mode [ 889.028145][T21733] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 889.281741][T21747] netlink: 'syz.0.5085': attribute type 10 has an invalid length. [ 889.368050][T21747] syzkaller0: entered promiscuous mode [ 889.397813][T21747] syzkaller0: entered allmulticast mode [ 889.716772][T21753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5081'. [ 890.082945][T21753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5081'. [ 890.125617][T21748] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5081'. [ 890.279190][T21757] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5081'. [ 890.900519][T21771] delete_channel: no stack [ 890.973644][T21771] delete_channel: no stack [ 892.035155][T21785] netlink: 'syz.3.5093': attribute type 10 has an invalid length. [ 892.067019][T21785] hsr0: entered promiscuous mode [ 892.114326][T21785] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 892.193657][T21791] netlink: 'syz.2.5096': attribute type 10 has an invalid length. [ 892.286632][T21791] syzkaller0: entered promiscuous mode [ 892.293667][T21791] syzkaller0: entered allmulticast mode [ 892.383499][T21799] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5099'. [ 892.435556][T21794] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 892.562203][T21796] FAULT_INJECTION: forcing a failure. [ 892.562203][T21796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.597088][T21796] CPU: 1 PID: 21796 Comm: syz.3.5098 Not tainted syzkaller #0 [ 892.604653][T21796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 892.614793][T21796] Call Trace: [ 892.618117][T21796] [ 892.621088][T21796] dump_stack_lvl+0x18c/0x250 [ 892.625817][T21796] ? show_regs_print_info+0x20/0x20 [ 892.631064][T21796] ? load_image+0x420/0x420 [ 892.635630][T21796] ? __might_fault+0xaa/0x120 [ 892.640361][T21796] ? __lock_acquire+0x7d80/0x7d80 [ 892.645441][T21796] should_fail_ex+0x394/0x4c0 [ 892.650194][T21796] _copy_from_user+0x2f/0xe0 [ 892.654848][T21796] __ia32_sys_rt_sigreturn+0x2e1/0x850 [ 892.660424][T21796] ? x64_setup_rt_frame+0xc30/0xc30 [ 892.665712][T21796] ? lock_chain_count+0x20/0x20 [ 892.670626][T21796] ? lockdep_hardirqs_on+0x98/0x150 [ 892.675901][T21796] do_syscall_64+0x55/0xb0 [ 892.680379][T21796] ? clear_bhb_loop+0x40/0x90 [ 892.685105][T21796] ? clear_bhb_loop+0x40/0x90 [ 892.689833][T21796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 892.695769][T21796] RIP: 0033:0x7fed3af3f459 [ 892.700219][T21796] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 892.719853][T21796] RSP: 002b:00007fed3bde1a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 892.728297][T21796] RAX: ffffffffffffffda RBX: 00007fed3b225fa0 RCX: 00007fed3af3f459 [ 892.736293][T21796] RDX: 00007fed3bde1a80 RSI: 00007fed3bde1bb0 RDI: 0000000000000011 [ 892.744290][T21796] RBP: 00007fed3bde2090 R08: 0000000000000000 R09: 0000000000000000 [ 892.752292][T21796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.760292][T21796] R13: 00007fed3b226038 R14: 00007fed3b225fa0 R15: 00007ffc379fa2a8 [ 892.768390][T21796] [ 892.987264][T21807] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.5102'. [ 893.018733][T21807] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 893.766907][T21833] netlink: 'syz.0.5108': attribute type 10 has an invalid length. [ 893.784083][T21833] hsr0: entered promiscuous mode [ 893.790577][T21833] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 893.950227][T21836] netlink: 'syz.0.5109': attribute type 10 has an invalid length. [ 893.974590][T21836] syzkaller0: entered promiscuous mode [ 893.981343][T21836] syzkaller0: entered allmulticast mode [ 894.151635][T15368] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 894.992580][T21864] __nla_validate_parse: 4 callbacks suppressed [ 894.992603][T21864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5118'. [ 895.047932][T21864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5118'. [ 895.060069][T21859] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5118'. [ 895.110322][T21859] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5118'. [ 895.496847][T21874] netlink: 'syz.1.5122': attribute type 10 has an invalid length. [ 895.598823][T21876] netlink: 'syz.3.5123': attribute type 29 has an invalid length. [ 895.652500][T21874] team0 (unregistering): Port device team_slave_0 removed [ 895.680161][T21874] team0 (unregistering): Port device team_slave_1 removed [ 895.745663][T21876] netlink: 'syz.3.5123': attribute type 29 has an invalid length. [ 895.873858][T21879] netlink: 'syz.3.5123': attribute type 29 has an invalid length. [ 895.942593][T21886] syzkaller0: entered promiscuous mode [ 895.951996][T21886] syzkaller0: entered allmulticast mode [ 895.961069][T21884] syzkaller0: entered promiscuous mode [ 895.966612][T21884] syzkaller0: entered allmulticast mode [ 895.985230][T21883] netlink: 'syz.3.5123': attribute type 29 has an invalid length. [ 896.050306][T21887] netlink: 'syz.3.5123': attribute type 29 has an invalid length. [ 896.334228][T15368] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 898.125611][T21879] netlink: 'syz.3.5123': attribute type 29 has an invalid length. [ 898.267445][T21901] netlink: 'syz.3.5127': attribute type 29 has an invalid length. [ 898.805239][T21912] netlink: 123072 bytes leftover after parsing attributes in process `syz.3.5131'. [ 899.212916][T21925] validate_nla: 4 callbacks suppressed [ 899.212979][T21925] netlink: 'syz.0.5135': attribute type 29 has an invalid length. [ 899.257059][T21925] netlink: 'syz.0.5135': attribute type 29 has an invalid length. [ 899.278787][T21925] netlink: 'syz.0.5135': attribute type 29 has an invalid length. [ 899.315608][T21925] netlink: 'syz.0.5135': attribute type 29 has an invalid length. [ 899.337085][T21925] netlink: 'syz.0.5135': attribute type 29 has an invalid length. [ 899.346311][T15368] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 899.700076][T21935] netlink: 'syz.3.5138': attribute type 21 has an invalid length. [ 899.728474][T21935] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.5138'. [ 899.762775][T21938] netlink: 'syz.0.5135': attribute type 29 has an invalid length. [ 900.168878][T21949] netlink: 'syz.0.5143': attribute type 10 has an invalid length. [ 900.183687][T21949] macvlan0: entered promiscuous mode [ 900.189520][T21949] macvlan0: entered allmulticast mode [ 900.241694][T21949] veth1_vlan: entered allmulticast mode [ 900.309998][T21953] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5143'. [ 900.336053][T21949] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 900.368019][T21953] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.5143'. [ 900.400735][T21953] tipc: Started in network mode [ 900.405939][T21953] tipc: Node identity b, cluster identity 73 [ 900.416548][T21953] tipc: Node number set to 11 [ 900.665478][T21959] netlink: 'syz.0.5145': attribute type 29 has an invalid length. [ 900.683280][T21959] netlink: 'syz.0.5145': attribute type 29 has an invalid length. [ 900.927040][T21968] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5149'. [ 900.960370][T21971] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5149'. [ 900.978562][T21971] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 901.010813][T21968] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 901.384200][T21980] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.419454][T21980] bridge_slave_1: left allmulticast mode [ 901.437659][T21980] bridge_slave_1: left promiscuous mode [ 901.443561][T21980] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.553933][T21988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5157'. [ 901.651146][T21988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5157'. [ 901.691571][T21988] FAULT_INJECTION: forcing a failure. [ 901.691571][T21988] name failslab, interval 1, probability 0, space 0, times 0 [ 901.734095][T21988] CPU: 1 PID: 21988 Comm: syz.1.5157 Not tainted syzkaller #0 [ 901.741664][T21988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 901.751781][T21988] Call Trace: [ 901.755107][T21988] [ 901.758091][T21988] dump_stack_lvl+0x18c/0x250 [ 901.762841][T21988] ? show_regs_print_info+0x20/0x20 [ 901.768102][T21988] ? load_image+0x420/0x420 [ 901.772674][T21988] ? __might_sleep+0xe0/0xe0 [ 901.777331][T21988] ? __lock_acquire+0x7d80/0x7d80 [ 901.782434][T21988] should_fail_ex+0x394/0x4c0 [ 901.787189][T21988] should_failslab+0x9/0x20 [ 901.791771][T21988] slab_pre_alloc_hook+0x59/0x300 [ 901.796870][T21988] ? __lock_acquire+0x7d80/0x7d80 [ 901.801969][T21988] kmem_cache_alloc_node+0x5e/0x310 [ 901.807247][T21988] ? __alloc_skb+0x103/0x2c0 [ 901.811903][T21988] __alloc_skb+0x103/0x2c0 [ 901.816385][T21988] netlink_sendmsg+0x66a/0xbf0 [ 901.821218][T21988] ? netlink_getsockopt+0x590/0x590 [ 901.826485][T21988] ? apparmor_socket_sendmsg+0x170/0x330 [ 901.832182][T21988] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 901.837534][T21988] ? security_socket_sendmsg+0x80/0xa0 [ 901.843052][T21988] ? netlink_getsockopt+0x590/0x590 [ 901.848318][T21988] ____sys_sendmsg+0x61b/0x980 [ 901.853153][T21988] ? __asan_memset+0x22/0x40 [ 901.857811][T21988] ? __sys_sendmsg_sock+0x30/0x30 [ 901.862902][T21988] ? __import_iovec+0x5f2/0x850 [ 901.867843][T21988] ? import_iovec+0x73/0xa0 [ 901.872422][T21988] ___sys_sendmsg+0x2a6/0x360 [ 901.877170][T21988] ? get_pid_task+0x20/0x1e0 [ 901.881832][T21988] ? __sys_sendmsg+0x2b0/0x2b0 [ 901.886682][T21988] ? __lock_acquire+0x7d80/0x7d80 [ 901.891803][T21988] __se_sys_sendmsg+0x1d0/0x2c0 [ 901.896756][T21988] ? __x64_sys_sendmsg+0x80/0x80 [ 901.901775][T21988] ? lockdep_hardirqs_on+0x98/0x150 [ 901.907038][T21988] do_syscall_64+0x55/0xb0 [ 901.911513][T21988] ? clear_bhb_loop+0x40/0x90 [ 901.916250][T21988] ? clear_bhb_loop+0x40/0x90 [ 901.920988][T21988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.926943][T21988] RIP: 0033:0x7f03b279e0d9 [ 901.931410][T21988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.951117][T21988] RSP: 002b:00007f03b360a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.959606][T21988] RAX: ffffffffffffffda RBX: 00007f03b2a25fa0 RCX: 00007f03b279e0d9 [ 901.967646][T21988] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000008 [ 901.975682][T21988] RBP: 00007f03b360a090 R08: 0000000000000000 R09: 0000000000000000 [ 901.983711][T21988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.991785][T21988] R13: 00007f03b2a26038 R14: 00007f03b2a25fa0 R15: 00007ffd5d08df08 [ 901.999839][T21988] [ 902.049146][T21989] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5157'. [ 902.134706][T21994] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5157'. [ 908.179152][T22024] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 908.270179][T22024] validate_nla: 15 callbacks suppressed [ 908.270200][T22024] netlink: 'syz.3.5167': attribute type 2 has an invalid length. [ 908.828835][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 908.845338][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 908.853982][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 908.863318][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 908.873131][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 908.887951][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 909.216230][ T32] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.344822][ T32] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.474913][ T32] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.571490][ T32] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.097241][T22036] chnl_net:caif_netlink_parms(): no params data found [ 910.917862][T15368] Bluetooth: hci3: command tx timeout [ 911.184848][T22036] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.205184][T22036] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.233262][T22036] bridge_slave_0: entered allmulticast mode [ 911.259457][T22036] bridge_slave_0: entered promiscuous mode [ 911.276170][T22036] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.309796][T22036] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.317379][T22036] bridge_slave_1: entered allmulticast mode [ 911.354846][T22036] bridge_slave_1: entered promiscuous mode [ 911.616434][T22036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.675306][T22036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.750854][T22108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5192'. [ 911.845949][T22108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5192'. [ 911.862989][T22036] team0: Port device team_slave_0 added [ 911.888475][T22108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5192'. [ 911.990182][T22036] team0: Port device team_slave_1 added [ 912.026958][T22112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5192'. [ 912.107350][T22108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5192'. [ 912.232917][T22036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.257027][T22036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.319574][T22036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.350106][T22036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.357247][T22036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.407901][T22036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.725643][T22127] netlink: 'syz.1.5195': attribute type 25 has an invalid length. [ 912.777731][T22127] netlink: 'syz.1.5195': attribute type 9 has an invalid length. [ 912.785562][T22127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5195'. [ 912.997630][T15368] Bluetooth: hci3: command tx timeout [ 913.006979][T22036] hsr_slave_0: entered promiscuous mode [ 913.023586][T22036] hsr_slave_1: entered promiscuous mode [ 913.037791][T22036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 913.045652][T22036] Cannot create hsr debugfs directory [ 913.163745][ T32] hsr_slave_0: left promiscuous mode [ 913.179150][ T32] hsr_slave_1: left promiscuous mode [ 913.189238][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.203952][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.218744][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.237017][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.283764][ T32] bridge_slave_1: left allmulticast mode [ 913.289862][ T32] bridge_slave_1: left promiscuous mode [ 913.300216][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.345248][ T32] bridge_slave_0: left allmulticast mode [ 913.351363][ T32] bridge_slave_0: left promiscuous mode [ 913.362714][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.483165][ T32] veth1_macvtap: left promiscuous mode [ 913.490372][ T32] veth0_macvtap: left promiscuous mode [ 913.496102][ T32] veth1_vlan: left promiscuous mode [ 913.517955][ T32] veth0_vlan: left promiscuous mode [ 914.790577][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.862104][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.777659][T15368] Bluetooth: hci3: command tx timeout [ 915.945760][T22153] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5204'. [ 916.085375][T22157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5204'. [ 916.200667][ T32] bond0 (unregistering): Released all slaves [ 916.344108][T22157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5204'. [ 916.397941][T22158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5204'. [ 916.783669][T22036] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 916.825934][T22036] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 916.865043][T22036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 916.886506][T22036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 917.306409][T22036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.381339][T22036] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.433057][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.440432][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.472286][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.479586][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.525946][T22200] netlink: 'syz.1.5216': attribute type 29 has an invalid length. [ 917.602128][T22200] netlink: 'syz.1.5216': attribute type 29 has an invalid length. [ 917.620562][T22204] netlink: 'syz.1.5216': attribute type 29 has an invalid length. [ 917.798122][T15368] Bluetooth: hci3: command tx timeout [ 918.289619][ T5787] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 920.464313][T22036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.869341][T22238] netlink: 'syz.3.5223': attribute type 10 has an invalid length. [ 920.997141][T22238] team0 (unregistering): Port device team_slave_0 removed [ 921.043335][T22238] team0 (unregistering): Port device team_slave_1 removed [ 921.380310][T22247] syzkaller0: entered promiscuous mode [ 921.387809][T22247] syzkaller0: entered allmulticast mode [ 921.685296][T22036] veth0_vlan: entered promiscuous mode [ 921.737312][T22036] veth1_vlan: entered promiscuous mode [ 921.814954][T22263] FAULT_INJECTION: forcing a failure. [ 921.814954][T22263] name failslab, interval 1, probability 0, space 0, times 0 [ 921.844387][T22036] veth0_macvtap: entered promiscuous mode [ 921.866472][T22263] CPU: 1 PID: 22263 Comm: syz.3.5227 Not tainted syzkaller #0 [ 921.874030][T22263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 921.884151][T22263] Call Trace: [ 921.886944][T22036] veth1_macvtap: entered promiscuous mode [ 921.887459][T22263] [ 921.896196][T22263] dump_stack_lvl+0x18c/0x250 [ 921.900977][T22263] ? show_regs_print_info+0x20/0x20 [ 921.906241][T22263] ? load_image+0x420/0x420 [ 921.910822][T22263] ? __lock_acquire+0x7d80/0x7d80 [ 921.915923][T22263] ? verify_lock_unused+0x140/0x140 [ 921.921182][T22263] should_fail_ex+0x394/0x4c0 [ 921.925925][T22263] should_failslab+0x9/0x20 [ 921.930484][T22263] slab_pre_alloc_hook+0x59/0x300 [ 921.935595][T22263] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 921.941203][T22263] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 921.946797][T22263] __kmem_cache_alloc_node+0x53/0x250 [ 921.952233][T22263] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 921.957825][T22263] __kmalloc+0xa7/0x240 [ 921.962037][T22263] bpf_prog_test_run_skb+0x242/0x18f0 [ 921.967452][T22263] ? __fget_files+0x28/0x460 [ 921.972101][T22263] ? __fget_files+0x3fc/0x460 [ 921.976848][T22263] ? cpu_online+0x60/0x60 [ 921.981220][T22263] bpf_prog_test_run+0x31f/0x390 [ 921.986209][T22263] __sys_bpf+0x49d/0x890 [ 921.990489][T22263] ? read_tsc+0x9/0x20 [ 921.994633][T22263] ? bpf_link_show_fdinfo+0x390/0x390 [ 922.000070][T22263] ? lock_chain_count+0x20/0x20 [ 922.004959][T22263] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 922.010991][T22263] __x64_sys_bpf+0x7c/0x90 [ 922.015455][T22263] do_syscall_64+0x55/0xb0 [ 922.019913][T22263] ? clear_bhb_loop+0x40/0x90 [ 922.024688][T22263] ? clear_bhb_loop+0x40/0x90 [ 922.029414][T22263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 922.035353][T22263] RIP: 0033:0x7fed3af9e0d9 [ 922.039828][T22263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.059493][T22263] RSP: 002b:00007fed3bde2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 922.067955][T22263] RAX: ffffffffffffffda RBX: 00007fed3b225fa0 RCX: 00007fed3af9e0d9 [ 922.075969][T22263] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 000000000000000a [ 922.083982][T22263] RBP: 00007fed3bde2090 R08: 0000000000000000 R09: 0000000000000000 [ 922.091994][T22263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.100008][T22263] R13: 00007fed3b226038 R14: 00007fed3b225fa0 R15: 00007ffc379fa2a8 [ 922.108042][T22263] [ 922.148779][T22270] netlink: 'syz.0.5228': attribute type 10 has an invalid length. [ 922.156664][T22270] __nla_validate_parse: 1 callbacks suppressed [ 922.156678][T22270] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.5228'. [ 922.240865][T22036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.261715][T22036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.272120][T22036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.288307][T22036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.302830][T22036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.327600][T22036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.346251][T22275] netlink: 'syz.3.5229': attribute type 29 has an invalid length. [ 922.355930][T22036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.377855][T22275] netlink: 'syz.3.5229': attribute type 3 has an invalid length. [ 922.395893][T22275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5229'. [ 922.482608][T22036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.518413][T22036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.546454][T22036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.577446][T22036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.601442][T22036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.625788][T22036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.653001][T22036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.680485][T22266] netlink: 'syz.0.5228': attribute type 10 has an invalid length. [ 922.740507][T22266] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.776334][T22266] bridge_slave_1: left allmulticast mode [ 922.798130][T22266] bridge_slave_1: left promiscuous mode [ 922.805369][T22266] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.905273][T22266] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 922.945817][T22036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.968096][T22036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.977430][T22036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.995080][T22036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.505365][T22299] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5233'. [ 923.525207][T22301] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5233'. [ 923.600268][T22300] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5233'. [ 923.811721][T22299] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.5233'. [ 923.892784][T22304] netlink: 'syz.1.5234': attribute type 10 has an invalid length. [ 923.985824][T22304] syzkaller0: entered promiscuous mode [ 924.018058][T22304] syzkaller0: entered allmulticast mode [ 924.174103][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.206065][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.281626][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.298185][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.687289][T22326] netlink: 'syz.4.5164': attribute type 29 has an invalid length. [ 924.728987][T22326] netlink: 'syz.4.5164': attribute type 29 has an invalid length. [ 924.789485][T22329] netlink: 'syz.4.5164': attribute type 29 has an invalid length. [ 924.873676][T22330] netlink: 'syz.4.5164': attribute type 29 has an invalid length. [ 924.921462][T22326] netlink: 'syz.4.5164': attribute type 29 has an invalid length. [ 925.915211][T22330] netlink: 'syz.4.5164': attribute type 29 has an invalid length. [ 926.326081][T22351] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5245'. [ 926.462516][T22356] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5245'. [ 926.500474][T22351] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5245'. [ 926.614725][T22354] netlink: 'syz.3.5246': attribute type 10 has an invalid length. [ 926.712630][T22356] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.5245'. [ 926.756826][T22354] syzkaller0: entered promiscuous mode [ 926.774763][T22354] syzkaller0: entered allmulticast mode [ 928.549013][T22389] netlink: 'syz.4.5252': attribute type 27 has an invalid length. [ 928.557035][T22389] netlink: 'syz.4.5252': attribute type 25 has an invalid length. [ 928.575362][T22388] delete_channel: no stack [ 928.580164][T22392] netlink: 'syz.1.5253': attribute type 10 has an invalid length. [ 928.608764][T22392] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.5253'. [ 928.700341][T22392] netlink: 'syz.1.5253': attribute type 10 has an invalid length. [ 928.779754][T22392] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.837963][T15368] Bluetooth: hci0: command 0x0406 tx timeout [ 928.869829][T22392] bridge_slave_1: left allmulticast mode [ 928.875741][T22392] bridge_slave_1: left promiscuous mode [ 928.894642][T22392] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.284518][T22408] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5258'. [ 929.366104][T22414] netlink: 'syz.3.5259': attribute type 10 has an invalid length. [ 929.392363][T22415] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5258'. [ 929.405171][T22414] syzkaller0: entered promiscuous mode [ 929.413410][T22414] syzkaller0: entered allmulticast mode [ 929.582191][T22408] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5258'. [ 929.761163][T22415] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.5258'. [ 930.036400][T22426] netlink: 'syz.0.5269': attribute type 10 has an invalid length. [ 930.107379][T22426] syzkaller0: entered promiscuous mode [ 930.123494][T22426] syzkaller0: entered allmulticast mode [ 930.722623][T22439] netlink: 'syz.3.5263': attribute type 1 has an invalid length. [ 930.731814][T22439] netlink: 59176 bytes leftover after parsing attributes in process `syz.3.5263'. [ 930.820121][T22445] macvlan1: entered promiscuous mode [ 930.825713][T22445] macvlan1: entered allmulticast mode [ 930.877820][T22445] veth1_vlan: entered allmulticast mode [ 931.195575][T22452] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 931.374058][T22459] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5267'. [ 931.885323][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.897656][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.420202][T22487] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5272'. [ 934.535954][T22492] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5271'. [ 934.666012][T22498] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5271'. [ 934.687451][T22492] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5271'. [ 935.187060][T22498] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.5271'. [ 935.324994][T22505] netlink: 'syz.0.5275': attribute type 10 has an invalid length. [ 935.418787][T22505] syzkaller0: entered promiscuous mode [ 935.428667][T22505] syzkaller0: entered allmulticast mode [ 935.851499][T22516] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5286'. [ 937.122683][T22541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5285'. [ 937.217378][T22545] netlink: 'syz.3.5288': attribute type 10 has an invalid length. [ 937.244583][T22545] syzkaller0: entered promiscuous mode [ 937.250516][T22545] syzkaller0: entered allmulticast mode [ 937.398335][T22550] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5290'. [ 937.830222][T22559] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5292'. [ 937.982656][T22559] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 938.074541][T22568] FAULT_INJECTION: forcing a failure. [ 938.074541][T22568] name failslab, interval 1, probability 0, space 0, times 0 [ 938.107322][T22568] CPU: 0 PID: 22568 Comm: syz.1.5293 Not tainted syzkaller #0 [ 938.115056][T22568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 938.125149][T22568] Call Trace: [ 938.128451][T22568] [ 938.131410][T22568] dump_stack_lvl+0x18c/0x250 [ 938.136206][T22568] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 938.142417][T22568] ? show_regs_print_info+0x20/0x20 [ 938.147654][T22568] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 938.153851][T22568] should_fail_ex+0x394/0x4c0 [ 938.158656][T22568] should_failslab+0x9/0x20 [ 938.163192][T22568] slab_pre_alloc_hook+0x59/0x300 [ 938.168257][T22568] ? kobject_uevent_env+0x27c/0x890 [ 938.173584][T22568] __kmem_cache_alloc_node+0x53/0x250 [ 938.179032][T22568] ? kobject_uevent_env+0x27c/0x890 [ 938.184266][T22568] kmalloc_trace+0x2a/0xe0 [ 938.188717][T22568] kobject_uevent_env+0x27c/0x890 [ 938.193783][T22568] __kobject_del+0xd1/0x2e0 [ 938.198332][T22568] kobject_put+0x233/0x450 [ 938.202789][T22568] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 938.208725][T22568] net_rx_queue_update_kobjects+0x515/0x590 [ 938.214750][T22568] netif_set_real_num_rx_queues+0x102/0x1e0 [ 938.220695][T22568] veth_set_channels+0x415/0xa40 [ 938.225709][T22568] ethtool_set_channels+0x5a7/0x660 [ 938.231005][T22568] ? ethtool_get_channels+0x190/0x190 [ 938.236420][T22568] ? apparmor_capable+0x137/0x1a0 [ 938.241475][T22568] ? security_capable+0x89/0xb0 [ 938.246371][T22568] dev_ethtool+0x1761/0x18d0 [ 938.251032][T22568] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 938.257309][T22568] ? __lock_acquire+0x7d80/0x7d80 [ 938.262379][T22568] ? dev_load+0x21/0x1f0 [ 938.266723][T22568] dev_ioctl+0x392/0x1140 [ 938.271124][T22568] sock_do_ioctl+0x239/0x310 [ 938.275748][T22568] ? sock_show_fdinfo+0xb0/0xb0 [ 938.280693][T22568] sock_ioctl+0x5be/0x7e0 [ 938.285062][T22568] ? sock_poll+0x3e0/0x3e0 [ 938.289527][T22568] ? bpf_lsm_file_ioctl+0x9/0x10 [ 938.294497][T22568] ? security_file_ioctl+0x80/0xa0 [ 938.299643][T22568] ? sock_poll+0x3e0/0x3e0 [ 938.304101][T22568] __se_sys_ioctl+0xfd/0x170 [ 938.308736][T22568] do_syscall_64+0x55/0xb0 [ 938.313178][T22568] ? clear_bhb_loop+0x40/0x90 [ 938.317882][T22568] ? clear_bhb_loop+0x40/0x90 [ 938.322591][T22568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 938.328521][T22568] RIP: 0033:0x7f03b279e0d9 [ 938.332963][T22568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.352615][T22568] RSP: 002b:00007f03b360a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 938.361100][T22568] RAX: ffffffffffffffda RBX: 00007f03b2a25fa0 RCX: 00007f03b279e0d9 [ 938.369115][T22568] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000c [ 938.377122][T22568] RBP: 00007f03b360a090 R08: 0000000000000000 R09: 0000000000000000 [ 938.385211][T22568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.393211][T22568] R13: 00007f03b2a26038 R14: 00007f03b2a25fa0 R15: 00007ffd5d08df08 [ 938.401225][T22568] [ 939.901912][T22648] netlink: 'syz.3.5295': attribute type 10 has an invalid length. [ 940.005448][T22654] netlink: 'syz.1.5296': attribute type 29 has an invalid length. [ 940.152424][T22648] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 940.204264][T22654] netlink: 'syz.1.5296': attribute type 29 has an invalid length. [ 940.300877][T22659] netlink: 'syz.1.5296': attribute type 29 has an invalid length. [ 940.329322][T22664] netlink: 'syz.4.5299': attribute type 10 has an invalid length. [ 940.741318][T22664] team0 (unregistering): Port device team_slave_0 removed [ 940.957983][T22664] team0 (unregistering): Port device team_slave_1 removed [ 941.023059][T22654] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5296'. [ 941.034794][T22654] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5296'. [ 941.054850][T22654] bond0: (slave bond_slave_0): Releasing backup interface [ 941.110367][T22654] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 941.149678][T22659] netlink: 'syz.1.5296': attribute type 29 has an invalid length. [ 941.404252][T22693] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5304'. [ 941.434573][T22695] netlink: 'syz.0.5305': attribute type 19 has an invalid length. [ 942.928030][T22729] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5321'. [ 942.965292][T22731] netlink: 'syz.3.5313': attribute type 29 has an invalid length. [ 942.975438][T22731] netlink: 'syz.3.5313': attribute type 29 has an invalid length. [ 943.008122][T22731] netlink: 'syz.3.5313': attribute type 29 has an invalid length. [ 943.089184][T22731] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5313'. [ 943.142522][T22731] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5313'. [ 943.189143][T22731] bond0: (slave bond_slave_0): Releasing backup interface [ 943.277025][T22731] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 943.378809][T22737] netlink: 'syz.3.5313': attribute type 29 has an invalid length. [ 943.917333][T22754] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.5316'. [ 943.955828][T22754] netlink: 'syz.3.5316': attribute type 10 has an invalid length. [ 943.976045][T22754] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 944.368198][T22761] netlink: 'syz.4.5318': attribute type 10 has an invalid length. [ 944.387875][T22761] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.5318'. [ 944.905312][T22778] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.5324'. [ 944.964140][T22781] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5326'. [ 945.048610][T22781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 945.298232][T22793] FAULT_INJECTION: forcing a failure. [ 945.298232][T22793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.344856][T22793] CPU: 0 PID: 22793 Comm: syz.0.5329 Not tainted syzkaller #0 [ 945.352432][T22793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.362553][T22793] Call Trace: [ 945.365890][T22793] [ 945.368881][T22793] dump_stack_lvl+0x18c/0x250 [ 945.373628][T22793] ? show_regs_print_info+0x20/0x20 [ 945.378896][T22793] ? load_image+0x420/0x420 [ 945.383483][T22793] ? __might_fault+0xaa/0x120 [ 945.388226][T22793] ? __lock_acquire+0x7d80/0x7d80 [ 945.393325][T22793] ? __virt_addr_valid+0x10c/0x380 [ 945.398514][T22793] should_fail_ex+0x394/0x4c0 [ 945.403271][T22793] _copy_from_user+0x2f/0xe0 [ 945.407930][T22793] generic_map_update_batch+0x58c/0x800 [ 945.413562][T22793] ? rcu_read_unlock+0xa0/0xa0 [ 945.418401][T22793] ? __fdget+0x180/0x210 [ 945.422717][T22793] ? rcu_read_unlock+0xa0/0xa0 [ 945.427536][T22793] bpf_map_do_batch+0x3f2/0x600 [ 945.432454][T22793] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 945.439029][T22793] __sys_bpf+0x381/0x890 [ 945.443520][T22793] ? bpf_link_show_fdinfo+0x390/0x390 [ 945.448990][T22793] ? lock_chain_count+0x20/0x20 [ 945.453914][T22793] __x64_sys_bpf+0x7c/0x90 [ 945.458390][T22793] do_syscall_64+0x55/0xb0 [ 945.462860][T22793] ? clear_bhb_loop+0x40/0x90 [ 945.467588][T22793] ? clear_bhb_loop+0x40/0x90 [ 945.472323][T22793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.478274][T22793] RIP: 0033:0x7f232719e0d9 [ 945.482744][T22793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.502550][T22793] RSP: 002b:00007f23280b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 945.511029][T22793] RAX: ffffffffffffffda RBX: 00007f2327425fa0 RCX: 00007f232719e0d9 [ 945.519059][T22793] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 000000000000001a [ 945.527095][T22793] RBP: 00007f23280b8090 R08: 0000000000000000 R09: 0000000000000000 [ 945.535129][T22793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 945.543160][T22793] R13: 00007f2327426038 R14: 00007f2327425fa0 R15: 00007ffe386f7fd8 [ 945.551201][T22793] [ 946.836120][T22820] can: request_module (can-proto-0) failed. [ 948.358708][T22843] netlink: 'syz.3.5338': attribute type 25 has an invalid length. [ 948.390342][T22843] netlink: 'syz.3.5338': attribute type 9 has an invalid length. [ 948.418794][T22843] __nla_validate_parse: 7 callbacks suppressed [ 948.418813][T22843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5338'. [ 949.801685][T22875] netlink: 212424 bytes leftover after parsing attributes in process `syz.4.5346'. [ 949.888078][T22879] tap0: tun_chr_ioctl cmd 2147767520 [ 950.046636][T22879] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5347'. [ 950.198441][T22890] netlink: 'syz.4.5349': attribute type 29 has an invalid length. [ 950.345568][T22879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.535871][T22879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.696305][T22879] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 950.716742][T22879] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.790288][T22879] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 950.838598][T22879] veth1_vlan: left allmulticast mode [ 950.888314][T22879] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 950.931265][T22879] bond0 (unregistering): Released all slaves [ 950.981396][T22885] netlink: 'syz.3.5348': attribute type 25 has an invalid length. [ 950.998293][T22885] netlink: 'syz.3.5348': attribute type 9 has an invalid length. [ 951.020022][T22885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5348'. [ 951.042403][T22890] netlink: 'syz.4.5349': attribute type 29 has an invalid length. [ 951.067859][T22892] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5349'. [ 951.078702][T22892] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5349'. [ 951.113127][T22892] bond0: (slave bond_slave_0): Releasing backup interface [ 951.142919][T22892] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 951.209954][T22891] netlink: 'syz.4.5349': attribute type 29 has an invalid length. [ 951.599126][T22914] netlink: 'syz.3.5354': attribute type 10 has an invalid length. [ 951.681976][T22914] syzkaller0: entered promiscuous mode [ 951.697600][T22914] syzkaller0: entered allmulticast mode [ 952.133338][T22934] netlink: 'syz.0.5360': attribute type 29 has an invalid length. [ 952.165701][T22934] netlink: 'syz.0.5360': attribute type 29 has an invalid length. [ 952.186372][T22935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5358'. [ 952.288415][T22934] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5360'. [ 952.765543][T22950] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5362'. [ 953.141986][T22959] can: request_module (can-proto-0) failed. [ 953.911467][T22974] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 953.926961][T22974] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 953.941850][T22977] validate_nla: 4 callbacks suppressed [ 953.941870][T22977] netlink: 'syz.4.5368': attribute type 10 has an invalid length. [ 953.986425][T22977] syzkaller0: entered promiscuous mode [ 953.994201][T22977] syzkaller0: entered allmulticast mode [ 954.111632][T22981] netlink: 'syz.3.5370': attribute type 29 has an invalid length. [ 954.126467][T22981] netlink: 'syz.3.5370': attribute type 29 has an invalid length. [ 954.178897][T22981] netlink: 'syz.3.5370': attribute type 29 has an invalid length. [ 954.266275][T22981] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5370'. [ 954.288924][T22981] netlink: 'syz.3.5370': attribute type 29 has an invalid length. [ 954.690685][T22990] netlink: 'syz.1.5373': attribute type 25 has an invalid length. [ 954.712529][T22990] netlink: 'syz.1.5373': attribute type 9 has an invalid length. [ 954.730929][T22990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5373'. [ 955.319348][T23011] FAULT_INJECTION: forcing a failure. [ 955.319348][T23011] name failslab, interval 1, probability 0, space 0, times 0 [ 955.367308][T23011] CPU: 1 PID: 23011 Comm: syz.3.5378 Not tainted syzkaller #0 [ 955.374985][T23011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 955.385161][T23011] Call Trace: [ 955.388523][T23011] [ 955.391530][T23011] dump_stack_lvl+0x18c/0x250 [ 955.396303][T23011] ? show_regs_print_info+0x20/0x20 [ 955.401590][T23011] ? load_image+0x420/0x420 [ 955.406198][T23011] ? __might_sleep+0xe0/0xe0 [ 955.410875][T23011] ? __lock_acquire+0x7d80/0x7d80 [ 955.415984][T23011] ? perf_trace_lock_acquire+0x342/0x400 [ 955.421725][T23011] should_fail_ex+0x394/0x4c0 [ 955.426518][T23011] should_failslab+0x9/0x20 [ 955.431194][T23011] slab_pre_alloc_hook+0x59/0x300 [ 955.436336][T23011] kmem_cache_alloc_node+0x5e/0x310 [ 955.441633][T23011] ? __alloc_skb+0x103/0x2c0 [ 955.446325][T23011] __alloc_skb+0x103/0x2c0 [ 955.450838][T23011] alloc_skb_with_frags+0xcd/0x7a0 [ 955.456047][T23011] ? __might_fault+0xaa/0x120 [ 955.460806][T23011] ? __lock_acquire+0x7d80/0x7d80 [ 955.465938][T23011] sock_alloc_send_pskb+0x883/0x9a0 [ 955.471321][T23011] ? sock_kzfree_s+0x50/0x50 [ 955.476108][T23011] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 955.482040][T23011] tun_get_user+0xa2e/0x3d70 [ 955.486761][T23011] ? aa_file_perm+0x3e3/0xee0 [ 955.491531][T23011] ? rcu_read_unlock+0xa0/0xa0 [ 955.496418][T23011] ? tun_get+0x1c/0x2e0 [ 955.500652][T23011] ? __lock_acquire+0x7d80/0x7d80 [ 955.505777][T23011] ? tun_get+0x1c/0x2e0 [ 955.510064][T23011] tun_chr_write_iter+0x119/0x200 [ 955.515177][T23011] vfs_write+0x474/0x9a0 [ 955.519519][T23011] ? file_end_write+0x250/0x250 [ 955.524454][T23011] ? __fget_files+0x3fc/0x460 [ 955.529214][T23011] ? __fdget_pos+0x1d8/0x330 [ 955.533852][T23011] ? ksys_write+0x74/0x260 [ 955.538389][T23011] ksys_write+0x151/0x260 [ 955.542817][T23011] ? __ia32_sys_read+0x90/0x90 [ 955.547699][T23011] ? lockdep_hardirqs_on+0x98/0x150 [ 955.552968][T23011] do_syscall_64+0x55/0xb0 [ 955.557459][T23011] ? clear_bhb_loop+0x40/0x90 [ 955.562290][T23011] ? clear_bhb_loop+0x40/0x90 [ 955.567028][T23011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 955.572969][T23011] RIP: 0033:0x7fed3af9e0d9 [ 955.577436][T23011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.597180][T23011] RSP: 002b:00007fed3bdc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 955.605649][T23011] RAX: ffffffffffffffda RBX: 00007fed3b226090 RCX: 00007fed3af9e0d9 [ 955.613672][T23011] RDX: 0000000000000012 RSI: 0000200000000240 RDI: 0000000000000003 [ 955.621864][T23011] RBP: 00007fed3bdc1090 R08: 0000000000000000 R09: 0000000000000000 [ 955.629904][T23011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.637924][T23011] R13: 00007fed3b226128 R14: 00007fed3b226090 R15: 00007ffc379fa2a8 [ 955.645996][T23011] [ 955.722124][T23005] can: request_module (can-proto-0) failed. [ 955.858007][T23008] syzkaller0: entered promiscuous mode [ 955.878067][T23008] syzkaller0: entered allmulticast mode [ 956.063982][T23017] netlink: 'syz.1.5380': attribute type 10 has an invalid length. [ 956.088696][T23017] syzkaller0: entered promiscuous mode [ 956.094462][T23017] syzkaller0: entered allmulticast mode [ 956.166360][T23023] netlink: 'syz.0.5382': attribute type 29 has an invalid length. [ 958.287236][T23023] netlink: 'syz.0.5382': attribute type 29 has an invalid length. [ 958.580992][T23047] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5388'. [ 958.613518][T23041] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.5385'. [ 958.653617][T23041] netlink: zone id is out of range [ 958.668609][T23041] netlink: zone id is out of range [ 958.674314][T23041] netlink: zone id is out of range [ 958.686320][T23041] netlink: zone id is out of range [ 958.705796][T23041] netlink: zone id is out of range [ 958.721297][T23041] netlink: zone id is out of range [ 958.727274][T23041] netlink: zone id is out of range [ 958.743191][T23041] netlink: zone id is out of range [ 958.752165][T23041] netlink: zone id is out of range [ 958.765605][T23041] netlink: zone id is out of range [ 958.977220][T23062] syzkaller0: entered promiscuous mode [ 958.987307][T23062] syzkaller0: entered allmulticast mode [ 959.235425][T23069] validate_nla: 3 callbacks suppressed [ 959.235443][T23069] netlink: 'syz.3.5393': attribute type 29 has an invalid length. [ 959.295850][T23069] netlink: 'syz.3.5393': attribute type 29 has an invalid length. [ 959.318815][T23072] netlink: 'syz.3.5393': attribute type 29 has an invalid length. [ 959.344408][T23069] netlink: 'syz.3.5393': attribute type 29 has an invalid length. [ 959.379316][T23069] netlink: 'syz.3.5393': attribute type 29 has an invalid length. [ 959.558154][T15368] Bluetooth: hci2: command 0x0406 tx timeout [ 961.509649][T23090] netlink: 'syz.3.5400': attribute type 21 has an invalid length. [ 961.528172][T23090] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5400'. [ 961.547754][T23091] netlink: 'syz.0.5401': attribute type 10 has an invalid length. [ 961.644972][T23100] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5402'. [ 961.834175][T23106] netlink: 'syz.1.5404': attribute type 25 has an invalid length. [ 961.842407][T23106] netlink: 'syz.1.5404': attribute type 9 has an invalid length. [ 961.862643][T23106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5404'. [ 962.582638][T23129] netlink: 'syz.4.5413': attribute type 10 has an invalid length. [ 962.671713][T23129] syzkaller0: entered promiscuous mode [ 962.677296][T23129] syzkaller0: entered allmulticast mode [ 962.714480][T23131] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5414'. [ 963.474084][T23164] syzkaller0: entered promiscuous mode [ 963.482664][T23164] syzkaller0: entered allmulticast mode [ 963.538450][T23165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5423'. [ 964.458114][T23195] validate_nla: 4 callbacks suppressed [ 964.458134][T23195] netlink: 'syz.4.5435': attribute type 10 has an invalid length. [ 964.568507][T23195] syzkaller0: entered promiscuous mode [ 964.594380][T23195] syzkaller0: entered allmulticast mode [ 967.075163][T23200] FAULT_INJECTION: forcing a failure. [ 967.075163][T23200] name failslab, interval 1, probability 0, space 0, times 0 [ 967.088290][T23200] CPU: 1 PID: 23200 Comm: syz.1.5436 Not tainted syzkaller #0 [ 967.095796][T23200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 967.105894][T23200] Call Trace: [ 967.109199][T23200] [ 967.112170][T23200] dump_stack_lvl+0x18c/0x250 [ 967.116910][T23200] ? show_regs_print_info+0x20/0x20 [ 967.122169][T23200] ? load_image+0x420/0x420 [ 967.126752][T23200] should_fail_ex+0x394/0x4c0 [ 967.131501][T23200] should_failslab+0x9/0x20 [ 967.136062][T23200] slab_pre_alloc_hook+0x59/0x300 [ 967.141152][T23200] ? ida_alloc_range+0x5e7/0x860 [ 967.146148][T23200] __kmem_cache_alloc_node+0x53/0x250 [ 967.151562][T23200] ? ida_alloc_range+0x5e7/0x860 [ 967.156516][T23200] kmalloc_trace+0x2a/0xe0 [ 967.160962][T23200] ida_alloc_range+0x5e7/0x860 [ 967.165755][T23200] ? __xdp_reg_mem_model+0x1fd/0x5a0 [ 967.171065][T23200] ? idr_replace+0x1b0/0x1b0 [ 967.175682][T23200] __xdp_reg_mem_model+0x219/0x5a0 [ 967.180832][T23200] ? kvmalloc_node+0x70/0x180 [ 967.185570][T23200] ? kvmalloc_node+0x70/0x180 [ 967.190299][T23200] ? xdp_reg_mem_model+0x40/0x40 [ 967.195301][T23200] xdp_reg_mem_model+0x22/0x40 [ 967.200128][T23200] bpf_test_run_xdp_live+0x262/0x1b30 [ 967.205561][T23200] ? 0xffffffffa0004740 [ 967.209727][T23200] ? 0xffffffffa0004740 [ 967.213886][T23200] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 967.219794][T23200] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 967.225962][T23200] ? xdp_convert_md_to_buff+0x330/0x330 [ 967.231575][T23200] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 967.237859][T23200] ? xdp_convert_md_to_buff+0x5b/0x330 [ 967.243338][T23200] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 967.248744][T23200] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 967.255988][T23200] ? dev_put+0x80/0x80 [ 967.260103][T23200] ? dev_put+0x80/0x80 [ 967.264212][T23200] bpf_prog_test_run+0x31f/0x390 [ 967.269188][T23200] __sys_bpf+0x49d/0x890 [ 967.273456][T23200] ? bpf_link_show_fdinfo+0x390/0x390 [ 967.278865][T23200] ? lock_chain_count+0x20/0x20 [ 967.283771][T23200] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 967.289797][T23200] __x64_sys_bpf+0x7c/0x90 [ 967.294232][T23200] do_syscall_64+0x55/0xb0 [ 967.298674][T23200] ? clear_bhb_loop+0x40/0x90 [ 967.303370][T23200] ? clear_bhb_loop+0x40/0x90 [ 967.308064][T23200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.313990][T23200] RIP: 0033:0x7f03b279e0d9 [ 967.318418][T23200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.338051][T23200] RSP: 002b:00007f03b360a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 967.346518][T23200] RAX: ffffffffffffffda RBX: 00007f03b2a25fa0 RCX: 00007f03b279e0d9 [ 967.354525][T23200] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 967.362527][T23200] RBP: 00007f03b360a090 R08: 0000000000000000 R09: 0000000000000000 [ 967.370541][T23200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.378553][T23200] R13: 00007f03b2a26038 R14: 00007f03b2a25fa0 R15: 00007ffd5d08df08 [ 967.386568][T23200] [ 967.447096][ T5787] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 967.456057][ T5787] Bluetooth: hci3: Injecting HCI hardware error event [ 967.465532][ T5787] Bluetooth: hci3: hardware error 0x00 [ 968.212463][T23224] netlink: 'syz.4.5442': attribute type 25 has an invalid length. [ 968.234388][T23224] netlink: 'syz.4.5442': attribute type 9 has an invalid length. [ 968.257709][T23224] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5442'. [ 968.292898][T23226] netlink: 'syz.3.5444': attribute type 21 has an invalid length. [ 968.301127][T23226] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5444'. [ 968.355233][T23226] netlink: 'syz.3.5444': attribute type 19 has an invalid length. [ 968.372573][T23226] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.5444'. [ 968.807138][T23242] netlink: 'syz.0.5448': attribute type 10 has an invalid length. [ 968.816524][T23239] netlink: 'syz.1.5447': attribute type 27 has an invalid length. [ 968.841288][T23239] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5447'. [ 968.856017][T23242] syzkaller0: entered promiscuous mode [ 968.861794][T23242] syzkaller0: entered allmulticast mode [ 969.659568][ T5787] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 970.729003][T23259] netlink: 'syz.3.5455': attribute type 25 has an invalid length. [ 970.743933][T23259] netlink: 'syz.3.5455': attribute type 6 has an invalid length. [ 970.929890][T23267] FAULT_INJECTION: forcing a failure. [ 970.929890][T23267] name failslab, interval 1, probability 0, space 0, times 0 [ 970.956902][T23267] CPU: 1 PID: 23267 Comm: syz.1.5456 Not tainted syzkaller #0 [ 970.964466][T23267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.974573][T23267] Call Trace: [ 970.977891][T23267] [ 970.980871][T23267] dump_stack_lvl+0x18c/0x250 [ 970.985643][T23267] ? show_regs_print_info+0x20/0x20 [ 970.990899][T23267] ? load_image+0x420/0x420 [ 970.995467][T23267] ? mark_lock+0x94/0x320 [ 970.999859][T23267] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 971.005908][T23267] should_fail_ex+0x394/0x4c0 [ 971.010658][T23267] should_failslab+0x9/0x20 [ 971.015230][T23267] slab_pre_alloc_hook+0x59/0x300 [ 971.020321][T23267] ? __local_bh_enable_ip+0x13a/0x1c0 [ 971.025755][T23267] kmem_cache_alloc+0x5a/0x2c0 [ 971.030580][T23267] ? dst_alloc+0x105/0x170 [ 971.035146][T23267] dst_alloc+0x105/0x170 [ 971.039483][T23267] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 971.045715][T23267] ? ip_route_output_key_hash+0x13d/0x330 [ 971.051500][T23267] ip_route_output_key_hash+0x1f3/0x330 [ 971.057139][T23267] ? ip_route_input_rcu+0x3120/0x3120 [ 971.062622][T23267] tcp_v4_connect+0x6c1/0x18a0 [ 971.067498][T23267] ? tcp_twsk_unique+0x970/0x970 [ 971.072497][T23267] ? unwind_get_return_address+0x91/0xc0 [ 971.078187][T23267] ? stack_trace_save+0x100/0x100 [ 971.083271][T23267] ? tcp_v6_connect+0x6b4/0x1900 [ 971.088360][T23267] tcp_v6_connect+0xb06/0x1900 [ 971.093197][T23267] ? tcp_v6_pre_connect+0xf0/0xf0 [ 971.098299][T23267] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 971.103376][T23267] ? do_syscall_64+0x55/0xb0 [ 971.108013][T23267] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 971.114149][T23267] __inet_stream_connect+0x254/0xdf0 [ 971.119515][T23267] ? inet_dgram_connect+0x340/0x340 [ 971.124805][T23267] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 971.130074][T23267] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 971.135347][T23267] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 971.141128][T23267] ? mark_lock+0x94/0x320 [ 971.145556][T23267] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 971.151601][T23267] ? lock_chain_count+0x20/0x20 [ 971.156521][T23267] ? tcp_set_state+0x6c0/0x6c0 [ 971.161371][T23267] tcp_sendmsg+0x2f/0x50 [ 971.165713][T23267] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 971.171015][T23267] ____sys_sendmsg+0x61b/0x980 [ 971.175820][T23267] ? __asan_memset+0x22/0x40 [ 971.180451][T23267] ? __sys_sendmsg_sock+0x30/0x30 [ 971.185499][T23267] ? __import_iovec+0x3fa/0x850 [ 971.190391][T23267] ? import_iovec+0x73/0xa0 [ 971.194936][T23267] ___sys_sendmsg+0x2a6/0x360 [ 971.199648][T23267] ? get_pid_task+0x20/0x1e0 [ 971.204275][T23267] ? __sys_sendmsg+0x2b0/0x2b0 [ 971.209083][T23267] ? __lock_acquire+0x7d80/0x7d80 [ 971.214158][T23267] __se_sys_sendmsg+0x1d0/0x2c0 [ 971.219037][T23267] ? perf_trace_preemptirq_template+0x269/0x330 [ 971.225326][T23267] ? __x64_sys_sendmsg+0x80/0x80 [ 971.230477][T23267] ? lockdep_hardirqs_on+0x98/0x150 [ 971.235710][T23267] do_syscall_64+0x55/0xb0 [ 971.240158][T23267] ? clear_bhb_loop+0x40/0x90 [ 971.244865][T23267] ? clear_bhb_loop+0x40/0x90 [ 971.249580][T23267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 971.255495][T23267] RIP: 0033:0x7f03b279e0d9 [ 971.259942][T23267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.279574][T23267] RSP: 002b:00007f03b360a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.288017][T23267] RAX: ffffffffffffffda RBX: 00007f03b2a25fa0 RCX: 00007f03b279e0d9 [ 971.296043][T23267] RDX: 0000000020000000 RSI: 0000200000002ec0 RDI: 0000000000000004 [ 971.304038][T23267] RBP: 00007f03b360a090 R08: 0000000000000000 R09: 0000000000000000 [ 971.312040][T23267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.320034][T23267] R13: 00007f03b2a26038 R14: 00007f03b2a25fa0 R15: 00007ffd5d08df08 [ 971.328041][T23267] [ 971.536815][T23277] netlink: 'syz.1.5459': attribute type 21 has an invalid length. [ 971.558450][T23277] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5459'. [ 971.613414][T23282] netlink: 'syz.0.5461': attribute type 10 has an invalid length. [ 971.646995][T23277] netlink: 'syz.1.5459': attribute type 19 has an invalid length. [ 971.676464][T23277] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.5459'. [ 972.058515][T23280] netlink: 'syz.3.5460': attribute type 25 has an invalid length. [ 972.077681][T23280] netlink: 'syz.3.5460': attribute type 9 has an invalid length. [ 972.093248][T23280] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5460'. [ 972.294657][T23290] syzkaller0: entered promiscuous mode [ 972.317206][T23290] syzkaller0: entered allmulticast mode [ 972.490614][T23296] netlink: 'syz.4.5464': attribute type 8 has an invalid length. [ 972.517603][T23296] netlink: 'syz.4.5464': attribute type 1 has an invalid length. [ 972.536452][T23296] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5464'. [ 972.622673][T23301] FAULT_INJECTION: forcing a failure. [ 972.622673][T23301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.707896][T23301] CPU: 1 PID: 23301 Comm: syz.3.5466 Not tainted syzkaller #0 [ 972.715491][T23301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 972.725716][T23301] Call Trace: [ 972.729070][T23301] [ 972.732079][T23301] dump_stack_lvl+0x18c/0x250 [ 972.736852][T23301] ? show_regs_print_info+0x20/0x20 [ 972.742139][T23301] ? load_image+0x420/0x420 [ 972.746748][T23301] ? __might_fault+0xaa/0x120 [ 972.751516][T23301] ? __lock_acquire+0x7d80/0x7d80 [ 972.756654][T23301] should_fail_ex+0x394/0x4c0 [ 972.761448][T23301] _copy_from_user+0x2f/0xe0 [ 972.766139][T23301] ___sys_recvmsg+0x174/0x590 [ 972.770922][T23301] ? __sys_recvmsg+0x2a0/0x2a0 [ 972.775801][T23301] ? ksys_write+0x1d2/0x260 [ 972.780433][T23301] ? __fget_files+0x3fc/0x460 [ 972.785251][T23301] __x64_sys_recvmsg+0x21e/0x2f0 [ 972.790284][T23301] ? ___sys_recvmsg+0x590/0x590 [ 972.795307][T23301] ? trace_sys_enter+0x1f/0x80 [ 972.800175][T23301] do_syscall_64+0x55/0xb0 [ 972.804667][T23301] ? clear_bhb_loop+0x40/0x90 [ 972.809436][T23301] ? clear_bhb_loop+0x40/0x90 [ 972.814200][T23301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 972.820169][T23301] RIP: 0033:0x7fed3af9e0d9 [ 972.824663][T23301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.844369][T23301] RSP: 002b:00007fed3bde2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 972.852882][T23301] RAX: ffffffffffffffda RBX: 00007fed3b225fa0 RCX: 00007fed3af9e0d9 [ 972.861056][T23301] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 972.869103][T23301] RBP: 00007fed3bde2090 R08: 0000000000000000 R09: 0000000000000000 [ 972.877153][T23301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.885201][T23301] R13: 00007fed3b226038 R14: 00007fed3b225fa0 R15: 00007ffc379fa2a8 [ 972.893307][T23301] [ 975.937801][T23322] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.5470'. [ 976.345133][T23332] netlink: 'syz.0.5473': attribute type 1 has an invalid length. [ 976.363505][T23332] netlink: 15382 bytes leftover after parsing attributes in process `syz.0.5473'. [ 976.520528][T23337] netlink: 'syz.4.5474': attribute type 25 has an invalid length. [ 976.535882][T23337] netlink: 'syz.4.5474': attribute type 9 has an invalid length. [ 976.547262][T23337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5474'. [ 976.561272][T23338] netlink: 'syz.1.5475': attribute type 10 has an invalid length. [ 976.577976][T23340] netlink: 'syz.0.5476': attribute type 8 has an invalid length. [ 976.585918][T23340] netlink: 'syz.0.5476': attribute type 1 has an invalid length. [ 976.605609][T23340] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5476'. [ 976.655451][T23338] syzkaller0: entered promiscuous mode [ 976.670130][T23338] syzkaller0: entered allmulticast mode [ 976.742971][T23344] FAULT_INJECTION: forcing a failure. [ 976.742971][T23344] name failslab, interval 1, probability 0, space 0, times 0 [ 976.763897][T23344] CPU: 1 PID: 23344 Comm: syz.3.5477 Not tainted syzkaller #0 [ 976.771444][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 976.781522][T23344] Call Trace: [ 976.784821][T23344] [ 976.787773][T23344] dump_stack_lvl+0x18c/0x250 [ 976.792481][T23344] ? show_regs_print_info+0x20/0x20 [ 976.797706][T23344] ? load_image+0x420/0x420 [ 976.802243][T23344] ? __might_sleep+0xe0/0xe0 [ 976.806859][T23344] ? __lock_acquire+0x7d80/0x7d80 [ 976.811939][T23344] ? lockdep_hardirqs_on+0x98/0x150 [ 976.817171][T23344] should_fail_ex+0x394/0x4c0 [ 976.821882][T23344] should_failslab+0x9/0x20 [ 976.826418][T23344] slab_pre_alloc_hook+0x59/0x300 [ 976.831487][T23344] ? __get_vm_area_node+0x125/0x370 [ 976.836721][T23344] __kmem_cache_alloc_node+0x53/0x250 [ 976.842131][T23344] ? __get_vm_area_node+0x125/0x370 [ 976.847363][T23344] kmalloc_node_trace+0x26/0xe0 [ 976.852247][T23344] __get_vm_area_node+0x125/0x370 [ 976.857303][T23344] __vmalloc_node_range+0x36f/0x1320 [ 976.862625][T23344] ? netlink_sendmsg+0x602/0xbf0 [ 976.867593][T23344] ? netlink_insert+0x1094/0x1390 [ 976.872656][T23344] ? preempt_schedule_notrace+0x110/0x110 [ 976.878413][T23344] ? netlink_insert+0x2ba/0x1390 [ 976.883374][T23344] ? free_vm_area+0x50/0x50 [ 976.887923][T23344] ? netlink_sendmsg+0x602/0xbf0 [ 976.892887][T23344] vmalloc+0x79/0x90 [ 976.896809][T23344] ? netlink_sendmsg+0x602/0xbf0 [ 976.901770][T23344] netlink_sendmsg+0x602/0xbf0 [ 976.906589][T23344] ? netlink_getsockopt+0x590/0x590 [ 976.911814][T23344] ? apparmor_socket_sendmsg+0x8e/0x330 [ 976.917387][T23344] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 976.922710][T23344] ? security_socket_sendmsg+0x80/0xa0 [ 976.928205][T23344] sock_write_iter+0x2dc/0x420 [ 976.933007][T23344] ? sock_read_iter+0x3f0/0x3f0 [ 976.937926][T23344] vfs_write+0x474/0x9a0 [ 976.942208][T23344] ? file_end_write+0x250/0x250 [ 976.947094][T23344] ? __fget_files+0x3fc/0x460 [ 976.951809][T23344] ? __fdget_pos+0x1d8/0x330 [ 976.956440][T23344] ? ksys_write+0x74/0x260 [ 976.960885][T23344] ksys_write+0x151/0x260 [ 976.965335][T23344] ? __ia32_sys_read+0x90/0x90 [ 976.970144][T23344] ? lockdep_hardirqs_on+0x98/0x150 [ 976.975373][T23344] do_syscall_64+0x55/0xb0 [ 976.979814][T23344] ? clear_bhb_loop+0x40/0x90 [ 976.984512][T23344] ? clear_bhb_loop+0x40/0x90 [ 976.989217][T23344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 976.995159][T23344] RIP: 0033:0x7fed3af9e0d9 [ 976.999603][T23344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.019232][T23344] RSP: 002b:00007fed3bde2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 977.027681][T23344] RAX: ffffffffffffffda RBX: 00007fed3b225fa0 RCX: 00007fed3af9e0d9 [ 977.035683][T23344] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000005 [ 977.043675][T23344] RBP: 00007fed3bde2090 R08: 0000000000000000 R09: 0000000000000000 [ 977.051671][T23344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.059661][T23344] R13: 00007fed3b226038 R14: 00007fed3b225fa0 R15: 00007ffc379fa2a8 [ 977.067672][T23344] [ 977.102954][T23344] syz.3.5477: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 977.181814][T23344] CPU: 1 PID: 23344 Comm: syz.3.5477 Not tainted syzkaller #0 [ 977.189379][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 977.199503][T23344] Call Trace: [ 977.202828][T23344] [ 977.205816][T23344] dump_stack_lvl+0x18c/0x250 [ 977.210651][T23344] ? show_regs_print_info+0x20/0x20 [ 977.215906][T23344] ? load_image+0x420/0x420 [ 977.220490][T23344] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 977.226971][T23344] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 977.233635][T23344] warn_alloc+0x246/0x340 [ 977.238022][T23344] ? __get_vm_area_node+0x125/0x370 [ 977.243288][T23344] ? zone_watermark_ok_safe+0x230/0x230 [ 977.248883][T23344] ? rcu_is_watching+0x15/0xb0 [ 977.253703][T23344] ? __get_vm_area_node+0x356/0x370 [ 977.258945][T23344] __vmalloc_node_range+0x394/0x1320 [ 977.264267][T23344] ? netlink_insert+0x1094/0x1390 [ 977.269325][T23344] ? preempt_schedule_notrace+0x110/0x110 [ 977.275081][T23344] ? netlink_insert+0x2ba/0x1390 [ 977.280052][T23344] ? free_vm_area+0x50/0x50 [ 977.284593][T23344] ? netlink_sendmsg+0x602/0xbf0 [ 977.289557][T23344] vmalloc+0x79/0x90 [ 977.293481][T23344] ? netlink_sendmsg+0x602/0xbf0 [ 977.298445][T23344] netlink_sendmsg+0x602/0xbf0 [ 977.303245][T23344] ? netlink_getsockopt+0x590/0x590 [ 977.308487][T23344] ? apparmor_socket_sendmsg+0x8e/0x330 [ 977.314068][T23344] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 977.319383][T23344] ? security_socket_sendmsg+0x80/0xa0 [ 977.324869][T23344] sock_write_iter+0x2dc/0x420 [ 977.329664][T23344] ? sock_read_iter+0x3f0/0x3f0 [ 977.334658][T23344] vfs_write+0x474/0x9a0 [ 977.338938][T23344] ? file_end_write+0x250/0x250 [ 977.343823][T23344] ? __fget_files+0x3fc/0x460 [ 977.348535][T23344] ? __fdget_pos+0x1d8/0x330 [ 977.353156][T23344] ? ksys_write+0x74/0x260 [ 977.357602][T23344] ksys_write+0x151/0x260 [ 977.361964][T23344] ? __ia32_sys_read+0x90/0x90 [ 977.366763][T23344] ? lockdep_hardirqs_on+0x98/0x150 [ 977.371995][T23344] do_syscall_64+0x55/0xb0 [ 977.376439][T23344] ? clear_bhb_loop+0x40/0x90 [ 977.381145][T23344] ? clear_bhb_loop+0x40/0x90 [ 977.385846][T23344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 977.391765][T23344] RIP: 0033:0x7fed3af9e0d9 [ 977.396207][T23344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.415845][T23344] RSP: 002b:00007fed3bde2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 977.424286][T23344] RAX: ffffffffffffffda RBX: 00007fed3b225fa0 RCX: 00007fed3af9e0d9 [ 977.432283][T23344] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000005 [ 977.440279][T23344] RBP: 00007fed3bde2090 R08: 0000000000000000 R09: 0000000000000000 [ 977.448273][T23344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.456262][T23344] R13: 00007fed3b226038 R14: 00007fed3b225fa0 R15: 00007ffc379fa2a8 [ 977.464271][T23344] [ 977.517861][T23344] Mem-Info: [ 977.526898][T23344] active_anon:18811 inactive_anon:0 isolated_anon:0 [ 977.526898][T23344] active_file:19355 inactive_file:40318 isolated_file:0 [ 977.526898][T23344] unevictable:768 dirty:320 writeback:0 [ 977.526898][T23344] slab_reclaimable:10465 slab_unreclaimable:95058 [ 977.526898][T23344] mapped:34901 shmem:13185 pagetables:637 [ 977.526898][T23344] sec_pagetables:0 bounce:0 [ 977.526898][T23344] kernel_misc_reclaimable:0 [ 977.526898][T23344] free:1331054 free_pcp:4502 free_cma:0 [ 977.641409][T23344] Node 0 active_anon:76944kB inactive_anon:0kB active_file:77420kB inactive_file:161068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139604kB dirty:1280kB writeback:0kB shmem:52804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11212kB pagetables:2548kB sec_pagetables:0kB all_unreclaimable? no [ 977.695755][T23344] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 977.802799][T23344] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 977.886409][T23344] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 977.907779][T23344] Node 0 DMA32 free:1410488kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:77704kB inactive_anon:0kB active_file:77420kB inactive_file:160244kB unevictable:1536kB writepending:1280kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:5960kB local_pcp:2520kB free_cma:0kB [ 977.955576][T23344] lowmem_reserve[]: 0 0 0 0 0 [ 978.008892][T23344] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 978.091006][T23344] lowmem_reserve[]: 0 0 0 0 0 [ 978.107648][T23344] Node 1 Normal free:3895588kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13536kB local_pcp:9280kB free_cma:0kB [ 978.294804][T23344] lowmem_reserve[]: 0 0 0 0 0 [ 978.367657][T23344] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 978.442322][T23344] Node 0 DMA32: 1379*4kB (UM) 736*8kB (U) 83*16kB (UME) 631*32kB (UME) 567*64kB (UME) 445*128kB (UME) 254*256kB (UME) 149*512kB (UM) 98*1024kB (UME) 2*2048kB (UM) 253*4096kB (UM) = 1408220kB [ 978.504563][T23344] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 978.539958][T23344] Node 1 Normal: 279*4kB (UME) 65*8kB (UME) 48*16kB (UME) 238*32kB (UME) 78*64kB (UME) 15*128kB (UE) 3*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 945*4096kB (M) = 3895588kB [ 978.691046][T23344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 978.734304][T23344] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 978.784195][T23344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 978.878131][T23344] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 978.923813][T23344] 75510 total pagecache pages [ 978.945444][T23344] 0 pages in swap cache [ 978.966253][T23344] Free swap = 124996kB [ 978.996455][T23344] Total swap = 124996kB [ 979.027691][T23344] 2097051 pages RAM [ 979.046795][T23344] 0 pages HighMem/MovableOnly [ 979.063271][T23344] 416955 pages reserved [ 979.089837][T23344] 0 pages cma reserved [ 979.321959][T23380] netlink: 'syz.3.5487': attribute type 10 has an invalid length. [ 979.424901][T23380] syzkaller0: entered promiscuous mode [ 979.445552][T23380] syzkaller0: entered allmulticast mode [ 979.517216][T23387] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5488'. [ 979.528018][T23383] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5488'. [ 979.607091][T23389] netlink: 'syz.1.5490': attribute type 25 has an invalid length. [ 979.626114][T23389] netlink: 'syz.1.5490': attribute type 9 has an invalid length. [ 979.647603][T23389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5490'. [ 980.849946][T23411] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5499'. [ 980.878373][T23406] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5499'. [ 980.943317][T23413] netlink: 'syz.3.5500': attribute type 10 has an invalid length. [ 981.075627][T23413] syzkaller0: entered promiscuous mode [ 981.090747][T23413] syzkaller0: entered allmulticast mode [ 982.061398][T23439] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5509'. [ 982.110008][T23438] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5509'. [ 982.242611][T23444] netlink: 'syz.1.5512': attribute type 9 has an invalid length. [ 982.264762][T23444] netlink: 'syz.1.5512': attribute type 23 has an invalid length. [ 982.289136][T23444] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.5512'. [ 982.426133][T23449] netlink: 'syz.4.5513': attribute type 10 has an invalid length. [ 983.590896][T23486] netlink: 'syz.4.5527': attribute type 10 has an invalid length. [ 985.036260][T23513] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.5534'. [ 985.051698][T23513] netlink: 'syz.1.5534': attribute type 1 has an invalid length. [ 985.075064][T23513] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.5534'. [ 985.540904][T23523] netlink: 'syz.0.5538': attribute type 10 has an invalid length. [ 986.838443][T23562] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5553'. [ 986.859948][T23562] net_ratelimit: 81 callbacks suppressed [ 986.859970][T23562] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 986.865378][T23560] netlink: 'syz.4.5552': attribute type 10 has an invalid length. [ 986.940651][T23567] netlink: 'syz.1.5554': attribute type 10 has an invalid length. [ 986.969664][T23567] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5554'. [ 986.999985][T23567] bridge0: port 2(hsr0) entered blocking state [ 987.010099][T23567] bridge0: port 2(hsr0) entered disabled state [ 987.016997][T23567] hsr0: entered allmulticast mode [ 987.029161][T23567] hsr_slave_0: entered allmulticast mode [ 987.035006][T23567] hsr_slave_1: entered allmulticast mode [ 987.045453][T23567] bridge0: port 2(hsr0) entered blocking state [ 987.051882][T23567] bridge0: port 2(hsr0) entered forwarding state [ 988.276302][T23586] netlink: 'syz.0.5562': attribute type 10 has an invalid length. [ 988.454584][T23593] netlink: 'syz.0.5564': attribute type 19 has an invalid length. [ 988.572157][T23597] netlink: 'syz.1.5566': attribute type 19 has an invalid length. [ 988.803846][T23606] netlink: 'syz.1.5570': attribute type 2 has an invalid length. [ 988.815001][T23602] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5567'. [ 988.834914][T23606] netlink: 'syz.1.5570': attribute type 3 has an invalid length. [ 988.856097][T23606] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5570'. [ 989.198952][T23616] netlink: 'syz.0.5573': attribute type 25 has an invalid length. [ 989.277655][T23616] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.5573'. [ 989.786599][T23630] FAULT_INJECTION: forcing a failure. [ 989.786599][T23630] name failslab, interval 1, probability 0, space 0, times 0 [ 989.799327][T23630] CPU: 0 PID: 23630 Comm: syz.0.5576 Not tainted syzkaller #0 [ 989.806839][T23630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 989.817030][T23630] Call Trace: [ 989.820354][T23630] [ 989.823342][T23630] dump_stack_lvl+0x18c/0x250 [ 989.828077][T23630] ? lock_chain_count+0x20/0x20 [ 989.832974][T23630] ? show_regs_print_info+0x20/0x20 [ 989.838218][T23630] ? load_image+0x420/0x420 [ 989.842768][T23630] ? finish_task_switch+0x262/0x8f0 [ 989.848001][T23630] ? finish_task_switch+0x262/0x8f0 [ 989.853254][T23630] should_fail_ex+0x394/0x4c0 [ 989.857972][T23630] should_failslab+0x9/0x20 [ 989.862506][T23630] slab_pre_alloc_hook+0x59/0x300 [ 989.867568][T23630] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 989.873769][T23630] kmem_cache_alloc+0x5a/0x2c0 [ 989.878567][T23630] ? skb_clone+0x1eb/0x370 [ 989.883024][T23630] skb_clone+0x1eb/0x370 [ 989.887300][T23630] bpf_clone_redirect+0x16d/0x4a0 [ 989.892368][T23630] bpf_prog_e97454e6a39c6b06+0x61/0x66 [ 989.897854][T23630] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 989.903861][T23630] ? preempt_schedule+0xc0/0xd0 [ 989.908746][T23630] ? bpf_test_run+0x174/0x870 [ 989.913537][T23630] ? preempt_schedule_common+0x82/0xc0 [ 989.919036][T23630] ? schedule_preempt_disabled+0x20/0x20 [ 989.924695][T23630] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 989.930964][T23630] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 989.936283][T23630] ? lock_chain_count+0x20/0x20 [ 989.941426][T23630] ? preempt_schedule_thunk+0x1a/0x30 [ 989.946865][T23630] ? __local_bh_disable_ip+0x108/0x1a0 [ 989.952352][T23630] ? __cant_sleep+0x220/0x220 [ 989.957053][T23630] ? __local_bh_enable_ip+0x14b/0x1c0 [ 989.962452][T23630] ? _local_bh_enable+0xa0/0xa0 [ 989.967332][T23630] ? bpf_test_timer_continue+0x135/0x380 [ 989.972995][T23630] ? bpf_test_run+0x174/0x870 [ 989.977722][T23630] bpf_test_run+0x2df/0x870 [ 989.982269][T23630] ? bpf_test_run+0x174/0x870 [ 989.986974][T23630] ? dst_hold+0x70/0x70 [ 989.991169][T23630] ? eth_get_headlen+0x210/0x210 [ 989.996228][T23630] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 990.001646][T23630] ? cpu_online+0x60/0x60 [ 990.006009][T23630] bpf_prog_test_run+0x31f/0x390 [ 990.010979][T23630] __sys_bpf+0x49d/0x890 [ 990.015253][T23630] ? bpf_link_show_fdinfo+0x390/0x390 [ 990.020665][T23630] ? lock_chain_count+0x20/0x20 [ 990.025549][T23630] __x64_sys_bpf+0x7c/0x90 [ 990.029993][T23630] do_syscall_64+0x55/0xb0 [ 990.034438][T23630] ? clear_bhb_loop+0x40/0x90 [ 990.039150][T23630] ? clear_bhb_loop+0x40/0x90 [ 990.043851][T23630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.049768][T23630] RIP: 0033:0x7f232719e0d9 [ 990.054208][T23630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.073839][T23630] RSP: 002b:00007f23280b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 990.082288][T23630] RAX: ffffffffffffffda RBX: 00007f2327425fa0 RCX: 00007f232719e0d9 [ 990.090364][T23630] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 990.098359][T23630] RBP: 00007f23280b8090 R08: 0000000000000000 R09: 0000000000000000 [ 990.106353][T23630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.114347][T23630] R13: 00007f2327426038 R14: 00007f2327425fa0 R15: 00007ffe386f7fd8 [ 990.122355][T23630] [ 990.650166][T23644] netlink: 'syz.0.5584': attribute type 21 has an invalid length. [ 990.682879][T23644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5584'. [ 990.755359][T23649] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5583'. [ 992.138967][T23661] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5587'. [ 992.362524][T23661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 992.768827][T23675] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5591'. [ 992.789285][T23674] veth1_macvtap: mtu less than device minimum [ 993.007399][T23682] netlink: 'syz.3.5594': attribute type 21 has an invalid length. [ 993.063103][T23682] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5594'. [ 993.325156][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.332806][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.506770][T23686] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5595'. [ 994.610610][T23710] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5601'. [ 994.649628][T23709] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5601'. [ 995.397785][T15368] Bluetooth: hci1: command 0x0406 tx timeout [ 995.980588][T23736] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5612'. [ 995.990553][T23735] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5612'. [ 996.083858][T23739] netlink: 'syz.1.5613': attribute type 29 has an invalid length. [ 996.092423][T23739] netlink: 'syz.1.5613': attribute type 29 has an invalid length. [ 996.103073][T23739] netlink: 'syz.1.5613': attribute type 29 has an invalid length. [ 996.224691][T23739] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5613'. [ 996.257826][T23739] netlink: 'syz.1.5613': attribute type 29 has an invalid length. [ 996.288815][T23744] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5614'. [ 996.324379][T23742] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5614'. [ 996.559300][T23749] netlink: 'syz.4.5616': attribute type 21 has an invalid length. [ 996.580858][T23749] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5616'. [ 996.996553][T23759] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5618'. [ 997.075908][T23759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 997.260126][T23768] netlink: 'syz.3.5622': attribute type 5 has an invalid length. [ 997.277173][T23768] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5622'. [ 997.292579][T23770] netlink: 'syz.1.5623': attribute type 13 has an invalid length. [ 997.310709][T23770] syz_tun: refused to change device tx_queue_len [ 997.317163][T23770] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 997.910822][T23789] netlink: 'syz.4.5629': attribute type 8 has an invalid length. [ 998.919086][T23806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 999.789782][T23813] __nla_validate_parse: 6 callbacks suppressed [ 999.789805][T23813] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5637'. [ 999.808189][T23815] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5637'. [ 999.818559][T23821] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5637'. [ 999.867604][T23822] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5637'. [ 999.887562][T23822] bridge_slave_1: default FDB implementation only supports local addresses [ 1000.230542][T23838] netlink: 'syz.4.5645': attribute type 33 has an invalid length. [ 1000.243227][T23840] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5646'. [ 1000.252831][T23838] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5645'. [ 1000.265762][T23840] bridge_slave_1: default FDB implementation only supports local addresses [ 1000.297842][T23838] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5645'. [ 1000.338196][T23838] hsr_slave_0: left promiscuous mode [ 1000.353990][T23838] hsr_slave_1: left promiscuous mode [ 1000.476994][T23843] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5647'. [ 1001.500182][T23864] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5653'. [ 1001.563285][T23864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1001.713829][T23875] FAULT_INJECTION: forcing a failure. [ 1001.713829][T23875] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.751372][T23875] CPU: 1 PID: 23875 Comm: syz.0.5657 Not tainted syzkaller #0 [ 1001.758935][T23875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1001.769045][T23875] Call Trace: [ 1001.772370][T23875] [ 1001.775356][T23875] dump_stack_lvl+0x18c/0x250 [ 1001.780089][T23875] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1001.786310][T23875] ? show_regs_print_info+0x20/0x20 [ 1001.791566][T23875] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1001.797792][T23875] should_fail_ex+0x394/0x4c0 [ 1001.802580][T23875] should_failslab+0x9/0x20 [ 1001.807177][T23875] slab_pre_alloc_hook+0x59/0x300 [ 1001.812308][T23875] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1001.818639][T23875] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1001.824967][T23875] __kmem_cache_alloc_node+0x53/0x250 [ 1001.830454][T23875] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1001.833321][T23878] FAULT_INJECTION: forcing a failure. [ 1001.833321][T23878] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.836789][T23875] __kmalloc+0xa7/0x240 [ 1001.853839][T23875] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1001.860063][T23875] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1001.866194][T23875] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1001.872615][T23875] genl_start+0x180/0x6c0 [ 1001.877050][T23875] __netlink_dump_start+0x43c/0x7a0 [ 1001.882340][T23875] genl_family_rcv_msg_dumpit+0x214/0x310 [ 1001.888133][T23875] ? genl_rcv_msg+0x7a0/0x7a0 [ 1001.892857][T23875] ? genl_get_cmd+0x693/0x930 [ 1001.897596][T23875] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1001.903803][T23875] ? genl_family_rcv_msg_doit+0x310/0x310 [ 1001.909576][T23875] ? genl_start+0x6c0/0x6c0 [ 1001.914127][T23875] ? genl_dumpit+0x1a0/0x1a0 [ 1001.918834][T23875] genl_rcv_msg+0x5de/0x7a0 [ 1001.923450][T23875] ? genl_bind+0x360/0x360 [ 1001.927922][T23875] ? ethnl_default_doit+0xba0/0xba0 [ 1001.933163][T23875] ? ethnl_default_start+0x560/0x560 [ 1001.938489][T23875] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 1001.943947][T23875] netlink_rcv_skb+0x235/0x4c0 [ 1001.948763][T23875] ? genl_bind+0x360/0x360 [ 1001.953240][T23875] ? netlink_ack+0x1160/0x1160 [ 1001.958089][T23875] ? __lock_acquire+0x7d80/0x7d80 [ 1001.963189][T23875] ? down_read+0x1ac/0x2e0 [ 1001.967681][T23875] genl_rcv+0x28/0x40 [ 1001.971720][T23875] netlink_unicast+0x7b1/0x930 [ 1001.976573][T23875] netlink_sendmsg+0x8d0/0xbf0 [ 1001.981413][T23875] ? netlink_getsockopt+0x590/0x590 [ 1001.986666][T23875] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1001.992304][T23875] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1001.997642][T23875] ? security_socket_sendmsg+0x80/0xa0 [ 1002.003247][T23875] ? netlink_getsockopt+0x590/0x590 [ 1002.008503][T23875] ____sys_sendmsg+0x61b/0x980 [ 1002.013343][T23875] ? __asan_memset+0x22/0x40 [ 1002.018008][T23875] ? __sys_sendmsg_sock+0x30/0x30 [ 1002.023088][T23875] ? __import_iovec+0x5f2/0x850 [ 1002.028019][T23875] ? import_iovec+0x73/0xa0 [ 1002.032586][T23875] ___sys_sendmsg+0x2a6/0x360 [ 1002.037337][T23875] ? __sys_sendmsg+0x2b0/0x2b0 [ 1002.042208][T23875] ? ktime_get+0x7f/0x280 [ 1002.046688][T23875] __se_sys_sendmsg+0x1d0/0x2c0 [ 1002.051601][T23875] ? __x64_sys_sendmsg+0x80/0x80 [ 1002.056632][T23875] ? lockdep_hardirqs_on+0x98/0x150 [ 1002.061895][T23875] do_syscall_64+0x55/0xb0 [ 1002.066359][T23875] ? clear_bhb_loop+0x40/0x90 [ 1002.071085][T23875] ? clear_bhb_loop+0x40/0x90 [ 1002.075818][T23875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.081753][T23875] RIP: 0033:0x7f232719e0d9 [ 1002.086214][T23875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.105905][T23875] RSP: 002b:00007f23280b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.114372][T23875] RAX: ffffffffffffffda RBX: 00007f2327425fa0 RCX: 00007f232719e0d9 [ 1002.122388][T23875] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1002.130405][T23875] RBP: 00007f23280b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.138416][T23875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.146945][T23875] R13: 00007f2327426038 R14: 00007f2327425fa0 R15: 00007ffe386f7fd8 [ 1002.155003][T23875] [ 1002.160095][T23878] CPU: 0 PID: 23878 Comm: syz.4.5659 Not tainted syzkaller #0 [ 1002.167660][T23878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1002.177807][T23878] Call Trace: [ 1002.181161][T23878] [ 1002.184160][T23878] dump_stack_lvl+0x18c/0x250 [ 1002.188933][T23878] ? show_regs_print_info+0x20/0x20 [ 1002.194221][T23878] ? load_image+0x420/0x420 [ 1002.198839][T23878] ? __lock_acquire+0x7d80/0x7d80 [ 1002.203979][T23878] should_fail_ex+0x394/0x4c0 [ 1002.208774][T23878] should_failslab+0x9/0x20 [ 1002.213373][T23878] slab_pre_alloc_hook+0x59/0x300 [ 1002.218512][T23878] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1002.223712][T23878] ? __d_alloc+0x31/0x710 [ 1002.228147][T23878] __d_alloc+0x31/0x710 [ 1002.232397][T23878] d_alloc_parallel+0xe0/0x1590 [ 1002.237336][T23878] ? __d_lookup+0x8f/0x7c0 [ 1002.241842][T23878] ? __lock_acquire+0x7d80/0x7d80 [ 1002.246993][T23878] ? __d_lookup+0x8f/0x7c0 [ 1002.251501][T23878] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1002.256731][T23878] path_openat+0x955/0x3270 [ 1002.261304][T23878] ? trace_call_bpf+0xc3/0x6c0 [ 1002.266191][T23878] ? do_filp_open+0x430/0x430 [ 1002.270969][T23878] do_filp_open+0x1f2/0x430 [ 1002.275540][T23878] ? vfs_tmpfile+0x620/0x620 [ 1002.280208][T23878] ? noop_direct_IO+0x20/0x20 [ 1002.284970][T23878] ? _raw_spin_unlock+0x28/0x40 [ 1002.289883][T23878] ? alloc_fd+0x590/0x640 [ 1002.294289][T23878] do_sys_openat2+0x134/0x1d0 [ 1002.299026][T23878] ? do_sys_open+0xe0/0xe0 [ 1002.303506][T23878] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1002.309547][T23878] ? srcu_init_notifier_head+0x90/0x90 [ 1002.315063][T23878] ? lock_chain_count+0x20/0x20 [ 1002.319983][T23878] __x64_sys_openat+0x139/0x160 [ 1002.324902][T23878] do_syscall_64+0x55/0xb0 [ 1002.329370][T23878] ? clear_bhb_loop+0x40/0x90 [ 1002.334094][T23878] ? clear_bhb_loop+0x40/0x90 [ 1002.338855][T23878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.344804][T23878] RIP: 0033:0x7f4c7b15e90e [ 1002.349268][T23878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1002.368931][T23878] RSP: 002b:00007f4c7c104ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1002.377402][T23878] RAX: ffffffffffffffda RBX: 00007f4c7c1056c0 RCX: 00007f4c7b15e90e [ 1002.385427][T23878] RDX: 0000000000000002 RSI: 00007f4c7c104f90 RDI: ffffffffffffff9c [ 1002.393449][T23878] RBP: 00007f4c7c105090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.401470][T23878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.409574][T23878] R13: 00007f4c7b426038 R14: 00007f4c7b425fa0 R15: 00007ffe51cb5fb8 [ 1002.417664][T23878] [ 1002.670004][T23885] bridge_slave_0: left allmulticast mode [ 1002.675998][T23885] bridge_slave_0: left promiscuous mode [ 1002.695380][T23885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.605539][T23896] netlink: 'syz.1.5665': attribute type 8 has an invalid length. [ 1003.618272][T23896] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5665'. [ 1003.813596][T23904] netlink: 'syz.3.5668': attribute type 29 has an invalid length. [ 1003.827894][T23904] netlink: 'syz.3.5668': attribute type 29 has an invalid length. [ 1003.849979][T23904] netlink: 'syz.3.5668': attribute type 29 has an invalid length. [ 1004.062988][T23908] netlink: 'syz.3.5668': attribute type 29 has an invalid length. [ 1004.845069][T23910] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5669'. [ 1004.885410][T23910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1004.916769][T23913] netlink: 'syz.0.5671': attribute type 10 has an invalid length. [ 1004.968550][T23918] netlink: 'syz.3.5670': attribute type 29 has an invalid length. [ 1005.003131][T23918] netlink: 'syz.3.5670': attribute type 29 has an invalid length. [ 1005.016010][T23918] netlink: 'syz.3.5670': attribute type 29 has an invalid length. [ 1005.045000][T23918] netlink: 'syz.3.5670': attribute type 29 has an invalid length. [ 1007.385595][T23933] bridge_slave_1: left allmulticast mode [ 1007.403871][T23933] bridge_slave_1: left promiscuous mode [ 1007.429441][T23933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.473886][T23933] bridge_slave_0: left allmulticast mode [ 1007.494937][T23933] bridge_slave_0: left promiscuous mode [ 1007.510834][T23933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.518261][T23937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5677'. [ 1008.643781][T23937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5677'. [ 1008.668796][T23939] validate_nla: 3 callbacks suppressed [ 1008.668814][T23939] netlink: 'syz.3.5679': attribute type 29 has an invalid length. [ 1008.705551][T23950] netlink: 'syz.0.5680': attribute type 29 has an invalid length. [ 1008.715498][T23953] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5677'. [ 1008.729427][T23953] bridge_slave_1: default FDB implementation only supports local addresses [ 1008.931257][T23966] netlink: 'syz.1.5691': attribute type 29 has an invalid length. [ 1008.957955][T23966] netlink: 'syz.1.5691': attribute type 29 has an invalid length. [ 1008.989068][T23966] netlink: 'syz.1.5691': attribute type 29 has an invalid length. [ 1009.108446][T23966] netlink: 'syz.1.5691': attribute type 29 has an invalid length. [ 1009.424642][T23978] netlink: 'syz.3.5687': attribute type 10 has an invalid length. [ 1009.444659][T23974] netlink: 'syz.0.5686': attribute type 10 has an invalid length. [ 1009.496259][T23978] syzkaller0: entered promiscuous mode [ 1009.503608][T23978] syzkaller0: entered allmulticast mode [ 1009.692163][T23981] hsr0: left allmulticast mode [ 1009.709338][T23981] hsr_slave_0: left allmulticast mode [ 1009.737826][T23981] hsr_slave_1: left allmulticast mode [ 1009.745191][T23981] bridge0: port 2(hsr0) entered disabled state [ 1009.835521][T23981] bridge_slave_0: left allmulticast mode [ 1009.867788][T23981] bridge_slave_0: left promiscuous mode [ 1009.875445][T23981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.022870][T23989] FAULT_INJECTION: forcing a failure. [ 1010.022870][T23989] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.037438][T23989] CPU: 0 PID: 23989 Comm: syz.0.5693 Not tainted syzkaller #0 [ 1010.044959][T23989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1010.055068][T23989] Call Trace: [ 1010.058388][T23989] [ 1010.061360][T23989] dump_stack_lvl+0x18c/0x250 [ 1010.065479][T23991] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1010.066074][T23989] ? show_regs_print_info+0x20/0x20 [ 1010.066107][T23989] ? load_image+0x420/0x420 [ 1010.084820][T23989] ? __might_sleep+0xe0/0xe0 [ 1010.089903][T23989] ? __lock_acquire+0x7d80/0x7d80 [ 1010.094980][T23989] should_fail_ex+0x394/0x4c0 [ 1010.099719][T23989] should_failslab+0x9/0x20 [ 1010.104280][T23989] slab_pre_alloc_hook+0x59/0x300 [ 1010.109396][T23989] ? __request_module+0x2ed/0x600 [ 1010.114473][T23989] ? __request_module+0x2ed/0x600 [ 1010.119551][T23989] __kmem_cache_alloc_node+0x53/0x250 [ 1010.124988][T23989] ? __request_module+0x2ed/0x600 [ 1010.130055][T23989] __kmalloc_node_track_caller+0xa4/0x230 [ 1010.135832][T23989] kstrdup+0x3b/0x80 [ 1010.139759][T23989] __request_module+0x2ed/0x600 [ 1010.144638][T23989] ? lock_chain_count+0x20/0x20 [ 1010.149540][T23989] ? module_enforce_rwx_sections+0x150/0x150 [ 1010.155585][T23989] ? lockdep_hardirqs_on+0x98/0x150 [ 1010.160842][T23989] ? bpf_lsm_capable+0x9/0x10 [ 1010.165558][T23989] ? dev_load+0x21/0x1f0 [ 1010.169852][T23989] dev_load+0x18b/0x1f0 [ 1010.174046][T23989] dev_ioctl+0x79f/0x1140 [ 1010.178537][T23989] sock_do_ioctl+0x239/0x310 [ 1010.183315][T23989] ? sock_show_fdinfo+0xb0/0xb0 [ 1010.188479][T23989] sock_ioctl+0x5be/0x7e0 [ 1010.192851][T23989] ? sock_poll+0x3e0/0x3e0 [ 1010.197305][T23989] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1010.202272][T23989] ? security_file_ioctl+0x80/0xa0 [ 1010.207420][T23989] ? sock_poll+0x3e0/0x3e0 [ 1010.211887][T23989] __se_sys_ioctl+0xfd/0x170 [ 1010.216546][T23989] do_syscall_64+0x55/0xb0 [ 1010.221002][T23989] ? clear_bhb_loop+0x40/0x90 [ 1010.225713][T23989] ? clear_bhb_loop+0x40/0x90 [ 1010.230419][T23989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1010.236341][T23989] RIP: 0033:0x7f232719e0d9 [ 1010.240782][T23989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.260421][T23989] RSP: 002b:00007f23280b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.268866][T23989] RAX: ffffffffffffffda RBX: 00007f2327425fa0 RCX: 00007f232719e0d9 [ 1010.276859][T23989] RDX: 0000200000000080 RSI: 0000000000008994 RDI: 0000000000000004 [ 1010.284864][T23989] RBP: 00007f23280b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.292881][T23989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.300877][T23989] R13: 00007f2327426038 R14: 00007f2327425fa0 R15: 00007ffe386f7fd8 [ 1010.308885][T23989] [ 1010.541023][T23983] netlink: 'syz.4.5690': attribute type 39 has an invalid length. [ 1010.837723][T23991] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1010.850960][T23995] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1010.861350][T23995] bridge_slave_1: default FDB implementation only supports local addresses [ 1011.119642][T24009] netlink: 'syz.3.5700': attribute type 10 has an invalid length. [ 1011.133025][T24011] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5697'. [ 1011.143862][T24005] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5697'. [ 1011.211489][T24009] syzkaller0: entered promiscuous mode [ 1011.231305][T24009] syzkaller0: entered allmulticast mode [ 1011.611696][T24026] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5704'. [ 1011.797360][T24030] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5705'. [ 1011.819303][T24032] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5706'. [ 1012.130626][T24036] netdevsim netdevsim0: Direct firmware load for Ö failed with error -2 [ 1012.144350][T24036] netdevsim netdevsim0: Falling back to sysfs fallback for: Ö [ 1012.215511][T24043] syzkaller0: entered promiscuous mode [ 1012.231321][T24043] syzkaller0: entered allmulticast mode [ 1012.601815][T24056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1012.609171][T24056] IPv6: NLM_F_CREATE should be set when creating new route [ 1012.616485][T24056] IPv6: NLM_F_CREATE should be set when creating new route [ 1012.623824][T24056] IPv6: NLM_F_CREATE should be set when creating new route [ 1012.704519][T24058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5717'. [ 1013.645426][T24066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5719'. [ 1013.960371][T24078] validate_nla: 4 callbacks suppressed [ 1013.960531][T24078] netlink: 'syz.3.5724': attribute type 39 has an invalid length. [ 1014.900912][T24086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1014.908384][T24086] IPv6: NLM_F_CREATE should be set when creating new route [ 1014.915732][T24086] IPv6: NLM_F_CREATE should be set when creating new route [ 1014.923315][T24086] IPv6: NLM_F_CREATE should be set when creating new route [ 1015.137578][T24096] netlink: 'syz.0.5730': attribute type 29 has an invalid length. [ 1015.145982][T24096] netlink: 'syz.0.5730': attribute type 29 has an invalid length. [ 1015.174719][T24096] netlink: 'syz.0.5730': attribute type 29 has an invalid length. [ 1015.222035][T24096] __nla_validate_parse: 3 callbacks suppressed [ 1015.222055][T24096] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5730'. [ 1015.274266][T24096] netlink: 'syz.0.5730': attribute type 29 has an invalid length. [ 1016.993693][T24127] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.5741'. [ 1017.026510][T24127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1017.034098][T24127] IPv6: NLM_F_CREATE should be set when creating new route [ 1017.041899][T24127] IPv6: NLM_F_CREATE should be set when creating new route [ 1017.049653][T24127] IPv6: NLM_F_CREATE should be set when creating new route [ 1017.360904][T24140] netlink: 'syz.3.5745': attribute type 13 has an invalid length. [ 1017.380684][T24140] netlink: 'syz.3.5745': attribute type 58 has an invalid length. [ 1017.390023][T24140] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5745'. [ 1017.490172][T24144] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5746'. [ 1017.500075][T24142] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5746'. [ 1018.134604][T24158] netlink: 'syz.0.5751': attribute type 13 has an invalid length. [ 1018.174830][T24158] netlink: 'syz.0.5751': attribute type 58 has an invalid length. [ 1018.202236][T24158] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5751'. [ 1018.610075][T24178] netlink: 'syz.4.5757': attribute type 29 has an invalid length. [ 1018.623289][T24179] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5756'. [ 1018.633770][T24176] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5756'. [ 1018.678196][T24178] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5757'. [ 1018.789158][T24184] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5758'. [ 1019.698036][T24207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1019.705790][T24207] IPv6: NLM_F_CREATE should be set when creating new route [ 1019.713900][T24207] IPv6: NLM_F_CREATE should be set when creating new route [ 1019.721704][T24207] IPv6: NLM_F_CREATE should be set when creating new route [ 1019.832628][T24214] validate_nla: 6 callbacks suppressed [ 1019.832648][T24214] netlink: 'syz.4.5770': attribute type 29 has an invalid length. [ 1019.847230][T24214] netlink: 'syz.4.5770': attribute type 29 has an invalid length. [ 1019.857937][T24214] netlink: 'syz.4.5770': attribute type 29 has an invalid length. [ 1019.867394][T24214] netlink: 'syz.4.5770': attribute type 29 has an invalid length. [ 1019.916524][T24209] FAULT_INJECTION: forcing a failure. [ 1019.916524][T24209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.933823][T24209] CPU: 0 PID: 24209 Comm: syz.3.5768 Not tainted syzkaller #0 [ 1019.941361][T24209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1019.951471][T24209] Call Trace: [ 1019.954796][T24209] [ 1019.957768][T24209] dump_stack_lvl+0x18c/0x250 [ 1019.962546][T24209] ? show_regs_print_info+0x20/0x20 [ 1019.966670][T24214] netlink: 'syz.4.5770': attribute type 29 has an invalid length. [ 1019.967783][T24209] ? load_image+0x420/0x420 [ 1019.967849][T24209] ? __lock_acquire+0x7d80/0x7d80 [ 1019.967878][T24209] ? snprintf+0xe9/0x140 [ 1019.967913][T24209] should_fail_ex+0x394/0x4c0 [ 1019.967949][T24209] _copy_to_user+0x2f/0xa0 [ 1019.967975][T24209] simple_read_from_buffer+0xe7/0x150 [ 1019.968003][T24209] proc_fail_nth_read+0x1e8/0x260 [ 1020.009244][T24209] ? proc_fault_inject_write+0x360/0x360 [ 1020.014941][T24209] ? vfs_read+0x282/0x990 [ 1020.019336][T24209] ? proc_fault_inject_write+0x360/0x360 [ 1020.025028][T24209] vfs_read+0x298/0x990 [ 1020.029250][T24209] ? kernel_read+0x1e0/0x1e0 [ 1020.033900][T24209] ? __fget_files+0x28/0x460 [ 1020.038554][T24209] ? __fget_files+0x3fc/0x460 [ 1020.043304][T24209] ? __fdget_pos+0x2a3/0x330 [ 1020.047947][T24209] ? ksys_read+0x74/0x260 [ 1020.052339][T24209] ksys_read+0x151/0x260 [ 1020.056651][T24209] ? vfs_write+0x9a0/0x9a0 [ 1020.061130][T24209] ? lockdep_hardirqs_on+0x98/0x150 [ 1020.066394][T24209] do_syscall_64+0x55/0xb0 [ 1020.070942][T24209] ? clear_bhb_loop+0x40/0x90 [ 1020.075655][T24209] ? clear_bhb_loop+0x40/0x90 [ 1020.080361][T24209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.086290][T24209] RIP: 0033:0x7fed3af5e90e [ 1020.090737][T24209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1020.110382][T24209] RSP: 002b:00007fed3bde1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1020.118831][T24209] RAX: ffffffffffffffda RBX: 00007fed3bde26c0 RCX: 00007fed3af5e90e [ 1020.126831][T24209] RDX: 000000000000000f RSI: 00007fed3bde20a0 RDI: 0000000000000006 [ 1020.134873][T24209] RBP: 00007fed3bde2090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.142877][T24209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.150878][T24209] R13: 00007fed3b226038 R14: 00007fed3b225fa0 R15: 00007ffc379fa2a8 [ 1020.158895][T24209] [ 1020.471429][T24223] FAULT_INJECTION: forcing a failure. [ 1020.471429][T24223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.512247][T24223] CPU: 1 PID: 24223 Comm: syz.1.5773 Not tainted syzkaller #0 [ 1020.519806][T24223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1020.529909][T24223] Call Trace: [ 1020.533230][T24223] [ 1020.536200][T24223] dump_stack_lvl+0x18c/0x250 [ 1020.540932][T24223] ? show_regs_print_info+0x20/0x20 [ 1020.546189][T24223] ? load_image+0x420/0x420 [ 1020.550757][T24223] ? __might_fault+0xaa/0x120 [ 1020.555495][T24223] ? __lock_acquire+0x7d80/0x7d80 [ 1020.560583][T24223] should_fail_ex+0x394/0x4c0 [ 1020.565324][T24223] _copy_from_user+0x2f/0xe0 [ 1020.569970][T24223] __sys_bpf+0x23e/0x890 [ 1020.574257][T24223] ? read_tsc+0x9/0x20 [ 1020.578360][T24223] ? bpf_link_show_fdinfo+0x390/0x390 [ 1020.583773][T24223] ? lock_chain_count+0x20/0x20 [ 1020.588651][T24223] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1020.594661][T24223] __x64_sys_bpf+0x7c/0x90 [ 1020.599128][T24223] do_syscall_64+0x55/0xb0 [ 1020.603615][T24223] ? clear_bhb_loop+0x40/0x90 [ 1020.608316][T24223] ? clear_bhb_loop+0x40/0x90 [ 1020.613027][T24223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.618946][T24223] RIP: 0033:0x7f03b279e0d9 [ 1020.623389][T24223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.643036][T24223] RSP: 002b:00007f03b360a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1020.651520][T24223] RAX: ffffffffffffffda RBX: 00007f03b2a25fa0 RCX: 00007f03b279e0d9 [ 1020.659528][T24223] RDX: 0000000000000030 RSI: 0000200000000340 RDI: 0000000000000014 [ 1020.667534][T24223] RBP: 00007f03b360a090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.675539][T24223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.683532][T24223] R13: 00007f03b2a26038 R14: 00007f03b2a25fa0 R15: 00007ffd5d08df08 [ 1020.691546][T24223] [ 1021.161331][T24242] netlink: 'syz.4.5779': attribute type 41 has an invalid length. [ 1021.181173][T24242] netlink: 'syz.4.5779': attribute type 41 has an invalid length. [ 1022.096043][T24261] __nla_validate_parse: 2 callbacks suppressed [ 1022.096084][T24261] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5785'. [ 1023.058328][T24282] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1023.171274][T24286] nr0: port 1(hsr0) entered blocking state [ 1023.183077][T24286] nr0: port 1(hsr0) entered disabled state [ 1023.191583][T24286] hsr0: entered allmulticast mode [ 1023.196772][T24286] hsr_slave_0: entered allmulticast mode [ 1023.204903][T24286] hsr_slave_1: entered allmulticast mode [ 1023.254584][T24290] netlink: 'syz.0.5794': attribute type 10 has an invalid length. [ 1023.272051][T24288] netlink: 'syz.3.5792': attribute type 10 has an invalid length. [ 1023.328912][T24288] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1023.354974][T24288] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1023.366309][T24288] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1023.381032][T24288] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1023.728514][T24301] netlink: 'syz.3.5797': attribute type 25 has an invalid length. [ 1023.757989][T24301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5797'. [ 1024.259595][T24323] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5804'. [ 1024.969154][T24348] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5812'. [ 1024.998277][T24345] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5812'. [ 1025.085226][T24350] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5814'. [ 1025.097002][T24350] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5814'. [ 1025.122399][T24350] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5814'. [ 1025.151416][T24350] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5814'. [ 1025.162251][T22612] wlan1: Trigger new scan to find an IBSS to join [ 1026.521249][T24367] netlink: 'syz.1.5820': attribute type 11 has an invalid length. [ 1026.577092][T24367] netlink: 212832 bytes leftover after parsing attributes in process `syz.1.5820'. [ 1028.770979][T24395] validate_nla: 7 callbacks suppressed [ 1028.771025][T24395] netlink: 'syz.3.5831': attribute type 25 has an invalid length. [ 1028.802942][T24395] netlink: 'syz.3.5831': attribute type 9 has an invalid length. [ 1028.833089][T24395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5831'. [ 1029.641417][T24409] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5834'. [ 1030.219543][T24413] FAULT_INJECTION: forcing a failure. [ 1030.219543][T24413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.232943][T24413] CPU: 1 PID: 24413 Comm: syz.3.5836 Not tainted syzkaller #0 [ 1030.240465][T24413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1030.250577][T24413] Call Trace: [ 1030.253899][T24413] [ 1030.256868][T24413] dump_stack_lvl+0x18c/0x250 [ 1030.261603][T24413] ? show_regs_print_info+0x20/0x20 [ 1030.266856][T24413] ? load_image+0x420/0x420 [ 1030.271422][T24413] ? __might_fault+0xaa/0x120 [ 1030.276159][T24413] ? __lock_acquire+0x7d80/0x7d80 [ 1030.281246][T24413] should_fail_ex+0x394/0x4c0 [ 1030.285981][T24413] _copy_from_user+0x2f/0xe0 [ 1030.290621][T24413] addrconf_add_ifaddr+0x106/0x1c0 [ 1030.295887][T24413] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 1030.301593][T24413] ? addrconf_set_dstaddr+0x320/0x320 [ 1030.307078][T24413] ? __lock_acquire+0x7d80/0x7d80 [ 1030.312183][T24413] ? slab_free_freelist_hook+0x130/0x1a0 [ 1030.317874][T24413] inet6_ioctl+0x14f/0x2d0 [ 1030.322363][T24413] ? inet6_getname+0x670/0x670 [ 1030.327193][T24413] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1030.332885][T24413] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1030.338575][T24413] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1030.344113][T24413] sock_do_ioctl+0xfc/0x310 [ 1030.348685][T24413] ? sock_show_fdinfo+0xb0/0xb0 [ 1030.353606][T24413] sock_ioctl+0x5be/0x7e0 [ 1030.357990][T24413] ? sock_poll+0x3e0/0x3e0 [ 1030.362475][T24413] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1030.367460][T24413] ? security_file_ioctl+0x80/0xa0 [ 1030.372631][T24413] ? sock_poll+0x3e0/0x3e0 [ 1030.377103][T24413] __se_sys_ioctl+0xfd/0x170 [ 1030.381753][T24413] do_syscall_64+0x55/0xb0 [ 1030.386216][T24413] ? clear_bhb_loop+0x40/0x90 [ 1030.390949][T24413] ? clear_bhb_loop+0x40/0x90 [ 1030.395678][T24413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1030.401621][T24413] RIP: 0033:0x7fed3af9e0d9 [ 1030.406094][T24413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.425755][T24413] RSP: 002b:00007fed3bde2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.434234][T24413] RAX: ffffffffffffffda RBX: 00007fed3b225fa0 RCX: 00007fed3af9e0d9 [ 1030.442271][T24413] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000041 [ 1030.450299][T24413] RBP: 00007fed3bde2090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.458331][T24413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.466400][T24413] R13: 00007fed3b226038 R14: 00007fed3b225fa0 R15: 00007ffc379fa2a8 [ 1030.474441][T24413] [ 1030.624701][T24419] netlink: 'syz.4.5839': attribute type 29 has an invalid length. [ 1030.677838][T24419] netlink: 'syz.4.5839': attribute type 29 has an invalid length. [ 1030.686356][T24424] netlink: 'syz.4.5839': attribute type 29 has an invalid length. [ 1030.911091][T24431] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1031.906217][T24445] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5849'. [ 1031.939892][T24445] netlink: 'syz.4.5849': attribute type 10 has an invalid length. [ 1031.971127][T24445] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5849'. [ 1032.518764][T24464] netlink: 'syz.3.5854': attribute type 25 has an invalid length. [ 1032.539919][T24464] netlink: 'syz.3.5854': attribute type 9 has an invalid length. [ 1032.569311][T24464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1032.794091][T24476] netlink: 'syz.4.5858': attribute type 1 has an invalid length. [ 1032.804255][T24476] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.5858'. [ 1032.820370][T24476] netlink: 'syz.4.5858': attribute type 1 has an invalid length. [ 1033.033310][T24481] netlink: 209816 bytes leftover after parsing attributes in process `syz.4.5862'. [ 1033.053679][T24481] netlink: 3064 bytes leftover after parsing attributes in process `syz.4.5862'. [ 1033.796896][T24511] mac80211_hwsim hwsim39 ..ãc¤±: renamed from wlan1 (while UP) [ 1033.964057][T24513] netlink: 'syz.4.5872': attribute type 3 has an invalid length. [ 1033.972537][T24513] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.5872'. [ 1034.191541][T24521] FAULT_INJECTION: forcing a failure. [ 1034.191541][T24521] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.214110][T24521] CPU: 0 PID: 24521 Comm: syz.4.5876 Not tainted syzkaller #0 [ 1034.221654][T24521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1034.231760][T24521] Call Trace: [ 1034.235084][T24521] [ 1034.238060][T24521] dump_stack_lvl+0x18c/0x250 [ 1034.242789][T24521] ? sctp_sendmsg+0x1519/0x27b0 [ 1034.247698][T24521] ? ___sys_sendmsg+0x2a6/0x360 [ 1034.252598][T24521] ? show_regs_print_info+0x20/0x20 [ 1034.257852][T24521] ? load_image+0x420/0x420 [ 1034.262437][T24521] should_fail_ex+0x394/0x4c0 [ 1034.267181][T24521] should_failslab+0x9/0x20 [ 1034.271745][T24521] slab_pre_alloc_hook+0x59/0x300 [ 1034.276838][T24521] ? sctp_add_bind_addr+0x8c/0x360 [ 1034.282007][T24521] __kmem_cache_alloc_node+0x53/0x250 [ 1034.287454][T24521] ? sctp_add_bind_addr+0x8c/0x360 [ 1034.292618][T24521] kmalloc_trace+0x2a/0xe0 [ 1034.297091][T24521] sctp_add_bind_addr+0x8c/0x360 [ 1034.302097][T24521] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1034.307791][T24521] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1034.313568][T24521] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1034.319702][T24521] ? sctp_v4_is_any+0x35/0x60 [ 1034.324428][T24521] ? sctp_copy_one_addr+0x8c/0x350 [ 1034.329601][T24521] sctp_bind_addr_copy+0xb3/0x3c0 [ 1034.334690][T24521] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1034.341093][T24521] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1034.346445][T24521] ? __sctp_connect+0xd80/0xd80 [ 1034.351354][T24521] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1034.356889][T24521] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1034.362506][T24521] ? security_sctp_bind_connect+0x89/0xb0 [ 1034.368291][T24521] sctp_sendmsg+0x1519/0x27b0 [ 1034.373051][T24521] ? sctp_getsockopt+0xb60/0xb60 [ 1034.378073][T24521] ? aa_af_perm+0x330/0x330 [ 1034.382646][T24521] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1034.389171][T24521] ? sock_rps_record_flow+0x19/0x3f0 [ 1034.394527][T24521] ? inet_sendmsg+0xce/0x2a0 [ 1034.399182][T24521] ? inet_send_prepare+0x250/0x250 [ 1034.404355][T24521] ____sys_sendmsg+0x61b/0x980 [ 1034.409190][T24521] ? __asan_memset+0x22/0x40 [ 1034.413845][T24521] ? __sys_sendmsg_sock+0x30/0x30 [ 1034.418920][T24521] ? __import_iovec+0x5f2/0x850 [ 1034.423846][T24521] ? import_iovec+0x73/0xa0 [ 1034.428419][T24521] ___sys_sendmsg+0x2a6/0x360 [ 1034.433154][T24521] ? __sys_sendmsg+0x2b0/0x2b0 [ 1034.437992][T24521] ? trace_call_bpf+0xc3/0x6c0 [ 1034.442839][T24521] __se_sys_sendmsg+0x1d0/0x2c0 [ 1034.447740][T24521] ? perf_trace_preemptirq_template+0x269/0x330 [ 1034.454043][T24521] ? __x64_sys_sendmsg+0x80/0x80 [ 1034.459060][T24521] ? lockdep_hardirqs_on+0x98/0x150 [ 1034.464324][T24521] do_syscall_64+0x55/0xb0 [ 1034.468803][T24521] ? clear_bhb_loop+0x40/0x90 [ 1034.473540][T24521] ? clear_bhb_loop+0x40/0x90 [ 1034.478285][T24521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1034.484245][T24521] RIP: 0033:0x7f4c7b19e0d9 [ 1034.488711][T24521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.508377][T24521] RSP: 002b:00007f4c7c105028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1034.516848][T24521] RAX: ffffffffffffffda RBX: 00007f4c7b425fa0 RCX: 00007f4c7b19e0d9 [ 1034.524874][T24521] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000003 [ 1034.532908][T24521] RBP: 00007f4c7c105090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.540933][T24521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1034.548954][T24521] R13: 00007f4c7b426038 R14: 00007f4c7b425fa0 R15: 00007ffe51cb5fb8 [ 1034.556999][T24521] [ 1034.631076][T24524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5878'. [ 1034.895116][T24530] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 1035.213751][T24544] netlink: 'syz.4.5885': attribute type 21 has an invalid length. [ 1035.234236][T24544] IPv6: NLM_F_CREATE should be specified when creating new route [ 1035.268233][T24544] IPv6: Can't replace route, no match found [ 1035.310428][T24546] netlink: 'syz.1.5884': attribute type 10 has an invalid length. [ 1035.342891][T24546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.410395][T24546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.479135][T24546] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1035.499488][T24544] netlink: 'syz.4.5885': attribute type 10 has an invalid length. [ 1035.753631][T24558] netlink: 'syz.4.5889': attribute type 10 has an invalid length. [ 1036.273530][T24576] syzkaller0: entered promiscuous mode [ 1036.287335][T24576] syzkaller0: entered allmulticast mode [ 1039.097373][T24599] netlink: 'syz.1.5903': attribute type 10 has an invalid length. [ 1039.117580][T24599] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5903'. [ 1039.138724][T24599] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1039.145396][T24599] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.192011][T24599] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1039.322259][T24615] netlink: 'syz.4.5908': attribute type 4 has an invalid length. [ 1039.363791][T24615] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5908'. [ 1039.952311][T24633] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5911'. [ 1039.991505][T24633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1040.059050][T24632] netlink: 'syz.3.5914': attribute type 21 has an invalid length. [ 1040.521953][T24644] netlink: 'syz.4.5917': attribute type 10 has an invalid length. [ 1040.538863][T24644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5917'. [ 1040.562817][T24644] netlink: 'syz.4.5917': attribute type 10 has an invalid length. [ 1040.575679][T24644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5917'. [ 1040.937426][T24653] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5920'. [ 1041.517843][T24651] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5920'. [ 1041.968376][ T29] INFO: task syz.2.5101:21805 blocked for more than 143 seconds. [ 1041.976205][ T29] Not tainted syzkaller #0 [ 1042.012266][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1042.041480][ T29] task:syz.2.5101 state:D stack:26600 pid:21805 ppid:21106 flags:0x00004002 [ 1042.077713][ T29] Call Trace: [ 1042.081314][ T29] [ 1042.085553][ T29] __schedule+0x15ae/0x4660 [ 1042.096271][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 1042.107568][ T29] ? asan.module_dtor+0x20/0x20 [ 1042.118034][ T29] ? trace_contention_end+0x39/0xe0 [ 1042.130218][ T29] ? task_work_cancel+0xa5/0x220 [ 1042.139523][ T29] ? task_work_cancel_func+0x210/0x210 [ 1042.149813][ T29] schedule+0xbd/0x170 [ 1042.156530][ T29] ? _free_event+0x10d/0xfb0 [ 1042.163625][ T29] _free_event+0x176/0xfb0 [ 1042.170504][ T29] perf_event_release_kernel+0x7c8/0x850 [ 1042.178529][ T29] ? __might_sleep+0xe0/0xe0 [ 1042.185525][ T29] ? calc_timer_values+0x400/0x400 [ 1042.193128][ T29] ? perf_mmap+0x15e0/0x15e0 [ 1042.201430][ T29] perf_release+0x3b/0x40 [ 1042.207020][ T29] __fput+0x221/0x940 [ 1042.211899][ T29] task_work_run+0x1d4/0x260 [ 1042.216643][ T29] ? task_work_cancel+0x220/0x220 [ 1042.222813][ T29] do_exit+0x986/0x2530 [ 1042.227148][ T29] ? put_task_struct+0xc0/0xc0 [ 1042.234308][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1042.240493][ T29] ? get_signal+0x100e/0x1390 [ 1042.245323][ T29] ? lock_chain_count+0x20/0x20 [ 1042.257581][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1042.267316][ T29] do_group_exit+0x22d/0x2f0 [ 1042.274137][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1042.286510][ T29] get_signal+0x12a6/0x1390 [ 1042.291509][ T29] arch_do_signal_or_restart+0xc2/0x7b0 [ 1042.297226][ T29] ? get_sigframe_size+0x20/0x20 [ 1042.302635][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1042.308478][ T29] exit_to_user_mode_loop+0x70/0x110 [ 1042.313909][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 1042.319870][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1042.325515][ T29] do_syscall_64+0x61/0xb0 [ 1042.330424][ T29] ? clear_bhb_loop+0x40/0x90 [ 1042.335256][ T29] ? clear_bhb_loop+0x40/0x90 [ 1042.340427][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.346482][ T29] RIP: 0033:0x7f2bfad9e0d9 [ 1042.354780][ T29] RSP: 002b:00007f2bfbbcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1042.365463][ T29] RAX: 0000000000000005 RBX: 00007f2bfb026090 RCX: 00007f2bfad9e0d9 [ 1042.377185][ T29] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 1042.386765][ T29] RBP: 00007f2bfae35024 R08: 0000000000000000 R09: 0000000000000000 [ 1042.399992][ T29] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1042.410741][ T29] R13: 00007f2bfb026128 R14: 00007f2bfb026090 R15: 00007fffced48258 [ 1042.421498][ T29] [ 1042.424728][ T29] [ 1042.424728][ T29] Showing all locks held in the system: [ 1042.439497][ T29] 1 lock held by khungtaskd/29: [ 1042.446182][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1042.462070][ T29] 2 locks held by getty/5529: [ 1042.471173][ T29] #0: ffff88803119a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1042.484853][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 1042.496737][ T29] 2 locks held by syz.4.5919/24649: [ 1042.504758][ T29] [ 1042.514089][ T29] ============================================= [ 1042.514089][ T29] [ 1042.526508][ T29] NMI backtrace for cpu 1 [ 1042.530939][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1042.538181][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1042.548276][ T29] Call Trace: [ 1042.551584][ T29] [ 1042.554549][ T29] dump_stack_lvl+0x18c/0x250 [ 1042.559267][ T29] ? __wake_up_klogd+0xd9/0x100 [ 1042.564172][ T29] ? show_regs_print_info+0x20/0x20 [ 1042.569413][ T29] ? load_image+0x420/0x420 [ 1042.573978][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1042.578972][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1042.585187][ T29] ? load_image+0x420/0x420 [ 1042.589734][ T29] ? wq_watchdog_touch+0xef/0x170 [ 1042.594831][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1042.600972][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1042.607028][ T29] watchdog+0xf59/0xfa0 [ 1042.611246][ T29] ? watchdog+0x1e1/0xfa0 [ 1042.615634][ T29] kthread+0x2fa/0x390 [ 1042.619749][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1042.624826][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1042.629487][ T29] ret_from_fork+0x48/0x80 [ 1042.633988][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1042.638637][ T29] ret_from_fork_asm+0x11/0x20 [ 1042.643480][ T29] [ 1042.647235][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1042.652577][ C0] NMI backtrace for cpu 0 [ 1042.652590][ C0] CPU: 0 PID: 22628 Comm: kworker/u4:22 Not tainted syzkaller #0 [ 1042.652608][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1042.652619][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1042.652682][ C0] RIP: 0010:kasan_check_range+0x1ba/0x290 [ 1042.652708][ C0] Code: 49 01 dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 6b 49 ff c3 49 ff cc 75 f2 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 [ 1042.652723][ C0] RSP: 0018:ffffc9000b5afa80 EFLAGS: 00000256 [ 1042.652737][ C0] RAX: 0000000000000001 RBX: ffff88804fbe3600 RCX: ffffffff8169dbed [ 1042.652749][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88804fbe3600 [ 1042.652761][ C0] RBP: ffff88805f9ee8c0 R08: ffff88804fbe3603 R09: 1ffff11009f7c6c0 [ 1042.652773][ C0] R10: dffffc0000000000 R11: ffffed1009f7c6c1 R12: 0000000000000001 [ 1042.652785][ C0] R13: ffff8880306175d8 R14: ffffed1009f7c6c1 R15: 1ffff11009f7c6c0 [ 1042.652798][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1042.652813][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1042.652824][ C0] CR2: 00007fed3b1ed158 CR3: 000000005e80c000 CR4: 00000000003506f0 [ 1042.652840][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1042.652850][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1042.652861][ C0] Call Trace: [ 1042.652867][ C0] [ 1042.652876][ C0] do_raw_spin_unlock+0x4d/0x230 [ 1042.652902][ C0] ? nsim_dev_trap_report_work+0x71b/0xa90 [ 1042.652920][ C0] _raw_spin_unlock_bh+0x23/0x40 [ 1042.652948][ C0] nsim_dev_trap_report_work+0x71b/0xa90 [ 1042.652972][ C0] ? process_scheduled_works+0x975/0x1600 [ 1042.652996][ C0] process_scheduled_works+0xa60/0x1600 [ 1042.653033][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1042.653058][ C0] ? assign_work+0x3cc/0x5d0 [ 1042.653082][ C0] worker_thread+0xa5e/0xfe0 [ 1042.653118][ C0] kthread+0x2fa/0x390 [ 1042.653134][ C0] ? pr_cont_work+0x550/0x550 [ 1042.653155][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1042.653172][ C0] ret_from_fork+0x48/0x80 [ 1042.653193][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1042.653211][ C0] ret_from_fork_asm+0x11/0x20 [ 1042.653242][ C0] [ 1042.674334][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1042.674385][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1042.674439][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1042.674484][ T29] Call Trace: [ 1042.674518][ T29] [ 1042.674546][ T29] dump_stack_lvl+0x18c/0x250 [ 1042.674634][ T29] ? show_regs_print_info+0x20/0x20 [ 1042.674696][ T29] ? load_image+0x420/0x420 [ 1042.674807][ T29] panic+0x2ca/0x720 [ 1042.674896][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1042.674980][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1042.675052][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 1042.675131][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1042.675219][ T29] watchdog+0xf98/0xfa0 [ 1042.675301][ T29] ? watchdog+0x1e1/0xfa0 [ 1042.675384][ T29] kthread+0x2fa/0x390 [ 1042.675437][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1042.675516][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1042.675568][ T29] ret_from_fork+0x48/0x80 [ 1042.675636][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1042.675695][ T29] ret_from_fork_asm+0x11/0x20 [ 1042.675805][ T29] [ 1042.676672][ T29] Kernel Offset: disabled [ 1042.990485][ T29] Rebooting in 86400 seconds..