last executing test programs: 3.387187704s ago: executing program 1 (id=3995): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="9800000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c670000"], 0x98}, 0x0) 3.281292876s ago: executing program 0 (id=3996): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x7, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x5, 0x9}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4854, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x10020) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a, r3}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 3.197494198s ago: executing program 1 (id=3998): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb", 0x2f}], 0x1}, 0x8000) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.13402358s ago: executing program 2 (id=3999): syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8400, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x18, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(r1, &(0x7f0000003100)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000000100)="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", 0xfb}, {&(0x7f0000000200)}, {&(0x7f0000000240)="96ea6d1861b94502bf83beb37cad59662f5264de66dcbff24f740286a2e309f2797bc25ebc5dbcedd6d866114f906318d3b6c6669038872f581e95e4b66a00", 0x3f}, {&(0x7f00000002c0)="b8f45d554a54a5c00e8bd45ed6a3af8b6584f51ac6966bd43d63fe71e8f25ad9af8e2420a23b798dffae48aebfc60a7ad3f7c05160938322f6d4272678b71c766d115d428bfd17984d1fd7d4723b", 0x4e}, {0x0}, {&(0x7f0000001c40)="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", 0xef0}, {&(0x7f0000002c40)="99bc72773ff19d2eb39e80f9a8e8ab57884b53fb4c5f7cd1f3a2075fbbbd20edb80f41f1f09ae21dfec6c99d392d6d5a697ae1719eb0632a67a181f1efc4eae2dcfc9af35c53f502307a5d7af0bddd019ef309e64a5a01e152b872ad2f5d58348742bbaee374f89fe365054d4f06a0587d8dd5f5e2d58ccdb4f624ad1113b313b92b1675b83ed6747c8b9b36c7321c003a220971578c", 0x96}], 0x7, &(0x7f00000030c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x38}, 0x40000) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000b0400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="6c773a94867057bcdf2352000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x10, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000060002007a17d30460bc24eab556a705251e6182949a36c23d3b48dfd8cdbfb367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c00400b9239d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r7}, 0x8) 3.069326912s ago: executing program 0 (id=4000): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.706351891s ago: executing program 3 (id=4001): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) unlink(&(0x7f0000000340)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4b, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000010000000100000f030000000300000001000000030000004494a50000000000000f01"], 0x0, 0x45, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2.574226594s ago: executing program 1 (id=4002): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1400000033000b3387da2656094bc7c308920fd2b8f2e2c38c7b01d784aff97f37b566cd1372157564eca10f7bce8a11b2cc52f5554ca0eaf718916f698d88ef3c4db3e9319e61b83a481023a20d83bcf46f924279c8bc51fb9228bced322ea1512c954098b30323f76dc292ab28250526901b7932918a7dc35bf90510379064100916c556b8ab29aadbe22c446a54709c2296b7fa8d8442731b2fec99e3d5bc9e0f3cd1cc88f908b48f4b1b53f074dffb0cc64a02500795f49451de8e0566fb4b70c441509afab8b1ec7cb4f925ab6ed912d0039b2fe4cc5659", 0xda}], 0x1}, 0x8811) close(r0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000)=r5, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC, @ANYRESHEX], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000240)=0xfa9d) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1802004320ab32595e0263000000000085000000d000000095000000000000001047a206d613904ad056aa0e8cf3774ea74bc8e1c2d6e2388beabb04204fc4c4887db8042994fb7334665e5a628fafa832e3920da5ddc91335646be2a0f23614083e5857892a02b8bfc4b6f091379cf80af4d65fa63f0091709407013466df504f6c81"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r9, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000000000000010000000000000000a010000080000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.523332186s ago: executing program 2 (id=4003): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000b40)="b907ef09edfff007049e0ff0998e0a6a", 0x0, 0xd2b1, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214801, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@random="fb3552fb35be"]}) 2.509127026s ago: executing program 0 (id=4004): r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8400, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x0, 0x2}, {}]}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x71}, 0x28) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x82, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x81, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x46de6010bc02b9ff, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0x6, &(0x7f0000000740)=r6, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 2.435215828s ago: executing program 3 (id=4005): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0, 0x7fff, @local, 0x48, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0xf00}, 0x30008041) 2.143074455s ago: executing program 2 (id=4006): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x28) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x28) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 1.846166573s ago: executing program 3 (id=4007): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0xc, 0x3, 0x5, 0x9, 0x0, 0x1, 0x8b240, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x10014, 0x83, 0xfffffff8, 0x4, 0xb, 0x6be, 0xfffe, 0x0, 0xbe48, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r0, 0x8) r2 = getpid() r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x3, &(0x7f0000000280)='\\{\x00'}, 0x30) perf_event_open(0x0, r2, 0x7, r1, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x20000003, 0x1, 0xffffffffffffffff, 0x20}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5883, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x1, 0xc, 0x7, 0x5, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x5, 0x8, 0x8, 0x6, 0x4}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000300)='syzkaller\x00', 0xd, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @netfilter, r5, 0x8, &(0x7f0000000380)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x1, 0xb45c0aad, 0x400}, 0x10, 0xffffffffffffffff, r4, 0x5, &(0x7f0000000400)=[r5, r5, r5], &(0x7f0000000540)=[{0x1, 0x4, 0x3, 0x5}, {0x3, 0x4, 0x5, 0x7}, {0x4, 0x4, 0x1, 0x6}, {0x3, 0x2, 0x6, 0xa}, {0x4, 0x4, 0x7, 0x5}], 0x10, 0x9}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.817362134s ago: executing program 0 (id=4008): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1061c1, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x2062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) 1.730884766s ago: executing program 2 (id=4009): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x7, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x5, 0x9}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4854, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x10020) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a, r3}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 1.234982538s ago: executing program 0 (id=4010): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x7, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x5, 0x9}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4854, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x10020) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a, r3}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 1.17076446s ago: executing program 1 (id=4011): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e4", 0x37}], 0x1}, 0x8000) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.15992509s ago: executing program 2 (id=4012): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.054913073s ago: executing program 3 (id=4013): syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8400, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x18, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(r1, &(0x7f0000003100)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000000100)="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", 0xfb}, {&(0x7f0000000200)}, {&(0x7f0000000240)="96ea6d1861b94502bf83beb37cad59662f5264de66dcbff24f740286a2e309f2797bc25ebc5dbcedd6d866114f906318d3b6c6669038872f581e95e4b66a00", 0x3f}, {&(0x7f00000002c0)="b8f45d554a54a5c00e8bd45ed6a3af8b6584f51ac6966bd43d63fe71e8f25ad9af8e2420a23b798dffae48aebfc60a7ad3f7c05160938322f6d4272678b71c766d115d428bfd17984d1fd7d4723b", 0x4e}, {0x0}, {&(0x7f0000001c40)="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", 0xef0}, {&(0x7f0000002c40)="99bc72773ff19d2eb39e80f9a8e8ab57884b53fb4c5f7cd1f3a2075fbbbd20edb80f41f1f09ae21dfec6c99d392d6d5a697ae1719eb0632a67a181f1efc4eae2dcfc9af35c53f502307a5d7af0bddd019ef309e64a5a01e152b872ad2f5d58348742bbaee374f89fe365054d4f06a0587d8dd5f5e2d58ccdb4f624ad1113b313b92b1675b83ed6747c8b9b36c7321c003a220971578c33f9bf6b1968bdf83255fe90c2a6410097b860224888aa6219", 0xaf}], 0x7, &(0x7f00000030c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x38}, 0x40000) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000b0400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="6c773a94867057bcdf2352000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x10, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000060002007a17d30460bc24eab556a705251e6182949a36c23d3b48dfd8cdbfb367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c00400b9239d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r7}, 0x8) 201.192325ms ago: executing program 3 (id=4014): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) unlink(&(0x7f0000000340)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4b, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000010000000100000f030000000300000001000000030000004494a50000000000000f01"], 0x0, 0x45, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 186.038295ms ago: executing program 1 (id=4015): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000b40)="b907ef09edfff007049e0ff0998e0a6a", 0x0, 0xd2b1, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214801, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@random="fb3552fb35be"]}) 116.872557ms ago: executing program 0 (id=4016): r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8400, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x0, 0x2}, {}]}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x71}, 0x28) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x82, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="b90000000044268cb89e14f086dd65e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x81, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x46de6010bc02b9ff, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0x6, &(0x7f0000000740)=r6, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 115.847157ms ago: executing program 2 (id=4017): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) (fail_nth: 29) 52.957629ms ago: executing program 3 (id=4018): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1061c1, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x2062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) 0s ago: executing program 1 (id=4019): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="5c0000002e006bfb9e3be35c6e17aa31076b876c1d0020007ea608640400000000000c0004000f001fffffff300017d34460bc24eab556a705251e618294ff0051f60a84c9f4d4e786a6d0001000000e4509c5bb5b64f69853000009", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x2, @perf_bp={0x0, 0x8}}) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) close(r2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) (async) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x9, 0xff, 0x5, 0x0, 0x65, 0xd3751, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xffffffffffff15ed, 0x8}, 0x4, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x8005, 0x8008, 0x0, 0xfffffff7, 0x0, 0x101}, 0x0, 0xe, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) (async, rerun: 64) r7 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf, 0x0, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x40006, 0x8, 0x81, 0x4, 0xd3, 0x0, 0xffffffbd, 0x0, 0x400000000802}, 0x0, 0x10, 0xffffffffffffffff, 0x3) (async, rerun: 64) r8 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, r7, 0x0, 0x8, &(0x7f0000000000)='bridge0\x00'}, 0x30) kernel console output (not intermixed with test programs): 550.678644][T13182] bpf_test_run+0x2df/0x870 [ 550.683219][T13182] ? bpf_test_run+0x174/0x870 [ 550.687959][T13182] ? dst_hold+0x70/0x70 [ 550.692175][T13182] ? eth_get_headlen+0x210/0x210 [ 550.697172][T13182] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 550.702632][T13182] ? cpu_online+0x60/0x60 [ 550.707050][T13182] bpf_prog_test_run+0x31f/0x390 [ 550.712038][T13182] __sys_bpf+0x49d/0x890 [ 550.716329][T13182] ? bpf_link_show_fdinfo+0x390/0x390 [ 550.721773][T13182] ? lock_chain_count+0x20/0x20 [ 550.726682][T13182] __x64_sys_bpf+0x7c/0x90 [ 550.731139][T13182] do_syscall_64+0x55/0xb0 [ 550.735593][T13182] ? clear_bhb_loop+0x40/0x90 [ 550.740306][T13182] ? clear_bhb_loop+0x40/0x90 [ 550.745033][T13182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.750990][T13182] RIP: 0033:0x7fea0499e0d9 [ 550.755480][T13182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.775179][T13182] RSP: 002b:00007fea05847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 550.783685][T13182] RAX: ffffffffffffffda RBX: 00007fea04c25fa0 RCX: 00007fea0499e0d9 [ 550.791709][T13182] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 550.799736][T13182] RBP: 00007fea05847090 R08: 0000000000000000 R09: 0000000000000000 [ 550.807778][T13182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.815836][T13182] R13: 00007fea04c26038 R14: 00007fea04c25fa0 R15: 00007ffd04896b48 [ 550.823948][T13182] [ 551.115397][T13146] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.158751][T13146] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.198282][T13146] bridge_slave_0: entered allmulticast mode [ 551.226507][T13146] bridge_slave_0: entered promiscuous mode [ 551.247734][T13146] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.256368][T13146] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.264099][T13146] bridge_slave_1: entered allmulticast mode [ 551.292521][T13146] bridge_slave_1: entered promiscuous mode [ 551.327132][ T51] Bluetooth: hci1: command tx timeout [ 551.636241][T13200] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 551.702635][T13146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.720478][T13200] openvswitch: netlink: Message has 1 unknown bytes. [ 551.752622][T13146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.097195][T13146] team0: Port device team_slave_0 added [ 552.224809][T13223] FAULT_INJECTION: forcing a failure. [ 552.224809][T13223] name failslab, interval 1, probability 0, space 0, times 0 [ 552.237581][T13223] CPU: 1 PID: 13223 Comm: syz.3.2585 Not tainted syzkaller #0 [ 552.245086][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.255204][T13223] Call Trace: [ 552.258523][T13223] [ 552.261497][T13223] dump_stack_lvl+0x18c/0x250 [ 552.266240][T13223] ? show_regs_print_info+0x20/0x20 [ 552.271519][T13223] ? load_image+0x420/0x420 [ 552.276074][T13223] ? skb_network_protocol+0x533/0x790 [ 552.281563][T13223] should_fail_ex+0x394/0x4c0 [ 552.286315][T13223] should_failslab+0x9/0x20 [ 552.290882][T13223] slab_pre_alloc_hook+0x59/0x300 [ 552.295976][T13223] kmem_cache_alloc+0x5a/0x2c0 [ 552.300806][T13223] ? skb_clone+0x1eb/0x370 [ 552.305273][T13223] skb_clone+0x1eb/0x370 [ 552.309564][T13223] ? dev_queue_xmit_nit+0x204/0xba0 [ 552.314813][T13223] dev_queue_xmit_nit+0x23f/0xba0 [ 552.319895][T13223] ? dev_queue_xmit_nit+0x2d/0xba0 [ 552.325112][T13223] dev_hard_start_xmit+0x150/0x790 [ 552.330289][T13223] ? __dev_queue_xmit+0x275/0x3630 [ 552.335460][T13223] __dev_queue_xmit+0x198c/0x3630 [ 552.340544][T13223] ? __dev_queue_xmit+0x275/0x3630 [ 552.345711][T13223] ? __kasan_slab_alloc+0x6c/0x80 [ 552.350787][T13223] ? netdev_core_pick_tx+0x370/0x370 [ 552.356121][T13223] ? rcu_is_watching+0x15/0xb0 [ 552.360937][T13223] ? skb_release_data+0x1de/0x7f0 [ 552.366023][T13223] ? __bpf_redirect+0x8c2/0xdf0 [ 552.370919][T13223] __bpf_tx_skb+0x181/0x260 [ 552.375472][T13223] bpf_clone_redirect+0x315/0x4a0 [ 552.380551][T13223] bpf_prog_e97454e6a39c6b06+0x61/0x66 [ 552.386051][T13223] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 552.392085][T13223] ? __lock_acquire+0x7d80/0x7d80 [ 552.397178][T13223] ? lock_chain_count+0x20/0x20 [ 552.402099][T13223] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 552.408393][T13223] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 552.413725][T13223] ? ktime_get+0x7f/0x280 [ 552.418086][T13223] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 552.424388][T13223] ? ktime_get_real_ts64+0x440/0x440 [ 552.429710][T13223] ? __x64_sys_bpf+0x7c/0x90 [ 552.434346][T13223] ? __local_bh_disable_ip+0x108/0x1a0 [ 552.439843][T13223] ? __cant_sleep+0x220/0x220 [ 552.444575][T13223] ? read_tsc+0x9/0x20 [ 552.448688][T13223] ? ktime_get+0x24b/0x280 [ 552.453163][T13223] ? bpf_test_run+0x174/0x870 [ 552.457884][T13223] bpf_test_run+0x2df/0x870 [ 552.462443][T13223] ? bpf_test_run+0x174/0x870 [ 552.467157][T13223] ? dst_hold+0x70/0x70 [ 552.471351][T13223] ? eth_get_headlen+0x210/0x210 [ 552.476347][T13223] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 552.481768][T13223] ? cpu_online+0x60/0x60 [ 552.486131][T13223] bpf_prog_test_run+0x31f/0x390 [ 552.491124][T13223] __sys_bpf+0x49d/0x890 [ 552.495431][T13223] ? bpf_link_show_fdinfo+0x390/0x390 [ 552.500853][T13223] ? lock_chain_count+0x20/0x20 [ 552.505762][T13223] __x64_sys_bpf+0x7c/0x90 [ 552.510313][T13223] do_syscall_64+0x55/0xb0 [ 552.514774][T13223] ? clear_bhb_loop+0x40/0x90 [ 552.519486][T13223] ? clear_bhb_loop+0x40/0x90 [ 552.524199][T13223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.530142][T13223] RIP: 0033:0x7fb08db9e0d9 [ 552.534593][T13223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.554271][T13223] RSP: 002b:00007fb08ea75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 552.562716][T13223] RAX: ffffffffffffffda RBX: 00007fb08de25fa0 RCX: 00007fb08db9e0d9 [ 552.570729][T13223] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 552.578739][T13223] RBP: 00007fb08ea75090 R08: 0000000000000000 R09: 0000000000000000 [ 552.586743][T13223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.594746][T13223] R13: 00007fb08de26038 R14: 00007fb08de25fa0 R15: 00007ffd4768f958 [ 552.602766][T13223] [ 552.683013][T13146] team0: Port device team_slave_1 added [ 552.735880][T13215] validate_nla: 1 callbacks suppressed [ 552.735916][T13215] netlink: 'syz.0.2583': attribute type 19 has an invalid length. [ 552.887821][T13217] netlink: 'syz.1.2584': attribute type 2 has an invalid length. [ 552.902887][T13217] __nla_validate_parse: 2 callbacks suppressed [ 552.902899][T13217] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2584'. [ 552.991613][T13219] syzkaller0: entered promiscuous mode [ 553.064161][T13146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.071591][T13146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.098484][T13146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.239262][T13232] FAULT_INJECTION: forcing a failure. [ 553.239262][T13232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.284292][T13232] CPU: 0 PID: 13232 Comm: syz.3.2589 Not tainted syzkaller #0 [ 553.291847][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.302040][T13232] Call Trace: [ 553.305363][T13232] [ 553.308309][T13232] dump_stack_lvl+0x18c/0x250 [ 553.313019][T13232] ? show_regs_print_info+0x20/0x20 [ 553.318267][T13232] ? load_image+0x420/0x420 [ 553.322808][T13232] ? __might_fault+0xaa/0x120 [ 553.327515][T13232] ? __lock_acquire+0x7d80/0x7d80 [ 553.332591][T13232] should_fail_ex+0x394/0x4c0 [ 553.337334][T13232] _copy_from_iter+0x1cd/0x1290 [ 553.342217][T13232] ? rcu_is_watching+0x15/0xb0 [ 553.347018][T13232] ? copyout_mc+0x70/0x70 [ 553.351381][T13232] ? __virt_addr_valid+0x10c/0x380 [ 553.356524][T13232] ? __virt_addr_valid+0x10c/0x380 [ 553.361668][T13232] ? __virt_addr_valid+0x10c/0x380 [ 553.366815][T13232] ? __check_object_size+0x4fc/0xa40 [ 553.372138][T13232] netlink_sendmsg+0x76b/0xbf0 [ 553.376936][T13232] ? netlink_getsockopt+0x590/0x590 [ 553.382165][T13232] ? apparmor_socket_sendmsg+0x8e/0x330 [ 553.387738][T13232] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 553.393052][T13232] ? security_socket_sendmsg+0x80/0xa0 [ 553.398529][T13232] ? netlink_getsockopt+0x590/0x590 [ 553.403758][T13232] ____sys_sendmsg+0x61b/0x980 [ 553.408555][T13232] ? __asan_memset+0x22/0x40 [ 553.413196][T13232] ? __sys_sendmsg_sock+0x30/0x30 [ 553.418244][T13232] ? __import_iovec+0x5f2/0x850 [ 553.423136][T13232] ? import_iovec+0x73/0xa0 [ 553.427671][T13232] ___sys_sendmsg+0x2a6/0x360 [ 553.432373][T13232] ? get_pid_task+0x20/0x1e0 [ 553.437010][T13232] ? __sys_sendmsg+0x2b0/0x2b0 [ 553.441814][T13232] ? __lock_acquire+0x7d80/0x7d80 [ 553.446890][T13232] __se_sys_sendmsg+0x1d0/0x2c0 [ 553.451781][T13232] ? __x64_sys_sendmsg+0x80/0x80 [ 553.456761][T13232] ? lockdep_hardirqs_on+0x98/0x150 [ 553.461996][T13232] do_syscall_64+0x55/0xb0 [ 553.466455][T13232] ? clear_bhb_loop+0x40/0x90 [ 553.471186][T13232] ? clear_bhb_loop+0x40/0x90 [ 553.475916][T13232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.481851][T13232] RIP: 0033:0x7fb08db9e0d9 [ 553.486308][T13232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.505949][T13232] RSP: 002b:00007fb08ea75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.514404][T13232] RAX: ffffffffffffffda RBX: 00007fb08de25fa0 RCX: 00007fb08db9e0d9 [ 553.522412][T13232] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 553.530436][T13232] RBP: 00007fb08ea75090 R08: 0000000000000000 R09: 0000000000000000 [ 553.538441][T13232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.546450][T13232] R13: 00007fb08de26038 R14: 00007fb08de25fa0 R15: 00007ffd4768f958 [ 553.554473][T13232] [ 553.565871][ T51] Bluetooth: hci1: command tx timeout [ 555.413500][T13146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.420941][T13146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.447348][T13146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.491695][T13234] netlink: 'syz.1.2588': attribute type 2 has an invalid length. [ 555.499703][T13234] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2588'. [ 555.548412][T13242] netlink: 'syz.3.2592': attribute type 3 has an invalid length. [ 555.562951][T13242] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2592'. [ 555.660739][ T51] Bluetooth: hci1: command tx timeout [ 555.792432][T13146] hsr_slave_0: entered promiscuous mode [ 555.812981][T13146] hsr_slave_1: entered promiscuous mode [ 555.935879][T13251] netlink: 'syz.3.2595': attribute type 2 has an invalid length. [ 555.954466][T13251] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2595'. [ 556.423033][T13260] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2598'. [ 557.035141][T13281] FAULT_INJECTION: forcing a failure. [ 557.035141][T13281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.055743][T13281] CPU: 0 PID: 13281 Comm: syz.0.2600 Not tainted syzkaller #0 [ 557.063286][T13281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.073408][T13281] Call Trace: [ 557.076729][T13281] [ 557.079699][T13281] dump_stack_lvl+0x18c/0x250 [ 557.084437][T13281] ? show_regs_print_info+0x20/0x20 [ 557.089690][T13281] ? load_image+0x420/0x420 [ 557.094428][T13281] ? __might_fault+0xaa/0x120 [ 557.099164][T13281] ? __lock_acquire+0x7d80/0x7d80 [ 557.104255][T13281] ? __virt_addr_valid+0x10c/0x380 [ 557.109437][T13281] should_fail_ex+0x394/0x4c0 [ 557.114184][T13281] _copy_from_user+0x2f/0xe0 [ 557.118843][T13281] generic_map_update_batch+0x53e/0x800 [ 557.124461][T13281] ? rcu_read_unlock+0xa0/0xa0 [ 557.129294][T13281] ? __fdget+0x180/0x210 [ 557.133601][T13281] ? rcu_read_unlock+0xa0/0xa0 [ 557.138421][T13281] bpf_map_do_batch+0x3f2/0x600 [ 557.143324][T13281] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 557.148845][T13281] __sys_bpf+0x381/0x890 [ 557.153140][T13281] ? bpf_link_show_fdinfo+0x390/0x390 [ 557.158588][T13281] ? lock_chain_count+0x20/0x20 [ 557.163511][T13281] __x64_sys_bpf+0x7c/0x90 [ 557.167979][T13281] do_syscall_64+0x55/0xb0 [ 557.172442][T13281] ? clear_bhb_loop+0x40/0x90 [ 557.177165][T13281] ? clear_bhb_loop+0x40/0x90 [ 557.181891][T13281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.187822][T13281] RIP: 0033:0x7fea0499e0d9 [ 557.192278][T13281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.211927][T13281] RSP: 002b:00007fea05847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 557.220480][T13281] RAX: ffffffffffffffda RBX: 00007fea04c25fa0 RCX: 00007fea0499e0d9 [ 557.228504][T13281] RDX: 0000000000000038 RSI: 0000200000000900 RDI: 000000000000001a [ 557.236526][T13281] RBP: 00007fea05847090 R08: 0000000000000000 R09: 0000000000000000 [ 557.244555][T13281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.252575][T13281] R13: 00007fea04c26038 R14: 00007fea04c25fa0 R15: 00007ffd04896b48 [ 557.260616][T13281] [ 557.707766][ T3512] hsr_slave_0: left promiscuous mode [ 557.721960][ T3512] hsr_slave_1: left promiscuous mode [ 557.730275][ T51] Bluetooth: hci1: command tx timeout [ 557.789854][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.797362][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.810567][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.818048][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.850130][ T3512] veth0_macvtap: left promiscuous mode [ 557.857086][ T3512] veth1_vlan: left promiscuous mode [ 557.879509][ T3512] veth0_vlan: left promiscuous mode [ 558.333263][ T3512] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 558.766498][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.066367][ T3512] bond0 (unregistering): Released all slaves [ 559.117439][T13296] netlink: 'syz.0.2604': attribute type 2 has an invalid length. [ 559.127452][T13296] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2604'. [ 559.187277][T13146] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 559.223310][T13146] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 559.282735][T13146] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 559.342300][T13146] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 559.583357][T13302] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2607'. [ 559.857127][T13146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.921711][T13320] netlink: 'syz.0.2611': attribute type 29 has an invalid length. [ 559.946553][T13146] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.966983][T13320] netlink: 'syz.0.2611': attribute type 29 has an invalid length. [ 559.977610][T13323] netlink: 'syz.0.2611': attribute type 29 has an invalid length. [ 560.011723][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.019024][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.030132][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.037335][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.051818][T13320] netlink: 'syz.0.2611': attribute type 29 has an invalid length. [ 560.110230][T13320] netlink: 'syz.0.2611': attribute type 29 has an invalid length. [ 560.563824][T13331] netlink: 'syz.3.2613': attribute type 2 has an invalid length. [ 560.575641][T13331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2613'. [ 560.833395][T13146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.047642][T13146] veth0_vlan: entered promiscuous mode [ 561.099900][T13146] veth1_vlan: entered promiscuous mode [ 561.173164][T13146] veth0_macvtap: entered promiscuous mode [ 561.191941][T13146] veth1_macvtap: entered promiscuous mode [ 561.251337][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.279810][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.298831][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.318549][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.352019][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.386529][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.408433][T13146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.488592][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.519325][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.539973][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.570576][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.590837][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.616098][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.640197][T13146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.651681][T13363] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2618'. [ 561.715952][T13146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.737521][T13146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.758216][T13146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.779074][T13146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.900981][T13370] FAULT_INJECTION: forcing a failure. [ 561.900981][T13370] name failslab, interval 1, probability 0, space 0, times 0 [ 561.940085][T13370] CPU: 1 PID: 13370 Comm: syz.3.2620 Not tainted syzkaller #0 [ 561.947667][T13370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.957767][T13370] Call Trace: [ 561.961087][T13370] [ 561.964082][T13370] dump_stack_lvl+0x18c/0x250 [ 561.968811][T13370] ? show_regs_print_info+0x20/0x20 [ 561.974066][T13370] ? load_image+0x420/0x420 [ 561.978628][T13370] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 561.984663][T13370] ? verify_lock_unused+0x140/0x140 [ 561.989956][T13370] should_fail_ex+0x394/0x4c0 [ 561.994693][T13370] should_failslab+0x9/0x20 [ 561.999256][T13370] slab_pre_alloc_hook+0x59/0x300 [ 562.004355][T13370] kmem_cache_alloc+0x5a/0x2c0 [ 562.009177][T13370] ? skb_clone+0x1eb/0x370 [ 562.013644][T13370] skb_clone+0x1eb/0x370 [ 562.017958][T13370] __netlink_deliver_tap+0x411/0x7f0 [ 562.023317][T13370] ? netlink_deliver_tap+0x2e/0x1b0 [ 562.028582][T13370] netlink_deliver_tap+0x19c/0x1b0 [ 562.033746][T13370] netlink_unicast+0x77b/0x930 [ 562.038595][T13370] netlink_sendmsg+0x8d0/0xbf0 [ 562.043454][T13370] ? netlink_getsockopt+0x590/0x590 [ 562.048699][T13370] ? apparmor_socket_sendmsg+0x8e/0x330 [ 562.054320][T13370] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 562.059663][T13370] ? security_socket_sendmsg+0x80/0xa0 [ 562.065162][T13370] ? netlink_getsockopt+0x590/0x590 [ 562.070419][T13370] ____sys_sendmsg+0x61b/0x980 [ 562.075265][T13370] ? __asan_memset+0x22/0x40 [ 562.079904][T13370] ? __sys_sendmsg_sock+0x30/0x30 [ 562.084973][T13370] ? __import_iovec+0x5f2/0x850 [ 562.089889][T13370] ? import_iovec+0x73/0xa0 [ 562.094454][T13370] ___sys_sendmsg+0x2a6/0x360 [ 562.099209][T13370] ? __sys_sendmsg+0x2b0/0x2b0 [ 562.104071][T13370] __se_sys_sendmsg+0x1d0/0x2c0 [ 562.108978][T13370] ? __x64_sys_sendmsg+0x80/0x80 [ 562.113987][T13370] ? syscall_enter_from_user_mode+0x2e/0x80 [ 562.119938][T13370] do_syscall_64+0x55/0xb0 [ 562.124402][T13370] ? clear_bhb_loop+0x40/0x90 [ 562.129127][T13370] ? clear_bhb_loop+0x40/0x90 [ 562.133849][T13370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.139788][T13370] RIP: 0033:0x7fb08db9e0d9 [ 562.144240][T13370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.163887][T13370] RSP: 002b:00007fb08ea75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.172358][T13370] RAX: ffffffffffffffda RBX: 00007fb08de25fa0 RCX: 00007fb08db9e0d9 [ 562.180396][T13370] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 562.188412][T13370] RBP: 00007fb08ea75090 R08: 0000000000000000 R09: 0000000000000000 [ 562.196421][T13370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.204519][T13370] R13: 00007fb08de26038 R14: 00007fb08de25fa0 R15: 00007ffd4768f958 [ 562.212560][T13370] [ 562.224031][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.247437][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.267813][T13370] netlink: 'syz.3.2620': attribute type 10 has an invalid length. [ 562.276300][T13370] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2620'. [ 562.565430][T13378] FAULT_INJECTION: forcing a failure. [ 562.565430][T13378] name failslab, interval 1, probability 0, space 0, times 0 [ 562.580216][T13378] CPU: 0 PID: 13378 Comm: syz.1.2622 Not tainted syzkaller #0 [ 562.587734][T13378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.597908][T13378] Call Trace: [ 562.601220][T13378] [ 562.604197][T13378] dump_stack_lvl+0x18c/0x250 [ 562.608918][T13378] ? show_regs_print_info+0x20/0x20 [ 562.614158][T13378] ? load_image+0x420/0x420 [ 562.618728][T13378] ? verify_lock_unused+0x140/0x140 [ 562.624008][T13378] should_fail_ex+0x394/0x4c0 [ 562.628749][T13378] should_failslab+0x9/0x20 [ 562.633400][T13378] slab_pre_alloc_hook+0x59/0x300 [ 562.638477][T13378] ? nsim_fib_event_nb+0x187/0x1040 [ 562.643760][T13378] __kmem_cache_alloc_node+0x53/0x250 [ 562.649187][T13378] ? nsim_fib_event_nb+0x187/0x1040 [ 562.654443][T13378] kmalloc_trace+0x2a/0xe0 [ 562.658931][T13378] nsim_fib_event_nb+0x187/0x1040 [ 562.664001][T13378] ? read_lock_is_recursive+0x20/0x20 [ 562.669425][T13378] notifier_call_chain+0x18f/0x380 [ 562.674595][T13378] ? atomic_notifier_call_chain+0x26/0x180 [ 562.680461][T13378] atomic_notifier_call_chain+0xda/0x180 [ 562.686159][T13378] call_fib_notifiers+0x31/0x60 [ 562.691079][T13378] fib_table_delete+0xc6e/0xfc0 [ 562.696020][T13378] ? nexthop_get_nhc_lookup+0x400/0x400 [ 562.701633][T13378] ? l3mdev_fib_table+0x18/0x160 [ 562.706630][T13378] ? fib_new_table+0x10a/0x2d0 [ 562.711443][T13378] fib_magic+0x2ee/0x3b0 [ 562.715771][T13378] ? fib_add_ifaddr+0x5d0/0x5d0 [ 562.720711][T13378] fib_del_ifaddr+0x10b6/0x14c0 [ 562.725633][T13378] ? inetaddr_event+0xf0/0x150 [ 562.730578][T13378] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 562.737249][T13378] ? fib_del_ifaddr+0x2f6/0x14c0 [ 562.742266][T13378] fib_inetaddr_event+0xbb/0x1d0 [ 562.747270][T13378] notifier_call_chain+0x18f/0x380 [ 562.752442][T13378] blocking_notifier_call_chain+0x6a/0x90 [ 562.758224][T13378] __inet_del_ifa+0xaac/0x1090 [ 562.763079][T13378] devinet_ioctl+0xb28/0x1d70 [ 562.767842][T13378] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 562.773004][T13378] ? _copy_from_user+0xa5/0xe0 [ 562.777820][T13378] ? get_user_ifreq+0x12b/0x180 [ 562.782719][T13378] inet_ioctl+0x42b/0x560 [ 562.787113][T13378] ? tomoyo_path_number_perm+0x217/0x5e0 [ 562.792812][T13378] ? inet_shutdown+0x370/0x370 [ 562.797622][T13378] ? slab_free_freelist_hook+0x130/0x1a0 [ 562.803302][T13378] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 562.808988][T13378] ? __kmem_cache_free+0xba/0x1f0 [ 562.814078][T13378] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 562.819595][T13378] sock_do_ioctl+0xfc/0x310 [ 562.824179][T13378] ? sock_show_fdinfo+0xb0/0xb0 [ 562.829099][T13378] sock_ioctl+0x5be/0x7e0 [ 562.833477][T13378] ? sock_poll+0x3e0/0x3e0 [ 562.837954][T13378] ? bpf_lsm_file_ioctl+0x9/0x10 [ 562.842928][T13378] ? security_file_ioctl+0x80/0xa0 [ 562.848086][T13378] ? sock_poll+0x3e0/0x3e0 [ 562.852549][T13378] __se_sys_ioctl+0xfd/0x170 [ 562.857195][T13378] do_syscall_64+0x55/0xb0 [ 562.861658][T13378] ? clear_bhb_loop+0x40/0x90 [ 562.866381][T13378] ? clear_bhb_loop+0x40/0x90 [ 562.871106][T13378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.877049][T13378] RIP: 0033:0x7f5fd979e0d9 [ 562.881509][T13378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.901164][T13378] RSP: 002b:00007f5fda6a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.909633][T13378] RAX: ffffffffffffffda RBX: 00007f5fd9a25fa0 RCX: 00007f5fd979e0d9 [ 562.917659][T13378] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 562.925675][T13378] RBP: 00007f5fda6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 562.933694][T13378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.941705][T13378] R13: 00007f5fd9a26038 R14: 00007f5fd9a25fa0 R15: 00007ffe277f8648 [ 562.949739][T13378] [ 563.007404][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.033707][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.243375][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.260421][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.500291][T13389] netlink: 'syz.1.2624': attribute type 2 has an invalid length. [ 563.518949][T13389] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2624'. [ 563.612818][T13400] netlink: 'syz.3.2625': attribute type 10 has an invalid length. [ 563.650849][T13400] macvlan1: entered allmulticast mode [ 563.702102][T13400] veth1_vlan: entered allmulticast mode [ 563.742551][T13400] team0: Port device macvlan1 added [ 563.787468][T13403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2626'. [ 564.399144][T13414] validate_nla: 2 callbacks suppressed [ 564.399162][T13414] netlink: 'syz.0.2639': attribute type 10 has an invalid length. [ 564.426063][T13414] macvlan0: entered promiscuous mode [ 564.473309][T13416] netlink: 'syz.2.2631': attribute type 19 has an invalid length. [ 564.840430][T13422] syzkaller0: entered promiscuous mode [ 564.887044][T13431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2636'. [ 564.946132][T13429] netlink: 'syz.1.2635': attribute type 2 has an invalid length. [ 564.979975][T13429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2635'. [ 565.503972][T13445] FAULT_INJECTION: forcing a failure. [ 565.503972][T13445] name failslab, interval 1, probability 0, space 0, times 0 [ 565.517143][T13445] CPU: 1 PID: 13445 Comm: syz.0.2641 Not tainted syzkaller #0 [ 565.524656][T13445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.534756][T13445] Call Trace: [ 565.538086][T13445] [ 565.541086][T13445] dump_stack_lvl+0x18c/0x250 [ 565.545829][T13445] ? show_regs_print_info+0x20/0x20 [ 565.551075][T13445] ? load_image+0x420/0x420 [ 565.555655][T13445] should_fail_ex+0x394/0x4c0 [ 565.560400][T13445] should_failslab+0x9/0x20 [ 565.564971][T13445] slab_pre_alloc_hook+0x59/0x300 [ 565.570055][T13445] ? ip6_pol_route+0x171/0x1230 [ 565.574975][T13445] kmem_cache_alloc+0x5a/0x2c0 [ 565.579796][T13445] ? dst_alloc+0x105/0x170 [ 565.584269][T13445] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 565.589954][T13445] dst_alloc+0x105/0x170 [ 565.594270][T13445] ip6_pol_route+0x94f/0x1230 [ 565.598992][T13445] ? ip6_pol_route+0x171/0x1230 [ 565.603898][T13445] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 565.609609][T13445] fib6_rule_lookup+0x226/0x580 [ 565.614562][T13445] ? skb_header_pointer+0x120/0x120 [ 565.619805][T13445] ? fib6_lookup+0x2d0/0x2d0 [ 565.624441][T13445] ? verify_lock_unused+0x140/0x140 [ 565.629688][T13445] ? read_lock_is_recursive+0x20/0x20 [ 565.635124][T13445] ? dev_get_by_index_rcu+0xee/0x110 [ 565.640484][T13445] ip6_route_output_flags+0x364/0x5d0 [ 565.645904][T13445] ? ip6_route_output_flags+0x2e/0x5d0 [ 565.651413][T13445] ip6_dst_lookup_tail+0x1a5/0x1660 [ 565.656668][T13445] ? sk_dst_check+0x25/0x430 [ 565.661348][T13445] ? ip6_dst_lookup+0x60/0x60 [ 565.666089][T13445] ? aa_label_sk_perm+0x500/0x6a0 [ 565.671166][T13445] ? tomoyo_check_inet_address+0x27d/0x910 [ 565.677043][T13445] ? sk_dst_check+0x25/0x430 [ 565.681700][T13445] ? sk_dst_check+0x2f3/0x430 [ 565.686435][T13445] ip6_sk_dst_lookup_flow+0x725/0x960 [ 565.691891][T13445] ? ping_v6_sendmsg+0xaf2/0x1130 [ 565.696968][T13445] ping_v6_sendmsg+0xb64/0x1130 [ 565.701885][T13445] ? ping_v6_pre_connect+0x30/0x30 [ 565.707078][T13445] ? aa_af_perm+0x330/0x330 [ 565.711639][T13445] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 565.718104][T13445] ? aa_sock_msg_perm+0x94/0x150 [ 565.723098][T13445] ? sock_rps_record_flow+0x19/0x3f0 [ 565.728459][T13445] ? inet_sendmsg+0x7e/0x2a0 [ 565.733102][T13445] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 565.738440][T13445] ? inet_send_prepare+0x250/0x250 [ 565.743600][T13445] ____sys_sendmsg+0x61b/0x980 [ 565.748424][T13445] ? __asan_memset+0x22/0x40 [ 565.753083][T13445] ? __sys_sendmsg_sock+0x30/0x30 [ 565.758155][T13445] ? __import_iovec+0x5f2/0x850 [ 565.763080][T13445] ? import_iovec+0x73/0xa0 [ 565.767636][T13445] ___sys_sendmsg+0x2a6/0x360 [ 565.772353][T13445] ? get_pid_task+0x20/0x1e0 [ 565.777006][T13445] ? __sys_sendmsg+0x2b0/0x2b0 [ 565.781855][T13445] ? __lock_acquire+0x7d80/0x7d80 [ 565.786963][T13445] __se_sys_sendmsg+0x1d0/0x2c0 [ 565.791894][T13445] ? __x64_sys_sendmsg+0x80/0x80 [ 565.796896][T13445] ? lockdep_hardirqs_on+0x98/0x150 [ 565.802157][T13445] do_syscall_64+0x55/0xb0 [ 565.806614][T13445] ? clear_bhb_loop+0x40/0x90 [ 565.811343][T13445] ? clear_bhb_loop+0x40/0x90 [ 565.816137][T13445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.822079][T13445] RIP: 0033:0x7fea0499e0d9 [ 565.826537][T13445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.846195][T13445] RSP: 002b:00007fea05847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.854661][T13445] RAX: ffffffffffffffda RBX: 00007fea04c25fa0 RCX: 00007fea0499e0d9 [ 565.862665][T13445] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 565.870696][T13445] RBP: 00007fea05847090 R08: 0000000000000000 R09: 0000000000000000 [ 565.878710][T13445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.886717][T13445] R13: 00007fea04c26038 R14: 00007fea04c25fa0 R15: 00007ffd04896b48 [ 565.894754][T13445] [ 568.175596][T13447] netlink: 'syz.1.2642': attribute type 19 has an invalid length. [ 568.183677][T13447] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.2642'. [ 568.347236][T13460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2647'. [ 568.599563][T13470] netlink: 'syz.0.2650': attribute type 10 has an invalid length. [ 568.607546][T13470] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2650'. [ 568.619763][T13470] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 568.630228][T13470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.647335][T13462] netlink: 'syz.1.2648': attribute type 2 has an invalid length. [ 568.661295][T13462] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2648'. [ 569.069594][T13476] netlink: 'syz.0.2653': attribute type 10 has an invalid length. [ 569.077966][T13476] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2653'. [ 569.423162][T13479] netlink: 'syz.2.2654': attribute type 2 has an invalid length. [ 569.431345][T13479] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2654'. [ 569.679742][T13488] netlink: 'syz.1.2656': attribute type 19 has an invalid length. [ 569.734831][T13493] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2658'. [ 569.759387][T13493] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2658'. [ 570.186922][T13494] syzkaller0: entered promiscuous mode [ 570.196324][T13498] netlink: 'syz.3.2660': attribute type 2 has an invalid length. [ 570.206129][T13498] __nla_validate_parse: 2 callbacks suppressed [ 570.206147][T13498] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2660'. [ 572.497038][T13521] netlink: 'syz.0.2674': attribute type 7 has an invalid length. [ 572.865679][T13531] netlink: 'syz.0.2671': attribute type 2 has an invalid length. [ 572.899114][T13531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2671'. [ 573.033293][T13539] FAULT_INJECTION: forcing a failure. [ 573.033293][T13539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.069307][T13539] CPU: 0 PID: 13539 Comm: syz.3.2675 Not tainted syzkaller #0 [ 573.076892][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.087002][T13539] Call Trace: [ 573.090321][T13539] [ 573.093297][T13539] dump_stack_lvl+0x18c/0x250 [ 573.098042][T13539] ? show_regs_print_info+0x20/0x20 [ 573.103300][T13539] ? load_image+0x420/0x420 [ 573.107879][T13539] ? __might_fault+0xaa/0x120 [ 573.112612][T13539] ? __lock_acquire+0x7d80/0x7d80 [ 573.117693][T13539] should_fail_ex+0x394/0x4c0 [ 573.122421][T13539] _copy_to_user+0x2f/0xa0 [ 573.126873][T13539] bpf_test_finish+0x4e7/0x650 [ 573.131678][T13539] ? convert_skb_to___skb+0x420/0x420 [ 573.137082][T13539] ? _copy_from_user+0xa5/0xe0 [ 573.141881][T13539] ? bpf_test_init+0x119/0x140 [ 573.146680][T13539] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 573.152135][T13539] ? __lock_acquire+0x7d80/0x7d80 [ 573.157223][T13539] ? dev_put+0x80/0x80 [ 573.161333][T13539] ? dev_put+0x80/0x80 [ 573.165431][T13539] bpf_prog_test_run+0x31f/0x390 [ 573.170406][T13539] __sys_bpf+0x49d/0x890 [ 573.174709][T13539] ? bpf_link_show_fdinfo+0x390/0x390 [ 573.180120][T13539] ? lock_chain_count+0x20/0x20 [ 573.185015][T13539] __x64_sys_bpf+0x7c/0x90 [ 573.189462][T13539] do_syscall_64+0x55/0xb0 [ 573.193910][T13539] ? clear_bhb_loop+0x40/0x90 [ 573.198611][T13539] ? clear_bhb_loop+0x40/0x90 [ 573.203338][T13539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 573.209259][T13539] RIP: 0033:0x7fb08db9e0d9 [ 573.213700][T13539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.233332][T13539] RSP: 002b:00007fb08ea75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 573.241775][T13539] RAX: ffffffffffffffda RBX: 00007fb08de25fa0 RCX: 00007fb08db9e0d9 [ 573.249801][T13539] RDX: 000000000000004c RSI: 0000200000000b80 RDI: 000000000000000a [ 573.257846][T13539] RBP: 00007fb08ea75090 R08: 0000000000000000 R09: 0000000000000000 [ 573.265841][T13539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 573.273930][T13539] R13: 00007fb08de26038 R14: 00007fb08de25fa0 R15: 00007ffd4768f958 [ 573.281944][T13539] [ 573.584711][T13549] netlink: 'syz.3.2678': attribute type 19 has an invalid length. [ 573.941323][T13552] syzkaller0: entered promiscuous mode [ 579.687771][T13565] netlink: 'syz.1.2685': attribute type 2 has an invalid length. [ 579.695705][T13565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2685'. [ 579.939175][T13586] FAULT_INJECTION: forcing a failure. [ 579.939175][T13586] name failslab, interval 1, probability 0, space 0, times 0 [ 579.968890][T13586] CPU: 1 PID: 13586 Comm: syz.1.2691 Not tainted syzkaller #0 [ 579.976562][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 579.986678][T13586] Call Trace: [ 579.990009][T13586] [ 579.992984][T13586] dump_stack_lvl+0x18c/0x250 [ 579.997719][T13586] ? show_regs_print_info+0x20/0x20 [ 580.002980][T13586] ? load_image+0x420/0x420 [ 580.007556][T13586] ? __might_sleep+0xe0/0xe0 [ 580.012213][T13586] ? __lock_acquire+0x7d80/0x7d80 [ 580.017307][T13586] should_fail_ex+0x394/0x4c0 [ 580.022054][T13586] should_failslab+0x9/0x20 [ 580.026636][T13586] slab_pre_alloc_hook+0x59/0x300 [ 580.031728][T13586] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 580.037540][T13586] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 580.043329][T13586] __kmem_cache_alloc_node+0x53/0x250 [ 580.048789][T13586] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 580.054591][T13586] __kmalloc+0xa7/0x240 [ 580.058812][T13586] tomoyo_realpath_from_path+0xe6/0x5c0 [ 580.064438][T13586] ? tomoyo_domain+0xd6/0x120 [ 580.069221][T13586] tomoyo_path_number_perm+0x248/0x5e0 [ 580.074778][T13586] ? tomoyo_path_number_perm+0x217/0x5e0 [ 580.080483][T13586] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 580.086033][T13586] ? ksys_write+0x1d2/0x260 [ 580.090689][T13586] ? __fget_files+0x28/0x460 [ 580.095379][T13586] security_file_ioctl+0x70/0xa0 [ 580.100399][T13586] __se_sys_ioctl+0x48/0x170 [ 580.105063][T13586] do_syscall_64+0x55/0xb0 [ 580.109544][T13586] ? clear_bhb_loop+0x40/0x90 [ 580.114288][T13586] ? clear_bhb_loop+0x40/0x90 [ 580.119014][T13586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.124964][T13586] RIP: 0033:0x7f5fd979e0d9 [ 580.129421][T13586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.149072][T13586] RSP: 002b:00007f5fda6a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.157536][T13586] RAX: ffffffffffffffda RBX: 00007f5fd9a25fa0 RCX: 00007f5fd979e0d9 [ 580.165530][T13586] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000005 [ 580.173536][T13586] RBP: 00007f5fda6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 580.181542][T13586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.189547][T13586] R13: 00007f5fd9a26038 R14: 00007f5fd9a25fa0 R15: 00007ffe277f8648 [ 580.197586][T13586] [ 580.256286][T13586] ERROR: Out of memory at tomoyo_realpath_from_path. [ 580.708861][T13610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2702'. [ 580.839093][T13606] netlink: 'syz.0.2700': attribute type 2 has an invalid length. [ 580.848286][T13606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2700'. [ 581.853191][T13641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2713'. [ 581.896346][T13630] netlink: 'syz.2.2708': attribute type 153 has an invalid length. [ 581.916428][T13630] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2708'. [ 582.202252][T13647] netlink: 'syz.3.2715': attribute type 2 has an invalid length. [ 582.229660][T13647] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2715'. [ 582.532618][T13661] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2720'. [ 582.641083][T13661] netlink: zone id is out of range [ 582.646418][T13661] netlink: zone id is out of range [ 582.667126][T13661] netlink: zone id is out of range [ 582.679811][T13661] netlink: zone id is out of range [ 582.697053][T13661] netlink: zone id is out of range [ 582.702799][T13661] netlink: zone id is out of range [ 582.729166][T13661] netlink: zone id is out of range [ 582.741368][T13661] netlink: zone id is out of range [ 582.746751][T13661] netlink: zone id is out of range [ 582.754399][T13661] netlink: zone id is out of range [ 582.902265][T13666] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2722'. [ 583.132029][T13674] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2726'. [ 583.541311][T13677] netlink: 'syz.0.2727': attribute type 2 has an invalid length. [ 583.568856][T13677] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2727'. [ 583.873931][T13695] netlink: 'syz.1.2734': attribute type 64 has an invalid length. [ 584.749245][T13718] veth0_vlan: entered allmulticast mode [ 585.037662][T13718] veth0_vlan: left promiscuous mode [ 585.172317][T13718] veth0_vlan: entered promiscuous mode [ 585.276072][T13725] netlink: 'syz.1.2746': attribute type 29 has an invalid length. [ 585.294462][T13711] netlink: 'syz.2.2741': attribute type 2 has an invalid length. [ 585.306330][T13711] __nla_validate_parse: 3 callbacks suppressed [ 585.306349][T13711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2741'. [ 585.336552][T13727] FAULT_INJECTION: forcing a failure. [ 585.336552][T13727] name failslab, interval 1, probability 0, space 0, times 0 [ 585.366818][T13725] netlink: 'syz.1.2746': attribute type 29 has an invalid length. [ 585.396229][T13727] CPU: 1 PID: 13727 Comm: syz.3.2747 Not tainted syzkaller #0 [ 585.403803][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.413919][T13727] Call Trace: [ 585.417240][T13727] [ 585.420193][T13727] dump_stack_lvl+0x18c/0x250 [ 585.424907][T13727] ? show_regs_print_info+0x20/0x20 [ 585.430138][T13727] ? load_image+0x420/0x420 [ 585.434677][T13727] ? __might_sleep+0xe0/0xe0 [ 585.439309][T13727] ? __lock_acquire+0x7d80/0x7d80 [ 585.444364][T13727] should_fail_ex+0x394/0x4c0 [ 585.449076][T13727] should_failslab+0x9/0x20 [ 585.453630][T13727] slab_pre_alloc_hook+0x59/0x300 [ 585.458690][T13727] ? tomoyo_encode+0x2ad/0x570 [ 585.463491][T13727] ? tomoyo_encode+0x2ad/0x570 [ 585.468289][T13727] __kmem_cache_alloc_node+0x53/0x250 [ 585.473714][T13727] ? tomoyo_encode+0x2ad/0x570 [ 585.478527][T13727] __kmalloc+0xa7/0x240 [ 585.482721][T13727] tomoyo_encode+0x2ad/0x570 [ 585.487351][T13727] tomoyo_realpath_from_path+0x57c/0x5c0 [ 585.493024][T13727] ? tomoyo_domain+0xd6/0x120 [ 585.497757][T13727] tomoyo_path_number_perm+0x248/0x5e0 [ 585.503250][T13727] ? tomoyo_path_number_perm+0x217/0x5e0 [ 585.508915][T13727] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 585.514407][T13727] ? ksys_write+0x1d2/0x260 [ 585.518984][T13727] ? __fget_files+0x28/0x460 [ 585.523612][T13727] security_file_ioctl+0x70/0xa0 [ 585.528591][T13727] __se_sys_ioctl+0x48/0x170 [ 585.533214][T13727] do_syscall_64+0x55/0xb0 [ 585.537652][T13727] ? clear_bhb_loop+0x40/0x90 [ 585.542348][T13727] ? clear_bhb_loop+0x40/0x90 [ 585.547043][T13727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.552961][T13727] RIP: 0033:0x7fb08db9e0d9 [ 585.557396][T13727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.577023][T13727] RSP: 002b:00007fb08ea54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.585487][T13727] RAX: ffffffffffffffda RBX: 00007fb08de26090 RCX: 00007fb08db9e0d9 [ 585.593498][T13727] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000009 [ 585.601489][T13727] RBP: 00007fb08ea54090 R08: 0000000000000000 R09: 0000000000000000 [ 585.609478][T13727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.617464][T13727] R13: 00007fb08de26128 R14: 00007fb08de26090 R15: 00007ffd4768f958 [ 585.625474][T13727] [ 585.648191][T13727] ERROR: Out of memory at tomoyo_realpath_from_path. [ 585.657858][T13726] netlink: 'syz.1.2746': attribute type 29 has an invalid length. [ 585.675566][T13730] netlink: 'syz.1.2746': attribute type 29 has an invalid length. [ 585.967514][T13736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2751'. [ 586.254778][T13744] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2754'. [ 586.785867][T13749] netlink: 'syz.2.2757': attribute type 10 has an invalid length. [ 587.413404][T13749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.534568][T13749] team0: Port device bond0 added [ 587.597131][T13755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2759'. [ 588.169955][T13764] netlink: 'syz.1.2761': attribute type 2 has an invalid length. [ 588.177807][T13764] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2761'. [ 588.344111][T13771] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2763'. [ 588.678135][T13777] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.2765'. [ 588.719643][T13749] syz.2.2757 (13749) used greatest stack depth: 18632 bytes left [ 589.028480][T13788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2768'. [ 589.253779][T13794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2770'. [ 589.538252][T13804] FAULT_INJECTION: forcing a failure. [ 589.538252][T13804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.555214][T13804] CPU: 1 PID: 13804 Comm: syz.3.2776 Not tainted syzkaller #0 [ 589.562752][T13804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.566378][T13800] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2775'. [ 589.572832][T13804] Call Trace: [ 589.572845][T13804] [ 589.572855][T13804] dump_stack_lvl+0x18c/0x250 [ 589.572888][T13804] ? show_regs_print_info+0x20/0x20 [ 589.572912][T13804] ? load_image+0x420/0x420 [ 589.572946][T13804] ? __might_fault+0xaa/0x120 [ 589.572971][T13804] ? __lock_acquire+0x7d80/0x7d80 [ 589.573003][T13804] should_fail_ex+0x394/0x4c0 [ 589.573038][T13804] _copy_from_user+0x2f/0xe0 [ 589.573064][T13804] __sys_bpf+0x23e/0x890 [ 589.573092][T13804] ? bpf_link_show_fdinfo+0x390/0x390 [ 589.573132][T13804] ? lock_chain_count+0x20/0x20 [ 589.573166][T13804] __x64_sys_bpf+0x7c/0x90 [ 589.573192][T13804] do_syscall_64+0x55/0xb0 [ 589.573214][T13804] ? clear_bhb_loop+0x40/0x90 [ 589.573239][T13804] ? clear_bhb_loop+0x40/0x90 [ 589.573265][T13804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.573289][T13804] RIP: 0033:0x7fb08db9e0d9 [ 589.573312][T13804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.573332][T13804] RSP: 002b:00007fb08ea75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 589.573358][T13804] RAX: ffffffffffffffda RBX: 00007fb08de25fa0 RCX: 00007fb08db9e0d9 [ 589.573383][T13804] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 589.573399][T13804] RBP: 00007fb08ea75090 R08: 0000000000000000 R09: 0000000000000000 [ 589.573413][T13804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.573427][T13804] R13: 00007fb08de26038 R14: 00007fb08de25fa0 R15: 00007ffd4768f958 [ 589.573461][T13804] [ 589.772480][T13806] netlink: 'syz.0.2774': attribute type 2 has an invalid length. [ 590.356237][T13812] netlink: 'syz.1.2779': attribute type 10 has an invalid length. [ 590.837691][T13812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.926320][T13812] team0: Port device bond0 added [ 590.967848][T13814] netlink: 'syz.3.2781': attribute type 2 has an invalid length. [ 590.979092][T13814] __nla_validate_parse: 1 callbacks suppressed [ 590.979109][T13814] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2781'. [ 591.283335][T13812] syz.1.2779 (13812) used greatest stack depth: 16776 bytes left [ 591.301090][T13826] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2782'. [ 591.579279][T13834] netlink: 'syz.0.2785': attribute type 16 has an invalid length. [ 591.621498][T13833] netlink: 'syz.0.2785': attribute type 16 has an invalid length. [ 591.649125][T13834] netlink: 'syz.0.2785': attribute type 3 has an invalid length. [ 591.656935][T13834] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2785'. [ 591.687469][T13833] netlink: 'syz.0.2785': attribute type 3 has an invalid length. [ 591.697023][T13833] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2785'. [ 591.742738][T13833] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2785'. [ 591.745638][T13834] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2785'. [ 591.878473][T13841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2787'. [ 592.172563][T13843] netlink: 'syz.1.2788': attribute type 2 has an invalid length. [ 592.183363][T13843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2788'. [ 592.324780][T13851] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2793'. [ 592.645545][T13863] netlink: 'syz.1.2802': attribute type 2 has an invalid length. [ 592.656467][T13863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2802'. [ 592.756750][T13854] netlink: 'syz.0.2791': attribute type 2 has an invalid length. [ 592.805177][T13864] netlink: 'syz.3.2794': attribute type 10 has an invalid length. [ 593.248045][T13864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.407950][T13864] team0: Port device bond0 added [ 594.295953][T13895] veth0_vlan: entered allmulticast mode [ 594.550833][ T51] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12 [ 594.581382][T13900] veth0_vlan: left promiscuous mode [ 594.629955][T13900] veth0_vlan: entered promiscuous mode [ 595.490515][T13913] validate_nla: 2 callbacks suppressed [ 595.490634][T13913] netlink: 'syz.0.2809': attribute type 10 has an invalid length. [ 596.072190][T13913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.239214][T13913] team0: Port device bond0 added [ 596.455434][T13932] __nla_validate_parse: 5 callbacks suppressed [ 596.455456][T13932] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2816'. [ 596.474512][T13937] netlink: 'syz.2.2817': attribute type 21 has an invalid length. [ 596.508199][T13932] net_ratelimit: 331 callbacks suppressed [ 596.508264][T13932] openvswitch: netlink: Flow key attribute not present in set flow. [ 596.545505][T13937] netlink: 'syz.2.2817': attribute type 6 has an invalid length. [ 596.569969][T13937] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2817'. [ 596.599621][ T51] Bluetooth: hci0: command tx timeout [ 596.920899][T13927] netlink: 'syz.3.2815': attribute type 2 has an invalid length. [ 596.946083][T13927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2815'. [ 597.351199][T13947] veth0_vlan: entered allmulticast mode [ 597.382754][T13949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2829'. [ 597.453672][T13949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2829'. [ 597.464719][T13941] netlink: 'syz.1.2819': attribute type 2 has an invalid length. [ 597.472683][T13941] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2819'. [ 597.508619][T13951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2829'. [ 597.661360][T13947] veth0_vlan: left promiscuous mode [ 597.668564][T13947] veth0_vlan: entered promiscuous mode [ 597.802618][T13958] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2823'. [ 597.987704][T13962] netlink: 'syz.3.2825': attribute type 29 has an invalid length. [ 599.997013][T13962] netlink: 'syz.3.2825': attribute type 29 has an invalid length. [ 600.006848][T13965] €Â0: renamed from batadv_slave_1 (while UP) [ 600.031795][T13969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.053065][T13963] netlink: 'syz.3.2825': attribute type 29 has an invalid length. [ 600.298254][T13980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2831'. [ 600.333294][T13980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2831'. [ 600.372233][T13971] netlink: 'syz.2.2828': attribute type 2 has an invalid length. [ 600.544573][T13983] netlink: 'syz.3.2833': attribute type 2 has an invalid length. [ 601.239216][T14009] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 601.384581][T14011] netlink: 'syz.2.2844': attribute type 2 has an invalid length. [ 601.435201][T14018] netlink: 'syz.3.2845': attribute type 2 has an invalid length. [ 601.460550][T14018] __nla_validate_parse: 7 callbacks suppressed [ 601.460590][T14018] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2845'. [ 601.712115][T14026] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2849'. [ 602.272249][T14032] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 602.303680][T14032] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 603.235616][T14044] netlink: 'syz.2.2856': attribute type 2 has an invalid length. [ 603.250038][T14044] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2856'. [ 603.261387][T14049] netlink: 'syz.3.2858': attribute type 2 has an invalid length. [ 603.269585][T14049] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2858'. [ 603.480494][T14059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.526161][T14059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.753604][T14059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.767616][T14059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.954012][T14063] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2861'. [ 604.018503][T14068] netlink: 'syz.3.2863': attribute type 1 has an invalid length. [ 604.027498][T14068] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2863'. [ 604.508156][T14082] netlink: 'syz.3.2868': attribute type 2 has an invalid length. [ 604.522516][T14082] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2868'. [ 604.910526][T14088] syzkaller0: entered promiscuous mode [ 604.922052][T14088] syzkaller0: entered allmulticast mode [ 605.387789][T14096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2873'. [ 606.970690][T14094] netlink: 'syz.0.2872': attribute type 46 has an invalid length. [ 607.110545][T14100] FAULT_INJECTION: forcing a failure. [ 607.110545][T14100] name failslab, interval 1, probability 0, space 0, times 0 [ 607.159136][T14100] CPU: 0 PID: 14100 Comm: syz.1.2874 Not tainted syzkaller #0 [ 607.166697][T14100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.176802][T14100] Call Trace: [ 607.180130][T14100] [ 607.183096][T14100] dump_stack_lvl+0x18c/0x250 [ 607.187843][T14100] ? show_regs_print_info+0x20/0x20 [ 607.193099][T14100] ? load_image+0x420/0x420 [ 607.197674][T14100] ? __lock_acquire+0x7d80/0x7d80 [ 607.202761][T14100] should_fail_ex+0x394/0x4c0 [ 607.207533][T14100] should_failslab+0x9/0x20 [ 607.212078][T14100] slab_pre_alloc_hook+0x59/0x300 [ 607.217143][T14100] ? security_sk_alloc+0x4b/0x130 [ 607.222194][T14100] ? security_sk_alloc+0x4b/0x130 [ 607.227257][T14100] __kmem_cache_alloc_node+0x53/0x250 [ 607.232671][T14100] ? security_sk_alloc+0x4b/0x130 [ 607.237715][T14100] __kmalloc+0xa7/0x240 [ 607.241900][T14100] ? sk_prot_alloc+0xe7/0x210 [ 607.246616][T14100] security_sk_alloc+0x4b/0x130 [ 607.251499][T14100] sk_prot_alloc+0x101/0x210 [ 607.256119][T14100] ? sk_alloc+0x24/0x350 [ 607.260397][T14100] sk_alloc+0x3a/0x350 [ 607.264500][T14100] ? bpf_ctx_init+0x154/0x190 [ 607.269217][T14100] bpf_prog_test_run_skb+0x371/0x18f0 [ 607.274621][T14100] ? lockdep_hardirqs_on+0x98/0x150 [ 607.279861][T14100] ? cpu_online+0x60/0x60 [ 607.284231][T14100] ? cpu_online+0x60/0x60 [ 607.288610][T14100] bpf_prog_test_run+0x31f/0x390 [ 607.293580][T14100] __sys_bpf+0x49d/0x890 [ 607.297858][T14100] ? bpf_link_show_fdinfo+0x390/0x390 [ 607.303272][T14100] ? lock_chain_count+0x20/0x20 [ 607.308152][T14100] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 607.314173][T14100] __x64_sys_bpf+0x7c/0x90 [ 607.318650][T14100] do_syscall_64+0x55/0xb0 [ 607.323094][T14100] ? clear_bhb_loop+0x40/0x90 [ 607.327816][T14100] ? clear_bhb_loop+0x40/0x90 [ 607.332527][T14100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.338446][T14100] RIP: 0033:0x7f5fd979e0d9 [ 607.342883][T14100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.362518][T14100] RSP: 002b:00007f5fda6a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 607.370967][T14100] RAX: ffffffffffffffda RBX: 00007f5fd9a25fa0 RCX: 00007f5fd979e0d9 [ 607.378960][T14100] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 000000000000000a [ 607.386957][T14100] RBP: 00007f5fda6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 607.394950][T14100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.402950][T14100] R13: 00007f5fd9a26038 R14: 00007f5fd9a25fa0 R15: 00007ffe277f8648 [ 607.410967][T14100] [ 607.872995][T14112] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2878'. [ 607.894991][T14112] openvswitch: netlink: Flow key attribute not present in set flow. [ 610.063270][T14124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2882'. [ 610.196119][T14128] netlink: 'syz.3.2883': attribute type 2 has an invalid length. [ 610.209793][T14128] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2883'. [ 610.453116][T14133] netlink: 'syz.2.2885': attribute type 2 has an invalid length. [ 610.482836][T14133] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2885'. [ 610.528551][T14134] netlink: 'syz.0.2886': attribute type 2 has an invalid length. [ 610.552414][T14134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2886'. [ 610.900639][T14157] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2895'. [ 611.121405][T14160] netlink: 'syz.1.2896': attribute type 2 has an invalid length. [ 611.142965][T14160] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2896'. [ 611.683059][T14172] netlink: 'syz.0.2900': attribute type 2 has an invalid length. [ 611.732719][T14172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2900'. [ 612.160682][T14177] netlink: 'syz.1.2901': attribute type 2 has an invalid length. [ 612.208915][T14177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2901'. [ 612.749471][T14195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2906'. [ 612.783344][T14197] netlink: 'syz.3.2907': attribute type 21 has an invalid length. [ 612.802753][T14197] IPv6: NLM_F_CREATE should be specified when creating new route [ 612.838011][T14197] IPv6: Can't replace route, no match found [ 612.933772][T14197] netlink: 'syz.3.2907': attribute type 10 has an invalid length. [ 613.089503][T14197] team0: Device wg1 is of different type [ 613.168433][T14202] netlink: 'syz.1.2909': attribute type 2 has an invalid length. [ 613.187767][T14202] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2909'. [ 613.285368][T14213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2913'. [ 613.458475][T14217] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2914'. [ 613.678313][T14227] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2919'. [ 613.755765][T14230] netlink: 'syz.0.2920': attribute type 2 has an invalid length. [ 614.217800][T14241] netlink: 'syz.2.2923': attribute type 2 has an invalid length. [ 614.242898][T14241] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2923'. [ 614.305812][T14247] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2925'. [ 614.494984][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 614.505917][T14252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2928'. [ 614.515238][T14252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2928'. [ 614.545589][T14252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2928'. [ 614.563220][T14252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2928'. [ 615.176632][T14269] netlink: 'syz.1.2935': attribute type 21 has an invalid length. [ 615.185406][T14268] netlink: 'syz.3.2936': attribute type 2 has an invalid length. [ 615.193981][T14268] netlink: 'syz.3.2936': attribute type 2 has an invalid length. [ 615.203378][T14269] netlink: 'syz.1.2935': attribute type 6 has an invalid length. [ 616.038622][T14297] FAULT_INJECTION: forcing a failure. [ 616.038622][T14297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.104142][T14297] CPU: 1 PID: 14297 Comm: syz.0.2945 Not tainted syzkaller #0 [ 616.111760][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.121847][T14297] Call Trace: [ 616.125150][T14297] [ 616.128141][T14297] dump_stack_lvl+0x18c/0x250 [ 616.132860][T14297] ? show_regs_print_info+0x20/0x20 [ 616.138090][T14297] ? load_image+0x420/0x420 [ 616.142625][T14297] ? __might_fault+0xaa/0x120 [ 616.147351][T14297] ? __lock_acquire+0x7d80/0x7d80 [ 616.152409][T14297] should_fail_ex+0x394/0x4c0 [ 616.157120][T14297] _copy_from_user+0x2f/0xe0 [ 616.161742][T14297] __sys_bpf+0x23e/0x890 [ 616.166049][T14297] ? bpf_link_show_fdinfo+0x390/0x390 [ 616.171454][T14297] ? lock_chain_count+0x20/0x20 [ 616.176331][T14297] __x64_sys_bpf+0x7c/0x90 [ 616.180769][T14297] do_syscall_64+0x55/0xb0 [ 616.185210][T14297] ? clear_bhb_loop+0x40/0x90 [ 616.189908][T14297] ? clear_bhb_loop+0x40/0x90 [ 616.194616][T14297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 616.200538][T14297] RIP: 0033:0x7fea0499e0d9 [ 616.204986][T14297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.224645][T14297] RSP: 002b:00007fea05847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 616.233079][T14297] RAX: ffffffffffffffda RBX: 00007fea04c25fa0 RCX: 00007fea0499e0d9 [ 616.241079][T14297] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 616.249078][T14297] RBP: 00007fea05847090 R08: 0000000000000000 R09: 0000000000000000 [ 616.257079][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.265101][T14297] R13: 00007fea04c26038 R14: 00007fea04c25fa0 R15: 00007ffd04896b48 [ 616.273107][T14297] [ 616.655849][T14301] team0 (unregistering): Port device team_slave_0 removed [ 616.802458][T14301] team0 (unregistering): Port device team_slave_1 removed [ 616.830512][T14301] veth1_vlan: left allmulticast mode [ 616.896355][T14301] team0 (unregistering): Port device macvlan1 removed [ 616.942807][T14301] team0 (unregistering): Port device bond0 removed [ 617.248593][T14324] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 617.249173][T14317] validate_nla: 2 callbacks suppressed [ 617.249189][T14317] netlink: 'syz.1.2953': attribute type 2 has an invalid length. [ 617.280706][T14322] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 617.391089][T14327] netlink: 'syz.2.2957': attribute type 2 has an invalid length. [ 617.927928][T14342] syzkaller0: entered promiscuous mode [ 617.937696][T14342] syzkaller0: entered allmulticast mode [ 618.039314][T14345] openvswitch: netlink: Key type 2832 is out of range max 32 [ 618.473423][T14357] veth0_vlan: left promiscuous mode [ 618.525511][T14357] veth0_vlan: entered promiscuous mode [ 618.545063][T14350] netlink: 'syz.2.2966': attribute type 2 has an invalid length. [ 618.553517][T14350] __nla_validate_parse: 12 callbacks suppressed [ 618.553562][T14350] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2966'. [ 618.569982][T14360] netlink: 'syz.0.2969': attribute type 10 has an invalid length. [ 618.577940][T14360] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2969'. [ 619.307156][T14380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2976'. [ 619.442794][T14382] syzkaller0: entered promiscuous mode [ 619.469607][T14382] syzkaller0: entered allmulticast mode [ 619.878620][T14393] netlink: 'syz.3.2981': attribute type 2 has an invalid length. [ 619.906798][T14393] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2981'. [ 620.377331][T14405] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2985'. [ 620.450634][T14405] openvswitch: netlink: Tunnel attr 0 has unexpected len 123 expected 8 [ 620.563606][T14407] netlink: 'syz.0.2984': attribute type 10 has an invalid length. [ 621.120507][T14407] team0 (unregistering): Port device team_slave_0 removed [ 621.229260][T14407] team0 (unregistering): Port device team_slave_1 removed [ 621.253569][T14407] team0 (unregistering): Port device bond0 removed [ 621.290819][T14412] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2987'. [ 621.643154][T12842] Bluetooth: hci4: command 0x0406 tx timeout [ 621.701758][T14429] netlink: 'syz.2.2993': attribute type 2 has an invalid length. [ 621.737755][T14429] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2993'. [ 622.002501][T14434] netlink: 'syz.3.2995': attribute type 2 has an invalid length. [ 622.017986][T14434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2995'. [ 622.027544][T14442] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2996'. [ 622.356570][T14452] netlink: 'syz.2.3001': attribute type 10 has an invalid length. [ 623.083612][T14452] team0 (unregistering): Port device team_slave_0 removed [ 623.204543][T14452] team0 (unregistering): Port device team_slave_1 removed [ 623.278415][T14452] team0 (unregistering): Port device bond0 removed [ 623.317255][T14455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3002'. [ 624.027511][T14493] netlink: 'syz.0.3013': attribute type 46 has an invalid length. [ 624.047909][T14493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3013'. [ 624.349654][T14500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3014'. [ 624.585305][T14502] netlink: 'syz.0.3015': attribute type 1 has an invalid length. [ 624.611409][T14502] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3015'. [ 624.684671][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.693477][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.802939][T14510] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3019'. [ 624.941602][T14513] netlink: 'syz.1.3018': attribute type 10 has an invalid length. [ 625.276428][T14513] team0 (unregistering): Port device team_slave_0 removed [ 625.336741][T14513] team0 (unregistering): Port device team_slave_1 removed [ 625.384027][T14513] team0 (unregistering): Port device bond0 removed [ 625.639563][T14537] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3025'. [ 627.243627][T14577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3038'. [ 627.443324][T14582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.452603][T14582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.473154][T14582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.481945][T14582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.932409][T14608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3050'. [ 629.305897][T14612] netlink: 'syz.1.3051': attribute type 2 has an invalid length. [ 629.344492][T14612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3051'. [ 630.323326][T14635] Dead loop on virtual device ip6_vti0, fix it urgently! [ 630.368135][T14634] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3057'. [ 630.770299][T14645] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3061'. [ 631.312715][T14655] netlink: 'syz.2.3065': attribute type 2 has an invalid length. [ 631.328769][T14655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3065'. [ 631.557521][T14666] netlink: 'syz.0.3069': attribute type 3 has an invalid length. [ 631.589384][T14666] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3069'. [ 631.716259][T14671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3070'. [ 632.105893][T14682] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3075'. [ 632.605307][T14692] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3076'. [ 632.804967][T14694] netlink: 'syz.2.3078': attribute type 2 has an invalid length. [ 632.825255][T14694] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3078'. [ 633.313933][T14713] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3084'. [ 634.368204][T14729] netlink: 'syz.2.3090': attribute type 2 has an invalid length. [ 634.394176][T14729] __nla_validate_parse: 2 callbacks suppressed [ 634.394238][T14729] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3090'. [ 634.790654][T14749] netlink: 'syz.2.3094': attribute type 21 has an invalid length. [ 634.810783][T14749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3094'. [ 634.959875][T14757] netlink: 'syz.0.3096': attribute type 46 has an invalid length. [ 636.222365][T14780] netlink: 'syz.2.3104': attribute type 1 has an invalid length. [ 636.249947][T14780] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3104'. [ 636.273762][T14773] netlink: 'syz.1.3102': attribute type 2 has an invalid length. [ 636.298919][T14773] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3102'. [ 637.010450][T12842] Bluetooth: hci3: command 0x0406 tx timeout [ 637.645346][T14795] netlink: 'syz.2.3108': attribute type 10 has an invalid length. [ 637.903866][T14807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3113'. [ 638.035022][T14811] netlink: 'syz.3.3121': attribute type 10 has an invalid length. [ 638.043455][T14811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3121'. [ 639.241679][T14832] netlink: 16278 bytes leftover after parsing attributes in process `syz.0.3122'. [ 639.275423][T14834] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3123'. [ 640.036227][T14851] netlink: 'syz.1.3129': attribute type 2 has an invalid length. [ 640.085316][T14851] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3129'. [ 640.308195][T14860] netlink: 'syz.0.3138': attribute type 1 has an invalid length. [ 640.319377][T14860] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3138'. [ 641.868077][T14881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3135'. [ 642.406413][T14899] netlink: 'syz.0.3141': attribute type 8 has an invalid length. [ 642.431382][T14899] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3141'. [ 642.631790][T14907] netlink: 'syz.2.3144': attribute type 17 has an invalid length. [ 642.679352][T14907] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 642.745484][T14909] netlink: 'syz.3.3147': attribute type 1 has an invalid length. [ 642.899309][T14909] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3147'. [ 643.723764][T14917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3149'. [ 644.140033][T14935] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3156'. [ 644.186881][T14935] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3156'. [ 644.847257][T14948] netlink: 'syz.1.3160': attribute type 1 has an invalid length. [ 644.861471][T14948] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3160'. [ 645.279216][T14960] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3164'. [ 645.970883][T14962] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3165'. [ 646.444608][T14979] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3170'. [ 646.466255][T14971] netlink: 60243 bytes leftover after parsing attributes in process `syz.3.3168'. [ 646.483697][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 647.124007][T14993] netlink: 'syz.0.3175': attribute type 1 has an invalid length. [ 647.147752][T14993] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3175'. [ 649.425710][T15005] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3178'. [ 649.594688][T15011] netlink: 'syz.3.3181': attribute type 29 has an invalid length. [ 649.618835][T15011] netlink: 'syz.3.3181': attribute type 3 has an invalid length. [ 649.626906][T15011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3181'. [ 650.012099][T15022] netlink: 'syz.0.3185': attribute type 1 has an invalid length. [ 650.037371][T15022] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3185'. [ 650.821564][T15030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.890584][T15030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.178410][T15030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.186128][T15030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.436596][T15038] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3190'. [ 652.027540][T15054] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3194'. [ 652.041779][T15054] openvswitch: netlink: Key type 2832 is out of range max 32 [ 652.503738][T15071] netlink: 668 bytes leftover after parsing attributes in process `syz.3.3201'. [ 652.525580][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 652.560217][T15071] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 652.615668][T15071] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 652.674540][T15077] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3203'. [ 653.527290][T15090] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3208'. [ 653.550980][T15090] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3208'. [ 653.563720][T15088] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3208'. [ 654.484149][T15102] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3213'. [ 655.171921][T15117] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3215'. [ 655.212060][T15117] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 655.296578][T15117] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 655.534339][T15123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.570266][T15123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.932290][T15123] batman_adv: batadv0: Interface deactivated: €Â0 [ 655.939863][T15123] batman_adv: batadv0: Removing interface: €Â0 [ 656.259655][T15135] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3223'. [ 656.711527][T15147] netlink: 'syz.3.3228': attribute type 1 has an invalid length. [ 656.719701][T15147] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3228'. [ 657.222514][T15145] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3225'. [ 657.468015][T15162] netlink: 668 bytes leftover after parsing attributes in process `syz.1.3231'. [ 657.509080][T15162] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 657.551222][T15162] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 657.720080][T15166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3234'. [ 657.742790][T15166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3234'. [ 657.770536][T15166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3234'. [ 657.792823][T15166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3234'. [ 658.832568][T15175] netlink: 'syz.0.3237': attribute type 7 has an invalid length. [ 658.871390][T15179] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3238'. [ 658.968246][T15181] netlink: 'syz.1.3240': attribute type 1 has an invalid length. [ 658.987953][T15181] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3240'. [ 659.239989][T15189] netlink: 'syz.0.3252': attribute type 1 has an invalid length. [ 659.285752][T15189] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3252'. [ 659.456034][T15198] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 659.558806][T15198] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 661.603316][T15205] netlink: 'syz.0.3247': attribute type 15 has an invalid length. [ 661.618775][T15205] netlink: 'syz.0.3247': attribute type 7 has an invalid length. [ 662.099737][T15218] netlink: 'syz.3.3254': attribute type 2 has an invalid length. [ 662.113878][T15218] netlink: 'syz.3.3254': attribute type 11 has an invalid length. [ 662.124777][T15221] sock: sock_set_timeout: `syz.1.3263' (pid 15221) tries to set negative timeout [ 662.134888][T15218] __nla_validate_parse: 3 callbacks suppressed [ 662.134969][T15218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3254'. [ 662.547299][T15225] netlink: 'syz.0.3256': attribute type 2 has an invalid length. [ 662.555340][T15225] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3256'. [ 662.909702][T15241] netlink: 'syz.1.3260': attribute type 4 has an invalid length. [ 662.982970][T15241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3260'. [ 663.229804][T15247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3262'. [ 663.239497][T15247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3262'. [ 663.251485][T15247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3262'. [ 663.578521][T15252] netlink: 'syz.1.3264': attribute type 2 has an invalid length. [ 663.588002][T15252] netlink: 'syz.1.3264': attribute type 11 has an invalid length. [ 663.600454][T15252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3264'. [ 663.842686][T15250] FAULT_INJECTION: forcing a failure. [ 663.842686][T15250] name failslab, interval 1, probability 0, space 0, times 0 [ 663.865382][T15250] CPU: 1 PID: 15250 Comm: syz.1.3264 Not tainted syzkaller #0 [ 663.872946][T15250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 663.883073][T15250] Call Trace: [ 663.886411][T15250] [ 663.889401][T15250] dump_stack_lvl+0x18c/0x250 [ 663.894157][T15250] ? show_regs_print_info+0x20/0x20 [ 663.899467][T15250] ? load_image+0x420/0x420 [ 663.904063][T15250] should_fail_ex+0x394/0x4c0 [ 663.908812][T15250] should_failslab+0x9/0x20 [ 663.913354][T15250] slab_pre_alloc_hook+0x59/0x300 [ 663.918428][T15250] kmem_cache_alloc_node+0x5e/0x310 [ 663.923681][T15250] ? __asan_memcpy+0x40/0x70 [ 663.928345][T15250] ? __alloc_skb+0x103/0x2c0 [ 663.933004][T15250] __alloc_skb+0x103/0x2c0 [ 663.937475][T15250] wireless_send_event+0x51c/0xc50 [ 663.942739][T15250] ? wireless_nlevent_flush+0x110/0x110 [ 663.948340][T15250] ? apparmor_capable+0x137/0x1a0 [ 663.953411][T15250] ioctl_standard_call+0x12a/0x250 [ 663.958583][T15250] ? trace_rdev_return_int+0x1c0/0x1c0 [ 663.964087][T15250] ? trace_rdev_return_int+0x1c0/0x1c0 [ 663.969623][T15250] wext_ioctl_dispatch+0x51a/0x650 [ 663.974832][T15250] ? __lock_acquire+0x7d80/0x7d80 [ 663.979894][T15250] ? wext_ioctl_dispatch+0x650/0x650 [ 663.985219][T15250] ? iw_handler_get_private+0x1f0/0x1f0 [ 663.990846][T15250] ? wext_handle_ioctl+0x1e0/0x1e0 [ 663.996005][T15250] ? __might_fault+0xaa/0x120 [ 664.000730][T15250] ? __might_fault+0xc6/0x120 [ 664.005433][T15250] ? __might_fault+0xaa/0x120 [ 664.010148][T15250] wext_handle_ioctl+0x118/0x1e0 [ 664.015128][T15250] ? call_commit_handler+0xf0/0xf0 [ 664.020335][T15250] sock_ioctl+0x15d/0x7e0 [ 664.024750][T15250] ? sock_poll+0x3e0/0x3e0 [ 664.029269][T15250] ? bpf_lsm_file_ioctl+0x9/0x10 [ 664.034303][T15250] ? security_file_ioctl+0x80/0xa0 [ 664.039524][T15250] ? sock_poll+0x3e0/0x3e0 [ 664.043999][T15250] __se_sys_ioctl+0xfd/0x170 [ 664.048671][T15250] do_syscall_64+0x55/0xb0 [ 664.053159][T15250] ? clear_bhb_loop+0x40/0x90 [ 664.057912][T15250] ? clear_bhb_loop+0x40/0x90 [ 664.062665][T15250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.068632][T15250] RIP: 0033:0x7f5fd979e0d9 [ 664.073114][T15250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.092808][T15250] RSP: 002b:00007f5fda6a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.101299][T15250] RAX: ffffffffffffffda RBX: 00007f5fd9a25fa0 RCX: 00007f5fd979e0d9 [ 664.109340][T15250] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 000000000000000c [ 664.117386][T15250] RBP: 00007f5fda6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 664.125440][T15250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.133480][T15250] R13: 00007f5fd9a26038 R14: 00007f5fd9a25fa0 R15: 00007ffe277f8648 [ 664.141557][T15250] [ 664.408423][T15269] netlink: 'syz.3.3270': attribute type 10 has an invalid length. [ 664.439562][T15263] netlink: 'syz.1.3268': attribute type 2 has an invalid length. [ 664.449030][T15263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3268'. [ 664.535869][T15271] netlink: 'syz.2.3279': attribute type 10 has an invalid length. [ 664.558027][T15271] macvlan0: entered promiscuous mode [ 664.620551][T15271] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 664.687609][T15278] netlink: 'syz.1.3273': attribute type 1 has an invalid length. [ 664.769637][T15278] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3273'. [ 666.516341][T15300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3282'. [ 666.821411][T15306] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.719976][T15306] bridge_slave_1: left allmulticast mode [ 667.726514][T15306] bridge_slave_1: left promiscuous mode [ 667.762198][T15306] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.862455][T15306] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 667.872655][T15315] validate_nla: 4 callbacks suppressed [ 667.872673][T15315] netlink: 'syz.1.3284': attribute type 10 has an invalid length. [ 667.909471][T15315] __nla_validate_parse: 1 callbacks suppressed [ 667.909493][T15315] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3284'. [ 668.009649][T15319] netlink: 'syz.3.3290': attribute type 33 has an invalid length. [ 668.017805][T15319] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3290'. [ 669.123085][T15340] netlink: 'syz.1.3295': attribute type 2 has an invalid length. [ 669.137264][T15346] netlink: 'syz.0.3297': attribute type 1 has an invalid length. [ 669.143508][T15340] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3295'. [ 669.162404][T15346] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3297'. [ 669.969839][T15351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.925783][T15380] netlink: 'syz.1.3309': attribute type 1 has an invalid length. [ 670.937325][T15380] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3309'. [ 671.170861][T15371] netlink: 'syz.2.3307': attribute type 2 has an invalid length. [ 671.188860][T15371] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3307'. [ 672.021965][T15389] netlink: 'syz.1.3319': attribute type 2 has an invalid length. [ 672.064621][T15389] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3319'. [ 672.286723][T15412] netlink: 'syz.3.3320': attribute type 1 has an invalid length. [ 672.301983][T15412] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3320'. [ 672.635767][T15420] FAULT_INJECTION: forcing a failure. [ 672.635767][T15420] name failslab, interval 1, probability 0, space 0, times 0 [ 672.676970][T15420] CPU: 1 PID: 15420 Comm: syz.1.3324 Not tainted syzkaller #0 [ 672.684528][T15420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.694639][T15420] Call Trace: [ 672.697964][T15420] [ 672.700932][T15420] dump_stack_lvl+0x18c/0x250 [ 672.705665][T15420] ? sctp_sendmsg+0x1519/0x27b0 [ 672.710567][T15420] ? ___sys_sendmsg+0x2a6/0x360 [ 672.715464][T15420] ? show_regs_print_info+0x20/0x20 [ 672.720734][T15420] ? load_image+0x420/0x420 [ 672.725313][T15420] should_fail_ex+0x394/0x4c0 [ 672.730066][T15420] should_failslab+0x9/0x20 [ 672.734635][T15420] slab_pre_alloc_hook+0x59/0x300 [ 672.739724][T15420] ? sctp_add_bind_addr+0x8c/0x360 [ 672.744886][T15420] __kmem_cache_alloc_node+0x53/0x250 [ 672.750313][T15420] ? sctp_add_bind_addr+0x8c/0x360 [ 672.755475][T15420] kmalloc_trace+0x2a/0xe0 [ 672.759951][T15420] sctp_add_bind_addr+0x8c/0x360 [ 672.764962][T15420] sctp_copy_local_addr_list+0x31b/0x4e0 [ 672.770663][T15420] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 672.776450][T15420] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 672.782651][T15420] ? sctp_v4_is_any+0x35/0x60 [ 672.787446][T15420] ? sctp_copy_one_addr+0x8c/0x350 [ 672.792636][T15420] sctp_bind_addr_copy+0xb3/0x3c0 [ 672.797720][T15420] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 672.804107][T15420] sctp_connect_new_asoc+0x2f9/0x6a0 [ 672.809435][T15420] ? __sctp_connect+0xd80/0xd80 [ 672.814352][T15420] ? __local_bh_enable_ip+0x13a/0x1c0 [ 672.819787][T15420] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 672.825402][T15420] ? security_sctp_bind_connect+0x89/0xb0 [ 672.831194][T15420] sctp_sendmsg+0x1519/0x27b0 [ 672.835954][T15420] ? sctp_getsockopt+0xb60/0xb60 [ 672.840971][T15420] ? aa_af_perm+0x330/0x330 [ 672.845536][T15420] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 672.852018][T15420] ? sock_rps_record_flow+0x19/0x3f0 [ 672.857372][T15420] ? inet_sendmsg+0xce/0x2a0 [ 672.862024][T15420] ? inet_send_prepare+0x250/0x250 [ 672.867198][T15420] ____sys_sendmsg+0x61b/0x980 [ 672.872036][T15420] ? __asan_memset+0x22/0x40 [ 672.876690][T15420] ? __sys_sendmsg_sock+0x30/0x30 [ 672.881771][T15420] ? __import_iovec+0x5f2/0x850 [ 672.886700][T15420] ? import_iovec+0x73/0xa0 [ 672.891269][T15420] ___sys_sendmsg+0x2a6/0x360 [ 672.896020][T15420] ? __sys_sendmsg+0x2b0/0x2b0 [ 672.900860][T15420] ? trace_call_bpf+0xc3/0x6c0 [ 672.905698][T15420] __se_sys_sendmsg+0x1d0/0x2c0 [ 672.910605][T15420] ? perf_trace_preemptirq_template+0x269/0x330 [ 672.916904][T15420] ? __x64_sys_sendmsg+0x80/0x80 [ 672.921912][T15420] ? lockdep_hardirqs_on+0x98/0x150 [ 672.927179][T15420] do_syscall_64+0x55/0xb0 [ 672.931651][T15420] ? clear_bhb_loop+0x40/0x90 [ 672.936378][T15420] ? clear_bhb_loop+0x40/0x90 [ 672.941110][T15420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.947051][T15420] RIP: 0033:0x7f5fd979e0d9 [ 672.951516][T15420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.971171][T15420] RSP: 002b:00007f5fda6a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.979665][T15420] RAX: ffffffffffffffda RBX: 00007f5fd9a25fa0 RCX: 00007f5fd979e0d9 [ 672.988037][T15420] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 672.996065][T15420] RBP: 00007f5fda6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 673.004100][T15420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 673.012115][T15420] R13: 00007f5fd9a26038 R14: 00007f5fd9a25fa0 R15: 00007ffe277f8648 [ 673.020194][T15420] [ 673.029004][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 673.972651][T15441] netlink: 'syz.3.3330': attribute type 2 has an invalid length. [ 673.982179][T15441] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3330'. [ 674.388612][T15445] netlink: 'syz.2.3331': attribute type 1 has an invalid length. [ 674.396631][T15445] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3331'. [ 674.526847][T15450] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3332'. [ 674.536548][T15450] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 674.547774][T15450] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 678.195387][T15462] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3339'. [ 679.211709][T15485] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3346'. [ 680.883943][T15485] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3346'. [ 680.893701][T15490] netlink: 'syz.0.3348': attribute type 2 has an invalid length. [ 680.918695][T15490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3348'. [ 681.993299][T15519] netlink: 'syz.1.3357': attribute type 1 has an invalid length. [ 682.010389][T15519] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3357'. [ 682.478547][T15530] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3360'. [ 682.508616][T15530] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 682.517890][T15530] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 682.545211][T15523] netlink: 'syz.3.3359': attribute type 2 has an invalid length. [ 682.569429][T15523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3359'. [ 684.103287][T15560] netlink: 668 bytes leftover after parsing attributes in process `syz.3.3369'. [ 684.135634][T15560] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 684.144671][T15560] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 684.377015][T15566] netlink: 'syz.0.3371': attribute type 1 has an invalid length. [ 684.385242][T15566] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3371'. [ 685.128350][T15571] netlink: 'syz.1.3373': attribute type 2 has an invalid length. [ 685.147504][T15571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3373'. [ 686.026351][T15593] netlink: 668 bytes leftover after parsing attributes in process `syz.1.3380'. [ 686.107773][T15593] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 686.178490][T15593] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 686.639155][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.647276][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.109576][T15613] netlink: 'syz.0.3386': attribute type 1 has an invalid length. [ 688.117638][T15613] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3386'. [ 688.153353][T15614] netlink: 'syz.2.3385': attribute type 2 has an invalid length. [ 688.188895][T15614] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3385'. [ 689.027990][T15627] netlink: 668 bytes leftover after parsing attributes in process `syz.3.3390'. [ 689.078973][T15627] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 689.109736][T15627] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 689.646585][T15639] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3393'. [ 690.119298][T15653] netlink: 'syz.2.3398': attribute type 1 has an invalid length. [ 690.143301][T15653] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3398'. [ 690.211232][T15648] netlink: 'syz.1.3397': attribute type 2 has an invalid length. [ 690.230235][T15648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3397'. [ 691.347894][T15674] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3406'. [ 691.379927][T15674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.397782][T15675] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3405'. [ 691.411638][T15675] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 691.420855][T15675] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 691.544444][T15674] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.3406'. [ 693.106779][T15690] netlink: 'syz.3.3411': attribute type 2 has an invalid length. [ 693.128386][T15690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3411'. [ 693.364503][T15704] netlink: 'syz.3.3415': attribute type 1 has an invalid length. [ 693.384714][T15704] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3415'. [ 693.793712][T15712] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3416'. [ 693.832334][T15712] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 693.869084][T15712] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 695.299533][T15727] netlink: 'syz.2.3424': attribute type 2 has an invalid length. [ 695.310411][T15727] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3424'. [ 695.672487][T15742] netlink: 'syz.1.3429': attribute type 1 has an invalid length. [ 695.683518][T15742] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3429'. [ 696.223008][T15750] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3431'. [ 696.287467][T15750] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 696.387494][T15750] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 697.118543][T15759] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:ff8d:0023 with DS=0x3f [ 697.736233][T15763] netlink: 'syz.3.3436': attribute type 2 has an invalid length. [ 697.745891][T15763] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3436'. [ 698.057479][T15773] netlink: 'syz.3.3440': attribute type 1 has an invalid length. [ 698.065793][T15773] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3440'. [ 699.789635][T15802] netlink: 'syz.3.3446': attribute type 10 has an invalid length. [ 700.795349][T15806] netlink: 'syz.0.3449': attribute type 2 has an invalid length. [ 700.805556][T15806] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3449'. [ 700.965559][T15823] netlink: 'syz.0.3454': attribute type 1 has an invalid length. [ 700.973733][T15823] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3454'. [ 702.179400][T15836] FAULT_INJECTION: forcing a failure. [ 702.179400][T15836] name failslab, interval 1, probability 0, space 0, times 0 [ 702.226545][T15836] CPU: 0 PID: 15836 Comm: syz.1.3457 Not tainted syzkaller #0 [ 702.234101][T15836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 702.244211][T15836] Call Trace: [ 702.247536][T15836] [ 702.250514][T15836] dump_stack_lvl+0x18c/0x250 [ 702.255249][T15836] ? show_regs_print_info+0x20/0x20 [ 702.260503][T15836] ? load_image+0x420/0x420 [ 702.265069][T15836] ? __might_sleep+0xe0/0xe0 [ 702.269710][T15836] ? __lock_acquire+0x7d80/0x7d80 [ 702.274796][T15836] should_fail_ex+0x394/0x4c0 [ 702.279540][T15836] should_failslab+0x9/0x20 [ 702.284103][T15836] slab_pre_alloc_hook+0x59/0x300 [ 702.289194][T15836] ? sk_prot_alloc+0xe7/0x210 [ 702.293929][T15836] ? sk_prot_alloc+0xe7/0x210 [ 702.298685][T15836] __kmem_cache_alloc_node+0x53/0x250 [ 702.304118][T15836] ? sk_prot_alloc+0xe7/0x210 [ 702.308859][T15836] __kmalloc+0xa7/0x240 [ 702.313084][T15836] sk_prot_alloc+0xe7/0x210 [ 702.317649][T15836] ? sk_alloc+0x24/0x350 [ 702.321959][T15836] sk_alloc+0x3a/0x350 [ 702.326088][T15836] ? bpf_ctx_init+0x154/0x190 [ 702.330826][T15836] bpf_prog_test_run_skb+0x371/0x18f0 [ 702.336267][T15836] ? __fget_files+0x28/0x460 [ 702.340920][T15836] ? __fget_files+0x3fc/0x460 [ 702.345664][T15836] ? cpu_online+0x60/0x60 [ 702.350047][T15836] bpf_prog_test_run+0x31f/0x390 [ 702.355037][T15836] __sys_bpf+0x49d/0x890 [ 702.359337][T15836] ? bpf_link_show_fdinfo+0x390/0x390 [ 702.364775][T15836] ? lock_chain_count+0x20/0x20 [ 702.369699][T15836] __x64_sys_bpf+0x7c/0x90 [ 702.374173][T15836] do_syscall_64+0x55/0xb0 [ 702.378645][T15836] ? clear_bhb_loop+0x40/0x90 [ 702.383379][T15836] ? clear_bhb_loop+0x40/0x90 [ 702.388128][T15836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 702.394079][T15836] RIP: 0033:0x7f5fd979e0d9 [ 702.398536][T15836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.418201][T15836] RSP: 002b:00007f5fda6a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 702.426652][T15836] RAX: ffffffffffffffda RBX: 00007f5fd9a25fa0 RCX: 00007f5fd979e0d9 [ 702.434659][T15836] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 702.442668][T15836] RBP: 00007f5fda6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 702.450702][T15836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.458726][T15836] R13: 00007f5fd9a26038 R14: 00007f5fd9a25fa0 R15: 00007ffe277f8648 [ 702.466767][T15836] [ 703.129394][T15849] netlink: 'syz.3.3462': attribute type 2 has an invalid length. [ 703.140111][T15849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3462'. [ 703.987276][T15863] netlink: 'syz.3.3465': attribute type 1 has an invalid length. [ 703.996531][T15863] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3465'. [ 704.220180][T15862] netlink: 'syz.0.3466': attribute type 2 has an invalid length. [ 704.233952][T15862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3466'. [ 705.713278][T15887] netlink: 'syz.1.3473': attribute type 2 has an invalid length. [ 705.754855][T15887] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3473'. [ 706.334188][T15900] netlink: 'syz.2.3477': attribute type 1 has an invalid length. [ 706.358998][T15900] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3477'. [ 706.776872][T15903] netlink: 'syz.3.3479': attribute type 2 has an invalid length. [ 706.808981][T15903] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3479'. [ 707.320550][T15928] netlink: 'syz.3.3487': attribute type 2 has an invalid length. [ 707.329683][T15928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3487'. [ 707.950458][T15944] netlink: 'syz.0.3494': attribute type 1 has an invalid length. [ 707.974936][T15944] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3494'. [ 708.161738][T15941] netlink: 'syz.2.3493': attribute type 2 has an invalid length. [ 708.196802][T15941] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3493'. [ 709.187353][T15960] netlink: 'syz.2.3497': attribute type 2 has an invalid length. [ 709.195688][T15960] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3497'. [ 710.101078][T15974] netlink: 'syz.3.3505': attribute type 2 has an invalid length. [ 710.109440][T15974] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3505'. [ 710.127621][T15980] netlink: 'syz.2.3506': attribute type 1 has an invalid length. [ 710.205350][T15980] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3506'. [ 711.540392][T15998] netlink: 'syz.3.3513': attribute type 2 has an invalid length. [ 711.548500][T15998] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3513'. [ 712.656720][T16009] netlink: 'syz.2.3516': attribute type 1 has an invalid length. [ 712.668862][T16009] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3516'. [ 712.817067][T16004] netlink: 'syz.3.3515': attribute type 2 has an invalid length. [ 712.825036][T16004] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3515'. [ 712.910057][T16013] netlink: 'syz.1.3518': attribute type 12 has an invalid length. [ 712.918459][T16013] netlink: 'syz.1.3518': attribute type 11 has an invalid length. [ 712.927068][T16013] netlink: 188816 bytes leftover after parsing attributes in process `syz.1.3518'. [ 714.159673][T16033] netlink: 'syz.2.3524': attribute type 2 has an invalid length. [ 714.167829][T16033] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3524'. [ 714.380467][T16049] netlink: 'syz.2.3529': attribute type 1 has an invalid length. [ 714.396736][T16049] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3529'. [ 714.461956][T16047] netlink: 'syz.3.3528': attribute type 2 has an invalid length. [ 714.475040][T16047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3528'. [ 717.632026][T16084] netlink: 'syz.1.3538': attribute type 2 has an invalid length. [ 717.668881][T16084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3538'. [ 717.741933][T16089] netlink: 'syz.3.3541': attribute type 1 has an invalid length. [ 717.768261][T16089] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3541'. [ 720.451843][T16121] sock: sock_set_timeout: `syz.2.3550' (pid 16121) tries to set negative timeout [ 720.480766][T16113] netlink: 'syz.1.3551': attribute type 2 has an invalid length. [ 720.501298][T16113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3551'. [ 720.701065][T16128] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 720.709419][T16128] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3556'. [ 721.975199][T16148] netlink: 'syz.0.3562': attribute type 29 has an invalid length. [ 721.985736][T16148] netlink: 'syz.0.3562': attribute type 29 has an invalid length. [ 722.340457][T16155] netlink: 'syz.3.3565': attribute type 2 has an invalid length. [ 722.348306][T16155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3565'. [ 722.471076][T16166] netlink: 'syz.0.3568': attribute type 1 has an invalid length. [ 722.529888][T16166] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3568'. [ 724.752053][T16187] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3575'. [ 724.796280][T16187] netlink: 'syz.1.3575': attribute type 28 has an invalid length. [ 724.804837][T16187] netlink: 'syz.1.3575': attribute type 29 has an invalid length. [ 724.815001][T16187] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3575'. [ 725.063208][T16196] netlink: 'syz.2.3579': attribute type 2 has an invalid length. [ 725.079272][T16196] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3579'. [ 725.333428][T16206] netlink: 'syz.2.3582': attribute type 1 has an invalid length. [ 725.360430][T16206] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3582'. [ 727.667270][T16227] netlink: 'syz.0.3590': attribute type 2 has an invalid length. [ 727.675398][T16227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3590'. [ 728.150554][T16237] netlink: 'syz.0.3593': attribute type 1 has an invalid length. [ 728.168937][T16237] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3593'. [ 728.686935][T16249] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3598'. [ 728.697222][T16249] openvswitch: netlink: Key type 29 is not supported [ 729.134485][T16257] netlink: 'syz.2.3602': attribute type 2 has an invalid length. [ 729.179495][T16257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3602'. [ 729.978465][T16283] netlink: 'syz.1.3610': attribute type 1 has an invalid length. [ 729.997884][T16283] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3610'. [ 730.179518][T16285] pim6reg1: entered promiscuous mode [ 730.208056][T16289] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3612'. [ 730.217697][T16289] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3612'. [ 730.229035][T16289] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3612'. [ 730.301149][T16291] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.3612'. [ 730.329401][T16291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3612'. [ 730.711638][T16296] netlink: 'syz.1.3615': attribute type 2 has an invalid length. [ 730.722884][T16296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3615'. [ 731.950720][T16321] netlink: 'syz.0.3623': attribute type 1 has an invalid length. [ 731.958555][T16321] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3623'. [ 732.667329][T16332] netlink: 'syz.3.3628': attribute type 2 has an invalid length. [ 732.676154][T16332] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3628'. [ 733.382886][T16361] netlink: 'syz.2.3637': attribute type 10 has an invalid length. [ 734.253208][T16371] netlink: 'syz.3.3641': attribute type 2 has an invalid length. [ 734.285333][T16371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3641'. [ 736.020377][T16413] netlink: 'syz.3.3658': attribute type 10 has an invalid length. [ 736.083963][T16407] netlink: 'syz.2.3657': attribute type 2 has an invalid length. [ 736.108875][T16407] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3657'. [ 737.517154][T16434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3666'. [ 737.930194][T16443] netlink: 'syz.1.3670': attribute type 2 has an invalid length. [ 737.938148][T16443] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3670'. [ 739.788307][T16481] netlink: 'syz.3.3682': attribute type 2 has an invalid length. [ 739.797351][T16481] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3682'. [ 740.095826][T16494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3687'. [ 741.271806][T16513] netlink: 'syz.1.3695': attribute type 9 has an invalid length. [ 741.284562][T16513] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.3695'. [ 741.304353][T16514] netlink: 'syz.1.3695': attribute type 10 has an invalid length. [ 741.319989][T16514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3695'. [ 741.336137][T16513] netlink: 'syz.1.3695': attribute type 9 has an invalid length. [ 741.358981][T16513] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.3695'. [ 741.390505][T16513] netlink: 'syz.1.3695': attribute type 9 has an invalid length. [ 741.418868][T16513] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.3695'. [ 741.445315][T16508] netlink: 'syz.2.3693': attribute type 2 has an invalid length. [ 741.457967][T16508] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3693'. [ 741.470294][T16513] netlink: 'syz.1.3695': attribute type 9 has an invalid length. [ 741.483075][T16513] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.3695'. [ 741.494191][T16519] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3696'. [ 741.504253][T16519] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3696'. [ 741.623853][T16519] bond0: (slave bond_slave_0): Releasing backup interface [ 741.653869][T16519] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 741.677744][T16513] netlink: 'syz.1.3695': attribute type 9 has an invalid length. [ 741.702476][T16513] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.3695'. [ 741.747519][T16513] netlink: 'syz.1.3695': attribute type 9 has an invalid length. [ 741.764995][T16513] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.3695'. [ 741.789848][T16513] netlink: 'syz.1.3695': attribute type 9 has an invalid length. [ 741.831308][T16513] netlink: 'syz.1.3695': attribute type 9 has an invalid length. [ 744.175461][T16573] dummy0: entered promiscuous mode [ 744.198263][T16573] dummy0: entered allmulticast mode [ 744.234598][T16573] bridge0: port 4(dummy0) entered blocking state [ 744.259097][T16573] bridge0: port 4(dummy0) entered disabled state [ 744.272289][T16573] bridge0: port 4(dummy0) entered blocking state [ 744.278939][T16573] bridge0: port 4(dummy0) entered forwarding state [ 746.995690][T16631] validate_nla: 60 callbacks suppressed [ 746.995712][T16631] netlink: 'syz.3.3736': attribute type 2 has an invalid length. [ 747.010346][T16631] __nla_validate_parse: 62 callbacks suppressed [ 747.010364][T16631] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3736'. [ 747.372081][T16640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3741'. [ 747.382907][T16640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3741'. [ 747.402572][T16640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3741'. [ 747.423571][T16640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3741'. [ 747.586916][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.596394][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.256693][T16661] netlink: 'syz.1.3748': attribute type 2 has an invalid length. [ 749.278267][T16661] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3748'. [ 751.129594][T16694] netlink: 'syz.2.3760': attribute type 2 has an invalid length. [ 751.137746][T16694] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3760'. [ 751.405470][T16701] FAULT_INJECTION: forcing a failure. [ 751.405470][T16701] name failslab, interval 1, probability 0, space 0, times 0 [ 751.437680][T16701] CPU: 0 PID: 16701 Comm: syz.2.3764 Not tainted syzkaller #0 [ 751.445232][T16701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 751.455322][T16701] Call Trace: [ 751.458633][T16701] [ 751.461606][T16701] dump_stack_lvl+0x18c/0x250 [ 751.466332][T16701] ? show_regs_print_info+0x20/0x20 [ 751.471560][T16701] ? load_image+0x420/0x420 [ 751.476122][T16701] ? __might_sleep+0xe0/0xe0 [ 751.480747][T16701] ? __lock_acquire+0x7d80/0x7d80 [ 751.485804][T16701] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 751.491474][T16701] should_fail_ex+0x394/0x4c0 [ 751.496195][T16701] should_failslab+0x9/0x20 [ 751.500753][T16701] slab_pre_alloc_hook+0x59/0x300 [ 751.505853][T16701] kmem_cache_alloc_node+0x5e/0x310 [ 751.511106][T16701] ? __alloc_skb+0x103/0x2c0 [ 751.515762][T16701] __alloc_skb+0x103/0x2c0 [ 751.520229][T16701] __ip_append_data+0x2acf/0x3bf0 [ 751.525305][T16701] ? raw_send_hdrinc+0x1150/0x1150 [ 751.530563][T16701] ? ip_setup_cork+0x840/0x840 [ 751.535358][T16701] ? ipv4_mtu+0x313/0x430 [ 751.539723][T16701] ? ip_setup_cork+0x527/0x840 [ 751.544516][T16701] ip_append_data+0x10d/0x180 [ 751.549228][T16701] ? raw_send_hdrinc+0x1150/0x1150 [ 751.554373][T16701] raw_sendmsg+0x155e/0x1ba0 [ 751.559059][T16701] ? compat_raw_ioctl+0x70/0x70 [ 751.563960][T16701] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 751.569992][T16701] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 751.576177][T16701] ? sock_rps_record_flow+0x19/0x3f0 [ 751.581502][T16701] ? inet_sendmsg+0x7e/0x2a0 [ 751.586131][T16701] ? inet_send_prepare+0x250/0x250 [ 751.591274][T16701] ____sys_sendmsg+0x61b/0x980 [ 751.596115][T16701] ? __asan_memset+0x22/0x40 [ 751.600739][T16701] ? __sys_sendmsg_sock+0x30/0x30 [ 751.605798][T16701] ? __import_iovec+0x3fa/0x850 [ 751.610712][T16701] ? import_iovec+0x73/0xa0 [ 751.615256][T16701] ___sys_sendmsg+0x2a6/0x360 [ 751.619988][T16701] ? __sys_sendmsg+0x2b0/0x2b0 [ 751.624913][T16701] ? ktime_get+0x7f/0x280 [ 751.629293][T16701] __se_sys_sendmsg+0x1d0/0x2c0 [ 751.634175][T16701] ? perf_trace_preemptirq_template+0x269/0x330 [ 751.640457][T16701] ? __x64_sys_sendmsg+0x80/0x80 [ 751.645434][T16701] ? lockdep_hardirqs_on+0x98/0x150 [ 751.650680][T16701] do_syscall_64+0x55/0xb0 [ 751.655122][T16701] ? clear_bhb_loop+0x40/0x90 [ 751.659828][T16701] ? clear_bhb_loop+0x40/0x90 [ 751.664538][T16701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 751.670474][T16701] RIP: 0033:0x7fbd03b9e0d9 [ 751.674927][T16701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.694560][T16701] RSP: 002b:00007fbd04af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.703001][T16701] RAX: ffffffffffffffda RBX: 00007fbd03e25fa0 RCX: 00007fbd03b9e0d9 [ 751.710995][T16701] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000f [ 751.718993][T16701] RBP: 00007fbd04af7090 R08: 0000000000000000 R09: 0000000000000000 [ 751.726986][T16701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.735011][T16701] R13: 00007fbd03e26038 R14: 00007fbd03e25fa0 R15: 00007ffd98a7ffe8 [ 751.743030][T16701] [ 753.029145][T16727] netlink: 'syz.0.3772': attribute type 2 has an invalid length. [ 753.037334][T16727] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3772'. [ 753.336724][T16729] netlink: 'syz.1.3773': attribute type 10 has an invalid length. [ 753.345807][T16729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3773'. [ 755.249259][T16758] netlink: 'syz.3.3786': attribute type 2 has an invalid length. [ 755.257258][T16758] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3786'. [ 757.018025][T16804] FAULT_INJECTION: forcing a failure. [ 757.018025][T16804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.034122][T16804] CPU: 0 PID: 16804 Comm: syz.2.3803 Not tainted syzkaller #0 [ 757.041659][T16804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.051763][T16804] Call Trace: [ 757.055079][T16804] [ 757.058054][T16804] dump_stack_lvl+0x18c/0x250 [ 757.062783][T16804] ? show_regs_print_info+0x20/0x20 [ 757.068019][T16804] ? load_image+0x420/0x420 [ 757.072581][T16804] ? __might_fault+0xaa/0x120 [ 757.077313][T16804] ? __lock_acquire+0x7d80/0x7d80 [ 757.082392][T16804] should_fail_ex+0x394/0x4c0 [ 757.087121][T16804] _copy_from_user+0x2f/0xe0 [ 757.091761][T16804] ___sys_sendmsg+0x1c7/0x360 [ 757.096499][T16804] ? get_pid_task+0x20/0x1e0 [ 757.101167][T16804] ? __sys_sendmsg+0x2b0/0x2b0 [ 757.105994][T16804] ? __lock_acquire+0x7d80/0x7d80 [ 757.111119][T16804] __se_sys_sendmsg+0x1d0/0x2c0 [ 757.116022][T16804] ? __x64_sys_sendmsg+0x80/0x80 [ 757.121039][T16804] ? lockdep_hardirqs_on+0x98/0x150 [ 757.126293][T16804] do_syscall_64+0x55/0xb0 [ 757.130756][T16804] ? clear_bhb_loop+0x40/0x90 [ 757.135480][T16804] ? clear_bhb_loop+0x40/0x90 [ 757.140204][T16804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.146136][T16804] RIP: 0033:0x7fbd03b9e0d9 [ 757.150593][T16804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.170257][T16804] RSP: 002b:00007fbd04af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.178731][T16804] RAX: ffffffffffffffda RBX: 00007fbd03e25fa0 RCX: 00007fbd03b9e0d9 [ 757.186749][T16804] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 757.194763][T16804] RBP: 00007fbd04af7090 R08: 0000000000000000 R09: 0000000000000000 [ 757.202771][T16804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.210788][T16804] R13: 00007fbd03e26038 R14: 00007fbd03e25fa0 R15: 00007ffd98a7ffe8 [ 757.218813][T16804] [ 757.469331][T16810] netlink: 'syz.0.3802': attribute type 2 has an invalid length. [ 757.477253][T16810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3802'. [ 759.178568][T16846] netlink: 'syz.3.3817': attribute type 10 has an invalid length. [ 759.187286][T16846] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3817'. [ 759.196973][T16844] netlink: 'syz.2.3818': attribute type 2 has an invalid length. [ 759.207056][T16844] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3818'. [ 759.221769][T16848] netlink: 'syz.3.3817': attribute type 10 has an invalid length. [ 759.230557][T16838] netlink: 'syz.3.3817': attribute type 10 has an invalid length. [ 759.256340][T16838] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3817'. [ 760.940895][T16872] netlink: 'syz.2.3829': attribute type 2 has an invalid length. [ 760.956604][T16872] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3829'. [ 761.396130][T16891] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3837'. [ 761.410861][T16891] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 762.368369][T16906] netlink: 'syz.3.3842': attribute type 2 has an invalid length. [ 762.376768][T16906] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3842'. [ 763.141348][T16921] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3847'. [ 763.209443][T16921] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3847'. [ 763.604859][T16921] bond0: (slave bond_slave_0): Releasing backup interface [ 763.656235][T16921] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 764.382879][T16944] netlink: 'syz.3.3854': attribute type 2 has an invalid length. [ 764.391012][T16944] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3854'. [ 766.761990][T16995] netlink: 'syz.1.3870': attribute type 2 has an invalid length. [ 766.793093][T16995] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3870'. [ 770.879171][T17035] netlink: 'syz.1.3884': attribute type 2 has an invalid length. [ 770.887280][T17035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3884'. [ 773.249877][T17075] netlink: 'syz.2.3899': attribute type 2 has an invalid length. [ 773.288326][T17075] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3899'. [ 773.848189][T17085] netlink: 'syz.3.3902': attribute type 21 has an invalid length. [ 773.856345][T17085] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3902'. [ 773.865595][T17085] netlink: 'syz.3.3902': attribute type 4 has an invalid length. [ 774.192457][T17094] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.3906'. [ 775.339566][T17113] netlink: 'syz.0.3913': attribute type 2 has an invalid length. [ 775.347713][T17113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3913'. [ 776.580607][T17142] pim6reg1: tun_chr_ioctl cmd 1074025673 [ 776.699656][T17146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3924'. [ 776.712663][T17146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3924'. [ 776.737993][T17146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3924'. [ 776.962562][T17148] netlink: 'syz.3.3925': attribute type 2 has an invalid length. [ 776.971109][T17148] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3925'. [ 779.586387][T17189] netlink: 'syz.3.3940': attribute type 2 has an invalid length. [ 779.594811][T17189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3940'. [ 782.273167][T17233] netlink: 'syz.1.3956': attribute type 2 has an invalid length. [ 782.332956][T17233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3956'. [ 784.291222][T17268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3969'. [ 784.408785][T17268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3969'. [ 784.510238][T17268] netlink: 'syz.1.3969': attribute type 1 has an invalid length. [ 784.565910][T17268] netlink: 'syz.1.3969': attribute type 4 has an invalid length. [ 784.616594][T17268] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3969'. [ 784.823043][T17270] netlink: 'syz.2.3970': attribute type 2 has an invalid length. [ 784.839002][T17270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3970'. [ 786.439278][T17308] FAULT_INJECTION: forcing a failure. [ 786.439278][T17308] name failslab, interval 1, probability 0, space 0, times 0 [ 786.456292][T17308] CPU: 0 PID: 17308 Comm: syz.1.3983 Not tainted syzkaller #0 [ 786.463855][T17308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 786.473957][T17308] Call Trace: [ 786.477279][T17308] [ 786.480263][T17308] dump_stack_lvl+0x18c/0x250 [ 786.485020][T17308] ? show_regs_print_info+0x20/0x20 [ 786.490275][T17308] ? load_image+0x420/0x420 [ 786.494850][T17308] ? __might_sleep+0xe0/0xe0 [ 786.499526][T17308] ? __lock_acquire+0x7d80/0x7d80 [ 786.504623][T17308] should_fail_ex+0x394/0x4c0 [ 786.509367][T17308] should_failslab+0x9/0x20 [ 786.513935][T17308] slab_pre_alloc_hook+0x59/0x300 [ 786.519063][T17308] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 786.524419][T17308] __kmem_cache_alloc_node+0x53/0x250 [ 786.529855][T17308] ? __asan_memset+0x22/0x40 [ 786.534515][T17308] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 786.539877][T17308] kmalloc_trace+0x2a/0xe0 [ 786.544372][T17308] __xdp_reg_mem_model+0x1e3/0x5a0 [ 786.549558][T17308] ? kvmalloc_node+0x70/0x180 [ 786.554296][T17308] ? kvmalloc_node+0x70/0x180 [ 786.559049][T17308] ? xdp_reg_mem_model+0x40/0x40 [ 786.564067][T17308] xdp_reg_mem_model+0x22/0x40 [ 786.568904][T17308] bpf_test_run_xdp_live+0x262/0x1b30 [ 786.574362][T17308] ? 0xffffffffa0004740 [ 786.578581][T17308] ? 0xffffffffa0004740 [ 786.582787][T17308] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 786.588761][T17308] ? xdp_convert_md_to_buff+0x330/0x330 [ 786.594412][T17308] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 786.600731][T17308] ? _copy_from_user+0xa5/0xe0 [ 786.605560][T17308] ? bpf_test_init+0x119/0x140 [ 786.610395][T17308] ? xdp_convert_md_to_buff+0x5b/0x330 [ 786.615908][T17308] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 786.621347][T17308] ? __lock_acquire+0x7d80/0x7d80 [ 786.626448][T17308] ? dev_put+0x80/0x80 [ 786.630595][T17308] ? dev_put+0x80/0x80 [ 786.634719][T17308] bpf_prog_test_run+0x31f/0x390 [ 786.639717][T17308] __sys_bpf+0x49d/0x890 [ 786.644014][T17308] ? bpf_link_show_fdinfo+0x390/0x390 [ 786.649458][T17308] ? lock_chain_count+0x20/0x20 [ 786.654373][T17308] __x64_sys_bpf+0x7c/0x90 [ 786.658844][T17308] do_syscall_64+0x55/0xb0 [ 786.663325][T17308] ? clear_bhb_loop+0x40/0x90 [ 786.668061][T17308] ? clear_bhb_loop+0x40/0x90 [ 786.672792][T17308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.678739][T17308] RIP: 0033:0x7f5fd979e0d9 [ 786.683206][T17308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.702877][T17308] RSP: 002b:00007f5fda6a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 786.711350][T17308] RAX: ffffffffffffffda RBX: 00007f5fd9a25fa0 RCX: 00007f5fd979e0d9 [ 786.719366][T17308] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 786.727431][T17308] RBP: 00007f5fda6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 786.735472][T17308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.743504][T17308] R13: 00007f5fd9a26038 R14: 00007f5fd9a25fa0 R15: 00007ffe277f8648 [ 786.751564][T17308] [ 786.962960][T17314] netlink: 'syz.2.3985': attribute type 2 has an invalid length. [ 786.983202][T17314] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3985'. [ 787.800746][T17327] IPv6: Can't replace route, no match found [ 788.829339][T17358] netlink: 'syz.2.3999': attribute type 2 has an invalid length. [ 788.837358][T17358] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3999'. [ 790.802509][T17393] netlink: 'syz.3.4013': attribute type 2 has an invalid length. [ 790.811097][T17393] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4013'. [ 791.677277][T17404] FAULT_INJECTION: forcing a failure. [ 791.677277][T17404] name failslab, interval 1, probability 0, space 0, times 0 [ 791.755621][T17404] CPU: 1 PID: 17404 Comm: syz.2.4017 Not tainted syzkaller #0 [ 791.763191][T17404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 791.773310][T17404] Call Trace: [ 791.776641][T17404] [ 791.779614][T17404] dump_stack_lvl+0x18c/0x250 [ 791.784357][T17404] ? show_regs_print_info+0x20/0x20 [ 791.789625][T17404] ? load_image+0x420/0x420 [ 791.794202][T17404] ? __might_sleep+0xe0/0xe0 [ 791.798852][T17404] ? __lock_acquire+0x7d80/0x7d80 [ 791.803939][T17404] should_fail_ex+0x394/0x4c0 [ 791.808690][T17404] should_failslab+0x9/0x20 [ 791.813264][T17404] slab_pre_alloc_hook+0x59/0x300 [ 791.816495][T17410] ------------[ cut here ]------------ [ 791.818349][T17404] kmem_cache_alloc+0x5a/0x2c0 [ 791.824147][T17410] WARNING: CPU: 0 PID: 17410 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 791.828624][T17404] ? __kernfs_new_node+0xe5/0x7f0 [ 791.828664][T17404] __kernfs_new_node+0xe5/0x7f0 [ 791.828702][T17404] ? kernfs_new_node+0x260/0x260 [ 791.828743][T17404] ? up_write+0x1be/0x410 [ 791.828770][T17404] kernfs_new_node+0x14c/0x260 [ 791.838502][T17410] Modules linked in: [ 791.843539][T17404] __kernfs_create_file+0x4b/0x2e0 [ 791.843567][T17404] sysfs_add_file_mode_ns+0x237/0x2f0 [ 791.848433][T17410] [ 791.848442][T17410] CPU: 0 PID: 17410 Comm: syz.1.4019 Not tainted syzkaller #0 [ 791.848463][T17410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 791.853416][T17404] internal_create_group+0x431/0xd10 [ 791.853450][T17404] ? kernfs_add_one+0x149/0x6b0 [ 791.853490][T17404] ? sysfs_create_group+0x20/0x20 [ 791.853515][T17404] ? up_write+0x1be/0x410 [ 791.853543][T17404] sysfs_create_groups+0x59/0x120 [ 791.857895][T17410] RIP: 0010:perf_pending_task+0x357/0x480 [ 791.862670][T17404] device_add_attrs+0xdf/0x830 [ 791.862703][T17404] ? device_add_class_symlinks+0x240/0x240 [ 791.862735][T17404] ? device_add_class_symlinks+0x21f/0x240 [ 791.862763][T17404] device_add+0x51a/0xc40 [ 791.862792][T17404] netdev_register_kobject+0x188/0x320 [ 791.862824][T17404] register_netdevice+0x12aa/0x1ba0 [ 791.862864][T17404] ? kvmalloc_node+0x70/0x180 [ 791.866772][T17410] Code: e8 ae c8 d5 ff 84 db 75 10 e8 15 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 c6 d5 ff e8 10 f1 4e ff eb e9 e8 f9 c5 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 791.871899][T17404] ? netif_stacked_transfer_operstate+0x210/0x210 [ 791.871930][T17404] ? __asan_memset+0x22/0x40 [ 791.871958][T17404] ? alloc_netdev_mqs+0xba3/0x1040 [ 791.877351][T17410] RSP: 0018:ffffc9000357f9c8 EFLAGS: 00010293 [ 791.879703][T17404] ? __asan_memcpy+0x40/0x70 [ 791.879739][T17404] ? __ip_tunnel_create+0x386/0x4d0 [ 791.879769][T17404] __ip_tunnel_create+0x3bc/0x4d0 [ 791.879797][T17404] ? ip_tunnel_init_net+0x7c0/0x7c0 [ 791.879821][T17404] ? security_capable+0x89/0xb0 [ 791.887296][T17410] [ 791.887305][T17410] RAX: ffffffff81b1ac27 RBX: ffff8880213828f8 RCX: ffff888027031e00 [ 791.897380][T17404] ip_tunnel_ctl+0xc36/0x1910 [ 791.897420][T17404] vti_tunnel_ctl+0x1f9/0x390 [ 791.897455][T17404] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 791.897478][T17404] ? dev_ioctl+0x83c/0x1140 [ 791.902849][T17410] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 791.907622][T17404] ? ip_tunnel_update+0xae0/0xae0 [ 791.913815][T17410] RBP: ffff8880213826b8 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 791.917006][T17404] ? dev_ifsioc+0x957/0xc40 [ 791.922170][T17410] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff888027031e00 [ 791.927759][T17404] dev_ioctl+0x84c/0x1140 [ 791.932863][T17410] R13: ffff888021cfad30 R14: 0000000000000000 R15: 1ffff110042704d7 [ 791.938361][T17404] sock_ioctl+0x74c/0x7e0 [ 791.944382][T17410] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 791.948513][T17404] ? sock_poll+0x3e0/0x3e0 [ 791.954208][T17410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 791.959224][T17404] ? bpf_lsm_file_ioctl+0x9/0x10 [ 791.959252][T17404] ? security_file_ioctl+0x80/0xa0 [ 791.963948][T17410] CR2: 0000000000000000 CR3: 000000001d3ac000 CR4: 00000000003506f0 [ 791.983573][T17404] ? sock_poll+0x3e0/0x3e0 [ 791.983605][T17404] __se_sys_ioctl+0xfd/0x170 [ 791.983639][T17404] do_syscall_64+0x55/0xb0 [ 791.983663][T17404] ? clear_bhb_loop+0x40/0x90 [ 791.990185][T17410] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 791.994699][T17404] ? clear_bhb_loop+0x40/0x90 [ 792.000032][T17410] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 792.005903][T17404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.010714][T17410] Call Trace: [ 792.015708][T17404] RIP: 0033:0x7fbd03b9e0d9 [ 792.015732][T17404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.015750][T17404] RSP: 002b:00007fbd04af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 792.015773][T17404] RAX: ffffffffffffffda RBX: 00007fbd03e25fa0 RCX: 00007fbd03b9e0d9 [ 792.015789][T17404] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 792.015804][T17404] RBP: 00007fbd04af7090 R08: 0000000000000000 R09: 0000000000000000 [ 792.015817][T17404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 792.015829][T17404] R13: 00007fbd03e26038 R14: 00007fbd03e25fa0 R15: 00007ffd98a7ffe8 [ 792.015863][T17404] [ 792.276721][T17410] [ 792.280894][T17410] task_work_run+0x1d4/0x260 [ 792.285593][T17410] ? task_work_cancel+0x220/0x220 [ 792.290972][T17410] do_exit+0x986/0x2530 [ 792.295228][T17410] ? put_task_struct+0xc0/0xc0 [ 792.300174][T17410] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 792.306235][T17410] ? get_signal+0x100e/0x1390 [ 792.311071][T17410] ? lock_chain_count+0x20/0x20 [ 792.315999][T17410] ? _raw_spin_lock_irq+0xbb/0xf0 [ 792.321526][T17410] do_group_exit+0x22d/0x2f0 [ 792.326210][T17410] ? lockdep_hardirqs_on+0x98/0x150 [ 792.331559][T17410] get_signal+0x12a6/0x1390 [ 792.336163][T17410] arch_do_signal_or_restart+0xc2/0x7b0 [ 792.341906][T17410] ? get_sigframe_size+0x20/0x20 [ 792.346952][T17410] ? exit_to_user_mode_loop+0x3b/0x110 [ 792.352606][T17410] exit_to_user_mode_loop+0x70/0x110 [ 792.357977][T17410] exit_to_user_mode_prepare+0xee/0x180 [ 792.363850][T17410] syscall_exit_to_user_mode+0x1a/0x50 [ 792.369475][T17410] do_syscall_64+0x61/0xb0 [ 792.373961][T17410] ? clear_bhb_loop+0x40/0x90 [ 792.378799][T17410] ? clear_bhb_loop+0x40/0x90 [ 792.383558][T17410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.389590][T17410] RIP: 0033:0x7f5fd979e0d9 [ 792.394069][T17410] Code: Unable to access opcode bytes at 0x7f5fd979e0af. [ 792.401328][T17410] RSP: 002b:00007f5fda665028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 792.409876][T17410] RAX: 000000000000002f RBX: 00007f5fd9a26180 RCX: 00007f5fd979e0d9 [ 792.417999][T17410] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 792.426473][T17410] RBP: 00007f5fd9835024 R08: 0000000000000000 R09: 0000000000000000 [ 792.434660][T17410] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 792.442810][T17410] R13: 00007f5fd9a26218 R14: 00007f5fd9a26180 R15: 00007ffe277f8648 [ 792.450955][T17410] [ 792.454041][T17410] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 792.461377][T17410] CPU: 0 PID: 17410 Comm: syz.1.4019 Not tainted syzkaller #0 [ 792.468893][T17410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 792.479000][T17410] Call Trace: [ 792.482332][T17410] [ 792.485323][T17410] dump_stack_lvl+0x18c/0x250 [ 792.490089][T17410] ? show_regs_print_info+0x20/0x20 [ 792.495376][T17410] ? load_image+0x420/0x420 [ 792.499966][T17410] panic+0x2ca/0x720 [ 792.503939][T17410] ? bpf_jit_dump+0xd0/0xd0 [ 792.508533][T17410] __warn+0x2e0/0x470 [ 792.512582][T17410] ? perf_pending_task+0x357/0x480 [ 792.517783][T17410] ? perf_pending_task+0x357/0x480 [ 792.522966][T17410] report_bug+0x2be/0x4f0 [ 792.527371][T17410] ? perf_pending_task+0x357/0x480 [ 792.532566][T17410] ? perf_pending_task+0x357/0x480 [ 792.537754][T17410] ? perf_pending_task+0x359/0x480 [ 792.542940][T17410] handle_bug+0xcf/0x120 [ 792.547248][T17410] exc_invalid_op+0x1a/0x50 [ 792.551824][T17410] asm_exc_invalid_op+0x1a/0x20 [ 792.556730][T17410] RIP: 0010:perf_pending_task+0x357/0x480 [ 792.562515][T17410] Code: e8 ae c8 d5 ff 84 db 75 10 e8 15 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 c6 d5 ff e8 10 f1 4e ff eb e9 e8 f9 c5 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 792.582177][T17410] RSP: 0018:ffffc9000357f9c8 EFLAGS: 00010293 [ 792.588320][T17410] RAX: ffffffff81b1ac27 RBX: ffff8880213828f8 RCX: ffff888027031e00 [ 792.596355][T17410] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 792.604397][T17410] RBP: ffff8880213826b8 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 792.612424][T17410] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff888027031e00 [ 792.620453][T17410] R13: ffff888021cfad30 R14: 0000000000000000 R15: 1ffff110042704d7 [ 792.628489][T17410] ? perf_pending_task+0x357/0x480 [ 792.633695][T17410] ? perf_pending_task+0x357/0x480 [ 792.638879][T17410] task_work_run+0x1d4/0x260 [ 792.643548][T17410] ? task_work_cancel+0x220/0x220 [ 792.648656][T17410] do_exit+0x986/0x2530 [ 792.652885][T17410] ? put_task_struct+0xc0/0xc0 [ 792.657726][T17410] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 792.663783][T17410] ? get_signal+0x100e/0x1390 [ 792.668522][T17410] ? lock_chain_count+0x20/0x20 [ 792.673435][T17410] ? _raw_spin_lock_irq+0xbb/0xf0 [ 792.678551][T17410] do_group_exit+0x22d/0x2f0 [ 792.683222][T17410] ? lockdep_hardirqs_on+0x98/0x150 [ 792.688504][T17410] get_signal+0x12a6/0x1390 [ 792.693090][T17410] arch_do_signal_or_restart+0xc2/0x7b0 [ 792.698758][T17410] ? get_sigframe_size+0x20/0x20 [ 792.703792][T17410] ? exit_to_user_mode_loop+0x3b/0x110 [ 792.709333][T17410] exit_to_user_mode_loop+0x70/0x110 [ 792.714691][T17410] exit_to_user_mode_prepare+0xee/0x180 [ 792.720322][T17410] syscall_exit_to_user_mode+0x1a/0x50 [ 792.725871][T17410] do_syscall_64+0x61/0xb0 [ 792.730352][T17410] ? clear_bhb_loop+0x40/0x90 [ 792.735088][T17410] ? clear_bhb_loop+0x40/0x90 [ 792.739837][T17410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.745793][T17410] RIP: 0033:0x7f5fd979e0d9 [ 792.750287][T17410] Code: Unable to access opcode bytes at 0x7f5fd979e0af. [ 792.757358][T17410] RSP: 002b:00007f5fda665028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 792.765863][T17410] RAX: 000000000000002f RBX: 00007f5fd9a26180 RCX: 00007f5fd979e0d9 [ 792.773901][T17410] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 792.781935][T17410] RBP: 00007f5fd9835024 R08: 0000000000000000 R09: 0000000000000000 [ 792.789998][T17410] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 792.798045][T17410] R13: 00007f5fd9a26218 R14: 00007f5fd9a26180 R15: 00007ffe277f8648 [ 792.806102][T17410] [ 792.809749][T17410] Kernel Offset: disabled [ 792.814092][T17410] Rebooting in 86400 seconds..