last executing test programs: 6.169692165s ago: executing program 1 (id=3541): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)}, 0x10) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) 5.36383591s ago: executing program 2 (id=3550): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc030100007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a009bb837dc6cc01e32efaec8c7e4ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b567c660dbbff", 0x89}], 0x1}, 0x40084) 5.013058091s ago: executing program 2 (id=3551): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) 4.580414815s ago: executing program 1 (id=3553): socket$kcm(0x29, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, 0x0, 0xffdd) 4.492957018s ago: executing program 2 (id=3554): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'nr0\x00', @multicast}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x0) socket$kcm(0x10, 0x7, 0x0) 4.41062169s ago: executing program 0 (id=3556): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.322687953s ago: executing program 4 (id=3557): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0xfffffffc}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) recvmsg(r2, &(0x7f0000001080)={&(0x7f0000000a80)=@in, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b00)=""/138, 0x2}, {&(0x7f0000000bc0)=""/251, 0xfb}, {&(0x7f0000000cc0)=""/192, 0xc0}, {&(0x7f0000000d80)=""/85, 0x55}, {&(0x7f0000000e00)=""/92, 0x5c}, {&(0x7f0000000e80)=""/50, 0x32}, {&(0x7f0000000ec0)}], 0x7, &(0x7f0000000f80)=""/220, 0xdc}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)=[{0x2, 0x5, 0xe, 0x5}, {0x2, 0x1, 0x8, 0xa}, {0x4, 0x5, 0x6, 0x9}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x5, 0x7, 0xfffff008}, {0x6, 0xfd, 0x6, 0xe5}]}) gettid() 4.202214517s ago: executing program 0 (id=3559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.956698475s ago: executing program 0 (id=3561): r0 = socket$kcm(0xa, 0x2, 0x88) (async, rerun: 64) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4556, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x3}, 0x340, 0x0, 0xfffffffe, 0x1, 0x5, 0x8, 0x103, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x1b) (async, rerun: 64) r2 = socket$kcm(0xa, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r3}) (async) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x20048005) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, 0x0) socketpair(0x1f, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a240, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r10 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) (async) setsockopt$sock_attach_bpf(r10, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) 3.944831855s ago: executing program 2 (id=3562): r0 = socket$kcm(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x100060, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @alu={0x4, 0x1, 0x0, 0xb, 0xa, 0xffffffffffffffcc, 0xfffffffffffffffc}]}, &(0x7f0000000740)='syzkaller\x00', 0x6b, 0x1d, &(0x7f0000000780)=""/29, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x5, 0xd32, 0x7}, 0x10, 0x298ef, 0xffffffffffffffff, 0x6, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x4, 0x5, 0xa, 0xa}, {0x5, 0x4, 0xd, 0x5}, {0x1, 0x3, 0x2}, {0x1, 0x2, 0x3}, {0x3, 0x5, 0x7, 0x5}, {0x5, 0x3, 0x6, 0x6}], 0x10, 0x5}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000580), 0x4) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r4, @ANYRES64], 0x0, 0x34, 0x0, 0x1}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000600)=ANY=[@ANYRESHEX=r5, @ANYRES16=r1], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0xa, 0x5}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0), 0x2, 0x0, 0x0, 0x900}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0xb, &(0x7f0000000000), 0xe) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x18, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000009000000185300000c000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r6], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x1b, r9, 0x8, &(0x7f0000000a00)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000010c0)=[{0x3, 0x5, 0x1006, 0xc}, {0x4, 0x2, 0x2, 0xa}], 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) r10 = socket$kcm(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r10, 0x6, 0xd, &(0x7f0000000000), 0xff7b) 3.879880957s ago: executing program 0 (id=3563): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x26}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_clone(0xa43c7506, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x28) socket$kcm(0x10, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x3d, 0x4, 0x7, 0x5}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x4, 0x6f4, &(0x7f0000000180)) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40107447, &(0x7f0000000180)) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000100"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9125b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x200, 0xc2ba, 0x4, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e1d, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000003a00), 0x20}, 0x400080e) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.483486019s ago: executing program 2 (id=3565): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000a00200bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 3.12905535s ago: executing program 2 (id=3566): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) sendmsg$kcm(r2, 0x0, 0x20008000) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x5601, 0x0, 0x0, 0x1, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x30001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x830d}, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) write$cgroup_devices(r1, 0x0, 0x5dc) 2.362705965s ago: executing program 3 (id=3571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.233022449s ago: executing program 3 (id=3572): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x108240, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x6}, 0x806, 0x0, 0x1, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000040)="19c4a67c7b3d6c9b351e27aa205a23918a", 0x0, &(0x7f00000001c0)="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", &(0x7f00000002c0)="e47721498e26c75f8fe1a73eb7511762e93e8302ad99fc029fdb9eab9a87b471f6e8b1674fb964cf337c2b76168bf630c11bea0d2293106a6e43e095e9c645b43cd49e4b27c67caf17dade8f775dd10d5ef0329b5ec02203c55a7bea7793984472364a97f2ba822083a3fc3bcc38d3b689d9727c95f38280", 0x9, r1}, 0x38) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0xf, 0x4, &(0x7f00000000c0)="3a95e6a95c01ebfe1e091ac0d74543", &(0x7f0000000100)=""/4, 0x5, 0x0, 0x1000, 0xb0, &(0x7f0000000680)="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", &(0x7f0000001680)="a85fd40c121ca5411e34d1507c9b888d1969b58cdd12421a2e9524065750a3dc264f134b8cc089db9f8af21f1813ba295f0d9a374ebe8f6d8bb3e65a4856d871b3d64f02edc6b0b22845c4753508d5e13f44538f02e2651a4e3ddf9317c3b69007df5d21f4d0d0a115626bc7b0d3c0f0af0b048e866d910a9d0993d2a705393a2edb8056acb3e1f72ee9905fcffcab7b546eaf402c1c3f01f72766e780cb1fd977e36fa5fa39eacbba02abd9e233fc75", 0x6}, 0x50) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000640)=0x1, 0x12) write$cgroup_int(r3, &(0x7f0000000080), 0x12) 2.154510151s ago: executing program 3 (id=3573): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0), 0x4) socket$kcm(0x11, 0xa, 0x300) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r3, &(0x7f0000000fc0)={&(0x7f00000008c0)=@hci={0x1f, 0x300, 0x2}, 0x80, 0x0}, 0x8041) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000b0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1.320620338s ago: executing program 1 (id=3574): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="66d4692a0a1b30e6f5d85a2d88a8e26808064568", 0x0, 0x1, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f0000001080)=""/203, 0x1b, 0xcb, 0x1, 0x2}, 0x28) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x31100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100, 0x0, 0x9, 0x0, 0xb, 0x4, 0x8, 0x0, 0x2, 0x0, 0x10000000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x0, 0x4201}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10002) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffffffffffffffb9) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000007c0)="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"/1305, 0x519}, {&(0x7f0000001b80)="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", 0x296}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}], 0x20}, 0x48080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) 1.279341259s ago: executing program 4 (id=3575): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x80, 0x0}, 0x4000080) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10090, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=""/4096, 0x1000}, 0x0) 1.149002593s ago: executing program 0 (id=3576): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x19, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xcd95}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @alu={0x4, 0x0, 0x8, 0x7, 0x4, 0xc}, @jmp={0x5, 0x0, 0xc, 0x9, 0x1, 0x18, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0xfff, 0x2d, &(0x7f00000002c0)=""/45, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x10, 0x7, 0xffffffff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x0, 0x1, 0x4, 0xa}, {0x3, 0x2, 0xd, 0x8}, {0x1, 0x2, 0x10, 0x6}, {0x4, 0x5, 0x7, 0x4}, {0x5, 0x1, 0x8, 0x2}], 0x10, 0x8a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000a00000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 1.148391693s ago: executing program 3 (id=3577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000502000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.055425786s ago: executing program 4 (id=3578): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000"], 0xfe33) 948.67563ms ago: executing program 3 (id=3579): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00000000000000410f000008000000f0220400", @ANYRES32, @ANYBLOB="0000000000000000000000191a002c4b93b1ec0000000000", @ANYRES32=0x0, @ANYRES32], 0x50) socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x22, 0x3, 0x0) socketpair(0x1d, 0xa, 0x2, &(0x7f0000000a80)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x100000, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x80044944, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0xfffffffffffffffe, 0x40, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$ITER_CREATE(0x21, 0x0, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000200)) 939.49653ms ago: executing program 4 (id=3580): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 676.218448ms ago: executing program 4 (id=3581): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x7, 0x0, 0x41fffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90324fc602f1a08000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ae000000620a00ff000000006100081900000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_devices(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) recvmsg$kcm(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10002) recvmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b40)=""/180, 0xb4}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/101, 0x65}], 0x3}, 0x0) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x5000000, 0x0, 0x0}, 0x30) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) 509.134683ms ago: executing program 1 (id=3582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 446.132495ms ago: executing program 1 (id=3583): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2000000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 2) 417.668786ms ago: executing program 3 (id=3584): socket$kcm(0x29, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, 0x0, 0xffdd) 53.144528ms ago: executing program 0 (id=3585): bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 52.619858ms ago: executing program 1 (id=3586): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x3, r2}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000006c0)={&(0x7f0000000340)="b4c3c89756bed064a61d7ecbfa60b4", &(0x7f0000000380)=""/155, &(0x7f0000000440)="93e90a554c7cf1d9991d0a7f766da0dacee07408b1fd8678531218c3e07d7405d7dda8a30c979f41f9f19b93d859c19dbb5fe47ea82ebb857038ce71515b5e76f1e34b85e03ce079b963fe23b18d93cbbf93f1", &(0x7f00000005c0)="4a9f6c68b2978ef369e6e61b53e5ca86683f0d4d675e83f7906e26deb5e12fe963fbb75b73fa473201b660829b2e12472c59bf6cd7ebafa9f25f26b166abd9dc79e842a8a54164a703e1e85bcb19a02e30abded6106023ca917a6b6ce974a6c5f4d406069c9ca47f7f6d549bce886dab90393e6b4e50cbe0a17722d4c92de556def1fff214db56d845c81b04ca476052d127ba258397033457affd76d62df189e16441cd506e5c05828eb8c341860d160c5dd917f9b68bd5f18aec01ed8ad6e477869b2a13f63beb3fc2af334773c3b40995997f00e85b506e752f18c6ddc540fbf52585573fe138e2b5519f", 0x81, r2}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)) 0s ago: executing program 4 (id=3587): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000304000000080000000d"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) kernel console output (not intermixed with test programs): : The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.241817][T12328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.252163][T12328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.264814][T12328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.275631][T12328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.318328][T12328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.340516][T12328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.353212][T12539] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2977'. [ 589.372082][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 589.383398][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.396534][T12328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.406034][T12328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.420960][T12328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.436101][T12328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.505194][T12548] netlink: 'syz.1.2980': attribute type 13 has an invalid length. [ 589.542317][T12548] syz_tun: refused to change device tx_queue_len [ 589.565642][T12548] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 589.586431][T12549] netlink: 'syz.1.2980': attribute type 10 has an invalid length. [ 589.685156][T12553] netlink: 'syz.4.2982': attribute type 10 has an invalid length. [ 589.708094][T12553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.761811][T12553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.822392][T12553] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 589.852651][T12556] FAULT_INJECTION: forcing a failure. [ 589.852651][T12556] name failslab, interval 1, probability 0, space 0, times 0 [ 589.892870][T12556] CPU: 0 PID: 12556 Comm: syz.0.2984 Not tainted syzkaller #0 [ 589.900477][T12556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.910569][T12556] Call Trace: [ 589.913884][T12556] [ 589.916849][T12556] dump_stack_lvl+0x188/0x24e [ 589.921569][T12556] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 589.927784][T12556] ? show_regs_print_info+0x12/0x12 [ 589.933104][T12556] ? load_image+0x400/0x400 [ 589.937659][T12556] should_fail_ex+0x399/0x4d0 [ 589.942370][T12556] should_failslab+0x5/0x20 [ 589.946902][T12556] slab_pre_alloc_hook+0x59/0x310 [ 589.951954][T12556] kmem_cache_alloc+0x56/0x2f0 [ 589.956733][T12556] ? __build_skb+0x2a/0x3c0 [ 589.961274][T12556] __build_skb+0x2a/0x3c0 [ 589.965628][T12556] build_skb+0x1e/0x230 [ 589.969800][T12556] bpf_prog_test_run_skb+0x37e/0x12a0 [ 589.975187][T12556] ? __fget_files+0x28/0x4b0 [ 589.979801][T12556] ? __fget_files+0x43d/0x4b0 [ 589.984514][T12556] ? cpu_online+0xa0/0xa0 [ 589.988864][T12556] bpf_prog_test_run+0x31e/0x390 [ 589.993833][T12556] __sys_bpf+0x62b/0x780 [ 589.998098][T12556] ? bpf_link_show_fdinfo+0x380/0x380 [ 590.003510][T12556] ? lock_chain_count+0x20/0x20 [ 590.008399][T12556] __x64_sys_bpf+0x78/0x90 [ 590.012840][T12556] do_syscall_64+0x4c/0xa0 [ 590.017281][T12556] ? clear_bhb_loop+0x60/0xb0 [ 590.021976][T12556] ? clear_bhb_loop+0x60/0xb0 [ 590.026676][T12556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.032588][T12556] RIP: 0033:0x7f7cb039ce59 [ 590.037014][T12556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.056634][T12556] RSP: 002b:00007f7cb124d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 590.065151][T12556] RAX: ffffffffffffffda RBX: 00007f7cb0615fa0 RCX: 00007f7cb039ce59 [ 590.073149][T12556] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 590.081143][T12556] RBP: 00007f7cb124d090 R08: 0000000000000000 R09: 0000000000000000 [ 590.089147][T12556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.097128][T12556] R13: 00007f7cb0616038 R14: 00007f7cb0615fa0 R15: 00007fff6bdc46e8 [ 590.105127][T12556] [ 590.145454][ T6959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.191693][ T6959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.208991][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 590.297411][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.305684][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.343296][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 590.524920][T12572] sctp: [Deprecated]: syz.3.2988 (pid 12572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 590.524920][T12572] Use struct sctp_sack_info instead [ 590.598457][T12576] __nla_validate_parse: 4 callbacks suppressed [ 590.598472][T12576] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.2989'. [ 590.662637][T12576] netlink: zone id is out of range [ 591.370754][T12588] FAULT_INJECTION: forcing a failure. [ 591.370754][T12588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.422027][T12588] CPU: 0 PID: 12588 Comm: syz.4.2993 Not tainted syzkaller #0 [ 591.429546][T12588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.439633][T12588] Call Trace: [ 591.442929][T12588] [ 591.445884][T12588] dump_stack_lvl+0x188/0x24e [ 591.450615][T12588] ? show_regs_print_info+0x12/0x12 [ 591.455859][T12588] ? load_image+0x400/0x400 [ 591.460409][T12588] ? __lock_acquire+0x7d10/0x7d10 [ 591.465477][T12588] ? snprintf+0xe5/0x140 [ 591.469743][T12588] should_fail_ex+0x399/0x4d0 [ 591.474446][T12588] _copy_to_user+0x2c/0x130 [ 591.478970][T12588] simple_read_from_buffer+0xe3/0x150 [ 591.484354][T12588] proc_fail_nth_read+0x1a6/0x220 [ 591.489407][T12588] ? proc_fault_inject_write+0x310/0x310 [ 591.495069][T12588] ? fsnotify_perm+0x248/0x550 [ 591.499849][T12588] ? proc_fault_inject_write+0x310/0x310 [ 591.505494][T12588] vfs_read+0x2de/0xa00 [ 591.509699][T12588] ? kernel_read+0x1e0/0x1e0 [ 591.514310][T12588] ? __fget_files+0x28/0x4b0 [ 591.518926][T12588] ? __fget_files+0x28/0x4b0 [ 591.523531][T12588] ? __fget_files+0x43d/0x4b0 [ 591.528231][T12588] ? __fdget_pos+0x2ae/0x360 [ 591.532836][T12588] ? ksys_read+0x71/0x250 [ 591.537202][T12588] ksys_read+0x14c/0x250 [ 591.541465][T12588] ? vfs_write+0xa30/0xa30 [ 591.545899][T12588] ? lockdep_hardirqs_on+0x94/0x140 [ 591.551124][T12588] do_syscall_64+0x4c/0xa0 [ 591.555575][T12588] ? clear_bhb_loop+0x60/0xb0 [ 591.560269][T12588] ? clear_bhb_loop+0x60/0xb0 [ 591.564970][T12588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.570887][T12588] RIP: 0033:0x7fdc7f55d68e [ 591.575320][T12588] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 591.594947][T12588] RSP: 002b:00007fdc804e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.603372][T12588] RAX: ffffffffffffffda RBX: 00007fdc804e46c0 RCX: 00007fdc7f55d68e [ 591.611358][T12588] RDX: 000000000000000f RSI: 00007fdc804e40a0 RDI: 0000000000000005 [ 591.619354][T12588] RBP: 00007fdc804e4090 R08: 0000000000000000 R09: 0000000000000000 [ 591.627338][T12588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.635316][T12588] R13: 00007fdc7f816038 R14: 00007fdc7f815fa0 R15: 00007fff39885608 [ 591.643306][T12588] [ 591.828939][T12592] FAULT_INJECTION: forcing a failure. [ 591.828939][T12592] name failslab, interval 1, probability 0, space 0, times 0 [ 591.841926][T12592] CPU: 1 PID: 12592 Comm: syz.3.2996 Not tainted syzkaller #0 [ 591.849404][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.859483][T12592] Call Trace: [ 591.862784][T12592] [ 591.865739][T12592] dump_stack_lvl+0x188/0x24e [ 591.870465][T12592] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 591.876226][T12592] ? show_regs_print_info+0x12/0x12 [ 591.881454][T12592] ? load_image+0x400/0x400 [ 591.886038][T12592] should_fail_ex+0x399/0x4d0 [ 591.890763][T12592] should_failslab+0x5/0x20 [ 591.895307][T12592] slab_pre_alloc_hook+0x59/0x310 [ 591.900374][T12592] ? ida_alloc_range+0x5e1/0x860 [ 591.905347][T12592] __kmem_cache_alloc_node+0x4f/0x260 [ 591.910783][T12592] ? ida_alloc_range+0x5e1/0x860 [ 591.915754][T12592] kmalloc_trace+0x26/0xe0 [ 591.920219][T12592] ida_alloc_range+0x5e1/0x860 [ 591.925031][T12592] ? __xdp_reg_mem_model+0x1f8/0x5c0 [ 591.930361][T12592] ? idr_replace+0x1a0/0x1a0 [ 591.934997][T12592] __xdp_reg_mem_model+0x214/0x5c0 [ 591.940144][T12592] ? kvmalloc_node+0x6c/0x180 [ 591.944878][T12592] ? xdp_reg_mem_model+0x30/0x30 [ 591.949860][T12592] xdp_reg_mem_model+0x1e/0x30 [ 591.954675][T12592] bpf_test_run_xdp_live+0x299/0x1a90 [ 591.960094][T12592] ? 0xffffffffa0004440 [ 591.964281][T12592] ? text_poke_copy+0x79/0x90 [ 591.968986][T12592] ? 0xffffffffa0004440 [ 591.973163][T12592] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 591.979095][T12592] ? 0xffffffffa0004440 [ 591.983278][T12592] ? xdp_convert_md_to_buff+0x330/0x330 [ 591.988891][T12592] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 591.995186][T12592] ? bpf_test_init+0x119/0x140 [ 591.999977][T12592] ? xdp_convert_md_to_buff+0x5b/0x330 [ 592.005508][T12592] bpf_prog_test_run_xdp+0x736/0xf10 [ 592.010850][T12592] ? dev_put+0x80/0x80 [ 592.014970][T12592] ? dev_put+0x80/0x80 [ 592.019069][T12592] bpf_prog_test_run+0x31e/0x390 [ 592.024050][T12592] __sys_bpf+0x62b/0x780 [ 592.028329][T12592] ? bpf_link_show_fdinfo+0x380/0x380 [ 592.033751][T12592] ? lock_chain_count+0x20/0x20 [ 592.038649][T12592] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 592.044672][T12592] __x64_sys_bpf+0x78/0x90 [ 592.049122][T12592] do_syscall_64+0x4c/0xa0 [ 592.053574][T12592] ? clear_bhb_loop+0x60/0xb0 [ 592.058288][T12592] ? clear_bhb_loop+0x60/0xb0 [ 592.061679][T12590] netlink: 'syz.0.2994': attribute type 13 has an invalid length. [ 592.062987][T12592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.076770][T12592] RIP: 0033:0x7f1d1a19ce59 [ 592.081230][T12592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.100869][T12592] RSP: 002b:00007f1d1b0d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.107526][T12590] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2994'. [ 592.109308][T12592] RAX: ffffffffffffffda RBX: 00007f1d1a415fa0 RCX: 00007f1d1a19ce59 [ 592.109326][T12592] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 592.109339][T12592] RBP: 00007f1d1b0d8090 R08: 0000000000000000 R09: 0000000000000000 [ 592.109351][T12592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.109363][T12592] R13: 00007f1d1a416038 R14: 00007f1d1a415fa0 R15: 00007ffff2e91c18 [ 592.109399][T12592] [ 592.172933][T12590] syz_tun: refused to change device tx_queue_len [ 592.212160][T12590] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 592.645964][T12331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.655364][T12331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 592.663483][T12331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 592.672820][T12331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 592.681360][T12331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 592.689245][T12331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 592.848428][T12594] netlink: 'syz.0.2994': attribute type 10 has an invalid length. [ 592.976130][T12604] netlink: 463 bytes leftover after parsing attributes in process `syz.3.2998'. [ 593.120706][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.303162][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.509388][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.542832][T12612] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3002'. [ 593.575805][T12619] netlink: 'syz.0.3003': attribute type 10 has an invalid length. [ 593.652039][ T41] team0: Port device netdevsim0 removed [ 593.684403][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.875605][T12624] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3006'. [ 594.183543][ T41] bridge0: port 3(ip6gretap0) entered disabled state [ 594.255713][ T41] device ip6gretap0 left promiscuous mode [ 594.268293][ T41] bridge0: port 3(ip6gretap0) entered disabled state [ 594.309598][T12599] chnl_net:caif_netlink_parms(): no params data found [ 594.363757][T12637] FAULT_INJECTION: forcing a failure. [ 594.363757][T12637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.384218][T12637] CPU: 0 PID: 12637 Comm: syz.2.3008 Not tainted syzkaller #0 [ 594.391714][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.401799][T12637] Call Trace: [ 594.405105][T12637] [ 594.408069][T12637] dump_stack_lvl+0x188/0x24e [ 594.412792][T12637] ? show_regs_print_info+0x12/0x12 [ 594.418042][T12637] ? load_image+0x400/0x400 [ 594.422594][T12637] ? __lock_acquire+0x7d10/0x7d10 [ 594.427664][T12637] should_fail_ex+0x399/0x4d0 [ 594.432370][T12637] strncpy_from_user+0x32/0x350 [ 594.437271][T12637] bpf_prog_load+0x1f3/0x1560 [ 594.441995][T12637] ? map_freeze+0x390/0x390 [ 594.446538][T12637] ? __might_fault+0xa6/0x120 [ 594.451294][T12637] ? __might_fault+0xa6/0x120 [ 594.456000][T12637] ? __might_fault+0xc2/0x120 [ 594.460706][T12637] ? __might_fault+0xa6/0x120 [ 594.465419][T12637] ? bpf_lsm_bpf+0x5/0x10 [ 594.469774][T12637] ? security_bpf+0x7a/0xa0 [ 594.474307][T12637] __sys_bpf+0x5b8/0x780 [ 594.478677][T12637] ? bpf_link_show_fdinfo+0x380/0x380 [ 594.484094][T12637] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 594.490388][T12637] __x64_sys_bpf+0x78/0x90 [ 594.494844][T12637] do_syscall_64+0x4c/0xa0 [ 594.499297][T12637] ? clear_bhb_loop+0x60/0xb0 [ 594.504019][T12637] ? clear_bhb_loop+0x60/0xb0 [ 594.508728][T12637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.514673][T12637] RIP: 0033:0x7fd7c3d9ce59 [ 594.519122][T12637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.538757][T12637] RSP: 002b:00007fd7c4c9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 594.547204][T12637] RAX: ffffffffffffffda RBX: 00007fd7c4015fa0 RCX: 00007fd7c3d9ce59 [ 594.555204][T12637] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 594.563206][T12637] RBP: 00007fd7c4c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 594.571226][T12637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.579232][T12637] R13: 00007fd7c4016038 R14: 00007fd7c4015fa0 R15: 00007ffeead4b408 [ 594.587248][T12637] [ 594.770083][T12644] netlink: 'syz.0.3009': attribute type 13 has an invalid length. [ 594.812734][T12644] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3009'. [ 594.830557][T12644] syz_tun: refused to change device tx_queue_len [ 594.837043][T12644] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 594.867581][T12331] Bluetooth: hci0: command 0x0409 tx timeout [ 594.953629][T12647] netlink: 'syz.0.3009': attribute type 10 has an invalid length. [ 595.231035][T12599] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.249951][T12599] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.321816][T12599] device bridge_slave_0 entered promiscuous mode [ 595.427613][T12666] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3015'. [ 595.453666][T12599] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.471953][T12599] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.483068][T12599] device bridge_slave_1 entered promiscuous mode [ 595.672603][T12667] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3016'. [ 595.713954][T12599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.755784][T12599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.826464][T12674] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3017'. [ 595.971332][T12599] team0: Port device team_slave_0 added [ 596.041652][T12599] team0: Port device team_slave_1 added [ 596.091800][T12683] netlink: 'syz.4.3018': attribute type 10 has an invalid length. [ 596.182125][T12599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.199654][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.254668][T12599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.713572][ T41] team0: Port device wlan1 removed [ 596.763587][T12599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.777761][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.804708][T12599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.947674][T12331] Bluetooth: hci0: command 0x041b tx timeout [ 597.040361][T12705] netlink: 'syz.4.3024': attribute type 11 has an invalid length. [ 597.127057][T12599] device hsr_slave_0 entered promiscuous mode [ 597.159738][T12599] device hsr_slave_1 entered promiscuous mode [ 597.194642][T12599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.222384][T12599] Cannot create hsr debugfs directory [ 597.234958][T12711] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.3025'. [ 597.322988][T12715] netlink: 'syz.3.3025': attribute type 13 has an invalid length. [ 597.347807][T12715] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3025'. [ 597.362436][T12715] syz_tun: refused to change device tx_queue_len [ 597.379023][T12715] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 597.427746][T12711] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 597.487571][ T41] device vlan0 left promiscuous mode [ 597.493159][ T41] @: port 1(vlan0) entered disabled state [ 597.718576][ T41] device hsr_slave_0 left promiscuous mode [ 597.736104][ T41] device hsr_slave_1 left promiscuous mode [ 597.861046][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.878621][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.918584][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.926054][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.046681][ T41] device bridge_slave_1 left promiscuous mode [ 598.055419][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.966931][ T41] device bridge_slave_0 left promiscuous mode [ 598.994716][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.027899][T12331] Bluetooth: hci0: command 0x040f tx timeout [ 599.161159][ T41] device veth1_macvtap left promiscuous mode [ 599.173616][ T41] device veth0_macvtap left promiscuous mode [ 599.187887][ T41] device veth1_vlan left promiscuous mode [ 599.205321][ T41] device veth0_vlan left promiscuous mode [ 599.881188][ T41] team0 (unregistering): Port device macvlan1 removed [ 600.158572][ T41] team0 (unregistering): Port device team_slave_1 removed [ 600.197347][ T41] team0 (unregistering): Port device team_slave_0 removed [ 600.616808][T12734] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3030'. [ 600.632876][T12753] netlink: 'syz.2.3036': attribute type 10 has an invalid length. [ 600.651437][T12752] netlink: 'syz.4.3037': attribute type 13 has an invalid length. [ 600.667374][T12752] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3037'. [ 600.683205][T12752] syz_tun: refused to change device tx_queue_len [ 600.692175][T12752] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 600.727294][T12756] netlink: 'syz.4.3037': attribute type 10 has an invalid length. [ 600.887457][T12763] netlink: 'syz.0.3038': attribute type 13 has an invalid length. [ 600.897173][T12763] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3038'. [ 600.945780][T12763] syz_tun: refused to change device tx_queue_len [ 600.974151][T12763] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 601.107786][T12331] Bluetooth: hci0: command 0x0419 tx timeout [ 601.904420][T12782] netlink: 'syz.2.3044': attribute type 39 has an invalid length. [ 604.261832][T12782] device hsr_slave_1 left promiscuous mode [ 604.548838][T12599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 604.578732][T12599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 604.610611][T12599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 604.665061][T12815] netlink: 'syz.4.3051': attribute type 16 has an invalid length. [ 604.679019][T12820] netlink: 'syz.2.3052': attribute type 27 has an invalid length. [ 604.697458][T12820] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3052'. [ 604.708441][T12815] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3051'. [ 604.739412][T12599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 604.809598][T12818] netlink: 'syz.3.3050': attribute type 13 has an invalid length. [ 604.824893][T12818] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3050'. [ 604.848002][T12818] syz_tun: refused to change device tx_queue_len [ 604.854564][T12818] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 604.920063][T12823] netlink: 'syz.3.3050': attribute type 10 has an invalid length. [ 605.050769][T12599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.083927][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 605.101595][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 605.128175][T12599] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.175709][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 605.194021][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 605.227119][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.234330][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.293009][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 605.327959][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 605.384519][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.432150][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.439319][ T6964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.482410][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 605.528414][T12834] netlink: 'syz.4.3054': attribute type 13 has an invalid length. [ 605.570981][T12834] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3054'. [ 605.647020][T12834] syz_tun: refused to change device tx_queue_len [ 605.674373][T12834] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 605.770209][T12837] netlink: 'syz.4.3054': attribute type 10 has an invalid length. [ 605.877094][T12599] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 605.921207][T12599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 605.962402][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 605.979895][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 606.018119][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 606.077802][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 606.142372][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 606.152111][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 606.162109][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 606.172183][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 606.181812][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 606.191850][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 606.200823][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.228070][T12856] netlink: 'syz.0.3060': attribute type 10 has an invalid length. [ 606.250266][T12856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3060'. [ 606.828499][T12865] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 607.265646][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 607.285049][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 607.322900][T12599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.366284][T12887] netlink: 'syz.0.3076': attribute type 4 has an invalid length. [ 607.382519][T12887] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3076'. [ 607.459272][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 607.478487][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 607.545226][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 607.561904][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 607.589037][T12599] device veth0_vlan entered promiscuous mode [ 607.622391][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 607.632633][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 607.654673][T12599] device veth1_vlan entered promiscuous mode [ 607.723645][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 607.746804][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 607.786092][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 607.800259][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 607.819355][T12599] device veth0_macvtap entered promiscuous mode [ 607.841817][T12599] device veth1_macvtap entered promiscuous mode [ 607.866329][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.882827][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.898770][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.925638][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.951339][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.980822][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.005501][T12599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.015316][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 608.024636][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 608.032943][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 608.058047][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 608.101441][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.129071][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.152710][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.177378][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.222460][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.253396][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.280147][T12599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.291276][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 608.302402][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 608.326447][T12599] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.355724][T12599] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.386033][T12599] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.407888][T12599] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.498414][T12912] netlink: 'syz.0.3071': attribute type 13 has an invalid length. [ 608.517317][T12912] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3071'. [ 608.555048][T12912] syz_tun: refused to change device tx_queue_len [ 608.613882][T12912] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 608.705451][T12914] netlink: 'syz.0.3071': attribute type 10 has an invalid length. [ 608.735935][T12923] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3074'. [ 608.828270][ T6963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.836155][ T6963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.865755][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 608.956901][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.976182][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.002285][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 609.023650][ T6963] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 609.276381][T12941] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3077'. [ 609.510792][ T4301] wlan1: Trigger new scan to find an IBSS to join [ 610.436080][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 610.446162][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 610.467680][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 610.479218][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 610.486859][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 610.494307][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 610.672375][T12970] validate_nla: 1 callbacks suppressed [ 610.672414][T12970] netlink: 'syz.2.3084': attribute type 4 has an invalid length. [ 611.027496][T12984] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.3089'. [ 611.076360][T12986] FAULT_INJECTION: forcing a failure. [ 611.076360][T12986] name failslab, interval 1, probability 0, space 0, times 0 [ 611.091774][T12986] CPU: 1 PID: 12986 Comm: syz.0.3090 Not tainted syzkaller #0 [ 611.099268][T12986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 611.109341][T12986] Call Trace: [ 611.112647][T12986] [ 611.115614][T12986] dump_stack_lvl+0x188/0x24e [ 611.120337][T12986] ? show_regs_print_info+0x12/0x12 [ 611.125584][T12986] ? load_image+0x400/0x400 [ 611.130136][T12986] ? perf_tp_event+0xaac/0xc30 [ 611.134948][T12986] should_fail_ex+0x399/0x4d0 [ 611.139662][T12986] should_failslab+0x5/0x20 [ 611.144198][T12986] slab_pre_alloc_hook+0x59/0x310 [ 611.149246][T12986] kmem_cache_alloc_node+0x5a/0x320 [ 611.154453][T12986] ? __alloc_skb+0xfc/0x7e0 [ 611.158977][T12986] __alloc_skb+0xfc/0x7e0 [ 611.163323][T12986] tipc_msg_create+0x4b/0x4d0 [ 611.168029][T12986] ? tipc_own_addr+0x45/0x2a0 [ 611.172726][T12986] tipc_group_proto_xmit+0xcd/0x870 [ 611.177953][T12986] tipc_group_delete+0x15b/0x4c0 [ 611.182920][T12986] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 611.189095][T12986] ? tipc_group_update_member+0x3c0/0x3c0 [ 611.194835][T12986] ? tipc_group_self+0x22/0x1c0 [ 611.199707][T12986] tipc_sk_leave+0x142/0x4d0 [ 611.204311][T12986] ? __tipc_shutdown+0x1530/0x1530 [ 611.209442][T12986] ? _local_bh_enable+0xa0/0xa0 [ 611.214308][T12986] tipc_release+0x34d/0x2270 [ 611.218917][T12986] ? tipc_sock_destruct+0x170/0x170 [ 611.224129][T12986] sock_close+0xd5/0x240 [ 611.228388][T12986] ? sock_mmap+0x90/0x90 [ 611.232640][T12986] __fput+0x22c/0x920 [ 611.236643][T12986] task_work_run+0x1d0/0x260 [ 611.241249][T12986] ? task_work_cancel+0x220/0x220 [ 611.246294][T12986] ? exit_to_user_mode_loop+0x3b/0x110 [ 611.251779][T12986] exit_to_user_mode_loop+0xe6/0x110 [ 611.257085][T12986] exit_to_user_mode_prepare+0xee/0x180 [ 611.262655][T12986] syscall_exit_to_user_mode+0x16/0x40 [ 611.268132][T12986] do_syscall_64+0x58/0xa0 [ 611.272562][T12986] ? clear_bhb_loop+0x60/0xb0 [ 611.277253][T12986] ? clear_bhb_loop+0x60/0xb0 [ 611.281947][T12986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.287850][T12986] RIP: 0033:0x7f7cb039ce59 [ 611.292272][T12986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.311889][T12986] RSP: 002b:00007f7cb124d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 611.320319][T12986] RAX: 0000000000000000 RBX: 00007f7cb0615fa0 RCX: 00007f7cb039ce59 [ 611.328308][T12986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 611.336288][T12986] RBP: 00007f7cb124d090 R08: 0000000000000000 R09: 0000000000000000 [ 611.344269][T12986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.352268][T12986] R13: 00007f7cb0616038 R14: 00007f7cb0615fa0 R15: 00007fff6bdc46e8 [ 611.360274][T12986] [ 611.394855][T12964] chnl_net:caif_netlink_parms(): no params data found [ 611.452060][T12984] netlink: 'syz.2.3089': attribute type 13 has an invalid length. [ 611.523662][T12984] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3089'. [ 611.546977][T12984] syz_tun: refused to change device tx_queue_len [ 611.567606][T12984] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 611.732361][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.230151][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.389520][T13008] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3094'. [ 612.430416][T12997] netlink: 'syz.1.3092': attribute type 10 has an invalid length. [ 612.480848][T13023] FAULT_INJECTION: forcing a failure. [ 612.480848][T13023] name failslab, interval 1, probability 0, space 0, times 0 [ 612.522675][T12997] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.531027][T13023] CPU: 1 PID: 13023 Comm: syz.3.3097 Not tainted syzkaller #0 [ 612.538532][T13023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.548606][T13023] Call Trace: [ 612.551905][T13023] [ 612.554871][T13023] dump_stack_lvl+0x188/0x24e [ 612.559590][T13023] ? sctp_sendmsg+0x15b0/0x2940 [ 612.564479][T13023] ? ___sys_sendmsg+0x2a2/0x360 [ 612.569375][T13023] ? show_regs_print_info+0x12/0x12 [ 612.574622][T13023] ? load_image+0x400/0x400 [ 612.579176][T13023] should_fail_ex+0x399/0x4d0 [ 612.583890][T13023] should_failslab+0x5/0x20 [ 612.585727][ T56] wlan1: Trigger new scan to find an IBSS to join [ 612.588404][T13023] slab_pre_alloc_hook+0x59/0x310 [ 612.599903][T13023] ? sctp_add_bind_addr+0x89/0x350 [ 612.605066][T13023] __kmem_cache_alloc_node+0x4f/0x260 [ 612.610484][T13023] ? sctp_add_bind_addr+0x89/0x350 [ 612.615642][T13023] kmalloc_trace+0x26/0xe0 [ 612.620110][T13023] sctp_add_bind_addr+0x89/0x350 [ 612.625099][T13023] sctp_copy_local_addr_list+0x311/0x4e0 [ 612.630798][T13023] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 612.636573][T13023] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 612.642673][T13023] ? sctp_v4_is_any+0x31/0x50 [ 612.647385][T13023] ? sctp_copy_one_addr+0x93/0x660 [ 612.652515][T13023] sctp_bind_addr_copy+0xaf/0x3c0 [ 612.657557][T13023] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 612.663898][T13023] sctp_connect_new_asoc+0x2f5/0x6a0 [ 612.669203][T13023] ? __sctp_connect+0xd80/0xd80 [ 612.674062][T13023] ? __local_bh_enable_ip+0x136/0x1c0 [ 612.679443][T13023] ? _local_bh_enable+0xa0/0xa0 [ 612.684301][T13023] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 612.690126][T13023] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 612.695951][T13023] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 612.701510][T13023] ? security_sctp_bind_connect+0x85/0xb0 [ 612.707248][T13023] sctp_sendmsg+0x15b0/0x2940 [ 612.711952][T13023] ? trace_event_raw_event_lock+0x250/0x250 [ 612.717883][T13023] ? aa_sk_perm+0x811/0x950 [ 612.722416][T13023] ? sctp_getsockopt+0x8a0/0x8a0 [ 612.727372][T13023] ? __might_fault+0xa6/0x120 [ 612.732054][T13023] ? aa_af_perm+0x340/0x340 [ 612.736565][T13023] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 612.742998][T13023] ? inet_sendmsg+0x78/0x2f0 [ 612.747591][T13023] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 612.752885][T13023] ? security_socket_sendmsg+0x7c/0xa0 [ 612.758358][T13023] ? inet_send_prepare+0x260/0x260 [ 612.763474][T13023] ____sys_sendmsg+0x5be/0x970 [ 612.768267][T13023] ? __sys_sendmsg_sock+0x30/0x30 [ 612.773313][T13023] ? __import_iovec+0x315/0x500 [ 612.778184][T13023] ? import_iovec+0x6f/0xa0 [ 612.782694][T13023] ___sys_sendmsg+0x2a2/0x360 [ 612.787393][T13023] ? __sys_sendmsg+0x290/0x290 [ 612.792187][T13023] ? trace_call_bpf+0xbf/0x6b0 [ 612.796986][T13023] __se_sys_sendmsg+0x1bb/0x2a0 [ 612.801877][T13023] ? __x64_sys_sendmsg+0x80/0x80 [ 612.806849][T13023] ? lockdep_hardirqs_on+0x94/0x140 [ 612.812062][T13023] do_syscall_64+0x4c/0xa0 [ 612.816516][T13023] ? clear_bhb_loop+0x60/0xb0 [ 612.821217][T13023] ? clear_bhb_loop+0x60/0xb0 [ 612.825906][T13023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 612.831824][T13023] RIP: 0033:0x7f1d1a19ce59 [ 612.836252][T13023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.855869][T13023] RSP: 002b:00007f1d1b0d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.864298][T13023] RAX: ffffffffffffffda RBX: 00007f1d1a415fa0 RCX: 00007f1d1a19ce59 [ 612.872289][T13023] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 612.880281][T13023] RBP: 00007f1d1b0d8090 R08: 0000000000000000 R09: 0000000000000000 [ 612.888268][T13023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 612.896255][T13023] R13: 00007f1d1a416038 R14: 00007f1d1a415fa0 R15: 00007ffff2e91c18 [ 612.904256][T13023] [ 612.919355][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 612.940978][T12997] bond0: (slave team0): Enslaving as an active interface with an up link [ 613.089350][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.171481][T12964] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.197529][T12964] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.205663][T12964] device bridge_slave_0 entered promiscuous mode [ 613.443768][ T41] team0: Port device netdevsim0 removed [ 613.501322][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.565895][T13043] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.3103'. [ 613.606918][T12964] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.624680][T12964] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.676224][T12964] device bridge_slave_1 entered promiscuous mode [ 613.792664][T13047] netlink: 'syz.1.3103': attribute type 13 has an invalid length. [ 613.838244][T13047] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3103'. [ 613.981759][T13047] syz_tun: refused to change device tx_queue_len [ 614.018041][T13052] netlink: 'syz.0.3105': attribute type 29 has an invalid length. [ 614.042894][T13047] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 614.074431][T13050] netlink: 'syz.1.3103': attribute type 10 has an invalid length. [ 614.095071][ T6959] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 614.127038][T13050] team0: Port device netdevsim0 added [ 614.170092][T13052] netlink: 'syz.0.3105': attribute type 29 has an invalid length. [ 614.213823][T13055] netlink: 'syz.0.3105': attribute type 29 has an invalid length. [ 614.250237][T12964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.280904][T12964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.405285][T12964] team0: Port device team_slave_0 added [ 614.473504][T12964] team0: Port device team_slave_1 added [ 614.537504][T12964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.544513][T12964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.628137][T12964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.650422][ T41] device 0 left promiscuous mode [ 614.814227][T12964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.837285][T12964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.947491][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 614.954138][T12964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.078929][T13070] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3110'. [ 615.241644][T12964] device hsr_slave_0 entered promiscuous mode [ 615.272977][T12964] device hsr_slave_1 entered promiscuous mode [ 615.284872][T12964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.311070][T12964] Cannot create hsr debugfs directory [ 615.809512][T13108] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.3119'. [ 616.004495][T13117] netlink: 'syz.1.3121': attribute type 29 has an invalid length. [ 617.029179][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 617.636667][T13108] netlink: 'syz.2.3119': attribute type 13 has an invalid length. [ 617.645412][T13108] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3119'. [ 617.655634][T13108] syz_tun: refused to change device tx_queue_len [ 617.662094][T13108] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 617.714317][T13111] netlink: 'syz.2.3119': attribute type 10 has an invalid length. [ 617.740113][T13111] team0: Port device netdevsim0 added [ 617.783590][T13117] netlink: 'syz.1.3121': attribute type 29 has an invalid length. [ 618.015148][T13129] FAULT_INJECTION: forcing a failure. [ 618.015148][T13129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.083212][T13129] CPU: 0 PID: 13129 Comm: syz.2.3123 Not tainted syzkaller #0 [ 618.090778][T13129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 618.100898][T13129] Call Trace: [ 618.104230][T13129] [ 618.107204][T13129] dump_stack_lvl+0x188/0x24e [ 618.111953][T13129] ? show_regs_print_info+0x12/0x12 [ 618.117216][T13129] ? load_image+0x400/0x400 [ 618.121811][T13129] ? __lock_acquire+0x7d10/0x7d10 [ 618.126908][T13129] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 618.133222][T13129] should_fail_ex+0x399/0x4d0 [ 618.137978][T13129] _copy_from_user+0x2c/0x170 [ 618.142732][T13129] iovec_from_user+0x143/0x360 [ 618.147574][T13129] __import_iovec+0x6d/0x500 [ 618.152239][T13129] import_iovec+0x6f/0xa0 [ 618.156618][T13129] ___sys_sendmsg+0x252/0x360 [ 618.161344][T13129] ? __sys_sendmsg+0x290/0x290 [ 618.166252][T13129] __se_sys_sendmsg+0x1bb/0x2a0 [ 618.171157][T13129] ? __x64_sys_sendmsg+0x80/0x80 [ 618.176182][T13129] ? syscall_enter_from_user_mode+0x2a/0x80 [ 618.182115][T13129] do_syscall_64+0x4c/0xa0 [ 618.186570][T13129] ? clear_bhb_loop+0x60/0xb0 [ 618.191289][T13129] ? clear_bhb_loop+0x60/0xb0 [ 618.196008][T13129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.201923][T13129] RIP: 0033:0x7fd7c3d9ce59 [ 618.206360][T13129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.226001][T13129] RSP: 002b:00007fd7c4c9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.234444][T13129] RAX: ffffffffffffffda RBX: 00007fd7c4015fa0 RCX: 00007fd7c3d9ce59 [ 618.242442][T13129] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 618.250440][T13129] RBP: 00007fd7c4c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 618.258437][T13129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.266434][T13129] R13: 00007fd7c4016038 R14: 00007fd7c4015fa0 R15: 00007ffeead4b408 [ 618.274464][T13129] [ 618.358303][T13131] FAULT_INJECTION: forcing a failure. [ 618.358303][T13131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.405939][T13131] CPU: 1 PID: 13131 Comm: syz.0.3124 Not tainted syzkaller #0 [ 618.413470][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 618.423571][T13131] Call Trace: [ 618.426885][T13131] [ 618.429866][T13131] dump_stack_lvl+0x188/0x24e [ 618.434617][T13131] ? show_regs_print_info+0x12/0x12 [ 618.439889][T13131] ? load_image+0x400/0x400 [ 618.444467][T13131] ? __lock_acquire+0x7d10/0x7d10 [ 618.449577][T13131] should_fail_ex+0x399/0x4d0 [ 618.454317][T13131] _copy_from_user+0x2c/0x170 [ 618.459056][T13131] ioctl_standard_iw_point+0x5cf/0xcf0 [ 618.464607][T13131] ? __cfg80211_wext_giwauth+0x10/0x10 [ 618.470135][T13131] ? iw_handler_get_iwstats+0x240/0x240 [ 618.475756][T13131] ? wext_ioctl_dispatch+0xaf/0x470 [ 618.481038][T13131] ? mutex_lock_nested+0x10/0x10 [ 618.486055][T13131] ? full_name_hash+0x8e/0xe0 [ 618.490795][T13131] ? __cfg80211_wext_giwauth+0x10/0x10 [ 618.496329][T13131] ioctl_standard_call+0xb3/0x2b0 [ 618.501413][T13131] ? __cfg80211_wext_giwauth+0x10/0x10 [ 618.506964][T13131] wext_ioctl_dispatch+0x3da/0x470 [ 618.512130][T13131] ? wext_ioctl_dispatch+0x470/0x470 [ 618.517480][T13131] ? iw_handler_get_private+0x1e0/0x1e0 [ 618.523091][T13131] wext_handle_ioctl+0x113/0x1d0 [ 618.528093][T13131] ? call_commit_handler+0xf0/0xf0 [ 618.533305][T13131] sock_ioctl+0x143/0x710 [ 618.537691][T13131] ? sock_poll+0x410/0x410 [ 618.542183][T13131] ? bpf_lsm_file_ioctl+0x5/0x10 [ 618.547174][T13131] ? security_file_ioctl+0x7c/0xa0 [ 618.552440][T13131] ? sock_poll+0x410/0x410 [ 618.556908][T13131] __se_sys_ioctl+0xfa/0x170 [ 618.561564][T13131] do_syscall_64+0x4c/0xa0 [ 618.566028][T13131] ? clear_bhb_loop+0x60/0xb0 [ 618.570766][T13131] ? clear_bhb_loop+0x60/0xb0 [ 618.575518][T13131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.581459][T13131] RIP: 0033:0x7f7cb039ce59 [ 618.585926][T13131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.605608][T13131] RSP: 002b:00007f7cb124d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.614097][T13131] RAX: ffffffffffffffda RBX: 00007f7cb0615fa0 RCX: 00007f7cb039ce59 [ 618.622110][T13131] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000006 [ 618.630155][T13131] RBP: 00007f7cb124d090 R08: 0000000000000000 R09: 0000000000000000 [ 618.638178][T13131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.646196][T13131] R13: 00007f7cb0616038 R14: 00007f7cb0615fa0 R15: 00007fff6bdc46e8 [ 618.654260][T13131] [ 619.117322][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 619.346956][T13144] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3127'. [ 620.050545][T13179] netlink: 'syz.0.3135': attribute type 1 has an invalid length. [ 620.086594][T13179] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.3135'. [ 620.111648][T12964] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 620.142416][T12964] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 620.225039][T12964] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 620.374790][T12964] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 620.477799][ T41] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 620.492107][ T41] batman_adv: batadv0: Removing interface: virt_wifi0 [ 620.571561][ T41] device veth1_vlan left promiscuous mode [ 620.598116][ T41] device veth0_vlan left promiscuous mode [ 621.054485][ T41] team0 (unregistering): Port device macvlan1 removed [ 621.307460][ T41] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 621.355801][ T41] team0 (unregistering): Port device team_slave_1 removed [ 621.404968][ T41] team0 (unregistering): Port device team_slave_0 removed [ 621.459578][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.504244][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.802558][ T41] bond0 (unregistering): Released all slaves [ 622.077675][T12964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.110055][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.128631][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.156008][T12964] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.214040][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.239019][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.268104][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.275228][ T6963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.348738][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 622.409258][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 622.469329][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.521240][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.528465][ T6963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.607799][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.640068][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.712819][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 622.803244][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.859074][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 622.901044][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 622.940408][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 622.998440][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.027942][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.120004][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.151461][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.226357][T13233] netlink: 'syz.0.3149': attribute type 10 has an invalid length. [ 623.366523][T13233] device team0 left promiscuous mode [ 623.384543][T13233] device team_slave_0 left promiscuous mode [ 623.398729][T13233] device team_slave_1 left promiscuous mode [ 623.407784][T13233] device bridge0 left promiscuous mode [ 623.418113][T13233] device netdevsim0 left promiscuous mode [ 623.438102][T13233] i: port 1(team0) entered disabled state [ 623.467727][T12964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 623.724506][T13260] netlink: 1163 bytes leftover after parsing attributes in process `syz.2.3156'. [ 623.990474][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.996823][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.418411][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 624.446557][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 624.473819][T12964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.674975][T13285] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.3163'. [ 625.249644][T13300] netlink: 'syz.2.3168': attribute type 3 has an invalid length. [ 625.257999][T13300] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3168'. [ 626.767147][T13299] netlink: 'syz.2.3168': attribute type 14 has an invalid length. [ 626.785462][T13299] netlink: 34823 bytes leftover after parsing attributes in process `syz.2.3168'. [ 626.806410][T13302] bridge0: port 4(ip6gretap0) entered disabled state [ 626.813307][T13302] bridge0: port 3(batadv0) entered disabled state [ 626.820226][T13302] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.827479][T13302] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.010020][T13311] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.3172'. [ 627.026655][T13311] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3172'. [ 627.183634][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 627.217799][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 627.264931][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 627.308748][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.325330][T12964] device veth0_vlan entered promiscuous mode [ 627.333370][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.347755][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.362147][T12964] device veth1_vlan entered promiscuous mode [ 627.403837][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 627.419000][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 627.435085][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 627.443873][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.478356][T12964] device veth0_macvtap entered promiscuous mode [ 627.494439][T12964] device veth1_macvtap entered promiscuous mode [ 627.523078][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.539242][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.561617][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.574771][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.621016][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.640300][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.658148][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.673114][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.688955][T12964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.711190][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 627.726868][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 627.764015][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 627.786628][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 627.815445][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.837374][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.881571][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.898546][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.913486][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.924298][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.939749][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.954586][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.979045][T12964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.987992][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 628.002802][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 628.015245][T12964] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.026245][T12964] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.035255][T12964] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.044629][T12964] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.231020][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.248479][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.016916][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 630.035632][T13348] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3186'. [ 630.045284][T13349] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.3186'. [ 630.082540][ T6968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.113480][ T6968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.126472][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 630.206940][T13352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3190'. [ 630.308244][T13352] netlink: 'syz.1.3190': attribute type 21 has an invalid length. [ 630.343655][T13352] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3190'. [ 630.363053][T13354] netlink: 'syz.2.3189': attribute type 10 has an invalid length. [ 630.443339][T13352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3190'. [ 631.091570][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 631.104691][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 631.113278][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 631.122598][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 631.141498][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 631.150397][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 631.283999][T13352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3190'. [ 631.422804][T13363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3190'. [ 631.621509][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.655617][T13381] netlink: 'syz.0.3197': attribute type 14 has an invalid length. [ 631.680350][T13381] netlink: 34823 bytes leftover after parsing attributes in process `syz.0.3197'. [ 631.686833][T13384] netlink: 'syz.0.3197': attribute type 3 has an invalid length. [ 631.704474][T13384] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3197'. [ 631.783914][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.881298][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.189125][T12331] Bluetooth: hci3: command 0x0409 tx timeout [ 634.193176][T13390] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3200'. [ 634.215021][ T56] team0: Port device netdevsim0 removed [ 634.223185][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.455310][ T56] device 0 left promiscuous mode [ 634.521701][T13370] chnl_net:caif_netlink_parms(): no params data found [ 634.608641][ T56] device 0 left promiscuous mode [ 634.628502][T13418] netlink: 'syz.1.3210': attribute type 14 has an invalid length. [ 634.648609][T13418] netlink: 'syz.1.3210': attribute type 3 has an invalid length. [ 634.837611][T13370] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.878390][T13370] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.954752][T13370] device bridge_slave_0 entered promiscuous mode [ 635.142993][T13370] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.161596][T13370] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.187098][T13370] device bridge_slave_1 entered promiscuous mode [ 635.267488][T12331] Bluetooth: hci3: command 0x041b tx timeout [ 635.342745][T13370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.356709][T13370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.421378][T13370] team0: Port device team_slave_0 added [ 635.532131][T13370] team0: Port device team_slave_1 added [ 635.544538][T13453] __nla_validate_parse: 3 callbacks suppressed [ 635.544552][T13453] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.3219'. [ 635.586957][T13453] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.3219'. [ 635.691190][T13370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.713590][T13370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.794894][T13461] netlink: 'syz.4.3222': attribute type 2 has an invalid length. [ 635.805684][T13461] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3222'. [ 635.826699][T13370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.531149][T13462] netlink: 'syz.4.3222': attribute type 2 has an invalid length. [ 636.557719][T13462] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3222'. [ 636.633033][T13370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.647892][T13370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.716938][T13370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.347524][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 639.431248][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 640.037883][T13492] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3231'. [ 640.059383][T13493] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3231'. [ 640.077889][T13490] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3230'. [ 640.118239][T13503] FAULT_INJECTION: forcing a failure. [ 640.118239][T13503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.158067][T13503] CPU: 0 PID: 13503 Comm: syz.2.3235 Not tainted syzkaller #0 [ 640.165581][T13503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 640.175684][T13503] Call Trace: [ 640.178999][T13503] [ 640.181958][T13503] dump_stack_lvl+0x188/0x24e [ 640.186689][T13503] ? show_regs_print_info+0x12/0x12 [ 640.191940][T13503] ? load_image+0x400/0x400 [ 640.196489][T13503] ? __might_fault+0xa6/0x120 [ 640.201211][T13503] should_fail_ex+0x399/0x4d0 [ 640.205950][T13503] copyin+0x1b/0x120 [ 640.209874][T13503] _copy_from_iter+0x447/0x1130 [ 640.214763][T13503] ? copyout_mc+0x110/0x110 [ 640.219301][T13503] ? __virt_addr_valid+0x188/0x540 [ 640.224454][T13503] ? __virt_addr_valid+0x188/0x540 [ 640.229605][T13503] ? __virt_addr_valid+0x465/0x540 [ 640.234762][T13503] ? __check_object_size+0x500/0xa40 [ 640.240106][T13503] netlink_sendmsg+0x755/0xbd0 [ 640.244931][T13503] ? netlink_getsockopt+0x550/0x550 [ 640.250172][T13503] ? aa_sock_msg_perm+0x94/0x150 [ 640.255152][T13503] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 640.260485][T13503] ? security_socket_sendmsg+0x7c/0xa0 [ 640.265991][T13503] ? netlink_getsockopt+0x550/0x550 [ 640.271247][T13503] ____sys_sendmsg+0x5be/0x970 [ 640.276066][T13503] ? __sys_sendmsg_sock+0x30/0x30 [ 640.281129][T13503] ? __import_iovec+0x315/0x500 [ 640.286020][T13503] ? import_iovec+0x6f/0xa0 [ 640.290564][T13503] ___sys_sendmsg+0x2a2/0x360 [ 640.295289][T13503] ? __sys_sendmsg+0x290/0x290 [ 640.300128][T13503] ? __lock_acquire+0x7d10/0x7d10 [ 640.305224][T13503] __se_sys_sendmsg+0x1bb/0x2a0 [ 640.310132][T13503] ? __x64_sys_sendmsg+0x80/0x80 [ 640.315132][T13503] ? lockdep_hardirqs_on+0x94/0x140 [ 640.320370][T13503] do_syscall_64+0x4c/0xa0 [ 640.324834][T13503] ? clear_bhb_loop+0x60/0xb0 [ 640.329541][T13503] ? clear_bhb_loop+0x60/0xb0 [ 640.334255][T13503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.340203][T13503] RIP: 0033:0x7fd7c3d9ce59 [ 640.344648][T13503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.364276][T13503] RSP: 002b:00007fd7c4c9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.372722][T13503] RAX: ffffffffffffffda RBX: 00007fd7c4015fa0 RCX: 00007fd7c3d9ce59 [ 640.380729][T13503] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003 [ 640.388751][T13503] RBP: 00007fd7c4c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 640.396749][T13503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.404740][T13503] R13: 00007fd7c4016038 R14: 00007fd7c4015fa0 R15: 00007ffeead4b408 [ 640.412752][T13503] [ 640.446061][T13370] device hsr_slave_0 entered promiscuous mode [ 640.453097][T13370] device hsr_slave_1 entered promiscuous mode [ 640.477262][T13370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.487537][T13370] Cannot create hsr debugfs directory [ 640.686877][T13510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3238'. [ 640.762856][ T56] team0: Port device wlan1 removed [ 640.810276][T13510] netlink: 'syz.0.3238': attribute type 21 has an invalid length. [ 640.826758][T13510] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3238'. [ 640.890445][T13510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3238'. [ 641.088906][T13510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3238'. [ 641.227535][T13513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3238'. [ 641.317485][ T56] device hsr_slave_0 left promiscuous mode [ 641.346650][ T56] device hsr_slave_1 left promiscuous mode [ 641.368447][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.416610][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.452558][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.483309][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.544876][ T56] device bridge_slave_1 left promiscuous mode [ 641.572496][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.619331][ T56] device bridge_slave_0 left promiscuous mode [ 641.640600][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.562908][ T56] team0 (unregistering): Port device team_slave_1 removed [ 642.619440][ T56] team0 (unregistering): Port device team_slave_0 removed [ 643.544293][T13573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3254'. [ 643.647673][T13573] netlink: 'syz.4.3254': attribute type 21 has an invalid length. [ 643.678453][T13573] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3254'. [ 643.741861][T13573] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3254'. [ 643.762697][T13581] FAULT_INJECTION: forcing a failure. [ 643.762697][T13581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.781340][T13573] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3254'. [ 643.807906][T13579] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3254'. [ 643.887349][T13581] CPU: 1 PID: 13581 Comm: syz.1.3258 Not tainted syzkaller #0 [ 643.894854][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.904931][T13581] Call Trace: [ 643.908235][T13581] [ 643.911207][T13581] dump_stack_lvl+0x188/0x24e [ 643.915943][T13581] ? show_regs_print_info+0x12/0x12 [ 643.921182][T13581] ? load_image+0x400/0x400 [ 643.925741][T13581] ? __lock_acquire+0x7d10/0x7d10 [ 643.930812][T13581] should_fail_ex+0x399/0x4d0 [ 643.935525][T13581] _copy_from_user+0x2c/0x170 [ 643.940250][T13581] csum_and_copy_from_iter+0x67e/0x1350 [ 643.945830][T13581] ? __next_zones_zonelist+0x99/0x120 [ 643.951275][T13581] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 643.956965][T13581] ? __alloc_pages+0x294/0x4f0 [ 643.961769][T13581] ? zone_statistics+0x170/0x170 [ 643.966753][T13581] ? __kmem_cache_alloc_node+0x140/0x260 [ 643.972418][T13581] ip_generic_getfrag+0x150/0x2e0 [ 643.977481][T13581] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 643.982382][T13581] __ip6_append_data+0x1dfc/0x3d40 [ 643.987591][T13581] ? rawv6_send_hdrinc+0x16c0/0x16c0 [ 643.992919][T13581] ? ip6_setup_cork+0xfe0/0xfe0 [ 643.997805][T13581] ? ip6_setup_cork+0xa30/0xfe0 [ 644.002694][T13581] ip6_append_data+0x1ea/0x3e0 [ 644.007505][T13581] ? rawv6_send_hdrinc+0x16c0/0x16c0 [ 644.012841][T13581] rawv6_sendmsg+0x1224/0x1700 [ 644.017653][T13581] ? compat_rawv6_ioctl+0x60/0x60 [ 644.022710][T13581] ? aa_sk_perm+0x81f/0x950 [ 644.027236][T13581] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 644.033671][T13581] ? inet_sendmsg+0x78/0x2f0 [ 644.038269][T13581] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 644.043744][T13581] ? security_socket_sendmsg+0x7c/0xa0 [ 644.049241][T13581] ? inet_send_prepare+0x260/0x260 [ 644.054360][T13581] ____sys_sendmsg+0x5be/0x970 [ 644.059147][T13581] ? __sys_sendmsg_sock+0x30/0x30 [ 644.064180][T13581] ? __import_iovec+0x315/0x500 [ 644.069043][T13581] ? import_iovec+0x6f/0xa0 [ 644.073555][T13581] ___sys_sendmsg+0x2a2/0x360 [ 644.078247][T13581] ? __sys_sendmsg+0x290/0x290 [ 644.083034][T13581] ? __lock_acquire+0x7d10/0x7d10 [ 644.088095][T13581] __se_sys_sendmsg+0x1bb/0x2a0 [ 644.092969][T13581] ? __x64_sys_sendmsg+0x80/0x80 [ 644.097936][T13581] ? lockdep_hardirqs_on+0x94/0x140 [ 644.103155][T13581] do_syscall_64+0x4c/0xa0 [ 644.107583][T13581] ? clear_bhb_loop+0x60/0xb0 [ 644.112270][T13581] ? clear_bhb_loop+0x60/0xb0 [ 644.116958][T13581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 644.122857][T13581] RIP: 0033:0x7fba1d79ce59 [ 644.127286][T13581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.146905][T13581] RSP: 002b:00007fba1e599028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.155326][T13581] RAX: ffffffffffffffda RBX: 00007fba1da15fa0 RCX: 00007fba1d79ce59 [ 644.163302][T13581] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 644.171293][T13581] RBP: 00007fba1e599090 R08: 0000000000000000 R09: 0000000000000000 [ 644.179269][T13581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 644.187246][T13581] R13: 00007fba1da16038 R14: 00007fba1da15fa0 R15: 00007fff1cf62ca8 [ 644.195238][T13581] [ 644.209535][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 644.289138][T13370] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 644.305613][T13370] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 644.317043][T13370] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 644.339310][T13370] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 644.619327][T13370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.664650][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 644.677844][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 644.733891][T13370] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.775507][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 644.806047][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 644.833710][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.840938][ T6966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.871756][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 644.908959][T13603] netlink: 'syz.1.3266': attribute type 13 has an invalid length. [ 644.941861][T13603] syz_tun: refused to change device tx_queue_len [ 644.969166][T13603] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 644.994186][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 645.004528][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 645.026744][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.033952][ T6966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.070204][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 645.087590][T13606] netlink: 'syz.1.3266': attribute type 10 has an invalid length. [ 645.178957][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 645.188887][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 645.209617][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 645.250368][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 645.297916][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 645.343061][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 645.376132][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 645.409846][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 645.458016][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 645.472977][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 645.496306][T13370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 645.524797][T13623] netlink: 'syz.1.3270': attribute type 29 has an invalid length. [ 646.302362][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 646.324053][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 646.350442][T13370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.407377][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 646.416088][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 646.464764][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 646.478532][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 646.509647][T13661] __nla_validate_parse: 2 callbacks suppressed [ 646.509662][T13661] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.3280'. [ 646.559444][T13370] device veth0_vlan entered promiscuous mode [ 646.577711][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 646.585529][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 646.657755][T13661] netlink: 'syz.0.3280': attribute type 13 has an invalid length. [ 646.686270][T13661] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3280'. [ 646.703841][T13661] syz_tun: refused to change device tx_queue_len [ 646.728686][T13661] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 646.798897][T13370] device veth1_vlan entered promiscuous mode [ 646.823811][T13665] netlink: 'syz.0.3280': attribute type 10 has an invalid length. [ 647.001131][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 647.026048][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 647.069344][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 647.090469][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 647.144517][T13370] device veth0_macvtap entered promiscuous mode [ 647.176697][T13370] device veth1_macvtap entered promiscuous mode [ 647.265255][T13370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.303694][T13370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.327509][T13370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.378604][T13370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.397300][T13370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.422969][T13370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.443398][T13370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.468326][T13370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.498403][T13370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.543415][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 647.561904][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 647.594910][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 647.614795][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 647.736206][T13370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.747021][T13370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.757937][T13370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.774124][T13370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.795187][T13370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.827389][T13370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.845419][T13370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.871888][T13370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.905870][T13370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.936105][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 647.963817][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 648.009000][T13370] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.043362][T13370] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.053657][T13370] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.068703][T13370] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.195493][T13707] FAULT_INJECTION: forcing a failure. [ 648.195493][T13707] name failslab, interval 1, probability 0, space 0, times 0 [ 648.230049][T13707] CPU: 1 PID: 13707 Comm: syz.4.3290 Not tainted syzkaller #0 [ 648.237565][T13707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 648.247661][T13707] Call Trace: [ 648.250976][T13707] [ 648.253927][T13707] dump_stack_lvl+0x188/0x24e [ 648.258649][T13707] ? show_regs_print_info+0x12/0x12 [ 648.263887][T13707] ? load_image+0x400/0x400 [ 648.268433][T13707] should_fail_ex+0x399/0x4d0 [ 648.273128][T13707] should_failslab+0x5/0x20 [ 648.277648][T13707] slab_pre_alloc_hook+0x59/0x310 [ 648.282697][T13707] ? ref_tracker_alloc+0x14e/0x4b0 [ 648.287858][T13707] __kmem_cache_alloc_node+0x4f/0x260 [ 648.293254][T13707] ? ref_tracker_alloc+0x14e/0x4b0 [ 648.298383][T13707] kmalloc_trace+0x26/0xe0 [ 648.302820][T13707] ref_tracker_alloc+0x14e/0x4b0 [ 648.307781][T13707] ? ref_tracker_dir_print+0x150/0x150 [ 648.313265][T13707] ? __kmem_cache_alloc_node+0x140/0x260 [ 648.318928][T13707] ? switchdev_deferred_enqueue+0x2d/0x240 [ 648.324741][T13707] ? switchdev_deferred_enqueue+0x240/0x240 [ 648.330647][T13707] ? switchdev_deferred_enqueue+0x93/0x240 [ 648.336468][T13707] switchdev_deferred_enqueue+0x111/0x240 [ 648.342197][T13707] switchdev_port_attr_set+0xf5/0x2d0 [ 648.347581][T13707] ? lock_chain_count+0x20/0x20 [ 648.352476][T13707] ? switchdev_deferred_process+0x290/0x290 [ 648.358376][T13707] ? aa_get_newest_label+0xf9/0x5b0 [ 648.363587][T13707] br_set_ageing_time+0x110/0x250 [ 648.368631][T13707] ? __set_ageing_time+0x170/0x170 [ 648.373755][T13707] ? bpf_lsm_capable+0x5/0x10 [ 648.378443][T13707] ? security_capable+0x85/0xb0 [ 648.383312][T13707] br_dev_siocdevprivate+0xace/0x17a0 [ 648.388701][T13707] ? br_handle_local_finish+0x20/0x20 [ 648.394088][T13707] ? __mutex_lock+0x806/0xaf0 [ 648.398792][T13707] ? __lock_acquire+0x7d10/0x7d10 [ 648.403836][T13707] ? do_raw_spin_unlock+0x11d/0x230 [ 648.409040][T13707] ? full_name_hash+0x8e/0xe0 [ 648.413727][T13707] dev_ifsioc+0xa4a/0xd40 [ 648.418065][T13707] ? dev_ioctl+0xe80/0xe80 [ 648.422498][T13707] ? dev_load+0x1d/0x1e0 [ 648.426754][T13707] ? dev_load+0x1d/0x1e0 [ 648.431016][T13707] dev_ioctl+0x5f8/0xe80 [ 648.435274][T13707] ? get_user_ifreq+0xc7/0x170 [ 648.440066][T13707] sock_ioctl+0x691/0x710 [ 648.444420][T13707] ? sock_poll+0x410/0x410 [ 648.448846][T13707] ? sock_poll+0x410/0x410 [ 648.453285][T13707] ? __se_sys_ioctl+0xee/0x170 [ 648.458078][T13707] ? sock_poll+0x410/0x410 [ 648.462506][T13707] __se_sys_ioctl+0xfa/0x170 [ 648.467116][T13707] do_syscall_64+0x4c/0xa0 [ 648.471548][T13707] ? clear_bhb_loop+0x60/0xb0 [ 648.476243][T13707] ? clear_bhb_loop+0x60/0xb0 [ 648.480937][T13707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.486856][T13707] RIP: 0033:0x7f0f3a99ce59 [ 648.491288][T13707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.510905][T13707] RSP: 002b:00007f0f3b7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.519337][T13707] RAX: ffffffffffffffda RBX: 00007f0f3ac15fa0 RCX: 00007f0f3a99ce59 [ 648.527316][T13707] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000a [ 648.535300][T13707] RBP: 00007f0f3b7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 648.543275][T13707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.551273][T13707] R13: 00007f0f3ac16038 R14: 00007f0f3ac15fa0 R15: 00007ffe02482c48 [ 648.559266][T13707] [ 648.941339][T13707] memory allocation failure, unreliable refcount tracker. [ 649.117859][ T6963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.125815][ T6963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.192916][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 649.287754][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.331593][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.377105][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 649.624167][T13729] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.3191'. [ 650.136597][T13746] netlink: 'syz.4.3304': attribute type 10 has an invalid length. [ 650.204590][T13746] team0: Device veth1_vlan failed to register rx_handler [ 650.639550][T12331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 650.651867][T12331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 650.662156][T12331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 650.671988][T12331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 650.680404][T12331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 650.689037][T12331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 650.755380][T13764] FAULT_INJECTION: forcing a failure. [ 650.755380][T13764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.776392][T13764] CPU: 1 PID: 13764 Comm: syz.2.3309 Not tainted syzkaller #0 [ 650.783891][T13764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 650.793974][T13764] Call Trace: [ 650.797286][T13764] [ 650.800248][T13764] dump_stack_lvl+0x188/0x24e [ 650.804998][T13764] ? show_regs_print_info+0x12/0x12 [ 650.810253][T13764] ? load_image+0x400/0x400 [ 650.814795][T13764] ? __lock_acquire+0x7d10/0x7d10 [ 650.819858][T13764] should_fail_ex+0x399/0x4d0 [ 650.824566][T13764] _copy_from_user+0x2c/0x170 [ 650.829284][T13764] kstrtouint_from_user+0xda/0x170 [ 650.834433][T13764] ? kstrtol_from_user+0x190/0x190 [ 650.839592][T13764] proc_fail_nth_write+0x8b/0x200 [ 650.844632][T13764] ? proc_fail_nth_read+0x220/0x220 [ 650.849849][T13764] ? common_file_perm+0x171/0x1c0 [ 650.854883][T13764] ? proc_fail_nth_read+0x220/0x220 [ 650.860110][T13764] vfs_write+0x2e6/0xa30 [ 650.864384][T13764] ? file_end_write+0x250/0x250 [ 650.869255][T13764] ? __fget_files+0x28/0x4b0 [ 650.873862][T13764] ? __fget_files+0x28/0x4b0 [ 650.878475][T13764] ? __fget_files+0x43d/0x4b0 [ 650.883191][T13764] ? __fdget_pos+0x2ae/0x360 [ 650.887792][T13764] ? ksys_write+0x71/0x250 [ 650.892239][T13764] ksys_write+0x14c/0x250 [ 650.896584][T13764] ? __ia32_sys_read+0x80/0x80 [ 650.901363][T13764] ? lockdep_hardirqs_on+0x94/0x140 [ 650.906573][T13764] do_syscall_64+0x4c/0xa0 [ 650.911017][T13764] ? clear_bhb_loop+0x60/0xb0 [ 650.915714][T13764] ? clear_bhb_loop+0x60/0xb0 [ 650.920409][T13764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.926323][T13764] RIP: 0033:0x7fd7c3d5d68e [ 650.930756][T13764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 650.950380][T13764] RSP: 002b:00007fd7c4c79fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 650.958813][T13764] RAX: ffffffffffffffda RBX: 00007fd7c4c7a6c0 RCX: 00007fd7c3d5d68e [ 650.966790][T13764] RDX: 0000000000000001 RSI: 00007fd7c4c7a0a0 RDI: 0000000000000004 [ 650.974765][T13764] RBP: 00007fd7c4c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 650.982749][T13764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.990732][T13764] R13: 00007fd7c4016128 R14: 00007fd7c4016090 R15: 00007ffeead4b408 [ 650.998728][T13764] [ 651.035704][ T6959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.206991][ T6959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.387555][ T6959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.471515][T13776] netlink: 'syz.2.3315': attribute type 10 has an invalid length. [ 651.519560][T13780] FAULT_INJECTION: forcing a failure. [ 651.519560][T13780] name failslab, interval 1, probability 0, space 0, times 0 [ 651.532406][T13780] CPU: 1 PID: 13780 Comm: syz.1.3316 Not tainted syzkaller #0 [ 651.539898][T13780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 651.549975][T13780] Call Trace: [ 651.553276][T13780] [ 651.556247][T13780] dump_stack_lvl+0x188/0x24e [ 651.560969][T13780] ? sctp_sendmsg+0x15b0/0x2940 [ 651.565879][T13780] ? ___sys_sendmsg+0x2a2/0x360 [ 651.570771][T13780] ? show_regs_print_info+0x12/0x12 [ 651.575996][T13780] ? load_image+0x400/0x400 [ 651.580523][T13780] should_fail_ex+0x399/0x4d0 [ 651.585219][T13780] should_failslab+0x5/0x20 [ 651.589731][T13780] slab_pre_alloc_hook+0x59/0x310 [ 651.594787][T13780] ? sctp_add_bind_addr+0x89/0x350 [ 651.599940][T13780] __kmem_cache_alloc_node+0x4f/0x260 [ 651.605356][T13780] ? sctp_add_bind_addr+0x89/0x350 [ 651.610507][T13780] kmalloc_trace+0x26/0xe0 [ 651.614941][T13780] sctp_add_bind_addr+0x89/0x350 [ 651.619888][T13780] sctp_copy_local_addr_list+0x311/0x4e0 [ 651.625536][T13780] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 651.631275][T13780] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 651.637371][T13780] ? sctp_v6_is_any+0x60/0x70 [ 651.642078][T13780] ? sctp_copy_one_addr+0x93/0x660 [ 651.647220][T13780] sctp_bind_addr_copy+0xaf/0x3c0 [ 651.652283][T13780] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 651.658626][T13780] sctp_connect_new_asoc+0x2f5/0x6a0 [ 651.663930][T13780] ? __sctp_connect+0xd80/0xd80 [ 651.668781][T13780] ? __local_bh_enable_ip+0x136/0x1c0 [ 651.674150][T13780] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 651.679719][T13780] ? security_sctp_bind_connect+0x85/0xb0 [ 651.685486][T13780] sctp_sendmsg+0x15b0/0x2940 [ 651.690220][T13780] ? aa_sk_perm+0x811/0x950 [ 651.694788][T13780] ? sctp_getsockopt+0x8a0/0x8a0 [ 651.699776][T13780] ? __might_fault+0xa6/0x120 [ 651.704480][T13780] ? aa_af_perm+0x340/0x340 [ 651.708998][T13780] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 651.715420][T13780] ? inet_sendmsg+0xe5/0x2f0 [ 651.720008][T13780] ? inet_send_prepare+0x260/0x260 [ 651.725159][T13780] ____sys_sendmsg+0x5be/0x970 [ 651.729966][T13780] ? __sys_sendmsg_sock+0x30/0x30 [ 651.734998][T13780] ? __import_iovec+0x315/0x500 [ 651.739876][T13780] ? import_iovec+0x6f/0xa0 [ 651.744413][T13780] ___sys_sendmsg+0x2a2/0x360 [ 651.749134][T13780] ? __sys_sendmsg+0x290/0x290 [ 651.753946][T13780] ? __lock_acquire+0x7d10/0x7d10 [ 651.759024][T13780] __se_sys_sendmsg+0x1bb/0x2a0 [ 651.763904][T13780] ? ct_nmi_exit+0x145/0x1c0 [ 651.768513][T13780] ? __x64_sys_sendmsg+0x80/0x80 [ 651.773502][T13780] ? lockdep_hardirqs_on+0x94/0x140 [ 651.778699][T13780] do_syscall_64+0x4c/0xa0 [ 651.783118][T13780] ? clear_bhb_loop+0x60/0xb0 [ 651.787805][T13780] ? clear_bhb_loop+0x60/0xb0 [ 651.792522][T13780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.798445][T13780] RIP: 0033:0x7fba1d79ce59 [ 651.802878][T13780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.822497][T13780] RSP: 002b:00007fba1e599028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.830910][T13780] RAX: ffffffffffffffda RBX: 00007fba1da15fa0 RCX: 00007fba1d79ce59 [ 651.838901][T13780] RDX: 0000000030008041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 651.846894][T13780] RBP: 00007fba1e599090 R08: 0000000000000000 R09: 0000000000000000 [ 651.854885][T13780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 651.862879][T13780] R13: 00007fba1da16038 R14: 00007fba1da15fa0 R15: 00007fff1cf62ca8 [ 651.870886][T13780] [ 651.960015][T13776] team0: Device wg1 is of different type [ 652.019814][T13784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3317'. [ 652.055800][ T6959] team0: Port device netdevsim0 removed [ 652.063901][ T6959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.117482][T13784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3317'. [ 652.160324][T13785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3317'. [ 652.429127][ T6959] device 0 left promiscuous mode [ 652.521315][ T6959] device 1 left promiscuous mode [ 652.784176][T13760] chnl_net:caif_netlink_parms(): no params data found [ 652.805565][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 653.018757][T13813] netlink: 'syz.1.3326': attribute type 29 has an invalid length. [ 653.119830][ T6959] device ip6gretap0 left promiscuous mode [ 653.125681][ T6959] bridge0: port 4(ip6gretap0) entered disabled state [ 653.851212][T13813] netlink: 'syz.1.3326': attribute type 29 has an invalid length. [ 654.252896][T13846] device syzkaller0 entered promiscuous mode [ 654.317158][T13760] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.325147][T13760] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.333666][T13760] device bridge_slave_0 entered promiscuous mode [ 654.343728][T13760] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.366449][T13760] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.390557][T13760] device bridge_slave_1 entered promiscuous mode [ 654.573573][T13760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.656715][T13760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.756370][T13760] team0: Port device team_slave_0 added [ 654.775555][T13760] team0: Port device team_slave_1 added [ 654.877930][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 655.086407][T13884] netlink: 'syz.4.3343': attribute type 3 has an invalid length. [ 655.107458][T13884] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3343'. [ 656.949932][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 657.093684][T13760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.100770][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.126938][T13760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.185592][T13760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.199765][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.246660][T13760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.344623][T13903] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.3358'. [ 657.375708][T13903] openvswitch: netlink: Key type 386 is out of range max 32 [ 657.392672][T13760] device hsr_slave_0 entered promiscuous mode [ 657.439759][T13760] device hsr_slave_1 entered promiscuous mode [ 657.479115][T13760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.486726][T13760] Cannot create hsr debugfs directory [ 657.943286][T13923] netlink: 'syz.3.3356': attribute type 29 has an invalid length. [ 658.039837][T13923] netlink: 'syz.3.3356': attribute type 29 has an invalid length. [ 658.188164][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.207563][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.258302][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.265724][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.358411][ T6959] device batadv0 left promiscuous mode [ 658.364149][ T6959] bridge0: port 3(batadv0) entered disabled state [ 658.478349][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.499926][T13945] FAULT_INJECTION: forcing a failure. [ 658.499926][T13945] name failslab, interval 1, probability 0, space 0, times 0 [ 658.518964][ T6959] device bridge_slave_0 left promiscuous mode [ 658.535425][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.543234][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3363'. [ 658.567439][T13945] CPU: 0 PID: 13945 Comm: syz.2.3362 Not tainted syzkaller #0 [ 658.574946][T13945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 658.585027][T13945] Call Trace: [ 658.588344][T13945] [ 658.591323][T13945] dump_stack_lvl+0x188/0x24e [ 658.596035][T13945] ? show_regs_print_info+0x12/0x12 [ 658.601283][T13945] ? load_image+0x400/0x400 [ 658.605807][T13945] ? __might_sleep+0xd0/0xd0 [ 658.610419][T13945] ? __lock_acquire+0x7d10/0x7d10 [ 658.615496][T13945] should_fail_ex+0x399/0x4d0 [ 658.620207][T13945] should_failslab+0x5/0x20 [ 658.624733][T13945] slab_pre_alloc_hook+0x59/0x310 [ 658.629784][T13945] ? kvmalloc_node+0x6c/0x180 [ 658.634492][T13945] __kmem_cache_alloc_node+0x4f/0x260 [ 658.639887][T13945] ? kvmalloc_node+0x6c/0x180 [ 658.644595][T13945] __kmalloc_node+0xa0/0x240 [ 658.649251][T13945] kvmalloc_node+0x6c/0x180 [ 658.653799][T13945] bpf_test_run_xdp_live+0x209/0x1a90 [ 658.659202][T13945] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 658.664954][T13945] ? perf_trace_lock+0x301/0x390 [ 658.669925][T13945] ? xdp_convert_md_to_buff+0x330/0x330 [ 658.675520][T13945] ? __lock_acquire+0x7d10/0x7d10 [ 658.680574][T13945] ? __virt_addr_valid+0x188/0x540 [ 658.685739][T13945] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 658.692030][T13945] ? bpf_test_init+0x119/0x140 [ 658.696812][T13945] ? xdp_convert_md_to_buff+0x5b/0x330 [ 658.702290][T13945] bpf_prog_test_run_xdp+0x736/0xf10 [ 658.707615][T13945] ? dev_put+0x80/0x80 [ 658.711728][T13945] ? dev_put+0x80/0x80 [ 658.715831][T13945] bpf_prog_test_run+0x31e/0x390 [ 658.720803][T13945] __sys_bpf+0x62b/0x780 [ 658.725090][T13945] ? bpf_link_show_fdinfo+0x380/0x380 [ 658.730522][T13945] ? lock_chain_count+0x20/0x20 [ 658.735425][T13945] __x64_sys_bpf+0x78/0x90 [ 658.739882][T13945] do_syscall_64+0x4c/0xa0 [ 658.744330][T13945] ? clear_bhb_loop+0x60/0xb0 [ 658.749032][T13945] ? clear_bhb_loop+0x60/0xb0 [ 658.753733][T13945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 658.759652][T13945] RIP: 0033:0x7fd7c3d9ce59 [ 658.764084][T13945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.783708][T13945] RSP: 002b:00007fd7c4c9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 658.792141][T13945] RAX: ffffffffffffffda RBX: 00007fd7c4015fa0 RCX: 00007fd7c3d9ce59 [ 658.800144][T13945] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 658.808136][T13945] RBP: 00007fd7c4c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 658.816119][T13945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.824105][T13945] R13: 00007fd7c4016038 R14: 00007fd7c4015fa0 R15: 00007ffeead4b408 [ 658.832109][T13945] [ 658.913219][ T6959] device veth1_macvtap left promiscuous mode [ 658.938737][ T6959] device veth0_macvtap left promiscuous mode [ 659.027307][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 659.709445][T13972] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3371'. [ 659.883634][ T6959] team0 (unregistering): Port device team_slave_1 removed [ 659.950296][ T6959] team0 (unregistering): Port device team_slave_0 removed [ 660.153967][T13979] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3374'. [ 660.172133][T13979] netlink: zone id is out of range [ 660.184361][T13979] netlink: zone id is out of range [ 660.199501][T13979] netlink: zone id is out of range [ 660.213060][T13979] netlink: zone id is out of range [ 660.226932][T13979] netlink: zone id is out of range [ 660.249660][T13979] netlink: zone id is out of range [ 660.256677][T13979] netlink: zone id is out of range [ 660.270342][T13979] netlink: zone id is out of range [ 660.275546][T13979] netlink: zone id is out of range [ 660.636180][ T6959] team0 (unregistering): Port device bridge0 removed [ 661.224767][T13994] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3376'. [ 661.284966][T13988] netlink: 'syz.1.3384': attribute type 13 has an invalid length. [ 661.335903][T13988] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3384'. [ 661.456213][T13988] syz_tun: refused to change device tx_queue_len [ 661.488260][T13989] netlink: 'syz.1.3384': attribute type 10 has an invalid length. [ 661.743461][T13760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 661.967768][T13760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 662.036026][T13760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 662.078129][T13760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 662.274272][T14020] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3387'. [ 662.607655][T13760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.712111][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 662.732664][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 662.802742][T13760] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.881353][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 662.905493][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 662.950635][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.957953][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.036285][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 663.072705][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 663.141272][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 663.213916][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.221310][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.303816][ T6959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 663.329056][ T6959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 663.377458][ T6959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 663.386289][ T6959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 663.459448][ T6959] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 663.479678][ T6959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 663.503974][ T6959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 663.535936][ T6959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 663.574158][ T6959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 663.610141][T13760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 663.660400][T13760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 663.706416][ T6959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 663.738894][ T6959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 663.749306][T14043] netlink: 'syz.2.3391': attribute type 7 has an invalid length. [ 663.794163][T14042] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3392'. [ 664.178809][T14056] netlink: 'syz.2.3395': attribute type 13 has an invalid length. [ 664.215822][T14056] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3395'. [ 664.278760][T14056] syz_tun: refused to change device tx_queue_len [ 664.285417][T14056] net_ratelimit: 243 callbacks suppressed [ 664.285460][T14056] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 666.797703][T14060] netlink: 'syz.2.3395': attribute type 10 has an invalid length. [ 667.164985][T13760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.235876][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 667.253882][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 667.350558][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 667.360380][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 667.428196][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3405'. [ 667.477643][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 667.488369][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 667.521454][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 667.539269][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 667.568285][T13760] device veth0_vlan entered promiscuous mode [ 667.601542][T13760] device veth1_vlan entered promiscuous mode [ 667.680308][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 667.717732][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 667.737747][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 667.802980][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 667.866239][T14102] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3408'. [ 667.942994][T13760] device veth0_macvtap entered promiscuous mode [ 667.963817][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 667.993500][T13760] device veth1_macvtap entered promiscuous mode [ 668.029559][T13760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.086335][T13760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.115810][T13760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.135336][T13760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.146879][T13760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.163520][T13760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.193939][T13760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.212824][T13760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.244620][T13760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.263512][T14120] netlink: 'syz.2.3411': attribute type 13 has an invalid length. [ 668.288409][T14120] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3411'. [ 668.331341][T14120] syz_tun: refused to change device tx_queue_len [ 668.357146][T14120] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 668.446688][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 668.462094][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.492219][T14114] netlink: 'syz.1.3410': attribute type 2 has an invalid length. [ 668.537472][T14114] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3410'. [ 668.559412][T13760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.595136][T13760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.641049][T13760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.710559][T13760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.754744][T13760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.786762][T13760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.845002][T13760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.870318][T13760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.903725][T13760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.940668][T14117] netlink: 'syz.2.3411': attribute type 10 has an invalid length. [ 668.963946][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.988847][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 669.032970][T13760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.053550][T13760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.073587][T13760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.092725][T13760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.318026][ T6959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.336550][ T6959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.438237][ T6959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 669.563655][ T6959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.589078][ T6959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.589573][T14150] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3421'. [ 669.710900][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 669.896082][T14160] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.906523][T14160] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.977674][T14166] device bridge_slave_1 left promiscuous mode [ 669.996938][T14166] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.046534][T14166] device bridge_slave_0 left promiscuous mode [ 670.068722][T14166] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.529858][T14183] netlink: 'syz.0.3428': attribute type 13 has an invalid length. [ 670.568136][T14183] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3428'. [ 670.627242][T14183] syz_tun: refused to change device tx_queue_len [ 670.667608][T14183] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 670.722012][T14187] netlink: 'syz.0.3428': attribute type 10 has an invalid length. [ 670.825586][T14187] team0: Port device netdevsim0 added [ 670.842744][T14186] netlink: 'syz.2.3429': attribute type 2 has an invalid length. [ 670.864413][T14186] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3429'. [ 670.933750][T14195] netlink: 'syz.4.3431': attribute type 10 has an invalid length. [ 670.972550][T14195] device hsr0 entered promiscuous mode [ 671.016961][T14195] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 671.033421][T14200] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3431'. [ 671.222497][T14212] netlink: 'syz.1.3433': attribute type 2 has an invalid length. [ 671.291664][T14212] device 0 entered promiscuous mode [ 671.361863][T14212] netlink: 'syz.1.3433': attribute type 2 has an invalid length. [ 671.393742][T14212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3433'. [ 672.310746][T14235] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3439'. [ 673.902088][T14267] netlink: 'syz.3.3446': attribute type 13 has an invalid length. [ 673.947542][T14267] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3446'. [ 674.014929][T14267] syz_tun: refused to change device tx_queue_len [ 674.032005][T14267] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 674.164326][T14273] netlink: 'syz.3.3446': attribute type 10 has an invalid length. [ 674.382571][T14273] team0: Port device netdevsim0 added [ 674.411019][T14270] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3457'. [ 674.492487][T14272] netlink: 'syz.4.3447': attribute type 2 has an invalid length. [ 674.539113][T14272] netlink: 119 bytes leftover after parsing attributes in process `syz.4.3447'. [ 674.602643][T14280] netlink: 'syz.2.3449': attribute type 10 has an invalid length. [ 674.615827][T14280] device hsr0 entered promiscuous mode [ 674.623188][T14280] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 674.655406][T14288] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.3449'. [ 675.299375][ T6959] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 676.133076][T14319] netlink: 'syz.1.3460': attribute type 39 has an invalid length. [ 676.179798][T14319] FAULT_INJECTION: forcing a failure. [ 676.179798][T14319] name failslab, interval 1, probability 0, space 0, times 0 [ 676.201731][T14319] CPU: 0 PID: 14319 Comm: syz.1.3460 Not tainted syzkaller #0 [ 676.209232][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 676.219310][T14319] Call Trace: [ 676.222608][T14319] [ 676.225588][T14319] dump_stack_lvl+0x188/0x24e [ 676.230321][T14319] ? show_regs_print_info+0x12/0x12 [ 676.235568][T14319] ? load_image+0x400/0x400 [ 676.240114][T14319] ? __might_sleep+0xd0/0xd0 [ 676.244747][T14319] ? __lock_acquire+0x7d10/0x7d10 [ 676.249806][T14319] should_fail_ex+0x399/0x4d0 [ 676.254502][T14319] should_failslab+0x5/0x20 [ 676.259012][T14319] slab_pre_alloc_hook+0x59/0x310 [ 676.264049][T14319] ? br_netlink_fini+0x30/0x30 [ 676.268828][T14319] kmem_cache_alloc_node+0x5a/0x320 [ 676.274042][T14319] ? __alloc_skb+0xfc/0x7e0 [ 676.278563][T14319] __alloc_skb+0xfc/0x7e0 [ 676.282909][T14319] rtmsg_ifinfo_build_skb+0x80/0x190 [ 676.288222][T14319] rtmsg_ifinfo+0xc4/0x200 [ 676.292664][T14319] dev_close_many+0x27b/0x410 [ 676.297353][T14319] ? __dev_open+0x430/0x430 [ 676.301873][T14319] unregister_netdevice_many_notify+0x491/0x19c0 [ 676.308223][T14319] ? __lock_acquire+0x13cf/0x7d10 [ 676.313265][T14319] ? unregister_netdevice_many+0x20/0x20 [ 676.318914][T14319] ? unregister_netdevice_queue+0x1aa/0x370 [ 676.324832][T14319] ? list_netdevice+0x6c0/0x6c0 [ 676.329717][T14319] ? __nla_parse+0x3c/0x50 [ 676.334147][T14319] ? list_netdevice+0x6c0/0x6c0 [ 676.339014][T14319] rtnl_dellink+0x55d/0x830 [ 676.343535][T14319] ? rtnl_newlink+0x20a0/0x20a0 [ 676.348396][T14319] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 676.355050][T14319] ? rtnl_newlink+0x20a0/0x20a0 [ 676.359915][T14319] rtnetlink_rcv_msg+0x87c/0xfc0 [ 676.364874][T14319] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 676.370002][T14319] ? rtnetlink_bind+0x80/0x80 [ 676.374722][T14319] ? __local_bh_enable_ip+0x136/0x1c0 [ 676.380109][T14319] ? lockdep_hardirqs_on+0x94/0x140 [ 676.385335][T14319] ? __local_bh_enable_ip+0x136/0x1c0 [ 676.390725][T14319] ? _local_bh_enable+0xa0/0xa0 [ 676.395609][T14319] ? __dev_queue_xmit+0x26b/0x37c0 [ 676.400741][T14319] ? __dev_queue_xmit+0x26b/0x37c0 [ 676.405878][T14319] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 676.411104][T14319] ? __dev_queue_xmit+0x26b/0x37c0 [ 676.416247][T14319] ? ref_tracker_free+0x68c/0x840 [ 676.421301][T14319] ? __copy_skb_header+0x3ba/0x4f0 [ 676.426427][T14319] ? refcount_inc+0x70/0x70 [ 676.430950][T14319] ? memcpy+0x3c/0x60 [ 676.434947][T14319] ? __copy_skb_header+0x3ba/0x4f0 [ 676.440109][T14319] ? __skb_clone+0x480/0x790 [ 676.444729][T14319] netlink_rcv_skb+0x1fb/0x450 [ 676.449508][T14319] ? rtnetlink_bind+0x80/0x80 [ 676.454207][T14319] ? netlink_ack+0x1170/0x1170 [ 676.458993][T14319] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.464211][T14319] netlink_unicast+0x74d/0x8d0 [ 676.469012][T14319] netlink_sendmsg+0x8ad/0xbd0 [ 676.473801][T14319] ? netlink_getsockopt+0x550/0x550 [ 676.479019][T14319] ? aa_sock_msg_perm+0x94/0x150 [ 676.483973][T14319] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 676.489267][T14319] ? security_socket_sendmsg+0x7c/0xa0 [ 676.494743][T14319] ? netlink_getsockopt+0x550/0x550 [ 676.499961][T14319] ____sys_sendmsg+0x5be/0x970 [ 676.504746][T14319] ? __sys_sendmsg_sock+0x30/0x30 [ 676.509785][T14319] ? __import_iovec+0x315/0x500 [ 676.514669][T14319] ? import_iovec+0x6f/0xa0 [ 676.519192][T14319] ___sys_sendmsg+0x2a2/0x360 [ 676.523899][T14319] ? __sys_sendmsg+0x290/0x290 [ 676.528703][T14319] ? __lock_acquire+0x7d10/0x7d10 [ 676.533768][T14319] __se_sys_sendmsg+0x1bb/0x2a0 [ 676.538645][T14319] ? __x64_sys_sendmsg+0x80/0x80 [ 676.543610][T14319] ? lockdep_hardirqs_on+0x94/0x140 [ 676.548821][T14319] do_syscall_64+0x4c/0xa0 [ 676.553253][T14319] ? clear_bhb_loop+0x60/0xb0 [ 676.557948][T14319] ? clear_bhb_loop+0x60/0xb0 [ 676.562659][T14319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.568569][T14319] RIP: 0033:0x7fba1d79ce59 [ 676.572993][T14319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.592614][T14319] RSP: 002b:00007fba1e578028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.601046][T14319] RAX: ffffffffffffffda RBX: 00007fba1da16090 RCX: 00007fba1d79ce59 [ 676.609036][T14319] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 676.617009][T14319] RBP: 00007fba1e578090 R08: 0000000000000000 R09: 0000000000000000 [ 676.624984][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.632966][T14319] R13: 00007fba1da16128 R14: 00007fba1da16090 R15: 00007fff1cf62ca8 [ 676.640967][T14319] [ 677.054202][T14335] netlink: 'syz.3.3466': attribute type 46 has an invalid length. [ 679.168581][T14335] netlink: 'syz.3.3466': attribute type 46 has an invalid length. [ 679.185520][T14345] netlink: 'syz.0.3469': attribute type 10 has an invalid length. [ 679.204856][T14345] device hsr0 entered promiscuous mode [ 679.217688][T14345] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 679.269933][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3470'. [ 679.315324][T14346] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3469'. [ 679.339664][T14354] netlink: 'syz.4.3472': attribute type 21 has an invalid length. [ 679.405561][T14356] device wlan1 entered promiscuous mode [ 679.436606][T14356] netlink: 'syz.2.3473': attribute type 27 has an invalid length. [ 679.480854][T14356] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.3473'. [ 679.520831][T14356] netlink: 'syz.2.3473': attribute type 3 has an invalid length. [ 679.559342][T14356] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.3473'. [ 680.381100][T14380] FAULT_INJECTION: forcing a failure. [ 680.381100][T14380] name failslab, interval 1, probability 0, space 0, times 0 [ 680.442435][T14380] CPU: 1 PID: 14380 Comm: syz.1.3482 Not tainted syzkaller #0 [ 680.449944][T14380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.460021][T14380] Call Trace: [ 680.463353][T14380] [ 680.466310][T14380] dump_stack_lvl+0x188/0x24e [ 680.471036][T14380] ? show_regs_print_info+0x12/0x12 [ 680.476292][T14380] ? load_image+0x400/0x400 [ 680.480864][T14380] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 680.486896][T14380] should_fail_ex+0x399/0x4d0 [ 680.491606][T14380] should_failslab+0x5/0x20 [ 680.496136][T14380] slab_pre_alloc_hook+0x59/0x310 [ 680.501216][T14380] kmem_cache_alloc+0x56/0x2f0 [ 680.506013][T14380] ? __build_skb+0x2a/0x3c0 [ 680.510551][T14380] __build_skb+0x2a/0x3c0 [ 680.514909][T14380] build_skb+0x1e/0x230 [ 680.519091][T14380] bpf_prog_test_run_skb+0x37e/0x12a0 [ 680.524480][T14380] ? __fget_files+0x28/0x4b0 [ 680.529092][T14380] ? __fget_files+0x43d/0x4b0 [ 680.533790][T14380] ? cpu_online+0xa0/0xa0 [ 680.538138][T14380] bpf_prog_test_run+0x31e/0x390 [ 680.543094][T14380] __sys_bpf+0x62b/0x780 [ 680.547349][T14380] ? bpf_link_show_fdinfo+0x380/0x380 [ 680.553011][T14380] ? lock_chain_count+0x20/0x20 [ 680.557886][T14380] __x64_sys_bpf+0x78/0x90 [ 680.562326][T14380] do_syscall_64+0x4c/0xa0 [ 680.566760][T14380] ? clear_bhb_loop+0x60/0xb0 [ 680.571455][T14380] ? clear_bhb_loop+0x60/0xb0 [ 680.576147][T14380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.582051][T14380] RIP: 0033:0x7fba1d79ce59 [ 680.586477][T14380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.606090][T14380] RSP: 002b:00007fba1e599028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 680.614512][T14380] RAX: ffffffffffffffda RBX: 00007fba1da15fa0 RCX: 00007fba1d79ce59 [ 680.622495][T14380] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 680.630477][T14380] RBP: 00007fba1e599090 R08: 0000000000000000 R09: 0000000000000000 [ 680.638461][T14380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.646437][T14380] R13: 00007fba1da16038 R14: 00007fba1da15fa0 R15: 00007fff1cf62ca8 [ 680.654423][T14380] [ 681.060732][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3485'. [ 681.643566][T14420] netlink: 'syz.4.3497': attribute type 39 has an invalid length. [ 682.433729][T14440] netlink: 'syz.1.3504': attribute type 1 has an invalid length. [ 682.562484][T14448] netlink: 'syz.4.3507': attribute type 10 has an invalid length. [ 685.430653][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.437003][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.745086][T14551] netlink: 'syz.0.3540': attribute type 4 has an invalid length. [ 689.763092][T14551] netlink: 'syz.0.3540': attribute type 3 has an invalid length. [ 689.803388][T14551] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.3540'. [ 689.846068][T14555] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 691.501853][T14590] netlink: 'syz.4.3555': attribute type 39 has an invalid length. [ 694.829037][T14652] netlink: 'syz.1.3574': attribute type 29 has an invalid length. [ 694.931189][T14652] netlink: 'syz.1.3574': attribute type 29 has an invalid length. [ 694.970652][T14653] netlink: 'syz.1.3574': attribute type 29 has an invalid length. [ 695.061512][T14666] netlink: 'syz.3.3579': attribute type 10 has an invalid length. [ 695.072280][T14666] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3579'. [ 695.388552][T14669] netlink: 'syz.4.3581': attribute type 8 has an invalid length. [ 695.396801][T14669] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3581'. [ 695.409895][T14669] netlink: 'syz.4.3581': attribute type 29 has an invalid length. [ 695.427543][T14669] netlink: 'syz.4.3581': attribute type 29 has an invalid length. [ 695.459902][T14669] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 695.487918][T14669] netlink: 'syz.4.3581': attribute type 29 has an invalid length. [ 695.506510][T14669] netlink: 'syz.4.3581': attribute type 29 has an invalid length. [ 695.529725][T14669] netlink: 'syz.4.3581': attribute type 29 has an invalid length. [ 695.540390][T14674] FAULT_INJECTION: forcing a failure. [ 695.540390][T14674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.554679][T14674] CPU: 1 PID: 14674 Comm: syz.1.3583 Not tainted syzkaller #0 [ 695.562175][T14674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 695.572245][T14674] Call Trace: [ 695.575533][T14674] [ 695.578475][T14674] dump_stack_lvl+0x188/0x24e [ 695.583181][T14674] ? show_regs_print_info+0x12/0x12 [ 695.588395][T14674] ? load_image+0x400/0x400 [ 695.592923][T14674] ? __lock_acquire+0x7d10/0x7d10 [ 695.597977][T14674] should_fail_ex+0x399/0x4d0 [ 695.602671][T14674] strncpy_from_user+0x32/0x350 [ 695.607549][T14674] bpf_prog_load+0x1f3/0x1560 [ 695.612262][T14674] ? map_freeze+0x390/0x390 [ 695.616778][T14674] ? __might_fault+0xa6/0x120 [ 695.621468][T14674] ? __might_fault+0xa6/0x120 [ 695.626157][T14674] ? __might_fault+0xc2/0x120 [ 695.630853][T14674] ? __might_fault+0xa6/0x120 [ 695.635560][T14674] ? bpf_lsm_bpf+0x5/0x10 [ 695.639913][T14674] ? security_bpf+0x7a/0xa0 [ 695.644437][T14674] __sys_bpf+0x5b8/0x780 [ 695.648697][T14674] ? bpf_link_show_fdinfo+0x380/0x380 [ 695.654095][T14674] ? lock_chain_count+0x20/0x20 [ 695.658970][T14674] __x64_sys_bpf+0x78/0x90 [ 695.663414][T14674] do_syscall_64+0x4c/0xa0 [ 695.667852][T14674] ? clear_bhb_loop+0x60/0xb0 [ 695.672544][T14674] ? clear_bhb_loop+0x60/0xb0 [ 695.677236][T14674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.683141][T14674] RIP: 0033:0x7fba1d79ce59 [ 695.687595][T14674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.707214][T14674] RSP: 002b:00007fba1e599028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 695.715640][T14674] RAX: ffffffffffffffda RBX: 00007fba1da15fa0 RCX: 00007fba1d79ce59 [ 695.723624][T14674] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 695.731602][T14674] RBP: 00007fba1e599090 R08: 0000000000000000 R09: 0000000000000000 [ 695.739583][T14674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.747555][T14674] R13: 00007fba1da16038 R14: 00007fba1da15fa0 R15: 00007fff1cf62ca8 [ 695.755542][T14674] [ 695.926186][T14680] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 695.934049][T14680] #PF: supervisor instruction fetch in kernel mode [ 695.940566][T14680] #PF: error_code(0x0010) - not-present page [ 695.946577][T14680] PGD 35fae067 P4D 35fae067 PUD 0 [ 695.951721][T14680] Oops: 0010 [#1] PREEMPT SMP KASAN [ 695.956937][T14680] CPU: 1 PID: 14680 Comm: syz.1.3586 Not tainted syzkaller #0 [ 695.964450][T14680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 695.974540][T14680] RIP: 0010:0x0 [ 695.978028][T14680] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 695.985421][T14680] RSP: 0018:ffffc900034b7458 EFLAGS: 00010246 [ 695.991490][T14680] RAX: 1ffffffff162be8f RBX: 1ffff92000696e9c RCX: 0000000000000001 [ 695.999465][T14680] RDX: ffffc900034b7500 RSI: 0000000000000001 RDI: ffff88805a4cc000 [ 696.007442][T14680] RBP: ffffc900034b7570 R08: ffff88805a4cc03f R09: 1ffff1100b499807 [ 696.015415][T14680] R10: dffffc0000000000 R11: ffffed100b499808 R12: ffffe8ffffd4ef48 [ 696.023400][T14680] R13: ffffffff8b15f478 R14: 0000000000000000 R15: ffff88805a4cc000 [ 696.031396][T14680] FS: 00007fba1e5996c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 696.040422][T14680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.047016][T14680] CR2: ffffffffffffffd6 CR3: 000000004303e000 CR4: 00000000003506e0 [ 696.054994][T14680] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 696.062979][T14680] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 696.070964][T14680] Call Trace: [ 696.074254][T14680] [ 696.077188][T14680] bond_xdp_xmit+0x31e/0x550 [ 696.081795][T14680] ? bond_xdp_xmit+0x94/0x550 [ 696.086486][T14680] ? bond_xdp+0x850/0x850 [ 696.090843][T14680] bq_xmit_all+0xd3f/0x11b0 [ 696.095377][T14680] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 696.101116][T14680] ? perf_trace_preemptirq_template+0x268/0x320 [ 696.107383][T14680] ? irqentry_enter+0x33/0x50 [ 696.112082][T14680] ? __dev_flush+0x1b0/0x1b0 [ 696.116688][T14680] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 696.122689][T14680] ? lock_chain_count+0x20/0x20 [ 696.127558][T14680] ? rcu_is_watching+0x11/0xa0 [ 696.132338][T14680] ? lockdep_softirqs_on+0x580/0x580 [ 696.137649][T14680] ? bq_enqueue+0x2ee/0x3d0 [ 696.142178][T14680] ? rcu_is_watching+0x11/0xa0 [ 696.146957][T14680] ? trace_xdp_redirect+0xb3/0x2b0 [ 696.152080][T14680] __dev_flush+0xbf/0x1b0 [ 696.156510][T14680] xdp_do_flush+0xa/0x20 [ 696.160764][T14680] bpf_test_run_xdp_live+0x1545/0x1a90 [ 696.166248][T14680] ? 0xffffffffa0004440 [ 696.170430][T14680] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 696.175993][T14680] ? xdp_convert_md_to_buff+0x330/0x330 [ 696.181555][T14680] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 696.187809][T14680] ? bpf_prog_test_run_xdp+0x6ac/0xf10 [ 696.193282][T14680] bpf_prog_test_run_xdp+0x736/0xf10 [ 696.198584][T14680] ? dev_put+0x80/0x80 [ 696.202669][T14680] ? dev_put+0x80/0x80 [ 696.206744][T14680] bpf_prog_test_run+0x31e/0x390 [ 696.211699][T14680] __sys_bpf+0x62b/0x780 [ 696.215955][T14680] ? bpf_link_show_fdinfo+0x380/0x380 [ 696.221439][T14680] ? lock_chain_count+0x20/0x20 [ 696.226348][T14680] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 696.232378][T14680] __x64_sys_bpf+0x78/0x90 [ 696.236881][T14680] do_syscall_64+0x4c/0xa0 [ 696.241325][T14680] ? clear_bhb_loop+0x60/0xb0 [ 696.246014][T14680] ? clear_bhb_loop+0x60/0xb0 [ 696.250708][T14680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.256623][T14680] RIP: 0033:0x7fba1d79ce59 [ 696.261050][T14680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.280669][T14680] RSP: 002b:00007fba1e599028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 696.289096][T14680] RAX: ffffffffffffffda RBX: 00007fba1da15fa0 RCX: 00007fba1d79ce59 [ 696.297072][T14680] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 696.305051][T14680] RBP: 00007fba1d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 696.313024][T14680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.321005][T14680] R13: 00007fba1da16038 R14: 00007fba1da15fa0 R15: 00007fff1cf62ca8 [ 696.328991][T14680] [ 696.332026][T14680] Modules linked in: [ 696.335926][T14680] CR2: 0000000000000000 [ 696.340111][T14680] ---[ end trace 0000000000000000 ]--- [ 696.345591][T14680] RIP: 0010:0x0 [ 696.349059][T14680] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 696.356429][T14680] RSP: 0018:ffffc900034b7458 EFLAGS: 00010246 [ 696.362513][T14680] RAX: 1ffffffff162be8f RBX: 1ffff92000696e9c RCX: 0000000000000001 [ 696.370506][T14680] RDX: ffffc900034b7500 RSI: 0000000000000001 RDI: ffff88805a4cc000 [ 696.378502][T14680] RBP: ffffc900034b7570 R08: ffff88805a4cc03f R09: 1ffff1100b499807 [ 696.386489][T14680] R10: dffffc0000000000 R11: ffffed100b499808 R12: ffffe8ffffd4ef48 [ 696.394471][T14680] R13: ffffffff8b15f478 R14: 0000000000000000 R15: ffff88805a4cc000 [ 696.402455][T14680] FS: 00007fba1e5996c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 696.411411][T14680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.418002][T14680] CR2: ffffffffffffffd6 CR3: 000000004303e000 CR4: 00000000003506e0 [ 696.425987][T14680] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 696.433972][T14680] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 696.441952][T14680] Kernel panic - not syncing: Fatal exception in interrupt [ 696.449727][T14680] Kernel Offset: disabled [ 696.454048][T14680] Rebooting in 86400 seconds..