last executing test programs: 24.092570967s ago: executing program 1 (id=7207): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x800}, 0x8044) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff014}, {0x6, 0xfd, 0x0, 0xffffffff}]}) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007b00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001fc0)={@fallback, 0xffffffffffffffff, 0x1a, 0x2008}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x100000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b33, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(0xffffffffffffffff) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) sendmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r3) 21.53319805s ago: executing program 1 (id=7211): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40002000) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1, 0x0, 0xab}, 0x40010) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481e0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000000), &(0x7f0000000180)=r9}, 0x20) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000000480)=r7, 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r13) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[{0x78, 0x10b, 0x5, "c35b77d20f46bef258d1f1da33e61123d067a0c04a761c81471fa47e0355e33cfbc2c6d673cf1e973f17eec7c17df6db22db23c74b07273540d0ea7932f49eea36dcc5ec0fc423b3ce08009f9aabbe4e67966af3678c7a268c23e8f1ce081afae1"}, {0xe8, 0x0, 0xf41, "4dff31081d0c29029733a134c87045f29ccd61c5647056f40604eaf22cd18c5769a316a31aba194c1bed931ae70ee7e3433dbfc3dff91c6f6a7ee9f516431d9b7bae20a12fe9fd7cf747bc6a748897b8cedd02e389380ec80467580e128c3bd31dc43088fd0fb1112cc900415d8a4cbae044705c9dbc2aaa811bd1e82968c6529fd74a0cee871f59c0308989bbfccdd8d0543e2221ce926aa80aab879429668c119470f7a5579f11a5a01753eb17163d4ea7f21ade3f91032b088a036f696a33e095714c72b6dcfde320f1de3db08613d6"}, {0x50, 0x112, 0x0, "8024534bfdc43f2ddadd3d0776edd8577364571c8dc8da0c7b783c2ab7eb1a9958d5268aab334819e27d508cef4f0ff9d6ea49ac851c1c8bf4"}, {0x30, 0x1, 0xd, "d6512845899105449c83871602353f4a2e123a02879c0a63bc"}, {0x358, 0x84, 0xc, "7ce828fec129a63db46aa32f8033349f0c58c62d19ec032390b033aaf8301eec71225c3f42af36ec2b608a954c083aebfa928b1303b3403390b11189e1a1cc47a9ea621f974477eac4b5938b7b7c71ae6e5abebcc7645f900c23ff01288b43d677da03fe0da7ddb2eec2e3fc4532bd74f83110ed0e16cf45565af5ca4362aedabb3e455a9fbb80193a216ed41108fa80b00d150a3f0213ac10f73e863e16ab1dee9f7213ec010d6e16ae22ce90e69e3c3247de625eb537ed7ec18e69776c65a199fb0996d859736713165b01fe208a7d6f954e7f9337a11c86153ea83c7fa45eeecabca640f4bbb440448fd104b791678575551e1c302076ee3498834e6e7b550e3dd782375f6c230a8c7c144faf5f22537f7f5b9ff6f21682a70671904598a4f5015ecb180c19d5b0e81ad6c09c4bd806bd3d49d35d9645d30fa3c8540fe7330869fc09fcf9c983512b2cbfaa82d0b64425e2aadc01b9ff817d84718e5e06aabd365e2515d576eccbdf41c331b08852888806cdfe4e0467ffa9a3286da1cf799fa3b22bbff740380ba8facd14505135fa14ff76e429777ce712f1c2123329c8121bb520b5c6963d129d08d2f736bb02bc0044122b3fec258554fccac1abc4decd3572e7ec6224a158b2a124dac4df1b7e97de2a88b69624ee27edfba0b47a61d0c43cead0e4d1c64ac69562fb887d699d1ca59ae4486aa98c98b8f42921455a4291f0ce5a47e80b91878d6eaad919af9d281f55d3c44fbc330462665efc357b3ede74ccc6deb71b4566c1d348e534c3c6f183041e36e26afdf571acdc0538cf601cc073881d8ba87fd59640d2b8cc503dd6af50c561eb81b26649d301c0ac4d9e6d24a3d4823e6d6a25ac05a5c2fd13028364781218f9079dfe8a39f4509dfa75e4c7497c353a30c88a3fef31a88dc90b2ab6b6deff2bd0e91d32db6ee198fa205d3496bb5b133b327b9e6d3f84e29823d1d87c851557a260129e315d3a0d33ddc0fe52b908f2dbe7695142fc7e1fbd10de2381febca77bfb4d7ce586889f9a5ac4f17ee609d0d0455cfbfe039a342b6ee6ce7bece491e1be894dd479a7a56b080f2f919bf2b68157af6648dac75d77a221f34e83923566cd1ff005da0f7bb3aaa7bef7ae462b62d38e056186e979a5108d5e070467fb3d31830efd52ed44228d8397c3f9daea23"}], 0x538}, 0x40) socket$kcm(0x2, 0x3, 0x2) 20.449874516s ago: executing program 1 (id=7214): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2, 0x0, 0x2000000}, 0x2c) 19.624257357s ago: executing program 1 (id=7218): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) recvmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x14044040) 18.410702177s ago: executing program 1 (id=7219): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x800}, 0x8044) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff014}, {0x6, 0xfd, 0x0, 0xffffffff}]}) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007b00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001fc0)={@fallback, 0xffffffffffffffff, 0x1a, 0x2008}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x100000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b33, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(0xffffffffffffffff) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) sendmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r3) 15.979184966s ago: executing program 1 (id=7221): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x10012, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004800) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r3, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000080), 0x4) 11.496807227s ago: executing program 3 (id=7230): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000740)="c8be54", 0x3}], 0x1, &(0x7f0000001540)=[{0x10, 0x112, 0x8}, {0x10, 0x111, 0x1}], 0x20}, 0x20000000) (fail_nth: 36) 9.915125026s ago: executing program 3 (id=7233): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.33905901s ago: executing program 3 (id=7234): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='\a', 0x1}], 0x1}, 0x800) sendmsg(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000380)='\xb0\xe0\xe7\xfc\xc5\fPd\xe2\xc6\x84\xcc\xef\xd7Y\xcbG\v\x00') r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000900000018180000", @ANYRES32, @ANYBLOB="6a57d9dd96bb6d152f07a1cade2600000000000000000da5"], &(0x7f0000000580)='GPL\x00', 0x8, 0x5d, &(0x7f00000005c0)=""/93, 0x40f00, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x0, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1], &(0x7f0000000700)=[{0x5, 0x5, 0x1, 0x3}, {0x0, 0x5, 0x6, 0x1}], 0x10, 0x52ee}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r4, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x0, 0x40000032, &(0x7f00000008c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000900), &(0x7f0000000b00), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x100, 0x0, 0xa482, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000200)=r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63", 0x8}], 0x1}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) write$cgroup_pid(r8, &(0x7f0000000100), 0x12) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r10 = openat$cgroup_int(r7, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f00000000c0)=0xd, 0x12) 7.174776894s ago: executing program 0 (id=7236): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xf, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0xee, 0x8, 0x8, &(0x7f0000002a00)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000000000000000800100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x94) (async) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/684], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x20000006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000000000e02e89a54100100000c"], 0x10}, 0xfc00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a40)={r4, 0x0, 0xb0, 0x1000, &(0x7f0000000380)="db56539d9e812f839bc74b999d09794de9062a2c1cbdf42f83f4b92a9babd886c990b10d7e4965108d5c25d117b788548e6db3bac34f54dc284316c54c9b9064798c12f6847e1917b66fe8ef4f8fd6e9d8df2fcef1b8fc33d53c94cebfaf6b79eeffb5635db5825142ed230ecfb82ad3b887d6b04c332bad7c4c3ffcccae794bb50236cfda4fa061399507bf90f8c4699275773b88ff05680d87154f918cfba5b74565e661e43d9ed48e96d91ecf6a6f", &(0x7f0000001980)=""/4096, 0x7f, 0x0, 0x73, 0x0, &(0x7f0000002980)="035337b893c0d77a40f572badf266dae17cada513ab6dc4adb933d7d7c8c54373180c670be7c344074ce97843cf54d5cc60f6325e47fb715f9998312c18cb21e0967f0917318611ef870c54f8fc66fc1ceb2a7894f6fcfcfff450586118c5a6b53e72899b29bb7952c6c9d93fb5c7d7a1ddf31", &(0x7f0000002a00), 0x2, 0x0, 0xd}, 0x50) (async) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r8}, 0x38) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./cgroup/file0\x00', 0x0, 0x4010, r9}, 0x18) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20009, 0x2, @perf_bp={0x0, 0x13}, 0x18001, 0x0, 0x0, 0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000000) (async) recvmsg(r10, &(0x7f0000001840)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000340)=""/92, 0x5c}, {&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000580)=""/131, 0x83}, {&(0x7f0000000640)=""/203, 0xcb}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/121, 0x79}], 0x7}, 0x10040) (async) close(r11) 7.040032217s ago: executing program 3 (id=7237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006200000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000030000000100000038160000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f3, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x7f) socket$kcm(0x29, 0x2, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.91367987s ago: executing program 0 (id=7238): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x94) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r1, 0x4000, r0}, 0x18) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000b63d25a80dc9f14e53420b4648c", 0x14}], 0x1}, 0x0) close(r2) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r7 = gettid() write$cgroup_pid(r6, &(0x7f00000001c0)=r7, 0x12) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 6.232370537s ago: executing program 2 (id=7239): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) recvmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x14044040) 5.550148643s ago: executing program 0 (id=7240): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000a000000004c0000004c0000001c000000050000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000001000000000000000100000002000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 5.107935035s ago: executing program 0 (id=7241): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) socketpair(0x27, 0x80000, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42340, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230006) close(r8) 4.954580308s ago: executing program 2 (id=7242): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.776356873s ago: executing program 2 (id=7243): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000002c0)="740300005f03ed8bb89e08f086dd96bbc59d8f37f30c63c489d23eafdce458f21a4d8d457abf08e67639aea332608ea55f71661f645e", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e45", 0x54}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0600000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000200001300000000000002000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) socketpair(0x1a, 0x0, 0xbeee, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.134675253s ago: executing program 2 (id=7244): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa60, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) socket$kcm(0x2, 0x3, 0x73) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x400c080) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = syz_clone(0x4140000, 0x0, 0x0, &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)) r6 = openat$cgroup_ro(r1, &(0x7f00000014c0)='memory.swap.events\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001540)={r5, r6, 0x0, 0x0, 0x0}, 0x30) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x0, &(0x7f0000000280), &(0x7f0000000380)='syzkaller\x00', 0x3, 0x2a, &(0x7f00000003c0)=""/42, 0x40f00, 0xa, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000980)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0xb, 0xfffffffc, 0x24}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[r1, r1, r1, r1, r8, r1], &(0x7f0000000ac0)=[{0x5, 0x4, 0x1}], 0x10, 0x4}, 0x94) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(r0, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x60ff, 0x8cffffff) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x29, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x75effb14, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0xdf, 0x7, 0xc, 0x2, 0x8001}, @jmp={0x5, 0x0, 0x8, 0xb, 0x9, 0x50, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xb9}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xce9}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x70e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d40)='GPL\x00', 0x8, 0xeb, &(0x7f0000000d80)=""/235, 0x40f00, 0x25, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000e80)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000ec0)={0x2, 0x2, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000f00)=[r8, r10, r8, r10, r1, r8, r9, r10], &(0x7f0000000f40)=[{0x5, 0x3, 0x10, 0x4}, {0x1, 0x5, 0x1, 0xb}, {0x3, 0x2, 0x3, 0xa}, {0x3, 0x4, 0xd, 0xc}]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r11, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0], 0x0, 0xb, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0x76, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) 2.068930349s ago: executing program 2 (id=7245): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000012c0)="48004800140081fb60590c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8d96d6f", 0x48}], 0x1}, 0x24000014) 1.924033733s ago: executing program 2 (id=7246): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) socketpair(0x27, 0x80000, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42340, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230006) close(r8) 656.453954ms ago: executing program 0 (id=7247): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0xa892, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000032, 0xfffffbff, 0x3, 0x9, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0x20000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x9) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/136, 0x88}, 0x12000) 642.971464ms ago: executing program 32 (id=7221): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x10012, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004800) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r3, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000080), 0x4) 523.578787ms ago: executing program 0 (id=7249): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @loopback, 0x0, 0x1100000}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000740)="c8be54", 0x3}], 0x1, &(0x7f0000001540)=[{0x10, 0x112, 0x8}, {0x10, 0x111, 0x1}], 0x20}, 0x20000000) 279.944653ms ago: executing program 3 (id=7250): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="cc4790b302000000b705000008002f44850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 3 (id=7251): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r7, &(0x7f0000000280), 0x0}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) recvmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x14044040) kernel console output (not intermixed with test programs): 35][T25453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1576.944076][T25453] RSP: 002b:00007f033b820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1576.952522][T25453] RAX: ffffffffffffffda RBX: 00007f033ac25fa0 RCX: 00007f033a99e0d9 [ 1576.960521][T25453] RDX: 0000000020000000 RSI: 00002000000018c0 RDI: 0000000000000005 [ 1576.969493][T25453] RBP: 00007f033b820090 R08: 0000000000000000 R09: 0000000000000000 [ 1576.977614][T25453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1576.985645][T25453] R13: 00007f033ac26038 R14: 00007f033ac25fa0 R15: 00007fffec2a7288 [ 1576.993674][T25453] [ 1577.157567][T25460] netlink: 'syz.2.6093': attribute type 6 has an invalid length. [ 1577.171261][T25460] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6093'. [ 1577.768875][T25463] sit0: entered allmulticast mode [ 1582.838062][T25516] netlink: 'syz.0.6112': attribute type 11 has an invalid length. [ 1583.655310][T25528] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6115'. [ 1585.045964][T25533] syzkaller0: entered promiscuous mode [ 1585.051865][T25533] syzkaller0: entered allmulticast mode [ 1587.462610][T25561] netlink: 'syz.0.6124': attribute type 6 has an invalid length. [ 1587.472549][T25561] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6124'. [ 1587.495649][T25564] netlink: 'syz.1.6127': attribute type 10 has an invalid length. [ 1587.544635][T25564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.561597][T25564] bridge_slave_1: left allmulticast mode [ 1587.567824][T25564] bridge_slave_1: left promiscuous mode [ 1587.573671][T25564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.592212][T25564] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1588.123286][T25577] netlink: 'syz.1.6130': attribute type 25 has an invalid length. [ 1588.135210][T25577] netlink: 'syz.1.6130': attribute type 10 has an invalid length. [ 1591.253639][T25597] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6136'. [ 1593.878596][T25603] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.6138'. [ 1593.918682][T25602] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6146'. [ 1594.156326][T25602] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6146'. [ 1595.272275][T25625] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6147'. [ 1595.354634][T25629] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6145'. [ 1595.368932][T25626] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6145'. [ 1595.386533][T25626] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6145'. [ 1595.800972][T25634] delete_channel: no stack [ 1595.824535][T25634] delete_channel: no stack [ 1595.890678][T25638] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6151'. [ 1595.975249][T25634] netlink: 'syz.1.6150': attribute type 17 has an invalid length. [ 1595.998636][T25634] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6150'. [ 1596.454192][T25634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1596.551002][T25638] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6151'. [ 1598.860589][T25665] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6158'. [ 1602.479168][T25689] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6164'. [ 1602.742336][T25689] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6164'. [ 1605.710160][T25709] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6170'. [ 1605.776786][T25707] netlink: 'syz.2.6173': attribute type 39 has an invalid length. [ 1606.902118][T25706] delete_channel: no stack [ 1607.786285][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.792716][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.962975][T25738] sock: sock_timestamping_bind_phc: sock not bind to device [ 1608.091631][T25746] netlink: 'syz.2.6181': attribute type 2 has an invalid length. [ 1608.104542][T25746] netlink: 'syz.2.6181': attribute type 8 has an invalid length. [ 1608.135228][T25746] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6181'. [ 1608.153960][T25738] netlink: 'syz.1.6178': attribute type 9 has an invalid length. [ 1608.185383][T25738] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6178'. [ 1608.280338][T25746] netlink: 'syz.2.6181': attribute type 9 has an invalid length. [ 1608.292944][T25746] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6181'. [ 1608.433171][T25755] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6183'. [ 1608.472157][T25755] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6183'. [ 1612.122426][T25785] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6193'. [ 1612.217723][T25785] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6193'. [ 1612.598618][T25806] netlink: 'syz.2.6200': attribute type 29 has an invalid length. [ 1612.611370][T25806] netlink: 'syz.2.6200': attribute type 21 has an invalid length. [ 1612.624822][T25806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6200'. [ 1612.800643][T25810] netlink: 'syz.1.6201': attribute type 6 has an invalid length. [ 1612.817156][T25810] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6201'. [ 1612.994336][T25812] netlink: 'syz.2.6202': attribute type 6 has an invalid length. [ 1613.023357][T25812] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6202'. [ 1613.754231][T25819] netlink: 'syz.0.6203': attribute type 9 has an invalid length. [ 1613.762390][T25819] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6203'. [ 1613.812994][T25818] netlink: 'syz.0.6203': attribute type 2 has an invalid length. [ 1613.835168][T25818] netlink: 'syz.0.6203': attribute type 8 has an invalid length. [ 1613.843776][T25818] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6203'. [ 1615.468270][T25830] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6206'. [ 1615.904320][T25830] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6206'. [ 1616.722969][T25854] netlink: 'syz.3.6214': attribute type 2 has an invalid length. [ 1616.741967][T25854] netlink: 'syz.3.6214': attribute type 8 has an invalid length. [ 1616.751553][T25854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6214'. [ 1616.918454][T25858] netlink: 'syz.3.6214': attribute type 9 has an invalid length. [ 1616.936495][T25858] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6214'. [ 1617.649117][T25871] FAULT_INJECTION: forcing a failure. [ 1617.649117][T25871] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.664998][T25871] CPU: 0 PID: 25871 Comm: syz.3.6219 Not tainted syzkaller #0 [ 1617.672531][T25871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1617.682635][T25871] Call Trace: [ 1617.685960][T25871] [ 1617.688932][T25871] dump_stack_lvl+0x18c/0x250 [ 1617.693659][T25871] ? sctp_sendmsg+0x1519/0x27b0 [ 1617.698563][T25871] ? ___sys_sendmsg+0x2a6/0x360 [ 1617.703469][T25871] ? show_regs_print_info+0x20/0x20 [ 1617.708723][T25871] ? load_image+0x420/0x420 [ 1617.713313][T25871] should_fail_ex+0x394/0x4c0 [ 1617.718059][T25871] should_failslab+0x9/0x20 [ 1617.722632][T25871] slab_pre_alloc_hook+0x59/0x300 [ 1617.727700][T25871] ? sctp_add_bind_addr+0x8c/0x360 [ 1617.732842][T25871] __kmem_cache_alloc_node+0x53/0x250 [ 1617.738257][T25871] ? sctp_add_bind_addr+0x8c/0x360 [ 1617.743396][T25871] kmalloc_trace+0x2a/0xe0 [ 1617.747850][T25871] sctp_add_bind_addr+0x8c/0x360 [ 1617.752824][T25871] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1617.758490][T25871] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1617.764238][T25871] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1617.770363][T25871] ? sctp_v4_is_any+0x35/0x60 [ 1617.775076][T25871] ? sctp_copy_one_addr+0x8c/0x350 [ 1617.780217][T25871] sctp_bind_addr_copy+0xb3/0x3c0 [ 1617.785297][T25871] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1617.791686][T25871] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1617.797021][T25871] ? __sctp_connect+0xd80/0xd80 [ 1617.801909][T25871] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1617.807323][T25871] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1617.812900][T25871] ? security_sctp_bind_connect+0x89/0xb0 [ 1617.818676][T25871] sctp_sendmsg+0x1519/0x27b0 [ 1617.823414][T25871] ? sctp_getsockopt+0xb60/0xb60 [ 1617.828409][T25871] ? aa_af_perm+0x330/0x330 [ 1617.832948][T25871] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1617.839400][T25871] ? sock_rps_record_flow+0x19/0x3f0 [ 1617.844722][T25871] ? inet_sendmsg+0xce/0x2a0 [ 1617.849342][T25871] ? inet_send_prepare+0x250/0x250 [ 1617.854488][T25871] ____sys_sendmsg+0x61b/0x980 [ 1617.859294][T25871] ? __asan_memset+0x22/0x40 [ 1617.863917][T25871] ? __sys_sendmsg_sock+0x30/0x30 [ 1617.868974][T25871] ? __import_iovec+0x5f2/0x850 [ 1617.873869][T25871] ? import_iovec+0x73/0xa0 [ 1617.878418][T25871] ___sys_sendmsg+0x2a6/0x360 [ 1617.883132][T25871] ? __sys_sendmsg+0x2b0/0x2b0 [ 1617.887943][T25871] ? __lock_acquire+0x7d80/0x7d80 [ 1617.893025][T25871] __se_sys_sendmsg+0x1d0/0x2c0 [ 1617.897910][T25871] ? __x64_sys_sendmsg+0x80/0x80 [ 1617.902888][T25871] ? lockdep_hardirqs_on+0x98/0x150 [ 1617.908126][T25871] do_syscall_64+0x55/0xb0 [ 1617.912575][T25871] ? clear_bhb_loop+0x40/0x90 [ 1617.917287][T25871] ? clear_bhb_loop+0x40/0x90 [ 1617.921996][T25871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1617.927923][T25871] RIP: 0033:0x7fec9c79e0d9 [ 1617.932385][T25871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.952025][T25871] RSP: 002b:00007fec9d6dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1617.960462][T25871] RAX: ffffffffffffffda RBX: 00007fec9ca25fa0 RCX: 00007fec9c79e0d9 [ 1617.968463][T25871] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1617.976461][T25871] RBP: 00007fec9d6dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.984454][T25871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.992455][T25871] R13: 00007fec9ca26038 R14: 00007fec9ca25fa0 R15: 00007ffc21d5d1b8 [ 1618.000568][T25871] [ 1618.375758][T25882] netlink: 'syz.1.6221': attribute type 10 has an invalid length. [ 1618.405431][T25882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.558197][T25887] netlink: 'syz.0.6225': attribute type 6 has an invalid length. [ 1618.572235][T25887] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6225'. [ 1619.159629][T25899] netlink: 'syz.3.6230': attribute type 5 has an invalid length. [ 1619.250552][T25899] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.6230'. [ 1619.284640][T25903] FAULT_INJECTION: forcing a failure. [ 1619.284640][T25903] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.297577][T25903] CPU: 0 PID: 25903 Comm: syz.2.6232 Not tainted syzkaller #0 [ 1619.305093][T25903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1619.315242][T25903] Call Trace: [ 1619.318572][T25903] [ 1619.321550][T25903] dump_stack_lvl+0x18c/0x250 [ 1619.326288][T25903] ? show_regs_print_info+0x20/0x20 [ 1619.331542][T25903] ? load_image+0x420/0x420 [ 1619.336113][T25903] ? __might_sleep+0xe0/0xe0 [ 1619.340768][T25903] ? __lock_acquire+0x7d80/0x7d80 [ 1619.345848][T25903] ? __asan_memset+0x22/0x40 [ 1619.350506][T25903] should_fail_ex+0x394/0x4c0 [ 1619.355254][T25903] should_failslab+0x9/0x20 [ 1619.359819][T25903] slab_pre_alloc_hook+0x59/0x300 [ 1619.364953][T25903] kmem_cache_alloc+0x5a/0x2c0 [ 1619.369779][T25903] ? security_inode_alloc+0x34/0x110 [ 1619.375125][T25903] security_inode_alloc+0x34/0x110 [ 1619.380301][T25903] inode_init_always+0x914/0xc90 [ 1619.385287][T25903] new_inode_pseudo+0x95/0x1d0 [ 1619.390079][T25903] __sock_create+0x12d/0x940 [ 1619.394705][T25903] ? perf_trace_lock+0xfc/0x3b0 [ 1619.399588][T25903] mptcp_subflow_create_socket+0x10c/0xad0 [ 1619.405437][T25903] ? trace_event_raw_event_lock+0x240/0x240 [ 1619.411371][T25903] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 1619.417212][T25903] ? mark_lock+0x94/0x320 [ 1619.421574][T25903] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1619.427585][T25903] __mptcp_nmpc_sk+0x157/0x720 [ 1619.432502][T25903] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 1619.439314][T25903] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1619.444724][T25903] ? lockdep_hardirqs_on+0x98/0x150 [ 1619.449961][T25903] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1619.455377][T25903] mptcp_sendmsg_fastopen+0x7c/0x4c0 [ 1619.460715][T25903] mptcp_sendmsg+0x144c/0x1670 [ 1619.465514][T25903] ? aa_sk_perm+0x83c/0x970 [ 1619.470063][T25903] ? aa_sk_perm+0x83c/0x970 [ 1619.474607][T25903] ? aa_af_perm+0x330/0x330 [ 1619.479145][T25903] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1619.485599][T25903] ? mptcp_shutdown+0x80/0x80 [ 1619.490309][T25903] ? sock_rps_record_flow+0x19/0x3f0 [ 1619.495629][T25903] ? inet_sendmsg+0xce/0x2a0 [ 1619.500253][T25903] ? inet_send_prepare+0x250/0x250 [ 1619.505399][T25903] ____sys_sendmsg+0x61b/0x980 [ 1619.510209][T25903] ? __asan_memset+0x22/0x40 [ 1619.514834][T25903] ? __sys_sendmsg_sock+0x30/0x30 [ 1619.519906][T25903] ? __import_iovec+0x3fa/0x850 [ 1619.524795][T25903] ? import_iovec+0x73/0xa0 [ 1619.529337][T25903] ___sys_sendmsg+0x2a6/0x360 [ 1619.534051][T25903] ? __sys_sendmsg+0x2b0/0x2b0 [ 1619.538872][T25903] ? __lock_acquire+0x7d80/0x7d80 [ 1619.543957][T25903] __se_sys_sendmsg+0x1d0/0x2c0 [ 1619.548844][T25903] ? __x64_sys_sendmsg+0x80/0x80 [ 1619.553828][T25903] ? lockdep_hardirqs_on+0x98/0x150 [ 1619.559064][T25903] do_syscall_64+0x55/0xb0 [ 1619.563513][T25903] ? clear_bhb_loop+0x40/0x90 [ 1619.568222][T25903] ? clear_bhb_loop+0x40/0x90 [ 1619.572934][T25903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1619.578855][T25903] RIP: 0033:0x7f033a99e0d9 [ 1619.583300][T25903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1619.602931][T25903] RSP: 002b:00007f033b820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1619.611396][T25903] RAX: ffffffffffffffda RBX: 00007f033ac25fa0 RCX: 00007f033a99e0d9 [ 1619.619393][T25903] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000003 [ 1619.627392][T25903] RBP: 00007f033b820090 R08: 0000000000000000 R09: 0000000000000000 [ 1619.635389][T25903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1619.643439][T25903] R13: 00007f033ac26038 R14: 00007f033ac25fa0 R15: 00007fffec2a7288 [ 1619.651474][T25903] [ 1619.684399][T25903] socket: no more sockets [ 1619.990891][T25907] C: renamed from team_slave_0 [ 1620.049735][T25907] netlink: 'syz.3.6235': attribute type 3 has an invalid length. [ 1620.074707][T25907] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6235'. [ 1620.121659][T25914] netlink: 'syz.2.6236': attribute type 10 has an invalid length. [ 1620.138357][T25914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1620.222467][T25914] netlink: 'syz.2.6236': attribute type 10 has an invalid length. [ 1620.231682][T25914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1620.749284][T25925] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6239'. [ 1620.776283][T25920] syzkaller0: entered promiscuous mode [ 1620.781863][T25920] syzkaller0: entered allmulticast mode [ 1621.184604][T25938] netlink: 'syz.3.6243': attribute type 1 has an invalid length. [ 1621.202829][T25938] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6243'. [ 1625.824508][T25938] netlink: 'syz.3.6243': attribute type 10 has an invalid length. [ 1625.833414][T25938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.852751][T25938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.859951][T25938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.882979][T25938] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1626.281794][T25952] netlink: 'syz.3.6249': attribute type 10 has an invalid length. [ 1626.310206][T25952] FAULT_INJECTION: forcing a failure. [ 1626.310206][T25952] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.323000][T25952] CPU: 1 PID: 25952 Comm: syz.3.6249 Not tainted syzkaller #0 [ 1626.330509][T25952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1626.340612][T25952] Call Trace: [ 1626.343939][T25952] [ 1626.346998][T25952] dump_stack_lvl+0x18c/0x250 [ 1626.351734][T25952] ? show_regs_print_info+0x20/0x20 [ 1626.356976][T25952] ? load_image+0x420/0x420 [ 1626.361533][T25952] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1626.367572][T25952] should_fail_ex+0x394/0x4c0 [ 1626.372306][T25952] should_failslab+0x9/0x20 [ 1626.376860][T25952] slab_pre_alloc_hook+0x59/0x300 [ 1626.381937][T25952] ? switchdev_deferred_enqueue+0x2d/0x240 [ 1626.387857][T25952] ? switchdev_deferred_enqueue+0x2d/0x240 [ 1626.393703][T25952] __kmem_cache_alloc_node+0x53/0x250 [ 1626.399137][T25952] ? switchdev_deferred_enqueue+0x2d/0x240 [ 1626.404982][T25952] ? switchdev_deferred_enqueue+0x240/0x240 [ 1626.410918][T25952] __kmalloc+0xa7/0x240 [ 1626.415127][T25952] ? verify_lock_unused+0x140/0x140 [ 1626.420408][T25952] switchdev_deferred_enqueue+0x2d/0x240 [ 1626.426095][T25952] switchdev_port_attr_set+0xff/0x2e0 [ 1626.431513][T25952] ? switchdev_deferred_process+0x290/0x290 [ 1626.437464][T25952] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1626.443495][T25952] ? mark_lock+0x94/0x320 [ 1626.447873][T25952] br_set_state+0x378/0x690 [ 1626.452434][T25952] ? br_ioctl_stub+0xd50/0xd50 [ 1626.457255][T25952] ? do_raw_spin_lock+0x11f/0x2b0 [ 1626.462330][T25952] ? __rwlock_init+0x150/0x150 [ 1626.467144][T25952] ? br_become_designated_port+0x20/0x250 [ 1626.472906][T25952] br_stp_disable_port+0x71/0x1c0 [ 1626.477972][T25952] br_stp_disable_bridge+0x81/0x150 [ 1626.483241][T25952] br_dev_stop+0x2d/0x180 [ 1626.487629][T25952] ? br_dev_open+0x140/0x140 [ 1626.492281][T25952] __dev_close_many+0x1d5/0x2b0 [ 1626.497205][T25952] ? dev_close_many+0x410/0x410 [ 1626.502121][T25952] __dev_change_flags+0x2cd/0x6a0 [ 1626.507195][T25952] ? vprintk_emit+0x53d/0x610 [ 1626.511919][T25952] ? dev_get_flags+0x1c0/0x1c0 [ 1626.516729][T25952] ? printk_sprint+0x460/0x460 [ 1626.521534][T25952] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1626.527480][T25952] dev_change_flags+0x7c/0x1a0 [ 1626.532300][T25952] do_setlink+0xb69/0x3f40 [ 1626.536776][T25952] ? load_image+0x420/0x420 [ 1626.541325][T25952] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1626.547553][T25952] ? stack_trace_save+0xaa/0x100 [ 1626.552537][T25952] ? stack_trace_snprint+0xf0/0xf0 [ 1626.557729][T25952] ? __nla_validate+0x50/0x50 [ 1626.562496][T25952] ? validate_linkmsg+0x719/0x910 [ 1626.567576][T25952] rtnl_newlink+0x1848/0x2170 [ 1626.572324][T25952] ? rtnl_setlink+0x4e0/0x4e0 [ 1626.577046][T25952] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1626.583246][T25952] ? rcu_is_watching+0x15/0xb0 [ 1626.588065][T25952] ? trace_contention_end+0x39/0xe0 [ 1626.593333][T25952] ? __mutex_lock+0x30d/0xc80 [ 1626.598091][T25952] ? rtnl_setlink+0x4e0/0x4e0 [ 1626.602811][T25952] rtnetlink_rcv_msg+0x843/0xf90 [ 1626.607797][T25952] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1626.612962][T25952] ? rtnetlink_bind+0x80/0x80 [ 1626.617693][T25952] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1626.623726][T25952] ? lock_chain_count+0x20/0x20 [ 1626.628627][T25952] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1626.634062][T25952] ? lockdep_hardirqs_on+0x98/0x150 [ 1626.639311][T25952] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1626.644728][T25952] ? _local_bh_enable+0xa0/0xa0 [ 1626.649629][T25952] ? __dev_queue_xmit+0x275/0x3630 [ 1626.654794][T25952] ? __dev_queue_xmit+0x1bc2/0x3630 [ 1626.660067][T25952] ? __dev_queue_xmit+0x275/0x3630 [ 1626.665253][T25952] ? ref_tracker_free+0x686/0x830 [ 1626.670333][T25952] netlink_rcv_skb+0x235/0x4c0 [ 1626.675146][T25952] ? rtnetlink_bind+0x80/0x80 [ 1626.679884][T25952] ? netlink_ack+0x1160/0x1160 [ 1626.684709][T25952] ? __lock_acquire+0x7d80/0x7d80 [ 1626.689795][T25952] ? netlink_deliver_tap+0x2e/0x1b0 [ 1626.695047][T25952] netlink_unicast+0x7b1/0x930 [ 1626.699888][T25952] netlink_sendmsg+0x8d0/0xbf0 [ 1626.704704][T25952] ? netlink_getsockopt+0x590/0x590 [ 1626.709950][T25952] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1626.715542][T25952] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1626.720880][T25952] ? security_socket_sendmsg+0x80/0xa0 [ 1626.726377][T25952] ? netlink_getsockopt+0x590/0x590 [ 1626.731618][T25952] ____sys_sendmsg+0x61b/0x980 [ 1626.736428][T25952] ? __asan_memset+0x22/0x40 [ 1626.741074][T25952] ? __sys_sendmsg_sock+0x30/0x30 [ 1626.746132][T25952] ? __import_iovec+0x5f2/0x850 [ 1626.751040][T25952] ? import_iovec+0x73/0xa0 [ 1626.755600][T25952] ___sys_sendmsg+0x2a6/0x360 [ 1626.760319][T25952] ? get_pid_task+0x20/0x1e0 [ 1626.764964][T25952] ? __sys_sendmsg+0x2b0/0x2b0 [ 1626.769824][T25952] ? __lock_acquire+0x7d80/0x7d80 [ 1626.774923][T25952] __se_sys_sendmsg+0x1d0/0x2c0 [ 1626.779823][T25952] ? __x64_sys_sendmsg+0x80/0x80 [ 1626.784821][T25952] ? lockdep_hardirqs_on+0x98/0x150 [ 1626.790084][T25952] do_syscall_64+0x55/0xb0 [ 1626.794540][T25952] ? clear_bhb_loop+0x40/0x90 [ 1626.799268][T25952] ? clear_bhb_loop+0x40/0x90 [ 1626.803983][T25952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1626.810022][T25952] RIP: 0033:0x7fec9c79e0d9 [ 1626.814489][T25952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.834140][T25952] RSP: 002b:00007fec9d6dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1626.842599][T25952] RAX: ffffffffffffffda RBX: 00007fec9ca25fa0 RCX: 00007fec9c79e0d9 [ 1626.850614][T25952] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1626.858650][T25952] RBP: 00007fec9d6dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1626.866675][T25952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1626.874687][T25952] R13: 00007fec9ca26038 R14: 00007fec9ca25fa0 R15: 00007ffc21d5d1b8 [ 1626.882712][T25952] [ 1626.885882][T25952] bridge0: error setting offload STP state on port 1(bridge_slave_0) [ 1627.134330][T25954] delete_channel: no stack [ 1628.136704][T25965] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6253'. [ 1628.231245][T25965] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6253'. [ 1628.351042][T25968] C: renamed from team_slave_0 (while UP) [ 1628.395543][T25968] netlink: 'syz.1.6254': attribute type 3 has an invalid length. [ 1628.403726][T25968] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6254'. [ 1628.418010][T25969] netlink: 'syz.3.6255': attribute type 21 has an invalid length. [ 1628.692353][T25977] netlink: 'syz.0.6258': attribute type 6 has an invalid length. [ 1628.700817][T25977] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6258'. [ 1629.469279][T25987] delete_channel: no stack [ 1629.495499][T25995] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1629.720167][T25999] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6265'. [ 1629.797068][T26000] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6265'. [ 1630.125970][T26006] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1630.150779][T26004] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6267'. [ 1630.226390][T26006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6266'. [ 1630.844484][T26026] IPv6: NLM_F_CREATE should be specified when creating new route [ 1630.852862][T26026] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1633.426360][T26035] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6278'. [ 1634.251179][T26056] netlink: 'syz.2.6287': attribute type 10 has an invalid length. [ 1634.513665][T26060] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6289'. [ 1634.778682][T26064] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6291'. [ 1635.924118][T26094] netlink: 'syz.0.6302': attribute type 10 has an invalid length. [ 1635.955639][T26094] netlink: 'syz.0.6302': attribute type 10 has an invalid length. [ 1635.973390][T26094] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.6302'. [ 1635.989665][T26094] openvswitch: netlink: Message has 4 unknown bytes. [ 1636.238152][T26105] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6306'. [ 1636.869694][T26126] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6313'. [ 1636.907468][T26124] netlink: 192188 bytes leftover after parsing attributes in process `syz.3.6312'. [ 1636.922424][T26124] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1638.424749][T26144] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6317'. [ 1638.775354][T26154] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6321'. [ 1638.817961][T26156] netlink: 'syz.2.6322': attribute type 2 has an invalid length. [ 1638.832754][T26156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6322'. [ 1638.843583][T26156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6322'. [ 1638.854244][T26156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6322'. [ 1639.007006][T26160] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6331'. [ 1639.118740][ T51] Bluetooth: hci2: Dropping invalid advertising data [ 1639.126078][ T51] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1639.360697][T26164] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6325'. [ 1640.242720][T26174] netlink: 'syz.3.6328': attribute type 4 has an invalid length. [ 1640.260488][T26174] netlink: 'syz.3.6328': attribute type 1 has an invalid length. [ 1640.270148][T26174] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.6328'. [ 1640.360836][T26184] netlink: 'syz.2.6333': attribute type 21 has an invalid length. [ 1640.375084][T26184] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6333'. [ 1640.546069][T26187] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6332'. [ 1640.896765][T26199] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6336'. [ 1641.521741][T26217] netlink: 'syz.1.6341': attribute type 3 has an invalid length. [ 1643.908154][T26251] __nla_validate_parse: 5 callbacks suppressed [ 1643.908177][T26251] netlink: 22 bytes leftover after parsing attributes in process `syz.0.6360'. [ 1644.269072][T26251] syzkaller0: entered promiscuous mode [ 1644.288950][T26251] syzkaller0: entered allmulticast mode [ 1647.675223][T26268] netlink: 'syz.1.6358': attribute type 25 has an invalid length. [ 1647.683131][T26268] netlink: 'syz.1.6358': attribute type 10 has an invalid length. [ 1647.883597][T26275] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1647.904762][T26276] netlink: 'syz.3.6363': attribute type 6 has an invalid length. [ 1647.914093][T26276] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6363'. [ 1648.128060][T26272] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6361'. [ 1649.111561][T26288] netlink: 'syz.1.6366': attribute type 4 has an invalid length. [ 1649.119652][T26288] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6366'. [ 1649.351730][T26297] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6368'. [ 1649.573405][T26297] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6368'. [ 1649.588809][T26301] netlink: 'syz.1.6369': attribute type 1 has an invalid length. [ 1649.597531][T26301] netlink: 'syz.1.6369': attribute type 2 has an invalid length. [ 1649.607937][T26301] netlink: 'syz.1.6369': attribute type 2 has an invalid length. [ 1649.618081][T26301] netlink: 'syz.1.6369': attribute type 3 has an invalid length. [ 1649.648434][T26301] netlink: 'syz.1.6369': attribute type 4 has an invalid length. [ 1649.681354][T26301] netlink: 'syz.1.6369': attribute type 5 has an invalid length. [ 1649.705233][T26301] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.6369'. [ 1650.045010][T26309] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6372'. [ 1650.057628][T26310] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6371'. [ 1651.065218][T26328] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6378'. [ 1651.201921][T26328] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6378'. [ 1651.516936][T26338] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6390'. [ 1651.541365][T26346] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6384'. [ 1656.000358][T26394] validate_nla: 9 callbacks suppressed [ 1656.000380][T26394] netlink: 'syz.2.6401': attribute type 7 has an invalid length. [ 1656.310964][T26393] netlink: 'syz.3.6400': attribute type 1 has an invalid length. [ 1656.319184][T26393] netlink: 'syz.3.6400': attribute type 2 has an invalid length. [ 1656.327462][T26393] netlink: 'syz.3.6400': attribute type 2 has an invalid length. [ 1656.336217][T26393] netlink: 'syz.3.6400': attribute type 3 has an invalid length. [ 1656.355192][T26393] netlink: 'syz.3.6400': attribute type 4 has an invalid length. [ 1656.363192][T26393] netlink: 'syz.3.6400': attribute type 5 has an invalid length. [ 1656.435187][T26393] netlink: 'syz.3.6400': attribute type 6 has an invalid length. [ 1656.443502][T26393] netlink: 'syz.3.6400': attribute type 7 has an invalid length. [ 1656.471308][T26393] netlink: 'syz.3.6400': attribute type 9 has an invalid length. [ 1656.520370][T26393] __nla_validate_parse: 4 callbacks suppressed [ 1656.520411][T26393] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.6400'. [ 1656.793641][T26409] netlink: 188348 bytes leftover after parsing attributes in process `syz.2.6406'. [ 1656.894050][T26414] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6409'. [ 1657.849007][T26426] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6411'. [ 1657.866429][T26426] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1657.874835][T26426] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.910366][T26426] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1659.764264][T26453] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.6420'. [ 1661.674073][T26482] validate_nla: 17 callbacks suppressed [ 1661.674094][T26482] netlink: 'syz.3.6428': attribute type 25 has an invalid length. [ 1661.705155][T26482] netlink: 'syz.3.6428': attribute type 9 has an invalid length. [ 1661.714268][T26482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6428'. [ 1661.733886][T26481] netlink: 'syz.1.6429': attribute type 9 has an invalid length. [ 1661.747198][T26481] netlink: 'syz.1.6429': attribute type 23 has an invalid length. [ 1661.759342][T26481] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.6429'. [ 1661.974297][T26484] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6430'. [ 1662.584442][T26498] netlink: 'syz.1.6434': attribute type 9 has an invalid length. [ 1662.614015][T26498] netlink: 'syz.1.6434': attribute type 23 has an invalid length. [ 1662.635477][T26498] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.6434'. [ 1663.814850][T26527] netlink: 'syz.1.6444': attribute type 6 has an invalid length. [ 1663.872453][T26527] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6444'. [ 1664.173438][T26530] netlink: 'syz.0.6445': attribute type 6 has an invalid length. [ 1664.198804][T26530] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1665.539570][T26541] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6449'. [ 1666.779493][T26550] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6451'. [ 1666.953443][T26555] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6452'. [ 1667.913197][T26560] netlink: 'syz.3.6454': attribute type 29 has an invalid length. [ 1667.921495][T26560] netlink: 'syz.3.6454': attribute type 29 has an invalid length. [ 1668.623495][T26567] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1668.766015][T26569] netlink: 'syz.0.6456': attribute type 10 has an invalid length. [ 1668.800680][T26569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6456'. [ 1668.864664][T26569] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1668.949257][T26569] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1669.041206][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.048004][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.059667][T26569] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1669.098790][T26573] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6458'. [ 1670.775610][T26573] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6458'. [ 1670.919178][T26575] netlink: 'syz.2.6459': attribute type 9 has an invalid length. [ 1670.967192][T26575] netlink: 'syz.2.6459': attribute type 23 has an invalid length. [ 1670.992428][T26575] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.6459'. [ 1671.387135][T26590] netlink: 'syz.2.6464': attribute type 6 has an invalid length. [ 1671.407002][T26590] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6464'. [ 1671.584452][T26594] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6467'. [ 1671.677698][T26594] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6467'. [ 1675.380590][T26611] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6471'. [ 1675.515884][T26616] FAULT_INJECTION: forcing a failure. [ 1675.515884][T26616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1675.644504][T26616] CPU: 1 PID: 26616 Comm: syz.1.6472 Not tainted syzkaller #0 [ 1675.652061][T26616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1675.662170][T26616] Call Trace: [ 1675.665494][T26616] [ 1675.668474][T26616] dump_stack_lvl+0x18c/0x250 [ 1675.673214][T26616] ? show_regs_print_info+0x20/0x20 [ 1675.678462][T26616] ? load_image+0x420/0x420 [ 1675.683025][T26616] ? __lock_acquire+0x7d80/0x7d80 [ 1675.688213][T26616] should_fail_ex+0x394/0x4c0 [ 1675.692955][T26616] _copy_from_user+0x2f/0xe0 [ 1675.697595][T26616] bpf_test_init+0xde/0x140 [ 1675.702165][T26616] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 1675.707621][T26616] ? __lock_acquire+0x7d80/0x7d80 [ 1675.712716][T26616] ? dev_put+0x80/0x80 [ 1675.716853][T26616] ? dev_put+0x80/0x80 [ 1675.720975][T26616] bpf_prog_test_run+0x31f/0x390 [ 1675.725969][T26616] __sys_bpf+0x49d/0x890 [ 1675.730265][T26616] ? bpf_link_show_fdinfo+0x390/0x390 [ 1675.735711][T26616] ? lock_chain_count+0x20/0x20 [ 1675.740626][T26616] __x64_sys_bpf+0x7c/0x90 [ 1675.745096][T26616] do_syscall_64+0x55/0xb0 [ 1675.749575][T26616] ? clear_bhb_loop+0x40/0x90 [ 1675.754337][T26616] ? clear_bhb_loop+0x40/0x90 [ 1675.759097][T26616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1675.765048][T26616] RIP: 0033:0x7fd77679e0d9 [ 1675.769513][T26616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.789203][T26616] RSP: 002b:00007fd7749f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1675.797668][T26616] RAX: ffffffffffffffda RBX: 00007fd776a25fa0 RCX: 00007fd77679e0d9 [ 1675.805685][T26616] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1675.813724][T26616] RBP: 00007fd7749f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.821770][T26616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.829788][T26616] R13: 00007fd776a26038 R14: 00007fd776a25fa0 R15: 00007ffe550b2c28 [ 1675.837833][T26616] [ 1676.143205][T26619] netlink: 'syz.0.6473': attribute type 9 has an invalid length. [ 1676.201597][T26619] netlink: 'syz.0.6473': attribute type 23 has an invalid length. [ 1676.216093][T26619] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.6473'. [ 1677.111609][T26635] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6477'. [ 1677.255585][T26635] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6477'. [ 1677.370542][T26639] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6479'. [ 1680.326243][T26652] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6481'. [ 1680.360375][T26656] FAULT_INJECTION: forcing a failure. [ 1680.360375][T26656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.412989][T26656] CPU: 0 PID: 26656 Comm: syz.3.6483 Not tainted syzkaller #0 [ 1680.420541][T26656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1680.430634][T26656] Call Trace: [ 1680.433962][T26656] [ 1680.436944][T26656] dump_stack_lvl+0x18c/0x250 [ 1680.441685][T26656] ? show_regs_print_info+0x20/0x20 [ 1680.446942][T26656] ? load_image+0x420/0x420 [ 1680.451518][T26656] ? __lock_acquire+0x7d80/0x7d80 [ 1680.456637][T26656] ? snprintf+0xe9/0x140 [ 1680.460948][T26656] should_fail_ex+0x394/0x4c0 [ 1680.465691][T26656] _copy_to_user+0x2f/0xa0 [ 1680.470196][T26656] simple_read_from_buffer+0xe7/0x150 [ 1680.475625][T26656] proc_fail_nth_read+0x1e8/0x260 [ 1680.480711][T26656] ? proc_fault_inject_write+0x360/0x360 [ 1680.486428][T26656] ? fsnotify_perm+0x271/0x5e0 [ 1680.491254][T26656] ? proc_fault_inject_write+0x360/0x360 [ 1680.496951][T26656] vfs_read+0x298/0x990 [ 1680.501169][T26656] ? kernel_read+0x1e0/0x1e0 [ 1680.505820][T26656] ? __fget_files+0x28/0x460 [ 1680.510470][T26656] ? __fget_files+0x3fc/0x460 [ 1680.515212][T26656] ? __fdget_pos+0x2a3/0x330 [ 1680.519852][T26656] ? ksys_read+0x74/0x260 [ 1680.524255][T26656] ksys_read+0x151/0x260 [ 1680.528563][T26656] ? vfs_write+0x9a0/0x9a0 [ 1680.533044][T26656] ? lockdep_hardirqs_on+0x98/0x150 [ 1680.538311][T26656] do_syscall_64+0x55/0xb0 [ 1680.542787][T26656] ? clear_bhb_loop+0x40/0x90 [ 1680.547517][T26656] ? clear_bhb_loop+0x40/0x90 [ 1680.552252][T26656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1680.558203][T26656] RIP: 0033:0x7fec9c75e90e [ 1680.562674][T26656] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1680.582381][T26656] RSP: 002b:00007fec9d6dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1680.590861][T26656] RAX: ffffffffffffffda RBX: 00007fec9d6dd6c0 RCX: 00007fec9c75e90e [ 1680.598892][T26656] RDX: 000000000000000f RSI: 00007fec9d6dd0a0 RDI: 0000000000000004 [ 1680.606912][T26656] RBP: 00007fec9d6dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.614923][T26656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1680.622977][T26656] R13: 00007fec9ca26038 R14: 00007fec9ca25fa0 R15: 00007ffc21d5d1b8 [ 1680.631088][T26656] [ 1681.193486][T26669] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6485'. [ 1681.312708][T26669] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1687.767444][T26693] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6493'. [ 1687.831726][T26696] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6492'. [ 1688.937575][T26710] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1690.570410][T26733] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6503'. [ 1692.743077][T26740] FAULT_INJECTION: forcing a failure. [ 1692.743077][T26740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1692.836223][T26740] CPU: 0 PID: 26740 Comm: syz.0.6505 Not tainted syzkaller #0 [ 1692.843782][T26740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1692.853902][T26740] Call Trace: [ 1692.857235][T26740] [ 1692.860206][T26740] dump_stack_lvl+0x18c/0x250 [ 1692.864932][T26740] ? show_regs_print_info+0x20/0x20 [ 1692.870179][T26740] ? load_image+0x420/0x420 [ 1692.874724][T26740] ? __lock_acquire+0x7d80/0x7d80 [ 1692.879792][T26740] should_fail_ex+0x394/0x4c0 [ 1692.884518][T26740] _copy_from_user+0x2f/0xe0 [ 1692.889143][T26740] bpf_test_init+0xde/0x140 [ 1692.893685][T26740] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 1692.899091][T26740] ? __lock_acquire+0x7d80/0x7d80 [ 1692.904160][T26740] ? dev_put+0x80/0x80 [ 1692.908272][T26740] ? dev_put+0x80/0x80 [ 1692.912373][T26740] bpf_prog_test_run+0x31f/0x390 [ 1692.917342][T26740] __sys_bpf+0x49d/0x890 [ 1692.921651][T26740] ? bpf_link_show_fdinfo+0x390/0x390 [ 1692.927067][T26740] ? lock_chain_count+0x20/0x20 [ 1692.931958][T26740] __x64_sys_bpf+0x7c/0x90 [ 1692.936416][T26740] do_syscall_64+0x55/0xb0 [ 1692.940862][T26740] ? clear_bhb_loop+0x40/0x90 [ 1692.945573][T26740] ? clear_bhb_loop+0x40/0x90 [ 1692.950290][T26740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1692.956223][T26740] RIP: 0033:0x7f8a0719e0d9 [ 1692.960672][T26740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1692.980314][T26740] RSP: 002b:00007f8a053f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1692.988765][T26740] RAX: ffffffffffffffda RBX: 00007f8a07425fa0 RCX: 00007f8a0719e0d9 [ 1692.996764][T26740] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1693.004763][T26740] RBP: 00007f8a053f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1693.012764][T26740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1693.020778][T26740] R13: 00007f8a07426038 R14: 00007f8a07425fa0 R15: 00007ffd77d8bbd8 [ 1693.028790][T26740] [ 1695.740746][T26773] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6516'. [ 1697.638682][T26780] FAULT_INJECTION: forcing a failure. [ 1697.638682][T26780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1697.673014][T26780] CPU: 1 PID: 26780 Comm: syz.3.6518 Not tainted syzkaller #0 [ 1697.680597][T26780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1697.690721][T26780] Call Trace: [ 1697.694049][T26780] [ 1697.697033][T26780] dump_stack_lvl+0x18c/0x250 [ 1697.701789][T26780] ? show_regs_print_info+0x20/0x20 [ 1697.707052][T26780] ? load_image+0x420/0x420 [ 1697.711631][T26780] ? __lock_acquire+0x7d80/0x7d80 [ 1697.716704][T26780] should_fail_ex+0x394/0x4c0 [ 1697.721441][T26780] _copy_from_user+0x2f/0xe0 [ 1697.726071][T26780] bpf_test_init+0xde/0x140 [ 1697.730622][T26780] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 1697.736036][T26780] ? __lock_acquire+0x7d80/0x7d80 [ 1697.741107][T26780] ? dev_put+0x80/0x80 [ 1697.745231][T26780] ? dev_put+0x80/0x80 [ 1697.749339][T26780] bpf_prog_test_run+0x31f/0x390 [ 1697.754322][T26780] __sys_bpf+0x49d/0x890 [ 1697.758616][T26780] ? bpf_link_show_fdinfo+0x390/0x390 [ 1697.764037][T26780] ? lock_chain_count+0x20/0x20 [ 1697.768930][T26780] __x64_sys_bpf+0x7c/0x90 [ 1697.773382][T26780] do_syscall_64+0x55/0xb0 [ 1697.777847][T26780] ? clear_bhb_loop+0x40/0x90 [ 1697.782566][T26780] ? clear_bhb_loop+0x40/0x90 [ 1697.787294][T26780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1697.793225][T26780] RIP: 0033:0x7fec9c79e0d9 [ 1697.797665][T26780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1697.817298][T26780] RSP: 002b:00007fec9d6dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1697.825737][T26780] RAX: ffffffffffffffda RBX: 00007fec9ca25fa0 RCX: 00007fec9c79e0d9 [ 1697.833735][T26780] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1697.841737][T26780] RBP: 00007fec9d6dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1697.849730][T26780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1697.857729][T26780] R13: 00007fec9ca26038 R14: 00007fec9ca25fa0 R15: 00007ffc21d5d1b8 [ 1697.865744][T26780] [ 1698.034721][T26788] netlink: 'syz.1.6521': attribute type 1 has an invalid length. [ 1698.058891][T26788] netlink: 'syz.1.6521': attribute type 2 has an invalid length. [ 1698.084261][T26793] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6522'. [ 1698.103677][T26788] netlink: 'syz.1.6521': attribute type 2 has an invalid length. [ 1698.135265][T26788] netlink: 'syz.1.6521': attribute type 3 has an invalid length. [ 1698.151198][T26788] netlink: 'syz.1.6521': attribute type 4 has an invalid length. [ 1698.165202][T26788] netlink: 'syz.1.6521': attribute type 5 has an invalid length. [ 1698.175126][T26788] netlink: 'syz.1.6521': attribute type 6 has an invalid length. [ 1698.190607][T26788] netlink: 'syz.1.6521': attribute type 7 has an invalid length. [ 1698.214784][T26788] netlink: 'syz.1.6521': attribute type 9 has an invalid length. [ 1698.277297][T26788] netlink: 'syz.1.6521': attribute type 10 has an invalid length. [ 1698.354278][T26796] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6524'. [ 1698.367050][T26788] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.6521'. [ 1698.516843][T26793] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6522'. [ 1702.649210][T26829] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6534'. [ 1703.959871][T26839] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6536'. [ 1704.200673][T26839] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6536'. [ 1706.235104][T26857] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.6544'. [ 1706.341316][T26859] validate_nla: 4 callbacks suppressed [ 1706.341336][T26859] netlink: 'syz.1.6542': attribute type 6 has an invalid length. [ 1706.410173][T26859] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6542'. [ 1708.519743][T26876] netlink: 'syz.3.6548': attribute type 21 has an invalid length. [ 1708.530623][T26876] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6548'. [ 1712.629268][T26885] FAULT_INJECTION: forcing a failure. [ 1712.629268][T26885] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.642395][T26885] CPU: 0 PID: 26885 Comm: syz.0.6551 Not tainted syzkaller #0 [ 1712.649916][T26885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1712.660028][T26885] Call Trace: [ 1712.663354][T26885] [ 1712.666323][T26885] dump_stack_lvl+0x18c/0x250 [ 1712.671064][T26885] ? show_regs_print_info+0x20/0x20 [ 1712.676313][T26885] ? load_image+0x420/0x420 [ 1712.680873][T26885] ? rhashtable_lookup+0x77a/0x7f0 [ 1712.686146][T26885] should_fail_ex+0x394/0x4c0 [ 1712.690889][T26885] should_failslab+0x9/0x20 [ 1712.695458][T26885] slab_pre_alloc_hook+0x59/0x300 [ 1712.700556][T26885] ? br_multicast_count+0xef/0xd10 [ 1712.705818][T26885] kmem_cache_alloc+0x5a/0x2c0 [ 1712.710640][T26885] ? skb_clone+0x1eb/0x370 [ 1712.715121][T26885] skb_clone+0x1eb/0x370 [ 1712.719420][T26885] maybe_deliver+0x98/0x150 [ 1712.723992][T26885] br_flood+0x317/0x670 [ 1712.728217][T26885] br_dev_xmit+0x10f3/0x18a0 [ 1712.732865][T26885] ? skb_crc32c_csum_help+0x510/0x510 [ 1712.738336][T26885] ? br_dev_xmit+0x1a6/0x18a0 [ 1712.743081][T26885] ? br_net_exit_batch+0x210/0x210 [ 1712.748260][T26885] ? validate_xmit_xfrm+0xbb/0x1340 [ 1712.753558][T26885] ? dev_set_alias+0x1a0/0x1d0 [ 1712.758380][T26885] dev_hard_start_xmit+0x269/0x790 [ 1712.763557][T26885] ? __dev_queue_xmit+0x275/0x3630 [ 1712.768708][T26885] __dev_queue_xmit+0x198c/0x3630 [ 1712.773763][T26885] ? ip_do_fragment+0x778/0x1750 [ 1712.778728][T26885] ? ip_output+0x2a5/0x3a0 [ 1712.783172][T26885] ? trace_call_bpf+0xc3/0x6c0 [ 1712.787967][T26885] ? __dev_queue_xmit+0x275/0x3630 [ 1712.793115][T26885] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1712.799203][T26885] ? do_syscall_64+0x55/0xb0 [ 1712.803836][T26885] ? netdev_core_pick_tx+0x370/0x370 [ 1712.809164][T26885] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1712.815196][T26885] ? __lock_acquire+0x7d80/0x7d80 [ 1712.820277][T26885] ? lock_chain_count+0x20/0x20 [ 1712.825168][T26885] ? __alloc_skb+0x138/0x2c0 [ 1712.829800][T26885] ? ip_finish_output2+0xb6d/0x1260 [ 1712.835037][T26885] ? ip_finish_output2+0x45a/0x1260 [ 1712.840270][T26885] ip_finish_output2+0xd4f/0x1260 [ 1712.845340][T26885] ? ip_finish_output2+0x45a/0x1260 [ 1712.850581][T26885] ? ip_fragment+0x210/0x210 [ 1712.855205][T26885] ? ip_options_fragment+0x1ae/0x290 [ 1712.860521][T26885] ? ip_do_fragment+0x7fa/0x1750 [ 1712.865510][T26885] ip_do_fragment+0x892/0x1750 [ 1712.870319][T26885] ? ip_fragment+0x210/0x210 [ 1712.874944][T26885] ip_output+0x2a5/0x3a0 [ 1712.879220][T26885] ? ip_output+0x5a/0x3a0 [ 1712.883578][T26885] iptunnel_xmit+0x4d0/0x910 [ 1712.888216][T26885] ip_tunnel_xmit+0x1d18/0x25b0 [ 1712.893119][T26885] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1712.898180][T26885] ? validate_xmit_xfrm+0xbb/0x1340 [ 1712.903412][T26885] ? skb_push+0x8e/0xe0 [ 1712.907637][T26885] ipgre_xmit+0x7eb/0xb70 [ 1712.912024][T26885] dev_hard_start_xmit+0x269/0x790 [ 1712.917192][T26885] ? __dev_queue_xmit+0x275/0x3630 [ 1712.922350][T26885] __dev_queue_xmit+0x198c/0x3630 [ 1712.927415][T26885] ? __dev_queue_xmit+0x275/0x3630 [ 1712.932580][T26885] ? netdev_core_pick_tx+0x370/0x370 [ 1712.937897][T26885] ? pskb_expand_head+0x17a/0x1150 [ 1712.943044][T26885] ? pskb_expand_head+0x17a/0x1150 [ 1712.948189][T26885] ? skb_release_data+0x1de/0x7f0 [ 1712.953271][T26885] ? __bpf_redirect+0x4d1/0xdf0 [ 1712.958162][T26885] __bpf_tx_skb+0x181/0x260 [ 1712.962703][T26885] bpf_clone_redirect+0x315/0x4a0 [ 1712.967770][T26885] ? bpf_test_run+0x174/0x870 [ 1712.972479][T26885] bpf_prog_208b094576c80b22+0x5e/0x63 [ 1712.977972][T26885] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1712.983978][T26885] ? __lock_acquire+0x7d80/0x7d80 [ 1712.989058][T26885] ? lock_chain_count+0x20/0x20 [ 1712.993945][T26885] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 1713.000220][T26885] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 1713.005542][T26885] ? ktime_get+0x7f/0x280 [ 1713.009898][T26885] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1713.016171][T26885] ? ktime_get_real_ts64+0x440/0x440 [ 1713.021513][T26885] ? __x64_sys_bpf+0x7c/0x90 [ 1713.026140][T26885] ? __local_bh_disable_ip+0x108/0x1a0 [ 1713.031625][T26885] ? __cant_sleep+0x220/0x220 [ 1713.036338][T26885] ? read_tsc+0x9/0x20 [ 1713.040440][T26885] ? ktime_get+0x24b/0x280 [ 1713.044897][T26885] ? bpf_test_run+0x174/0x870 [ 1713.049617][T26885] ? kvm_sched_clock_read+0x11/0x20 [ 1713.054863][T26885] bpf_test_run+0x4fa/0x870 [ 1713.059417][T26885] ? bpf_test_run+0x174/0x870 [ 1713.064123][T26885] ? dst_hold+0x70/0x70 [ 1713.068317][T26885] ? eth_get_headlen+0x210/0x210 [ 1713.073294][T26885] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 1713.078728][T26885] ? cpu_online+0x60/0x60 [ 1713.083085][T26885] bpf_prog_test_run+0x31f/0x390 [ 1713.088056][T26885] __sys_bpf+0x49d/0x890 [ 1713.092327][T26885] ? bpf_link_show_fdinfo+0x390/0x390 [ 1713.097745][T26885] ? lock_chain_count+0x20/0x20 [ 1713.102640][T26885] __x64_sys_bpf+0x7c/0x90 [ 1713.107084][T26885] do_syscall_64+0x55/0xb0 [ 1713.111528][T26885] ? clear_bhb_loop+0x40/0x90 [ 1713.116234][T26885] ? clear_bhb_loop+0x40/0x90 [ 1713.120954][T26885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1713.126887][T26885] RIP: 0033:0x7f8a0719e0d9 [ 1713.131332][T26885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1713.150962][T26885] RSP: 002b:00007f8a053f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1713.159401][T26885] RAX: ffffffffffffffda RBX: 00007f8a07425fa0 RCX: 00007f8a0719e0d9 [ 1713.167422][T26885] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1713.175416][T26885] RBP: 00007f8a053f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1713.183425][T26885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.191423][T26885] R13: 00007f8a07426038 R14: 00007f8a07425fa0 R15: 00007ffd77d8bbd8 [ 1713.199438][T26885] [ 1714.066377][T26894] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6555'. [ 1714.563515][T26892] netlink: 'syz.1.6554': attribute type 10 has an invalid length. [ 1714.578759][T26892] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6554'. [ 1715.172991][T26913] netlink: 'syz.1.6558': attribute type 21 has an invalid length. [ 1715.210559][T26913] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6558'. [ 1718.075442][T26922] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6562'. [ 1718.276359][T26932] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6566'. [ 1719.237605][T26940] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1721.293707][T26952] netlink: 'syz.3.6572': attribute type 32 has an invalid length. [ 1721.570333][T26961] netlink: 'syz.2.6574': attribute type 21 has an invalid length. [ 1721.589266][T26959] FAULT_INJECTION: forcing a failure. [ 1721.589266][T26959] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.603290][T26959] CPU: 1 PID: 26959 Comm: syz.1.6573 Not tainted syzkaller #0 [ 1721.605203][T26961] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6574'. [ 1721.610796][T26959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1721.629945][T26959] Call Trace: [ 1721.633253][T26959] [ 1721.636211][T26959] dump_stack_lvl+0x18c/0x250 [ 1721.640925][T26959] ? sctp_sendmsg+0x1519/0x27b0 [ 1721.645826][T26959] ? ___sys_sendmsg+0x2a6/0x360 [ 1721.650716][T26959] ? show_regs_print_info+0x20/0x20 [ 1721.655957][T26959] ? load_image+0x420/0x420 [ 1721.660513][T26959] should_fail_ex+0x394/0x4c0 [ 1721.665239][T26959] should_failslab+0x9/0x20 [ 1721.669783][T26959] slab_pre_alloc_hook+0x59/0x300 [ 1721.674854][T26959] ? sctp_add_bind_addr+0x8c/0x360 [ 1721.680007][T26959] __kmem_cache_alloc_node+0x53/0x250 [ 1721.685419][T26959] ? sctp_add_bind_addr+0x8c/0x360 [ 1721.690558][T26959] kmalloc_trace+0x2a/0xe0 [ 1721.695010][T26959] sctp_add_bind_addr+0x8c/0x360 [ 1721.699978][T26959] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1721.705648][T26959] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1721.711417][T26959] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1721.717530][T26959] ? sctp_v6_is_any+0x64/0x70 [ 1721.722243][T26959] ? sctp_copy_one_addr+0x8c/0x350 [ 1721.727405][T26959] sctp_bind_addr_copy+0xb3/0x3c0 [ 1721.732468][T26959] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1721.738835][T26959] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1721.744164][T26959] ? __sctp_connect+0xd80/0xd80 [ 1721.749046][T26959] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1721.754454][T26959] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1721.760034][T26959] ? security_sctp_bind_connect+0x89/0xb0 [ 1721.765790][T26959] sctp_sendmsg+0x1519/0x27b0 [ 1721.770516][T26959] ? sctp_getsockopt+0xb60/0xb60 [ 1721.775490][T26959] ? aa_af_perm+0x330/0x330 [ 1721.780028][T26959] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1721.786501][T26959] ? sock_rps_record_flow+0x19/0x3f0 [ 1721.791822][T26959] ? inet_sendmsg+0xce/0x2a0 [ 1721.796452][T26959] ? inet_send_prepare+0x250/0x250 [ 1721.801599][T26959] ____sys_sendmsg+0x61b/0x980 [ 1721.806422][T26959] ? __sys_sendmsg_sock+0x30/0x30 [ 1721.811468][T26959] ? __import_iovec+0x5f2/0x850 [ 1721.816376][T26959] ? import_iovec+0x73/0xa0 [ 1721.820916][T26959] ___sys_sendmsg+0x2a6/0x360 [ 1721.825621][T26959] ? get_pid_task+0x20/0x1e0 [ 1721.830248][T26959] ? __sys_sendmsg+0x2b0/0x2b0 [ 1721.835065][T26959] ? __lock_acquire+0x7d80/0x7d80 [ 1721.840143][T26959] __se_sys_sendmsg+0x1d0/0x2c0 [ 1721.845029][T26959] ? __x64_sys_sendmsg+0x80/0x80 [ 1721.850012][T26959] ? lockdep_hardirqs_on+0x98/0x150 [ 1721.855246][T26959] do_syscall_64+0x55/0xb0 [ 1721.859692][T26959] ? clear_bhb_loop+0x40/0x90 [ 1721.864399][T26959] ? clear_bhb_loop+0x40/0x90 [ 1721.869106][T26959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1721.875027][T26959] RIP: 0033:0x7fd77679e0d9 [ 1721.879466][T26959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1721.899094][T26959] RSP: 002b:00007fd7749f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1721.907535][T26959] RAX: ffffffffffffffda RBX: 00007fd776a25fa0 RCX: 00007fd77679e0d9 [ 1721.915537][T26959] RDX: 0000000020000000 RSI: 00002000000018c0 RDI: 0000000000000005 [ 1721.923535][T26959] RBP: 00007fd7749f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1721.931533][T26959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1721.939536][T26959] R13: 00007fd776a26038 R14: 00007fd776a25fa0 R15: 00007ffe550b2c28 [ 1721.947549][T26959] [ 1724.882882][T26976] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6578'. [ 1726.530551][T26999] netlink: 'syz.3.6585': attribute type 4 has an invalid length. [ 1726.538752][T26999] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.6585'. [ 1728.569326][T26993] netlink: 'syz.2.6584': attribute type 32 has an invalid length. [ 1728.806654][T27004] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6587'. [ 1728.913676][T27003] netlink: 16375 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1728.942266][T27006] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6588'. [ 1728.981930][T27001] netlink: 'syz.3.6586': attribute type 33 has an invalid length. [ 1728.994769][T27006] netlink: 'syz.2.6588': attribute type 29 has an invalid length. [ 1729.015166][T27001] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1729.029272][T27006] netlink: 'syz.2.6588': attribute type 29 has an invalid length. [ 1729.049182][T27008] netlink: 'syz.2.6588': attribute type 29 has an invalid length. [ 1729.084035][T27006] netlink: 'syz.2.6588': attribute type 29 has an invalid length. [ 1730.811403][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.818648][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.102304][T27035] FAULT_INJECTION: forcing a failure. [ 1731.102304][T27035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1731.214978][T27035] CPU: 1 PID: 27035 Comm: syz.3.6597 Not tainted syzkaller #0 [ 1731.222532][T27035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1731.232628][T27035] Call Trace: [ 1731.235949][T27035] [ 1731.238927][T27035] dump_stack_lvl+0x18c/0x250 [ 1731.243656][T27035] ? show_regs_print_info+0x20/0x20 [ 1731.248892][T27035] ? load_image+0x420/0x420 [ 1731.253429][T27035] ? __might_fault+0xaa/0x120 [ 1731.258136][T27035] ? __lock_acquire+0x7d80/0x7d80 [ 1731.263193][T27035] should_fail_ex+0x394/0x4c0 [ 1731.267914][T27035] _copy_from_user+0x2f/0xe0 [ 1731.272532][T27035] kstrtouint_from_user+0xde/0x170 [ 1731.277679][T27035] ? kstrtol_from_user+0x190/0x190 [ 1731.282829][T27035] proc_fail_nth_write+0x8f/0x250 [ 1731.287913][T27035] ? proc_fail_nth_read+0x260/0x260 [ 1731.293145][T27035] ? proc_fail_nth_read+0x260/0x260 [ 1731.298383][T27035] vfs_write+0x299/0x9a0 [ 1731.302667][T27035] ? file_end_write+0x250/0x250 [ 1731.307551][T27035] ? __fget_files+0x28/0x460 [ 1731.312168][T27035] ? __fget_files+0x3fc/0x460 [ 1731.316881][T27035] ? __fdget_pos+0x2a3/0x330 [ 1731.321500][T27035] ? ksys_write+0x74/0x260 [ 1731.325948][T27035] ksys_write+0x151/0x260 [ 1731.330325][T27035] ? __ia32_sys_read+0x90/0x90 [ 1731.335126][T27035] ? lockdep_hardirqs_on+0x98/0x150 [ 1731.340373][T27035] do_syscall_64+0x55/0xb0 [ 1731.344814][T27035] ? clear_bhb_loop+0x40/0x90 [ 1731.349528][T27035] ? clear_bhb_loop+0x40/0x90 [ 1731.354229][T27035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1731.360157][T27035] RIP: 0033:0x7fec9c75e90e [ 1731.364591][T27035] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1731.384221][T27035] RSP: 002b:00007fec9d6dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1731.392668][T27035] RAX: ffffffffffffffda RBX: 00007fec9d6dd6c0 RCX: 00007fec9c75e90e [ 1731.400670][T27035] RDX: 0000000000000001 RSI: 00007fec9d6dd0a0 RDI: 0000000000000004 [ 1731.408680][T27035] RBP: 00007fec9d6dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1731.416680][T27035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1731.424689][T27035] R13: 00007fec9ca26038 R14: 00007fec9ca25fa0 R15: 00007ffc21d5d1b8 [ 1731.432703][T27035] [ 1731.496055][T27038] netlink: 'syz.0.6596': attribute type 32 has an invalid length. [ 1731.565189][T27038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.654046][T27042] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6598'. [ 1731.966639][T27054] netlink: 'syz.3.6603': attribute type 6 has an invalid length. [ 1731.992516][T27054] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6603'. [ 1733.169232][T27066] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6606'. [ 1734.046499][T27085] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6613'. [ 1736.210303][T27095] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6624'. [ 1739.062827][T27099] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6617'. [ 1739.181955][T27101] tap0: tun_chr_ioctl cmd 35108 [ 1739.278696][T27104] netlink: 'syz.1.6619': attribute type 6 has an invalid length. [ 1739.294975][T27104] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6619'. [ 1747.186829][T27139] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6631'. [ 1747.214392][T27135] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6630'. [ 1748.032042][T27156] syzkaller0: entered promiscuous mode [ 1748.037750][T27156] syzkaller0: entered allmulticast mode [ 1752.363622][T27175] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6642'. [ 1752.397194][T27182] netlink: 'syz.3.6643': attribute type 2 has an invalid length. [ 1752.416040][T27182] netlink: 'syz.3.6643': attribute type 8 has an invalid length. [ 1752.423860][T27182] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6643'. [ 1752.545730][T27185] netlink: 'syz.2.6644': attribute type 6 has an invalid length. [ 1752.553553][T27185] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6644'. [ 1752.701276][T27189] netlink: 763 bytes leftover after parsing attributes in process `syz.1.6645'. [ 1755.026832][T27207] netlink: 'syz.3.6651': attribute type 13 has an invalid length. [ 1755.037575][T27207] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.6651'. [ 1755.506490][T27226] netlink: 'syz.1.6658': attribute type 6 has an invalid length. [ 1755.588641][T27226] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6658'. [ 1758.681661][T27235] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6660'. [ 1758.978607][T27242] netlink: 'syz.0.6670': attribute type 39 has an invalid length. [ 1759.986063][T27251] netlink: 'syz.0.6665': attribute type 1 has an invalid length. [ 1760.326679][T27255] netlink: 'syz.0.6667': attribute type 10 has an invalid length. [ 1760.505908][T27258] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6668'. [ 1760.805448][T27262] netlink: 'syz.2.6678': attribute type 1 has an invalid length. [ 1760.813281][T27262] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6678'. [ 1767.292570][T27294] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6682'. [ 1767.474666][T27306] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6687'. [ 1767.582369][T27312] netlink: 'syz.3.6689': attribute type 6 has an invalid length. [ 1767.590566][T27312] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6689'. [ 1768.133130][T27318] netlink: 'syz.0.6691': attribute type 11 has an invalid length. [ 1768.187413][T27318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6691'. [ 1770.992966][T27332] sctp: [Deprecated]: syz.1.6695 (pid 27332) Use of int in maxseg socket option. [ 1770.992966][T27332] Use struct sctp_assoc_value instead [ 1771.033626][T27333] netlink: 'syz.0.6702': attribute type 6 has an invalid length. [ 1771.062966][T27333] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6702'. [ 1771.489034][T27343] netlink: 763 bytes leftover after parsing attributes in process `syz.2.6697'. [ 1771.927900][T27342] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6698'. [ 1773.031351][T27359] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6704'. [ 1773.156648][T27366] netlink: 'syz.0.6705': attribute type 10 has an invalid length. [ 1773.414019][T27376] FAULT_INJECTION: forcing a failure. [ 1773.414019][T27376] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.445203][T27376] CPU: 0 PID: 27376 Comm: syz.0.6710 Not tainted syzkaller #0 [ 1773.452751][T27376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1773.462856][T27376] Call Trace: [ 1773.466184][T27376] [ 1773.469148][T27376] dump_stack_lvl+0x18c/0x250 [ 1773.473881][T27376] ? show_regs_print_info+0x20/0x20 [ 1773.479121][T27376] ? load_image+0x420/0x420 [ 1773.483696][T27376] ? __might_sleep+0xe0/0xe0 [ 1773.488381][T27376] ? __lock_acquire+0x7d80/0x7d80 [ 1773.493469][T27376] should_fail_ex+0x394/0x4c0 [ 1773.498215][T27376] should_failslab+0x9/0x20 [ 1773.502766][T27376] slab_pre_alloc_hook+0x59/0x300 [ 1773.507860][T27376] kmem_cache_alloc_node+0x5e/0x310 [ 1773.513110][T27376] ? __alloc_skb+0x103/0x2c0 [ 1773.517759][T27376] __alloc_skb+0x103/0x2c0 [ 1773.522233][T27376] _sctp_make_chunk+0x5b/0x430 [ 1773.527055][T27376] sctp_make_datafrag_empty+0x12b/0x240 [ 1773.532687][T27376] ? sctp_make_ecne+0x350/0x350 [ 1773.537591][T27376] ? sctp_auth_send_cid+0x69/0x250 [ 1773.542754][T27376] sctp_datamsg_from_user+0x72e/0xee0 [ 1773.548204][T27376] sctp_sendmsg_to_asoc+0xfdd/0x17f0 [ 1773.553560][T27376] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 1773.559414][T27376] ? __sctp_connect+0xd80/0xd80 [ 1773.564309][T27376] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1773.569725][T27376] ? _local_bh_enable+0xa0/0xa0 [ 1773.574617][T27376] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1773.580468][T27376] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1773.586386][T27376] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1773.592007][T27376] ? security_sctp_bind_connect+0x89/0xb0 [ 1773.597793][T27376] sctp_sendmsg+0x1afa/0x27b0 [ 1773.602547][T27376] ? sctp_getsockopt+0xb60/0xb60 [ 1773.607541][T27376] ? aa_af_perm+0x330/0x330 [ 1773.612096][T27376] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1773.618565][T27376] ? sock_rps_record_flow+0x19/0x3f0 [ 1773.623911][T27376] ? inet_sendmsg+0x7e/0x2a0 [ 1773.628558][T27376] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1773.633885][T27376] ? inet_send_prepare+0x250/0x250 [ 1773.639112][T27376] ____sys_sendmsg+0x61b/0x980 [ 1773.643935][T27376] ? __asan_memset+0x22/0x40 [ 1773.648581][T27376] ? __sys_sendmsg_sock+0x30/0x30 [ 1773.653656][T27376] ? __import_iovec+0x5f2/0x850 [ 1773.658567][T27376] ? import_iovec+0x73/0xa0 [ 1773.663125][T27376] ___sys_sendmsg+0x2a6/0x360 [ 1773.667845][T27376] ? get_pid_task+0x20/0x1e0 [ 1773.672502][T27376] ? __sys_sendmsg+0x2b0/0x2b0 [ 1773.677354][T27376] ? __lock_acquire+0x7d80/0x7d80 [ 1773.682463][T27376] __se_sys_sendmsg+0x1d0/0x2c0 [ 1773.687379][T27376] ? __x64_sys_sendmsg+0x80/0x80 [ 1773.692395][T27376] ? lockdep_hardirqs_on+0x98/0x150 [ 1773.697669][T27376] do_syscall_64+0x55/0xb0 [ 1773.702131][T27376] ? clear_bhb_loop+0x40/0x90 [ 1773.706854][T27376] ? clear_bhb_loop+0x40/0x90 [ 1773.711582][T27376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1773.717516][T27376] RIP: 0033:0x7f8a0719e0d9 [ 1773.721973][T27376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1773.741625][T27376] RSP: 002b:00007f8a053f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1773.750088][T27376] RAX: ffffffffffffffda RBX: 00007f8a07425fa0 RCX: 00007f8a0719e0d9 [ 1773.758105][T27376] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1773.766293][T27376] RBP: 00007f8a053f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.774310][T27376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1773.782317][T27376] R13: 00007f8a07426038 R14: 00007f8a07425fa0 R15: 00007ffd77d8bbd8 [ 1773.790343][T27376] [ 1774.120892][T27383] netlink: 763 bytes leftover after parsing attributes in process `syz.0.6713'. [ 1774.467684][T27388] netlink: 'syz.1.6714': attribute type 13 has an invalid length. [ 1774.495438][T27388] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.6714'. [ 1777.036631][T27423] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.6728'. [ 1777.066541][T27423] netlink: 'syz.0.6728': attribute type 10 has an invalid length. [ 1777.096010][T27423] veth1_macvtap: left promiscuous mode [ 1777.165285][T27426] netlink: 'syz.2.6730': attribute type 10 has an invalid length. [ 1777.183943][T27426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6730'. [ 1777.208485][T27426] netlink: 'syz.2.6730': attribute type 10 has an invalid length. [ 1777.234073][T27426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6730'. [ 1778.421112][T27444] team0: entered allmulticast mode [ 1778.445040][T27444] C: entered allmulticast mode [ 1778.449912][T27444] team_slave_1: entered allmulticast mode [ 1778.554270][T27445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.561562][T27445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1779.425327][T27445] bridge0: entered promiscuous mode [ 1779.432903][T27445] bridge0: entered allmulticast mode [ 1780.606700][T27469] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.6745'. [ 1784.840537][T27471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.862012][T27471] bridge0: entered allmulticast mode [ 1784.884959][T27479] netlink: 'syz.0.6746': attribute type 10 has an invalid length. [ 1784.892869][T27479] bridge0: left allmulticast mode [ 1784.922435][T27479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.929740][T27479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1784.951403][T27479] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1785.255664][T27486] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6750'. [ 1785.379609][T27486] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1785.401773][T27486] CPU: 1 PID: 27486 Comm: syz.2.6750 Not tainted syzkaller #0 [ 1785.409339][T27486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1785.419454][T27486] Call Trace: [ 1785.422790][T27486] [ 1785.425773][T27486] dump_stack_lvl+0x18c/0x250 [ 1785.430519][T27486] ? show_regs_print_info+0x20/0x20 [ 1785.435784][T27486] ? load_image+0x420/0x420 [ 1785.440378][T27486] sysfs_warn_dup+0x8e/0xa0 [ 1785.444938][T27486] sysfs_do_create_link_sd+0xc0/0x110 [ 1785.450368][T27486] device_add_class_symlinks+0x1cf/0x240 [ 1785.456064][T27486] device_add+0x4f9/0xc40 [ 1785.460454][T27486] wiphy_register+0x1d99/0x2ac0 [ 1785.465391][T27486] ? cfg80211_event_work+0x40/0x40 [ 1785.470560][T27486] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1785.476785][T27486] ? rtnl_unlock+0x9/0x10 [ 1785.481183][T27486] ieee80211_register_hw+0x2dd8/0x3b30 [ 1785.486721][T27486] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1785.492344][T27486] ? ieee80211_tasklet_handler+0x20/0x20 [ 1785.498031][T27486] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1785.504013][T27486] ? __debug_object_init+0xec/0x450 [ 1785.509282][T27486] ? __asan_memset+0x22/0x40 [ 1785.513946][T27486] ? __hrtimer_init+0x189/0x270 [ 1785.518863][T27486] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1785.524689][T27486] ? mac80211_hwsim_free+0x220/0x220 [ 1785.530030][T27486] ? rcu_is_watching+0x15/0xb0 [ 1785.534876][T27486] ? kstrndup+0xbd/0x140 [ 1785.539194][T27486] hwsim_new_radio_nl+0xdad/0x1a70 [ 1785.544375][T27486] ? __nla_validate+0x50/0x50 [ 1785.549146][T27486] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1785.555549][T27486] ? __nla_parse+0x40/0x50 [ 1785.560030][T27486] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1785.566516][T27486] genl_family_rcv_msg_doit+0x21a/0x310 [ 1785.572136][T27486] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1785.578102][T27486] ? bpf_lsm_capable+0x9/0x10 [ 1785.582844][T27486] ? security_capable+0x89/0xb0 [ 1785.587766][T27486] genl_rcv_msg+0x611/0x7a0 [ 1785.592346][T27486] ? genl_bind+0x360/0x360 [ 1785.596819][T27486] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1785.603239][T27486] netlink_rcv_skb+0x235/0x4c0 [ 1785.608067][T27486] ? genl_bind+0x360/0x360 [ 1785.612601][T27486] ? netlink_ack+0x1160/0x1160 [ 1785.617440][T27486] ? __lock_acquire+0x7d80/0x7d80 [ 1785.622549][T27486] ? down_read+0x1ac/0x2e0 [ 1785.627043][T27486] genl_rcv+0x28/0x40 [ 1785.631090][T27486] netlink_unicast+0x7b1/0x930 [ 1785.635945][T27486] netlink_sendmsg+0x8d0/0xbf0 [ 1785.640781][T27486] ? netlink_getsockopt+0x590/0x590 [ 1785.646042][T27486] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1785.651656][T27486] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1785.657002][T27486] ? security_socket_sendmsg+0x80/0xa0 [ 1785.662515][T27486] ? netlink_getsockopt+0x590/0x590 [ 1785.667774][T27486] ____sys_sendmsg+0x61b/0x980 [ 1785.672611][T27486] ? __asan_memset+0x22/0x40 [ 1785.677282][T27486] ? __sys_sendmsg_sock+0x30/0x30 [ 1785.682370][T27486] ? __import_iovec+0x5f2/0x850 [ 1785.687301][T27486] ? import_iovec+0x73/0xa0 [ 1785.691877][T27486] ___sys_sendmsg+0x2a6/0x360 [ 1785.696625][T27486] ? __sys_sendmsg+0x2b0/0x2b0 [ 1785.701508][T27486] __se_sys_sendmsg+0x1d0/0x2c0 [ 1785.706433][T27486] ? __x64_sys_sendmsg+0x80/0x80 [ 1785.711451][T27486] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1785.717416][T27486] do_syscall_64+0x55/0xb0 [ 1785.721893][T27486] ? clear_bhb_loop+0x40/0x90 [ 1785.726628][T27486] ? clear_bhb_loop+0x40/0x90 [ 1785.731397][T27486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1785.737348][T27486] RIP: 0033:0x7f033a99e0d9 [ 1785.741814][T27486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.761508][T27486] RSP: 002b:00007f033b820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1785.769977][T27486] RAX: ffffffffffffffda RBX: 00007f033ac25fa0 RCX: 00007f033a99e0d9 [ 1785.777992][T27486] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1785.786000][T27486] RBP: 00007f033aa35024 R08: 0000000000000000 R09: 0000000000000000 [ 1785.794003][T27486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1785.802034][T27486] R13: 00007f033ac26038 R14: 00007f033ac25fa0 R15: 00007fffec2a7288 [ 1785.810071][T27486] [ 1785.961056][T27491] netlink: 193524 bytes leftover after parsing attributes in process `syz.1.6751'. [ 1786.198784][T27500] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1787.659240][T27533] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6769'. [ 1787.814400][T27549] netlink: 'syz.2.6774': attribute type 6 has an invalid length. [ 1787.845014][T27549] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6774'. [ 1791.926111][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.932530][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.049791][T27576] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6784'. [ 1794.914353][T27582] netlink: 'syz.2.6787': attribute type 6 has an invalid length. [ 1794.940272][T27582] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6787'. [ 1795.093162][T27596] netlink: 'syz.0.6790': attribute type 10 has an invalid length. [ 1795.103232][T27596] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6790'. [ 1795.124903][T27596] batadv_slave_1: entered promiscuous mode [ 1795.145173][T27596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1795.152796][T27596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1795.950637][T27605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6793'. [ 1797.026412][T27612] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6796'. [ 1797.111885][T27616] netlink: 'syz.1.6797': attribute type 6 has an invalid length. [ 1797.175247][T27616] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6797'. [ 1800.200222][T27642] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6806'. [ 1801.784209][T27657] netlink: 'syz.2.6813': attribute type 6 has an invalid length. [ 1801.803343][T27657] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6813'. [ 1803.599070][T27665] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6816'. [ 1803.718681][T27670] netlink: 'syz.3.6817': attribute type 4 has an invalid length. [ 1803.735050][T27670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6817'. [ 1803.916873][T27676] netlink: 'syz.0.6818': attribute type 6 has an invalid length. [ 1803.940727][T27676] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6818'. [ 1810.549136][T27697] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6827'. [ 1813.378072][T27720] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6837'. [ 1814.273333][T27739] netlink: 'syz.3.6844': attribute type 6 has an invalid length. [ 1814.291980][T27739] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6844'. [ 1818.566834][T27762] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6849'. [ 1820.751532][T27762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6849'. [ 1822.362277][T27791] netlink: 'syz.0.6859': attribute type 6 has an invalid length. [ 1822.400280][T27791] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6859'. [ 1823.199798][T27797] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.6861'. [ 1823.246729][T27797] openvswitch: netlink: Duplicate key (type 0). [ 1823.640840][T27802] netlink: 'syz.1.6863': attribute type 21 has an invalid length. [ 1823.658400][T27802] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6863'. [ 1823.764244][T27805] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6864'. [ 1823.859330][T27806] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6864'. [ 1828.691271][T27828] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6873'. [ 1828.704575][T27828] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1828.785347][T27828] netlink: 'syz.3.6873': attribute type 4 has an invalid length. [ 1828.818648][T27831] netlink: 'syz.0.6870': attribute type 6 has an invalid length. [ 1828.830501][T27831] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6870'. [ 1828.982450][T27833] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6874'. [ 1829.076650][T27833] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6874'. [ 1829.307293][T27838] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.6876'. [ 1829.355141][T27838] openvswitch: netlink: Duplicate key (type 0). [ 1829.506579][T27842] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6875'. [ 1830.430937][T27850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6879'. [ 1835.233822][T27860] netlink: 'syz.1.6882': attribute type 6 has an invalid length. [ 1835.252746][T27860] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6882'. [ 1835.455313][T27869] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6886'. [ 1835.588294][T27869] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6886'. [ 1835.633130][T27873] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6888'. [ 1836.751765][T27890] netlink: 'syz.0.6893': attribute type 21 has an invalid length. [ 1837.166767][T27902] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6897'. [ 1837.256137][T27903] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6897'. [ 1837.419977][T27913] FAULT_INJECTION: forcing a failure. [ 1837.419977][T27913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1837.445436][T27913] CPU: 0 PID: 27913 Comm: syz.2.6899 Not tainted syzkaller #0 [ 1837.452990][T27913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1837.463098][T27913] Call Trace: [ 1837.466424][T27913] [ 1837.469400][T27913] dump_stack_lvl+0x18c/0x250 [ 1837.474128][T27913] ? show_regs_print_info+0x20/0x20 [ 1837.479375][T27913] ? load_image+0x420/0x420 [ 1837.483939][T27913] ? __might_fault+0xaa/0x120 [ 1837.488669][T27913] ? __lock_acquire+0x7d80/0x7d80 [ 1837.493756][T27913] should_fail_ex+0x394/0x4c0 [ 1837.498498][T27913] _copy_from_user+0x2f/0xe0 [ 1837.503156][T27913] ___sys_sendmsg+0x1c7/0x360 [ 1837.507884][T27913] ? get_pid_task+0x20/0x1e0 [ 1837.512529][T27913] ? __sys_sendmsg+0x2b0/0x2b0 [ 1837.517359][T27913] ? __lock_acquire+0x7d80/0x7d80 [ 1837.522459][T27913] __se_sys_sendmsg+0x1d0/0x2c0 [ 1837.527357][T27913] ? __x64_sys_sendmsg+0x80/0x80 [ 1837.532362][T27913] ? lockdep_hardirqs_on+0x98/0x150 [ 1837.537615][T27913] do_syscall_64+0x55/0xb0 [ 1837.542080][T27913] ? clear_bhb_loop+0x40/0x90 [ 1837.546801][T27913] ? clear_bhb_loop+0x40/0x90 [ 1837.551529][T27913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1837.557473][T27913] RIP: 0033:0x7f033a99e0d9 [ 1837.561934][T27913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1837.581629][T27913] RSP: 002b:00007f033b820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1837.590105][T27913] RAX: ffffffffffffffda RBX: 00007f033ac25fa0 RCX: 00007f033a99e0d9 [ 1837.598124][T27913] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000004 [ 1837.606166][T27913] RBP: 00007f033b820090 R08: 0000000000000000 R09: 0000000000000000 [ 1837.614168][T27913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1837.622163][T27913] R13: 00007f033ac26038 R14: 00007f033ac25fa0 R15: 00007fffec2a7288 [ 1837.630186][T27913] [ 1837.838861][T27917] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6908'. [ 1838.009139][T27917] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6908'. [ 1838.083068][T27922] netlink: 'syz.2.6902': attribute type 6 has an invalid length. [ 1838.099136][T27922] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6902'. [ 1838.710857][T27932] netlink: 'syz.3.6905': attribute type 6 has an invalid length. [ 1838.729805][T27932] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6905'. [ 1839.847800][T27947] netlink: 'syz.1.6911': attribute type 10 has an invalid length. [ 1839.876358][T27947] mac80211_hwsim hwsim68 wlan1: entered allmulticast mode [ 1839.886208][T27947] team0: Port device wlan1 added [ 1840.351484][T27954] __nla_validate_parse: 3 callbacks suppressed [ 1840.351527][T27954] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6913'. [ 1840.485404][T27960] netlink: 'syz.1.6915': attribute type 6 has an invalid length. [ 1840.493429][T27960] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6915'. [ 1840.598568][T27956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6914'. [ 1841.106472][T27967] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6916'. [ 1841.463440][T27979] FAULT_INJECTION: forcing a failure. [ 1841.463440][T27979] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.489761][T27979] CPU: 1 PID: 27979 Comm: syz.2.6919 Not tainted syzkaller #0 [ 1841.497373][T27979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1841.507522][T27979] Call Trace: [ 1841.510865][T27979] [ 1841.513884][T27979] dump_stack_lvl+0x18c/0x250 [ 1841.518638][T27979] ? show_regs_print_info+0x20/0x20 [ 1841.523896][T27979] ? load_image+0x420/0x420 [ 1841.528472][T27979] ? __might_sleep+0xe0/0xe0 [ 1841.533145][T27979] ? __lock_acquire+0x7d80/0x7d80 [ 1841.538274][T27979] should_fail_ex+0x394/0x4c0 [ 1841.543085][T27979] should_failslab+0x9/0x20 [ 1841.547705][T27979] slab_pre_alloc_hook+0x59/0x300 [ 1841.552844][T27979] ? trace_event_raw_event_lock+0x240/0x240 [ 1841.558844][T27979] ? sock_kmalloc+0x96/0xf0 [ 1841.563470][T27979] ? sock_kmalloc+0x96/0xf0 [ 1841.568086][T27979] __kmem_cache_alloc_node+0x53/0x250 [ 1841.573577][T27979] ? sock_kmalloc+0x96/0xf0 [ 1841.578175][T27979] __kmalloc+0xa7/0x240 [ 1841.582434][T27979] sock_kmalloc+0x96/0xf0 [ 1841.586865][T27979] ____sys_sendmsg+0x1d4/0x980 [ 1841.591744][T27979] ? __asan_memset+0x22/0x40 [ 1841.596463][T27979] ? __sys_sendmsg_sock+0x30/0x30 [ 1841.601572][T27979] ? __import_iovec+0x3fa/0x850 [ 1841.606551][T27979] ? import_iovec+0x73/0xa0 [ 1841.611164][T27979] ___sys_sendmsg+0x2a6/0x360 [ 1841.615961][T27979] ? __sys_sendmsg+0x2b0/0x2b0 [ 1841.620883][T27979] ? __lock_acquire+0x7d80/0x7d80 [ 1841.626098][T27979] __se_sys_sendmsg+0x1d0/0x2c0 [ 1841.631058][T27979] ? __x64_sys_sendmsg+0x80/0x80 [ 1841.636186][T27979] ? lockdep_hardirqs_on+0x98/0x150 [ 1841.641517][T27979] do_syscall_64+0x55/0xb0 [ 1841.646035][T27979] ? clear_bhb_loop+0x40/0x90 [ 1841.650794][T27979] ? clear_bhb_loop+0x40/0x90 [ 1841.655555][T27979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1841.661529][T27979] RIP: 0033:0x7f033a99e0d9 [ 1841.666034][T27979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.685736][T27979] RSP: 002b:00007f033b820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1841.694255][T27979] RAX: ffffffffffffffda RBX: 00007f033ac25fa0 RCX: 00007f033a99e0d9 [ 1841.702330][T27979] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1841.710386][T27979] RBP: 00007f033b820090 R08: 0000000000000000 R09: 0000000000000000 [ 1841.718440][T27979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1841.726496][T27979] R13: 00007f033ac26038 R14: 00007f033ac25fa0 R15: 00007fffec2a7288 [ 1841.734621][T27979] [ 1841.986943][T27981] netlink: 'syz.2.6920': attribute type 6 has an invalid length. [ 1842.010324][T27981] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6920'. [ 1842.482556][T27985] netlink: 'syz.0.6922': attribute type 21 has an invalid length. [ 1842.550043][T27985] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6922'. [ 1843.083576][T27992] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1843.284292][T27992] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1843.703257][T28002] netlink: 'syz.0.6935': attribute type 6 has an invalid length. [ 1843.715456][T28002] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6935'. [ 1843.749680][T28004] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6927'. [ 1844.359240][T28024] netlink: 'syz.0.6933': attribute type 6 has an invalid length. [ 1844.826654][T28025] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1846.031806][T28042] netlink: 'syz.2.6940': attribute type 21 has an invalid length. [ 1846.062333][T28042] __nla_validate_parse: 4 callbacks suppressed [ 1846.062353][T28042] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6940'. [ 1847.076464][T28047] netlink: 'syz.3.6942': attribute type 6 has an invalid length. [ 1847.097488][T28047] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6942'. [ 1848.618905][T28079] netlink: 'syz.1.6951': attribute type 4 has an invalid length. [ 1848.633523][T28073] netlink: 'syz.3.6950': attribute type 6 has an invalid length. [ 1848.669175][T28073] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6950'. [ 1848.706165][T28077] netlink: 'syz.0.6958': attribute type 6 has an invalid length. [ 1848.738294][T28077] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6958'. [ 1848.952552][T28086] netlink: 151484 bytes leftover after parsing attributes in process `syz.2.6952'. [ 1849.837787][T28092] netlink: 'syz.1.6954': attribute type 39 has an invalid length. [ 1850.306625][T28096] netlink: 'syz.2.6956': attribute type 10 has an invalid length. [ 1850.768081][T28106] netlink: 'syz.1.6960': attribute type 6 has an invalid length. [ 1850.788964][T28106] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6960'. [ 1851.005030][T28109] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.6961'. [ 1853.370605][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.379386][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.013612][T28137] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.6968'. [ 1855.023237][T28137] openvswitch: netlink: Duplicate key (type 0). [ 1855.651595][T28154] netlink: 'syz.0.6974': attribute type 6 has an invalid length. [ 1855.660086][T28154] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6974'. [ 1855.815476][T28149] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.6973'. [ 1856.424499][T28161] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6977'. [ 1856.483478][T28161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1856.487646][T28162] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6976'. [ 1856.627685][T28166] netlink: 'syz.1.6978': attribute type 6 has an invalid length. [ 1856.647892][T28166] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6978'. [ 1856.751994][T28162] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6976'. [ 1857.264273][T28173] delete_channel: no stack [ 1857.547809][T28178] syzkaller0: entered promiscuous mode [ 1857.553459][T28178] syzkaller0: entered allmulticast mode [ 1859.782436][T28186] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6983'. [ 1859.891567][T28189] netlink: 'syz.3.6984': attribute type 9 has an invalid length. [ 1859.905810][T28186] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6983'. [ 1859.915556][T28189] netlink: 'syz.3.6984': attribute type 23 has an invalid length. [ 1859.923619][T28189] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.6984'. [ 1860.096277][T28193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1860.760717][T28201] netlink: 'syz.2.6988': attribute type 10 has an invalid length. [ 1860.836247][T28201] netlink: 'syz.2.6988': attribute type 10 has an invalid length. [ 1860.935278][T28207] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6989'. [ 1863.564195][T28201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1863.598309][T28201] team0: Port device bond0 added [ 1863.607959][T28207] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6989'. [ 1863.833947][T28214] netlink: 'syz.1.6993': attribute type 9 has an invalid length. [ 1863.851422][T28214] netlink: 'syz.1.6993': attribute type 23 has an invalid length. [ 1863.875121][T28214] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.6993'. [ 1864.139480][T28224] netlink: 'syz.3.6997': attribute type 6 has an invalid length. [ 1864.149767][T28224] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6997'. [ 1864.438488][T28239] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6999'. [ 1864.591879][T28232] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6999'. [ 1865.010858][T28242] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7001'. [ 1865.190410][T28242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1865.760686][T28256] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7004'. [ 1865.782618][T28255] netlink: 'syz.0.7012': attribute type 9 has an invalid length. [ 1865.792824][T28255] netlink: 'syz.0.7012': attribute type 23 has an invalid length. [ 1865.801821][T28255] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.7012'. [ 1866.342599][T28256] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7004'. [ 1866.689873][T28264] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7008'. [ 1867.304333][T28272] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7010'. [ 1867.323686][T28274] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7013'. [ 1867.376740][T28274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1867.420486][T28275] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7010'. [ 1868.441553][T28282] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7016'. [ 1868.865817][T28291] netlink: 'syz.0.7018': attribute type 6 has an invalid length. [ 1868.912266][T28291] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1869.487871][T28297] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7021'. [ 1869.795233][T28302] netlink: 'syz.1.7022': attribute type 6 has an invalid length. [ 1869.855055][T28302] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7022'. [ 1870.146588][T28308] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7023'. [ 1870.733013][T28313] netlink: 'syz.3.7025': attribute type 6 has an invalid length. [ 1873.866370][T28336] __nla_validate_parse: 2 callbacks suppressed [ 1873.866393][T28336] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7032'. [ 1874.247043][T28341] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7034'. [ 1874.601378][T28341] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7034'. [ 1874.917929][T28354] FAULT_INJECTION: forcing a failure. [ 1874.917929][T28354] name failslab, interval 1, probability 0, space 0, times 0 [ 1874.950480][T28355] netlink: 'syz.0.7040': attribute type 6 has an invalid length. [ 1874.951734][T28354] CPU: 1 PID: 28354 Comm: syz.1.7039 Not tainted syzkaller #0 [ 1874.965952][T28354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1874.965981][T28355] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7040'. [ 1874.976050][T28354] Call Trace: [ 1874.976062][T28354] [ 1874.976079][T28354] dump_stack_lvl+0x18c/0x250 [ 1874.976117][T28354] ? show_regs_print_info+0x20/0x20 [ 1874.976142][T28354] ? load_image+0x420/0x420 [ 1874.976179][T28354] ? __might_sleep+0xe0/0xe0 [ 1874.976211][T28354] ? __lock_acquire+0x7d80/0x7d80 [ 1874.976243][T28354] should_fail_ex+0x394/0x4c0 [ 1875.020284][T28354] should_failslab+0x9/0x20 [ 1875.024834][T28354] slab_pre_alloc_hook+0x59/0x300 [ 1875.029907][T28354] ? __lock_acquire+0x7d80/0x7d80 [ 1875.034964][T28354] ? kvmalloc_node+0x70/0x180 [ 1875.039674][T28354] ? kvmalloc_node+0x70/0x180 [ 1875.044382][T28354] __kmem_cache_alloc_node+0x53/0x250 [ 1875.049794][T28354] ? __schedule_delayed_monitor_work+0x200/0x200 [ 1875.056174][T28354] ? kvmalloc_node+0x70/0x180 [ 1875.060890][T28354] __kmalloc_node+0xa6/0x240 [ 1875.065518][T28354] kvmalloc_node+0x70/0x180 [ 1875.070061][T28354] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 1875.075484][T28354] ? 0xffffffffa0004740 [ 1875.079665][T28354] ? 0xffffffffa0004740 [ 1875.083863][T28354] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1875.089799][T28354] ? xdp_convert_md_to_buff+0x330/0x330 [ 1875.095416][T28354] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1875.101707][T28354] ? _copy_from_user+0xa5/0xe0 [ 1875.106509][T28354] ? bpf_test_init+0x119/0x140 [ 1875.111331][T28354] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1875.116840][T28354] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1875.122256][T28354] ? __lock_acquire+0x7d80/0x7d80 [ 1875.127332][T28354] ? dev_put+0x80/0x80 [ 1875.131457][T28354] ? dev_put+0x80/0x80 [ 1875.135557][T28354] bpf_prog_test_run+0x31f/0x390 [ 1875.140545][T28354] __sys_bpf+0x49d/0x890 [ 1875.144825][T28354] ? bpf_link_show_fdinfo+0x390/0x390 [ 1875.150234][T28354] ? lock_chain_count+0x20/0x20 [ 1875.155126][T28354] __x64_sys_bpf+0x7c/0x90 [ 1875.159583][T28354] do_syscall_64+0x55/0xb0 [ 1875.164025][T28354] ? clear_bhb_loop+0x40/0x90 [ 1875.168733][T28354] ? clear_bhb_loop+0x40/0x90 [ 1875.173436][T28354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1875.179358][T28354] RIP: 0033:0x7fd77679e0d9 [ 1875.183800][T28354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1875.203448][T28354] RSP: 002b:00007fd7749f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1875.211892][T28354] RAX: ffffffffffffffda RBX: 00007fd776a25fa0 RCX: 00007fd77679e0d9 [ 1875.219905][T28354] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1875.227909][T28354] RBP: 00007fd7749f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1875.235905][T28354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1875.243897][T28354] R13: 00007fd776a26038 R14: 00007fd776a25fa0 R15: 00007ffe550b2c28 [ 1875.251906][T28354] [ 1878.255064][T28367] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7043'. [ 1878.761955][T28372] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7045'. [ 1878.798300][T28374] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7046'. [ 1878.905124][T28372] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7045'. [ 1880.578632][T28408] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7059'. [ 1880.600898][T28406] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7058'. [ 1880.715338][T28406] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7058'. [ 1880.868175][T28414] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7061'. [ 1880.905188][T28414] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1881.020068][T28416] syzkaller0: entered promiscuous mode [ 1881.047088][T28416] syzkaller0: entered allmulticast mode [ 1881.140580][T28424] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1881.156471][T28424] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1881.169431][T28424] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1881.200534][T28424] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1881.212206][T28424] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1881.222133][T28424] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1883.314488][T28424] Bluetooth: hci1: command tx timeout [ 1884.245728][T24640] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.421917][T28432] netlink: 207684 bytes leftover after parsing attributes in process `syz.1.7065'. [ 1884.431611][T28432] netlink: 'syz.1.7065': attribute type 1 has an invalid length. [ 1884.440437][T28432] netlink: 'syz.1.7065': attribute type 2 has an invalid length. [ 1884.861401][T28442] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7069'. [ 1885.354962][T28424] Bluetooth: hci1: command tx timeout [ 1886.582854][T24640] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.603750][T28442] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7069'. [ 1886.714015][T24640] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.747196][T28444] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7070'. [ 1886.763410][T28446] netlink: 'syz.1.7071': attribute type 10 has an invalid length. [ 1886.847611][T24640] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.932804][T28446] netlink: 'syz.1.7071': attribute type 10 has an invalid length. [ 1887.119454][T28446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1887.135970][T28446] bond0: entered allmulticast mode [ 1887.141691][T28446] bond_slave_0: entered allmulticast mode [ 1887.159355][T28446] bond_slave_1: entered allmulticast mode [ 1887.166097][T28446] bridge_slave_1: entered allmulticast mode [ 1887.179757][T28446] team0: Port device bond0 added [ 1887.209836][T28447] IPv6: Can't replace route, no match found [ 1887.336656][T28420] chnl_net:caif_netlink_parms(): no params data found [ 1887.434912][T28424] Bluetooth: hci1: command tx timeout [ 1887.571504][T28420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.608803][T28420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.630395][T28420] bridge_slave_0: entered allmulticast mode [ 1887.669929][T28420] bridge_slave_0: entered promiscuous mode [ 1887.735874][T28420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1887.758772][T28420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.786432][T28420] bridge_slave_1: entered allmulticast mode [ 1887.811235][T28420] bridge_slave_1: entered promiscuous mode [ 1887.982563][T28420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1888.029670][T28420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1888.183903][T28420] team0: Port device team_slave_0 added [ 1888.214938][T28420] team0: Port device team_slave_1 added [ 1888.457913][T28477] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7078'. [ 1888.666021][T28420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1888.676840][T28420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1888.744520][T28420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1888.785993][T28474] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7078'. [ 1888.948712][T28420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1888.981032][T28420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1889.045009][T28420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1889.303551][T28493] IPv6: Can't replace route, no match found [ 1889.352692][T28420] hsr_slave_0: entered promiscuous mode [ 1889.389385][T28420] hsr_slave_1: entered promiscuous mode [ 1889.515154][T28424] Bluetooth: hci1: command tx timeout [ 1891.282307][T28530] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7087'. [ 1891.538677][T28530] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7087'. [ 1891.897510][T28544] netlink: 'syz.0.7091': attribute type 10 has an invalid length. [ 1892.033741][T28544] IPv6: Can't replace route, no match found [ 1892.048967][T28546] netlink: 'syz.0.7091': attribute type 10 has an invalid length. [ 1892.112755][T28546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1892.144456][T28546] team0: Port device bond0 added [ 1892.673287][T28420] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1893.020909][T28420] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1893.044861][T28420] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1893.089878][T28420] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1893.325089][T24640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1893.332596][T24640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1893.409949][T24640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1893.428324][T24640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1893.510510][T28577] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7097'. [ 1893.561674][T24640] veth0_macvtap: left promiscuous mode [ 1893.585107][T24640] veth1_vlan: left promiscuous mode [ 1893.590539][T24640] veth0_vlan: left promiscuous mode [ 1893.729489][T28586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7100'. [ 1895.350562][T24640] team0 (unregistering): Port device team_slave_1 removed [ 1895.407929][T24640] team0 (unregistering): Port device team_slave_0 removed [ 1895.463673][T24640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1895.518862][T24640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1895.950505][T24640] team0 (unregistering): Port device bond0 removed [ 1895.994069][T24640] bond0 (unregistering): Released all slaves [ 1896.041790][T28577] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7097'. [ 1896.050996][T28586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7100'. [ 1896.460346][T28420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1896.549598][T28420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1896.599907][T24651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.607237][T24651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1896.653456][T24651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.660796][T24651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1896.838017][T28420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1896.901061][T28420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1897.914636][T28420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1898.021942][T28420] veth0_vlan: entered promiscuous mode [ 1898.057272][T28420] veth1_vlan: entered promiscuous mode [ 1898.223551][T28420] veth0_macvtap: entered promiscuous mode [ 1898.252024][T28420] veth1_macvtap: entered promiscuous mode [ 1898.317976][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1898.369540][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1898.394911][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1898.417083][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1898.435312][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1898.459699][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1898.552414][T28420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1898.578350][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1898.599035][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1898.638329][T28420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1898.778698][T28665] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7114'. [ 1898.828769][T28420] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.851655][T28420] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.864418][T28420] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.878835][T28420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.904533][T28663] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7114'. [ 1899.102914][T28669] netlink: 'syz.3.7116': attribute type 15 has an invalid length. [ 1899.117216][T28669] netlink: 'syz.3.7116': attribute type 7 has an invalid length. [ 1899.134600][T28669] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7116'. [ 1899.212823][T24648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.234870][T24648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.308349][T24640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.326759][T24640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.529944][T28679] netlink: 'syz.2.7056': attribute type 6 has an invalid length. [ 1899.549225][T28679] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7056'. [ 1899.833361][T28682] netlink: 'syz.0.7119': attribute type 21 has an invalid length. [ 1899.887523][T28682] netlink: 'syz.0.7119': attribute type 6 has an invalid length. [ 1899.950942][T28682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1901.119777][T28699] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7124'. [ 1901.231008][T28699] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7124'. [ 1901.258132][T28699] hsr_slave_0: left promiscuous mode [ 1901.278554][T28699] hsr_slave_1: left promiscuous mode [ 1902.764101][T28717] netlink: 'syz.2.7131': attribute type 6 has an invalid length. [ 1902.880379][T28717] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7131'. [ 1908.364497][T28756] FAULT_INJECTION: forcing a failure. [ 1908.364497][T28756] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.382267][T28756] CPU: 0 PID: 28756 Comm: syz.3.7142 Not tainted syzkaller #0 [ 1908.389797][T28756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1908.399909][T28756] Call Trace: [ 1908.403243][T28756] [ 1908.406216][T28756] dump_stack_lvl+0x18c/0x250 [ 1908.410946][T28756] ? show_regs_print_info+0x20/0x20 [ 1908.416221][T28756] ? load_image+0x420/0x420 [ 1908.420782][T28756] ? __might_sleep+0xe0/0xe0 [ 1908.425421][T28756] ? __lock_acquire+0x7d80/0x7d80 [ 1908.430500][T28756] should_fail_ex+0x394/0x4c0 [ 1908.435233][T28756] should_failslab+0x9/0x20 [ 1908.439784][T28756] slab_pre_alloc_hook+0x59/0x300 [ 1908.444871][T28756] ? __lock_acquire+0x7d80/0x7d80 [ 1908.449946][T28756] ? kvmalloc_node+0x70/0x180 [ 1908.454691][T28756] ? kvmalloc_node+0x70/0x180 [ 1908.459426][T28756] __kmem_cache_alloc_node+0x53/0x250 [ 1908.464858][T28756] ? __schedule_delayed_monitor_work+0x200/0x200 [ 1908.471260][T28756] ? kvmalloc_node+0x70/0x180 [ 1908.475994][T28756] __kmalloc_node+0xa6/0x240 [ 1908.480647][T28756] kvmalloc_node+0x70/0x180 [ 1908.485214][T28756] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 1908.490643][T28756] ? 0xffffffffa0004740 [ 1908.494840][T28756] ? 0xffffffffa0004740 [ 1908.499024][T28756] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1908.504960][T28756] ? xdp_convert_md_to_buff+0x330/0x330 [ 1908.510591][T28756] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1908.516870][T28756] ? _copy_from_user+0xa5/0xe0 [ 1908.521671][T28756] ? bpf_test_init+0x119/0x140 [ 1908.526461][T28756] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1908.531952][T28756] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1908.537356][T28756] ? __lock_acquire+0x7d80/0x7d80 [ 1908.542415][T28756] ? dev_put+0x80/0x80 [ 1908.546521][T28756] ? dev_put+0x80/0x80 [ 1908.550617][T28756] bpf_prog_test_run+0x31f/0x390 [ 1908.555592][T28756] __sys_bpf+0x49d/0x890 [ 1908.559872][T28756] ? bpf_link_show_fdinfo+0x390/0x390 [ 1908.565279][T28756] ? lock_chain_count+0x20/0x20 [ 1908.570163][T28756] __x64_sys_bpf+0x7c/0x90 [ 1908.574605][T28756] do_syscall_64+0x55/0xb0 [ 1908.579053][T28756] ? clear_bhb_loop+0x40/0x90 [ 1908.583760][T28756] ? clear_bhb_loop+0x40/0x90 [ 1908.588472][T28756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1908.594398][T28756] RIP: 0033:0x7fec9c79e0d9 [ 1908.598841][T28756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1908.618503][T28756] RSP: 002b:00007fec9d6dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1908.626953][T28756] RAX: ffffffffffffffda RBX: 00007fec9ca25fa0 RCX: 00007fec9c79e0d9 [ 1908.634958][T28756] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1908.642977][T28756] RBP: 00007fec9d6dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1908.650990][T28756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1908.658984][T28756] R13: 00007fec9ca26038 R14: 00007fec9ca25fa0 R15: 00007ffc21d5d1b8 [ 1908.666999][T28756] [ 1912.569303][T28797] netlink: 'syz.0.7154': attribute type 6 has an invalid length. [ 1912.618127][T28797] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7154'. [ 1913.253656][T28803] netlink: 'syz.1.7155': attribute type 21 has an invalid length. [ 1913.501666][T28803] netlink: 'syz.1.7155': attribute type 6 has an invalid length. [ 1913.661532][T28803] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7155'. [ 1915.068341][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.085446][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.418875][T28841] netlink: 'syz.3.7165': attribute type 6 has an invalid length. [ 1919.443814][T28841] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7165'. [ 1927.602200][T28900] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7182'. [ 1927.793945][T28904] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7183'. [ 1927.849196][T28907] netlink: 'syz.3.7186': attribute type 6 has an invalid length. [ 1927.870924][T28907] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7186'. [ 1928.514337][T28904] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7183'. [ 1931.177734][T28944] netlink: 'syz.2.7195': attribute type 6 has an invalid length. [ 1931.208443][T28944] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7195'. [ 1931.265531][T28943] netlink: 'syz.1.7193': attribute type 6 has an invalid length. [ 1931.273736][T28943] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7193'. [ 1933.532282][T28953] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7197'. [ 1933.922700][T28953] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7197'. [ 1934.969293][T28958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7199'. [ 1935.902605][T28978] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7206'. [ 1935.955444][T28978] netlink: 'syz.0.7206': attribute type 12 has an invalid length. [ 1935.988598][T28978] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7206'. [ 1937.152934][T28984] netlink: 'syz.2.7208': attribute type 6 has an invalid length. [ 1937.192365][T28984] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7208'. [ 1939.448093][T28998] netlink: 'syz.1.7211': attribute type 10 has an invalid length. [ 1939.745294][T28998] veth1_to_bridge: entered allmulticast mode [ 1939.766567][T28998] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 1941.239632][T29015] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1941.702019][T29015] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1944.381162][T29028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7220'. [ 1944.469474][T29028] netlink: 'syz.3.7220': attribute type 12 has an invalid length. [ 1944.505049][T29028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7220'. [ 1947.170318][T29057] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1947.488149][T29057] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1949.402823][T29065] FAULT_INJECTION: forcing a failure. [ 1949.402823][T29065] name failslab, interval 1, probability 0, space 0, times 0 [ 1949.504127][T29065] CPU: 0 PID: 29065 Comm: syz.3.7230 Not tainted syzkaller #0 [ 1949.511691][T29065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1949.521794][T29065] Call Trace: [ 1949.525112][T29065] [ 1949.528141][T29065] dump_stack_lvl+0x18c/0x250 [ 1949.532868][T29065] ? sctp_sendmsg+0x1519/0x27b0 [ 1949.537809][T29065] ? ___sys_sendmsg+0x2a6/0x360 [ 1949.542717][T29065] ? show_regs_print_info+0x20/0x20 [ 1949.547963][T29065] ? load_image+0x420/0x420 [ 1949.552573][T29065] should_fail_ex+0x394/0x4c0 [ 1949.557316][T29065] should_failslab+0x9/0x20 [ 1949.561878][T29065] slab_pre_alloc_hook+0x59/0x300 [ 1949.566960][T29065] ? sctp_add_bind_addr+0x8c/0x360 [ 1949.572136][T29065] __kmem_cache_alloc_node+0x53/0x250 [ 1949.577591][T29065] ? sctp_add_bind_addr+0x8c/0x360 [ 1949.582755][T29065] kmalloc_trace+0x2a/0xe0 [ 1949.587249][T29065] sctp_add_bind_addr+0x8c/0x360 [ 1949.592259][T29065] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1949.598031][T29065] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1949.603804][T29065] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1949.609922][T29065] ? sctp_v6_is_any+0x64/0x70 [ 1949.614658][T29065] ? sctp_copy_one_addr+0x8c/0x350 [ 1949.619829][T29065] sctp_bind_addr_copy+0xb3/0x3c0 [ 1949.624908][T29065] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1949.631296][T29065] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1949.636638][T29065] ? __sctp_connect+0xd80/0xd80 [ 1949.641571][T29065] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1949.647013][T29065] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1949.652623][T29065] ? security_sctp_bind_connect+0x89/0xb0 [ 1949.658500][T29065] sctp_sendmsg+0x1519/0x27b0 [ 1949.663260][T29065] ? sctp_getsockopt+0xb60/0xb60 [ 1949.668271][T29065] ? aa_af_perm+0x330/0x330 [ 1949.672843][T29065] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1949.679327][T29065] ? sock_rps_record_flow+0x19/0x3f0 [ 1949.684674][T29065] ? inet_sendmsg+0xce/0x2a0 [ 1949.689327][T29065] ? inet_send_prepare+0x250/0x250 [ 1949.694525][T29065] ____sys_sendmsg+0x61b/0x980 [ 1949.699353][T29065] ? __sys_sendmsg_sock+0x30/0x30 [ 1949.704423][T29065] ? __import_iovec+0x5f2/0x850 [ 1949.709422][T29065] ? import_iovec+0x73/0xa0 [ 1949.713985][T29065] ___sys_sendmsg+0x2a6/0x360 [ 1949.718714][T29065] ? get_pid_task+0x20/0x1e0 [ 1949.723358][T29065] ? __sys_sendmsg+0x2b0/0x2b0 [ 1949.728229][T29065] ? __lock_acquire+0x7d80/0x7d80 [ 1949.733337][T29065] __se_sys_sendmsg+0x1d0/0x2c0 [ 1949.738243][T29065] ? __x64_sys_sendmsg+0x80/0x80 [ 1949.743258][T29065] ? lockdep_hardirqs_on+0x98/0x150 [ 1949.748525][T29065] do_syscall_64+0x55/0xb0 [ 1949.752992][T29065] ? clear_bhb_loop+0x40/0x90 [ 1949.757723][T29065] ? clear_bhb_loop+0x40/0x90 [ 1949.762488][T29065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1949.768431][T29065] RIP: 0033:0x7fec9c79e0d9 [ 1949.772887][T29065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1949.792544][T29065] RSP: 002b:00007fec9d6dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1949.801012][T29065] RAX: ffffffffffffffda RBX: 00007fec9ca25fa0 RCX: 00007fec9c79e0d9 [ 1949.809066][T29065] RDX: 0000000020000000 RSI: 00002000000018c0 RDI: 0000000000000005 [ 1949.817367][T29065] RBP: 00007fec9d6dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1949.825570][T29065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1949.833601][T29065] R13: 00007fec9ca26038 R14: 00007fec9ca25fa0 R15: 00007ffc21d5d1b8 [ 1949.841908][T29065] [ 1951.536639][T29074] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.7234'. [ 1954.457875][T29094] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7239'. [ 1954.468983][T29088] netlink: 'syz.3.7237': attribute type 6 has an invalid length. [ 1954.524198][T29088] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7237'. [ 1955.513901][T29094] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7239'. [ 1956.155350][T29101] netlink: 'syz.0.7241': attribute type 6 has an invalid length. [ 1956.163367][T29101] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7241'. [ 1958.665109][T29118] netlink: 'syz.2.7246': attribute type 6 has an invalid length. [ 1958.680276][T29118] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7246'. [ 1960.697479][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1960.707963][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1960.717415][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1960.728638][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1960.736741][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1960.744355][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1960.951163][T29129] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7251'. [ 1961.183297][T29129] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7251'. [ 1962.722937][T29147] netlink: 'syz.3.7255': attribute type 25 has an invalid length. [ 1962.742109][T29147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7255'. [ 1962.778429][T29130] chnl_net:caif_netlink_parms(): no params data found [ 1962.809434][ T51] Bluetooth: hci2: command tx timeout [ 1962.954697][T24651] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.083764][T24651] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.099651][T29152] netlink: 'syz.0.7257': attribute type 10 has an invalid length. [ 1963.109887][T29152] bridge_slave_1: left allmulticast mode [ 1963.117323][T29152] bridge_slave_1: left promiscuous mode [ 1963.130380][T29152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.288859][T29152] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1963.320987][T29149] netlink: 'syz.3.7256': attribute type 6 has an invalid length. [ 1963.329801][T29149] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7256'. [ 1963.377824][T24651] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.499099][T24651] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.547325][T29130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1963.554519][T29130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.569464][T29130] bridge_slave_0: entered allmulticast mode [ 1963.577764][T29130] bridge_slave_0: entered promiscuous mode [ 1963.597291][T29130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1963.604454][T29130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.618655][T29130] bridge_slave_1: entered allmulticast mode [ 1963.628854][T29130] bridge_slave_1: entered promiscuous mode [ 1963.680400][T29130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1963.697170][T29130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1963.797964][T29130] team0: Port device team_slave_0 added [ 1963.823518][T29130] team0: Port device team_slave_1 added [ 1963.905004][T29130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1963.912038][T29130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1963.943675][T29130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1963.957807][T29130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1963.965289][T29130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1963.992688][T29130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1964.171063][T29130] hsr_slave_0: entered promiscuous mode [ 1964.182405][T29130] hsr_slave_1: entered promiscuous mode [ 1964.614925][T29130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1964.628426][T29130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1964.660224][T29130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1964.672256][T29130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1964.830859][T29130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1964.875152][ T51] Bluetooth: hci2: command tx timeout [ 1964.924124][T29130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1964.994752][T24651] [ 1964.997165][T24651] ====================================================== [ 1965.004253][T24651] WARNING: possible circular locking dependency detected [ 1965.011299][T24651] syzkaller #0 Not tainted [ 1965.015732][T24651] ------------------------------------------------------ [ 1965.022761][T24651] kworker/u4:48/24651 is trying to acquire lock: [ 1965.029106][T24651] ffff8880797f8d80 (team->team_lock_key#9){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 1965.038757][T24651] [ 1965.038757][T24651] but task is already holding lock: [ 1965.046140][T24651] ffff8880304a8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 1965.056532][T24651] [ 1965.056532][T24651] which lock already depends on the new lock. [ 1965.056532][T24651] [ 1965.066947][T24651] [ 1965.066947][T24651] the existing dependency chain (in reverse order) is: [ 1965.075977][T24651] [ 1965.075977][T24651] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1965.083729][T24651] __mutex_lock+0x135/0xc80 [ 1965.088869][T24651] ieee80211_open+0x144/0x200 [ 1965.094088][T24651] __dev_open+0x2cb/0x430 [ 1965.098961][T24651] dev_open+0xab/0x190 [ 1965.103598][T24651] team_add_slave+0x703/0x28a0 [ 1965.108911][T24651] do_setlink+0xcde/0x3f40 [ 1965.113867][T24651] rtnl_newlink+0x1848/0x2170 [ 1965.119084][T24651] rtnetlink_rcv_msg+0x843/0xf90 [ 1965.124567][T24651] netlink_rcv_skb+0x235/0x4c0 [ 1965.129871][T24651] netlink_unicast+0x7b1/0x930 [ 1965.135186][T24651] netlink_sendmsg+0x8d0/0xbf0 [ 1965.140495][T24651] ____sys_sendmsg+0x61b/0x980 [ 1965.145800][T24651] ___sys_sendmsg+0x2a6/0x360 [ 1965.151019][T24651] __se_sys_sendmsg+0x1d0/0x2c0 [ 1965.156415][T24651] do_syscall_64+0x55/0xb0 [ 1965.161380][T24651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1965.167818][T24651] [ 1965.167818][T24651] -> #0 (team->team_lock_key#9){+.+.}-{3:3}: [ 1965.176012][T24651] __lock_acquire+0x37ef/0x7d80 [ 1965.181407][T24651] lock_acquire+0x19e/0x420 [ 1965.186465][T24651] __mutex_lock+0x135/0xc80 [ 1965.191515][T24651] team_del_slave+0x31/0x1b0 [ 1965.196654][T24651] team_device_event+0x297/0xa30 [ 1965.202134][T24651] notifier_call_chain+0x18f/0x380 [ 1965.207821][T24651] unregister_netdevice_many_notify+0x1037/0x1910 [ 1965.214783][T24651] unregister_netdevice_queue+0x2e9/0x330 [ 1965.221061][T24651] _cfg80211_unregister_wdev+0x16d/0x580 [ 1965.227238][T24651] ieee80211_remove_interfaces+0x4b3/0x690 [ 1965.233599][T24651] ieee80211_unregister_hw+0x5d/0x2a0 [ 1965.239524][T24651] mac80211_hwsim_del_radio+0x289/0x480 [ 1965.245615][T24651] hwsim_exit_net+0x58d/0x650 [ 1965.250835][T24651] cleanup_net+0x707/0xbb0 [ 1965.255790][T24651] process_scheduled_works+0xa60/0x1600 [ 1965.261882][T24651] worker_thread+0xa5e/0xfe0 [ 1965.267018][T24651] kthread+0x2fa/0x390 [ 1965.271628][T24651] ret_from_fork+0x48/0x80 [ 1965.276590][T24651] ret_from_fork_asm+0x11/0x20 [ 1965.281946][T24651] [ 1965.281946][T24651] other info that might help us debug this: [ 1965.281946][T24651] [ 1965.292212][T24651] Possible unsafe locking scenario: [ 1965.292212][T24651] [ 1965.299677][T24651] CPU0 CPU1 [ 1965.305053][T24651] ---- ---- [ 1965.310458][T24651] lock(&rdev->wiphy.mtx); [ 1965.314984][T24651] lock(team->team_lock_key#9); [ 1965.322469][T24651] lock(&rdev->wiphy.mtx); [ 1965.329508][T24651] lock(team->team_lock_key#9); [ 1965.334478][T24651] [ 1965.334478][T24651] *** DEADLOCK *** [ 1965.334478][T24651] [ 1965.342637][T24651] 5 locks held by kworker/u4:48/24651: [ 1965.348112][T24651] #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1965.359064][T24651] #1: ffffc9000f56fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1965.369630][T24651] #2: ffffffff8e3c9ad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1965.379059][T24651] #3: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1965.388926][T24651] #4: ffff8880304a8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 1965.399749][T24651] [ 1965.399749][T24651] stack backtrace: [ 1965.405650][T24651] CPU: 0 PID: 24651 Comm: kworker/u4:48 Not tainted syzkaller #0 [ 1965.413473][T24651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1965.423553][T24651] Workqueue: netns cleanup_net [ 1965.428353][T24651] Call Trace: [ 1965.431658][T24651] [ 1965.434618][T24651] dump_stack_lvl+0x18c/0x250 [ 1965.439337][T24651] ? load_image+0x420/0x420 [ 1965.443872][T24651] ? show_regs_print_info+0x20/0x20 [ 1965.449097][T24651] ? print_circular_bug+0x12b/0x1a0 [ 1965.454327][T24651] check_noncircular+0x2fc/0x400 [ 1965.459299][T24651] ? print_deadlock_bug+0x5d0/0x5d0 [ 1965.464519][T24651] ? lockdep_lock+0xf5/0x230 [ 1965.469149][T24651] ? _find_first_zero_bit+0xd6/0x100 [ 1965.474465][T24651] __lock_acquire+0x37ef/0x7d80 [ 1965.479349][T24651] ? verify_lock_unused+0x140/0x140 [ 1965.484604][T24651] ? verify_lock_unused+0x140/0x140 [ 1965.489830][T24651] ? __up_read+0x2b8/0x6b0 [ 1965.494268][T24651] lock_acquire+0x19e/0x420 [ 1965.498794][T24651] ? team_del_slave+0x31/0x1b0 [ 1965.503595][T24651] ? __might_sleep+0xe0/0xe0 [ 1965.508211][T24651] ? read_lock_is_recursive+0x20/0x20 [ 1965.513615][T24651] __mutex_lock+0x135/0xc80 [ 1965.518148][T24651] ? team_del_slave+0x31/0x1b0 [ 1965.522947][T24651] ? __mutex_lock+0x30d/0xc80 [ 1965.527650][T24651] ? team_del_slave+0x31/0x1b0 [ 1965.532443][T24651] ? mutex_lock_nested+0x20/0x20 [ 1965.537406][T24651] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1965.543125][T24651] team_del_slave+0x31/0x1b0 [ 1965.547750][T24651] team_device_event+0x297/0xa30 [ 1965.552711][T24651] notifier_call_chain+0x18f/0x380 [ 1965.557859][T24651] unregister_netdevice_many_notify+0x1037/0x1910 [ 1965.564301][T24651] ? unregister_netdevice_many+0x20/0x20 [ 1965.569961][T24651] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1965.575712][T24651] ? __lock_acquire+0x7d80/0x7d80 [ 1965.580762][T24651] unregister_netdevice_queue+0x2e9/0x330 [ 1965.586508][T24651] ? list_netdevice+0x730/0x730 [ 1965.591380][T24651] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1965.597132][T24651] _cfg80211_unregister_wdev+0x16d/0x580 [ 1965.602793][T24651] ieee80211_remove_interfaces+0x4b3/0x690 [ 1965.608653][T24651] ? ieee80211_do_stop+0x2000/0x2000 [ 1965.613961][T24651] ? rcu_is_watching+0x15/0xb0 [ 1965.618751][T24651] ieee80211_unregister_hw+0x5d/0x2a0 [ 1965.624146][T24651] mac80211_hwsim_del_radio+0x289/0x480 [ 1965.629741][T24651] ? rhashtable_remove_fast+0xc00/0xc00 [ 1965.635321][T24651] hwsim_exit_net+0x58d/0x650 [ 1965.640037][T24651] ? hwsim_init_net+0x90/0x90 [ 1965.644757][T24651] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1965.650669][T24651] cleanup_net+0x707/0xbb0 [ 1965.655125][T24651] ? ops_free_list+0x3b0/0x3b0 [ 1965.659936][T24651] ? _raw_spin_unlock_irq+0x23/0x50 [ 1965.665177][T24651] ? process_scheduled_works+0x975/0x1600 [ 1965.670936][T24651] ? process_scheduled_works+0x975/0x1600 [ 1965.676691][T24651] process_scheduled_works+0xa60/0x1600 [ 1965.682276][T24651] ? worker_attach_to_pool+0x370/0x370 [ 1965.687766][T24651] ? assign_work+0x3cc/0x5d0 [ 1965.692410][T24651] worker_thread+0xa5e/0xfe0 [ 1965.697043][T24651] kthread+0x2fa/0x390 [ 1965.701133][T24651] ? pr_cont_work+0x550/0x550 [ 1965.705835][T24651] ? kthread_blkcg+0xd0/0xd0 [ 1965.710447][T24651] ret_from_fork+0x48/0x80 [ 1965.714891][T24651] ? kthread_blkcg+0xd0/0xd0 [ 1965.719530][T24651] ret_from_fork_asm+0x11/0x20 [ 1965.724330][T24651] [ 1965.828967][T24651] mac80211_hwsim hwsim68 wlan1 (unregistering): left allmulticast mode [ 1965.886258][T24651] team0: Port device wlan1 removed [ 1965.936692][T24645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1965.943916][T24645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1966.205203][T20893] bond0: (slave syz_tun): Releasing backup interface [ 1966.817837][T24651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1966.835342][T24651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1966.843316][T24651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1966.853213][T24651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1966.863450][T24651] bridge_slave_0: left allmulticast mode [ 1966.869659][T24651] bridge_slave_0: left promiscuous mode [ 1966.875892][T24651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.888733][T24651] veth1_macvtap: left promiscuous mode [ 1966.894310][T24651] veth0_macvtap: left promiscuous mode [ 1966.900248][T24651] veth1_vlan: left promiscuous mode [ 1966.905666][T24651] veth0_vlan: left promiscuous mode [ 1967.154929][T24651] team_slave_1 (unregistering): left allmulticast mode [ 1967.162755][T24651] team0 (unregistering): Port device team_slave_1 removed [ 1967.200282][T24651] C (unregistering): left allmulticast mode [ 1967.207063][T24651] team0 (unregistering): Port device C removed [ 1967.249755][T24651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1967.261499][T24651] bond_slave_1 (unregistering): left allmulticast mode [ 1967.308519][T24651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1967.317575][T24651] bond_slave_0 (unregistering): left allmulticast mode [ 1967.346432][T24651] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1967.356100][T24651] bridge_slave_1 (unregistering): left allmulticast mode [ 1967.386336][T24651] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 1967.395639][T24651] veth1_to_bridge (unregistering): left allmulticast mode [ 1967.530386][T24651] bond0 (unregistering): left allmulticast mode [ 1967.537454][T24651] team0 (unregistering): Port device bond0 removed [ 1967.574699][T24651] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1967.583668][T24651] bond0 (unregistering): Released all slaves [ 1968.540236][T24651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.628636][T24651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.684900][T24651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.741734][T24651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.873014][T24651] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.913853][T24651] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.972490][T24651] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.053601][T24651] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.178819][T24651] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.233162][T24651] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.292229][T24651] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.352554][T24651] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1971.399416][T24651] hsr_slave_0: left promiscuous mode [ 1971.409324][T24651] hsr_slave_1: left promiscuous mode [ 1971.418667][T24651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1971.428005][T24651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1971.437642][T24651] bridge_slave_1: left allmulticast mode [ 1971.443337][T24651] bridge_slave_1: left promiscuous mode [ 1971.451036][T24651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.460192][T24651] bridge_slave_0: left allmulticast mode [ 1971.467551][T24651] bridge_slave_0: left promiscuous mode [ 1971.473334][T24651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.489266][T24651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1971.497633][T24651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1971.509613][T24651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1971.517344][T24651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1971.526912][T24651] bridge_slave_1: left allmulticast mode [ 1971.532611][T24651] bridge_slave_1: left promiscuous mode [ 1971.538865][T24651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.550956][T24651] bridge_slave_0: left allmulticast mode [ 1971.556941][T24651] bridge_slave_0: left promiscuous mode [ 1971.562693][T24651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.577956][T24651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1971.587113][T24651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1971.614594][T24651] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1971.622217][T24651] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1971.631961][T24651] bridge_slave_1: left allmulticast mode [ 1971.638181][T24651] bridge_slave_1: left promiscuous mode [ 1971.643935][T24651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.654679][T24651] bridge_slave_0: left allmulticast mode [ 1971.661641][T24651] bridge_slave_0: left promiscuous mode [ 1971.669299][T24651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.682577][T24651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1971.692076][T24651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1971.703546][T24651] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1971.712943][T24651] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1971.721901][T24651] bridge_slave_0: left allmulticast mode [ 1971.729305][T24651] bridge_slave_0: left promiscuous mode [ 1971.735405][T24651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.753140][T24651] veth1_macvtap: left promiscuous mode [ 1971.758930][T24651] veth0_macvtap: left promiscuous mode [ 1971.764616][T24651] veth1_vlan: left promiscuous mode [ 1971.773236][T24651] veth0_vlan: left promiscuous mode [ 1971.780694][T24651] veth1_macvtap: left promiscuous mode [ 1971.789718][T24651] veth1_vlan: left promiscuous mode [ 1971.795194][T24651] veth0_vlan: left promiscuous mode [ 1971.802347][T24651] veth0_macvtap: left promiscuous mode [ 1972.173875][T24651] team0 (unregistering): Port device team_slave_1 removed [ 1972.215382][T24651] team0 (unregistering): Port device team_slave_0 removed [ 1972.243604][T24651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1972.276323][T24651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1972.353253][T24651] bond0 (unregistering): Released all slaves [ 1972.571808][T24651] team0 (unregistering): Port device team_slave_1 removed [ 1972.600235][T24651] team0 (unregistering): Port device team_slave_0 removed [ 1972.630023][T24651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1972.661889][T24651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1972.741544][T24651] bond0 (unregistering): Released all slaves [ 1972.889849][T24651] team0 (unregistering): Port device team_slave_1 removed [ 1972.963592][T24651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1973.021672][T24651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1973.163097][T24651] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1973.171761][T24651] bond0 (unregistering): Released all slaves [ 1973.471894][T24651] team0 (unregistering): Port device team_slave_1 removed [ 1973.501422][T24651] team0 (unregistering): Port device team_slave_0 removed [ 1973.533986][T24651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1973.578679][T24651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1973.611095][T24651] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1973.690703][T24651] team0 (unregistering): Port device bond0 removed [ 1973.741474][T24651] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1973.750160][T24651] bond0 (unregistering): Released all slaves