last executing test programs: 11.616647177s ago: executing program 2 (id=4639): socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x40052) 11.420306773s ago: executing program 2 (id=4643): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000030000000200000000000008000000000000000105000000200000000000000000000002"], 0x0, 0x4e}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa19}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0xe1, &(0x7f0000000140)=""/225, 0x41000}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f00000016c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000001680)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x2, 0x0, 0x0, {0xa, 0x4e24, 0xc3, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="804298ef7da93c8afeb3a22b94cc7f58a8716008d532efc1f4dc9f44c0ece84a030301c9c9f491d3a32e953ac6c6adb7d5f3", 0x32}, {&(0x7f0000000180)="4ba9e1d0484aa0629ff8a3ebd264e82f48263cd800368c175a9372b441183e730a7e6b8e37827dc09a705ad26f0ee8130ca523164e230ec9232cc557ba354a3454b2d0e5de4f61e89274fb3bd9b21b0b14f08fa657286aba6b33e198e6027f0648ee4855588d82b176c292f6468c63ba87", 0x71}], 0x2, &(0x7f0000001700)=[{0xb0, 0x0, 0x401, "32d16065930e034238fe6b019b70cca752a01ebdcd3660dea4ac5c9293330dbd9e0afbbff80aebbabb0017cd2f810d6d28daaab969db7592eb91e7404ce5486bbb5d5100138c854d30b022dc8f38c398407dcd60e25d569ddc9072cb8f9b2e227c02fc9c66e721c33578a1819254e9e232d3991330d7a8c899423125cd78e08ae140fb5a61527f84b72b9ee1a86dea968671659266a65e3df2"}, {0xb8, 0x11, 0x9, "2d5f5b898eb9fb39bc2396d4e3f0c77299ec9c070d1b08e027fc89439c6cc1cfdcd928512140dda9b2c1c5518a6054d46e01ace03c19832af7ef417fffa8589e041cbb43148e7f94ab6c722da0474da37b323e2f2b8d9e59b5f0bf649af8db7451966cd3b86e2c8dea4cc9ff1c3fd533f4c109bdaea7ba6897138a579a721ef97d3900d2600aedae44257a1c86047eb1b3d4f387196f37d7a5740c1d893aa681de4a120f805674"}, {0xd0, 0x29, 0x8, "8aa57bff09e35095b16d08b5c53171a89412b123b13d8736c05ebdf64ed0cc04ba679c288780bb7bca524ab00137aad16f0d16acc23ff681004075f28ebfaec0596f1be705b16953005b641207d1089776a78ca83a24afbcdcd886c8ec93645acf8af0550d12a4aa1d2b6c07d3b2bc4e38315df3f5650ce428c652372e4064fd7114ef17cef7b29d3efe379c3342241db9a20e8034bd6efc5bd870c825e5309e3aa8d39da80134d6c3abe5381eb2dcdbfdafffca9ce771c8c3d8"}, {0x58, 0x84, 0x8d64, "2096fd53ce10bb114422f15023a3f5414a2e956b8b01c551a5a3ba3d93ec859447a58064754dd3094157a4fddb012e1e32d7c6a50e4c2f6a10a259220d94d2fd7048b8a51d3f8d"}, {0x80, 0x32b, 0x1, "cd1b5c004a90c50ea62158299e4eeafcd8bf738babf114ade49f023ea97f426748ac3150dfc0c24cdebd4c98278ef98cc3f4a490d532ebf5cc456938adf03e570afb03cbe92fca42f14e25ceaf9337fe060e9edb6cc5ec26e1faf635268ada5c09503477299ac550f1"}, {0x1058, 0x117, 0x2, "0e98d48bc317e001afae0057057b88792dcc128ffac3378d99e1be576c988ed6ff914cc87704bc1ad27c0e6e5106753f320ff7cbebc6c676d48ee6450d71215ea8a37fbdbd255e0ad34d9ae582ca2e3ec42906e10de8b849bd2897f2077545c7b218c905487082329c34b71fde9772bf81839ec6d7e45ac84f9b7f1ec66f65f87b51344e3f863c8f6d660cf8755d1887794f61273eb255fb437e52f595855420dab2fd64b996bf91900144c3f71a61fa190c8a3b26bd65f57614eb8662d9948b59f2994a67c8dec630e8bd3f669578bad5017dc6fda6f0f6a7c0e3b09c15004ad398edea32df19d5a6892a5e8a49b70fd6863e34f93d8ebc362ca88b1ad2fbdff426eaf4356bd89e58acc0d8b76f3b9d8f17304a3250bf1b265f6add308c43740d9227e11aea1944a03e8bdb83d89f6188bbe085fad4f8b280df613735a43ea37f970c69dfdadd956d872c2443440d54a0cdc03860cca593c8414af6bdf2925323f4c8408ae186604af2fe5b9decad647a8ef3c6b5473a1e1a0dfd7bf7b108b2da7346146c0cdb40fcd3e29fb5c4c334093662797030d65f3363a756270bc9a3883fa107cbf9f0e9e8c9139a9b15eac96eaebb3fbc5e939b93bf20769abebf6f4749779bdd80df728a48115ccf1b7fb2cbe62861d94f7cdc3b15d4c4bd7af0ce9ec43f5dbbeefcbf0477db4c7eb8720194635efc9154384373f574263649bc42bbc79aec19983fcd66b66e0fd4c6034bbeb4e837d2f3b871c6e6a54d9cab14cb72c102251777b9f8c8169dc2e72c8f0f5e3d5c6ad26810e8f3337589e291767ace4ea80666f4cb2ed80bb9be4085d8b6cd1a5d5d5a7881200246e2364dd9021ced7458845040ce5541c8994f71456cc0203684c204c16e1f4109496af32bc2adf6c6576bcb71620d9b297c4f826df03bc1d23f31da3383b0cfe318f011d6226bd788f4209ecf3ba9adce482921554a8dcd8f21aef08443ae117fbb1a0fe0dd9de237b403af3f902fcf4adefe0d0d7d40f2e5104e7f38492e0d0a67d8cc3514fa03003467e815dfea43480d4a21d6016a1e00eb7e0f11ea403e576d70d2d2d94db392c8179250e5c844b8b86b419744d64f4603c1a97e8eb5e1523dd0e968525c3e58ff4fffb1bae85984260be21565eaccf08700cb076e60b8abc73ad8e87662a84b278f4aec3db6721d9100d399a14d000d83a144f4b1015a8096d4903c65cddcb80e93c83317d9ccc31e9aa5887691331dbf8bd4105bf4b4aca5cadbb5ba795248189eac1e060f5ecce4cc43928d4b69d64c5140c423e2ecfd60b1f3c01070d2ce3b1f0cb8c8f038fb085c351f2bc33898c054ed436303ebf7c4061cb3a96d8295cfab8f76e48ea010db5807bc45572bd6fe694bea5eaa3dcdc6d5af15bf57b439fa7c5b5a784501f0aa1c9c8f691d306679a598be75124dea9f3456eb7a8aa9bf07b778fffbd20951f10885bc9c47fb6fd1847525eb7987642e532900068b1fc6e1e14288f119fdf3ae0cec681b1e4367bad99f7c8df5fd2e48e486d2e303ae0c4d43efc8c773d893f845f24aea0bc60647b9e3822fb1abe644c74a90db5d159bf99c3a83c118b7c98f6a9a94882382c4efe18681a4ddc07210ba45ba53e8533543d7038e08230b516e8df66bc518b6afb2ea07bc06f942d456c75eba0d5c9911ddb2450cf2fceea6bba137cc76de8a2f2b96978dd8cb361a315535373b1838911c1195bb99a4cc8547364b8874caa40658d46dfe962697e97ace84ca693b1e8341c9dbadf8fad3ba1c4842a050802af36ad4afde0b48291ae1bbf3bffb40a525871774d46723e09514c08aa0794819ca6df73bbbad0c52c46c01e962597e7fb07381c40655bbc466623b60a741f9713015611a8bb7fe2364cb7a4100621f1e77cfa2ef7e66d13e0b796aba883c0203998a5d54d90805ca4603ca18cc979e9e8f1ed909c94b74696352855f8e662ba3185ca31ac938a36af49a78d3edf1c77b8214ef924069fe62e67df2cfaaa420d9db360ede72eec1cfd28c46756dce6d64de3efdd745737817d4d42a61ff070e6a1cb221a7f70d4d7d857a4bde9c99539698c2f4c9af66a58e55b5d7ddabc96e36f71df021f0b04d50714f23ec0601c712bca504f2740df5f37bb6bd611215d2126ad4828efe90e5f7346b0f085310234f6612778c77cf4343317616da1f8234d86679745bd7d7531aa59c3074330efbdde976fd6e20494e1d2e1d73bd2fba85547d19be6c22b193888a3b12511ffff5326bac70bc93d1b9efcd81670aaa1d9385981c67606490b3bbdd40cf563513e6c20b51025d4fac1157bc4f8887b514920e701394fff542d3d898b67c86661a86f185fa9e2c0be23696190186e1ef0b342e355bb36b2036672daacb04c5b3ae522c271e25d6a6e5c754c7187f9060789474ab97227f07f71e5e5b9c1eba3d5c1ca964b8eda4690fc5160df014df66bf1b18867949756e8d27179e10fa9131941ca479ce207e2a14bb9fbfff458eb21fb776c5a7acc1f96e50c94a4314786f6eaee4ef1d1a8e80fb7e8bb2d6a2db7f329a527afcaa046543065e7586ac4d1638bac6f4770f2ff47ca4d862dce7b8e9fdb20236bee4fc0546e03797fca13d276ad8089647f56c641c854ea4d27eb3a2a029e89d405b4fc7dbfad3d089752705ebc3b80daf913cc8887049cf9eca6fcf7d2db02f038cbd0a5cffd6c3be39ebe133934381f2d89b55b107393bd41723c7608cb606e6142ae30a069b61944386430e2aabfdd74a31d2f17472a615868c02b6b2ecb78473ffdfacb00e5892314b27fe17239385a1ebcb7b6182b1e1fbad216800350507d3b6dd0d7abab185c402d02d3b9d2c750b89de6cef0e9591e0a535526df7db88ad936debe48e2b0575b25c208396b5c27ef1347285259d75a4147f7dd8cb9711c5119cce780405feb43f75d3c833156fc6596b0bd15c134c645716856eb2e3e599ffdf42cd162785c8eebab0106ea73ab05809fa3a5cee555eb453fa7d43dd18d5f3fc4914bab9b4dbd2c4c5ef8ffb14ccd31e0a1e2c4ae76394a939c42932810b69131ba216e50013fd7dcb5b17262d72ac0659792df4377b68a56788115d405efa4ce93991754e253622bd93f86377a2a7fb9dfad41dc99eeea4d694c2c86538aec286ac52b2756bbba0e878bd3dbae1c2acf0036d5de11ae65fba0c87372884962e9f54f9392d6761c7a759852fa434df9913a393bc3766b30e045c71f8dfe12bc046999ad999579454887f9415015f54783540aca6aa96d52bf1942f2dd74286e952d1e1c2bc2fe1719c263d8384b62f2061e585f419de1aff90eb4fac5ee435e69222706c0dde96ec322ae8810464c4149be18c156c137b0e7227d51553fbaac65ac4859f02cecd2201de6c61f7a656ee7bd5c7905c905b045f186a8ca5193216256993b2f6347acc64ffb9a141b0ffe5b8f405f2cdb9fcfb2fcd91d50b2977f3e791112a9675a3d37e6f1f5952acc317d137de64f402c8d74ca53038bfc66983f671cb5d92f0a4d9678fa17259a2003733cf7cf07de53a39cd99a8c1c978ec1fabc7c72b96ccfb1af3fd8e790fc3da4735d890cd50502fc1535e606b44ce17e99faf0528ffbeaac238b05a484211b31d35b840af6026594a0674361989013e002943983ed8f6bed4421528b4cec30e024ad582c3bd69504971d12b44573b933c9a1c960bb81cae483a2e17c4b7e7c3a1d5a1b7014db314e85a2a05702e97d2b0f8290d928a1f709b9108dd9894452f1c4c7f62fa43164d4bfbcd757d26084225677fdac5449b052ecd922ed953fe853de8817ce0174e4bff3b16e39e3b419042b2ce1b8abbbc73ad0b9e74cb866333722e437f67884ac89e50c24d372f46a90d2b8bf1933fc6c68ec6dca0450592e574a122bbb2c1279ade9e91c1237dc2b61bda49b57c047b620594e4bfd533767f4599d8bbfea7ff7262a2045aced80a0fc381c64edff38772ec544bc1d80deccab5e473cccfc7ee638057fb79c080f1d339c9876bb51a1bc641c2c4b2f1fa4bad2f0396a17a59be5678e1c94c503965f1ad56430faf2a1f31f8a3f701d07836d4a7e02ed8cd726c2ab3a4ab27f7a5e3a8093b6f7a5159e2079c67ef4007cf831007f1a4d0b828604a612fc035b5da1a2e82ed2e421e2a2587e9713850fa345529a40aec74f4a35f9a96191c3e8cbd88e4176058ee8abead3b7e292397e70300552c233ee3889d36cae6d4e0b3c8c7302a8e36b3e28235566dca7dbc2344de863524e2f21c4d239acb25a63168455f37a90add35d5b2e73bf4fedd573303d47da86e0fdf3b8336007692d226bacaffaa6966d6aa0251744bd2f1d2c15ead7b9c22e1fb602b42e1bb5ebe928584809f776fc026afd15ec06bc8cb0ff96ed362802907094678e89b555593da6b867b69e76b59f6cac2384754d8497670435c1313ac2685e7115fff5ae185560462459e90207356e656d88c1c2f6364fef46a095900ddc27b1fda77b22c0e119e08c9080e83394b8ae3a8aee6348c7658750478e81c79586ff1ff887b6ef9bb9d7da835c792c3c1a0f72d1052a7d5c530e1f674812abab9175a3b3dd39595a82f94c67fd5b04e5531d06ea70ed15ceeb279470df74c770d98ae269883a16897f33a494c21ab9ca4bcb861e929c998b7d50abc44e475928c5915ec01333a2f15c1f66f4464bf5a3c2b69f63faaad813047f2402e321d98a955128b9b3de922b31ff98df324aa4e6decf36a08a749259b33cb891385eb11e3e26292855a49665cd11ceb95189c0350bfc37c63fe5be9789a40b9f2e82c0431b2c96937bab77b4ed13e1c6723d72eedd3c604e7724636d118dc7031684604e722b51dc6ef9d865fddbe745cdd93ca642d313af63df4efd3c3900315b53d86d0ec043c67045f1656c3a8ae69699573bc671e1c1fb97412f0bc6df6de096e73f29a6e69993b054c80ec2887d91c8b662a3369b31d4570fd84e93664498fdca2f326e9f9cef26f011d246754613c793aa54fb7d84c206d12a1e8ed6e9f75c5b58818b15bc084c0e2b5f561c84529fcd5eb7ae3d4993cb16453aca8f96f9a90e39920b3072c0a908262e40fb97059c0534b8cd748e1080866dfd764d71328488d40893a1705d3cdf05603792ac1bd8fc846b89449ce795927bd90d4f0693e86ace28b42f97dda902e0f326540645c4e03af34043eb409ab8a3dac7ebab98905d38e1816a7bf4631d8bc55987be7a1296cb4b98075898ebaad7fcdb020f585e49c10dd16cd8f4bd1cf5b593ff9ea800f345192244b913f4ed5869a20bcc216901b5acdc71d76013eca1653020c87ff7dc5594872fb85c89e6a4b755631e0daf94de2490ee0664a53819c8cb23e72ccc8272cd7cf98e0037ee6599229df3c7eb5d1a9974f4054bb1a28b01e912236323987567f45c1ad6859851397ebd54970e3b5ed45b621a82fd15a93e77327cf20e9e6156a8e5b15fd667f34dc2b1db0bdd0ceecfab370cb8371a0591a20b0f8bec4ed49f9ea2440cf6c84c561c0bd0f364f1c225ca5957c09a96ee8b40019552998c2d74b8182a32a5cc1750172947381f4f859c1bfa07b9d2c5faa363971de63d772bf82831e4f096ccc0b87dfab00d3b20d4e164c06d0d3f5177e9cb846389288345bd45a7acbeb354a6a9c1231e2178540e71bfb5c0549ba9ca6c5b687df99447def20d2ae90bc370fe2f2c33475cd0365e70f6639ea224ffd4709e9b30e73a45e7b1484051e5a3a27452c8fc7f4b05398143013379d3f19d5a901419248d2f17239c8b46ff9c8cd0ae51edc0dfe645c4d84ff84a39b308d5a2af7751ea4d3ff91389613884789c026be744c05fb54aba800b1227a272906e60b0c3a9606303fd12e6dfc1b91ae70b4e60c32e28b52"}], 0x1368}, 0x40010) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90324fc600d00030009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 11.227853298s ago: executing program 2 (id=4648): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000580)=""/77) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f926a3c92b", 0x14}], 0x1}, 0xffffffa6) 11.112190391s ago: executing program 2 (id=4649): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0x3, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7fffffffefff, 0x2}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0xfffffffc, 0x81, 0x0, 0x400, 0x0, 0x8000000000000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000018c0)={&(0x7f0000000080)="00ddf453305c7fd338cc7962159b5722ce4217fcef662ccab3b3d8ecfc7adc89cf7ba8faae37f649aa1a3be2f45c3e74aa733f3c34f61ade99a02f818a2522dbaa670b7cf8a83b51d20e303b5c2eeb723148d9af1aabca7784c1ae4cfb5eb251897294f471ca1ce1e4b7e354469050c8ea5b983591b97a1135b6d17dc9d67afdaf90a5ec806dca3243f8bcdfc70cd25be72f84960cab0d45e7254ea53e2ce57a7d9e8e606a52a99c32", &(0x7f0000000280)=""/18, &(0x7f0000000780)="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", &(0x7f0000001780), 0x0, r4, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x14, 0x9, 0x5, 0x81, 0x0, 0x3, 0x52c14, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x4}, 0x2284, 0xa, 0x0, 0x3, 0x5, 0x40, 0x100, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) 10.796491799s ago: executing program 2 (id=4653): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000050000200000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 10.652382853s ago: executing program 2 (id=4654): bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001880)=ANY=[@ANYBLOB="850000002200000007000000000f00089500000000000000e26c9bd1a6361b80cdd6ff07000000000008bc005aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a9554320000000000000014569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c5a01ba62ed8f2c6a503dd1b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341e70ba0d6fd562489dad595712a4051bb6cf826ab757193fe093b8b3353fbbb278d190000000061805ed430ef06000000000000001e93f640f159320c8b088f4d64977b2eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751df38c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b777d73a63246ce6f0467167626329ab91df7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6ee02412064730700aeff2b69c2f2bf6f691c3560e068743ae8e8771280da61fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c56d9abc40c64a20c14ff0b1bf4d23fe07ae90f503ba9c64bf89b26e7d8d70710b04f9ece69023acadbb4582272e5b3a0429a5675e5a9554de54945d9a270180e0545b0c824ad36f7cc8be12b3874d5a19349b0ede845e9ece24d546d3af1bae069b89f6ecf2aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d80250a7f2eeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d1690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1be3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be4c4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a6df5bdc6f7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dcdb951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05a1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c21181f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfe63c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed02000000e4b3f0e65783ee5e20d9270802f2a7500738bf356131ca53e9d7ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e4c26497c029bb61462623a58556cd66844d4d23cc738ee5b36c71d2c010b089251d5806000b1a84f4e26cb0331c6e7c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd49457536430ffbd3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc3126bf1760243d51a197d3ecfd74bd625e9f496175cfeaaa020817d33d513f3e97854ea76e04e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c735647895713cbcea57b2277831f8f633f0d29371e645e5544e57010a9b76457f6ad73231a9f31f6bbb1b95248aeda5a9df9dea64cc1fd1f06a980fcf3a792bb0910e45fce298ab0a0298fc33a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b96acf060f74084760d226f50edb115c2e075f3c663a4b4169b900fa0a13cf796e0d7a9dad86953c13ed6241206d682e194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b9d5dd8bf6c28653eb84f117e476e052a9db790e0a71dac9d8b343efebdc026860000000000000000000000000000aad579302085dfdf75bea24798c680b3de341e3bd57543cd8dfd58bcebdbb883c743ed43ba7f540f2c4e0310c21e7deff9e45b8bd2cf65bb584091b8e80e34b3e59185fe32d1d73dd4f62712a39b13661516723b6b3ef14d9fccb05f9c4e69a3af0fde863af2d9a0f8a94fc571b0ab4ad714f41fa4ee0b8b44e3c41a3125be95e4b23d5f05395852761bfaebe0db979d5f3991d826cc74542b85cfd0dba66bc93cfd79178ab0b79fa3b29ff9c19e0424513c91980187c9d94b8354337a1fc782505db900c47d83bd49276cfe6e242ba8365b1ea4598a21f50f5415a70990b5bb4a1f6bd8acdf2c7da3d648754767089c9b5ceb556fafa3cc5afd2f3e9a62a90262a76ff89a2751b59a744f0d3f36ca503357daa3e29ce6f357dc1e4839277d003e93fdbb955e1a1302a76aea7e73835094fb15464e94e814c77c293121d0433e80d444c4ca17abaf32b521d8686666055da023aef9c8df3e80d2ed640ed10aa19a036dcef172dbd3b3600b69d7b90c6222e167d7c76059f2b5f3b3004e8a20d1f6612efeb629573be97aa949c6016e7e16283e84986aaa4fc8a098708ebe36f377ada63d9b464c39342e0682549862de3ec75e7b031bc49f341a21417fb6375e8701481b59d1722c836961804666801678eb25750b520bf1615a4bbf30aa74d60ec6b657f2dd298b0419da43fc708a60c94a7ff2fd6a2d08005ad73c9e2d6143d2857be8fb3f12bfa6628bccb153e39172d07563d6a1dc75c347c08060304f091230bd74b49ecdd13bf480db3984622a167c8603b8c501280059a7b6123c8f8cd217f64eccc2dffe4f3a1e8c9a96a13d8126f3ea26779fbd0069d729a7764d4ddd7d9d820b0de2530969362b94b974678527f5bac7eb8d6e321b2be0b2f7534634a5ecd1248d7ad7e8e03163e92e9f1d620e28597bd881eea0981e8adfd70b670b0763ce9226f7c3e156b353e22fdea6942b5781bc539aab23cbd46bdd0ea1e67140c759f208c12dc57f3100000000e4965fcb6c0749955eac9476687e63b41c6282bbcb0c3d8b0c9493a3a5f6d879d7257b4b68dc7cac3d9d5f5bbe937c501866ee4042b250e516ec074559e1e551167138766eeecb6941e8305d9cde1800c821536f9d25bd14163890842a"], 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) write$cgroup_int(r0, &(0x7f00000000c0)=0x9, 0x12) (async) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)={[{0x2d, 'freezer'}]}, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x9, 0xf, 0x2, 0x407c8, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x2, 0x0, 0x14}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1c1c41, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000180)=r7) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[], 0xffdd) close(r1) (async) socket$kcm(0x2b, 0x1, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 5.656609548s ago: executing program 1 (id=4677): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2260102f00fe80000000000000875a65059ff57b00280000000000000000000000ac1414aa000986"], 0xcfa4) 2.739978866s ago: executing program 1 (id=4685): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="015e0c0058ed071b0000000000000070", 0x10}], 0x1}, 0x400c0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x57, &(0x7f0000000000), 0x1}, 0x40000100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) close(0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r4, 0x58, &(0x7f0000000180)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r4, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000000001b160000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0100"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r0}, &(0x7f0000000800), &(0x7f0000000840)='%-5lx \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r0}, &(0x7f0000000800), &(0x7f0000000840)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[], 0x50) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[], 0x50) r9 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000580)="6eee773f1c8e29", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe3}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000580)="6eee773f1c8e29", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe3}, 0x50) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000500)=@raw=[@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000540)='GPL\x00', 0x0, 0x73, &(0x7f0000000580)=""/115, 0x80000, 0x10, '\x00', r5, 0x1b, r0, 0x8, &(0x7f0000000600)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x2, 0x3, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000700)=[r10], &(0x7f0000000780)=[{0x0, 0x3, 0x6, 0xa}, {0x0, 0x3, 0x6, 0xa}, {0x2, 0x2, 0x1, 0x8}, {0x3, 0x5, 0x2, 0x3}, {0x5, 0x5, 0xf, 0xa}, {0x5, 0x4, 0x9, 0x2}], 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000500)=@raw=[@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000540)='GPL\x00', 0x0, 0x73, &(0x7f0000000580)=""/115, 0x80000, 0x10, '\x00', r5, 0x1b, r0, 0x8, &(0x7f0000000600)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x2, 0x3, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000700)=[r10], &(0x7f0000000780)=[{0x0, 0x3, 0x6, 0xa}, {0x0, 0x3, 0x6, 0xa}, {0x2, 0x2, 0x1, 0x8}, {0x3, 0x5, 0x2, 0x3}, {0x5, 0x5, 0xf, 0xa}, {0x5, 0x4, 0x9, 0x2}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) 2.340954617s ago: executing program 3 (id=4688): syz_clone(0x89018400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.340714826s ago: executing program 1 (id=4689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x1c, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.22703154s ago: executing program 1 (id=4690): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef6}, 0xbafa, 0xff, 0x98, 0x2, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r1, 0x2) socket$kcm(0x23, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) write$cgroup_devices(r3, 0x0, 0x9) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900d0ff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x41, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94) 2.171860401s ago: executing program 3 (id=4691): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x100000000000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_config_ext={0x8, 0x5}, 0x79d6c2b2fb2bf3dc, 0x5, 0x47a1bd76, 0x1, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff6}, 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x88}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x2}, {{}, {0x5}, {}, {0x85, 0x0, 0x0, 0xd2}}}, &(0x7f0000000780)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000300), 0x4) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x81d7) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) close(0x3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x0, 0x3, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00'}) 1.828902591s ago: executing program 3 (id=4692): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x10}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xffd, &(0x7f0000001e40)=""/4093}, 0x94) socketpair(0x22, 0x3, 0x10, &(0x7f0000000280)) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @ldst, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.736472063s ago: executing program 0 (id=4693): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030001407f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad00009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000014) 1.336823804s ago: executing program 0 (id=4694): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0xfffffffd, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, @perf_bp={0x0, 0x1}, 0x100128, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r10, 0x30, 0x0}, 0x10) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) 1.307271254s ago: executing program 3 (id=4695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x10, 0x6ff}, 0x94) 923.239335ms ago: executing program 3 (id=4696): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a80016000500014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a", 0x94}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c", 0x48}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)='g', 0x1}], 0x1}, 0x40840) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x8, 0x10002, 0x7, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3, r2}, 0xc) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) 892.440116ms ago: executing program 1 (id=4697): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r1, 0x0, 0x10001) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b86, 0x4, @perf_bp={&(0x7f0000000300), 0x4}, 0x1c1e8, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000340)="1d", &(0x7f0000000600)=""/173}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f0000000000000100000000000000000000001400000000000000000000000a000000000000000000000014000000000000000000000002000000008000000000000011000000000000000000000001000000000000000000000011000000000000000200fdff000000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000032c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="9feb01031800"], &(0x7f00000031c0)=""/226, 0x31, 0xe2, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00'], 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180), 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0xea48, 0x4}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000040d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e", 0xd5}], 0x1, 0x0, 0x0, 0x7400}, 0x0) close(r4) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x16, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 744.08367ms ago: executing program 0 (id=4698): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 488.586147ms ago: executing program 0 (id=4699): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x100000000000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_config_ext={0x8, 0x5}, 0x79d6c2b2fb2bf3dc, 0x5, 0x47a1bd76, 0x1, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff6}, 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x88}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x2}, {{}, {0x5}, {}, {0x85, 0x0, 0x0, 0xd2}}}, &(0x7f0000000780)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000300), 0x4) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x81d7) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) close(0x3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x0, 0x3, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00'}) 337.616881ms ago: executing program 3 (id=4700): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095b9667204b47bd390dc9218cc075fff91", @ANYRES32=r1, @ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYBLOB="a4fa0629fae83c451c6a6517b1f59f53fe4231bc1f34034788492689ffabead794d7c2561bbb2b1197788ae2472577b8d0108f74ea06c5b25d9de098f0a8b2ac3781fa1791e5932096d8860401700322001d16a5d7fed81f050c6c95958a64b7096d8a5b9d6cd907304fe39a5df4a6dcdda9ed95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0xfe, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x984, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x8, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x100000010, 0x1d66ef49}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x12}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x106) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10, 0x84, 0x8}], 0x10}, 0x880) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r4) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x7e1, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) socket$kcm(0xa, 0x3, 0x73) ioctl$SIOCSIFHWADDR(r7, 0x8b2d, &(0x7f0000000040)={'wlan1\x00', @random="86ffb7b8252c"}) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000b0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000004) 203.008224ms ago: executing program 0 (id=4701): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000050000210000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 138.509636ms ago: executing program 1 (id=4702): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x10}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xffd, &(0x7f0000001e40)=""/4093}, 0x94) socketpair(0x22, 0x3, 0x10, &(0x7f0000000280)) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @ldst, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=4703): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8934, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1f, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="6b322338e3f85ac1b85fab2bc3b7d5456afb1e94b6ea751737861e1da5c1040000006a299d71aa05007df5b1a2cc5c7ee78f9d194b5ff5f6863c02a2196eb5a82a8fa2759ea2760ef6927cf728347e738c1c5c7bd40ad471cd4d63fcb4b6c612dc4a935be49465b840cb01e82cf4405defd5022e26586a49fd79e0bb29deceb65d041979861dd6f95a64368d7f029271e2200ac37c338cd1c323e2d90dcee30c21ee894f724d19903b5d9f8482b6978a256571002b66a32e67f074b965445f2760f341d12c5c845d86e7", @ANYRES32, @ANYRESDEC=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x35}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x3, 0xfab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xf, r1, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640), 0x4) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000502800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): d syzkaller #0 [ 534.104262][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.114360][T14186] Call Trace: [ 534.117663][T14186] [ 534.120703][T14186] dump_stack_lvl+0x18c/0x250 [ 534.125416][T14186] ? show_regs_print_info+0x20/0x20 [ 534.130650][T14186] ? load_image+0x420/0x420 [ 534.135197][T14186] ? __might_fault+0xaa/0x120 [ 534.139910][T14186] ? __lock_acquire+0x7d80/0x7d80 [ 534.144956][T14186] ? bpf_percpu_hash_update+0x2b/0x200 [ 534.150473][T14186] ? __virt_addr_valid+0x10c/0x380 [ 534.155637][T14186] should_fail_ex+0x394/0x4c0 [ 534.160360][T14186] _copy_from_user+0x2f/0xe0 [ 534.164978][T14186] generic_map_update_batch+0x58c/0x800 [ 534.170563][T14186] ? rcu_read_unlock+0xa0/0xa0 [ 534.175364][T14186] ? __fdget+0x180/0x210 [ 534.179625][T14186] ? rcu_read_unlock+0xa0/0xa0 [ 534.184412][T14186] bpf_map_do_batch+0x3f2/0x600 [ 534.189289][T14186] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 534.194786][T14186] __sys_bpf+0x381/0x890 [ 534.199062][T14186] ? bpf_link_show_fdinfo+0x390/0x390 [ 534.204475][T14186] ? lock_chain_count+0x20/0x20 [ 534.209358][T14186] __x64_sys_bpf+0x7c/0x90 [ 534.213802][T14186] do_syscall_64+0x55/0xb0 [ 534.218245][T14186] ? clear_bhb_loop+0x40/0x90 [ 534.222951][T14186] ? clear_bhb_loop+0x40/0x90 [ 534.227687][T14186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.233616][T14186] RIP: 0033:0x7fc659f9e0d9 [ 534.238080][T14186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.257807][T14186] RSP: 002b:00007fc65af2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 534.266256][T14186] RAX: ffffffffffffffda RBX: 00007fc65a225fa0 RCX: 00007fc659f9e0d9 [ 534.274265][T14186] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 534.282350][T14186] RBP: 00007fc65af2d090 R08: 0000000000000000 R09: 0000000000000000 [ 534.290357][T14186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.298349][T14186] R13: 00007fc65a226038 R14: 00007fc65a225fa0 R15: 00007ffc50ed83e8 [ 534.306373][T14186] [ 534.667082][T14193] syzkaller0: entered promiscuous mode [ 534.672658][T14193] syzkaller0: entered allmulticast mode [ 534.728141][T14200] netlink: 'syz.0.2855': attribute type 39 has an invalid length. [ 534.853245][T14204] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2857'. [ 535.999603][T14235] netlink: 3554 bytes leftover after parsing attributes in process `syz.1.2866'. [ 537.894347][T14200] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2855'. [ 538.133306][T14258] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2873'. [ 538.992561][T14258] syzkaller0: entered promiscuous mode [ 539.005498][T14258] syzkaller0: entered allmulticast mode [ 544.848464][T14282] netlink: 'syz.2.2881': attribute type 39 has an invalid length. [ 544.899205][T14285] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2881'. [ 545.470249][T14328] netlink: 'syz.2.2901': attribute type 10 has an invalid length. [ 545.483450][T14328] bridge0: left allmulticast mode [ 545.501790][T14328] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.509057][T14328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.516774][T14328] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.523990][T14328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.539260][T14328] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 545.615433][T14330] netlink: 'syz.1.2902': attribute type 5 has an invalid length. [ 545.623249][T14330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2902'. [ 545.786552][T14332] netlink: 'syz.2.2903': attribute type 10 has an invalid length. [ 545.937139][T14332] team0: Port device geneve1 added [ 545.955307][T14336] netlink: 'syz.3.2905': attribute type 39 has an invalid length. [ 546.195083][T14336] hsr_slave_1 (unregistering): left promiscuous mode [ 546.429135][T14351] netlink: 'syz.0.2910': attribute type 2 has an invalid length. [ 546.454968][T14351] netlink: 'syz.0.2910': attribute type 8 has an invalid length. [ 546.463026][T14351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2910'. [ 546.607845][T14353] syzkaller0: entered promiscuous mode [ 546.636398][T14353] syzkaller0: entered allmulticast mode [ 547.773028][T14381] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2920'. [ 552.140882][T14404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2926'. [ 552.397280][T14417] netlink: 'syz.0.2930': attribute type 21 has an invalid length. [ 552.715203][T14426] netlink: 'syz.3.2935': attribute type 1 has an invalid length. [ 552.727911][T14426] netlink: 'syz.3.2935': attribute type 3 has an invalid length. [ 552.740911][T14426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2935'. [ 552.775506][T14426] netlink: 'syz.3.2935': attribute type 10 has an invalid length. [ 552.784237][T14426] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2935'. [ 553.480695][T14457] netlink: 'syz.0.2947': attribute type 1 has an invalid length. [ 553.516823][T14457] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2947'. [ 553.622551][T14464] netlink: 'syz.3.2950': attribute type 5 has an invalid length. [ 553.632978][T14464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2950'. [ 553.980307][T14475] netlink: 'syz.0.2954': attribute type 1 has an invalid length. [ 553.997840][T14475] netlink: 'syz.0.2954': attribute type 3 has an invalid length. [ 554.008676][T14475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2954'. [ 554.025629][T14475] netlink: 'syz.0.2954': attribute type 10 has an invalid length. [ 554.046205][T14475] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2954'. [ 554.613853][T14506] netlink: 'syz.1.2966': attribute type 21 has an invalid length. [ 554.634397][T14506] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2966'. [ 554.660840][T14506] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2966'. [ 555.904442][T14531] FAULT_INJECTION: forcing a failure. [ 555.904442][T14531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.955451][T14531] CPU: 0 PID: 14531 Comm: syz.3.2976 Not tainted syzkaller #0 [ 555.963026][T14531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.973159][T14531] Call Trace: [ 555.976503][T14531] [ 555.979504][T14531] dump_stack_lvl+0x18c/0x250 [ 555.984269][T14531] ? show_regs_print_info+0x20/0x20 [ 555.989542][T14531] ? load_image+0x420/0x420 [ 555.994145][T14531] ? __lock_acquire+0x7d80/0x7d80 [ 555.999272][T14531] ? snprintf+0xe9/0x140 [ 556.003630][T14531] should_fail_ex+0x394/0x4c0 [ 556.008412][T14531] _copy_to_user+0x2f/0xa0 [ 556.012914][T14531] simple_read_from_buffer+0xe7/0x150 [ 556.018405][T14531] proc_fail_nth_read+0x1e8/0x260 [ 556.023573][T14531] ? proc_fault_inject_write+0x360/0x360 [ 556.029330][T14531] ? fsnotify_perm+0x271/0x5e0 [ 556.034175][T14531] ? proc_fault_inject_write+0x360/0x360 [ 556.039892][T14531] vfs_read+0x298/0x990 [ 556.044161][T14531] ? kernel_read+0x1e0/0x1e0 [ 556.048847][T14531] ? __fget_files+0x28/0x460 [ 556.053531][T14531] ? __fget_files+0x3fc/0x460 [ 556.058336][T14531] ? __fdget_pos+0x2a3/0x330 [ 556.063007][T14531] ? ksys_read+0x74/0x260 [ 556.067443][T14531] ksys_read+0x151/0x260 [ 556.071780][T14531] ? vfs_write+0x9a0/0x9a0 [ 556.076290][T14531] ? lockdep_hardirqs_on+0x98/0x150 [ 556.081588][T14531] do_syscall_64+0x55/0xb0 [ 556.086077][T14531] ? clear_bhb_loop+0x40/0x90 [ 556.090843][T14531] ? clear_bhb_loop+0x40/0x90 [ 556.095607][T14531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.101573][T14531] RIP: 0033:0x7fc659f5e90e [ 556.106069][T14531] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 556.125739][T14531] RSP: 002b:00007fc65af2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 556.134215][T14531] RAX: ffffffffffffffda RBX: 00007fc65af2d6c0 RCX: 00007fc659f5e90e [ 556.142229][T14531] RDX: 000000000000000f RSI: 00007fc65af2d0a0 RDI: 0000000000000007 [ 556.150266][T14531] RBP: 00007fc65af2d090 R08: 0000000000000000 R09: 0000000000000000 [ 556.158291][T14531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.166318][T14531] R13: 00007fc65a226038 R14: 00007fc65a225fa0 R15: 00007ffc50ed83e8 [ 556.174366][T14531] [ 556.422191][T14538] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2979'. [ 558.180696][T14577] syzkaller0: entered promiscuous mode [ 558.193681][T14577] syzkaller0: entered allmulticast mode [ 558.558304][T14589] validate_nla: 2 callbacks suppressed [ 558.558321][T14589] netlink: 'syz.0.2997': attribute type 1 has an invalid length. [ 561.246062][T14654] netlink: 'syz.0.3019': attribute type 5 has an invalid length. [ 561.269180][T14654] __nla_validate_parse: 1 callbacks suppressed [ 561.269197][T14654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3019'. [ 562.378620][T14693] syzkaller0: entered promiscuous mode [ 562.384181][T14693] syzkaller0: entered allmulticast mode [ 562.396079][T14695] netlink: 'syz.3.3034': attribute type 10 has an invalid length. [ 563.070380][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.077023][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.521349][T14700] netlink: 'syz.3.3038': attribute type 39 has an invalid length. [ 565.036019][T14739] netlink: 'syz.0.3051': attribute type 3 has an invalid length. [ 565.082084][T14739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3051'. [ 565.147028][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 565.335538][T14748] netlink: 'syz.2.3055': attribute type 2 has an invalid length. [ 565.363729][T14748] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3055'. [ 566.123882][T14763] syzkaller0: entered promiscuous mode [ 566.130798][T14763] syzkaller0: entered allmulticast mode [ 567.874810][T14775] netlink: 'syz.0.3067': attribute type 10 has an invalid length. [ 567.923628][T14775] team0: Port device geneve1 added [ 567.939090][T14779] netlink: 'syz.2.3068': attribute type 2 has an invalid length. [ 568.134510][T14787] netlink: 'syz.1.3071': attribute type 5 has an invalid length. [ 568.157908][T14787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3071'. [ 570.481332][T14821] netlink: 'syz.0.3080': attribute type 10 has an invalid length. [ 570.673726][T14823] netlink: 'syz.1.3082': attribute type 2 has an invalid length. [ 570.873095][T14829] netlink: 'syz.2.3084': attribute type 10 has an invalid length. [ 571.200811][T14841] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3089'. [ 571.210586][T14841] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 571.261014][T14844] netlink: 'syz.3.3091': attribute type 10 has an invalid length. [ 571.636341][T14844] team0: Port device geneve1 added [ 571.875992][T14844] syz.3.3091 (14844) used greatest stack depth: 18056 bytes left [ 571.932050][T14848] syzkaller0: entered promiscuous mode [ 571.943733][T14848] syzkaller0: entered allmulticast mode [ 573.640089][T14869] netlink: 'syz.3.3097': attribute type 2 has an invalid length. [ 573.991117][T14890] netlink: 'syz.1.3103': attribute type 10 has an invalid length. [ 574.114271][T14890] team0: Port device geneve1 added [ 574.322208][T14901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3107'. [ 574.616658][T14912] netlink: 'syz.0.3110': attribute type 10 has an invalid length. [ 575.207269][T14938] FAULT_INJECTION: forcing a failure. [ 575.207269][T14938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.246731][T14938] CPU: 0 PID: 14938 Comm: syz.0.3119 Not tainted syzkaller #0 [ 575.254318][T14938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 575.264420][T14938] Call Trace: [ 575.267749][T14938] [ 575.270728][T14938] dump_stack_lvl+0x18c/0x250 [ 575.275489][T14938] ? show_regs_print_info+0x20/0x20 [ 575.280825][T14938] ? load_image+0x420/0x420 [ 575.285393][T14938] ? __might_fault+0xaa/0x120 [ 575.290135][T14938] ? __lock_acquire+0x7d80/0x7d80 [ 575.295220][T14938] should_fail_ex+0x394/0x4c0 [ 575.299959][T14938] _copy_from_user+0x2f/0xe0 [ 575.304606][T14938] __sys_bpf+0x23e/0x890 [ 575.308904][T14938] ? bpf_link_show_fdinfo+0x390/0x390 [ 575.314350][T14938] ? lock_chain_count+0x20/0x20 [ 575.319263][T14938] __x64_sys_bpf+0x7c/0x90 [ 575.323738][T14938] do_syscall_64+0x55/0xb0 [ 575.328226][T14938] ? clear_bhb_loop+0x40/0x90 [ 575.332950][T14938] ? clear_bhb_loop+0x40/0x90 [ 575.337683][T14938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.343627][T14938] RIP: 0033:0x7fa9fe79e0d9 [ 575.348125][T14938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.367790][T14938] RSP: 002b:00007fa9ff6b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 575.376256][T14938] RAX: ffffffffffffffda RBX: 00007fa9fea25fa0 RCX: 00007fa9fe79e0d9 [ 575.384295][T14938] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 575.392347][T14938] RBP: 00007fa9ff6b4090 R08: 0000000000000000 R09: 0000000000000000 [ 575.400377][T14938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.408394][T14938] R13: 00007fa9fea26038 R14: 00007fa9fea25fa0 R15: 00007ffebe72a088 [ 575.416435][T14938] [ 575.979881][T14944] netlink: 'syz.3.3122': attribute type 3 has an invalid length. [ 576.027123][T14944] netlink: 'syz.3.3122': attribute type 5 has an invalid length. [ 576.111775][T14944] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3122'. [ 576.237176][T14952] netlink: 'syz.2.3121': attribute type 10 has an invalid length. [ 577.181950][T14957] syzkaller0: entered promiscuous mode [ 577.187601][T14957] syzkaller0: entered allmulticast mode [ 577.366526][T14966] netlink: 'syz.1.3128': attribute type 5 has an invalid length. [ 577.375102][T14966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3128'. [ 581.246109][T14976] netlink: 'syz.2.3133': attribute type 10 has an invalid length. [ 582.356288][T15012] netlink: 'syz.0.3142': attribute type 10 has an invalid length. [ 583.172137][T15031] netlink: 'syz.2.3147': attribute type 10 has an invalid length. [ 584.073232][T15060] netlink: 'syz.3.3160': attribute type 10 has an invalid length. [ 585.209751][T15090] syz.3.3171 (15090) used obsolete PPPIOCDETACH ioctl [ 585.231175][T15090] netlink: 'syz.3.3171': attribute type 3 has an invalid length. [ 585.254784][T15090] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3171'. [ 585.353581][T15094] netlink: 'syz.1.3173': attribute type 5 has an invalid length. [ 585.376352][T15094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3173'. [ 585.576280][T15103] netlink: 'syz.3.3175': attribute type 21 has an invalid length. [ 585.628631][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 585.716232][T15103] netlink: 'syz.3.3175': attribute type 5 has an invalid length. [ 585.946965][T15109] netlink: 'syz.2.3178': attribute type 3 has an invalid length. [ 585.972129][T15109] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3178'. [ 586.373534][T15119] netlink: 'syz.1.3182': attribute type 10 has an invalid length. [ 587.077823][T15142] syzkaller0: entered promiscuous mode [ 587.098012][T15142] syzkaller0: entered allmulticast mode [ 587.146021][T15150] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.3190'. [ 590.382783][T15159] netlink: 'syz.2.3196': attribute type 10 has an invalid length. [ 590.391125][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.398447][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.806414][T15223] netlink: 'syz.3.3214': attribute type 10 has an invalid length. [ 591.914483][T15232] netlink: 'syz.2.3216': attribute type 2 has an invalid length. [ 591.944841][T15232] netlink: 'syz.2.3216': attribute type 8 has an invalid length. [ 591.952818][T15232] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3216'. [ 591.989666][T15236] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3215'. [ 592.207064][ T48] tipc: Subscription rejected, illegal request [ 592.342528][T15247] netlink: 'syz.3.3220': attribute type 10 has an invalid length. [ 592.419082][T15249] netlink: 'syz.2.3221': attribute type 10 has an invalid length. [ 592.837848][T15260] netlink: 'syz.2.3226': attribute type 39 has an invalid length. [ 592.926071][T15258] netlink: 'syz.0.3225': attribute type 10 has an invalid length. [ 593.085460][T15269] netlink: 'syz.2.3229': attribute type 29 has an invalid length. [ 593.097926][T15269] netlink: 'syz.2.3229': attribute type 29 has an invalid length. [ 593.110028][T15269] netlink: 'syz.2.3229': attribute type 29 has an invalid length. [ 595.509893][T15321] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.517763][T15321] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.556553][T15321] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.563898][T15321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.571555][T15321] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.578918][T15321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.604206][T15321] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 595.864925][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 596.055722][T15328] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3250'. [ 596.108967][T15333] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3250'. [ 596.355868][T15343] netlink: 184888 bytes leftover after parsing attributes in process `syz.2.3254'. [ 596.551193][T15352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3259'. [ 596.793113][T15356] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3261'. [ 596.803220][T15356] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 597.549667][T15369] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3264'. [ 597.561172][T15366] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3264'. [ 598.263603][T15379] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3269'. [ 598.275906][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3269'. [ 598.584216][T15385] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3271'. [ 598.593881][T15385] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 599.277817][T15395] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3275'. [ 599.338070][T15394] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3275'. [ 599.479394][T15399] validate_nla: 9 callbacks suppressed [ 599.479411][T15399] netlink: 'syz.2.3276': attribute type 2 has an invalid length. [ 599.524910][T15399] netlink: 'syz.2.3276': attribute type 8 has an invalid length. [ 599.574864][T15399] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3276'. [ 599.762696][T15411] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3282'. [ 599.772316][T15411] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 600.008785][T15413] netlink: 'syz.3.3283': attribute type 29 has an invalid length. [ 600.030509][T15413] netlink: 'syz.3.3283': attribute type 29 has an invalid length. [ 600.058639][T15414] netlink: 'syz.3.3283': attribute type 29 has an invalid length. [ 600.079800][T15413] netlink: 'syz.3.3283': attribute type 29 has an invalid length. [ 600.110964][T15413] netlink: 'syz.3.3283': attribute type 29 has an invalid length. [ 601.037973][T15443] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3294'. [ 601.063254][T15443] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 601.767603][T15451] syz.2.3296[15451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 601.771687][T15451] syz.2.3296[15451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 601.832126][T15451] netlink: 'syz.2.3296': attribute type 9 has an invalid length. [ 602.461000][T15466] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 602.472627][T15464] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 602.676546][T15469] netlink: 'syz.0.3306': attribute type 10 has an invalid length. [ 603.564014][T15500] __nla_validate_parse: 3 callbacks suppressed [ 603.564035][T15500] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3317'. [ 603.670364][T15500] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 604.497599][T15516] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3320'. [ 604.563361][T15516] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3320'. [ 604.889707][T15523] validate_nla: 1 callbacks suppressed [ 604.889750][T15523] netlink: 'syz.3.3325': attribute type 10 has an invalid length. [ 604.935964][T15513] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3321'. [ 604.971409][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3321'. [ 604.999151][T15529] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3327'. [ 605.024853][T15529] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 605.550897][T15541] netlink: 'syz.2.3332': attribute type 2 has an invalid length. [ 605.584818][T15541] netlink: 'syz.2.3332': attribute type 8 has an invalid length. [ 605.592690][T15541] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3332'. [ 605.907340][T15555] netlink: 'syz.1.3336': attribute type 10 has an invalid length. [ 606.111964][T15562] netlink: 'syz.3.3340': attribute type 3 has an invalid length. [ 606.145019][T15562] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3340'. [ 606.470676][T15564] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.3339'. [ 606.486951][T15564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 606.957141][T15575] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 607.194176][T15582] netlink: 'syz.3.3347': attribute type 10 has an invalid length. [ 607.977948][T15608] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 608.414291][T15616] netlink: 'syz.2.3361': attribute type 10 has an invalid length. [ 609.778266][T15645] __nla_validate_parse: 2 callbacks suppressed [ 609.778287][T15645] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3371'. [ 609.835820][T15645] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 610.069393][T15651] netlink: 'syz.2.3373': attribute type 10 has an invalid length. [ 610.443084][T15659] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3377'. [ 610.597798][T15659] openvswitch: netlink: Key type 4112 is out of range max 32 [ 611.225880][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 611.799456][T15677] netlink: 'syz.2.3383': attribute type 10 has an invalid length. [ 611.814190][T15682] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3385'. [ 611.824424][T15682] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 612.039498][T15688] netlink: 'syz.2.3387': attribute type 10 has an invalid length. [ 612.650850][T15714] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3397'. [ 612.675167][T15714] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 613.293695][T15736] netlink: 'syz.2.3405': attribute type 16 has an invalid length. [ 613.306567][T15736] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3405'. [ 613.471400][T15738] syzkaller0: entered promiscuous mode [ 613.488005][T15738] syzkaller0: entered allmulticast mode [ 613.757709][T15749] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3410'. [ 613.767776][T15749] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 614.850107][T15757] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3412'. [ 614.861317][T15757] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 616.482043][T15796] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3425'. [ 616.513029][T15796] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 616.859682][T15813] netlink: 'syz.1.3431': attribute type 29 has an invalid length. [ 616.902009][T15813] netlink: 'syz.1.3431': attribute type 29 has an invalid length. [ 616.984674][T15815] netlink: 'syz.1.3431': attribute type 29 has an invalid length. [ 617.021578][T15808] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3430'. [ 617.042854][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3430'. [ 617.152220][T15810] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.3429'. [ 617.207591][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3429'. [ 617.798034][T15835] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3440'. [ 617.822893][T15835] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 618.411352][T15845] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.3444'. [ 618.444264][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3444'. [ 618.569524][T15847] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3445'. [ 618.995246][T15859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.003548][T15859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.367533][T15859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.383768][T15859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.610586][T15874] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 619.972861][T15887] __nla_validate_parse: 2 callbacks suppressed [ 619.972881][T15887] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3465'. [ 620.041459][T15887] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 620.209861][T15889] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3457'. [ 620.231872][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3457'. [ 620.858433][T15916] syzkaller0: entered promiscuous mode [ 620.875462][T15916] syzkaller0: entered allmulticast mode [ 620.885307][T15915] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.3467'. [ 620.912913][T15912] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.3467'. [ 621.075826][T15922] syzkaller0: entered promiscuous mode [ 621.081397][T15922] syzkaller0: entered allmulticast mode [ 622.870836][T15935] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.3472'. [ 624.200907][T15935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3472'. [ 624.418003][T15945] netlink: 'syz.3.3476': attribute type 39 has an invalid length. [ 624.509090][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.515609][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.620262][ T5778] Bluetooth: hci3: Malformed Event: 0x13 [ 624.823188][T15957] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3481'. [ 624.857129][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3481'. [ 624.951543][T15961] netlink: 'syz.2.3482': attribute type 10 has an invalid length. [ 625.500351][T15968] netlink: 'syz.3.3485': attribute type 10 has an invalid length. [ 626.697637][T15986] netlink: 'syz.3.3492': attribute type 10 has an invalid length. [ 626.843547][ T5778] Bluetooth: hci4: Malformed Event: 0x13 [ 628.028570][T16005] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3501'. [ 628.039106][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3501'. [ 628.735882][T16027] tun0: tun_chr_ioctl cmd 1074025675 [ 628.741256][T16027] tun0: persist enabled [ 628.763519][T16027] tun0: tun_chr_ioctl cmd 1074025675 [ 628.769564][T16027] tun0: persist disabled [ 631.558686][T16088] netlink: 'syz.2.3529': attribute type 27 has an invalid length. [ 631.615079][T16088] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.3529'. [ 632.310729][T16099] syzkaller0: entered promiscuous mode [ 632.324794][T16099] syzkaller0: entered allmulticast mode [ 634.111152][T16114] netlink: 'syz.2.3538': attribute type 10 has an invalid length. [ 634.119258][T16114] mac80211_hwsim hwsim14 wlan1: left allmulticast mode [ 634.129183][T16114] team0: Port device wlan1 added [ 634.955508][ T5778] Bluetooth: hci4: ISO packet for unknown connection handle 21 [ 635.339500][T16132] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3546'. [ 635.469590][T16132] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 635.528402][T16132] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 635.587694][T16134] netlink: 'syz.0.3547': attribute type 10 has an invalid length. [ 635.619258][T16132] netlink: 'syz.1.3546': attribute type 17 has an invalid length. [ 635.662524][T16132] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3546'. [ 635.717628][T16132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.673737][T16157] netlink: 'syz.1.3555': attribute type 2 has an invalid length. [ 636.681986][T16157] netlink: 'syz.1.3555': attribute type 8 has an invalid length. [ 636.690998][T16157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3555'. [ 636.930130][T16165] netlink: 'syz.1.3557': attribute type 10 has an invalid length. [ 637.467805][T16184] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.3563'. [ 637.488958][T16186] netlink: 'syz.2.3564': attribute type 10 has an invalid length. [ 637.851013][T16202] netlink: 'syz.1.3569': attribute type 10 has an invalid length. [ 637.880146][T16202] team0: Port device netdevsim0 added [ 637.906485][T16201] netlink: 'syz.2.3568': attribute type 10 has an invalid length. [ 637.934875][T16202] netlink: 'syz.1.3569': attribute type 10 has an invalid length. [ 637.970287][T16202] team0: Port device netdevsim0 removed [ 638.008116][T16202] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 638.115908][T16210] FAULT_INJECTION: forcing a failure. [ 638.115908][T16210] name failslab, interval 1, probability 0, space 0, times 0 [ 638.130403][T16210] CPU: 1 PID: 16210 Comm: syz.2.3571 Not tainted syzkaller #0 [ 638.137928][T16210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.148031][T16210] Call Trace: [ 638.151344][T16210] [ 638.154305][T16210] dump_stack_lvl+0x18c/0x250 [ 638.159033][T16210] ? show_regs_print_info+0x20/0x20 [ 638.164273][T16210] ? load_image+0x420/0x420 [ 638.168916][T16210] ? __might_sleep+0xe0/0xe0 [ 638.173570][T16210] ? __lock_acquire+0x7d80/0x7d80 [ 638.178644][T16210] should_fail_ex+0x394/0x4c0 [ 638.183376][T16210] should_failslab+0x9/0x20 [ 638.187936][T16210] slab_pre_alloc_hook+0x59/0x300 [ 638.193034][T16210] ? vfs_write+0x5de/0x9a0 [ 638.197527][T16210] kmem_cache_alloc+0x5a/0x2c0 [ 638.202356][T16210] ? getname_flags+0xbb/0x500 [ 638.207095][T16210] getname_flags+0xbb/0x500 [ 638.211652][T16210] do_sys_openat2+0xda/0x1d0 [ 638.216303][T16210] ? do_sys_open+0xe0/0xe0 [ 638.220778][T16210] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 638.226809][T16210] ? lock_chain_count+0x20/0x20 [ 638.231714][T16210] __x64_sys_openat+0x139/0x160 [ 638.236624][T16210] do_syscall_64+0x55/0xb0 [ 638.241096][T16210] ? clear_bhb_loop+0x40/0x90 [ 638.245821][T16210] ? clear_bhb_loop+0x40/0x90 [ 638.250545][T16210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.256486][T16210] RIP: 0033:0x7f8e1af9e0d9 [ 638.260949][T16210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.280587][T16210] RSP: 002b:00007f8e1bf0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 638.289032][T16210] RAX: ffffffffffffffda RBX: 00007f8e1b225fa0 RCX: 00007f8e1af9e0d9 [ 638.297027][T16210] RDX: 00000000001c1341 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 638.305020][T16210] RBP: 00007f8e1bf0e090 R08: 0000000000000000 R09: 0000000000000000 [ 638.313012][T16210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.321011][T16210] R13: 00007f8e1b226038 R14: 00007f8e1b225fa0 R15: 00007ffec4ad7568 [ 638.329020][T16210] [ 638.879546][T16230] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3578'. [ 640.740148][T16238] netlink: 'syz.3.3582': attribute type 10 has an invalid length. [ 640.765235][T16238] team0: Port device netdevsim0 added [ 640.771397][T16240] netlink: 'syz.3.3582': attribute type 10 has an invalid length. [ 640.798072][T16240] team0: Port device netdevsim0 removed [ 640.819192][T16240] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 640.846307][T16256] netlink: 'syz.2.3587': attribute type 10 has an invalid length. [ 641.071654][T16264] syzkaller0: entered promiscuous mode [ 641.094872][T16264] syzkaller0: entered allmulticast mode [ 642.901354][T16285] validate_nla: 1 callbacks suppressed [ 642.901370][T16285] netlink: 'syz.2.3598': attribute type 10 has an invalid length. [ 642.939231][T16285] team0: Port device netdevsim0 added [ 642.962839][T16286] netlink: 'syz.2.3598': attribute type 10 has an invalid length. [ 642.993378][T16286] team0: Port device netdevsim0 removed [ 643.008664][T16286] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 643.019870][T16288] netlink: 'syz.0.3600': attribute type 5 has an invalid length. [ 643.033559][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3600'. [ 643.044287][T16281] netlink: 'syz.3.3599': attribute type 10 has an invalid length. [ 643.727363][T16308] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3607'. [ 643.758102][T16308] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3607'. [ 643.792981][T16308] tipc: Started in network mode [ 643.812561][T16308] tipc: Node identity b, cluster identity 73 [ 643.835417][T16308] tipc: Node number set to 11 [ 643.902654][T16315] netlink: 'syz.0.3610': attribute type 19 has an invalid length. [ 643.914544][T16315] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3610'. [ 644.772494][T16325] netlink: 'syz.1.3614': attribute type 10 has an invalid length. [ 644.963697][T16339] netlink: 'syz.1.3618': attribute type 2 has an invalid length. [ 644.972208][T16339] netlink: 'syz.1.3618': attribute type 8 has an invalid length. [ 645.002869][T16339] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3618'. [ 645.108350][T16344] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3619'. [ 645.213169][T16349] netlink: 'syz.3.3622': attribute type 10 has an invalid length. [ 645.222605][T16349] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3622'. [ 646.538856][T16385] netlink: 'syz.2.3637': attribute type 10 has an invalid length. [ 646.561574][T16385] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3637'. [ 646.885283][T16393] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3639'. [ 647.911858][T16420] validate_nla: 1 callbacks suppressed [ 647.911876][T16420] netlink: 'syz.1.3652': attribute type 10 has an invalid length. [ 648.569356][T16439] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3659'. [ 648.876052][T16445] syzkaller0: entered promiscuous mode [ 648.881686][T16445] syzkaller0: entered allmulticast mode [ 648.907277][T16449] netlink: 'syz.2.3663': attribute type 10 has an invalid length. [ 650.724141][T16458] netlink: 'syz.2.3667': attribute type 10 has an invalid length. [ 650.732554][T16458] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3667'. [ 650.742532][T16458] batadv_slave_1: entered promiscuous mode [ 650.748823][T16457] netlink: 'syz.1.3666': attribute type 5 has an invalid length. [ 650.757088][T16457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3666'. [ 651.469084][T16482] netlink: 'syz.0.3676': attribute type 29 has an invalid length. [ 651.492926][T16483] netlink: 'syz.1.3674': attribute type 10 has an invalid length. [ 651.512479][T16482] netlink: 'syz.0.3676': attribute type 29 has an invalid length. [ 651.527762][T16481] netlink: 'syz.0.3676': attribute type 29 has an invalid length. [ 651.802504][T16491] netlink: 'syz.1.3679': attribute type 21 has an invalid length. [ 651.814023][T16491] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3679'. [ 651.943130][T16496] netlink: 'syz.3.3680': attribute type 2 has an invalid length. [ 651.951497][T16496] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3680'. [ 652.281852][T16509] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.3684'. [ 652.657879][T16518] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3690'. [ 652.848375][T16518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.952333][T16518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.033044][T16518] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 653.086846][T16518] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 653.133303][T16518] bond0 (unregistering): Released all slaves [ 653.271547][T16535] validate_nla: 2 callbacks suppressed [ 653.271581][T16535] netlink: 'syz.1.3698': attribute type 10 has an invalid length. [ 653.431044][T16540] FAULT_INJECTION: forcing a failure. [ 653.431044][T16540] name failslab, interval 1, probability 0, space 0, times 0 [ 653.464496][T16540] CPU: 1 PID: 16540 Comm: syz.3.3700 Not tainted syzkaller #0 [ 653.472098][T16540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.482196][T16540] Call Trace: [ 653.485512][T16540] [ 653.488490][T16540] dump_stack_lvl+0x18c/0x250 [ 653.493323][T16540] ? show_regs_print_info+0x20/0x20 [ 653.498703][T16540] ? load_image+0x420/0x420 [ 653.503279][T16540] ? __lock_acquire+0x7d80/0x7d80 [ 653.508376][T16540] should_fail_ex+0x394/0x4c0 [ 653.513118][T16540] should_failslab+0x9/0x20 [ 653.517676][T16540] slab_pre_alloc_hook+0x59/0x300 [ 653.522773][T16540] kmem_cache_alloc+0x5a/0x2c0 [ 653.527586][T16540] ? alloc_empty_file+0x9e/0x1d0 [ 653.532574][T16540] alloc_empty_file+0x9e/0x1d0 [ 653.537390][T16540] path_openat+0x120/0x3270 [ 653.541947][T16540] ? trace_call_bpf+0xc3/0x6c0 [ 653.546803][T16540] ? trace_call_bpf+0xc3/0x6c0 [ 653.551622][T16540] ? trace_call_bpf+0xc3/0x6c0 [ 653.556474][T16540] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 653.562614][T16540] ? do_filp_open+0x430/0x430 [ 653.567347][T16540] ? perf_trace_lock+0x303/0x3b0 [ 653.572372][T16540] do_filp_open+0x1f2/0x430 [ 653.576927][T16540] ? vfs_tmpfile+0x620/0x620 [ 653.581566][T16540] ? _raw_spin_unlock+0x28/0x40 [ 653.586490][T16540] ? alloc_fd+0x590/0x640 [ 653.590860][T16540] do_sys_openat2+0x134/0x1d0 [ 653.595587][T16540] ? do_sys_open+0xe0/0xe0 [ 653.600039][T16540] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 653.606051][T16540] ? lock_chain_count+0x20/0x20 [ 653.610929][T16540] __x64_sys_openat+0x139/0x160 [ 653.615824][T16540] do_syscall_64+0x55/0xb0 [ 653.620266][T16540] ? clear_bhb_loop+0x40/0x90 [ 653.624967][T16540] ? clear_bhb_loop+0x40/0x90 [ 653.629668][T16540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.635583][T16540] RIP: 0033:0x7fc659f9e0d9 [ 653.640028][T16540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.659662][T16540] RSP: 002b:00007fc65af2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 653.668109][T16540] RAX: ffffffffffffffda RBX: 00007fc65a225fa0 RCX: 00007fc659f9e0d9 [ 653.676124][T16540] RDX: 00000000001c1341 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 653.684132][T16540] RBP: 00007fc65af2d090 R08: 0000000000000000 R09: 0000000000000000 [ 653.692126][T16540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.700125][T16540] R13: 00007fc65a226038 R14: 00007fc65a225fa0 R15: 00007ffc50ed83e8 [ 653.708144][T16540] [ 653.986909][T16549] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.3704'. [ 654.137439][T16541] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3701'. [ 654.192437][T16541] bridge_slave_1: default FDB implementation only supports local addresses [ 654.250973][T16554] netlink: 'syz.1.3707': attribute type 10 has an invalid length. [ 654.357401][T16558] netlink: 'syz.2.3714': attribute type 39 has an invalid length. [ 654.501794][T16562] netlink: 'syz.3.3708': attribute type 10 has an invalid length. [ 654.690838][T16571] netlink: 'syz.2.3715': attribute type 10 has an invalid length. [ 655.014466][T16582] netlink: 'syz.3.3718': attribute type 10 has an invalid length. [ 655.261664][T16593] netlink: 'syz.1.3723': attribute type 17 has an invalid length. [ 655.315102][T16593] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3723'. [ 655.528574][T16604] netlink: 'syz.1.3727': attribute type 9 has an invalid length. [ 655.557311][T16604] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3727'. [ 655.853186][T16614] netlink: 'syz.2.3731': attribute type 10 has an invalid length. [ 656.741340][T16636] netlink: 'syz.2.3740': attribute type 5 has an invalid length. [ 656.762521][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3740'. [ 657.334655][T16644] syzkaller0: entered promiscuous mode [ 657.344799][T16644] syzkaller0: entered allmulticast mode [ 657.768350][T16660] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3750'. [ 659.351551][T16653] tap0: tun_chr_ioctl cmd 1074025677 [ 659.357205][T16653] tap0: linktype set to 777 [ 659.663127][T16675] validate_nla: 4 callbacks suppressed [ 659.663175][T16675] netlink: 'syz.1.3755': attribute type 10 has an invalid length. [ 659.939299][T16689] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3761'. [ 660.095562][T16695] FAULT_INJECTION: forcing a failure. [ 660.095562][T16695] name failslab, interval 1, probability 0, space 0, times 0 [ 660.115135][T16695] CPU: 1 PID: 16695 Comm: syz.1.3764 Not tainted syzkaller #0 [ 660.122658][T16695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 660.132759][T16695] Call Trace: [ 660.136081][T16695] [ 660.139058][T16695] dump_stack_lvl+0x18c/0x250 [ 660.143793][T16695] ? show_regs_print_info+0x20/0x20 [ 660.149040][T16695] ? load_image+0x420/0x420 [ 660.153893][T16695] ? __might_sleep+0xe0/0xe0 [ 660.158568][T16695] ? __lock_acquire+0x7d80/0x7d80 [ 660.163647][T16695] should_fail_ex+0x394/0x4c0 [ 660.168379][T16695] should_failslab+0x9/0x20 [ 660.172933][T16695] slab_pre_alloc_hook+0x59/0x300 [ 660.178026][T16695] ? __lock_acquire+0x7d80/0x7d80 [ 660.183112][T16695] kmem_cache_alloc+0x5a/0x2c0 [ 660.187927][T16695] ? security_file_alloc+0x34/0x120 [ 660.193187][T16695] security_file_alloc+0x34/0x120 [ 660.198294][T16695] init_file+0x94/0x1f0 [ 660.202505][T16695] alloc_empty_file+0xb7/0x1d0 [ 660.207314][T16695] path_openat+0x120/0x3270 [ 660.211979][T16695] ? verify_lock_unused+0x140/0x140 [ 660.217245][T16695] ? do_sys_openat2+0xda/0x1d0 [ 660.222051][T16695] ? __x64_sys_openat+0x139/0x160 [ 660.227121][T16695] ? do_syscall_64+0x55/0xb0 [ 660.231758][T16695] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.237886][T16695] ? verify_lock_unused+0x140/0x140 [ 660.243149][T16695] ? do_filp_open+0x430/0x430 [ 660.247898][T16695] do_filp_open+0x1f2/0x430 [ 660.252460][T16695] ? vfs_tmpfile+0x620/0x620 [ 660.257385][T16695] ? _raw_spin_unlock+0x28/0x40 [ 660.262304][T16695] ? alloc_fd+0x590/0x640 [ 660.266846][T16695] do_sys_openat2+0x134/0x1d0 [ 660.271962][T16695] ? do_sys_open+0xe0/0xe0 [ 660.280273][T16695] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 660.287308][T16695] ? lock_chain_count+0x20/0x20 [ 660.292367][T16695] __x64_sys_openat+0x139/0x160 [ 660.297641][T16695] do_syscall_64+0x55/0xb0 [ 660.302119][T16695] ? clear_bhb_loop+0x40/0x90 [ 660.306849][T16695] ? clear_bhb_loop+0x40/0x90 [ 660.311585][T16695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.317556][T16695] RIP: 0033:0x7fdd52b9e0d9 [ 660.322033][T16695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.341705][T16695] RSP: 002b:00007fdd53ade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 660.350164][T16695] RAX: ffffffffffffffda RBX: 00007fdd52e25fa0 RCX: 00007fdd52b9e0d9 [ 660.358179][T16695] RDX: 00000000001c1341 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 660.366191][T16695] RBP: 00007fdd53ade090 R08: 0000000000000000 R09: 0000000000000000 [ 660.374203][T16695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.382212][T16695] R13: 00007fdd52e26038 R14: 00007fdd52e25fa0 R15: 00007ffd45cc6678 [ 660.390245][T16695] [ 660.559848][T16700] netlink: 'syz.2.3773': attribute type 39 has an invalid length. [ 660.693760][T16704] netlink: 'syz.3.3766': attribute type 10 has an invalid length. [ 660.790756][T16710] netlink: 'syz.2.3769': attribute type 10 has an invalid length. [ 661.460707][T16732] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3777'. [ 661.565121][T16736] netlink: 'syz.2.3779': attribute type 10 has an invalid length. [ 662.031541][T16746] netlink: 'syz.3.3782': attribute type 10 has an invalid length. [ 662.614419][T16765] netlink: 'syz.3.3791': attribute type 21 has an invalid length. [ 662.624658][T16765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.632227][T16765] IPv6: NLM_F_CREATE should be set when creating new route [ 662.640478][T16765] IPv6: NLM_F_CREATE should be set when creating new route [ 662.648446][T16765] IPv6: NLM_F_CREATE should be set when creating new route [ 662.668844][T16765] netlink: 'syz.3.3791': attribute type 21 has an invalid length. [ 662.679386][T16765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.937677][T16780] netlink: 'syz.0.3795': attribute type 5 has an invalid length. [ 662.952294][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3795'. [ 663.075496][T16784] netlink: 'syz.3.3797': attribute type 10 has an invalid length. [ 663.127925][T16788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3799'. [ 663.855766][T16809] syzkaller0: entered promiscuous mode [ 663.861451][T16809] syzkaller0: entered allmulticast mode [ 665.531114][T16821] validate_nla: 2 callbacks suppressed [ 665.531130][T16821] netlink: 'syz.0.3810': attribute type 10 has an invalid length. [ 665.870884][T16845] FAULT_INJECTION: forcing a failure. [ 665.870884][T16845] name failslab, interval 1, probability 0, space 0, times 0 [ 665.925507][T16845] CPU: 0 PID: 16845 Comm: syz.3.3817 Not tainted syzkaller #0 [ 665.933069][T16845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 665.943189][T16845] Call Trace: [ 665.946559][T16845] [ 665.949536][T16845] dump_stack_lvl+0x18c/0x250 [ 665.954278][T16845] ? show_regs_print_info+0x20/0x20 [ 665.959530][T16845] ? load_image+0x420/0x420 [ 665.964100][T16845] ? __might_sleep+0xe0/0xe0 [ 665.968753][T16845] ? __lock_acquire+0x7d80/0x7d80 [ 665.973867][T16845] should_fail_ex+0x394/0x4c0 [ 665.978638][T16845] should_failslab+0x9/0x20 [ 665.983195][T16845] slab_pre_alloc_hook+0x59/0x300 [ 665.988294][T16845] ? __lock_acquire+0x1336/0x7d80 [ 665.993369][T16845] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 665.999140][T16845] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 666.004896][T16845] __kmem_cache_alloc_node+0x53/0x250 [ 666.010308][T16845] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 666.016057][T16845] __kmalloc+0xa7/0x240 [ 666.020257][T16845] tomoyo_realpath_from_path+0xe6/0x5c0 [ 666.025888][T16845] tomoyo_check_open_permission+0x224/0x460 [ 666.031814][T16845] ? tomoyo_check_open_permission+0x1cf/0x460 [ 666.037917][T16845] ? tomoyo_check_path_number_acl+0x280/0x280 [ 666.044029][T16845] ? __asan_memset+0x22/0x40 [ 666.048670][T16845] ? __rwlock_init+0x150/0x150 [ 666.053481][T16845] ? tomoyo_file_open+0xed/0x180 [ 666.058485][T16845] security_file_open+0x62/0xa0 [ 666.063385][T16845] do_dentry_open+0x32b/0x14b0 [ 666.068211][T16845] ? __asan_memcpy+0x40/0x70 [ 666.072846][T16845] path_openat+0x284f/0x3270 [ 666.077491][T16845] ? do_sys_openat2+0xda/0x1d0 [ 666.082297][T16845] ? do_filp_open+0x430/0x430 [ 666.087023][T16845] do_filp_open+0x1f2/0x430 [ 666.091573][T16845] ? vfs_tmpfile+0x620/0x620 [ 666.096217][T16845] ? _raw_spin_unlock+0x28/0x40 [ 666.101114][T16845] ? alloc_fd+0x590/0x640 [ 666.105493][T16845] do_sys_openat2+0x134/0x1d0 [ 666.110206][T16845] ? do_sys_open+0xe0/0xe0 [ 666.114662][T16845] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 666.120709][T16845] ? lock_chain_count+0x20/0x20 [ 666.125610][T16845] __x64_sys_openat+0x139/0x160 [ 666.130517][T16845] do_syscall_64+0x55/0xb0 [ 666.134963][T16845] ? clear_bhb_loop+0x40/0x90 [ 666.139675][T16845] ? clear_bhb_loop+0x40/0x90 [ 666.144385][T16845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 666.150401][T16845] RIP: 0033:0x7fc659f9e0d9 [ 666.154869][T16845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.174499][T16845] RSP: 002b:00007fc65af0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 666.182937][T16845] RAX: ffffffffffffffda RBX: 00007fc65a226090 RCX: 00007fc659f9e0d9 [ 666.190951][T16845] RDX: 00000000001c1341 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 666.198963][T16845] RBP: 00007fc65af0c090 R08: 0000000000000000 R09: 0000000000000000 [ 666.206963][T16845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.214988][T16845] R13: 00007fc65a226128 R14: 00007fc65a226090 R15: 00007ffc50ed83e8 [ 666.223003][T16845] [ 666.237772][T16837] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3816'. [ 666.249832][T16846] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3816'. [ 666.275140][T16845] ERROR: Out of memory at tomoyo_realpath_from_path. [ 666.379252][T16848] netlink: 'syz.2.3819': attribute type 39 has an invalid length. [ 666.732328][T16860] netlink: 'syz.0.3824': attribute type 10 has an invalid length. [ 666.760693][T16860] macvlan1: entered allmulticast mode [ 666.804554][T16860] veth1_vlan: entered allmulticast mode [ 666.869438][T16865] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3824'. [ 666.926516][T16860] team0: Port device macvlan1 added [ 666.959234][T16868] netlink: 'syz.2.3827': attribute type 29 has an invalid length. [ 666.978526][T16868] netlink: 'syz.2.3827': attribute type 29 has an invalid length. [ 666.999949][T16868] netlink: 'syz.2.3827': attribute type 29 has an invalid length. [ 667.073229][T16868] netlink: 'syz.2.3827': attribute type 13 has an invalid length. [ 667.082085][T16868] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3827'. [ 667.178644][T16877] netlink: 'syz.1.3829': attribute type 10 has an invalid length. [ 667.260619][T16877] team0: Device wg1 is of different type [ 667.729352][T16883] netlink: 'syz.0.3832': attribute type 21 has an invalid length. [ 667.795672][T16883] IPv6: NLM_F_CREATE should be specified when creating new route [ 667.852290][T16883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 667.860734][T16883] IPv6: NLM_F_CREATE should be set when creating new route [ 667.871711][T16883] IPv6: NLM_F_CREATE should be set when creating new route [ 667.881133][T16883] IPv6: NLM_F_CREATE should be set when creating new route [ 667.908656][T16887] netlink: 'syz.0.3832': attribute type 21 has an invalid length. [ 667.918647][T16887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 668.172619][T16907] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3836'. [ 668.290681][T16902] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3836'. [ 668.575220][T16918] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3843'. [ 668.586189][T16918] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3843'. [ 668.597580][T16918] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3843'. [ 670.090078][T16948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3852'. [ 670.877432][T16962] validate_nla: 2 callbacks suppressed [ 670.877450][T16962] netlink: 'syz.1.3857': attribute type 2 has an invalid length. [ 670.935185][T16962] netlink: 'syz.1.3857': attribute type 8 has an invalid length. [ 671.113823][T16971] netlink: 'syz.2.3861': attribute type 10 has an invalid length. [ 671.195227][T16971] macvlan1: entered allmulticast mode [ 671.544199][T16980] netlink: 'syz.2.3863': attribute type 10 has an invalid length. [ 672.067974][T16984] netlink: 'syz.2.3866': attribute type 10 has an invalid length. [ 672.362371][T16996] netlink: 'syz.2.3867': attribute type 10 has an invalid length. [ 673.045857][T16996] team0: Device wg1 is of different type [ 673.502039][T17012] netlink: 'syz.3.3876': attribute type 10 has an invalid length. [ 673.660649][T17015] syzkaller0: entered promiscuous mode [ 673.682901][T17015] syzkaller0: entered allmulticast mode [ 673.983756][T17031] FAULT_INJECTION: forcing a failure. [ 673.983756][T17031] name failslab, interval 1, probability 0, space 0, times 0 [ 673.997141][T17031] CPU: 1 PID: 17031 Comm: syz.2.3882 Not tainted syzkaller #0 [ 674.004666][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 674.014765][T17031] Call Trace: [ 674.018102][T17031] [ 674.021081][T17031] dump_stack_lvl+0x18c/0x250 [ 674.025818][T17031] ? show_regs_print_info+0x20/0x20 [ 674.031069][T17031] ? load_image+0x420/0x420 [ 674.035672][T17031] ? __might_sleep+0xe0/0xe0 [ 674.040459][T17031] ? __lock_acquire+0x7d80/0x7d80 [ 674.045981][T17031] should_fail_ex+0x394/0x4c0 [ 674.050733][T17031] should_failslab+0x9/0x20 [ 674.055305][T17031] slab_pre_alloc_hook+0x59/0x300 [ 674.060386][T17031] ? prepend_path+0x8a7/0x950 [ 674.065111][T17031] ? tomoyo_encode+0x2ad/0x570 [ 674.069918][T17031] ? tomoyo_encode+0x2ad/0x570 [ 674.074759][T17031] __kmem_cache_alloc_node+0x53/0x250 [ 674.080195][T17031] ? tomoyo_encode+0x2ad/0x570 [ 674.084997][T17031] __kmalloc+0xa7/0x240 [ 674.089203][T17031] tomoyo_encode+0x2ad/0x570 [ 674.093836][T17031] tomoyo_realpath_from_path+0x57c/0x5c0 [ 674.099517][T17031] tomoyo_check_open_permission+0x224/0x460 [ 674.105449][T17031] ? tomoyo_check_open_permission+0x1cf/0x460 [ 674.111557][T17031] ? tomoyo_check_path_number_acl+0x280/0x280 [ 674.117666][T17031] ? __asan_memset+0x22/0x40 [ 674.122312][T17031] ? __rwlock_init+0x150/0x150 [ 674.127111][T17031] ? tomoyo_file_open+0xed/0x180 [ 674.132194][T17031] security_file_open+0x62/0xa0 [ 674.137096][T17031] do_dentry_open+0x32b/0x14b0 [ 674.141893][T17031] ? __asan_memcpy+0x40/0x70 [ 674.146516][T17031] path_openat+0x284f/0x3270 [ 674.151160][T17031] ? do_sys_openat2+0xda/0x1d0 [ 674.156055][T17031] ? do_filp_open+0x430/0x430 [ 674.160776][T17031] do_filp_open+0x1f2/0x430 [ 674.165310][T17031] ? vfs_tmpfile+0x620/0x620 [ 674.169947][T17031] ? _raw_spin_unlock+0x28/0x40 [ 674.174828][T17031] ? alloc_fd+0x590/0x640 [ 674.179195][T17031] do_sys_openat2+0x134/0x1d0 [ 674.183920][T17031] ? do_sys_open+0xe0/0xe0 [ 674.188378][T17031] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 674.194403][T17031] ? lock_chain_count+0x20/0x20 [ 674.199324][T17031] __x64_sys_openat+0x139/0x160 [ 674.204220][T17031] do_syscall_64+0x55/0xb0 [ 674.208682][T17031] ? clear_bhb_loop+0x40/0x90 [ 674.213391][T17031] ? clear_bhb_loop+0x40/0x90 [ 674.218138][T17031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 674.224083][T17031] RIP: 0033:0x7f8e1af9e0d9 [ 674.228617][T17031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.248266][T17031] RSP: 002b:00007f8e1bf0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 674.256712][T17031] RAX: ffffffffffffffda RBX: 00007f8e1b225fa0 RCX: 00007f8e1af9e0d9 [ 674.264714][T17031] RDX: 00000000001c1341 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 674.272753][T17031] RBP: 00007f8e1bf0e090 R08: 0000000000000000 R09: 0000000000000000 [ 674.280755][T17031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.289043][T17031] R13: 00007f8e1b226038 R14: 00007f8e1b225fa0 R15: 00007ffec4ad7568 [ 674.297062][T17031] [ 674.361741][T17031] ERROR: Out of memory at tomoyo_realpath_from_path. [ 675.828926][T17033] netlink: 'syz.3.3883': attribute type 39 has an invalid length. [ 676.092054][T17041] netlink: 'syz.3.3886': attribute type 10 has an invalid length. [ 676.212229][T17041] team0: Device wg1 is of different type [ 676.451972][T17050] netlink: 'syz.1.3888': attribute type 10 has an invalid length. [ 677.579456][T17071] FAULT_INJECTION: forcing a failure. [ 677.579456][T17071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.609558][T17071] CPU: 0 PID: 17071 Comm: syz.3.3895 Not tainted syzkaller #0 [ 677.617099][T17071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 677.627200][T17071] Call Trace: [ 677.630520][T17071] [ 677.633489][T17071] dump_stack_lvl+0x18c/0x250 [ 677.638239][T17071] ? show_regs_print_info+0x20/0x20 [ 677.643489][T17071] ? load_image+0x420/0x420 [ 677.648052][T17071] ? __might_fault+0xaa/0x120 [ 677.653645][T17071] ? __lock_acquire+0x7d80/0x7d80 [ 677.658726][T17071] should_fail_ex+0x394/0x4c0 [ 677.663471][T17071] _copy_from_user+0x2f/0xe0 [ 677.668111][T17071] ___sys_sendmsg+0x1c7/0x360 [ 677.672916][T17071] ? get_pid_task+0x20/0x1e0 [ 677.677560][T17071] ? __sys_sendmsg+0x2b0/0x2b0 [ 677.682388][T17071] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 677.688622][T17071] __se_sys_sendmsg+0x1d0/0x2c0 [ 677.693530][T17071] ? __x64_sys_sendmsg+0x80/0x80 [ 677.698546][T17071] ? lockdep_hardirqs_on+0x98/0x150 [ 677.703803][T17071] do_syscall_64+0x55/0xb0 [ 677.708269][T17071] ? clear_bhb_loop+0x40/0x90 [ 677.712995][T17071] ? clear_bhb_loop+0x40/0x90 [ 677.717720][T17071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.723657][T17071] RIP: 0033:0x7fc659f9e0d9 [ 677.728121][T17071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.747787][T17071] RSP: 002b:00007fc65af2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.756253][T17071] RAX: ffffffffffffffda RBX: 00007fc65a225fa0 RCX: 00007fc659f9e0d9 [ 677.764445][T17071] RDX: 0000000000048800 RSI: 00002000000001c0 RDI: 0000000000000006 [ 677.772455][T17071] RBP: 00007fc65af2d090 R08: 0000000000000000 R09: 0000000000000000 [ 677.780488][T17071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.788527][T17071] R13: 00007fc65a226038 R14: 00007fc65a225fa0 R15: 00007ffc50ed83e8 [ 677.796839][T17071] [ 678.088975][T17083] netlink: 'syz.0.3898': attribute type 10 has an invalid length. [ 678.140141][T17090] netlink: 'syz.3.3904': attribute type 10 has an invalid length. [ 679.304353][T17114] __nla_validate_parse: 2 callbacks suppressed [ 679.304370][T17114] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.3913'. [ 679.638811][T17132] netlink: 'syz.1.3919': attribute type 13 has an invalid length. [ 679.659086][T17132] netlink: 'syz.1.3919': attribute type 4 has an invalid length. [ 679.681020][T17132] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3919'. [ 679.724907][T17135] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3921'. [ 679.755423][T17129] netlink: 'syz.1.3919': attribute type 13 has an invalid length. [ 679.763689][T17129] netlink: 'syz.1.3919': attribute type 4 has an invalid length. [ 679.772444][T17129] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3919'. [ 679.949483][T17144] netlink: 'syz.2.3924': attribute type 5 has an invalid length. [ 679.993575][T17144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3924'. [ 680.776061][T17166] netlink: 'syz.0.3932': attribute type 2 has an invalid length. [ 680.795970][T17166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3932'. [ 680.871099][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3934'. [ 681.211184][T17180] validate_nla: 1 callbacks suppressed [ 681.211200][T17180] netlink: 'syz.3.3937': attribute type 2 has an invalid length. [ 681.235739][T17180] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3937'. [ 681.359481][T17184] netlink: 'syz.0.3940': attribute type 16 has an invalid length. [ 681.368432][T17184] netlink: 'syz.0.3940': attribute type 3 has an invalid length. [ 681.376565][T17184] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3940'. [ 681.740711][T17195] netlink: 'syz.2.3944': attribute type 10 has an invalid length. [ 681.777428][T17197] netlink: 'syz.0.3945': attribute type 10 has an invalid length. [ 682.046792][T17210] FAULT_INJECTION: forcing a failure. [ 682.046792][T17210] name failslab, interval 1, probability 0, space 0, times 0 [ 682.077148][T17210] CPU: 0 PID: 17210 Comm: syz.0.3950 Not tainted syzkaller #0 [ 682.084687][T17210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.094785][T17210] Call Trace: [ 682.098102][T17210] [ 682.101073][T17210] dump_stack_lvl+0x18c/0x250 [ 682.105799][T17210] ? show_regs_print_info+0x20/0x20 [ 682.111041][T17210] ? load_image+0x420/0x420 [ 682.115605][T17210] ? __lock_acquire+0x7d80/0x7d80 [ 682.120703][T17210] should_fail_ex+0x394/0x4c0 [ 682.125444][T17210] should_failslab+0x9/0x20 [ 682.130007][T17210] slab_pre_alloc_hook+0x59/0x300 [ 682.135104][T17210] ? rcu_is_watching+0x15/0xb0 [ 682.139925][T17210] ? sk_prot_alloc+0xe7/0x210 [ 682.144657][T17210] ? sk_prot_alloc+0xe7/0x210 [ 682.149414][T17210] __kmem_cache_alloc_node+0x53/0x250 [ 682.154845][T17210] ? sk_prot_alloc+0xe7/0x210 [ 682.159571][T17210] __kmalloc+0xa7/0x240 [ 682.164046][T17210] sk_prot_alloc+0xe7/0x210 [ 682.168641][T17210] ? sk_alloc+0x24/0x350 [ 682.172940][T17210] sk_alloc+0x3a/0x350 [ 682.177093][T17210] tun_chr_open+0x79/0x510 [ 682.181613][T17210] ? tun_chr_compat_ioctl+0x30/0x30 [ 682.186869][T17210] misc_open+0x326/0x3a0 [ 682.191218][T17210] chrdev_open+0x58c/0x600 [ 682.195712][T17210] ? cd_forget+0x160/0x160 [ 682.200220][T17210] ? fsnotify_perm+0x3ed/0x5e0 [ 682.205052][T17210] do_dentry_open+0x880/0x14b0 [ 682.209878][T17210] ? cd_forget+0x160/0x160 [ 682.214357][T17210] path_openat+0x284f/0x3270 [ 682.219021][T17210] ? do_sys_openat2+0xda/0x1d0 [ 682.223845][T17210] ? do_filp_open+0x430/0x430 [ 682.228590][T17210] do_filp_open+0x1f2/0x430 [ 682.233147][T17210] ? vfs_tmpfile+0x620/0x620 [ 682.237813][T17210] ? _raw_spin_unlock+0x28/0x40 [ 682.242726][T17210] ? alloc_fd+0x590/0x640 [ 682.247127][T17210] do_sys_openat2+0x134/0x1d0 [ 682.251873][T17210] ? do_sys_open+0xe0/0xe0 [ 682.256356][T17210] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 682.262415][T17210] ? lock_chain_count+0x20/0x20 [ 682.267317][T17210] __x64_sys_openat+0x139/0x160 [ 682.272226][T17210] do_syscall_64+0x55/0xb0 [ 682.276702][T17210] ? clear_bhb_loop+0x40/0x90 [ 682.281431][T17210] ? clear_bhb_loop+0x40/0x90 [ 682.286158][T17210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.292102][T17210] RIP: 0033:0x7fa9fe79e0d9 [ 682.296563][T17210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.316401][T17210] RSP: 002b:00007fa9ff6b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 682.324875][T17210] RAX: ffffffffffffffda RBX: 00007fa9fea25fa0 RCX: 00007fa9fe79e0d9 [ 682.332901][T17210] RDX: 00000000001c1341 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 682.340956][T17210] RBP: 00007fa9ff6b4090 R08: 0000000000000000 R09: 0000000000000000 [ 682.348989][T17210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.357000][T17210] R13: 00007fa9fea26038 R14: 00007fa9fea25fa0 R15: 00007ffebe72a088 [ 682.365051][T17210] [ 682.499167][T17216] syzkaller0: entered promiscuous mode [ 682.505446][T17216] syzkaller0: entered allmulticast mode [ 682.613387][T17215] netlink: 'syz.2.3953': attribute type 39 has an invalid length. [ 684.789051][T17237] netlink: 'syz.1.3958': attribute type 39 has an invalid length. [ 684.981334][T17237] hsr_slave_1 (unregistering): left promiscuous mode [ 685.306554][T17252] netlink: 'syz.2.3964': attribute type 39 has an invalid length. [ 685.947833][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.954438][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.127651][T17300] netlink: 'syz.3.3982': attribute type 5 has an invalid length. [ 686.135571][T17300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3982'. [ 686.498299][T17312] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3988'. [ 686.530848][T17312] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 686.745943][T17319] netlink: 'syz.1.3990': attribute type 2 has an invalid length. [ 686.753962][T17319] netlink: 'syz.1.3990': attribute type 8 has an invalid length. [ 686.786344][T17319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3990'. [ 687.978559][T17357] netlink: 'syz.3.4005': attribute type 3 has an invalid length. [ 688.004977][T17357] netlink: 'syz.3.4005': attribute type 1 has an invalid length. [ 688.026464][T17357] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.4005'. [ 688.685277][T17377] syz.1.4013[17377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 688.685431][T17377] syz.1.4013[17377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 688.836212][T17382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4016'. [ 689.075902][T17392] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4019'. [ 689.145036][T17392] hsr_slave_0: left promiscuous mode [ 689.381123][T17399] FAULT_INJECTION: forcing a failure. [ 689.381123][T17399] name failslab, interval 1, probability 0, space 0, times 0 [ 689.405131][T17399] CPU: 0 PID: 17399 Comm: syz.3.4022 Not tainted syzkaller #0 [ 689.412785][T17399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.422911][T17399] Call Trace: [ 689.426256][T17399] [ 689.429267][T17399] dump_stack_lvl+0x18c/0x250 [ 689.434058][T17399] ? show_regs_print_info+0x20/0x20 [ 689.439463][T17399] ? load_image+0x420/0x420 [ 689.444073][T17399] ? __might_sleep+0xe0/0xe0 [ 689.448808][T17399] ? __lock_acquire+0x7d80/0x7d80 [ 689.454018][T17399] should_fail_ex+0x394/0x4c0 [ 689.458797][T17399] should_failslab+0x9/0x20 [ 689.463384][T17399] slab_pre_alloc_hook+0x59/0x300 [ 689.468513][T17399] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 689.474580][T17399] ? sock_kmalloc+0x96/0xf0 [ 689.479168][T17399] ? sock_kmalloc+0x96/0xf0 [ 689.483751][T17399] __kmem_cache_alloc_node+0x53/0x250 [ 689.489231][T17399] ? sock_kmalloc+0x96/0xf0 [ 689.493827][T17399] __kmalloc+0xa7/0x240 [ 689.498087][T17399] sock_kmalloc+0x96/0xf0 [ 689.502536][T17399] ____sys_sendmsg+0x1d4/0x980 [ 689.507418][T17399] ? __asan_memset+0x22/0x40 [ 689.512097][T17399] ? __sys_sendmsg_sock+0x30/0x30 [ 689.517185][T17399] ? __import_iovec+0x3fa/0x850 [ 689.522148][T17399] ? import_iovec+0x73/0xa0 [ 689.526757][T17399] ___sys_sendmsg+0x2a6/0x360 [ 689.531504][T17399] ? __sys_sendmsg+0x2b0/0x2b0 [ 689.536333][T17399] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 689.542419][T17399] ? lockdep_hardirqs_on+0x98/0x150 [ 689.547719][T17399] ? kasan_check_range+0x89/0x290 [ 689.552813][T17399] __se_sys_sendmsg+0x1d0/0x2c0 [ 689.557743][T17399] ? __x64_sys_sendmsg+0x80/0x80 [ 689.562764][T17399] ? syscall_enter_from_user_mode+0x2e/0x80 [ 689.568715][T17399] do_syscall_64+0x55/0xb0 [ 689.573170][T17399] ? clear_bhb_loop+0x40/0x90 [ 689.577887][T17399] ? clear_bhb_loop+0x40/0x90 [ 689.582630][T17399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.588567][T17399] RIP: 0033:0x7fc659f9e0d9 [ 689.593054][T17399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.612705][T17399] RSP: 002b:00007fc65af2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.621181][T17399] RAX: ffffffffffffffda RBX: 00007fc65a225fa0 RCX: 00007fc659f9e0d9 [ 689.629192][T17399] RDX: 0000000000048800 RSI: 00002000000001c0 RDI: 0000000000000006 [ 689.637227][T17399] RBP: 00007fc65af2d090 R08: 0000000000000000 R09: 0000000000000000 [ 689.645250][T17399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.653282][T17399] R13: 00007fc65a226038 R14: 00007fc65a225fa0 R15: 00007ffc50ed83e8 [ 689.661341][T17399] [ 689.962714][T17406] netlink: 'syz.1.4024': attribute type 3 has an invalid length. [ 689.992613][T17406] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.4024'. [ 692.793756][T17461] netlink: 'syz.3.4043': attribute type 10 has an invalid length. [ 692.826402][T17461] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4043'. [ 693.758474][T17484] netlink: 'syz.2.4052': attribute type 3 has an invalid length. [ 693.797988][T17484] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4052'. [ 694.418825][T17497] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4059'. [ 694.433100][T17497] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 695.047788][T17509] netlink: 'syz.2.4064': attribute type 21 has an invalid length. [ 695.188011][T17511] netlink: 'syz.0.4065': attribute type 10 has an invalid length. [ 695.710441][T17529] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4071'. [ 696.059471][T17534] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 696.065986][T17534] syzkaller1: linktype set to 769 [ 696.333966][T17529] netlink: 'syz.3.4071': attribute type 3 has an invalid length. [ 696.350683][T17529] netlink: 201120 bytes leftover after parsing attributes in process `syz.3.4071'. [ 696.825460][T17543] netlink: 'syz.0.4074': attribute type 21 has an invalid length. [ 696.833954][T17543] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4074'. [ 696.955538][T17543] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 697.915910][T17567] netlink: 'syz.0.4085': attribute type 29 has an invalid length. [ 697.993922][T17567] netlink: 'syz.0.4085': attribute type 29 has an invalid length. [ 698.026375][T17569] netlink: 'syz.0.4085': attribute type 29 has an invalid length. [ 698.134786][T17572] netlink: 'syz.0.4085': attribute type 29 has an invalid length. [ 698.289140][T17579] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.4090'. [ 698.999122][T17591] pimreg1: tun_chr_ioctl cmd 2147767517 [ 699.147383][T17598] netlink: 'syz.2.4098': attribute type 2 has an invalid length. [ 699.177334][T17598] netlink: 'syz.2.4098': attribute type 8 has an invalid length. [ 699.199181][T17598] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4098'. [ 702.997068][T17629] netlink: 'syz.2.4106': attribute type 10 has an invalid length. [ 703.037850][T17629] team0: Port device virt_wifi0 added [ 703.481114][T17644] netlink: 'syz.0.4113': attribute type 39 has an invalid length. [ 704.507715][T17681] FAULT_INJECTION: forcing a failure. [ 704.507715][T17681] name failslab, interval 1, probability 0, space 0, times 0 [ 704.521220][T17681] CPU: 0 PID: 17681 Comm: syz.2.4125 Not tainted syzkaller #0 [ 704.528734][T17681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 704.538821][T17681] Call Trace: [ 704.542130][T17681] [ 704.545087][T17681] dump_stack_lvl+0x18c/0x250 [ 704.549823][T17681] ? show_regs_print_info+0x20/0x20 [ 704.555051][T17681] ? load_image+0x420/0x420 [ 704.559619][T17681] ? mark_lock+0x94/0x320 [ 704.564010][T17681] should_fail_ex+0x394/0x4c0 [ 704.568743][T17681] should_failslab+0x9/0x20 [ 704.573314][T17681] slab_pre_alloc_hook+0x59/0x300 [ 704.578399][T17681] ? do_raw_spin_lock+0x11f/0x2b0 [ 704.583462][T17681] ? tipc_nametbl_lookup_group+0x783/0xc10 [ 704.589346][T17681] __kmem_cache_alloc_node+0x53/0x250 [ 704.594773][T17681] ? tipc_nametbl_lookup_group+0x783/0xc10 [ 704.600643][T17681] kmalloc_trace+0x2a/0xe0 [ 704.605111][T17681] tipc_nametbl_lookup_group+0x783/0xc10 [ 704.610794][T17681] ? tipc_nametbl_lookup_group+0xac/0xc10 [ 704.616563][T17681] __tipc_sendmsg+0xf7e/0x2b20 [ 704.621404][T17681] ? rht_unlock+0x1d0/0x1d0 [ 704.625958][T17681] ? verify_lock_unused+0x140/0x140 [ 704.631188][T17681] ? verify_lock_unused+0x140/0x140 [ 704.636423][T17681] ? mark_lock+0x94/0x320 [ 704.640803][T17681] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 704.646819][T17681] ? mark_lock+0x94/0x320 [ 704.651235][T17681] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 704.657265][T17681] ? __local_bh_enable_ip+0x13a/0x1c0 [ 704.662668][T17681] ? lockdep_hardirqs_on+0x98/0x150 [ 704.667914][T17681] ? __local_bh_enable_ip+0x13a/0x1c0 [ 704.673686][T17681] ? _local_bh_enable+0xa0/0xa0 [ 704.678583][T17681] tipc_sendmsg+0x55/0x70 [ 704.682946][T17681] ? tipc_recvmsg+0x13d0/0x13d0 [ 704.687874][T17681] ____sys_sendmsg+0x61b/0x980 [ 704.692723][T17681] ? audit_tree_destroy_watch+0x20/0x20 [ 704.698333][T17681] ? __sys_sendmsg_sock+0x30/0x30 [ 704.703386][T17681] ? __import_iovec+0x3fa/0x850 [ 704.708280][T17681] ? import_iovec+0x73/0xa0 [ 704.712820][T17681] ___sys_sendmsg+0x2a6/0x360 [ 704.717534][T17681] ? __sys_sendmsg+0x2b0/0x2b0 [ 704.722347][T17681] ? ktime_get+0x7f/0x280 [ 704.726730][T17681] __se_sys_sendmsg+0x1d0/0x2c0 [ 704.731615][T17681] ? __x64_sys_sendmsg+0x80/0x80 [ 704.736595][T17681] ? lockdep_hardirqs_on+0x98/0x150 [ 704.741835][T17681] do_syscall_64+0x55/0xb0 [ 704.746284][T17681] ? clear_bhb_loop+0x40/0x90 [ 704.750990][T17681] ? clear_bhb_loop+0x40/0x90 [ 704.755702][T17681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.761637][T17681] RIP: 0033:0x7f8e1af9e0d9 [ 704.766164][T17681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.785815][T17681] RSP: 002b:00007f8e1bf0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.794287][T17681] RAX: ffffffffffffffda RBX: 00007f8e1b225fa0 RCX: 00007f8e1af9e0d9 [ 704.802286][T17681] RDX: 0000000000048800 RSI: 00002000000001c0 RDI: 0000000000000006 [ 704.810282][T17681] RBP: 00007f8e1bf0e090 R08: 0000000000000000 R09: 0000000000000000 [ 704.818283][T17681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.826285][T17681] R13: 00007f8e1b226038 R14: 00007f8e1b225fa0 R15: 00007ffec4ad7568 [ 704.834303][T17681] [ 705.001167][T17688] veth1_macvtap: left promiscuous mode [ 705.010800][T17688] macsec0: entered promiscuous mode [ 705.024280][T17688] macsec0: entered allmulticast mode [ 705.101674][T17688] veth1_macvtap: entered allmulticast mode [ 705.108317][T17688] veth1_macvtap: entered promiscuous mode [ 705.122002][T17688] netlink: 'syz.3.4128': attribute type 10 has an invalid length. [ 705.932811][T17714] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.4136'. [ 706.265508][T17719] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 707.052218][T17738] netlink: 'syz.1.4144': attribute type 2 has an invalid length. [ 707.060593][T17738] netlink: 'syz.1.4144': attribute type 8 has an invalid length. [ 707.069972][T17738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4144'. [ 707.452856][T17740] netlink: 'syz.3.4143': attribute type 1 has an invalid length. [ 707.461674][T17740] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4143'. [ 707.496962][T17746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4146'. [ 707.564369][T17746] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.718554][T17746] bridge_slave_0 (unregistering): left allmulticast mode [ 707.730378][T17746] bridge_slave_0 (unregistering): left promiscuous mode [ 707.743493][T17746] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.063764][T17755] netlink: 'syz.3.4149': attribute type 5 has an invalid length. [ 708.073403][T17755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4149'. [ 708.239381][T17758] syzkaller0: entered promiscuous mode [ 708.245249][T17758] syzkaller0: entered allmulticast mode [ 710.209664][T17767] IPv6: NLM_F_CREATE should be specified when creating new route [ 710.422098][T17777] netlink: 'syz.3.4155': attribute type 10 has an invalid length. [ 710.446387][T17781] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4154'. [ 710.601464][T17788] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4158'. [ 710.794942][T17787] Ÿë: port 1(ip6gretap0) entered blocking state [ 710.802807][T17787] Ÿë: port 1(ip6gretap0) entered disabled state [ 710.810797][T17787] ip6gretap0: entered allmulticast mode [ 710.827724][T17787] ip6gretap0: entered promiscuous mode [ 710.948768][T17793] netlink: 'syz.1.4160': attribute type 39 has an invalid length. [ 711.138236][T17797] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4162'. [ 711.320552][T17797] bridge_slave_0 (unregistering): left allmulticast mode [ 711.328588][T17797] bridge_slave_0 (unregistering): left promiscuous mode [ 711.337281][T17797] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.783956][T17808] netlink: 'syz.0.4166': attribute type 10 has an invalid length. [ 711.918919][T17814] FAULT_INJECTION: forcing a failure. [ 711.918919][T17814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.976074][T17814] CPU: 1 PID: 17814 Comm: syz.1.4169 Not tainted syzkaller #0 [ 711.983725][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 711.993842][T17814] Call Trace: [ 711.997164][T17814] [ 712.000188][T17814] dump_stack_lvl+0x18c/0x250 [ 712.004943][T17814] ? show_regs_print_info+0x20/0x20 [ 712.010198][T17814] ? load_image+0x420/0x420 [ 712.014761][T17814] ? __might_fault+0xaa/0x120 [ 712.019492][T17814] ? __lock_acquire+0x7d80/0x7d80 [ 712.024587][T17814] should_fail_ex+0x394/0x4c0 [ 712.029343][T17814] _copy_from_iter+0x1cd/0x1290 [ 712.034296][T17814] ? rcu_is_watching+0x15/0xb0 [ 712.039130][T17814] ? copyout_mc+0x70/0x70 [ 712.043515][T17814] ? __virt_addr_valid+0x10c/0x380 [ 712.048789][T17814] ? __virt_addr_valid+0x10c/0x380 [ 712.053962][T17814] ? __virt_addr_valid+0x10c/0x380 [ 712.059164][T17814] ? __check_object_size+0x4fc/0xa40 [ 712.064514][T17814] netlink_sendmsg+0x76b/0xbf0 [ 712.069381][T17814] ? netlink_getsockopt+0x590/0x590 [ 712.074637][T17814] ? apparmor_socket_sendmsg+0x170/0x330 [ 712.080320][T17814] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 712.085645][T17814] ? security_socket_sendmsg+0x80/0xa0 [ 712.091138][T17814] ? netlink_getsockopt+0x590/0x590 [ 712.096414][T17814] ____sys_sendmsg+0x61b/0x980 [ 712.101220][T17814] ? __asan_memset+0x22/0x40 [ 712.105847][T17814] ? __sys_sendmsg_sock+0x30/0x30 [ 712.110896][T17814] ? __import_iovec+0x5f2/0x850 [ 712.115789][T17814] ? import_iovec+0x73/0xa0 [ 712.120331][T17814] ___sys_sendmsg+0x2a6/0x360 [ 712.125050][T17814] ? get_pid_task+0x20/0x1e0 [ 712.129673][T17814] ? __sys_sendmsg+0x2b0/0x2b0 [ 712.134485][T17814] ? __lock_acquire+0x7d80/0x7d80 [ 712.139559][T17814] __se_sys_sendmsg+0x1d0/0x2c0 [ 712.144440][T17814] ? __x64_sys_sendmsg+0x80/0x80 [ 712.149439][T17814] ? lockdep_hardirqs_on+0x98/0x150 [ 712.154677][T17814] do_syscall_64+0x55/0xb0 [ 712.159135][T17814] ? clear_bhb_loop+0x40/0x90 [ 712.163842][T17814] ? clear_bhb_loop+0x40/0x90 [ 712.168549][T17814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.174479][T17814] RIP: 0033:0x7fdd52b9e0d9 [ 712.178929][T17814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.198648][T17814] RSP: 002b:00007fdd53ade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.207112][T17814] RAX: ffffffffffffffda RBX: 00007fdd52e25fa0 RCX: 00007fdd52b9e0d9 [ 712.215138][T17814] RDX: 0000000020000014 RSI: 0000200000000040 RDI: 0000000000000003 [ 712.223162][T17814] RBP: 00007fdd53ade090 R08: 0000000000000000 R09: 0000000000000000 [ 712.231161][T17814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.239161][T17814] R13: 00007fdd52e26038 R14: 00007fdd52e25fa0 R15: 00007ffd45cc6678 [ 712.247197][T17814] [ 712.348356][T17820] FAULT_INJECTION: forcing a failure. [ 712.348356][T17820] name failslab, interval 1, probability 0, space 0, times 0 [ 712.379148][T17820] CPU: 1 PID: 17820 Comm: syz.0.4172 Not tainted syzkaller #0 [ 712.386696][T17820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 712.396837][T17820] Call Trace: [ 712.400157][T17820] [ 712.403146][T17820] dump_stack_lvl+0x18c/0x250 [ 712.407881][T17820] ? show_regs_print_info+0x20/0x20 [ 712.413131][T17820] ? load_image+0x420/0x420 [ 712.417728][T17820] ? __might_sleep+0xe0/0xe0 [ 712.422369][T17820] ? __lock_acquire+0x7d80/0x7d80 [ 712.427459][T17820] should_fail_ex+0x394/0x4c0 [ 712.432200][T17820] should_failslab+0x9/0x20 [ 712.436762][T17820] slab_pre_alloc_hook+0x59/0x300 [ 712.441851][T17820] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 712.448050][T17820] kmem_cache_alloc_node+0x5e/0x310 [ 712.453375][T17820] ? __alloc_skb+0x103/0x2c0 [ 712.458015][T17820] __alloc_skb+0x103/0x2c0 [ 712.462453][T17820] tipc_msg_build+0x163/0xe60 [ 712.467154][T17820] ? tipc_node_find+0x3bb/0x490 [ 712.472018][T17820] ? tipc_node_find+0xb4/0x490 [ 712.476803][T17820] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 712.482906][T17820] tipc_send_group_msg+0x267/0x550 [ 712.488066][T17820] ? tipc_send_group_unicast+0x550/0x550 [ 712.493759][T17820] __tipc_sendmsg+0x1dbc/0x2b20 [ 712.498647][T17820] ? rht_unlock+0x1d0/0x1d0 [ 712.503200][T17820] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 712.509219][T17820] ? verify_lock_unused+0x140/0x140 [ 712.514471][T17820] ? lock_chain_count+0x20/0x20 [ 712.519406][T17820] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 712.525578][T17820] ? lockdep_hardirqs_on+0x98/0x150 [ 712.530818][T17820] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 712.537031][T17820] ? mark_lock+0x94/0x320 [ 712.541396][T17820] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 712.547457][T17820] ? __local_bh_enable_ip+0x13a/0x1c0 [ 712.552843][T17820] ? lockdep_hardirqs_on+0x98/0x150 [ 712.558070][T17820] ? __local_bh_enable_ip+0x13a/0x1c0 [ 712.563470][T17820] ? _local_bh_enable+0xa0/0xa0 [ 712.568339][T17820] tipc_sendmsg+0x55/0x70 [ 712.572690][T17820] ? tipc_recvmsg+0x13d0/0x13d0 [ 712.577564][T17820] ____sys_sendmsg+0x61b/0x980 [ 712.582370][T17820] ? __sys_sendmsg_sock+0x30/0x30 [ 712.587440][T17820] ? __import_iovec+0x3fa/0x850 [ 712.592322][T17820] ? import_iovec+0x73/0xa0 [ 712.596900][T17820] ___sys_sendmsg+0x2a6/0x360 [ 712.601612][T17820] ? __sys_sendmsg+0x2b0/0x2b0 [ 712.606409][T17820] ? ktime_get+0x7f/0x280 [ 712.610770][T17820] __se_sys_sendmsg+0x1d0/0x2c0 [ 712.615662][T17820] ? __x64_sys_sendmsg+0x80/0x80 [ 712.620622][T17820] ? lockdep_hardirqs_on+0x98/0x150 [ 712.625838][T17820] do_syscall_64+0x55/0xb0 [ 712.630269][T17820] ? clear_bhb_loop+0x40/0x90 [ 712.634975][T17820] ? clear_bhb_loop+0x40/0x90 [ 712.639667][T17820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.645571][T17820] RIP: 0033:0x7fa9fe79e0d9 [ 712.649992][T17820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.669606][T17820] RSP: 002b:00007fa9ff6b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.678072][T17820] RAX: ffffffffffffffda RBX: 00007fa9fea25fa0 RCX: 00007fa9fe79e0d9 [ 712.686074][T17820] RDX: 0000000000048800 RSI: 00002000000001c0 RDI: 0000000000000006 [ 712.694078][T17820] RBP: 00007fa9ff6b4090 R08: 0000000000000000 R09: 0000000000000000 [ 712.702081][T17820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.710072][T17820] R13: 00007fa9fea26038 R14: 00007fa9fea25fa0 R15: 00007ffebe72a088 [ 712.718088][T17820] [ 712.724770][T17828] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.732249][T17828] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.954024][T17833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4176'. [ 713.084566][T17833] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.172808][T17833] bridge_slave_0 (unregistering): left allmulticast mode [ 713.180833][T17833] bridge_slave_0 (unregistering): left promiscuous mode [ 713.191605][T17833] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.326654][T17840] netlink: 'syz.2.4178': attribute type 10 has an invalid length. [ 713.935417][T17859] netlink: 'syz.1.4188': attribute type 10 has an invalid length. [ 714.475079][T17878] netlink: 'syz.0.4195': attribute type 12 has an invalid length. [ 714.492857][T17878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4195'. [ 714.527758][T17878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4195'. [ 714.906849][T17887] netlink: 'syz.0.4200': attribute type 10 has an invalid length. [ 715.467273][T17901] netlink: 'syz.3.4205': attribute type 2 has an invalid length. [ 715.480083][T17901] netlink: 'syz.3.4205': attribute type 8 has an invalid length. [ 715.493736][T17901] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4205'. [ 715.751781][T17913] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4207'. [ 715.773084][T17913] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4207'. [ 715.783330][T17905] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4207'. [ 715.795907][T17909] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4207'. [ 715.805867][T17913] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4207'. [ 715.944237][T17919] netlink: 'syz.3.4210': attribute type 10 has an invalid length. [ 716.543700][T17942] netlink: 'syz.2.4223': attribute type 10 has an invalid length. [ 716.955602][T17957] syzkaller0: entered promiscuous mode [ 716.961276][T17957] syzkaller0: entered allmulticast mode [ 718.738083][T17969] netlink: 'syz.2.4233': attribute type 39 has an invalid length. [ 718.749875][T17973] netlink: 'syz.0.4234': attribute type 10 has an invalid length. [ 718.758029][T17976] __nla_validate_parse: 1 callbacks suppressed [ 718.758043][T17976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4235'. [ 719.173159][T17992] syzkaller0: entered promiscuous mode [ 719.179247][T17992] syzkaller0: entered allmulticast mode [ 721.221407][T18010] netlink: 'syz.3.4244': attribute type 10 has an invalid length. [ 721.436011][T18023] netlink: 'syz.1.4250': attribute type 10 has an invalid length. [ 721.444000][T18023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4250'. [ 721.461847][T18023] netlink: 'syz.1.4250': attribute type 10 has an invalid length. [ 721.473635][T18023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4250'. [ 721.819995][T18038] netlink: 'syz.3.4257': attribute type 10 has an invalid length. [ 722.388385][T18068] netlink: 'syz.1.4268': attribute type 9 has an invalid length. [ 722.397551][T18068] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4268'. [ 722.496302][T18074] netlink: 'syz.3.4270': attribute type 2 has an invalid length. [ 722.508030][T18074] netlink: 'syz.3.4270': attribute type 8 has an invalid length. [ 722.516418][T18074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4270'. [ 722.529981][T18071] netlink: 'syz.0.4269': attribute type 10 has an invalid length. [ 724.167354][T18138] validate_nla: 1 callbacks suppressed [ 724.167425][T18138] netlink: 'syz.2.4296': attribute type 10 has an invalid length. [ 725.267828][T18166] FAULT_INJECTION: forcing a failure. [ 725.267828][T18166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.315313][ T5778] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 725.326215][T18166] CPU: 1 PID: 18166 Comm: syz.0.4307 Not tainted syzkaller #0 [ 725.340912][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 725.351050][T18166] Call Trace: [ 725.354438][T18166] [ 725.357468][T18166] dump_stack_lvl+0x18c/0x250 [ 725.362302][T18166] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.368571][T18166] ? show_regs_print_info+0x20/0x20 [ 725.373849][T18166] ? load_image+0x420/0x420 [ 725.378443][T18166] should_fail_ex+0x394/0x4c0 [ 725.383233][T18166] _copy_to_user+0x2f/0xa0 [ 725.387715][T18166] simple_read_from_buffer+0xe7/0x150 [ 725.393154][T18166] proc_fail_nth_read+0x1e8/0x260 [ 725.398261][T18166] ? proc_fault_inject_write+0x360/0x360 [ 725.403976][T18166] ? fsnotify_perm+0x271/0x5e0 [ 725.408804][T18166] ? proc_fault_inject_write+0x360/0x360 [ 725.414506][T18166] vfs_read+0x298/0x990 [ 725.418731][T18166] ? kernel_read+0x1e0/0x1e0 [ 725.423446][T18166] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.429662][T18166] ? lockdep_hardirqs_on+0x98/0x150 [ 725.434932][T18166] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.441167][T18166] ksys_read+0x151/0x260 [ 725.445492][T18166] ? vfs_write+0x9a0/0x9a0 [ 725.449976][T18166] ? lockdep_hardirqs_on+0x98/0x150 [ 725.455240][T18166] do_syscall_64+0x55/0xb0 [ 725.459704][T18166] ? clear_bhb_loop+0x40/0x90 [ 725.464609][T18166] ? clear_bhb_loop+0x40/0x90 [ 725.469354][T18166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.475311][T18166] RIP: 0033:0x7fa9fe75e90e [ 725.479786][T18166] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 725.499448][T18166] RSP: 002b:00007fa9ff6b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 725.507913][T18166] RAX: ffffffffffffffda RBX: 00007fa9ff6b46c0 RCX: 00007fa9fe75e90e [ 725.515939][T18166] RDX: 000000000000000f RSI: 00007fa9ff6b40a0 RDI: 000000000000000a [ 725.523968][T18166] RBP: 00007fa9ff6b4090 R08: 0000000000000000 R09: 0000000000000000 [ 725.532006][T18166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.540037][T18166] R13: 00007fa9fea26038 R14: 00007fa9fea25fa0 R15: 00007ffebe72a088 [ 725.548094][T18166] [ 726.067040][T18176] netlink: 'syz.1.4311': attribute type 10 has an invalid length. [ 726.132923][T18179] netlink: 'syz.3.4313': attribute type 10 has an invalid length. [ 727.742031][T18199] syzkaller0: entered promiscuous mode [ 727.788875][T18199] syzkaller0: entered allmulticast mode [ 727.867913][T18213] netlink: 'syz.0.4322': attribute type 28 has an invalid length. [ 727.898901][T18213] netlink: 'syz.0.4322': attribute type 29 has an invalid length. [ 727.995465][T18213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4322'. [ 728.349497][T18210] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4322'. [ 731.453502][T18217] netlink: 'syz.3.4324': attribute type 10 has an invalid length. [ 732.450971][T18245] netlink: 'syz.1.4335': attribute type 10 has an invalid length. [ 732.525553][T18250] netlink: 'syz.3.4337': attribute type 5 has an invalid length. [ 732.542635][T18250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4337'. [ 733.158572][T18276] netlink: 'syz.0.4348': attribute type 10 has an invalid length. [ 733.173314][T18276] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.189578][T18275] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4349'. [ 733.205222][T18275] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 733.232911][T18276] bond0: (slave bridge0): Releasing backup interface [ 733.247866][T18277] netlink: 'syz.3.4347': attribute type 10 has an invalid length. [ 733.394537][T18280] FAULT_INJECTION: forcing a failure. [ 733.394537][T18280] name failslab, interval 1, probability 0, space 0, times 0 [ 733.408676][T18280] CPU: 0 PID: 18280 Comm: syz.1.4350 Not tainted syzkaller #0 [ 733.416220][T18280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 733.426356][T18280] Call Trace: [ 733.429704][T18280] [ 733.432714][T18280] dump_stack_lvl+0x18c/0x250 [ 733.437488][T18280] ? show_regs_print_info+0x20/0x20 [ 733.442776][T18280] ? load_image+0x420/0x420 [ 733.447383][T18280] ? __might_sleep+0xe0/0xe0 [ 733.452147][T18280] ? __lock_acquire+0x7d80/0x7d80 [ 733.457279][T18280] ? stack_trace_save+0xaa/0x100 [ 733.462328][T18280] ? stack_trace_snprint+0xf0/0xf0 [ 733.467638][T18280] should_fail_ex+0x394/0x4c0 [ 733.472435][T18280] should_failslab+0x9/0x20 [ 733.477028][T18280] slab_pre_alloc_hook+0x59/0x300 [ 733.482144][T18280] ? __kasan_kmalloc+0x8f/0xa0 [ 733.486983][T18280] ? __inet_diag_dump_start+0x8b/0x9f0 [ 733.492550][T18280] ? __netlink_dump_start+0x43c/0x7a0 [ 733.498010][T18280] kmem_cache_alloc_node+0x5e/0x310 [ 733.503311][T18280] ? ___sys_sendmsg+0x2a6/0x360 [ 733.508252][T18280] ? __alloc_skb+0x103/0x2c0 [ 733.513034][T18280] __alloc_skb+0x103/0x2c0 [ 733.517542][T18280] netlink_dump+0x1ee/0xec0 [ 733.522120][T18280] ? end_current_label_crit_section+0x170/0x170 [ 733.528448][T18280] ? end_current_label_crit_section+0x170/0x170 [ 733.534799][T18280] ? netlink_lookup+0x200/0x200 [ 733.539810][T18280] ? ns_capable+0x89/0xe0 [ 733.544239][T18280] ? __inet_diag_dump_start+0x886/0x9f0 [ 733.549905][T18280] __netlink_dump_start+0x57c/0x7a0 [ 733.555210][T18280] inet_diag_rcv_msg_compat+0x215/0x440 [ 733.560855][T18280] ? __inet_diag_dump+0x380/0x380 [ 733.565982][T18280] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 733.571105][T18280] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 733.576901][T18280] ? inet_diag_dump_start_compat+0x20/0x20 [ 733.582789][T18280] ? inet_diag_dump+0x50/0x50 [ 733.587766][T18280] ? __inet_diag_dump+0x380/0x380 [ 733.592866][T18280] sock_diag_rcv_msg+0x3d3/0x5f0 [ 733.597914][T18280] netlink_rcv_skb+0x235/0x4c0 [ 733.602763][T18280] ? sock_diag_bind+0xb0/0xb0 [ 733.607532][T18280] ? netlink_ack+0x1160/0x1160 [ 733.612434][T18280] ? __lock_acquire+0x7d80/0x7d80 [ 733.617565][T18280] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.622874][T18280] sock_diag_rcv+0x2a/0x40 [ 733.627422][T18280] netlink_unicast+0x7b1/0x930 [ 733.632328][T18280] netlink_sendmsg+0x8d0/0xbf0 [ 733.637212][T18280] ? netlink_getsockopt+0x590/0x590 [ 733.642543][T18280] ? apparmor_socket_sendmsg+0x170/0x330 [ 733.648378][T18280] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 733.653749][T18280] ? security_socket_sendmsg+0x80/0xa0 [ 733.659286][T18280] ? netlink_getsockopt+0x590/0x590 [ 733.664569][T18280] ____sys_sendmsg+0x61b/0x980 [ 733.669698][T18280] ? __asan_memset+0x22/0x40 [ 733.674379][T18280] ? __sys_sendmsg_sock+0x30/0x30 [ 733.679478][T18280] ? __import_iovec+0x5f2/0x850 [ 733.684447][T18280] ? import_iovec+0x73/0xa0 [ 733.689061][T18280] ___sys_sendmsg+0x2a6/0x360 [ 733.693840][T18280] ? __sys_sendmsg+0x2b0/0x2b0 [ 733.698765][T18280] ? __lock_acquire+0x7d80/0x7d80 [ 733.703974][T18280] __se_sys_sendmsg+0x1d0/0x2c0 [ 733.708916][T18280] ? __x64_sys_sendmsg+0x80/0x80 [ 733.713999][T18280] ? lockdep_hardirqs_on+0x98/0x150 [ 733.719309][T18280] do_syscall_64+0x55/0xb0 [ 733.723830][T18280] ? clear_bhb_loop+0x40/0x90 [ 733.728588][T18280] ? clear_bhb_loop+0x40/0x90 [ 733.733354][T18280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.739319][T18280] RIP: 0033:0x7fdd52b9e0d9 [ 733.743812][T18280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.764018][T18280] RSP: 002b:00007fdd53ade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.772638][T18280] RAX: ffffffffffffffda RBX: 00007fdd52e25fa0 RCX: 00007fdd52b9e0d9 [ 733.780774][T18280] RDX: 0000000020000014 RSI: 0000200000000040 RDI: 0000000000000003 [ 733.788821][T18280] RBP: 00007fdd53ade090 R08: 0000000000000000 R09: 0000000000000000 [ 733.796953][T18280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.805011][T18280] R13: 00007fdd52e26038 R14: 00007fdd52e25fa0 R15: 00007ffd45cc6678 [ 733.814049][T18280] [ 734.129664][T18284] syzkaller0: entered promiscuous mode [ 734.135655][T18284] syzkaller0: entered allmulticast mode [ 735.763328][T18290] netlink: 'syz.0.4355': attribute type 39 has an invalid length. [ 736.016452][T18303] netlink: 'syz.0.4359': attribute type 10 has an invalid length. [ 736.335307][T18321] netlink: 'syz.3.4364': attribute type 10 has an invalid length. [ 736.460027][T18321] bond0: (slave bridge0): Releasing backup interface [ 736.819480][T18315] netlink: 'syz.2.4363': attribute type 1 has an invalid length. [ 736.828058][T18315] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4363'. [ 737.584512][T18353] sit0: entered allmulticast mode [ 737.647501][T18350] sit0: entered promiscuous mode [ 738.050432][T18355] netlink: 'syz.1.4377': attribute type 2 has an invalid length. [ 738.058623][T18355] netlink: 'syz.1.4377': attribute type 8 has an invalid length. [ 738.066718][T18355] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4377'. [ 738.287026][T18361] netlink: 'syz.3.4380': attribute type 10 has an invalid length. [ 738.311141][T18361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4380'. [ 738.347024][T18361] netlink: 'syz.3.4380': attribute type 10 has an invalid length. [ 738.362611][T18361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4380'. [ 738.753559][T18371] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.4383'. [ 738.976187][T18379] syzkaller0: entered promiscuous mode [ 738.981756][T18379] syzkaller0: entered allmulticast mode [ 740.871657][T18396] sit0: entered allmulticast mode [ 740.886337][T18390] sit0: entered promiscuous mode [ 741.155961][T18418] netlink: 'syz.1.4398': attribute type 10 has an invalid length. [ 741.166256][T18418] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.531594][T18426] netlink: 'syz.1.4400': attribute type 5 has an invalid length. [ 741.544820][T18426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4400'. [ 742.655231][T18442] sit0: entered allmulticast mode [ 742.724741][T18444] sit0: entered promiscuous mode [ 745.745280][T18475] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.4418'. [ 745.777075][T18475] bridge: RTM_NEWNEIGH with invalid ether address [ 746.205009][T18493] netlink: 'syz.2.4427': attribute type 7 has an invalid length. [ 747.394275][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.401335][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.130692][T18534] FAULT_INJECTION: forcing a failure. [ 749.130692][T18534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.167151][T18534] CPU: 1 PID: 18534 Comm: syz.0.4442 Not tainted syzkaller #0 [ 749.174800][T18534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.185013][T18534] Call Trace: [ 749.188362][T18534] [ 749.191398][T18534] dump_stack_lvl+0x18c/0x250 [ 749.196199][T18534] ? show_regs_print_info+0x20/0x20 [ 749.201473][T18534] ? load_image+0x420/0x420 [ 749.206156][T18534] ? __might_fault+0xaa/0x120 [ 749.210922][T18534] ? __lock_acquire+0x7d80/0x7d80 [ 749.216063][T18534] should_fail_ex+0x394/0x4c0 [ 749.220853][T18534] _copy_from_user+0x2f/0xe0 [ 749.225524][T18534] __sys_bpf+0x23e/0x890 [ 749.229849][T18534] ? bpf_link_show_fdinfo+0x390/0x390 [ 749.235368][T18534] ? lock_chain_count+0x20/0x20 [ 749.240340][T18534] __x64_sys_bpf+0x7c/0x90 [ 749.244838][T18534] do_syscall_64+0x55/0xb0 [ 749.249325][T18534] ? clear_bhb_loop+0x40/0x90 [ 749.254089][T18534] ? clear_bhb_loop+0x40/0x90 [ 749.258845][T18534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 749.264801][T18534] RIP: 0033:0x7fa9fe79e0d9 [ 749.269406][T18534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.289088][T18534] RSP: 002b:00007fa9ff6b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 749.297585][T18534] RAX: ffffffffffffffda RBX: 00007fa9fea25fa0 RCX: 00007fa9fe79e0d9 [ 749.305630][T18534] RDX: 0000000000000020 RSI: 0000200000000480 RDI: 0000000000000003 [ 749.313702][T18534] RBP: 00007fa9ff6b4090 R08: 0000000000000000 R09: 0000000000000000 [ 749.321741][T18534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.329778][T18534] R13: 00007fa9fea26038 R14: 00007fa9fea25fa0 R15: 00007ffebe72a088 [ 749.337870][T18534] [ 750.401604][T18557] FAULT_INJECTION: forcing a failure. [ 750.401604][T18557] name failslab, interval 1, probability 0, space 0, times 0 [ 750.444146][T18561] netlink: 'syz.2.4452': attribute type 10 has an invalid length. [ 750.444902][T18557] CPU: 1 PID: 18557 Comm: syz.0.4450 Not tainted syzkaller #0 [ 750.459534][T18557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 750.469632][T18557] Call Trace: [ 750.472963][T18557] [ 750.475931][T18557] dump_stack_lvl+0x18c/0x250 [ 750.480664][T18557] ? show_regs_print_info+0x20/0x20 [ 750.485903][T18557] ? load_image+0x420/0x420 [ 750.490473][T18557] should_fail_ex+0x394/0x4c0 [ 750.495217][T18557] should_failslab+0x9/0x20 [ 750.499795][T18557] slab_pre_alloc_hook+0x59/0x300 [ 750.504923][T18557] kmem_cache_alloc+0x5a/0x2c0 [ 750.509739][T18557] ? skb_clone+0x1eb/0x370 [ 750.514239][T18557] skb_clone+0x1eb/0x370 [ 750.518546][T18557] __netlink_deliver_tap+0x411/0x7f0 [ 750.523887][T18557] ? netlink_deliver_tap+0x2e/0x1b0 [ 750.529133][T18557] netlink_deliver_tap+0x19c/0x1b0 [ 750.534294][T18557] __netlink_sendskb+0x4b/0x90 [ 750.539115][T18557] netlink_dump+0xab3/0xec0 [ 750.543678][T18557] ? netlink_lookup+0x200/0x200 [ 750.548593][T18557] ? ns_capable+0x89/0xe0 [ 750.552966][T18557] ? __inet_diag_dump_start+0x886/0x9f0 [ 750.558547][T18557] __netlink_dump_start+0x57c/0x7a0 [ 750.563783][T18557] inet_diag_rcv_msg_compat+0x215/0x440 [ 750.569369][T18557] ? __inet_diag_dump+0x380/0x380 [ 750.574450][T18557] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 750.579506][T18557] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 750.585265][T18557] ? inet_diag_dump_start_compat+0x20/0x20 [ 750.591126][T18557] ? inet_diag_dump+0x50/0x50 [ 750.595855][T18557] ? __inet_diag_dump+0x380/0x380 [ 750.600915][T18557] sock_diag_rcv_msg+0x3d3/0x5f0 [ 750.605887][T18557] netlink_rcv_skb+0x235/0x4c0 [ 750.610678][T18557] ? sock_diag_bind+0xb0/0xb0 [ 750.615406][T18557] ? netlink_ack+0x1160/0x1160 [ 750.620200][T18557] ? __lock_acquire+0x7d80/0x7d80 [ 750.625252][T18557] ? netlink_deliver_tap+0x2e/0x1b0 [ 750.630478][T18557] sock_diag_rcv+0x2a/0x40 [ 750.634925][T18557] netlink_unicast+0x7b1/0x930 [ 750.639724][T18557] netlink_sendmsg+0x8d0/0xbf0 [ 750.644517][T18557] ? netlink_getsockopt+0x590/0x590 [ 750.649740][T18557] ? apparmor_socket_sendmsg+0x170/0x330 [ 750.655401][T18557] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 750.660708][T18557] ? security_socket_sendmsg+0x80/0xa0 [ 750.666182][T18557] ? netlink_getsockopt+0x590/0x590 [ 750.671428][T18557] ____sys_sendmsg+0x61b/0x980 [ 750.676239][T18557] ? __asan_memset+0x22/0x40 [ 750.680852][T18557] ? __sys_sendmsg_sock+0x30/0x30 [ 750.685981][T18557] ? __import_iovec+0x5f2/0x850 [ 750.690864][T18557] ? import_iovec+0x73/0xa0 [ 750.695409][T18557] ___sys_sendmsg+0x2a6/0x360 [ 750.700128][T18557] ? get_pid_task+0x20/0x1e0 [ 750.704750][T18557] ? __sys_sendmsg+0x2b0/0x2b0 [ 750.709565][T18557] ? __lock_acquire+0x7d80/0x7d80 [ 750.714634][T18557] __se_sys_sendmsg+0x1d0/0x2c0 [ 750.719515][T18557] ? __x64_sys_sendmsg+0x80/0x80 [ 750.724488][T18557] ? lockdep_hardirqs_on+0x98/0x150 [ 750.729716][T18557] do_syscall_64+0x55/0xb0 [ 750.734155][T18557] ? clear_bhb_loop+0x40/0x90 [ 750.738867][T18557] ? clear_bhb_loop+0x40/0x90 [ 750.743568][T18557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.749487][T18557] RIP: 0033:0x7fa9fe79e0d9 [ 750.753952][T18557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.773607][T18557] RSP: 002b:00007fa9ff6b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.782053][T18557] RAX: ffffffffffffffda RBX: 00007fa9fea25fa0 RCX: 00007fa9fe79e0d9 [ 750.790046][T18557] RDX: 0000000020000014 RSI: 0000200000000040 RDI: 0000000000000003 [ 750.798040][T18557] RBP: 00007fa9ff6b4090 R08: 0000000000000000 R09: 0000000000000000 [ 750.806044][T18557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.814032][T18557] R13: 00007fa9fea26038 R14: 00007fa9fea25fa0 R15: 00007ffebe72a088 [ 750.822043][T18557] [ 751.149311][T18575] netlink: 207808 bytes leftover after parsing attributes in process `syz.0.4457'. [ 751.168867][T18579] netlink: 'syz.2.4458': attribute type 5 has an invalid length. [ 751.208234][T18579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4458'. [ 752.047287][T18576] syzkaller0: entered promiscuous mode [ 752.053109][T18576] syzkaller0: entered allmulticast mode [ 753.919895][T18614] netlink: 'syz.3.4467': attribute type 39 has an invalid length. [ 754.111107][T18618] syzkaller0: entered promiscuous mode [ 754.116785][T18618] syzkaller0: entered allmulticast mode [ 755.642762][T18622] syzkaller0: entered promiscuous mode [ 755.648672][T18622] syzkaller0: entered allmulticast mode [ 757.909869][T18642] netlink: 'syz.0.4477': attribute type 10 has an invalid length. [ 758.331908][T18652] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4482'. [ 758.463374][T18652] team0: Port device team_slave_0 removed [ 758.517015][T18652] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 758.783616][T18671] netlink: 'syz.3.4489': attribute type 10 has an invalid length. [ 758.895545][T18677] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4491'. [ 759.332365][T18696] FAULT_INJECTION: forcing a failure. [ 759.332365][T18696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.346792][T18696] CPU: 0 PID: 18696 Comm: syz.3.4500 Not tainted syzkaller #0 [ 759.354321][T18696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 759.364420][T18696] Call Trace: [ 759.367736][T18696] [ 759.370702][T18696] dump_stack_lvl+0x18c/0x250 [ 759.375440][T18696] ? show_regs_print_info+0x20/0x20 [ 759.380690][T18696] ? load_image+0x420/0x420 [ 759.385272][T18696] ? __might_fault+0xaa/0x120 [ 759.390084][T18696] ? __lock_acquire+0x7d80/0x7d80 [ 759.395160][T18696] should_fail_ex+0x394/0x4c0 [ 759.399897][T18696] _copy_from_user+0x2f/0xe0 [ 759.404542][T18696] __sys_bpf+0x23e/0x890 [ 759.408838][T18696] ? bpf_link_show_fdinfo+0x390/0x390 [ 759.414277][T18696] ? lock_chain_count+0x20/0x20 [ 759.419185][T18696] __x64_sys_bpf+0x7c/0x90 [ 759.423653][T18696] do_syscall_64+0x55/0xb0 [ 759.428113][T18696] ? clear_bhb_loop+0x40/0x90 [ 759.432837][T18696] ? clear_bhb_loop+0x40/0x90 [ 759.437576][T18696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.443516][T18696] RIP: 0033:0x7fc659f9e0d9 [ 759.447978][T18696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.467648][T18696] RSP: 002b:00007fc65af2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 759.476184][T18696] RAX: ffffffffffffffda RBX: 00007fc65a225fa0 RCX: 00007fc659f9e0d9 [ 759.484179][T18696] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 759.492192][T18696] RBP: 00007fc65af2d090 R08: 0000000000000000 R09: 0000000000000000 [ 759.500356][T18696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.508349][T18696] R13: 00007fc65a226038 R14: 00007fc65a225fa0 R15: 00007ffc50ed83e8 [ 759.516359][T18696] [ 759.533244][T18699] netlink: 'syz.2.4501': attribute type 10 has an invalid length. [ 759.631116][T18697] netlink: 'syz.1.4499': attribute type 39 has an invalid length. [ 759.668298][T18703] FAULT_INJECTION: forcing a failure. [ 759.668298][T18703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.685391][T18703] CPU: 1 PID: 18703 Comm: syz.3.4502 Not tainted syzkaller #0 [ 759.692912][T18703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 759.703006][T18703] Call Trace: [ 759.706358][T18703] [ 759.709338][T18703] dump_stack_lvl+0x18c/0x250 [ 759.714086][T18703] ? show_regs_print_info+0x20/0x20 [ 759.719384][T18703] ? load_image+0x420/0x420 [ 759.723979][T18703] ? __lock_acquire+0x7d80/0x7d80 [ 759.729083][T18703] ? snprintf+0xe9/0x140 [ 759.733391][T18703] should_fail_ex+0x394/0x4c0 [ 759.738125][T18703] _copy_to_user+0x2f/0xa0 [ 759.742577][T18703] simple_read_from_buffer+0xe7/0x150 [ 759.747985][T18703] proc_fail_nth_read+0x1e8/0x260 [ 759.753042][T18703] ? proc_fault_inject_write+0x360/0x360 [ 759.758718][T18703] ? fsnotify_perm+0x271/0x5e0 [ 759.763511][T18703] ? proc_fault_inject_write+0x360/0x360 [ 759.769183][T18703] vfs_read+0x298/0x990 [ 759.773400][T18703] ? kernel_read+0x1e0/0x1e0 [ 759.778029][T18703] ? __fget_files+0x28/0x460 [ 759.782660][T18703] ? __fget_files+0x3fc/0x460 [ 759.787391][T18703] ? __fdget_pos+0x2a3/0x330 [ 759.792106][T18703] ? ksys_read+0x74/0x260 [ 759.796488][T18703] ksys_read+0x151/0x260 [ 759.800764][T18703] ? vfs_write+0x9a0/0x9a0 [ 759.805564][T18703] ? lockdep_hardirqs_on+0x98/0x150 [ 759.810800][T18703] do_syscall_64+0x55/0xb0 [ 759.815236][T18703] ? clear_bhb_loop+0x40/0x90 [ 759.819943][T18703] ? clear_bhb_loop+0x40/0x90 [ 759.824651][T18703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.830572][T18703] RIP: 0033:0x7fc659f5e90e [ 759.835014][T18703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 759.854739][T18703] RSP: 002b:00007fc65af2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 759.863172][T18703] RAX: ffffffffffffffda RBX: 00007fc65af2d6c0 RCX: 00007fc659f5e90e [ 759.871166][T18703] RDX: 000000000000000f RSI: 00007fc65af2d0a0 RDI: 0000000000000004 [ 759.879155][T18703] RBP: 00007fc65af2d090 R08: 0000000000000000 R09: 0000000000000000 [ 759.887149][T18703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.895155][T18703] R13: 00007fc65a226038 R14: 00007fc65a225fa0 R15: 00007ffc50ed83e8 [ 759.903160][T18703] [ 759.926185][T18706] netlink: 'syz.0.4511': attribute type 10 has an invalid length. [ 760.329362][T18725] netlink: 'syz.3.4510': attribute type 5 has an invalid length. [ 760.337472][T18725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4510'. [ 760.520535][T18729] syzkaller0: entered promiscuous mode [ 760.531492][T18729] syzkaller0: entered allmulticast mode [ 760.539217][T18731] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4514'. [ 760.951374][T18711] delete_channel: no stack [ 762.346876][T18734] netlink: 'syz.1.4515': attribute type 10 has an invalid length. [ 762.355053][T18738] netlink: 'syz.0.4517': attribute type 39 has an invalid length. [ 763.145325][T18769] syzkaller0: entered promiscuous mode [ 763.166732][T18769] syzkaller0: entered allmulticast mode [ 765.515177][T18777] netlink: 'syz.0.4527': attribute type 10 has an invalid length. [ 765.808065][T18800] netlink: 'syz.1.4536': attribute type 2 has an invalid length. [ 765.827718][T18800] netlink: 'syz.1.4536': attribute type 8 has an invalid length. [ 765.836149][T18800] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4536'. [ 766.511449][T18809] syzkaller0: entered promiscuous mode [ 766.517534][T18809] syzkaller0: entered allmulticast mode [ 766.632122][T18818] netlink: 'syz.2.4542': attribute type 10 has an invalid length. [ 766.650143][T18823] netlink: 'syz.3.4543': attribute type 1 has an invalid length. [ 766.679025][T18823] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.4543'. [ 768.816709][T18855] netlink: 'syz.3.4556': attribute type 10 has an invalid length. [ 768.825614][T18856] netlink: 'syz.0.4558': attribute type 10 has an invalid length. [ 769.005832][T18866] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4560'. [ 769.121778][T18869] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.4560'. [ 769.155001][T18869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4560'. [ 769.403870][T18880] netlink: 'syz.1.4567': attribute type 10 has an invalid length. [ 769.444085][T18886] FAULT_INJECTION: forcing a failure. [ 769.444085][T18886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.465522][T18886] CPU: 1 PID: 18886 Comm: syz.2.4570 Not tainted syzkaller #0 [ 769.473088][T18886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 769.483243][T18886] Call Trace: [ 769.486592][T18886] [ 769.489587][T18886] dump_stack_lvl+0x18c/0x250 [ 769.494548][T18886] ? show_regs_print_info+0x20/0x20 [ 769.499846][T18886] ? load_image+0x420/0x420 [ 769.504470][T18886] ? __lock_acquire+0x7d80/0x7d80 [ 769.509625][T18886] should_fail_ex+0x394/0x4c0 [ 769.514505][T18886] _copy_from_user+0x2f/0xe0 [ 769.519249][T18886] ___bpf_copy_key+0xb0/0x100 [ 769.524079][T18886] map_delete_elem+0x1fc/0x550 [ 769.528895][T18886] ? bpf_lsm_bpf+0x9/0x10 [ 769.533283][T18886] __sys_bpf+0x502/0x890 [ 769.537674][T18886] ? bpf_link_show_fdinfo+0x390/0x390 [ 769.543127][T18886] ? lock_chain_count+0x20/0x20 [ 769.548054][T18886] __x64_sys_bpf+0x7c/0x90 [ 769.552541][T18886] do_syscall_64+0x55/0xb0 [ 769.557003][T18886] ? clear_bhb_loop+0x40/0x90 [ 769.561726][T18886] ? clear_bhb_loop+0x40/0x90 [ 769.566454][T18886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.572400][T18886] RIP: 0033:0x7f8e1af9e0d9 [ 769.576856][T18886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.596514][T18886] RSP: 002b:00007f8e1bf0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 769.605148][T18886] RAX: ffffffffffffffda RBX: 00007f8e1b225fa0 RCX: 00007f8e1af9e0d9 [ 769.613161][T18886] RDX: 0000000000000020 RSI: 0000200000000480 RDI: 0000000000000003 [ 769.621178][T18886] RBP: 00007f8e1bf0e090 R08: 0000000000000000 R09: 0000000000000000 [ 769.629213][T18886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.637222][T18886] R13: 00007f8e1b226038 R14: 00007f8e1b225fa0 R15: 00007ffec4ad7568 [ 769.645275][T18886] [ 770.184364][T18909] netlink: 'syz.2.4578': attribute type 5 has an invalid length. [ 770.194086][T18909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4578'. [ 770.225633][T18910] veth0_vlan: entered allmulticast mode [ 770.302960][T18912] ªªªªª6: renamed from veth0_vlan [ 770.357658][T18910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4575'. [ 770.367686][T18910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4575'. [ 770.402933][T18910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4575'. [ 770.420371][T18910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4575'. [ 770.445481][T18921] netlink: 'syz.2.4580': attribute type 10 has an invalid length. [ 770.753091][T18930] netlink: 'syz.2.4585': attribute type 33 has an invalid length. [ 770.791891][T18930] netlink: 'syz.2.4585': attribute type 21 has an invalid length. [ 770.805120][T18930] netlink: 'syz.2.4585': attribute type 1 has an invalid length. [ 770.835067][T18932] netlink: 'syz.3.4584': attribute type 39 has an invalid length. [ 771.072080][T18936] syzkaller0: entered promiscuous mode [ 771.078521][T18936] syzkaller0: entered allmulticast mode [ 774.245262][T18952] netlink: 'syz.2.4591': attribute type 10 has an invalid length. [ 775.411186][T18975] syzkaller0: entered promiscuous mode [ 775.424799][T18975] syzkaller0: entered allmulticast mode [ 777.363283][T19003] netlink: 'syz.3.4603': attribute type 10 has an invalid length. [ 777.823944][T19016] __nla_validate_parse: 4 callbacks suppressed [ 777.823986][T19016] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4609'. [ 777.841536][T19016] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.4609'. [ 777.853405][T19016] tipc: Started in network mode [ 777.863796][T19016] tipc: Node identity b, cluster identity 57 [ 777.870709][T19016] tipc: Node number set to 11 [ 778.380420][T19023] netlink: 'syz.1.4612': attribute type 5 has an invalid length. [ 778.388438][T19023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4612'. [ 778.588218][T19025] netlink: 'syz.2.4613': attribute type 10 has an invalid length. [ 778.787122][T19031] syzkaller0: entered promiscuous mode [ 778.792851][T19031] syzkaller0: entered allmulticast mode [ 779.169802][T19049] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4622'. [ 779.181149][T19049] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.4622'. [ 779.416435][T19061] netlink: 'syz.2.4628': attribute type 10 has an invalid length. [ 779.886445][T19067] syzkaller0: entered promiscuous mode [ 779.892128][T19067] syzkaller0: entered allmulticast mode [ 780.131805][T19086] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4637'. [ 780.142775][T19086] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.4637'. [ 780.152862][T19086] tipc: Started in network mode [ 780.185036][T19086] tipc: Node identity b, cluster identity 57 [ 780.203339][T19086] tipc: Node number set to 11 [ 780.244076][T19093] netlink: 'syz.0.4640': attribute type 2 has an invalid length. [ 780.254411][T19093] netlink: 'syz.0.4640': attribute type 8 has an invalid length. [ 780.262642][T19093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4640'. [ 780.384138][T19095] netlink: 'syz.1.4641': attribute type 10 has an invalid length. [ 780.411425][T19097] netlink: 'syz.2.4643': attribute type 1 has an invalid length. [ 780.429997][T19097] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.4643'. [ 781.051627][T19118] netlink: 'syz.1.4652': attribute type 10 has an invalid length. [ 781.491580][T19123] syzkaller0: entered promiscuous mode [ 781.510995][T19123] syzkaller0: entered allmulticast mode [ 781.550735][T19124] netlink: 'syz.1.4655': attribute type 10 has an invalid length. [ 781.872446][T19135] syz.1.4657[19135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 781.872849][T19135] syz.1.4657[19135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 781.981820][T19142] netlink: set zone limit has 8 unknown bytes [ 784.260436][T19135] netlink: 'syz.1.4657': attribute type 49 has an invalid length. [ 784.269694][T19152] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4664'. [ 784.499337][T19157] netlink: 'syz.0.4666': attribute type 10 has an invalid length. [ 784.795201][T19165] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.4668'. [ 784.902948][T19165] netlink: zone id is out of range [ 784.925893][T19165] netlink: zone id is out of range [ 784.936661][T19165] netlink: zone id is out of range [ 784.941950][T19165] netlink: zone id is out of range [ 784.971607][T19165] netlink: zone id is out of range [ 785.004742][T19165] netlink: zone id is out of range [ 785.032086][T19165] netlink: zone id is out of range [ 785.064780][T19165] netlink: zone id is out of range [ 785.094295][T19165] netlink: zone id is out of range [ 785.210587][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 785.221510][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 785.230546][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 785.264754][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 785.291709][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 785.299404][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 785.369315][T17234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.602196][T17234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.703479][T19177] netlink: 'syz.0.4673': attribute type 21 has an invalid length. [ 785.720541][T19177] netlink: 'syz.0.4673': attribute type 1 has an invalid length. [ 785.729125][T19177] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4673'. [ 785.895147][T17234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.244797][T17234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.366542][T19189] syzkaller0: entered promiscuous mode [ 786.384761][T19189] syzkaller0: entered allmulticast mode [ 786.400481][T19191] netlink: 'syz.3.4678': attribute type 10 has an invalid length. [ 787.385102][ T51] Bluetooth: hci1: command tx timeout [ 788.926178][T19199] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.4681'. [ 789.253443][T17234] tipc: Left network mode [ 789.265040][T19218] netlink: 'syz.3.4686': attribute type 5 has an invalid length. [ 789.273009][T19218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4686'. [ 789.308047][T19168] chnl_net:caif_netlink_parms(): no params data found [ 789.466060][ T51] Bluetooth: hci1: command tx timeout [ 789.654725][T17234] ip6gretap0 (unregistering): left allmulticast mode [ 789.661486][T17234] ip6gretap0 (unregistering): left promiscuous mode [ 789.677503][T17234] Ÿë: port 1(ip6gretap0) entered disabled state [ 789.802743][T19233] netlink: 'syz.0.4687': attribute type 10 has an invalid length. [ 790.420982][T19168] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.452558][T19168] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.496189][T19168] bridge_slave_0: entered allmulticast mode [ 790.523527][T19168] bridge_slave_0: entered promiscuous mode [ 790.551808][T19168] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.562800][T19168] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.574880][T19168] bridge_slave_1: entered allmulticast mode [ 790.602256][T19168] bridge_slave_1: entered promiscuous mode [ 790.987204][T19168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.048364][T19168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.344103][T19168] team0: Port device team_slave_0 added [ 791.417098][T19168] team0: Port device team_slave_1 added [ 791.452826][T19168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.461098][T19168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.527752][T19168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.555297][ T51] Bluetooth: hci1: command tx timeout [ 791.595374][T19168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.602379][T19168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.697264][T19168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.784468][T19273] netlink: 'syz.3.4700': attribute type 10 has an invalid length. [ 791.965082][T19285] netlink: 'syz.0.4703': attribute type 10 has an invalid length. [ 791.986777][T19168] hsr_slave_0: entered promiscuous mode [ 792.001452][T19168] hsr_slave_1: entered promiscuous mode [ 792.009671][T19168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 792.017431][T19168] Cannot create hsr debugfs directory [ 792.291895][T17234] [ 792.294295][T17234] ====================================================== [ 792.301337][T17234] WARNING: possible circular locking dependency detected [ 792.308485][T17234] syzkaller #0 Not tainted [ 792.312930][T17234] ------------------------------------------------------ [ 792.319982][T17234] kworker/u4:6/17234 is trying to acquire lock: [ 792.326241][T17234] ffff88805eaa8d80 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 792.335835][T17234] [ 792.335835][T17234] but task is already holding lock: [ 792.343227][T17234] ffff888075d38768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 792.353621][T17234] [ 792.353621][T17234] which lock already depends on the new lock. [ 792.353621][T17234] [ 792.364029][T17234] [ 792.364029][T17234] the existing dependency chain (in reverse order) is: [ 792.373056][T17234] [ 792.373056][T17234] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 792.380808][T17234] __mutex_lock+0x135/0xc80 [ 792.385865][T17234] ieee80211_open+0x144/0x200 [ 792.391084][T17234] __dev_open+0x2cb/0x430 [ 792.395976][T17234] dev_open+0xab/0x190 [ 792.400581][T17234] team_add_slave+0x703/0x28a0 [ 792.405894][T17234] do_setlink+0xcde/0x3f40 [ 792.410851][T17234] rtnl_newlink+0x1848/0x2170 [ 792.416061][T17234] rtnetlink_rcv_msg+0x843/0xf90 [ 792.421531][T17234] netlink_rcv_skb+0x235/0x4c0 [ 792.426829][T17234] netlink_unicast+0x7b1/0x930 [ 792.432140][T17234] netlink_sendmsg+0x8d0/0xbf0 [ 792.437435][T17234] ____sys_sendmsg+0x61b/0x980 [ 792.442736][T17234] ___sys_sendmsg+0x2a6/0x360 [ 792.447955][T17234] __se_sys_sendmsg+0x1d0/0x2c0 [ 792.453355][T17234] do_syscall_64+0x55/0xb0 [ 792.458322][T17234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.464758][T17234] [ 792.464758][T17234] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 792.472944][T17234] __lock_acquire+0x37ef/0x7d80 [ 792.478361][T17234] lock_acquire+0x19e/0x420 [ 792.483408][T17234] __mutex_lock+0x135/0xc80 [ 792.488478][T17234] team_del_slave+0x31/0x1b0 [ 792.493616][T17234] team_device_event+0x297/0xa30 [ 792.499117][T17234] notifier_call_chain+0x18f/0x380 [ 792.504865][T17234] unregister_netdevice_many_notify+0x1037/0x1910 [ 792.511817][T17234] unregister_netdevice_queue+0x2e9/0x330 [ 792.518086][T17234] _cfg80211_unregister_wdev+0x16d/0x580 [ 792.524311][T17234] ieee80211_remove_interfaces+0x4b3/0x690 [ 792.530677][T17234] ieee80211_unregister_hw+0x5d/0x2a0 [ 792.536602][T17234] mac80211_hwsim_del_radio+0x289/0x480 [ 792.542713][T17234] hwsim_exit_net+0x58d/0x650 [ 792.547935][T17234] cleanup_net+0x707/0xbb0 [ 792.552889][T17234] process_scheduled_works+0xa60/0x1600 [ 792.558979][T17234] worker_thread+0xa5e/0xfe0 [ 792.564327][T17234] kthread+0x2fa/0x390 [ 792.568942][T17234] ret_from_fork+0x48/0x80 [ 792.573908][T17234] ret_from_fork_asm+0x11/0x20 [ 792.579249][T17234] [ 792.579249][T17234] other info that might help us debug this: [ 792.579249][T17234] [ 792.589488][T17234] Possible unsafe locking scenario: [ 792.589488][T17234] [ 792.596947][T17234] CPU0 CPU1 [ 792.602330][T17234] ---- ---- [ 792.607795][T17234] lock(&rdev->wiphy.mtx); [ 792.612317][T17234] lock(team->team_lock_key#2); [ 792.619891][T17234] lock(&rdev->wiphy.mtx); [ 792.626947][T17234] lock(team->team_lock_key#2); [ 792.631907][T17234] [ 792.631907][T17234] *** DEADLOCK *** [ 792.631907][T17234] [ 792.640060][T17234] 5 locks held by kworker/u4:6/17234: [ 792.645443][T17234] #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 792.656352][T17234] #1: ffffc90004177d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 792.666913][T17234] #2: ffffffff8e3c9ad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 792.676355][T17234] #3: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 792.686223][T17234] #4: ffff888075d38768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 792.697035][T17234] [ 792.697035][T17234] stack backtrace: [ 792.702935][T17234] CPU: 1 PID: 17234 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 792.710583][T17234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 792.720653][T17234] Workqueue: netns cleanup_net [ 792.725457][T17234] Call Trace: [ 792.728752][T17234] [ 792.731697][T17234] dump_stack_lvl+0x18c/0x250 [ 792.736397][T17234] ? load_image+0x420/0x420 [ 792.740938][T17234] ? show_regs_print_info+0x20/0x20 [ 792.746160][T17234] ? print_circular_bug+0x12b/0x1a0 [ 792.751386][T17234] check_noncircular+0x2fc/0x400 [ 792.756350][T17234] ? print_deadlock_bug+0x5d0/0x5d0 [ 792.761574][T17234] ? lockdep_lock+0xf5/0x230 [ 792.766200][T17234] ? mark_lock+0x94/0x320 [ 792.770553][T17234] ? _find_first_zero_bit+0xd6/0x100 [ 792.775868][T17234] __lock_acquire+0x37ef/0x7d80 [ 792.780746][T17234] ? verify_lock_unused+0x140/0x140 [ 792.785966][T17234] ? verify_lock_unused+0x140/0x140 [ 792.791186][T17234] ? __up_read+0x2b8/0x6b0 [ 792.795617][T17234] ? asan.module_dtor+0x20/0x20 [ 792.800484][T17234] lock_acquire+0x19e/0x420 [ 792.805094][T17234] ? team_del_slave+0x31/0x1b0 [ 792.809878][T17234] ? __might_sleep+0xe0/0xe0 [ 792.814481][T17234] ? read_lock_is_recursive+0x20/0x20 [ 792.819896][T17234] __mutex_lock+0x135/0xc80 [ 792.824418][T17234] ? team_del_slave+0x31/0x1b0 [ 792.829216][T17234] ? __mutex_lock+0x30d/0xc80 [ 792.833925][T17234] ? team_del_slave+0x31/0x1b0 [ 792.838728][T17234] ? mutex_lock_nested+0x20/0x20 [ 792.843701][T17234] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 792.849385][T17234] team_del_slave+0x31/0x1b0 [ 792.854003][T17234] team_device_event+0x297/0xa30 [ 792.858969][T17234] notifier_call_chain+0x18f/0x380 [ 792.864117][T17234] unregister_netdevice_many_notify+0x1037/0x1910 [ 792.870563][T17234] ? unregister_netdevice_many+0x20/0x20 [ 792.876248][T17234] ? kernfs_remove_by_name_ns+0x117/0x150 [ 792.882003][T17234] ? __lock_acquire+0x7d80/0x7d80 [ 792.887056][T17234] unregister_netdevice_queue+0x2e9/0x330 [ 792.892795][T17234] ? list_netdevice+0x730/0x730 [ 792.897666][T17234] ? kernfs_remove_by_name_ns+0x117/0x150 [ 792.903436][T17234] _cfg80211_unregister_wdev+0x16d/0x580 [ 792.909107][T17234] ieee80211_remove_interfaces+0x4b3/0x690 [ 792.914966][T17234] ? ieee80211_do_stop+0x2000/0x2000 [ 792.920281][T17234] ? rcu_is_watching+0x15/0xb0 [ 792.925105][T17234] ieee80211_unregister_hw+0x5d/0x2a0 [ 792.930508][T17234] mac80211_hwsim_del_radio+0x289/0x480 [ 792.936078][T17234] ? rhashtable_remove_fast+0xc00/0xc00 [ 792.941651][T17234] hwsim_exit_net+0x58d/0x650 [ 792.946353][T17234] ? hwsim_init_net+0x90/0x90 [ 792.951061][T17234] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 792.956927][T17234] cleanup_net+0x707/0xbb0 [ 792.961366][T17234] ? ops_free_list+0x3b0/0x3b0 [ 792.966155][T17234] ? _raw_spin_unlock_irq+0x23/0x50 [ 792.971379][T17234] ? process_scheduled_works+0x975/0x1600 [ 792.977215][T17234] ? process_scheduled_works+0x975/0x1600 [ 792.982962][T17234] process_scheduled_works+0xa60/0x1600 [ 792.988544][T17234] ? worker_attach_to_pool+0x370/0x370 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 792.994027][T17234] ? assign_work+0x3cc/0x5d0 [ 792.998641][T17234] worker_thread+0xa5e/0xfe0 [ 793.003270][T17234] ? _raw_spin_unlock+0x40/0x40 [ 793.008141][T17234] ? __kthread_parkme+0x71/0x1c0 [ 793.013126][T17234] kthread+0x2fa/0x390 [ 793.017207][T17234] ? pr_cont_work+0x550/0x550 [ 793.021898][T17234] ? kthread_blkcg+0xd0/0xd0 [ 793.026506][T17234] ret_from_fork+0x48/0x80 [ 793.031124][T17234] ? kthread_blkcg+0xd0/0xd0 [ 793.035732][T17234] ret_from_fork_asm+0x11/0x20 [ 793.040550][T17234] [ 793.067430][T17234] team0: Port device wlan1 removed [ 793.628757][T17234] hsr_slave_0: left promiscuous mode [ 793.635122][ T51] Bluetooth: hci1: command tx timeout [ 793.674828][T17234] bridge_slave_1: left allmulticast mode [ 793.680574][T17234] bridge_slave_1: left promiscuous mode [ 793.707031][T17234] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.759583][T17234] veth1_macvtap: left promiscuous mode [ 793.774864][T17234] veth0_macvtap: left promiscuous mode [ 793.780564][T17234] veth1_vlan: left promiscuous mode [ 793.795234][T17234] veth0_vlan: left promiscuous mode [ 793.966586][T17234] team0 (unregistering): Port device geneve1 removed [ 794.031040][T17234] team0 (unregistering): Port device virt_wifi0 removed [ 794.102878][T17234] team0 (unregistering): Port device team_slave_1 removed [ 794.134402][T17234] team0 (unregistering): Port device team_slave_0 removed [ 794.866214][T17234] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.951799][T17234] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.033562][T17234] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.136112][T17234] bond0: (slave netdevsim0): Releasing backup interface [ 795.156642][T17234] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.345616][T17234] tipc: Left network mode [ 796.253609][T17234] hsr_slave_0: left promiscuous mode [ 796.259836][T17234] bridge_slave_1: left allmulticast mode [ 796.269240][T17234] bridge_slave_1: left promiscuous mode [ 796.275367][T17234] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.284111][T17234] bridge_slave_0: left allmulticast mode [ 796.290507][T17234] bridge_slave_0: left promiscuous mode [ 796.296749][T17234] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.308979][T17234] veth1_macvtap: left allmulticast mode [ 796.314574][T17234] veth1_macvtap: left promiscuous mode [ 796.321528][T17234] veth0_macvtap: left promiscuous mode [ 796.328857][T17234] veth1_vlan: left promiscuous mode [ 796.334160][T17234] veth0_vlan: left promiscuous mode [ 796.439525][T17234] team0 (unregistering): Port device geneve1 removed [ 796.634684][T17234] team0 (unregistering): Port device team_slave_1 removed [ 796.680195][T17234] team0 (unregistering): Port device team_slave_0 removed [ 796.710895][T17234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.748216][T17234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.857943][T17234] bond0 (unregistering): Released all slaves [ 797.242210][T17234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.301763][T17234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.351818][T17234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.411778][T17234] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.572562][T17234] hsr_slave_0: left promiscuous mode [ 798.579285][T17234] hsr_slave_1: left promiscuous mode [ 798.590680][T17234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.599426][T17234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.607467][T17234] bridge_slave_1: left allmulticast mode [ 798.613141][T17234] bridge_slave_1: left promiscuous mode [ 798.619902][T17234] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.628840][T17234] bridge_slave_0: left allmulticast mode [ 798.634636][T17234] bridge_slave_0: left promiscuous mode [ 798.640398][T17234] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.654432][T17234] hsr_slave_0: left promiscuous mode [ 798.660580][T17234] bridge_slave_1: left allmulticast mode [ 798.667236][T17234] bridge_slave_1: left promiscuous mode [ 798.673011][T17234] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.687384][T17234] veth1_macvtap: left promiscuous mode [ 798.692955][T17234] veth0_macvtap: left promiscuous mode [ 798.700147][T17234] veth1_vlan: left allmulticast mode [ 798.705562][T17234] veth1_vlan: left promiscuous mode [ 798.710888][T17234] veth0_vlan: left promiscuous mode [ 798.935828][T17234] team0 (unregistering): Port device team_slave_1 removed [ 798.964978][T17234] team0 (unregistering): Port device team_slave_0 removed [ 798.990139][T17234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.016661][T17234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.085393][T17234] bond0 (unregistering): Released all slaves [ 799.191183][T17234] team0 (unregistering): Port device geneve1 removed [ 799.247138][T17234] team0 (unregistering): Port device macvlan1 removed [ 799.340277][T17234] team0 (unregistering): Port device team_slave_1 removed [ 799.375292][T17234] team0 (unregistering): Port device team_slave_0 removed [ 799.399684][T17234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.422487][T17234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.495759][T17234] bond0 (unregistering): Released all slaves [ 800.072644][T17234] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.134085][T17234] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.190294][T17234] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.242451][T17234] bond0: (slave netdevsim0): Releasing backup interface [ 800.251496][T17234] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.403517][T17234] tipc: Left network mode [ 801.261125][T17234] bridge_slave_1: left allmulticast mode [ 801.266942][T17234] bridge_slave_1: left promiscuous mode [ 801.272674][T17234] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.287165][T17234] veth1_vlan: left promiscuous mode [ 801.415362][T17234] team0 (unregistering): Port device geneve1 removed [ 801.573505][T17234] team0 (unregistering): Port device team_slave_1 removed [ 801.632268][T17234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.662498][T17234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.738762][T17234] bond0 (unregistering): Released all slaves