last executing test programs: 6.07732382s ago: executing program 1 (id=12673): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x19c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x12b020, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x250, 0x0, 0x0, 0x9, 0x0, 0xd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d72b07b3611fb59187e00000000001000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.676080874s ago: executing program 1 (id=12698): r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) (fail_nth: 2) 2.378767462s ago: executing program 2 (id=12701): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x20000045) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, 0x0, 0x67699ee7, 0x0, 0x0, 0xc3000, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x1}, {0x2}], 0x10, 0x3}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x22, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.265521464s ago: executing program 3 (id=12702): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000800000000000000000008510000002000000d6000000000000009500007b000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000840)=""/146}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x4) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@isdn={0x22, 0x4, 0x40, 0x0, 0xb}, 0x80, 0x0}, 0x400c040) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.265024974s ago: executing program 2 (id=12703): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r7}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pS \x00'}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, r9, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x29, &(0x7f0000000380)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x937d485962daf5c5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x94bb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000000500)='GPL\x00', 0x7f, 0x97, &(0x7f0000000540)=""/151, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1d, r9, 0x8, &(0x7f00000006c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x0, 0x1, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000980)=[r10, r5, r11], &(0x7f0000000a00)=[{0x5, 0x4, 0x1, 0x3}], 0x10, 0xffff}, 0x94) 2.171265697s ago: executing program 3 (id=12706): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0xc2ba, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000240)="0f9a6a9a9b51046536033e9b2da434d22154920f98b3284a16f94a6dd5beeddb6e77cfd9bd67", 0x26}, {&(0x7f00000006c0)="eb8567177aeb4563c1d5e2bcb846f074ed8f4dc36c6b7b8f1306356d0859ce720bf20b26125fafed0e96ba946caa5ac670c674053b0499bfeefbf0d5c76c2415e4ed0d8fe7b4ffc54ee3e9558b43a8fd943ad751ec20de0d3c9b7b623f8218e0dce3af18b4e07914056b33ef1f5765beea25e148bbaeafcf0f8ec80d571221cd0ce06ed8b13d7e6f3d154a3288cf36e5b9fef431b88f3fa502d09e4523919934693f4d5569dc17f7525a0b2e38f4b571900056a3353fbda26186c6e2f5b2bca27985206671862003777c1b31c0f1671452307d513076d4", 0xd7}], 0x2, &(0x7f0000000800)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@generic={0x94, 0xc, "0995a5b2f4ace4a900ae"}, @cipso={0x86, 0x2e, 0x0, [{0x2, 0x5, "1d885f"}, {0x1, 0x4, "9581"}, {0x0, 0x4, 'K*'}, {0x7, 0x3, "13"}, {0x6, 0x3, "e4"}, {0x2, 0xa, "e9ec9c29711ea96e"}, {0x6, 0xb, "ba9c1061f27d14e924"}]}, @noop]}}}, @ip_retopts={{0x104, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x46, 0x0, 0x7, [0x3ff, 0x6, 0x8, 0xd854, 0x0, 0x2, 0x0, 0x5, 0x3ff]}, @cipso={0x86, 0x1f, 0x0, [{0x2, 0x2}, {0x6, 0x10, "0e06861108defd7e632bf93cc13b"}, {0x0, 0x7, "0b1d3df2e8"}]}, @timestamp={0x44, 0x1c, 0x66, 0x0, 0x1, [0x101, 0x10000, 0x4, 0x5, 0x168af9a7, 0xfff]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x88, [@multicast1, @multicast2, @remote, @rand_addr=0x64010100, @loopback, @remote]}, @generic={0x94, 0x7, "59bad4376d"}, @timestamp_prespec={0x44, 0x34, 0xe7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x3ff}, {@multicast1, 0x7}, {@loopback, 0x3}, {@loopback, 0x6f}, {@rand_addr=0x64010102, 0x7ff}, {@multicast1, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0x8, [{@remote, 0x6}, {@broadcast, 0x10}, {@rand_addr=0x64010100, 0xf60913b4}, {@loopback, 0xffff8001}, {@multicast2, 0x7fffffff}, {@remote, 0x3}]}, @noop]}}}], 0x158}, 0x4008005) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r3, 0x4, r3}, 0x10) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x2e, 0x0, 0xef, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0xa, 0x5, 0x0) 1.994060261s ago: executing program 4 (id=12707): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0xfffffffc}]}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x13, 0x0, 0x0) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x2bf, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000100"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r4, 0x0, 0x0}, 0x10) r5 = socket$kcm(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) sendmsg$inet(r5, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000600)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000000580)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167"}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_ttl={{0x0, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x20004044) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20) close(r0) 1.959280272s ago: executing program 3 (id=12708): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') ioctl$TUNSETFILTEREBPF(r3, 0xb702, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008005) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') setsockopt$sock_attach_bpf(r6, 0x6, 0x43, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x201, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188f7b62aa73f72cc9f0ba1f8483700000000010000000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000008000004c0000004c00000008000000100000000000001203000000100000000000000100000000160044001000000000000008010000000e00000000000002030000000a00000000000008000000000f00000000000007000000000061"], &(0x7f00000003c0)=""/22, 0x6c, 0x16, 0x1, 0x0, 0x10000, @value=r9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x3, 0x8b7, 0x2, 0x40, r4, 0x6, '\x00', 0x0, r10, 0x4, 0x0, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000500)}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d08020100000004faffa1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) 1.818280375s ago: executing program 2 (id=12709): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x19c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x12b020, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x250, 0x0, 0x0, 0x9, 0x0, 0xd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d72b07b3611fb59187e00000000001000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.817041365s ago: executing program 0 (id=12710): socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="080000000400000004000000090000"], 0x50) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) 1.694971848s ago: executing program 4 (id=12711): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.694601558s ago: executing program 1 (id=12712): r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x10000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f8feffff7f440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x880) 1.693889988s ago: executing program 3 (id=12713): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) close(r2) (async) socket$kcm(0x10, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000540)=""/15, 0x2}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 1.593761001s ago: executing program 4 (id=12714): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x20000045) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, 0x0, 0x67699ee7, 0x0, 0x0, 0xc3000, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x1}, {0x2}], 0x10, 0x3}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x22, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.497321963s ago: executing program 1 (id=12715): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, 0x0, 0x22) socket$kcm(0x21, 0x0, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x8, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000000f2ffffffffffffff005098fa533f06c20d6429356e4c93b5eccffa2100bb50fac25afe1b3259bb2435409628a5ead59adeb74338770c31c811762ba9accd00b92aa72ca499133b9ddc5ce2e079fcc45385fe"], 0x48) socket$kcm(0x21, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0x1}, 0x100e64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x180, 0x80, r1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={r1, &(0x7f0000000600), &(0x7f0000000980)=""/164}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/180}, 0x20) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 733.430352ms ago: executing program 3 (id=12716): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400a000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x40000, 0x39c}, 0x8010) 725.023892ms ago: executing program 4 (id=12717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x4) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@isdn={0x22, 0x4, 0x40, 0x0, 0xb}, 0x80, 0x0}, 0x400c040) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 698.573143ms ago: executing program 0 (id=12718): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0xc2ba, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000240)="0f9a6a9a9b51046536033e9b2da434d22154920f98b3284a16f94a6dd5beeddb6e77cfd9bd67", 0x26}, {&(0x7f00000006c0)="eb8567177aeb4563c1d5e2bcb846f074ed8f4dc36c6b7b8f1306356d0859ce720bf20b26125fafed0e96ba946caa5ac670c674053b0499bfeefbf0d5c76c2415e4ed0d8fe7b4ffc54ee3e9558b43a8fd943ad751ec20de0d3c9b7b623f8218e0dce3af18b4e07914056b33ef1f5765beea25e148bbaeafcf0f8ec80d571221cd0ce06ed8b13d7e6f3d154a3288cf36e5b9fef431b88f3fa502d09e4523919934693f4d5569dc17f7525a0b2e38f4b571900056a3353fbda26186c6e2f5b2bca27985206671862003777c1b31c0f1671452307d513076d4", 0xd7}], 0x2, &(0x7f0000000800)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@generic={0x94, 0xc, "0995a5b2f4ace4a900ae"}, @cipso={0x86, 0x2e, 0x0, [{0x2, 0x5, "1d885f"}, {0x1, 0x4, "9581"}, {0x0, 0x4, 'K*'}, {0x7, 0x3, "13"}, {0x6, 0x3, "e4"}, {0x2, 0xa, "e9ec9c29711ea96e"}, {0x6, 0xb, "ba9c1061f27d14e924"}]}, @noop]}}}, @ip_retopts={{0x104, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x46, 0x0, 0x7, [0x3ff, 0x6, 0x8, 0xd854, 0x0, 0x2, 0x0, 0x5, 0x3ff]}, @cipso={0x86, 0x1f, 0x0, [{0x2, 0x2}, {0x6, 0x10, "0e06861108defd7e632bf93cc13b"}, {0x0, 0x7, "0b1d3df2e8"}]}, @timestamp={0x44, 0x1c, 0x66, 0x0, 0x1, [0x101, 0x10000, 0x4, 0x5, 0x168af9a7, 0xfff]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x88, [@multicast1, @multicast2, @remote, @rand_addr=0x64010100, @loopback, @remote]}, @generic={0x94, 0x7, "59bad4376d"}, @timestamp_prespec={0x44, 0x34, 0xe7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x3ff}, {@multicast1, 0x7}, {@loopback, 0x3}, {@loopback, 0x6f}, {@rand_addr=0x64010102, 0x7ff}, {@multicast1, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0x8, [{@remote, 0x6}, {@broadcast, 0x10}, {@rand_addr=0x64010100, 0xf60913b4}, {@loopback, 0xffff8001}, {@multicast2, 0x7fffffff}, {@remote, 0x3}]}, @noop]}}}], 0x158}, 0x4008005) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r3, 0x4, r3}, 0x10) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x2e, 0x0, 0xef, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0xa, 0x5, 0x0) 637.690595ms ago: executing program 2 (id=12719): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x2, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0xe80, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x600, 0x0, 0x0, 0x0}, 0x50) 627.640525ms ago: executing program 1 (id=12720): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='.\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x1, 0x0}, 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0xffffff8a}, [@map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1a88f0b5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f0000000440)='syzkaller\x00', 0xd, 0xb4, &(0x7f0000000540)=""/180, 0x41000, 0x0, '\x00', r6, @fallback=0x7, r7, 0x8, &(0x7f0000000840)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r2, 0x7, &(0x7f0000000a40)=[r10, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x5, 0x4, 0xc, 0x8}, {0x3, 0x4, 0x6, 0x1}, {0x0, 0x5, 0xd, 0x7}, {0x5, 0x3, 0x0, 0x9}, {0x4, 0x4, 0x2}, {0x1, 0x3, 0xe, 0xa}, {0x1, 0x1, 0x3, 0x5}], 0x10, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x1fc, 0x78b, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r13 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8807, 0x0, 0x2, 0x8, 0x0, 0x76385604, 0xffff, 0x0, 0x2, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r15) recvmsg$unix(r14, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r16, 0x4) 573.449786ms ago: executing program 3 (id=12721): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000001280)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x10020) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 493.944128ms ago: executing program 0 (id=12722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0xfffffffc}]}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x13, 0x0, 0x0) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x2bf, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000100"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r4, 0x0, 0x0}, 0x10) r5 = socket$kcm(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) sendmsg$inet(r5, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000600)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000000580)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167"}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_ttl={{0x0, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x20004044) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20) close(r0) 483.086348ms ago: executing program 4 (id=12723): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="05004800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100"/28], 0x50) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)}, 0x200400c4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b001105142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r7, 0x0, &(0x7f0000000a80)=""/168}, 0x20) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a3, &(0x7f0000000080)) 362.455091ms ago: executing program 2 (id=12724): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') ioctl$TUNSETFILTEREBPF(r3, 0xb702, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008005) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') setsockopt$sock_attach_bpf(r6, 0x6, 0x43, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x201, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188f7b62aa73f72cc9f0ba1f8483700000000010000000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000008000004c0000004c00000008000000100000000000001203000000100000000000000100000000160044001000000000000008010000000e00000000000002030000000a00000000000008000000000f00000000000007000000000061"], &(0x7f00000003c0)=""/22, 0x6c, 0x16, 0x1, 0x0, 0x10000, @value=r9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x3, 0x8b7, 0x2, 0x40, r4, 0x6, '\x00', 0x0, r10, 0x4, 0x0, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000500)}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d08020100000004faffa1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) 343.434902ms ago: executing program 0 (id=12725): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 251.467314ms ago: executing program 1 (id=12726): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_subtree(r2, &(0x7f0000000500)={[{0x2d, 'cpuset'}]}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) socket$kcm(0xf, 0x3, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfe33) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000a80)={&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x4011) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000004040000"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r4 = socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="934300005200138718a35a4e00d5859c0a"], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x82d7) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc084) 212.430605ms ago: executing program 0 (id=12727): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) (async) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 159.724147ms ago: executing program 2 (id=12728): socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="080000000400000004000000090000000000"], 0x50) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) 87.241728ms ago: executing program 4 (id=12729): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 0s ago: executing program 0 (id=12730): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000010000003000000030000000020000000000000001000004ffffffff0000000003000000fcffffff00000000000000020000000000000000000000060200000000"], 0x0, 0x4a}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, r1, 0x20, 0x14, 0x0, @void, @value=r2}, 0x20) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x144540f2249c4cec) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006002100036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017", 0x59}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="180800bb315e9ff7b28c40e57fbe001bc81a0000001a0000000001851000000600000018001000", @ANYRES32, @ANYBLOB="0000000000000000660800000000010118110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000360a00010000000018160000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x10111, 0x0, 0xc2ba, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): netlink: 'syz.0.11081': attribute type 39 has an invalid length. [ 1720.849129][ T5217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11082'. [ 1720.911197][ T5219] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11083'. [ 1721.086977][ T5223] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11084'. [ 1721.141127][ T5226] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11085'. [ 1722.109596][ T5254] netlink: 'syz.1.11096': attribute type 39 has an invalid length. [ 1723.137382][ T5264] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11098'. [ 1725.236134][ T5290] netlink: 'syz.3.11108': attribute type 39 has an invalid length. [ 1725.669567][ T5302] FAULT_INJECTION: forcing a failure. [ 1725.669567][ T5302] name failslab, interval 1, probability 0, space 0, times 0 [ 1725.682794][ T5302] CPU: 1 PID: 5302 Comm: syz.3.11111 Not tainted syzkaller #0 [ 1725.690270][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1725.700335][ T5302] Call Trace: [ 1725.703623][ T5302] [ 1725.706560][ T5302] dump_stack_lvl+0x188/0x24e [ 1725.711264][ T5302] ? show_regs_print_info+0x12/0x12 [ 1725.716477][ T5302] ? load_image+0x410/0x410 [ 1725.720978][ T5302] ? __might_sleep+0xd0/0xd0 [ 1725.725566][ T5302] ? __lock_acquire+0x7c40/0x7c40 [ 1725.730590][ T5302] should_fail_ex+0x390/0x4c0 [ 1725.735269][ T5302] should_failslab+0x5/0x20 [ 1725.739760][ T5302] slab_pre_alloc_hook+0x59/0x300 [ 1725.744811][ T5302] ? tomoyo_encode+0x28a/0x550 [ 1725.749592][ T5302] __kmem_cache_alloc_node+0x4f/0x270 [ 1725.754987][ T5302] ? tomoyo_encode+0x28a/0x550 [ 1725.759759][ T5302] __kmalloc+0xa3/0x240 [ 1725.763924][ T5302] tomoyo_encode+0x28a/0x550 [ 1725.768514][ T5302] tomoyo_realpath_from_path+0x578/0x5c0 [ 1725.774143][ T5302] ? tomoyo_domain+0xd2/0x120 [ 1725.778818][ T5302] ? tomoyo_path_number_perm+0x205/0x650 [ 1725.784445][ T5302] tomoyo_path_number_perm+0x22f/0x650 [ 1725.789902][ T5302] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1725.795363][ T5302] ? ktime_get+0x7b/0x270 [ 1725.799713][ T5302] ? __fget_files+0x28/0x460 [ 1725.804305][ T5302] security_file_ioctl+0x6c/0xa0 [ 1725.809248][ T5302] __se_sys_ioctl+0x48/0x170 [ 1725.813837][ T5302] do_syscall_64+0x4c/0xa0 [ 1725.818249][ T5302] ? clear_bhb_loop+0x60/0xb0 [ 1725.822920][ T5302] ? clear_bhb_loop+0x60/0xb0 [ 1725.827593][ T5302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1725.833478][ T5302] RIP: 0033:0x7f723fd9e0d9 [ 1725.837892][ T5302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.857493][ T5302] RSP: 002b:00007f7240c4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1725.865903][ T5302] RAX: ffffffffffffffda RBX: 00007f7240025fa0 RCX: 00007f723fd9e0d9 [ 1725.873867][ T5302] RDX: 0000000000000000 RSI: 0000000000005411 RDI: 0000000000000006 [ 1725.881833][ T5302] RBP: 00007f7240c4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1725.889797][ T5302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.897760][ T5302] R13: 00007f7240026038 R14: 00007f7240025fa0 R15: 00007ffcb52c2778 [ 1725.905733][ T5302] [ 1725.966264][ T5302] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1728.071056][ T5323] netlink: 'syz.2.11121': attribute type 39 has an invalid length. [ 1729.070865][ T5351] __nla_validate_parse: 1 callbacks suppressed [ 1729.070901][ T5351] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.11132'. [ 1730.072307][ T5359] netlink: 'syz.2.11134': attribute type 39 has an invalid length. [ 1730.098416][ T5362] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11136'. [ 1730.171786][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.178197][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.626264][ T5378] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11140'. [ 1731.335895][ T5395] device sit0 entered promiscuous mode [ 1731.637213][ T5406] netlink: 'syz.3.11150': attribute type 39 has an invalid length. [ 1731.855976][ T5415] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11152'. [ 1732.536868][ T5422] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.11153'. [ 1732.566178][ T5426] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11166'. [ 1732.583020][ T5422] netlink: zone id is out of range [ 1732.603267][ T5422] netlink: zone id is out of range [ 1732.865878][ T5422] netlink: zone id is out of range [ 1732.871088][ T5422] netlink: zone id is out of range [ 1732.902960][ T5422] netlink: zone id is out of range [ 1732.923941][ T5422] netlink: zone id is out of range [ 1732.947245][ T5422] netlink: zone id is out of range [ 1732.959479][ T5422] netlink: get zone limit has 8 unknown bytes [ 1733.251722][ T5442] netlink: 'syz.0.11159': attribute type 10 has an invalid length. [ 1733.518160][ T5442] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1733.690126][ T5452] netlink: 'syz.1.11165': attribute type 39 has an invalid length. [ 1733.825700][ T5456] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11167'. [ 1734.079980][ T5462] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.11171'. [ 1734.272161][ T5471] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11172'. [ 1734.807522][ T5492] FAULT_INJECTION: forcing a failure. [ 1734.807522][ T5492] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.858418][ T5492] CPU: 1 PID: 5492 Comm: syz.0.11180 Not tainted syzkaller #0 [ 1734.865943][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1734.875997][ T5492] Call Trace: [ 1734.879271][ T5492] [ 1734.882195][ T5492] dump_stack_lvl+0x188/0x24e [ 1734.886882][ T5492] ? show_regs_print_info+0x12/0x12 [ 1734.892078][ T5492] ? load_image+0x410/0x410 [ 1734.896579][ T5492] ? __might_sleep+0xd0/0xd0 [ 1734.901162][ T5492] ? __lock_acquire+0x7c40/0x7c40 [ 1734.906209][ T5492] should_fail_ex+0x390/0x4c0 [ 1734.910914][ T5492] should_failslab+0x5/0x20 [ 1734.915416][ T5492] slab_pre_alloc_hook+0x59/0x300 [ 1734.920443][ T5492] ? apparmor_sk_alloc_security+0x74/0x100 [ 1734.926250][ T5492] __kmem_cache_alloc_node+0x4f/0x270 [ 1734.931616][ T5492] ? apparmor_sk_alloc_security+0x74/0x100 [ 1734.937422][ T5492] kmalloc_trace+0x26/0xe0 [ 1734.941838][ T5492] apparmor_sk_alloc_security+0x74/0x100 [ 1734.947484][ T5492] security_sk_alloc+0x6a/0xa0 [ 1734.952251][ T5492] sk_prot_alloc+0x101/0x210 [ 1734.956842][ T5492] ? sk_alloc+0x20/0x330 [ 1734.961083][ T5492] sk_alloc+0x36/0x330 [ 1734.965148][ T5492] ? bpf_ctx_init+0x154/0x190 [ 1734.969823][ T5492] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1734.975196][ T5492] ? __fget_files+0x28/0x460 [ 1734.979788][ T5492] ? __fget_files+0x3fc/0x460 [ 1734.984474][ T5492] ? cpu_online+0xa0/0xa0 [ 1734.988973][ T5492] bpf_prog_test_run+0x31c/0x390 [ 1734.994003][ T5492] __sys_bpf+0x62b/0x780 [ 1734.998252][ T5492] ? bpf_link_show_fdinfo+0x380/0x380 [ 1735.003637][ T5492] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1735.009800][ T5492] __x64_sys_bpf+0x78/0x90 [ 1735.014220][ T5492] do_syscall_64+0x4c/0xa0 [ 1735.018636][ T5492] ? clear_bhb_loop+0x60/0xb0 [ 1735.023312][ T5492] ? clear_bhb_loop+0x60/0xb0 [ 1735.027991][ T5492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1735.033878][ T5492] RIP: 0033:0x7f870b79e0d9 [ 1735.038289][ T5492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.057892][ T5492] RSP: 002b:00007f870c5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1735.066302][ T5492] RAX: ffffffffffffffda RBX: 00007f870ba25fa0 RCX: 00007f870b79e0d9 [ 1735.074297][ T5492] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 1735.082266][ T5492] RBP: 00007f870c5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.090239][ T5492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.098209][ T5492] R13: 00007f870ba26038 R14: 00007f870ba25fa0 R15: 00007fff7a95bd28 [ 1735.106188][ T5492] [ 1736.358031][ T5522] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11189'. [ 1736.453940][ T5528] netlink: 'syz.0.11191': attribute type 10 has an invalid length. [ 1736.476855][ T5528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.610832][ T5528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.618514][ T5528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1736.687702][ T5528] team0: Port device bridge0 added [ 1736.710177][ T5533] netlink: 'syz.1.11193': attribute type 13 has an invalid length. [ 1736.766733][ T5537] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.11195'. [ 1737.203620][ T5547] netlink: 'syz.4.11199': attribute type 10 has an invalid length. [ 1737.899141][ T5561] netlink: 'syz.4.11201': attribute type 29 has an invalid length. [ 1737.929128][ T5561] netlink: 'syz.4.11201': attribute type 29 has an invalid length. [ 1737.980540][ T5559] netlink: 'syz.4.11201': attribute type 29 has an invalid length. [ 1738.462195][ T5585] netlink: 'syz.1.11211': attribute type 10 has an invalid length. [ 1741.923617][ T5604] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.11217'. [ 1742.919807][ T5611] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11219'. [ 1743.165797][ T5630] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11225'. [ 1743.285047][ T5633] netlink: 'syz.1.11228': attribute type 10 has an invalid length. [ 1743.348734][ T5635] netlink: 'syz.4.11226': attribute type 10 has an invalid length. [ 1743.366046][ T5633] netlink: 184 bytes leftover after parsing attributes in process `syz.1.11228'. [ 1743.411626][ T5639] netlink: 184 bytes leftover after parsing attributes in process `syz.4.11226'. [ 1743.595311][ T5647] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11233'. [ 1743.695038][ T5651] FAULT_INJECTION: forcing a failure. [ 1743.695038][ T5651] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.708364][ T5651] CPU: 0 PID: 5651 Comm: syz.4.11234 Not tainted syzkaller #0 [ 1743.715869][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1743.725943][ T5651] Call Trace: [ 1743.729227][ T5651] [ 1743.732186][ T5651] dump_stack_lvl+0x188/0x24e [ 1743.736902][ T5651] ? show_regs_print_info+0x12/0x12 [ 1743.742121][ T5651] ? load_image+0x410/0x410 [ 1743.746649][ T5651] ? __might_sleep+0xd0/0xd0 [ 1743.751259][ T5651] ? __lock_acquire+0x7c40/0x7c40 [ 1743.756313][ T5651] should_fail_ex+0x390/0x4c0 [ 1743.761015][ T5651] should_failslab+0x5/0x20 [ 1743.765531][ T5651] slab_pre_alloc_hook+0x59/0x300 [ 1743.770584][ T5651] kmem_cache_alloc_node+0x5a/0x310 [ 1743.775792][ T5651] ? __alloc_skb+0xf9/0x7d0 [ 1743.780319][ T5651] __alloc_skb+0xf9/0x7d0 [ 1743.784670][ T5651] netlink_sendmsg+0x654/0xbd0 [ 1743.789467][ T5651] ? netlink_getsockopt+0x550/0x550 [ 1743.794685][ T5651] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1743.800286][ T5651] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1743.805579][ T5651] ? security_socket_sendmsg+0x7c/0xa0 [ 1743.811055][ T5651] ? netlink_getsockopt+0x550/0x550 [ 1743.816278][ T5651] ____sys_sendmsg+0x5ed/0x9a0 [ 1743.821112][ T5651] ? __sys_sendmsg_sock+0x30/0x30 [ 1743.826150][ T5651] ? __import_iovec+0x306/0x510 [ 1743.831032][ T5651] ? import_iovec+0x6f/0xa0 [ 1743.835556][ T5651] ___sys_sendmsg+0x2a2/0x360 [ 1743.840259][ T5651] ? __sys_sendmsg+0x2a0/0x2a0 [ 1743.845079][ T5651] ? trace_call_bpf+0xbf/0x6b0 [ 1743.849905][ T5651] __se_sys_sendmsg+0x1c3/0x2b0 [ 1743.854764][ T5651] ? ct_nmi_exit+0x145/0x1c0 [ 1743.859369][ T5651] ? __x64_sys_sendmsg+0x80/0x80 [ 1743.864379][ T5651] ? lockdep_hardirqs_on+0x94/0x140 [ 1743.869604][ T5651] do_syscall_64+0x4c/0xa0 [ 1743.874069][ T5651] ? clear_bhb_loop+0x60/0xb0 [ 1743.878761][ T5651] ? clear_bhb_loop+0x60/0xb0 [ 1743.883456][ T5651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1743.889362][ T5651] RIP: 0033:0x7f951cd9e0d9 [ 1743.893786][ T5651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.913407][ T5651] RSP: 002b:00007f951dc49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1743.921829][ T5651] RAX: ffffffffffffffda RBX: 00007f951d025fa0 RCX: 00007f951cd9e0d9 [ 1743.929803][ T5651] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1743.937780][ T5651] RBP: 00007f951dc49090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.945755][ T5651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.953733][ T5651] R13: 00007f951d026038 R14: 00007f951d025fa0 R15: 00007ffebcc40f18 [ 1743.961745][ T5651] [ 1744.258908][ T5656] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11236'. [ 1744.711426][ T5669] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11241'. [ 1744.924363][ T5672] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11243'. [ 1745.134572][ T5684] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11247'. [ 1745.982562][ T5709] netlink: 'syz.4.11256': attribute type 10 has an invalid length. [ 1746.087496][ T5711] FAULT_INJECTION: forcing a failure. [ 1746.087496][ T5711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1746.114437][ T5711] CPU: 0 PID: 5711 Comm: syz.0.11258 Not tainted syzkaller #0 [ 1746.121956][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1746.132107][ T5711] Call Trace: [ 1746.135383][ T5711] [ 1746.138307][ T5711] dump_stack_lvl+0x188/0x24e [ 1746.142987][ T5711] ? show_regs_print_info+0x12/0x12 [ 1746.148193][ T5711] ? load_image+0x410/0x410 [ 1746.152711][ T5711] ? __lock_acquire+0x7c40/0x7c40 [ 1746.157736][ T5711] ? check_stack_object+0x84/0xa0 [ 1746.162766][ T5711] should_fail_ex+0x390/0x4c0 [ 1746.167445][ T5711] _copy_from_user+0x2c/0x170 [ 1746.172118][ T5711] __sys_bpf+0x2ea/0x780 [ 1746.176367][ T5711] ? bpf_link_show_fdinfo+0x380/0x380 [ 1746.181748][ T5711] ? lock_chain_count+0x20/0x20 [ 1746.186600][ T5711] __x64_sys_bpf+0x78/0x90 [ 1746.191010][ T5711] do_syscall_64+0x4c/0xa0 [ 1746.195422][ T5711] ? clear_bhb_loop+0x60/0xb0 [ 1746.200091][ T5711] ? clear_bhb_loop+0x60/0xb0 [ 1746.204761][ T5711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1746.210657][ T5711] RIP: 0033:0x7f870b79e0d9 [ 1746.215069][ T5711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1746.234669][ T5711] RSP: 002b:00007f870c5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1746.243076][ T5711] RAX: ffffffffffffffda RBX: 00007f870ba25fa0 RCX: 00007f870b79e0d9 [ 1746.251051][ T5711] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 1746.259021][ T5711] RBP: 00007f870c5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1746.266985][ T5711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1746.274950][ T5711] R13: 00007f870ba26038 R14: 00007f870ba25fa0 R15: 00007fff7a95bd28 [ 1746.282926][ T5711] [ 1746.307160][ T5717] netlink: 'syz.1.11259': attribute type 15 has an invalid length. [ 1746.326169][ T5717] netlink: 'syz.1.11259': attribute type 7 has an invalid length. [ 1749.733327][ T5758] __nla_validate_parse: 5 callbacks suppressed [ 1749.733345][ T5758] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11271'. [ 1750.238822][ T5774] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11277'. [ 1750.994741][ T5786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11281'. [ 1751.058422][ T5786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11281'. [ 1751.130976][ T5789] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11281'. [ 1751.533843][ T5802] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11285'. [ 1752.002880][ T5815] FAULT_INJECTION: forcing a failure. [ 1752.002880][ T5815] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.069959][ T5815] CPU: 1 PID: 5815 Comm: syz.2.11289 Not tainted syzkaller #0 [ 1752.077486][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1752.087565][ T5815] Call Trace: [ 1752.090861][ T5815] [ 1752.093812][ T5815] dump_stack_lvl+0x188/0x24e [ 1752.098520][ T5815] ? show_regs_print_info+0x12/0x12 [ 1752.103747][ T5815] ? load_image+0x410/0x410 [ 1752.108372][ T5815] ? __might_sleep+0xd0/0xd0 [ 1752.112987][ T5815] ? __lock_acquire+0x7c40/0x7c40 [ 1752.118129][ T5815] ? __lock_acquire+0x1465/0x7c40 [ 1752.123307][ T5815] should_fail_ex+0x390/0x4c0 [ 1752.128031][ T5815] should_failslab+0x5/0x20 [ 1752.132558][ T5815] slab_pre_alloc_hook+0x59/0x300 [ 1752.137603][ T5815] ? aa_sk_perm+0x950/0x950 [ 1752.142123][ T5815] kmem_cache_alloc_node+0x5a/0x310 [ 1752.147340][ T5815] ? __alloc_skb+0xf9/0x7d0 [ 1752.151871][ T5815] __alloc_skb+0xf9/0x7d0 [ 1752.156227][ T5815] pfkey_sendmsg+0x19e/0x1140 [ 1752.160938][ T5815] ? pfkey_release+0x340/0x340 [ 1752.165722][ T5815] ? aa_sk_perm+0x81f/0x950 [ 1752.170250][ T5815] ? aa_af_perm+0x340/0x340 [ 1752.174761][ T5815] ? __might_fault+0xa6/0x120 [ 1752.179452][ T5815] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1752.185888][ T5815] ? aa_sock_msg_perm+0x94/0x150 [ 1752.190844][ T5815] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1752.196404][ T5815] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1752.201683][ T5815] ? security_socket_sendmsg+0x7c/0xa0 [ 1752.207138][ T5815] ? pfkey_release+0x340/0x340 [ 1752.211912][ T5815] ____sys_sendmsg+0x5ed/0x9a0 [ 1752.216680][ T5815] ? __sys_sendmsg_sock+0x30/0x30 [ 1752.221695][ T5815] ? __import_iovec+0x306/0x510 [ 1752.226544][ T5815] ? import_iovec+0x6f/0xa0 [ 1752.231040][ T5815] ___sys_sendmsg+0x2a2/0x360 [ 1752.235711][ T5815] ? __sys_sendmsg+0x2a0/0x2a0 [ 1752.240472][ T5815] ? __lock_acquire+0x7c40/0x7c40 [ 1752.245522][ T5815] __se_sys_sendmsg+0x1c3/0x2b0 [ 1752.250365][ T5815] ? ct_nmi_exit+0x145/0x1c0 [ 1752.254957][ T5815] ? __x64_sys_sendmsg+0x80/0x80 [ 1752.259933][ T5815] ? lockdep_hardirqs_on+0x94/0x140 [ 1752.265144][ T5815] do_syscall_64+0x4c/0xa0 [ 1752.269553][ T5815] ? clear_bhb_loop+0x60/0xb0 [ 1752.274219][ T5815] ? clear_bhb_loop+0x60/0xb0 [ 1752.278895][ T5815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1752.284798][ T5815] RIP: 0033:0x7fd79679e0d9 [ 1752.289214][ T5815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1752.308816][ T5815] RSP: 002b:00007fd7975de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1752.317225][ T5815] RAX: ffffffffffffffda RBX: 00007fd796a25fa0 RCX: 00007fd79679e0d9 [ 1752.325187][ T5815] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 1752.333147][ T5815] RBP: 00007fd7975de090 R08: 0000000000000000 R09: 0000000000000000 [ 1752.341102][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.349065][ T5815] R13: 00007fd796a26038 R14: 00007fd796a25fa0 R15: 00007ffe8e9ca1a8 [ 1752.357047][ T5815] [ 1752.512433][ T5830] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11293'. [ 1752.760558][ T5840] netlink: 'syz.3.11297': attribute type 10 has an invalid length. [ 1752.786534][ T5840] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11297'. [ 1752.952743][ T5848] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11300'. [ 1753.058939][ T5856] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11303'. [ 1753.982199][ T5883] netlink: 'syz.3.11312': attribute type 10 has an invalid length. [ 1755.135646][ T5895] device syzkaller0 entered promiscuous mode [ 1755.347832][ T5901] __nla_validate_parse: 3 callbacks suppressed [ 1755.347852][ T5901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11317'. [ 1757.937895][ T5914] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11321'. [ 1758.191131][ T5927] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11326'. [ 1758.246380][ T5927] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11326'. [ 1758.283194][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11326'. [ 1759.062352][ T5947] netlink: 'syz.1.11330': attribute type 3 has an invalid length. [ 1759.070967][ T5947] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11330'. [ 1759.103300][ T5945] netlink: 'syz.1.11330': attribute type 10 has an invalid length. [ 1759.210338][ T5951] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11332'. [ 1759.221686][ T5949] netlink: 'syz.4.11334': attribute type 39 has an invalid length. [ 1759.404891][ T5957] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11336'. [ 1759.434721][ T5955] netlink: 'syz.2.11335': attribute type 25 has an invalid length. [ 1759.444327][ T5955] netlink: 'syz.2.11335': attribute type 25 has an invalid length. [ 1760.014689][ T5973] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11342'. [ 1760.050536][ T5973] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11342'. [ 1760.454547][ T5988] __nla_validate_parse: 2 callbacks suppressed [ 1760.454568][ T5988] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11347'. [ 1760.544780][ T5992] netlink: 'syz.2.11349': attribute type 39 has an invalid length. [ 1760.786716][ T6000] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11351'. [ 1761.005545][ T6006] netlink: 'syz.0.11353': attribute type 3 has an invalid length. [ 1761.020198][ T6006] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11353'. [ 1761.061473][ T6005] netlink: 'syz.0.11353': attribute type 10 has an invalid length. [ 1761.134740][ T6005] team0: Device hsr_slave_0 failed to register rx_handler [ 1761.939530][ T6016] netlink: 'syz.4.11358': attribute type 29 has an invalid length. [ 1762.053619][ T6016] netlink: 'syz.4.11358': attribute type 29 has an invalid length. [ 1762.348128][ T6024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11361'. [ 1765.077282][ T6028] validate_nla: 1 callbacks suppressed [ 1765.077317][ T6028] netlink: 'syz.3.11362': attribute type 39 has an invalid length. [ 1765.154004][ T6034] netlink: 'syz.4.11363': attribute type 39 has an invalid length. [ 1765.598068][ T6038] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11366'. [ 1767.100631][ T6052] netlink: 'syz.4.11370': attribute type 3 has an invalid length. [ 1767.128813][ T6052] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11370'. [ 1767.155469][ T6053] netlink: 'syz.4.11370': attribute type 10 has an invalid length. [ 1767.175132][ T6053] team0: Device hsr_slave_0 failed to register rx_handler [ 1768.118535][ T6059] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11374'. [ 1768.294044][ T6066] netlink: 'syz.0.11376': attribute type 39 has an invalid length. [ 1768.782375][ T6078] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11380'. [ 1771.681358][ T6099] netlink: 'syz.2.11384': attribute type 3 has an invalid length. [ 1771.755689][ T6101] netlink: 'syz.2.11384': attribute type 10 has an invalid length. [ 1771.779513][ T6099] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11384'. [ 1772.290403][ T6101] team0: Device hsr_slave_0 failed to register rx_handler [ 1772.472138][ T6104] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11387'. [ 1772.586313][ T6108] netlink: 'syz.3.11388': attribute type 39 has an invalid length. [ 1772.929301][ T6124] netlink: 'syz.0.11393': attribute type 10 has an invalid length. [ 1774.225775][ T6145] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11400'. [ 1774.270005][ T6145] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11400'. [ 1774.295454][ T6145] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11400'. [ 1776.766577][ T6152] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11402'. [ 1779.712633][ T6208] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.11420'. [ 1779.790908][ T6208] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1780.238813][ T6226] netlink: 'syz.2.11428': attribute type 39 has an invalid length. [ 1780.318040][ T6230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11429'. [ 1780.347713][ T6230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11429'. [ 1780.387268][ T6232] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11429'. [ 1781.424297][ T6239] tun0: tun_chr_ioctl cmd 1074025681 [ 1781.465781][ T6239] tun0: tun_chr_ioctl cmd 35108 [ 1782.167678][ T6259] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11437'. [ 1782.335465][ T6263] netlink: 'syz.0.11440': attribute type 10 has an invalid length. [ 1782.394001][ T6263] FAULT_INJECTION: forcing a failure. [ 1782.394001][ T6263] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.407037][ T6263] CPU: 1 PID: 6263 Comm: syz.0.11440 Not tainted syzkaller #0 [ 1782.414507][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1782.424581][ T6263] Call Trace: [ 1782.427881][ T6263] [ 1782.430820][ T6263] dump_stack_lvl+0x188/0x24e [ 1782.435520][ T6263] ? show_regs_print_info+0x12/0x12 [ 1782.440730][ T6263] ? load_image+0x410/0x410 [ 1782.445240][ T6263] ? verify_lock_unused+0x140/0x140 [ 1782.450440][ T6263] should_fail_ex+0x390/0x4c0 [ 1782.455117][ T6263] should_failslab+0x5/0x20 [ 1782.459614][ T6263] slab_pre_alloc_hook+0x59/0x300 [ 1782.464671][ T6263] ? ref_tracker_alloc+0x14f/0x490 [ 1782.469788][ T6263] __kmem_cache_alloc_node+0x4f/0x270 [ 1782.475155][ T6263] ? ref_tracker_alloc+0x14f/0x490 [ 1782.480265][ T6263] kmalloc_trace+0x26/0xe0 [ 1782.484683][ T6263] ref_tracker_alloc+0x14f/0x490 [ 1782.489623][ T6263] ? ref_tracker_dir_print+0x150/0x150 [ 1782.495082][ T6263] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 1782.500537][ T6263] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 1782.506022][ T6263] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1782.511476][ T6263] ? _raw_spin_lock+0x40/0x40 [ 1782.516147][ T6263] ? veth_get_iflink+0x200/0x260 [ 1782.521083][ T6263] ? linkwatch_urgent_event+0xe2/0x3c0 [ 1782.526537][ T6263] linkwatch_fire_event+0x1a4/0x200 [ 1782.531733][ T6263] netif_carrier_on+0x9b/0x120 [ 1782.536495][ T6263] veth_open+0x1e5/0x230 [ 1782.540733][ T6263] __dev_open+0x2c7/0x430 [ 1782.545058][ T6263] ? dev_open+0x190/0x190 [ 1782.549378][ T6263] ? ref_tracker_dir_print+0x150/0x150 [ 1782.554841][ T6263] dev_open+0xa7/0x190 [ 1782.558903][ T6263] ? netdev_notify_peers+0x170/0x170 [ 1782.564186][ T6263] ? dev_set_mtu+0x79/0xc0 [ 1782.568598][ T6263] ? team_add_slave+0x5a6/0x2820 [ 1782.573533][ T6263] team_add_slave+0x6bd/0x2820 [ 1782.578308][ T6263] ? team_netpoll_cleanup+0xf0/0xf0 [ 1782.583499][ T6263] ? __dev_change_flags+0x4ce/0x6a0 [ 1782.588695][ T6263] ? printk_sprint+0x460/0x460 [ 1782.593458][ T6263] ? dev_get_flags+0x1c0/0x1c0 [ 1782.598260][ T6263] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1782.604155][ T6263] ? _raw_spin_unlock+0x40/0x40 [ 1782.609005][ T6263] ? mutex_is_locked+0xe/0x40 [ 1782.613682][ T6263] do_setlink+0xd66/0x29c0 [ 1782.618099][ T6263] ? load_image+0x410/0x410 [ 1782.622603][ T6263] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1782.628761][ T6263] ? __nla_validate_parse+0x1f67/0x2970 [ 1782.634315][ T6263] ? __nla_validate+0x50/0x50 [ 1782.639013][ T6263] ? validate_linkmsg+0x3db/0x4c0 [ 1782.644071][ T6263] rtnl_newlink+0x16e4/0x1f90 [ 1782.648757][ T6263] ? rtnl_newlink+0x521/0x1f90 [ 1782.653529][ T6263] ? rtnl_setlink+0x510/0x510 [ 1782.658201][ T6263] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1782.664359][ T6263] ? rcu_is_watching+0x11/0xa0 [ 1782.669123][ T6263] ? trace_contention_end+0x5f/0x170 [ 1782.674412][ T6263] ? __mutex_lock+0x1ab/0xae0 [ 1782.679113][ T6263] ? rcu_read_unlock+0x8c/0xa0 [ 1782.683893][ T6263] ? rtnl_setlink+0x510/0x510 [ 1782.688566][ T6263] rtnetlink_rcv_msg+0x863/0xfb0 [ 1782.693501][ T6263] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1782.698611][ T6263] ? rtnetlink_bind+0x80/0x80 [ 1782.703284][ T6263] ? mark_lock+0x94/0x320 [ 1782.707617][ T6263] ? __lock_acquire+0x138a/0x7c40 [ 1782.712640][ T6263] ? __lock_acquire+0x138a/0x7c40 [ 1782.717659][ T6263] ? verify_lock_unused+0x140/0x140 [ 1782.722860][ T6263] ? verify_lock_unused+0x140/0x140 [ 1782.728052][ T6263] ? __alloc_skb+0xf9/0x7d0 [ 1782.732549][ T6263] ? verify_lock_unused+0x140/0x140 [ 1782.737772][ T6263] netlink_rcv_skb+0x1ef/0x440 [ 1782.743232][ T6263] ? rtnetlink_bind+0x80/0x80 [ 1782.747908][ T6263] ? netlink_ack+0x1160/0x1160 [ 1782.752673][ T6263] ? netlink_deliver_tap+0x2e/0x1b0 [ 1782.757868][ T6263] netlink_unicast+0x7ad/0x920 [ 1782.762637][ T6263] netlink_sendmsg+0x8ad/0xbd0 [ 1782.767439][ T6263] ? netlink_getsockopt+0x550/0x550 [ 1782.772660][ T6263] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1782.778219][ T6263] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1782.783507][ T6263] ? security_socket_sendmsg+0x7c/0xa0 [ 1782.788959][ T6263] ? netlink_getsockopt+0x550/0x550 [ 1782.794157][ T6263] ____sys_sendmsg+0x5ed/0x9a0 [ 1782.798925][ T6263] ? __sys_sendmsg_sock+0x30/0x30 [ 1782.803943][ T6263] ? __import_iovec+0x306/0x510 [ 1782.808797][ T6263] ? import_iovec+0x6f/0xa0 [ 1782.813300][ T6263] ___sys_sendmsg+0x2a2/0x360 [ 1782.817976][ T6263] ? __sys_sendmsg+0x2a0/0x2a0 [ 1782.822755][ T6263] ? __lock_acquire+0x7c40/0x7c40 [ 1782.827793][ T6263] __se_sys_sendmsg+0x1c3/0x2b0 [ 1782.832647][ T6263] ? __x64_sys_sendmsg+0x80/0x80 [ 1782.837595][ T6263] ? lockdep_hardirqs_on+0x94/0x140 [ 1782.842796][ T6263] do_syscall_64+0x4c/0xa0 [ 1782.847215][ T6263] ? clear_bhb_loop+0x60/0xb0 [ 1782.851891][ T6263] ? clear_bhb_loop+0x60/0xb0 [ 1782.856564][ T6263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1782.862457][ T6263] RIP: 0033:0x7f870b79e0d9 [ 1782.866867][ T6263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1782.886464][ T6263] RSP: 002b:00007f870c5c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1782.894901][ T6263] RAX: ffffffffffffffda RBX: 00007f870ba25fa0 RCX: 00007f870b79e0d9 [ 1782.902883][ T6263] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1782.910869][ T6263] RBP: 00007f870c5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1782.918837][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1782.926806][ T6263] R13: 00007f870ba26038 R14: 00007f870ba25fa0 R15: 00007fff7a95bd28 [ 1782.934792][ T6263] [ 1783.018179][ T6263] team0: Device hsr_slave_0 failed to register rx_handler [ 1783.234954][ T6271] netlink: 'syz.2.11443': attribute type 39 has an invalid length. [ 1783.375698][ T6287] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.11445'. [ 1783.406207][ T6286] netlink: 'syz.1.11446': attribute type 39 has an invalid length. [ 1783.460342][ T6287] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1783.494059][ T6287] CPU: 1 PID: 6287 Comm: syz.0.11445 Not tainted syzkaller #0 [ 1783.501573][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1783.511632][ T6287] Call Trace: [ 1783.514913][ T6287] [ 1783.517853][ T6287] dump_stack_lvl+0x188/0x24e [ 1783.522539][ T6287] ? show_regs_print_info+0x12/0x12 [ 1783.527747][ T6287] ? load_image+0x410/0x410 [ 1783.532260][ T6287] sysfs_warn_dup+0x8a/0xa0 [ 1783.536767][ T6287] sysfs_do_create_link_sd+0xc0/0x110 [ 1783.542177][ T6287] device_add+0x83b/0x1050 [ 1783.546606][ T6287] wiphy_register+0x1d8b/0x2aa0 [ 1783.551478][ T6287] ? cfg80211_event_work+0x40/0x40 [ 1783.556590][ T6287] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1783.562754][ T6287] ieee80211_register_hw+0x2d48/0x39f0 [ 1783.568217][ T6287] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1783.574384][ T6287] ? ieee80211_register_hw+0xee1/0x39f0 [ 1783.579929][ T6287] ? ieee80211_register_hw+0xee1/0x39f0 [ 1783.585483][ T6287] ? ieee80211_tasklet_handler+0x20/0x20 [ 1783.591150][ T6287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1783.597054][ T6287] ? __debug_object_init+0xed/0x440 [ 1783.602261][ T6287] ? memset+0x1e/0x40 [ 1783.606248][ T6287] ? __hrtimer_init+0x189/0x270 [ 1783.611100][ T6287] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1783.616834][ T6287] ? memcpy+0x3c/0x60 [ 1783.620820][ T6287] hwsim_new_radio_nl+0xab7/0xc90 [ 1783.625858][ T6287] genl_family_rcv_msg_doit+0x22f/0x350 [ 1783.631406][ T6287] ? end_current_label_crit_section+0x170/0x170 [ 1783.637652][ T6287] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1783.643551][ T6287] ? bpf_lsm_capable+0x5/0x10 [ 1783.648237][ T6287] ? security_capable+0x85/0xb0 [ 1783.653119][ T6287] genl_rcv_msg+0x601/0x790 [ 1783.657645][ T6287] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1783.663813][ T6287] ? genl_bind+0x360/0x360 [ 1783.668227][ T6287] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1783.674561][ T6287] ? lock_acquire+0x225/0x4a0 [ 1783.679248][ T6287] netlink_rcv_skb+0x1ef/0x440 [ 1783.684018][ T6287] ? genl_bind+0x360/0x360 [ 1783.688434][ T6287] ? netlink_ack+0x1160/0x1160 [ 1783.693206][ T6287] ? down_read+0x1a8/0x2d0 [ 1783.697619][ T6287] genl_rcv+0x24/0x40 [ 1783.701596][ T6287] netlink_unicast+0x7ad/0x920 [ 1783.706371][ T6287] netlink_sendmsg+0x8ad/0xbd0 [ 1783.711142][ T6287] ? netlink_getsockopt+0x550/0x550 [ 1783.716343][ T6287] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1783.721893][ T6287] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1783.727191][ T6287] ? security_socket_sendmsg+0x7c/0xa0 [ 1783.732673][ T6287] ? netlink_getsockopt+0x550/0x550 [ 1783.737890][ T6287] ____sys_sendmsg+0x5ed/0x9a0 [ 1783.742664][ T6287] ? __sys_sendmsg_sock+0x30/0x30 [ 1783.747687][ T6287] ? __import_iovec+0x306/0x510 [ 1783.752546][ T6287] ? import_iovec+0x6f/0xa0 [ 1783.757057][ T6287] ___sys_sendmsg+0x2a2/0x360 [ 1783.761742][ T6287] ? __sys_sendmsg+0x2a0/0x2a0 [ 1783.766520][ T6287] ? ktime_get+0x7b/0x270 [ 1783.770864][ T6287] __se_sys_sendmsg+0x1c3/0x2b0 [ 1783.775711][ T6287] ? ct_nmi_exit+0x145/0x1c0 [ 1783.780298][ T6287] ? __x64_sys_sendmsg+0x80/0x80 [ 1783.785246][ T6287] ? lockdep_hardirqs_on+0x94/0x140 [ 1783.790440][ T6287] do_syscall_64+0x4c/0xa0 [ 1783.794871][ T6287] ? clear_bhb_loop+0x60/0xb0 [ 1783.799543][ T6287] ? clear_bhb_loop+0x60/0xb0 [ 1783.804219][ T6287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1783.810106][ T6287] RIP: 0033:0x7f870b79e0d9 [ 1783.814516][ T6287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1783.834119][ T6287] RSP: 002b:00007f870c5a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1783.842526][ T6287] RAX: ffffffffffffffda RBX: 00007f870ba26090 RCX: 00007f870b79e0d9 [ 1783.850492][ T6287] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1783.858475][ T6287] RBP: 00007f870b835024 R08: 0000000000000000 R09: 0000000000000000 [ 1783.866450][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1783.874424][ T6287] R13: 00007f870ba26128 R14: 00007f870ba26090 R15: 00007fff7a95bd28 [ 1783.882412][ T6287] [ 1784.021382][ T6293] netlink: 'syz.4.11447': attribute type 10 has an invalid length. [ 1784.301420][ T6307] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11453'. [ 1784.685674][ T6321] netlink: 'syz.2.11458': attribute type 39 has an invalid length. [ 1785.263742][ T6329] netlink: 'syz.4.11460': attribute type 39 has an invalid length. [ 1785.503169][ T6336] netlink: 'syz.1.11463': attribute type 10 has an invalid length. [ 1785.645097][ T6345] FAULT_INJECTION: forcing a failure. [ 1785.645097][ T6345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1785.684006][ T6345] CPU: 1 PID: 6345 Comm: syz.1.11467 Not tainted syzkaller #0 [ 1785.691553][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1785.701644][ T6345] Call Trace: [ 1785.704956][ T6345] [ 1785.707912][ T6345] dump_stack_lvl+0x188/0x24e [ 1785.712643][ T6345] ? show_regs_print_info+0x12/0x12 [ 1785.717887][ T6345] ? load_image+0x410/0x410 [ 1785.722435][ T6345] ? __lock_acquire+0x7c40/0x7c40 [ 1785.727524][ T6345] should_fail_ex+0x390/0x4c0 [ 1785.732255][ T6345] _copy_from_user+0x2c/0x170 [ 1785.736973][ T6345] __sys_bpf+0x2ea/0x780 [ 1785.741265][ T6345] ? bpf_link_show_fdinfo+0x380/0x380 [ 1785.746698][ T6345] ? lock_chain_count+0x20/0x20 [ 1785.751580][ T6345] __x64_sys_bpf+0x78/0x90 [ 1785.756010][ T6345] do_syscall_64+0x4c/0xa0 [ 1785.760433][ T6345] ? clear_bhb_loop+0x60/0xb0 [ 1785.765122][ T6345] ? clear_bhb_loop+0x60/0xb0 [ 1785.769815][ T6345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1785.775736][ T6345] RIP: 0033:0x7f0c4db9e0d9 [ 1785.780180][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.799802][ T6345] RSP: 002b:00007f0c4eaff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1785.808227][ T6345] RAX: ffffffffffffffda RBX: 00007f0c4de25fa0 RCX: 00007f0c4db9e0d9 [ 1785.816203][ T6345] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1785.824179][ T6345] RBP: 00007f0c4eaff090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.832153][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.840137][ T6345] R13: 00007f0c4de26038 R14: 00007f0c4de25fa0 R15: 00007ffcbe7fc938 [ 1785.848157][ T6345] [ 1785.966625][ T6349] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11469'. [ 1786.288488][ T6356] netlink: 'syz.1.11472': attribute type 39 has an invalid length. [ 1786.416691][ T6363] FAULT_INJECTION: forcing a failure. [ 1786.416691][ T6363] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.493373][ T6363] CPU: 1 PID: 6363 Comm: syz.3.11475 Not tainted syzkaller #0 [ 1786.500952][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1786.511062][ T6363] Call Trace: [ 1786.514386][ T6363] [ 1786.517361][ T6363] dump_stack_lvl+0x188/0x24e [ 1786.522112][ T6363] ? show_regs_print_info+0x12/0x12 [ 1786.527371][ T6363] ? load_image+0x410/0x410 [ 1786.531943][ T6363] ? __might_sleep+0xd0/0xd0 [ 1786.536585][ T6363] ? __lock_acquire+0x7c40/0x7c40 [ 1786.541688][ T6363] should_fail_ex+0x390/0x4c0 [ 1786.546425][ T6363] should_failslab+0x5/0x20 [ 1786.550944][ T6363] slab_pre_alloc_hook+0x59/0x300 [ 1786.555990][ T6363] ? lockdep_softirqs_off+0x430/0x430 [ 1786.561395][ T6363] kmem_cache_alloc+0x56/0x2f0 [ 1786.566176][ T6363] ? security_inode_alloc+0x30/0x110 [ 1786.571498][ T6363] security_inode_alloc+0x30/0x110 [ 1786.576637][ T6363] inode_init_always+0x910/0xc90 [ 1786.581610][ T6363] new_inode_pseudo+0x91/0x1c0 [ 1786.586409][ T6363] new_inode+0x25/0x1d0 [ 1786.590603][ T6363] proc_pid_make_inode+0x20/0x1a0 [ 1786.595659][ T6363] proc_ns_dir_lookup+0x6a0/0x7c0 [ 1786.600708][ T6363] ? proc_ns_dir_readdir+0x430/0x430 [ 1786.606018][ T6363] path_openat+0xff8/0x2f10 [ 1786.610641][ T6363] ? do_filp_open+0x420/0x420 [ 1786.615396][ T6363] do_filp_open+0x1ee/0x420 [ 1786.619937][ T6363] ? vfs_tmpfile+0x470/0x470 [ 1786.624576][ T6363] ? noop_direct_IO+0x10/0x10 [ 1786.629309][ T6363] ? _raw_spin_unlock+0x24/0x40 [ 1786.634176][ T6363] ? alloc_fd+0x590/0x640 [ 1786.638557][ T6363] do_sys_openat2+0x14b/0x4f0 [ 1786.643271][ T6363] ? do_sys_open+0xe0/0xe0 [ 1786.647723][ T6363] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1786.653727][ T6363] ? srcu_init_notifier_head+0x90/0x90 [ 1786.659210][ T6363] ? lock_chain_count+0x20/0x20 [ 1786.664111][ T6363] __x64_sys_openat+0x135/0x160 [ 1786.669005][ T6363] do_syscall_64+0x4c/0xa0 [ 1786.673440][ T6363] ? clear_bhb_loop+0x60/0xb0 [ 1786.678133][ T6363] ? clear_bhb_loop+0x60/0xb0 [ 1786.682846][ T6363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1786.688763][ T6363] RIP: 0033:0x7f723fd5e90e [ 1786.693195][ T6363] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1786.712837][ T6363] RSP: 002b:00007f7240c4bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1786.721281][ T6363] RAX: ffffffffffffffda RBX: 00007f7240c4c6c0 RCX: 00007f723fd5e90e [ 1786.729273][ T6363] RDX: 0000000000000002 RSI: 00007f7240c4bf90 RDI: ffffffffffffff9c [ 1786.737265][ T6363] RBP: 00007f7240c4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.745255][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1786.753247][ T6363] R13: 00007f7240026038 R14: 00007f7240025fa0 R15: 00007ffcb52c2778 [ 1786.761291][ T6363] [ 1787.137995][ T6370] netlink: 'syz.1.11477': attribute type 10 has an invalid length. [ 1787.200016][ T6374] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11478'. [ 1787.579355][ T6382] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11481'. [ 1787.910260][ T6396] netlink: 'syz.3.11487': attribute type 39 has an invalid length. [ 1788.352502][ T6412] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11493'. [ 1788.384264][ T6416] netlink: 'syz.0.11494': attribute type 10 has an invalid length. [ 1788.911480][ T6427] netlink: 'syz.2.11500': attribute type 39 has an invalid length. [ 1788.932780][ T6429] sctp: [Deprecated]: syz.1.11499 (pid 6429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1788.932780][ T6429] Use struct sctp_sack_info instead [ 1788.983303][ T6429] netlink: 3143 bytes leftover after parsing attributes in process `syz.1.11499'. [ 1791.605787][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.612181][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.733829][ T6461] netlink: 'syz.4.11511': attribute type 39 has an invalid length. [ 1792.399869][ T6490] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11523'. [ 1792.442776][ T6491] netlink: 'syz.2.11522': attribute type 3 has an invalid length. [ 1792.474955][ T6491] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11522'. [ 1792.786452][ T6500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11526'. [ 1793.430707][ T6500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11526'. [ 1793.464671][ T6503] netlink: 'syz.4.11527': attribute type 39 has an invalid length. [ 1793.500533][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11526'. [ 1794.022268][ T6533] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11540'. [ 1794.084698][ T6533] team0: Port device team_slave_0 removed [ 1794.091333][ T6534] netlink: 'syz.0.11539': attribute type 3 has an invalid length. [ 1794.101734][ T6533] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1794.118967][ T6534] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11539'. [ 1794.134767][ T6531] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11538'. [ 1794.417377][ T6540] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11551'. [ 1794.441704][ T6542] netlink: 'syz.1.11542': attribute type 39 has an invalid length. [ 1794.809454][ T6548] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11544'. [ 1795.471862][ T6570] netlink: 'syz.1.11554': attribute type 39 has an invalid length. [ 1795.806514][ T6589] netlink: 'syz.3.11559': attribute type 3 has an invalid length. [ 1796.081103][ T6598] netlink: 'syz.4.11564': attribute type 10 has an invalid length. [ 1796.487931][ T6608] netlink: 'syz.4.11571': attribute type 39 has an invalid length. [ 1797.525406][ T6626] __nla_validate_parse: 9 callbacks suppressed [ 1797.525445][ T6626] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11578'. [ 1798.129307][ T6635] netlink: 'syz.4.11581': attribute type 10 has an invalid length. [ 1798.265260][ T6640] FAULT_INJECTION: forcing a failure. [ 1798.265260][ T6640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1798.287355][ T6640] CPU: 1 PID: 6640 Comm: syz.3.11584 Not tainted syzkaller #0 [ 1798.294867][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1798.304940][ T6640] Call Trace: [ 1798.308230][ T6640] [ 1798.311168][ T6640] dump_stack_lvl+0x188/0x24e [ 1798.315868][ T6640] ? show_regs_print_info+0x12/0x12 [ 1798.321085][ T6640] ? load_image+0x410/0x410 [ 1798.325606][ T6640] ? __might_fault+0xa6/0x120 [ 1798.330302][ T6640] should_fail_ex+0x390/0x4c0 [ 1798.335001][ T6640] copyin+0x1b/0x120 [ 1798.338915][ T6640] _copy_from_iter+0x559/0x1130 [ 1798.343789][ T6640] ? copyout_mc+0x110/0x110 [ 1798.348306][ T6640] ? __virt_addr_valid+0x188/0x540 [ 1798.353431][ T6640] ? __virt_addr_valid+0x188/0x540 [ 1798.358557][ T6640] ? __virt_addr_valid+0x467/0x540 [ 1798.363680][ T6640] ? __phys_addr_symbol+0x2b/0x70 [ 1798.368715][ T6640] ? __check_object_size+0x4f6/0xa70 [ 1798.374017][ T6640] netlink_sendmsg+0x755/0xbd0 [ 1798.378804][ T6640] ? netlink_getsockopt+0x550/0x550 [ 1798.384023][ T6640] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1798.389586][ T6640] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1798.394882][ T6640] ? security_socket_sendmsg+0x7c/0xa0 [ 1798.400354][ T6640] ? netlink_getsockopt+0x550/0x550 [ 1798.405576][ T6640] ____sys_sendmsg+0x5ed/0x9a0 [ 1798.410367][ T6640] ? __sys_sendmsg_sock+0x30/0x30 [ 1798.415406][ T6640] ? __import_iovec+0x306/0x510 [ 1798.420282][ T6640] ? import_iovec+0x6f/0xa0 [ 1798.424810][ T6640] ___sys_sendmsg+0x2a2/0x360 [ 1798.429510][ T6640] ? __sys_sendmsg+0x2a0/0x2a0 [ 1798.434310][ T6640] ? __lock_acquire+0x7c40/0x7c40 [ 1798.439375][ T6640] __se_sys_sendmsg+0x1c3/0x2b0 [ 1798.444245][ T6640] ? __x64_sys_sendmsg+0x80/0x80 [ 1798.449215][ T6640] ? lockdep_hardirqs_on+0x94/0x140 [ 1798.454430][ T6640] do_syscall_64+0x4c/0xa0 [ 1798.458857][ T6640] ? clear_bhb_loop+0x60/0xb0 [ 1798.463546][ T6640] ? clear_bhb_loop+0x60/0xb0 [ 1798.468236][ T6640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1798.474144][ T6640] RIP: 0033:0x7f723fd9e0d9 [ 1798.478571][ T6640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.498189][ T6640] RSP: 002b:00007f7240c4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.506614][ T6640] RAX: ffffffffffffffda RBX: 00007f7240025fa0 RCX: 00007f723fd9e0d9 [ 1798.514594][ T6640] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1798.522576][ T6640] RBP: 00007f7240c4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.530556][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.538533][ T6640] R13: 00007f7240026038 R14: 00007f7240025fa0 R15: 00007ffcb52c2778 [ 1798.546533][ T6640] [ 1799.037919][ T6648] netlink: 'syz.4.11585': attribute type 39 has an invalid length. [ 1799.480377][ T6656] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11590'. [ 1799.957106][ T6669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11595'. [ 1800.020889][ T6669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11595'. [ 1800.051006][ T6672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11595'. [ 1800.079383][ T6671] netlink: 'syz.0.11596': attribute type 10 has an invalid length. [ 1800.495084][ T6683] netlink: 'syz.0.11612': attribute type 10 has an invalid length. [ 1800.508644][ T6685] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11601'. [ 1800.547575][ T6685] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11601'. [ 1800.592486][ T6686] netlink: 'syz.1.11600': attribute type 39 has an invalid length. [ 1800.634031][ T6690] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11601'. [ 1801.026506][ T6706] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11610'. [ 1801.043789][ T6706] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11610'. [ 1801.365810][ T6723] netlink: 'syz.0.11618': attribute type 39 has an invalid length. [ 1801.400645][ T6722] netlink: 'syz.3.11617': attribute type 10 has an invalid length. [ 1802.366229][ T6753] FAULT_INJECTION: forcing a failure. [ 1802.366229][ T6753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1802.384070][ T6750] netlink: 'syz.0.11630': attribute type 39 has an invalid length. [ 1802.412762][ T6756] netlink: 'syz.1.11632': attribute type 10 has an invalid length. [ 1802.442956][ T6753] CPU: 1 PID: 6753 Comm: syz.2.11631 Not tainted syzkaller #0 [ 1802.450477][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1802.460555][ T6753] Call Trace: [ 1802.463853][ T6753] [ 1802.466803][ T6753] dump_stack_lvl+0x188/0x24e [ 1802.471511][ T6753] ? show_regs_print_info+0x12/0x12 [ 1802.476736][ T6753] ? load_image+0x410/0x410 [ 1802.481264][ T6753] ? __lock_acquire+0x7c40/0x7c40 [ 1802.486337][ T6753] should_fail_ex+0x390/0x4c0 [ 1802.491051][ T6753] _copy_from_user+0x2c/0x170 [ 1802.495762][ T6753] sk_setsockopt+0x2d9/0x29a0 [ 1802.500483][ T6753] ? sockopt_capable+0x60/0x60 [ 1802.505284][ T6753] ? aa_sk_perm+0x81f/0x950 [ 1802.509830][ T6753] ? aa_af_perm+0x340/0x340 [ 1802.514359][ T6753] ? __fget_files+0x3fc/0x460 [ 1802.519075][ T6753] ? aa_sock_opt_perm+0x74/0x100 [ 1802.524047][ T6753] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 1802.529611][ T6753] ? security_socket_setsockopt+0x7a/0xa0 [ 1802.535365][ T6753] __sys_setsockopt+0x2f6/0x3d0 [ 1802.540254][ T6753] __x64_sys_setsockopt+0xb1/0xc0 [ 1802.545359][ T6753] do_syscall_64+0x4c/0xa0 [ 1802.549803][ T6753] ? clear_bhb_loop+0x60/0xb0 [ 1802.554499][ T6753] ? clear_bhb_loop+0x60/0xb0 [ 1802.559231][ T6753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1802.565153][ T6753] RIP: 0033:0x7fd79679e0d9 [ 1802.569761][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1802.589396][ T6753] RSP: 002b:00007fd7975de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1802.597835][ T6753] RAX: ffffffffffffffda RBX: 00007fd796a25fa0 RCX: 00007fd79679e0d9 [ 1802.605832][ T6753] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000010 [ 1802.613828][ T6753] RBP: 00007fd7975de090 R08: 0000000000000004 R09: 0000000000000000 [ 1802.621821][ T6753] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1802.629812][ T6753] R13: 00007fd796a26038 R14: 00007fd796a25fa0 R15: 00007ffe8e9ca1a8 [ 1802.637834][ T6753] [ 1803.284054][ T6781] __nla_validate_parse: 9 callbacks suppressed [ 1803.284073][ T6781] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11641'. [ 1803.309240][ T6781] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11641'. [ 1803.319985][ T6781] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11641'. [ 1803.369175][ T6784] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11643'. [ 1803.479717][ T6788] netlink: 'syz.3.11645': attribute type 39 has an invalid length. [ 1803.537243][ T6792] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11647'. [ 1803.556552][ T6792] netlink: 'syz.1.11647': attribute type 3 has an invalid length. [ 1803.575241][ T6792] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11647'. [ 1803.923166][T12908] Bluetooth: hci5: command 0x0406 tx timeout [ 1804.240201][ T6814] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11655'. [ 1804.276779][ T6814] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11655'. [ 1804.330084][ T6815] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11655'. [ 1804.562365][ T6822] netlink: 'syz.2.11656': attribute type 10 has an invalid length. [ 1804.587189][ T6822] team0: Device hsr_slave_0 failed to register rx_handler [ 1804.678967][ T6821] device syzkaller0 entered promiscuous mode [ 1804.697968][ T6828] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11660'. [ 1807.710374][ T6832] netlink: 'syz.1.11661': attribute type 39 has an invalid length. [ 1808.289101][ T6857] netlink: 'syz.0.11678': attribute type 39 has an invalid length. [ 1808.922183][ T6867] __nla_validate_parse: 6 callbacks suppressed [ 1808.922202][ T6867] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11673'. [ 1809.697272][ T6879] netlink: 'syz.0.11676': attribute type 10 has an invalid length. [ 1809.713577][ T6879] team0: Device hsr_slave_0 failed to register rx_handler [ 1809.764788][T21920] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1809.773751][T21920] Bluetooth: hci2: Injecting HCI hardware error event [ 1809.782486][T21920] Bluetooth: hci2: hardware error 0x00 [ 1809.835876][ T6887] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11681'. [ 1809.961528][ T6889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11682'. [ 1809.971222][ T6889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11682'. [ 1809.982039][ T6889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11682'. [ 1810.069166][ T6891] netlink: 'syz.4.11683': attribute type 39 has an invalid length. [ 1810.577856][ T6904] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11689'. [ 1811.345505][ T6924] netlink: 'syz.0.11696': attribute type 39 has an invalid length. [ 1811.513098][ T6929] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11698'. [ 1811.522245][ T6929] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11698'. [ 1811.589914][ T6933] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11698'. [ 1811.631162][ T6935] netlink: 'syz.2.11699': attribute type 10 has an invalid length. [ 1811.649157][ T6935] team0: Device hsr_slave_0 failed to register rx_handler [ 1811.843308][ T6939] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11702'. [ 1811.843324][T21920] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1812.575050][ T6960] netlink: 'syz.2.11711': attribute type 39 has an invalid length. [ 1813.770987][ T6992] netlink: 'syz.4.11718': attribute type 10 has an invalid length. [ 1816.516670][ T6992] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1816.818189][ T7007] __nla_validate_parse: 5 callbacks suppressed [ 1816.818206][ T7007] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11725'. [ 1816.871285][ T7007] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11725'. [ 1816.890047][ T7010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11725'. [ 1816.931452][ T7011] netlink: 'syz.1.11722': attribute type 10 has an invalid length. [ 1816.957851][ T7009] netlink: 'syz.4.11724': attribute type 39 has an invalid length. [ 1817.250239][ T7017] netlink: 'syz.4.11728': attribute type 10 has an invalid length. [ 1817.641278][ T7025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11730'. [ 1817.665482][ T7025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11730'. [ 1817.687024][ T7029] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11734'. [ 1817.750229][ T7030] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11730'. [ 1818.076362][ T7040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11737'. [ 1818.086952][ T7040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11737'. [ 1818.100788][ T7040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11737'. [ 1818.210313][ T7043] netlink: 'syz.1.11738': attribute type 39 has an invalid length. [ 1818.235333][ T7048] netlink: 'syz.3.11741': attribute type 10 has an invalid length. [ 1818.495173][ T7062] netlink: 'syz.1.11745': attribute type 10 has an invalid length. [ 1819.672197][ T7084] netlink: 'syz.3.11755': attribute type 10 has an invalid length. [ 1819.875186][ T7092] netlink: 'syz.4.11758': attribute type 28 has an invalid length. [ 1820.297864][ T7108] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1820.463636][ T7113] netlink: 'syz.1.11765': attribute type 10 has an invalid length. [ 1821.205676][ T7127] netlink: 'syz.1.11772': attribute type 10 has an invalid length. [ 1821.489977][ T7135] FAULT_INJECTION: forcing a failure. [ 1821.489977][ T7135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1821.543024][ T7135] CPU: 0 PID: 7135 Comm: syz.3.11777 Not tainted syzkaller #0 [ 1821.550569][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1821.560667][ T7135] Call Trace: [ 1821.563983][ T7135] [ 1821.566955][ T7135] dump_stack_lvl+0x188/0x24e [ 1821.571693][ T7135] ? show_regs_print_info+0x12/0x12 [ 1821.576937][ T7135] ? load_image+0x410/0x410 [ 1821.581470][ T7135] ? __lock_acquire+0x7c40/0x7c40 [ 1821.586610][ T7135] should_fail_ex+0x390/0x4c0 [ 1821.591323][ T7135] _copy_from_user+0x2c/0x170 [ 1821.596022][ T7135] iovec_from_user+0x143/0x360 [ 1821.600810][ T7135] __import_iovec+0x6c/0x510 [ 1821.605433][ T7135] import_iovec+0x6f/0xa0 [ 1821.609781][ T7135] ___sys_sendmsg+0x252/0x360 [ 1821.614486][ T7135] ? __sys_sendmsg+0x2a0/0x2a0 [ 1821.619305][ T7135] ? __lock_acquire+0x7c40/0x7c40 [ 1821.624393][ T7135] __se_sys_sendmsg+0x1c3/0x2b0 [ 1821.629257][ T7135] ? ct_nmi_exit+0x145/0x1c0 [ 1821.633866][ T7135] ? __x64_sys_sendmsg+0x80/0x80 [ 1821.638855][ T7135] ? lockdep_hardirqs_on+0x94/0x140 [ 1821.644075][ T7135] do_syscall_64+0x4c/0xa0 [ 1821.648504][ T7135] ? clear_bhb_loop+0x60/0xb0 [ 1821.653190][ T7135] ? clear_bhb_loop+0x60/0xb0 [ 1821.657882][ T7135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1821.663787][ T7135] RIP: 0033:0x7f723fd9e0d9 [ 1821.668215][ T7135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1821.687842][ T7135] RSP: 002b:00007f7240c4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1821.696272][ T7135] RAX: ffffffffffffffda RBX: 00007f7240025fa0 RCX: 00007f723fd9e0d9 [ 1821.704265][ T7135] RDX: 0000000000600300 RSI: 0000200000000000 RDI: 0000000000000005 [ 1821.712249][ T7135] RBP: 00007f7240c4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1821.720229][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1821.728229][ T7135] R13: 00007f7240026038 R14: 00007f7240025fa0 R15: 00007ffcb52c2778 [ 1821.736255][ T7135] [ 1821.908378][ T7140] __nla_validate_parse: 11 callbacks suppressed [ 1821.908396][ T7140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11778'. [ 1821.914224][ T7142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11779'. [ 1821.953063][ T7142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11779'. [ 1821.983559][ T7144] validate_nla: 2 callbacks suppressed [ 1821.983602][ T7144] netlink: 'syz.0.11780': attribute type 10 has an invalid length. [ 1822.028518][ T7144] team0: Device hsr_slave_0 failed to register rx_handler [ 1822.455844][ T7145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11779'. [ 1823.286088][ T7165] netlink: 'syz.4.11785': attribute type 10 has an invalid length. [ 1823.359913][ T7169] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.11787'. [ 1823.388108][ T7169] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1823.405041][ T7171] netlink: 'syz.0.11784': attribute type 10 has an invalid length. [ 1823.434638][ T7171] team0: Device hsr_slave_0 failed to register rx_handler [ 1826.658274][ T7192] netlink: 'syz.2.11793': attribute type 10 has an invalid length. [ 1826.676633][ T7192] team0: Device hsr_slave_0 failed to register rx_handler [ 1826.767668][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11797'. [ 1826.778293][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11797'. [ 1826.791120][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11797'. [ 1827.780006][ T7209] netlink: 'syz.3.11801': attribute type 10 has an invalid length. [ 1827.800019][ T7209] team0: Device hsr_slave_0 failed to register rx_handler [ 1827.834834][ T7214] netlink: 'syz.2.11803': attribute type 10 has an invalid length. [ 1828.342244][ T7229] netlink: 'syz.1.11809': attribute type 39 has an invalid length. [ 1828.900791][ T7238] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11812'. [ 1828.977431][ T7238] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11812'. [ 1829.063418][ T7239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11812'. [ 1829.245133][ T7244] netlink: 'syz.4.11814': attribute type 10 has an invalid length. [ 1829.272521][ T7244] team0: Device hsr_slave_0 failed to register rx_handler [ 1829.375431][ T7247] netlink: 'syz.2.11813': attribute type 3 has an invalid length. [ 1829.413425][ T7247] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11813'. [ 1830.112262][ T7256] netlink: 'syz.2.11818': attribute type 10 has an invalid length. [ 1831.035180][ T7266] netlink: 'syz.2.11820': attribute type 10 has an invalid length. [ 1831.206790][ T7266] team0: Device hsr_slave_0 failed to register rx_handler [ 1831.399166][ T7284] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11826'. [ 1831.420372][ T7281] netlink: 'syz.3.11825': attribute type 39 has an invalid length. [ 1831.436507][ T7284] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11826'. [ 1831.457965][ T7284] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11826'. [ 1831.599825][ T7287] netlink: 'syz.3.11827': attribute type 39 has an invalid length. [ 1831.640691][ T7289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11838'. [ 1831.650756][ T7289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11838'. [ 1831.661125][ T7289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11838'. [ 1831.676706][ T7291] netlink: 'syz.2.11828': attribute type 10 has an invalid length. [ 1831.695501][ T7291] team0: Device hsr_slave_0 failed to register rx_handler [ 1832.326977][ T7311] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1832.947351][ T7319] validate_nla: 1 callbacks suppressed [ 1832.947390][ T7319] netlink: 'syz.4.11839': attribute type 10 has an invalid length. [ 1832.973611][ T7319] team0: Device hsr_slave_0 failed to register rx_handler [ 1834.931121][ T7321] netlink: 'syz.0.11837': attribute type 10 has an invalid length. [ 1834.966505][ T7326] __nla_validate_parse: 2 callbacks suppressed [ 1834.966518][ T7326] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11841'. [ 1835.001862][ T7324] netlink: 'syz.3.11842': attribute type 10 has an invalid length. [ 1835.011181][ T7327] netlink: 'syz.1.11840': attribute type 10 has an invalid length. [ 1835.076714][ T7332] netlink: 'syz.4.11843': attribute type 39 has an invalid length. [ 1835.189627][ T7337] netlink: 'syz.1.11846': attribute type 10 has an invalid length. [ 1835.664844][ T7355] netlink: 'syz.2.11853': attribute type 10 has an invalid length. [ 1835.690175][ T7355] team0: Device hsr_slave_0 failed to register rx_handler [ 1835.720966][ T7357] netlink: 'syz.0.11854': attribute type 39 has an invalid length. [ 1835.948466][ T7361] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11856'. [ 1835.958103][ T7361] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11856'. [ 1835.968946][ T7361] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11856'. [ 1836.304651][ T7371] netlink: 'syz.0.11861': attribute type 10 has an invalid length. [ 1836.589277][T12908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1836.605509][T12908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1836.615324][T12908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1836.626331][T12908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1836.635248][T12908] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1836.642635][T12908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1836.961249][ T7372] chnl_net:caif_netlink_parms(): no params data found [ 1838.143848][T30884] bond0: (slave syz_tun): Releasing backup interface [ 1838.291251][ T7384] netlink: 'syz.0.11863': attribute type 39 has an invalid length. [ 1838.342672][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.406728][ T7392] netlink: 'syz.2.11866': attribute type 39 has an invalid length. [ 1838.458154][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.467187][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.478888][ T7372] device bridge_slave_0 entered promiscuous mode [ 1838.487815][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.495227][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.504169][ T7372] device bridge_slave_1 entered promiscuous mode [ 1838.576001][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.694794][ T7372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1838.732904][T21920] Bluetooth: hci1: command 0x0409 tx timeout [ 1838.760367][ T7372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1838.790627][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.873527][ T7411] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11871'. [ 1838.906238][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.925862][ T7372] team0: Port device team_slave_0 added [ 1838.932622][ T7411] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11871'. [ 1838.942611][ T7414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11871'. [ 1838.966481][ T7372] team0: Port device team_slave_1 added [ 1839.004978][ T7415] netlink: 'syz.0.11872': attribute type 10 has an invalid length. [ 1839.019506][ T7415] team0: Device hsr_slave_0 failed to register rx_handler [ 1839.066075][ T7417] netlink: 'syz.1.11873': attribute type 10 has an invalid length. [ 1839.080924][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1839.098807][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1839.125667][ T7372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1839.152857][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1839.159984][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1839.187240][ T7372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1839.278329][ T9] device 0 left promiscuous mode [ 1839.336536][ T7372] device hsr_slave_0 entered promiscuous mode [ 1839.381682][ T7372] device hsr_slave_1 entered promiscuous mode [ 1839.421683][ T7372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1839.453347][ T7372] Cannot create hsr debugfs directory [ 1839.854961][ T7432] netlink: 'syz.3.11879': attribute type 39 has an invalid length. [ 1840.803164][T12908] Bluetooth: hci1: command 0x041b tx timeout [ 1840.895656][ T7446] netlink: 'syz.3.11884': attribute type 10 has an invalid length. [ 1841.154588][ T7462] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11886'. [ 1841.267816][ T7462] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11886'. [ 1841.321115][ T7469] netlink: 'syz.1.11887': attribute type 10 has an invalid length. [ 1841.340214][ T7465] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11886'. [ 1841.513435][ T7472] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11889'. [ 1841.757327][ T7478] netlink: 'syz.3.11890': attribute type 10 has an invalid length. [ 1841.779073][ T7478] team0: Device hsr_slave_0 failed to register rx_handler [ 1841.861209][ T7372] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1841.900108][ T7482] netlink: 'syz.2.11893': attribute type 39 has an invalid length. [ 1841.968512][ T7372] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1841.978228][ T7372] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1841.997628][ T7486] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11894'. [ 1842.015991][ T7372] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1842.102801][ T9] device hsr_slave_0 left promiscuous mode [ 1842.133504][ T9] device hsr_slave_1 left promiscuous mode [ 1842.180730][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1842.192059][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1842.212012][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1842.240581][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1842.278335][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.312031][ T9] device bridge_slave_0 left promiscuous mode [ 1842.329047][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.883040][T12908] Bluetooth: hci1: command 0x040f tx timeout [ 1843.310589][ T9] device veth1_macvtap left promiscuous mode [ 1843.317495][ T9] device veth0_macvtap left promiscuous mode [ 1843.324051][ T9] device veth1_vlan left promiscuous mode [ 1843.498911][ T9] team0 (unregistering): Port device geneve1 removed [ 1843.761613][ T9] team0 (unregistering): Port device vlan0 removed [ 1844.051167][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1844.101896][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1844.146841][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1844.196293][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1844.453983][ T9] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1844.482013][ T9] team0 (unregistering): Port device bridge0 removed [ 1844.516253][ T9] bond0 (unregistering): Released all slaves [ 1844.640143][ T7503] netlink: 'syz.1.11898': attribute type 10 has an invalid length. [ 1844.658724][ T7529] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11902'. [ 1844.849781][ T7372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1844.902636][ T7537] netlink: 'syz.0.11905': attribute type 39 has an invalid length. [ 1844.933263][ T7539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11906'. [ 1844.949239][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1844.962897][T12908] Bluetooth: hci1: command 0x0419 tx timeout [ 1844.965180][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1845.007102][ T7539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11906'. [ 1845.029674][ T7542] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11907'. [ 1845.033804][ T7540] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11906'. [ 1845.065510][ T7372] 8021q: adding VLAN 0 to HW filter on device team0 [ 1845.105297][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1845.133942][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1845.171270][T22095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.178451][T22095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1845.222654][ T7546] netlink: 'syz.2.11908': attribute type 10 has an invalid length. [ 1845.237776][ T7546] team0: Device hsr_slave_0 failed to register rx_handler [ 1845.315532][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1845.324848][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1845.338525][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1845.351476][T22095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.358616][T22095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1845.368098][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1845.389624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1845.415638][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1845.434332][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1845.444305][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1845.456091][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1845.479405][ T7555] netlink: 'syz.0.11909': attribute type 10 has an invalid length. [ 1845.502029][ T7555] team0: Device hsr_slave_0 failed to register rx_handler [ 1845.528374][ T7372] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1845.559346][ T7372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1845.586183][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1845.598474][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1845.613554][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1845.622725][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1845.636177][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1845.650680][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1846.118052][ T7569] netlink: 'syz.2.11915': attribute type 10 has an invalid length. [ 1846.184918][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1846.192461][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1846.245154][ T7372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1846.499793][ T7575] __nla_validate_parse: 3 callbacks suppressed [ 1846.499837][ T7575] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11917'. [ 1846.629609][ T7581] netlink: 'syz.3.11918': attribute type 39 has an invalid length. [ 1846.930393][ T7595] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11924'. [ 1846.947412][ T7595] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11924'. [ 1846.960260][ T7595] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11924'. [ 1846.980739][ T7594] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11923'. [ 1847.140643][ T7600] netlink: 'syz.2.11925': attribute type 10 has an invalid length. [ 1847.182374][ T7600] team0: Device hsr_slave_0 failed to register rx_handler [ 1847.246380][ T7603] netlink: 'syz.1.11927': attribute type 10 has an invalid length. [ 1847.313611][ T6696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1847.363623][ T6696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1847.428900][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1847.439176][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1847.451009][ T7372] device veth0_vlan entered promiscuous mode [ 1847.478066][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1847.488425][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1847.511192][ T7372] device veth1_vlan entered promiscuous mode [ 1847.538754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1847.547433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1847.566025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1847.579889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1847.591756][ T7372] device veth0_macvtap entered promiscuous mode [ 1847.601528][ T7372] device veth1_macvtap entered promiscuous mode [ 1847.647212][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1847.662238][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.672620][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1847.700879][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.720527][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1847.738967][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.753216][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1847.764333][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.784856][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1847.795396][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1847.809033][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1847.820009][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1847.829602][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1847.841084][ T7614] netlink: 'syz.0.11931': attribute type 39 has an invalid length. [ 1847.852501][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1847.868599][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.878956][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1847.896085][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.906397][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1847.917132][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.928028][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1847.938778][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.962415][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1847.978273][ T7372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.987978][ T7372] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.998041][ T7372] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.014587][ T7372] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.035331][ T7617] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11933'. [ 1848.063990][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1848.081572][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1848.254332][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1848.287333][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.326543][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1848.353396][T22095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1848.362924][T22095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.389972][ T7629] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11937'. [ 1848.421760][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1848.521861][ T7633] netlink: 'syz.0.11938': attribute type 10 has an invalid length. [ 1850.361244][ T7645] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11941'. [ 1850.410123][ T7645] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11941'. [ 1850.420035][ T7649] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11941'. [ 1850.458728][ T7652] netlink: 'syz.0.11944': attribute type 39 has an invalid length. [ 1850.553422][ T7653] netlink: 'syz.3.11943': attribute type 10 has an invalid length. [ 1850.564956][ T7653] team0: Device hsr_slave_0 failed to register rx_handler [ 1851.783043][ T7669] __nla_validate_parse: 3 callbacks suppressed [ 1851.783062][ T7669] netlink: 830 bytes leftover after parsing attributes in process `syz.1.11950'. [ 1851.958399][ T7673] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11953'. [ 1852.237036][ T7685] netlink: 'syz.4.11958': attribute type 39 has an invalid length. [ 1853.053258][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.059688][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.509428][ T7699] netlink: 'syz.1.11962': attribute type 10 has an invalid length. [ 1854.876482][ T7712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11965'. [ 1854.952966][ T7712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11965'. [ 1854.962408][ T7714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11965'. [ 1855.886542][ T7734] netlink: 'syz.3.11974': attribute type 10 has an invalid length. [ 1855.966354][ T7734] team0: Device hsr_slave_0 failed to register rx_handler [ 1856.600141][ T7738] netlink: 'syz.2.11976': attribute type 39 has an invalid length. [ 1856.687717][ T7743] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11977'. [ 1856.712969][ T7743] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11977'. [ 1856.729354][ T7743] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11977'. [ 1856.780981][ T7747] FAULT_INJECTION: forcing a failure. [ 1856.780981][ T7747] name failslab, interval 1, probability 0, space 0, times 0 [ 1856.794273][ T7745] netlink: 'syz.4.11979': attribute type 10 has an invalid length. [ 1856.802593][ T7747] CPU: 0 PID: 7747 Comm: syz.3.11978 Not tainted syzkaller #0 [ 1856.810097][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1856.820182][ T7747] Call Trace: [ 1856.823495][ T7747] [ 1856.826449][ T7747] dump_stack_lvl+0x188/0x24e [ 1856.831168][ T7747] ? show_regs_print_info+0x12/0x12 [ 1856.836405][ T7747] ? load_image+0x410/0x410 [ 1856.840949][ T7747] ? __might_sleep+0xd0/0xd0 [ 1856.845565][ T7747] ? __lock_acquire+0x7c40/0x7c40 [ 1856.850621][ T7747] should_fail_ex+0x390/0x4c0 [ 1856.855342][ T7747] should_failslab+0x5/0x20 [ 1856.859860][ T7747] slab_pre_alloc_hook+0x59/0x300 [ 1856.864914][ T7747] ? tomoyo_encode+0x28a/0x550 [ 1856.869700][ T7747] __kmem_cache_alloc_node+0x4f/0x270 [ 1856.875115][ T7747] ? tomoyo_encode+0x28a/0x550 [ 1856.879905][ T7747] __kmalloc+0xa3/0x240 [ 1856.884105][ T7747] tomoyo_encode+0x28a/0x550 [ 1856.888735][ T7747] tomoyo_realpath_from_path+0x578/0x5c0 [ 1856.894405][ T7747] ? tomoyo_domain+0xd2/0x120 [ 1856.899110][ T7747] ? tomoyo_path_number_perm+0x205/0x650 [ 1856.904770][ T7747] tomoyo_path_number_perm+0x22f/0x650 [ 1856.910257][ T7747] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1856.915736][ T7747] ? ksys_write+0x1ce/0x260 [ 1856.920267][ T7747] ? common_file_perm+0x171/0x1c0 [ 1856.925368][ T7747] ? __fget_files+0x28/0x460 [ 1856.930003][ T7747] security_file_ioctl+0x6c/0xa0 [ 1856.934975][ T7747] __se_sys_ioctl+0x48/0x170 [ 1856.939600][ T7747] do_syscall_64+0x4c/0xa0 [ 1856.944039][ T7747] ? clear_bhb_loop+0x60/0xb0 [ 1856.948732][ T7747] ? clear_bhb_loop+0x60/0xb0 [ 1856.953433][ T7747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1856.959369][ T7747] RIP: 0033:0x7f723fd9e0d9 [ 1856.963802][ T7747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1856.983512][ T7747] RSP: 002b:00007f7240c4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1856.991949][ T7747] RAX: ffffffffffffffda RBX: 00007f7240025fa0 RCX: 00007f723fd9e0d9 [ 1856.999933][ T7747] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 1857.007919][ T7747] RBP: 00007f7240c4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1857.015901][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1857.023893][ T7747] R13: 00007f7240026038 R14: 00007f7240025fa0 R15: 00007ffcb52c2778 [ 1857.031910][ T7747] [ 1857.044929][ T7745] device vlan0 entered promiscuous mode [ 1857.083020][ T7747] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1857.090600][ T7745] team0: Port device vlan0 added [ 1857.206723][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11982'. [ 1857.222102][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11982'. [ 1857.233922][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11982'. [ 1857.826569][ T7760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11983'. [ 1857.862945][ T7760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11983'. [ 1857.884405][ T7763] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11983'. [ 1858.935738][ T7776] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11988'. [ 1858.954623][ T7776] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11988'. [ 1858.969221][ T7776] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11988'. [ 1859.072237][ T7781] netlink: 'syz.2.11990': attribute type 39 has an invalid length. [ 1859.136067][ T7784] netlink: 'syz.1.11991': attribute type 10 has an invalid length. [ 1859.438444][ T7794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11997'. [ 1861.304920][ T7815] netlink: 'syz.4.12005': attribute type 39 has an invalid length. [ 1861.906588][ T7834] netlink: 'syz.3.12010': attribute type 10 has an invalid length. [ 1861.942581][ T7834] team0: Device hsr_slave_0 failed to register rx_handler [ 1862.974121][ T7835] __nla_validate_parse: 12 callbacks suppressed [ 1862.974141][ T7835] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12012'. [ 1863.248030][ T7852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12018'. [ 1863.267609][ T7852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12018'. [ 1863.316779][ T7857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12018'. [ 1863.496990][ T7856] netlink: 'syz.4.12020': attribute type 39 has an invalid length. [ 1863.876579][ T7865] netlink: 'syz.3.12021': attribute type 10 has an invalid length. [ 1863.901026][ T7865] team0: Device hsr_slave_0 failed to register rx_handler [ 1864.347134][ T7878] netlink: 'syz.1.12026': attribute type 10 has an invalid length. [ 1865.079678][ T7889] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12032'. [ 1866.757084][ T7894] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12033'. [ 1866.981996][ T7896] netlink: 'syz.2.12035': attribute type 39 has an invalid length. [ 1867.024100][ T7901] netlink: 16046 bytes leftover after parsing attributes in process `syz.4.12037'. [ 1870.806313][ T7932] netlink: 'syz.4.12048': attribute type 39 has an invalid length. [ 1873.207684][ T7955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12056'. [ 1873.218247][ T7955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12056'. [ 1873.229937][ T7955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12056'. [ 1873.581044][ T7960] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12068'. [ 1873.853442][ T7971] netlink: 'syz.0.12061': attribute type 39 has an invalid length. [ 1876.468865][ T8003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12073'. [ 1876.509981][ T8004] netlink: 'syz.2.12074': attribute type 39 has an invalid length. [ 1876.549671][ T8003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12073'. [ 1876.624936][ T8005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12073'. [ 1876.849051][ T8012] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12076'. [ 1878.419818][ T8040] netlink: 'syz.4.12086': attribute type 10 has an invalid length. [ 1881.385034][ T8040] team0: Device hsr_slave_0 failed to register rx_handler [ 1881.439089][ T8043] netlink: 'syz.3.12089': attribute type 39 has an invalid length. [ 1881.561228][ T8053] netlink: 'syz.0.12091': attribute type 25 has an invalid length. [ 1881.569395][ T8053] netlink: 'syz.0.12091': attribute type 29 has an invalid length. [ 1882.834929][ T8079] netlink: 'syz.2.12101': attribute type 10 has an invalid length. [ 1882.874323][ T8079] team0: Device hsr_slave_0 failed to register rx_handler [ 1882.940005][ T8081] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12102'. [ 1886.186990][ T8092] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12107'. [ 1886.351941][ T8100] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12106'. [ 1886.910833][ T8119] netlink: 'syz.1.12114': attribute type 10 has an invalid length. [ 1887.094442][ T8124] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12118'. [ 1888.509769][ T8139] netlink: 'syz.3.12121': attribute type 10 has an invalid length. [ 1888.525689][ T8139] team0: Device hsr_slave_0 failed to register rx_handler [ 1890.991205][ T8148] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12125'. [ 1891.097780][ T8150] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12126'. [ 1891.428521][ T8161] netlink: 'syz.4.12130': attribute type 2 has an invalid length. [ 1891.456957][ T8162] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12132'. [ 1891.477247][ T8161] netlink: 'syz.4.12130': attribute type 11 has an invalid length. [ 1891.495749][ T8161] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12130'. [ 1891.524569][ T8162] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12132'. [ 1891.578114][ T8166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12132'. [ 1891.608683][ T8167] netlink: 'syz.3.12133': attribute type 10 has an invalid length. [ 1891.632449][ T8167] team0: Device hsr_slave_0 failed to register rx_handler [ 1892.239131][ T8171] netlink: 16278 bytes leftover after parsing attributes in process `syz.4.12134'. [ 1892.439578][ T8177] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12137'. [ 1892.479923][ T8183] netlink: 'syz.0.12135': attribute type 10 has an invalid length. [ 1892.493838][ T8183] team0: Device hsr_slave_0 failed to register rx_handler [ 1895.565620][ T8180] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12138'. [ 1895.594537][ T8190] netlink: 'syz.3.12139': attribute type 10 has an invalid length. [ 1895.602486][ T8190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12139'. [ 1895.629636][ T8190] device dummy0 entered promiscuous mode [ 1895.643557][ T8190] bridge0: port 2(dummy0) entered blocking state [ 1895.656017][ T8190] bridge0: port 2(dummy0) entered disabled state [ 1895.684670][ T8190] bridge0: port 2(dummy0) entered blocking state [ 1895.691130][ T8190] bridge0: port 2(dummy0) entered forwarding state [ 1896.001179][ T8202] netlink: 'syz.1.12144': attribute type 11 has an invalid length. [ 1896.023374][ T8202] __nla_validate_parse: 4 callbacks suppressed [ 1896.023413][ T8202] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12144'. [ 1897.871685][ T8214] netlink: 16278 bytes leftover after parsing attributes in process `syz.0.12148'. [ 1898.364114][ T8225] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12151'. [ 1898.390241][ T8229] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12153'. [ 1898.720525][ T8238] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12163'. [ 1898.918630][T32291] bond0: (slave syz_tun): Releasing backup interface [ 1898.958192][ T8245] netlink: 'syz.4.12154': attribute type 10 has an invalid length. [ 1898.959778][T21920] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1898.977833][T21920] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1898.988607][T21920] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1898.997255][T21920] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1899.002662][ T8245] team0: Device hsr_slave_0 failed to register rx_handler [ 1899.020751][T21920] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1899.029378][T21920] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1899.110024][ T4326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.182329][ T4326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.354967][ T8273] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12164'. [ 1900.448061][ T4326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.529557][ T8248] chnl_net:caif_netlink_parms(): no params data found [ 1900.676737][ T4326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.736704][ T8281] netlink: 'syz.2.12166': attribute type 10 has an invalid length. [ 1900.774758][ T8281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12166'. [ 1900.816149][ T8281] device dummy0 entered promiscuous mode [ 1900.836791][ T8281] bridge0: port 3(dummy0) entered blocking state [ 1900.877664][ T8281] bridge0: port 3(dummy0) entered disabled state [ 1900.931014][ T8281] bridge0: port 3(dummy0) entered blocking state [ 1900.937840][ T8281] bridge0: port 3(dummy0) entered forwarding state [ 1900.993596][ T8294] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12169'. [ 1901.059360][ T8248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.077820][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.098192][ T8248] device bridge_slave_0 entered promiscuous mode [ 1901.112531][ T8248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.123245][T21920] Bluetooth: hci2: command 0x0409 tx timeout [ 1901.147711][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.167764][ T8248] device bridge_slave_1 entered promiscuous mode [ 1901.245496][ T8248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1901.269195][ T8248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1901.389415][ T8283] delete_channel: no stack [ 1901.776581][ T8248] team0: Port device team_slave_0 added [ 1901.814917][ T8248] team0: Port device team_slave_1 added [ 1901.966539][ T8248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1902.003260][ T8248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1902.137474][ T8248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1902.150796][ T8248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1902.158199][ T8248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1902.247902][ T8248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1903.036520][ T8248] device hsr_slave_0 entered promiscuous mode [ 1903.084674][ T8248] device hsr_slave_1 entered promiscuous mode [ 1903.105666][ T8248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1903.148582][ T8248] Cannot create hsr debugfs directory [ 1903.202954][T21920] Bluetooth: hci2: command 0x041b tx timeout [ 1903.221508][ T8324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12177'. [ 1903.398843][ T8324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12177'. [ 1903.423386][ T8330] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12177'. [ 1904.571730][ T8350] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12182'. [ 1904.589444][ T8348] netlink: 'syz.3.12183': attribute type 10 has an invalid length. [ 1904.620043][ T8348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1904.694091][ T8348] team0: Port device batadv0 added [ 1904.787076][ T8357] netlink: 'syz.1.12181': attribute type 10 has an invalid length. [ 1904.812872][ T8357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12181'. [ 1904.852483][ T8360] netlink: 'syz.4.12185': attribute type 10 has an invalid length. [ 1904.873383][ T8360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12185'. [ 1904.883605][ T8360] device dummy0 entered promiscuous mode [ 1904.891853][ T8360] bridge0: port 3(dummy0) entered blocking state [ 1904.904247][ T8360] bridge0: port 3(dummy0) entered disabled state [ 1904.927461][ T8360] bridge0: port 3(dummy0) entered blocking state [ 1904.934168][ T8360] bridge0: port 3(dummy0) entered forwarding state [ 1905.283088][T21920] Bluetooth: hci2: command 0x040f tx timeout [ 1907.019969][ T8386] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12193'. [ 1907.363838][T21920] Bluetooth: hci2: command 0x0419 tx timeout [ 1907.467761][ T8404] netlink: 'syz.4.12196': attribute type 4 has an invalid length. [ 1907.487269][ T8406] netlink: 'syz.3.12195': attribute type 10 has an invalid length. [ 1907.529339][ T8406] team0: Device hsr_slave_0 failed to register rx_handler [ 1907.631730][ T8407] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12197'. [ 1908.025686][ T8248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1909.094841][ T8248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1909.120734][ T8435] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12205'. [ 1909.175349][ T8248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1909.194477][ T8248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1909.271316][ T4326] device hsr_slave_0 left promiscuous mode [ 1909.334335][ T4326] device hsr_slave_1 left promiscuous mode [ 1909.345367][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1909.379102][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1909.412437][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1909.457095][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1910.326293][ T4326] device bridge_slave_0 left promiscuous mode [ 1910.348991][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.418583][ T4326] device veth1_macvtap left promiscuous mode [ 1910.437146][ T4326] device veth0_macvtap left promiscuous mode [ 1910.453175][ T4326] device veth1_vlan left promiscuous mode [ 1910.638377][ T4326] team0 (unregistering): Port device geneve1 removed [ 1910.912988][ T4326] team0 (unregistering): Port device vlan0 removed [ 1911.171952][ T4326] team0 (unregistering): Port device team_slave_1 removed [ 1911.211979][ T4326] team0 (unregistering): Port device team_slave_0 removed [ 1911.253116][ T4326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1911.299904][ T4326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1911.343344][ T4326] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1911.540142][ T4326] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1911.571747][ T4326] team0 (unregistering): Port device bridge0 removed [ 1911.602726][ T4326] bond0 (unregistering): Released all slaves [ 1911.709788][ T8449] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12210'. [ 1911.752923][ T8466] netlink: 'syz.2.12214': attribute type 10 has an invalid length. [ 1911.761309][ T8466] team0: Device hsr_slave_0 failed to register rx_handler [ 1911.955611][ T8475] tc_dump_action: action bad kind [ 1911.969828][ T8248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1912.015945][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1912.059316][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1912.091372][ T8477] FAULT_INJECTION: forcing a failure. [ 1912.091372][ T8477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1912.151727][ T8477] CPU: 1 PID: 8477 Comm: syz.2.12218 Not tainted syzkaller #0 [ 1912.159260][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1912.169435][ T8477] Call Trace: [ 1912.172743][ T8477] [ 1912.175696][ T8477] dump_stack_lvl+0x188/0x24e [ 1912.180684][ T8477] ? show_regs_print_info+0x12/0x12 [ 1912.185918][ T8477] ? load_image+0x410/0x410 [ 1912.190467][ T8477] ? __lock_acquire+0x7c40/0x7c40 [ 1912.195545][ T8477] should_fail_ex+0x390/0x4c0 [ 1912.200268][ T8477] _copy_from_user+0x2c/0x170 [ 1912.204979][ T8477] __sys_bpf+0x2ea/0x780 [ 1912.209262][ T8477] ? bpf_link_show_fdinfo+0x380/0x380 [ 1912.214713][ T8477] ? lock_chain_count+0x20/0x20 [ 1912.219624][ T8477] __x64_sys_bpf+0x78/0x90 [ 1912.224080][ T8477] do_syscall_64+0x4c/0xa0 [ 1912.228531][ T8477] ? clear_bhb_loop+0x60/0xb0 [ 1912.233242][ T8477] ? clear_bhb_loop+0x60/0xb0 [ 1912.237960][ T8477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1912.243887][ T8477] RIP: 0033:0x7fd79679e0d9 [ 1912.248329][ T8477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1912.267972][ T8477] RSP: 002b:00007fd7975de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1912.276429][ T8477] RAX: ffffffffffffffda RBX: 00007fd796a25fa0 RCX: 00007fd79679e0d9 [ 1912.284434][ T8477] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1912.292438][ T8477] RBP: 00007fd7975de090 R08: 0000000000000000 R09: 0000000000000000 [ 1912.300437][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1912.308421][ T8477] R13: 00007fd796a26038 R14: 00007fd796a25fa0 R15: 00007ffe8e9ca1a8 [ 1912.316439][ T8477] [ 1912.339304][ T8248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1912.403188][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1912.430865][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1912.480557][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.487920][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1912.556430][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1912.592774][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1912.621043][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1912.667197][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.674525][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1912.734408][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1912.756326][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1912.780870][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1912.804460][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1912.876813][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1912.959508][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1913.033872][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1913.059880][ T8491] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12221'. [ 1913.086419][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1913.112130][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1913.135705][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1913.160865][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1913.185681][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1913.209373][ T8491] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12221'. [ 1913.287061][ T8501] netlink: 'syz.3.12220': attribute type 10 has an invalid length. [ 1913.309716][ T8501] team0: Device hsr_slave_0 failed to register rx_handler [ 1914.487558][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.494055][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.622650][ T8496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12221'. [ 1915.968564][ T8542] netlink: 'syz.2.12225': attribute type 10 has an invalid length. [ 1916.001410][ T8542] team0: Device hsr_slave_0 failed to register rx_handler [ 1916.130289][ T8545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12229'. [ 1916.205919][ T8545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12229'. [ 1916.301045][ T8548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12229'. [ 1917.185291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1917.193670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1917.245688][ T8248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1917.330942][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1917.358463][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1917.478929][ T8573] netlink: 'syz.1.12234': attribute type 10 has an invalid length. [ 1919.398896][ T8573] bridge0: port 3(dummy0) entered disabled state [ 1919.405474][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.412598][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.468556][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1919.492115][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1919.527209][ T8583] netlink: 'syz.2.12236': attribute type 10 has an invalid length. [ 1919.561835][ T8592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12237'. [ 1919.563734][ T8583] team0: Device hsr_slave_0 failed to register rx_handler [ 1919.616799][ T8248] device veth0_vlan entered promiscuous mode [ 1919.634057][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1919.642511][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1919.660228][ T8592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12237'. [ 1919.696452][ T8596] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12237'. [ 1919.725397][ T8248] device veth1_vlan entered promiscuous mode [ 1919.791827][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1919.808253][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1919.828214][ T8248] device veth0_macvtap entered promiscuous mode [ 1919.840290][ T8248] device veth1_macvtap entered promiscuous mode [ 1919.876652][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1919.901696][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.947317][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1920.002792][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.055242][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1920.076539][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.092199][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1920.113840][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.150787][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1920.160253][ T8606] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12241'. [ 1920.260679][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1920.273868][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1920.300152][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1920.344381][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1920.368922][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1920.380305][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.390627][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1920.401513][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.411900][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1920.423445][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.433885][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1920.447632][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.460376][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1920.997073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1921.054085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1921.090043][ T8248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1921.142904][ T8248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1921.151648][ T8248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1921.171694][ T8619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12248'. [ 1921.179557][ T8248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1921.220517][ T8619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12248'. [ 1921.245330][ T8624] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12248'. [ 1921.284824][ T8623] netlink: 'syz.1.12247': attribute type 10 has an invalid length. [ 1921.307136][ T8623] netlink: 'syz.1.12247': attribute type 4 has an invalid length. [ 1921.324800][ T8623] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12247'. [ 1923.167669][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1923.214541][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1923.222193][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1923.288078][ T8636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12253'. [ 1923.297841][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1923.310654][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1923.318593][ T8636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12253'. [ 1923.335174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1923.357039][ T8639] netlink: 'syz.3.12254': attribute type 10 has an invalid length. [ 1923.378839][ T8639] team0: Device hsr_slave_0 failed to register rx_handler [ 1923.418350][ T8642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12255'. [ 1923.437465][ T8636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12253'. [ 1923.452045][ T8642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12255'. [ 1923.464651][ T8642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12255'. [ 1927.510048][ T8657] netlink: 'syz.4.12261': attribute type 10 has an invalid length. [ 1927.529174][ T8657] netlink: 'syz.4.12261': attribute type 4 has an invalid length. [ 1927.553190][ T8657] netlink: 116 bytes leftover after parsing attributes in process `syz.4.12261'. [ 1927.592623][ T8657] team0: Device vlan0 failed to change mtu [ 1927.606994][ T8661] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12262'. [ 1927.647510][ T8671] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12266'. [ 1927.667706][ T8671] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12266'. [ 1928.476858][ T8671] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12266'. [ 1928.486693][ T8677] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12267'. [ 1928.706348][ T8689] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12269'. [ 1928.729440][ T8689] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12269'. [ 1928.741418][ T8689] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12269'. [ 1928.757695][ T8694] netlink: 'syz.1.12270': attribute type 10 has an invalid length. [ 1928.955370][ T8700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12274'. [ 1932.667360][ T8717] __nla_validate_parse: 4 callbacks suppressed [ 1932.667377][ T8717] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12282'. [ 1932.946545][ T8737] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12285'. [ 1932.976750][ T8739] netlink: 'syz.4.12288': attribute type 1 has an invalid length. [ 1933.002747][ T8739] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.12288'. [ 1933.020555][ T8737] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12285'. [ 1933.073188][ T8742] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12285'. [ 1933.143524][ T8746] netlink: 'syz.3.12289': attribute type 10 has an invalid length. [ 1933.153537][ T8746] team0: Device hsr_slave_0 failed to register rx_handler [ 1933.559516][ T8754] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12292'. [ 1933.573103][T12908] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1933.586401][T12908] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1933.595599][T12908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1933.610887][T12908] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1933.618956][T12908] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1933.626692][T12908] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1933.905807][ T8755] chnl_net:caif_netlink_parms(): no params data found [ 1934.058030][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.070908][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.087988][ T8755] device bridge_slave_0 entered promiscuous mode [ 1934.099865][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.112426][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.135208][ T8755] device bridge_slave_1 entered promiscuous mode [ 1934.195220][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1934.207621][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1934.248438][ T8755] team0: Port device team_slave_0 added [ 1934.269169][ T8755] team0: Port device team_slave_1 added [ 1934.310868][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1934.330595][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1934.372859][ T8755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1934.394959][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1934.401935][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1934.462888][ T8755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1936.335099][ T8755] device hsr_slave_0 entered promiscuous mode [ 1936.360375][ T8755] device hsr_slave_1 entered promiscuous mode [ 1936.381595][ T8755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1936.389320][ T8755] Cannot create hsr debugfs directory [ 1936.582009][T22095] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.717427][T22095] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.617668][T22095] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.674565][ T8788] netlink: 'syz.2.12301': attribute type 1 has an invalid length. [ 1937.682553][ T8788] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.12301'. [ 1937.813752][T22095] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.848754][ T8792] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12302'. [ 1938.561843][T12908] Bluetooth: hci4: command 0x0409 tx timeout [ 1939.649752][ T8808] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12308'. [ 1940.643817][T21920] Bluetooth: hci4: command 0x041b tx timeout [ 1942.723134][T12908] Bluetooth: hci4: command 0x040f tx timeout [ 1943.975054][ T8850] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12317'. [ 1944.085482][ T8848] netlink: 'syz.0.12324': attribute type 10 has an invalid length. [ 1944.110584][ T8848] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12324'. [ 1944.299757][ T8861] netlink: 'syz.2.12318': attribute type 10 has an invalid length. [ 1944.326593][ T8861] netlink: 'syz.2.12318': attribute type 4 has an invalid length. [ 1944.357722][ T8861] netlink: 116 bytes leftover after parsing attributes in process `syz.2.12318'. [ 1944.397203][ T8861] team0: Device vlan0 failed to change mtu [ 1944.803241][T12908] Bluetooth: hci4: command 0x0419 tx timeout [ 1946.443490][ T8874] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12322'. [ 1946.486552][ T8876] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12321'. [ 1946.625216][ T8755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1946.685290][ T8755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1946.726612][ T8755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1946.808977][ T8755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1947.251858][ T8909] netlink: 'syz.3.12330': attribute type 10 has an invalid length. [ 1947.273745][ T8913] netlink: 'syz.2.12332': attribute type 29 has an invalid length. [ 1947.283006][ T8909] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12330'. [ 1947.293109][ T8911] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12331'. [ 1947.337199][ T8913] netlink: 'syz.2.12332': attribute type 29 has an invalid length. [ 1947.392399][ T8920] netlink: 'syz.2.12332': attribute type 29 has an invalid length. [ 1948.854027][ T8916] netlink: 'syz.2.12332': attribute type 29 has an invalid length. [ 1950.657179][ T8930] netlink: 'syz.4.12335': attribute type 10 has an invalid length. [ 1950.675224][ T8930] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12335'. [ 1950.773316][T22095] device hsr_slave_0 left promiscuous mode [ 1950.790471][T22095] device hsr_slave_1 left promiscuous mode [ 1950.802375][T22095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1950.827977][T22095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1953.219037][T22095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1953.243915][T22095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1953.293622][T22095] bridge0: port 3(dummy0) entered disabled state [ 1953.320011][T22095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.335732][T22095] device bridge_slave_0 left promiscuous mode [ 1953.342131][T22095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.370278][T22095] device veth1_vlan left promiscuous mode [ 1953.919097][T22095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1953.961391][T22095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1954.196637][T22095] bond0 (unregistering): Released all slaves [ 1954.287088][ T8948] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12336'. [ 1954.297713][ T8950] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12337'. [ 1954.336606][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1954.454208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1954.464145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1954.484100][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1954.559983][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1954.603744][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1954.630463][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.637666][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1954.716287][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1954.757111][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1954.771892][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1954.788316][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 1954.795523][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1954.814593][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1954.876582][ T8984] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12345'. [ 1954.955997][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1954.968289][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1954.987631][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1955.009653][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1955.117747][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1955.136972][ T8981] netlink: 'syz.4.12346': attribute type 10 has an invalid length. [ 1955.160518][ T8981] team0: Device hsr_slave_0 failed to register rx_handler [ 1958.075543][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1958.091188][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1958.100510][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1958.124191][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1958.134431][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1958.154514][ T8755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1958.439022][ T9003] netlink: 'syz.0.12361': attribute type 10 has an invalid length. [ 1958.458717][ T9003] device vlan0 entered promiscuous mode [ 1958.508977][ T9003] team0: Port device vlan0 added [ 1958.520820][ T9001] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12352'. [ 1958.546392][ T9007] FAULT_INJECTION: forcing a failure. [ 1958.546392][ T9007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1958.561369][ T9007] CPU: 0 PID: 9007 Comm: syz.2.12355 Not tainted syzkaller #0 [ 1958.568863][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1958.578941][ T9007] Call Trace: [ 1958.582230][ T9007] [ 1958.585164][ T9007] dump_stack_lvl+0x188/0x24e [ 1958.589858][ T9007] ? show_regs_print_info+0x12/0x12 [ 1958.595066][ T9007] ? load_image+0x410/0x410 [ 1958.599590][ T9007] ? __lock_acquire+0x7c40/0x7c40 [ 1958.604633][ T9007] ? snprintf+0xe5/0x140 [ 1958.608884][ T9007] should_fail_ex+0x390/0x4c0 [ 1958.613584][ T9007] _copy_to_user+0x2c/0x130 [ 1958.618101][ T9007] simple_read_from_buffer+0xe3/0x150 [ 1958.623499][ T9007] proc_fail_nth_read+0x1a6/0x220 [ 1958.628537][ T9007] ? proc_fault_inject_write+0x310/0x310 [ 1958.634186][ T9007] ? fsnotify_perm+0x248/0x550 [ 1958.638955][ T9007] ? proc_fault_inject_write+0x310/0x310 [ 1958.644603][ T9007] vfs_read+0x2db/0x960 [ 1958.648777][ T9007] ? kernel_read+0x1e0/0x1e0 [ 1958.653387][ T9007] ? __fget_files+0x28/0x460 [ 1958.658003][ T9007] ? __fget_files+0x3fc/0x460 [ 1958.662704][ T9007] ? __fdget_pos+0x2ae/0x360 [ 1958.667308][ T9007] ? ksys_read+0x70/0x260 [ 1958.671665][ T9007] ksys_read+0x14d/0x260 [ 1958.675933][ T9007] ? vfs_write+0x9a0/0x9a0 [ 1958.680370][ T9007] ? lockdep_hardirqs_on+0x94/0x140 [ 1958.685585][ T9007] do_syscall_64+0x4c/0xa0 [ 1958.690010][ T9007] ? clear_bhb_loop+0x60/0xb0 [ 1958.694693][ T9007] ? clear_bhb_loop+0x60/0xb0 [ 1958.699380][ T9007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1958.705283][ T9007] RIP: 0033:0x7fd79675e90e [ 1958.709701][ T9007] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1958.729309][ T9007] RSP: 002b:00007fd7975ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1958.737728][ T9007] RAX: ffffffffffffffda RBX: 00007fd7975de6c0 RCX: 00007fd79675e90e [ 1958.745713][ T9007] RDX: 000000000000000f RSI: 00007fd7975de0a0 RDI: 0000000000000004 [ 1958.753701][ T9007] RBP: 00007fd7975de090 R08: 0000000000000000 R09: 0000000000000000 [ 1958.761673][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1958.769646][ T9007] R13: 00007fd796a26038 R14: 00007fd796a25fa0 R15: 00007ffe8e9ca1a8 [ 1958.777637][ T9007] [ 1959.270864][ T9021] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12362'. [ 1959.378288][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1959.400998][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1959.436138][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1959.462122][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1959.482543][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1959.524166][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1959.536096][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1959.560018][ T8755] device veth0_vlan entered promiscuous mode [ 1959.578189][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1959.608023][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1959.637180][ T8755] device veth1_vlan entered promiscuous mode [ 1959.729215][T14193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1959.744628][T14193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1959.769469][T14193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1959.811134][T14193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1959.838339][ T8755] device veth0_macvtap entered promiscuous mode [ 1959.873619][ T8755] device veth1_macvtap entered promiscuous mode [ 1959.931699][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.962918][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.973291][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.984050][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.994724][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1960.005583][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.015973][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1960.026852][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.039760][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1962.461958][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1962.476506][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1962.485299][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1962.513877][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1962.549831][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1962.585474][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.612091][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1962.629201][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.639864][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1962.653062][T21920] Bluetooth: hci1: command 0x0406 tx timeout [ 1962.657186][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.669812][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1962.687267][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.700685][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1962.718337][ T9041] netlink: 'syz.3.12368': attribute type 10 has an invalid length. [ 1962.728803][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1962.738135][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1962.758583][ T8755] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.767966][ T8755] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.777507][ T8755] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.786985][ T8755] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.938567][T22095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1962.979437][T22095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.037042][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1963.066671][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.082339][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.107638][T22095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1963.133341][ T9056] FAULT_INJECTION: forcing a failure. [ 1963.133341][ T9056] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.172919][ T9056] CPU: 1 PID: 9056 Comm: syz.2.12374 Not tainted syzkaller #0 [ 1963.180470][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1963.190544][ T9056] Call Trace: [ 1963.193825][ T9056] [ 1963.196752][ T9056] dump_stack_lvl+0x188/0x24e [ 1963.201441][ T9056] ? show_regs_print_info+0x12/0x12 [ 1963.206644][ T9056] ? load_image+0x410/0x410 [ 1963.211145][ T9056] ? __might_sleep+0xd0/0xd0 [ 1963.215723][ T9056] ? __lock_acquire+0x7c40/0x7c40 [ 1963.220743][ T9056] should_fail_ex+0x390/0x4c0 [ 1963.225417][ T9056] should_failslab+0x5/0x20 [ 1963.229907][ T9056] slab_pre_alloc_hook+0x59/0x300 [ 1963.234928][ T9056] ? __lock_acquire+0x138a/0x7c40 [ 1963.239945][ T9056] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1963.245658][ T9056] __kmem_cache_alloc_node+0x4f/0x270 [ 1963.251024][ T9056] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1963.256736][ T9056] __kmalloc+0xa3/0x240 [ 1963.260889][ T9056] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1963.266429][ T9056] ? tomoyo_domain+0xd2/0x120 [ 1963.271114][ T9056] ? tomoyo_path_number_perm+0x205/0x650 [ 1963.276736][ T9056] tomoyo_path_number_perm+0x22f/0x650 [ 1963.282194][ T9056] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1963.287641][ T9056] ? ksys_write+0x1ce/0x260 [ 1963.292141][ T9056] ? common_file_perm+0x171/0x1c0 [ 1963.297182][ T9056] ? __fget_files+0x28/0x460 [ 1963.301771][ T9056] security_file_ioctl+0x6c/0xa0 [ 1963.306705][ T9056] __se_sys_ioctl+0x48/0x170 [ 1963.311291][ T9056] do_syscall_64+0x4c/0xa0 [ 1963.315706][ T9056] ? clear_bhb_loop+0x60/0xb0 [ 1963.320374][ T9056] ? clear_bhb_loop+0x60/0xb0 [ 1963.325046][ T9056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1963.330934][ T9056] RIP: 0033:0x7fd79679e0d9 [ 1963.335343][ T9056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1963.354940][ T9056] RSP: 002b:00007fd7975de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1963.363366][ T9056] RAX: ffffffffffffffda RBX: 00007fd796a25fa0 RCX: 00007fd79679e0d9 [ 1963.371329][ T9056] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 1963.379289][ T9056] RBP: 00007fd7975de090 R08: 0000000000000000 R09: 0000000000000000 [ 1963.387250][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1963.395209][ T9056] R13: 00007fd796a26038 R14: 00007fd796a25fa0 R15: 00007ffe8e9ca1a8 [ 1963.403186][ T9056] [ 1963.450076][ T9056] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1963.483917][ T9063] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12287'. [ 1963.513239][ T9063] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12287'. [ 1963.578320][ T9065] netlink: 'syz.4.12377': attribute type 7 has an invalid length. [ 1963.618082][ T9065] netlink: 'syz.4.12377': attribute type 10 has an invalid length. [ 1963.644235][ T9065] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12377'. [ 1963.717804][ T9065] batman_adv: batadv0: Adding interface: veth0_vlan [ 1963.738629][ T9065] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1963.816771][ T9065] batman_adv: batadv0: Interface activated: veth0_vlan [ 1963.889333][ T9079] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12381'. [ 1965.816000][ T9082] netlink: 'syz.4.12382': attribute type 10 has an invalid length. [ 1967.606362][ T9112] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12392'. [ 1967.631295][ T9113] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12393'. [ 1969.139563][ T9128] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12397'. [ 1969.358489][ T9133] netlink: 'syz.3.12398': attribute type 10 has an invalid length. [ 1969.404507][ T9130] netlink: 168556 bytes leftover after parsing attributes in process `syz.0.12399'. [ 1969.579642][ T9130] netlink: zone id is out of range [ 1969.636676][ T9130] netlink: zone id is out of range [ 1969.718793][ T9130] netlink: zone id is out of range [ 1969.799449][ T9130] netlink: zone id is out of range [ 1969.861156][ T9130] netlink: zone id is out of range [ 1969.926680][ T9130] netlink: zone id is out of range [ 1969.971477][ T9130] netlink: zone id is out of range [ 1970.003685][ T9130] netlink: zone id is out of range [ 1970.008861][ T9130] netlink: zone id is out of range [ 1970.109466][ T9130] netlink: zone id is out of range [ 1970.185392][ T9149] netlink: 'syz.2.12405': attribute type 7 has an invalid length. [ 1970.238365][ T9149] netlink: 'syz.2.12405': attribute type 10 has an invalid length. [ 1970.293107][ T9149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12405'. [ 1970.370703][ T9149] batman_adv: batadv0: Adding interface: veth0_vlan [ 1970.381315][ T9149] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1970.466181][ T9149] batman_adv: batadv0: Interface activated: veth0_vlan [ 1973.631639][ T9174] netlink: 'syz.2.12413': attribute type 10 has an invalid length. [ 1973.655113][ T9174] team0: Device hsr_slave_0 failed to register rx_handler [ 1973.691301][ T9178] netlink: 'syz.4.12414': attribute type 10 has an invalid length. [ 1973.710448][ T9178] team0: Device hsr_slave_0 failed to register rx_handler [ 1973.866544][ T9187] netlink: 'syz.3.12418': attribute type 29 has an invalid length. [ 1973.924926][ T9190] netlink: 'syz.0.12416': attribute type 41 has an invalid length. [ 1973.983785][ T9187] netlink: 'syz.3.12418': attribute type 29 has an invalid length. [ 1973.992088][ T9194] netlink: 'syz.3.12418': attribute type 29 has an invalid length. [ 1974.021972][ T9198] netlink: 'syz.3.12418': attribute type 29 has an invalid length. [ 1974.212455][ T9204] team0: Device hsr_slave_0 failed to register rx_handler [ 1974.457615][ T9216] validate_nla: 3 callbacks suppressed [ 1974.457653][ T9216] netlink: 'syz.4.12426': attribute type 10 has an invalid length. [ 1974.479731][ T9216] netlink: 'syz.4.12426': attribute type 4 has an invalid length. [ 1974.491186][ T9216] netlink: 116 bytes leftover after parsing attributes in process `syz.4.12426'. [ 1974.522326][ T9216] team0: Device vlan0 failed to change mtu [ 1974.895911][ T9221] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12428'. [ 1975.805258][ T9234] netlink: 'syz.0.12430': attribute type 10 has an invalid length. [ 1975.914734][ T9234] team0: Device hsr_slave_0 failed to register rx_handler [ 1975.937812][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.944260][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.031032][ T9233] netlink: 'syz.3.12432': attribute type 10 has an invalid length. [ 1976.053093][ T9233] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12432'. [ 1976.162757][ T9243] netlink: 'syz.2.12438': attribute type 2 has an invalid length. [ 1976.177818][ T9243] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12438'. [ 1976.211656][ T9243] netlink: 'syz.2.12438': attribute type 2 has an invalid length. [ 1976.224145][ T9243] netlink: 'syz.2.12438': attribute type 8 has an invalid length. [ 1976.241112][ T9243] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12438'. [ 1976.342422][ T9249] netlink: 'syz.3.12439': attribute type 10 has an invalid length. [ 1976.375304][ T9249] netlink: 'syz.3.12439': attribute type 4 has an invalid length. [ 1976.400531][ T9249] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12439'. [ 1976.421517][ T9251] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.12440'. [ 1976.442117][ T9249] team0: Device vlan0 failed to change mtu [ 1976.493636][ T9253] netlink: 'syz.4.12441': attribute type 10 has an invalid length. [ 1976.514754][ T9251] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.12440'. [ 1978.805444][ T9264] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12445'. [ 1979.123961][ T9274] team0: Device hsr_slave_0 failed to register rx_handler [ 1979.243548][ T9274] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.12449'. [ 1979.378850][ T9287] FAULT_INJECTION: forcing a failure. [ 1979.378850][ T9287] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.462968][ T9287] CPU: 0 PID: 9287 Comm: syz.2.12453 Not tainted syzkaller #0 [ 1979.470503][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1979.480607][ T9287] Call Trace: [ 1979.483912][ T9287] [ 1979.486873][ T9287] dump_stack_lvl+0x188/0x24e [ 1979.491608][ T9287] ? show_regs_print_info+0x12/0x12 [ 1979.496839][ T9287] ? load_image+0x410/0x410 [ 1979.501347][ T9287] ? verify_lock_unused+0x140/0x140 [ 1979.506549][ T9287] ? perf_trace_lock+0x301/0x390 [ 1979.511497][ T9287] should_fail_ex+0x390/0x4c0 [ 1979.516181][ T9287] should_failslab+0x5/0x20 [ 1979.520683][ T9287] slab_pre_alloc_hook+0x59/0x300 [ 1979.525738][ T9287] kmem_cache_alloc+0x56/0x2f0 [ 1979.530533][ T9287] ? skb_clone+0x1e7/0x370 [ 1979.535004][ T9287] skb_clone+0x1e7/0x370 [ 1979.539294][ T9287] __netlink_deliver_tap+0x3e4/0x7e0 [ 1979.544655][ T9287] ? netlink_deliver_tap+0x2e/0x1b0 [ 1979.549908][ T9287] netlink_deliver_tap+0x19c/0x1b0 [ 1979.555053][ T9287] netlink_unicast+0x777/0x920 [ 1979.559838][ T9287] netlink_sendmsg+0x8ad/0xbd0 [ 1979.564616][ T9287] ? netlink_getsockopt+0x550/0x550 [ 1979.569818][ T9287] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1979.575387][ T9287] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1979.580700][ T9287] ? security_socket_sendmsg+0x7c/0xa0 [ 1979.586185][ T9287] ? netlink_getsockopt+0x550/0x550 [ 1979.591412][ T9287] ____sys_sendmsg+0x5ed/0x9a0 [ 1979.596190][ T9287] ? __sys_sendmsg_sock+0x30/0x30 [ 1979.601229][ T9287] ? __import_iovec+0x306/0x510 [ 1979.606102][ T9287] ? import_iovec+0x6f/0xa0 [ 1979.610619][ T9287] ___sys_sendmsg+0x2a2/0x360 [ 1979.615318][ T9287] ? __sys_sendmsg+0x2a0/0x2a0 [ 1979.620124][ T9287] ? __lock_acquire+0x7c40/0x7c40 [ 1979.625247][ T9287] __se_sys_sendmsg+0x1c3/0x2b0 [ 1979.630150][ T9287] ? __x64_sys_sendmsg+0x80/0x80 [ 1979.635170][ T9287] ? lockdep_hardirqs_on+0x94/0x140 [ 1979.640415][ T9287] do_syscall_64+0x4c/0xa0 [ 1979.644886][ T9287] ? clear_bhb_loop+0x60/0xb0 [ 1979.649583][ T9287] ? clear_bhb_loop+0x60/0xb0 [ 1979.654264][ T9287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1979.660174][ T9287] RIP: 0033:0x7fd79679e0d9 [ 1979.664634][ T9287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1979.684280][ T9287] RSP: 002b:00007fd7975de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1979.692722][ T9287] RAX: ffffffffffffffda RBX: 00007fd796a25fa0 RCX: 00007fd79679e0d9 [ 1979.700695][ T9287] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1979.708666][ T9287] RBP: 00007fd7975de090 R08: 0000000000000000 R09: 0000000000000000 [ 1979.716637][ T9287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1979.724628][ T9287] R13: 00007fd796a26038 R14: 00007fd796a25fa0 R15: 00007ffe8e9ca1a8 [ 1979.732684][ T9287] [ 1979.786521][ T9291] validate_nla: 2 callbacks suppressed [ 1979.786540][ T9291] netlink: 'syz.0.12455': attribute type 10 has an invalid length. [ 1979.824751][ T9291] team0: Device hsr_slave_0 failed to register rx_handler [ 1979.941024][ T9297] netlink: 'syz.1.12456': attribute type 10 has an invalid length. [ 1979.956456][ T9297] netlink: 'syz.1.12456': attribute type 4 has an invalid length. [ 1979.969937][ T9297] __nla_validate_parse: 1 callbacks suppressed [ 1979.969973][ T9297] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12456'. [ 1980.000928][ T9297] net_ratelimit: 15 callbacks suppressed [ 1980.000968][ T9297] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1980.101197][ T9299] netlink: 'syz.3.12457': attribute type 10 has an invalid length. [ 1983.371056][ T9319] netlink: 'syz.0.12464': attribute type 10 has an invalid length. [ 1983.421216][ T9319] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12464'. [ 1983.474974][ T9323] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12466'. [ 1983.891859][ T9334] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.12467'. [ 1984.180574][ T9334] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.12467'. [ 1986.318553][ T9340] netlink: 'syz.1.12470': attribute type 10 has an invalid length. [ 1986.327456][ T9340] netlink: 'syz.1.12470': attribute type 4 has an invalid length. [ 1986.337147][ T9340] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12470'. [ 1986.351369][ T9340] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1986.369493][ T9341] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12471'. [ 1986.585308][ T9356] netlink: 'syz.4.12474': attribute type 10 has an invalid length. [ 1986.702730][ T9364] netlink: 'syz.2.12475': attribute type 10 has an invalid length. [ 1986.724100][ T9364] team0: Device hsr_slave_0 failed to register rx_handler [ 1986.895273][ T9366] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12480'. [ 1986.955894][ T9368] netlink: 'syz.0.12479': attribute type 10 has an invalid length. [ 1987.001575][ T9368] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12479'. [ 1987.532166][ T9384] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12486'. [ 1987.660123][ T9387] netlink: 'syz.3.12487': attribute type 10 has an invalid length. [ 1987.710038][ T9387] netlink: 'syz.3.12487': attribute type 4 has an invalid length. [ 1987.719883][ T9387] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12487'. [ 1987.748119][ T9387] team0: Device vlan0 failed to change mtu [ 1988.166586][ T9406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1988.179749][ T9406] IPv6: NLM_F_CREATE should be set when creating new route [ 1988.187057][ T9406] IPv6: NLM_F_CREATE should be set when creating new route [ 1988.194343][ T9406] IPv6: NLM_F_CREATE should be set when creating new route [ 1989.003464][ T9420] netlink: 'syz.3.12498': attribute type 10 has an invalid length. [ 1989.020598][ T9420] team0: Device hsr_slave_0 failed to register rx_handler [ 1989.608034][ T9429] netlink: 'syz.1.12501': attribute type 10 has an invalid length. [ 1989.617464][ T9429] netlink: 'syz.1.12501': attribute type 4 has an invalid length. [ 1989.657521][ T9429] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12501'. [ 1989.680824][ T9429] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1989.779647][ T9435] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12504'. [ 1990.104294][ T9443] team0: Device hsr_slave_0 failed to register rx_handler [ 1990.162022][ T9445] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12508'. [ 1990.260832][ T9449] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12509'. [ 1990.873410][ T9466] team0: Device vlan0 failed to change mtu [ 1991.750225][ T9477] validate_nla: 5 callbacks suppressed [ 1991.750261][ T9477] netlink: 'syz.4.12520': attribute type 10 has an invalid length. [ 1991.809649][ T9477] netlink: 'syz.4.12520': attribute type 4 has an invalid length. [ 1991.828278][ T9477] __nla_validate_parse: 1 callbacks suppressed [ 1991.828312][ T9477] netlink: 116 bytes leftover after parsing attributes in process `syz.4.12520'. [ 1991.961418][ T9477] team0: Device vlan0 failed to change mtu [ 1991.964354][ T9480] netlink: 'syz.1.12522': attribute type 10 has an invalid length. [ 1991.992919][ T9480] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12522'. [ 1992.186781][ T9489] netlink: 'syz.4.12524': attribute type 10 has an invalid length. [ 1992.232689][ T9489] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12524'. [ 1992.479364][ T9500] netlink: 'syz.4.12527': attribute type 10 has an invalid length. [ 1992.531359][ T9500] team0: Device hsr_slave_0 failed to register rx_handler [ 1993.551606][ T9504] netlink: 'syz.3.12528': attribute type 10 has an invalid length. [ 1993.573182][ T9504] team0: Device hsr_slave_0 failed to register rx_handler [ 1993.598934][ T9509] netlink: 'syz.1.12531': attribute type 10 has an invalid length. [ 1993.649998][ T9509] netlink: 'syz.1.12531': attribute type 4 has an invalid length. [ 1993.670753][ T9509] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12531'. [ 1993.682803][ T9509] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1993.856577][ T9519] netlink: 'syz.3.12545': attribute type 10 has an invalid length. [ 1993.909049][ T9519] team0: Device hsr_slave_0 failed to register rx_handler [ 1993.956394][ T9523] netlink: 'syz.1.12536': attribute type 10 has an invalid length. [ 1993.973177][ T9523] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12536'. [ 1993.997091][ T9523] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1994.035201][ T9527] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12538'. [ 1995.407052][ T9542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1995.415463][ T9542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1995.478806][ T9542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1995.486493][ T9542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1995.496300][ T9542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1995.503744][ T9542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1995.585311][ T9542] team0: Port device bridge0 added [ 1995.592272][ T9550] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12548'. [ 1995.614020][ T9550] team0: Device vlan0 failed to change mtu [ 1995.623005][ T9555] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12550'. [ 1999.920177][ T9568] validate_nla: 5 callbacks suppressed [ 1999.920190][ T9568] netlink: 'syz.2.12554': attribute type 39 has an invalid length. [ 1999.934028][ T9570] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12553'. [ 2000.079783][ T9581] netlink: 'syz.4.12559': attribute type 10 has an invalid length. [ 2000.108656][ T9581] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12559'. [ 2000.150682][ T9587] netlink: 'syz.1.12562': attribute type 10 has an invalid length. [ 2000.161104][ T9587] netlink: 'syz.1.12562': attribute type 4 has an invalid length. [ 2000.173589][ T9587] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12562'. [ 2000.208748][ T9587] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2001.432406][ T9603] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12567'. [ 2001.566427][ T9609] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.12570'. [ 2001.604673][ T9609] netlink: 'syz.3.12570': attribute type 10 has an invalid length. [ 2001.656721][ T9609] batman_adv: batadv0: Adding interface: netdevsim0 [ 2001.665434][ T9609] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2001.692235][ T9609] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2001.751691][ T9617] netlink: 'syz.2.12568': attribute type 10 has an invalid length. [ 2001.765238][ T9617] team0: Device hsr_slave_0 failed to register rx_handler [ 2001.798840][ T9609] netlink: 'syz.3.12570': attribute type 5 has an invalid length. [ 2001.830124][ T9609] netlink: 'syz.3.12570': attribute type 1 has an invalid length. [ 2001.843572][ T9609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2001.856858][ T9613] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.12571'. [ 2001.883252][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12571'. [ 2001.913118][ T9620] netlink: 'syz.0.12574': attribute type 10 has an invalid length. [ 2001.923376][ T9620] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12574'. [ 2002.087740][ T9627] netlink: 'syz.4.12576': attribute type 10 has an invalid length. [ 2002.105399][ T9627] netlink: 116 bytes leftover after parsing attributes in process `syz.4.12576'. [ 2002.131499][ T9627] team0: Device vlan0 failed to change mtu [ 2002.368433][ T9637] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12582'. [ 2005.780569][ T9674] validate_nla: 4 callbacks suppressed [ 2005.780605][ T9674] netlink: 'syz.3.12594': attribute type 10 has an invalid length. [ 2005.813229][ T9674] team0: Device hsr_slave_0 failed to register rx_handler [ 2005.881167][ T9676] __nla_validate_parse: 4 callbacks suppressed [ 2005.881205][ T9676] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12596'. [ 2006.036610][ T9681] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12599'. [ 2006.092056][ T9684] netlink: 'syz.2.12598': attribute type 10 has an invalid length. [ 2006.163882][ T9684] team0: Device hsr_slave_0 failed to register rx_handler [ 2006.339429][ T9692] netlink: 'syz.3.12603': attribute type 10 has an invalid length. [ 2006.357905][ T9692] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12603'. [ 2006.554609][ T9698] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12606'. [ 2006.573372][ T9703] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12609'. [ 2006.584902][ T9701] netlink: 'syz.3.12608': attribute type 10 has an invalid length. [ 2006.602069][ T9701] netlink: 'syz.3.12608': attribute type 4 has an invalid length. [ 2006.617841][ T9701] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12608'. [ 2006.645939][ T9701] team0: Device vlan0 failed to change mtu [ 2007.199319][ T9718] netlink: 'syz.4.12614': attribute type 10 has an invalid length. [ 2007.224343][ T9718] team0: Device hsr_slave_0 failed to register rx_handler [ 2008.874851][ T9726] netlink: 'syz.0.12618': attribute type 10 has an invalid length. [ 2008.903113][ T9726] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12618'. [ 2009.042624][ T9735] netlink: 'syz.0.12623': attribute type 10 has an invalid length. [ 2009.081224][ T9735] netlink: 'syz.0.12623': attribute type 4 has an invalid length. [ 2009.094132][ T9735] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12623'. [ 2009.110969][ T9735] team0: Device vlan0 failed to change mtu [ 2009.112181][ T9737] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12622'. [ 2009.196568][ T9743] netlink: 'syz.2.12620': attribute type 10 has an invalid length. [ 2009.208324][ T9743] team0: Device hsr_slave_0 failed to register rx_handler [ 2009.333972][ T9748] team0: Device hsr_slave_0 failed to register rx_handler [ 2009.611150][ T9757] team0: Device hsr_slave_0 failed to register rx_handler [ 2010.448864][ T9766] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12633'. [ 2010.726418][ T9772] team0: Device vlan0 failed to change mtu [ 2012.101636][ T9777] __nla_validate_parse: 1 callbacks suppressed [ 2012.101674][ T9777] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12637'. [ 2012.364817][ T9793] validate_nla: 7 callbacks suppressed [ 2012.364864][ T9793] netlink: 'syz.1.12641': attribute type 10 has an invalid length. [ 2012.416704][ T9793] team0: Device hsr_slave_0 failed to register rx_handler [ 2012.497934][ T9798] netlink: 'syz.3.12643': attribute type 10 has an invalid length. [ 2012.514951][ T9798] team0: Device hsr_slave_0 failed to register rx_handler [ 2012.564386][ T9799] netlink: 'syz.0.12644': attribute type 10 has an invalid length. [ 2012.585623][ T9799] team0: Device hsr_slave_0 failed to register rx_handler [ 2013.168019][ T9812] netlink: 'syz.1.12650': attribute type 10 has an invalid length. [ 2013.176991][ T9812] device vlan0 entered promiscuous mode [ 2013.371735][ T9818] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12653'. [ 2015.814384][ T9830] netlink: 'syz.3.12659': attribute type 10 has an invalid length. [ 2015.822351][ T9830] netlink: 'syz.3.12659': attribute type 4 has an invalid length. [ 2015.870824][ T9830] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12659'. [ 2015.944648][ T9830] team0: Device vlan0 failed to change mtu [ 2016.077532][ T9838] netlink: 'syz.4.12661': attribute type 10 has an invalid length. [ 2016.128654][ T9838] team0: Device hsr_slave_0 failed to register rx_handler [ 2016.530927][ T9843] netlink: 'syz.3.12662': attribute type 10 has an invalid length. [ 2016.553521][ T9843] team0: Device hsr_slave_0 failed to register rx_handler [ 2016.590350][ T9842] netlink: 'syz.2.12663': attribute type 10 has an invalid length. [ 2016.685952][ T9846] netlink: 'syz.1.12664': attribute type 10 has an invalid length. [ 2016.786609][ T9850] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12666'. [ 2016.858429][ T9855] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12668'. [ 2019.420787][ T9863] netlink: 'syz.0.12670': attribute type 10 has an invalid length. [ 2019.431669][ T9863] netlink: 'syz.0.12670': attribute type 4 has an invalid length. [ 2019.453073][ T9863] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12670'. [ 2019.484243][ T9863] team0: Device vlan0 failed to change mtu [ 2019.638317][ T9882] netlink: 'syz.2.12678': attribute type 10 has an invalid length. [ 2020.138683][ T9886] netlink: 'syz.0.12680': attribute type 10 has an invalid length. [ 2020.273569][ T9891] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2020.280369][ T9891] syzkaller1: linktype set to 0 [ 2020.307077][ T9896] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12685'. [ 2020.346371][ T9897] netlink: 'syz.4.12682': attribute type 10 has an invalid length. [ 2020.392651][ T9897] team0: Device hsr_slave_0 failed to register rx_handler [ 2020.991059][ T9915] netlink: 'syz.2.12691': attribute type 10 has an invalid length. [ 2020.999944][ T9915] netlink: 'syz.2.12691': attribute type 4 has an invalid length. [ 2021.015198][ T9915] netlink: 116 bytes leftover after parsing attributes in process `syz.2.12691'. [ 2021.028824][ T9915] team0: Device vlan0 failed to change mtu [ 2021.164257][ T9917] netlink: 'syz.2.12692': attribute type 10 has an invalid length. [ 2022.895507][ T9936] FAULT_INJECTION: forcing a failure. [ 2022.895507][ T9936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2022.949424][ T9936] CPU: 1 PID: 9936 Comm: syz.1.12698 Not tainted syzkaller #0 [ 2022.956953][ T9936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2022.967029][ T9936] Call Trace: [ 2022.970321][ T9936] [ 2022.973266][ T9936] dump_stack_lvl+0x188/0x24e [ 2022.977970][ T9936] ? show_regs_print_info+0x12/0x12 [ 2022.983195][ T9936] ? load_image+0x410/0x410 [ 2022.987717][ T9936] ? __lock_acquire+0x7c40/0x7c40 [ 2022.992771][ T9936] should_fail_ex+0x390/0x4c0 [ 2022.997473][ T9936] _copy_from_user+0x2c/0x170 [ 2023.002165][ T9936] __copy_msghdr+0x384/0x560 [ 2023.006771][ T9936] ___sys_sendmsg+0x210/0x360 [ 2023.011465][ T9936] ? __sys_sendmsg+0x2a0/0x2a0 [ 2023.016262][ T9936] ? __lock_acquire+0x7c40/0x7c40 [ 2023.021324][ T9936] __se_sys_sendmsg+0x1c3/0x2b0 [ 2023.026238][ T9936] ? __x64_sys_sendmsg+0x80/0x80 [ 2023.031209][ T9936] ? lockdep_hardirqs_on+0x94/0x140 [ 2023.036428][ T9936] do_syscall_64+0x4c/0xa0 [ 2023.040864][ T9936] ? clear_bhb_loop+0x60/0xb0 [ 2023.045563][ T9936] ? clear_bhb_loop+0x60/0xb0 [ 2023.050253][ T9936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2023.056143][ T9936] RIP: 0033:0x7f71baf9e0d9 [ 2023.060555][ T9936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2023.080172][ T9936] RSP: 002b:00007f71b91f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2023.088604][ T9936] RAX: ffffffffffffffda RBX: 00007f71bb226090 RCX: 00007f71baf9e0d9 [ 2023.096588][ T9936] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 2023.104573][ T9936] RBP: 00007f71b91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2023.112559][ T9936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2023.120546][ T9936] R13: 00007f71bb226128 R14: 00007f71bb226090 R15: 00007ffc3a306d48 [ 2023.128549][ T9936] [ 2023.189368][ T9944] netlink: 'syz.3.12702': attribute type 10 has an invalid length. [ 2023.197378][ T9944] netlink: 'syz.3.12702': attribute type 4 has an invalid length. [ 2023.219108][ T9944] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12702'. [ 2023.230319][ T9944] team0: Device vlan0 failed to change mtu [ 2024.083115][T12908] Bluetooth: hci2: command 0x0406 tx timeout [ 2024.806502][ T9988] validate_nla: 2 callbacks suppressed [ 2024.806520][ T9988] netlink: 'syz.4.12717': attribute type 10 has an invalid length. [ 2024.844272][ T9988] netlink: 'syz.4.12717': attribute type 4 has an invalid length. [ 2024.852126][ T9988] netlink: 116 bytes leftover after parsing attributes in process `syz.4.12717'. [ 2024.901847][ T9988] team0: Device vlan0 failed to change mtu [ 2025.073592][ T9998] netlink: 'syz.4.12723': attribute type 27 has an invalid length. [ 2025.117867][ T9998] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12723'. [ 2025.192238][T10005] netlink: 'syz.2.12724': attribute type 10 has an invalid length. [ 2025.528297][T10020] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.12730'.