last executing test programs: 3.612086763s ago: executing program 2 (id=6366): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x1ccae, 0x10000, 0x9e4, 0x5, 0x8851, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) (async) r1 = socket$kcm(0x2, 0x1, 0x84) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0xe8525c8001c6ff8c, 0x80, 0x5, 0xee, 0x8, 0x8, 0x0, 0xe000000, 0x150, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x975}, 0x2000, 0x3, 0x7ff, 0x8, 0xffffffff, 0x7, 0x1000, 0x0, 0x89, 0x0, 0xffffffff}) (async) sendmsg$inet(r1, &(0x7f0000001200)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000080)='\n', 0x1}], 0x1}, 0x24004091) setsockopt$sock_attach_bpf(r1, 0x84, 0x24, 0x0, 0x0) 2.451597821s ago: executing program 2 (id=6380): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x2000000, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 2.319880623s ago: executing program 1 (id=6383): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17c"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x80000}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe100ffba004d3277fb080600017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.270625875s ago: executing program 2 (id=6384): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x8e, 0x4, 0x11, 0x7, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, @perf_config_ext={0xdb6, 0xf9f7}, 0x10, 0x1, 0x1ff, 0x0, 0x9, 0x25, 0xfff8, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b3"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 2.259987055s ago: executing program 1 (id=6385): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) syz_clone(0x62200300, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[], 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, 0x0, &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x10}, @initr0, @exit], &(0x7f00000000c0)='GPL\x00', 0x5, 0x500, 0x0, 0x0, 0x6}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 2.105637769s ago: executing program 2 (id=6387): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x1}], 0x10, 0x30}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0xd, 0x3, 0x1}, 0x50) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) 1.876168434s ago: executing program 0 (id=6388): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x21ff, 0x5e, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffe, 0xb00}, 0x50) 1.470952244s ago: executing program 1 (id=6390): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000f00)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a00b8001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba170ee3b24277c652274c2777211a0d4cf32f5f2652ce56085bbc54d2a19296a91cf2655d68e06aa034335bbd3bfe01ff515ab1cb9bb35e9c3f45019247d953f9613517944", 0xa0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000040) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/228, 0xe4}, {0x0}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f0000002100)=""/4077, 0xfed}, {0x0}, {&(0x7f0000000c00)=""/235, 0xeb}], 0x7}, 0x40012100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000540)}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000c00030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x5, &(0x7f00000005c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000780)='GPL\x00', 0x80f, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xa, 0xfffffffd, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x10, 0x2d}, 0x94) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x80) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1.416329585s ago: executing program 0 (id=6391): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x18000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff6a3e}, 0x94) 1.374387847s ago: executing program 0 (id=6392): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd, 0xc, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_config_ext={0x9a, 0x7}, 0x8000, 0x82, 0xffffff81, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4a, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcde, 0x43a1bd76, 0x7, 0x9, 0x400006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x894b, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0xfe, 0xfffffffffffffffc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r6, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) 1.352243837s ago: executing program 3 (id=6393): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x80000}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe100ffba004d3277fb080600017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.24025564s ago: executing program 3 (id=6394): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000440)="c109000000000000001d1e01", 0xc}], 0x1, 0x0, 0xfffd}, 0x0) 1.23995732s ago: executing program 1 (id=6395): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x8e, 0x4, 0x11, 0x7, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, @perf_config_ext={0xdb6, 0xf9f7}, 0x10, 0x1, 0x1ff, 0x0, 0x9, 0x25, 0xfff8, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b3"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 1.200818081s ago: executing program 3 (id=6396): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x10009, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x900}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 1.152064032s ago: executing program 1 (id=6397): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18ff0f00d0ff1c000000000000000000851000000600000018000000ae72208223b7f4a9d26826863ff7c3c3ebdf96a588ab53e63603c7ba61e889f1a615ef7e9ce65523341ccf4b59883852133632eb57bb09402cf8cc048ccadfa4c2c86d6cdf62f10e052b9c25cc7b9e33577532a46d5856922f76ed08434cb1814ca0795e090e595e49eb1c9bab9e94006e2bec6b97fb920f4cf9b2797a7327", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x23) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0xd, 0x3, 0x1}, 0x50) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) 1.129382043s ago: executing program 2 (id=6398): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f8d90000004f0c0400010000000062d95800000000000101871edd0000a69d35a2ff7f4708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a", 0x4a}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000007c0), 0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x61, 0x5f, 0x61]}}, 0x0, 0x38, 0x0, 0x1}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0xee, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88f5d9965ff4a44, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)}, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180400002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000051000000000000000800a00181f0000756c6c250000fa00002020207b1af8ff00000000bfa100000000000007010000f863c8ffb70200000c000000b70300000000080085000000c80000009500000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3e9b1d"], 0xf9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000eb00000000000000ffffffff950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000080000000000000007000000827808000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000840000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000c5320c00000000009500"], &(0x7f0000000500)='GPL\x00', 0x1, 0x92, &(0x7f0000000540)=""/146, 0x41100, 0x32, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xf, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000006c0)=[{0x4, 0x5, 0xe, 0x4}, {0x2, 0x1, 0x9}, {0x1, 0x4, 0xf, 0x3}], 0x10, 0x1}, 0x94) r7 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r7}) 1.010592155s ago: executing program 0 (id=6399): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x100}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8931, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10000, 0xa, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x32400, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000080)) (async) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x1ff) (async) write$cgroup_subtree(r3, &(0x7f0000000a80)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032b00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) 1.010075915s ago: executing program 3 (id=6400): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x700}, 0x22) 1.009426475s ago: executing program 2 (id=6401): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4000001) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0xf, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7ff, 0x7}, 0x84a8, 0x2f, 0x43a1bd79, 0x0, 0x9, 0x8, 0x2, 0x0, 0xfffffffc, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xa, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 848.17425ms ago: executing program 3 (id=6402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x80000}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe100ffba004d3277fb080600017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 847.735159ms ago: executing program 0 (id=6403): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x100, 0x3fff8000}, 0x0, 0x2032, 0x80000011, 0x9, 0x6, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4e) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000200)=0x5) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) r4 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x541b, &(0x7f0000000580)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5535, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x87) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0) r8 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRESHEX=r7, @ANYRESHEX=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x1, 0x0, 0x3, 0x0, 0x9, 0x650b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000000c0), 0x10}, 0x8000, 0x5, 0x43a1bd73, 0x6, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x9, 0xc, 0x0, 0x0, 0x0, 0x7ff0, 0x4172, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x40}, 0x14105, 0x2e, 0x200, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r11, &(0x7f0000000000), 0x2a979d) 608.975205ms ago: executing program 3 (id=6404): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r0}, 0x18) r1 = syz_clone(0x2000, &(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b0fcc3c52faca12f0924ac0182dd50548ba8e0b8a04ab40f9b70f01d2f58f6b7a941945927efb3bb813dc04a87766b307d325e01a1d18d23cf7f12cdf40466907d399ff7893da17244f3df373548adc5c881cbd599b380f676baec6836310e4eaea89970c38435305d18c4f3d70a677776c14cb1c79fbc8a7afb21def2641d0534927aca45c86a10f9385dd3ac443cf473436db3d11959032a76c9b74982da2cd774296bd2b65b2610a5d93d6db5d593c4619fbffaae169513f358ea0e220765a09b06e13c879950599569f4d51ceb8036f5b2361bdc4f") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00', 0x0}, 0x30) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r2}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000003c0)=r0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x7, 0x9, 0x6, 0x4, 0x8000, 0x1, 0x100, '\x00', 0x0, r4, 0x4, 0x1, 0x5}, 0x50) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0xc, r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1a, &(0x7f00000005c0)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0x8, 0x7, 0x4, 0xffffffffffffffff}, @map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0x4, 0x3, 0x8, 0xffffffffffffffc0}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ldst={0x2, 0x3, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffffc}], &(0x7f00000006c0)='GPL\x00', 0xff, 0xa2, &(0x7f0000000700)=""/162, 0x41000, 0x6d2d76a6ccbc94dc, '\x00', 0x0, @fallback=0x2b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x4, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800), 0x0, 0x10, 0x7}, 0x94) r10 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000001dc0)={&(0x7f0000000900)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000980)="dba91f292283301e6dd06697c754818b4e0968b8aeeda9ee586a08bb4f869008041b059d8d7c7c149e26a2963a0cd65ad6205ab85e6c5775e783892d88b8f02af1f851f040da88a097b4dd02772d243de566a1bcc9f60596ec80bc27d11bf83845aa1113c560416332fc1b53ba8af514953779da49", 0x75}, {&(0x7f0000000a00)="aa321374b53dc576cd008fe7374b9e77a9d3eb7bd444347bf8cf0662b43b2897d074e3005b56b406a31d5432decc99f2446861fd92ca918e515243fcda829778a113360e96c4c485b253bde5e6444756e8699e9856d4b252ee586be8762cb56556a183ee3a460054b335fa4a60a4dabae862f2778e4e3c180224499aea06f1a71e2c388b9100d155d0a90b5811a126d726e137ea4629711818cdc6e9e7d6ff5cc2a7e8ab573b82600277f39468fefd9911bdb3e6756650e69ccd9eeb", 0xbc}, {&(0x7f0000000ac0)="354ce4fc72c3adf98fc39b2428174b9cccaf818db931f62dfaae15389899c5f7ff71c6875c6716fbf7b0eadd738868a372d983663d3cf1aa6317362e", 0x3c}, {&(0x7f0000000b00)="2c07064d82671db95da365a1580a9c4150a56bef6b1cbae8532957d61f2dc8c7397971addd72114844d18940cebb1f55da43f2e07da458a06876ade547487f28cf180373ee782f4248c63588d55567dc2b94f6337d8bb09891330c43fa922228d85d2fb4fec60773824568c217a825bd11cc8882941735274fd46e37137873dd2aae21e39d348b1fa9a1a4bbebd6f066535bd411379b100d54dc3f1a1e4aad5f3d0f1c441fc49a007caa3d4c3aaef96ef58c819f3ed39c5aeba5b2bc0f919132a612b3abebb40cb1574614a4c18ea49abb23fe290210afa6f57a0d8cffe8f0254f6154dd7281f7586c08a3cd3f5b", 0xee}], 0x4, &(0x7f0000000c40)=[{0x1010, 0x114, 0x9, "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"}, {0x30, 0x10f, 0x3, "486af63e1ad55eb2ff2ce0489276129032c268f5e72eaa54301a"}, {0x78, 0x1, 0x3, "731ba00e33042d468c6ea92340bf827b4daa7783dca62af524771fab38ebb5a931057827b5311d69bba0eb7df436651b8de27fc04fa87c4764e666daa6d6898d603deb3b689576e82aa7e9c9112b7db11e5baf3c3e9cac72cc030e71c415c0233cc221a6ccc91e2c"}, {0x68, 0x111, 0x392, "f4b1ef63683d0884bb66b7f6ae851f4b0e4584e2a85ef9e19f0037d96423f002a2d765cda80776e4e5a937a02c8c35ed60929211c807b9c33c5e856c164f45385095acbb0561602adb53af4af120f172c0d19b6d65"}, {0x60, 0x110, 0xac, "eccf482a8b403580e96007205d197795d52f0d280d2336f812429355f93e24afd19add49ccd42f1fbce1cb3b976d5197440a9686ff44bc99a1e12f4202dca84020e98e4fd7d89ae54340"}], 0x1180}, 0x20000051) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000001e00)={'wg2\x00', 0x200}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001e80)=@generic={&(0x7f0000001e40)='.\x00', r9}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001f00)=@generic={&(0x7f0000001ec0)='./file0\x00', r8}, 0x18) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000001f40)) perf_event_open(&(0x7f0000001fc0)={0x3, 0x80, 0xe, 0x9, 0x0, 0x9, 0x0, 0x7, 0x41, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x15c, 0x2, @perf_bp={&(0x7f0000001f80), 0x8}, 0x400, 0x7, 0x4b3, 0x3, 0xa, 0x8, 0x400, 0x0, 0x8, 0x0, 0x3c2e}, r1, 0xe, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002080)=@generic={&(0x7f0000002040)='./file0\x00'}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002100)=@o_path={&(0x7f00000020c0)='./file0\x00', r3, 0x4000, r7}, 0x18) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000002140), 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002180)) bpf$LINK_DETACH(0x22, &(0x7f00000021c0)=r11, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002240)={0x9, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002200)={@map=r10, r0, 0x19, 0x2020, 0x0, @void, @void, @value=r12}, 0x20) recvmsg$kcm(r10, &(0x7f0000002540)={&(0x7f0000002280)=@tipc=@id, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002300)=""/254, 0xfe}, {&(0x7f0000002400)=""/45, 0x2d}, {&(0x7f0000002440)=""/73, 0x49}], 0x3, &(0x7f0000002500)=""/26, 0x1a}, 0x40000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002600)={{r5}, &(0x7f0000002580), &(0x7f00000025c0)=r9}, 0x20) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000002800)={r11}, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002840)={&(0x7f0000002640)="52479e9a17ced8b6ba0dfebc6566ed46efee7b5f45776b13ca69e0c7eea6c94ea73376017a4135fe12222d1d4d72764eb32af645b2d38bd9", &(0x7f0000002680)=""/169, &(0x7f0000002740)="66e3450cc4be84812e640e33c24bb592325286d60c4d1d044b19256a528a9ed6b7f67c2bd609279d4e0ba766bfa420", &(0x7f0000002780)="dd3f3308aa783d9b8794f6b0e7df54e3b3e822c6880f3af8e70d8e535bce16d9f7d25ec6bd68e9681a8ccf704b416b367eb979644c7ca28d8b66ba266681703bb248a31280cd2bc8b94fd5a1ad5639290526", 0x5, r13, 0x4}, 0x38) 119.428177ms ago: executing program 1 (id=6405): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x8e, 0x4, 0x11, 0x7, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, @perf_config_ext={0xdb6, 0xf9f7}, 0x10, 0x1, 0x1ff, 0x0, 0x9, 0x25, 0xfff8, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bb"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 0s ago: executing program 0 (id=6406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1e, 0xe, &(0x7f0000000b40)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000d40)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000d80)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) r5 = openat$cgroup_int(r2, &(0x7f0000000cc0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000180)=0x3, 0x12) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x10001, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x100}, 0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x2}, 0x10}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000d00)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f00)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000001000100811208000000000095", @ANYRESDEC=r1, @ANYRESDEC=0x0], &(0x7f0000000e80)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) kernel console output (not intermixed with test programs): [T22006] _copy_from_user+0x2f/0xe0 [ 981.670140][T22006] __sys_bpf+0x23e/0x890 [ 981.674401][T22006] ? bpf_link_show_fdinfo+0x390/0x390 [ 981.679803][T22006] ? lock_chain_count+0x20/0x20 [ 981.684683][T22006] __x64_sys_bpf+0x7c/0x90 [ 981.689116][T22006] do_syscall_64+0x55/0xb0 [ 981.693560][T22006] ? clear_bhb_loop+0x40/0x90 [ 981.698254][T22006] ? clear_bhb_loop+0x40/0x90 [ 981.702949][T22006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 981.708861][T22006] RIP: 0033:0x7fda49f9e0d9 [ 981.713299][T22006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.732930][T22006] RSP: 002b:00007fda4adc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 981.741367][T22006] RAX: ffffffffffffffda RBX: 00007fda4a225fa0 RCX: 00007fda49f9e0d9 [ 981.749354][T22006] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000010 [ 981.757349][T22006] RBP: 00007fda4adc8090 R08: 0000000000000000 R09: 0000000000000000 [ 981.765336][T22006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.773322][T22006] R13: 00007fda4a226038 R14: 00007fda4a225fa0 R15: 00007fffcc726f88 [ 981.781328][T22006] [ 982.238509][T21999] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 982.500659][T22019] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5133'. [ 982.685912][T22028] netlink: 'syz.2.5136': attribute type 10 has an invalid length. [ 982.697493][T22028] syz_tun: entered promiscuous mode [ 982.736002][T22028] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 982.875440][T22031] netlink: 'syz.2.5136': attribute type 10 has an invalid length. [ 982.928108][T22030] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5135'. [ 983.374119][T22038] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5139'. [ 984.231078][T22066] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5149'. [ 984.507407][T22079] netlink: 'syz.2.5154': attribute type 21 has an invalid length. [ 985.094664][T22096] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5161'. [ 985.400666][T22097] delete_channel: no stack [ 985.467035][T22105] netlink: 'syz.1.5165': attribute type 10 has an invalid length. [ 985.502141][T22105] netlink: 'syz.1.5165': attribute type 10 has an invalid length. [ 986.700146][T22145] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5174'. [ 986.951548][T22144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 986.959186][T22144] IPv6: NLM_F_CREATE should be set when creating new route [ 986.968107][T22144] IPv6: NLM_F_CREATE should be set when creating new route [ 986.977303][T22144] IPv6: NLM_F_CREATE should be set when creating new route [ 988.396642][T22188] netlink: 'syz.1.5194': attribute type 22 has an invalid length. [ 988.416068][T22188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5194'. [ 988.494134][T22190] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5196'. [ 988.836278][T22206] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5200'. [ 989.360319][T22221] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5205'. [ 989.369802][T22221] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5205'. [ 989.381348][T22218] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5205'. [ 989.392134][T22221] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5205'. [ 989.524075][T22222] netlink: 'syz.3.5205': attribute type 10 has an invalid length. [ 989.539914][T22222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5205'. [ 989.550924][T22222] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 989.593676][T22222] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.659162][T22222] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 989.719515][T22224] netlink: 'syz.1.5206': attribute type 10 has an invalid length. [ 989.741872][T22224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5206'. [ 989.772505][T22224] bridge0: port 3(ipvlan1) entered blocking state [ 989.779115][T22224] bridge0: port 3(ipvlan1) entered disabled state [ 989.825295][T22224] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 989.951775][T22229] FAULT_INJECTION: forcing a failure. [ 989.951775][T22229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.037875][T22229] CPU: 1 PID: 22229 Comm: syz.0.5215 Not tainted syzkaller #0 [ 990.045395][T22229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 990.055471][T22229] Call Trace: [ 990.058770][T22229] [ 990.061723][T22229] dump_stack_lvl+0x18c/0x250 [ 990.066437][T22229] ? show_regs_print_info+0x20/0x20 [ 990.071746][T22229] ? load_image+0x420/0x420 [ 990.076280][T22229] ? __might_fault+0xaa/0x120 [ 990.080993][T22229] ? __lock_acquire+0x7d80/0x7d80 [ 990.086042][T22229] ? __local_bh_enable_ip+0x13a/0x1c0 [ 990.091440][T22229] ? _local_bh_enable+0xa0/0xa0 [ 990.096327][T22229] should_fail_ex+0x394/0x4c0 [ 990.101031][T22229] copy_fpstate_to_sigframe+0xa0c/0xce0 [ 990.106598][T22229] ? arch_do_signal_or_restart+0xc2/0x7b0 [ 990.112323][T22229] ? exit_to_user_mode_loop+0x70/0x110 [ 990.117801][T22229] ? exit_to_user_mode_prepare+0xee/0x180 [ 990.123544][T22229] ? copy_fpstate_to_sigframe+0x188/0xce0 [ 990.129275][T22229] ? fpregs_set+0x370/0x370 [ 990.133798][T22229] ? fpu__alloc_mathframe+0xa7/0x120 [ 990.139091][T22229] get_sigframe+0x5de/0x7d0 [ 990.143611][T22229] ? load_gs_index+0x1a0/0x1a0 [ 990.148384][T22229] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 990.154361][T22229] ? get_signal+0x1197/0x1390 [ 990.159033][T22229] x64_setup_rt_frame+0x164/0xc30 [ 990.164063][T22229] ? lockdep_hardirqs_on+0x98/0x150 [ 990.169260][T22229] ? perf_trace_preemptirq_template+0xac/0x330 [ 990.175415][T22229] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 990.181392][T22229] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 990.186942][T22229] ? arch_do_signal_or_restart+0x39b/0x7b0 [ 990.192749][T22229] arch_do_signal_or_restart+0x411/0x7b0 [ 990.198465][T22229] ? get_sigframe_size+0x20/0x20 [ 990.203411][T22229] ? exit_to_user_mode_loop+0x3b/0x110 [ 990.208872][T22229] exit_to_user_mode_loop+0x70/0x110 [ 990.214156][T22229] exit_to_user_mode_prepare+0xee/0x180 [ 990.219702][T22229] syscall_exit_to_user_mode+0x1a/0x50 [ 990.225159][T22229] do_syscall_64+0x61/0xb0 [ 990.229568][T22229] ? clear_bhb_loop+0x40/0x90 [ 990.234241][T22229] ? clear_bhb_loop+0x40/0x90 [ 990.238912][T22229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.244803][T22229] RIP: 0033:0x7f5359b9e0d7 [ 990.249212][T22229] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 990.268823][T22229] RSP: 002b:00007f535aadb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 990.277252][T22229] RAX: 000000000000002f RBX: 00007f5359e26090 RCX: 00007f5359b9e0d9 [ 990.285219][T22229] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 0000000000000008 [ 990.293212][T22229] RBP: 00007f535aadb090 R08: 0000000000000000 R09: 0000000000000000 [ 990.301189][T22229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.309150][T22229] R13: 00007f5359e26128 R14: 00007f5359e26090 R15: 00007ffcb5574068 [ 990.317125][T22229] [ 990.350773][T21872] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 990.760395][T22257] netlink: 'syz.0.5217': attribute type 22 has an invalid length. [ 992.983232][T22288] netlink: 'syz.1.5230': attribute type 10 has an invalid length. [ 993.015844][T22288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5230'. [ 993.046923][T22288] bridge0: port 3(ipvlan1) entered blocking state [ 993.064551][T22288] bridge0: port 3(ipvlan1) entered disabled state [ 993.183527][T22288] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 993.202144][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.212170][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.347027][T22294] netlink: 'syz.3.5233': attribute type 10 has an invalid length. [ 993.362645][T22294] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 993.745396][T22317] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5242'. [ 993.761430][T22312] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5242'. [ 993.808079][T22312] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5242'. [ 993.842223][T22312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 994.295898][T22339] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 994.409586][T22343] netlink: 'syz.3.5256': attribute type 23 has an invalid length. [ 994.432117][T22343] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.5256'. [ 994.793798][T22348] sock: sock_set_timeout: `syz.2.5257' (pid 22348) tries to set negative timeout [ 996.280444][T22364] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 996.293746][T22364] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 996.699067][T22370] syzkaller0: entered promiscuous mode [ 996.711933][T22370] syzkaller0: entered allmulticast mode [ 997.123668][T22381] netlink: 'syz.0.5268': attribute type 21 has an invalid length. [ 997.141014][T22381] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5268'. [ 997.175975][T22381] netlink: 'syz.0.5268': attribute type 1 has an invalid length. [ 997.393310][T22396] netlink: 'syz.3.5272': attribute type 64 has an invalid length. [ 997.411669][T22396] netlink: 'syz.3.5272': attribute type 64 has an invalid length. [ 997.422047][T22393] netlink: 'syz.3.5272': attribute type 64 has an invalid length. [ 997.432892][T22396] netlink: 'syz.3.5272': attribute type 64 has an invalid length. [ 997.438234][T22393] netlink: 'syz.3.5272': attribute type 64 has an invalid length. [ 998.282021][T22415] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5281'. [ 998.859337][T22426] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.5285'. [ 1000.170080][T22450] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5291'. [ 1000.217327][T22452] FAULT_INJECTION: forcing a failure. [ 1000.217327][T22452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.238435][T22450] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5291'. [ 1000.254397][T22452] CPU: 0 PID: 22452 Comm: syz.3.5296 Not tainted syzkaller #0 [ 1000.261905][T22452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1000.271963][T22452] Call Trace: [ 1000.275233][T22452] [ 1000.278152][T22452] dump_stack_lvl+0x18c/0x250 [ 1000.282838][T22452] ? show_regs_print_info+0x20/0x20 [ 1000.288046][T22452] ? load_image+0x420/0x420 [ 1000.292545][T22452] ? __might_fault+0xaa/0x120 [ 1000.297236][T22452] ? __lock_acquire+0x7d80/0x7d80 [ 1000.302267][T22452] ? __virt_addr_valid+0x10c/0x380 [ 1000.307412][T22452] should_fail_ex+0x394/0x4c0 [ 1000.312119][T22452] _copy_from_user+0x2f/0xe0 [ 1000.312873][T22444] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5291'. [ 1000.316719][T22452] generic_map_update_batch+0x53e/0x800 [ 1000.331393][T22452] ? rcu_read_unlock+0xa0/0xa0 [ 1000.336183][T22452] ? __fdget+0x180/0x210 [ 1000.340096][T22443] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5291'. [ 1000.340428][T22452] ? rcu_read_unlock+0xa0/0xa0 [ 1000.340453][T22452] bpf_map_do_batch+0x3f2/0x600 [ 1000.340476][T22452] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 1000.340505][T22452] __sys_bpf+0x381/0x890 [ 1000.368888][T22452] ? bpf_link_show_fdinfo+0x390/0x390 [ 1000.374307][T22452] ? lock_chain_count+0x20/0x20 [ 1000.379183][T22452] __x64_sys_bpf+0x7c/0x90 [ 1000.383609][T22452] do_syscall_64+0x55/0xb0 [ 1000.388062][T22452] ? clear_bhb_loop+0x40/0x90 [ 1000.392732][T22452] ? clear_bhb_loop+0x40/0x90 [ 1000.397406][T22452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1000.403301][T22452] RIP: 0033:0x7f59ac79e0d9 [ 1000.407732][T22452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.427366][T22452] RSP: 002b:00007f59ad5b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1000.435769][T22452] RAX: ffffffffffffffda RBX: 00007f59aca25fa0 RCX: 00007f59ac79e0d9 [ 1000.443732][T22452] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 1000.451693][T22452] RBP: 00007f59ad5b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.459667][T22452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1000.467700][T22452] R13: 00007f59aca26038 R14: 00007f59aca25fa0 R15: 00007ffe12df0818 [ 1000.475698][T22452] [ 1001.809140][T22482] netlink: 'syz.0.5305': attribute type 9 has an invalid length. [ 1001.842228][T22482] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5305'. [ 1002.027509][T22486] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.5306'. [ 1008.645543][T22565] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5330'. [ 1008.709205][T22565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1009.575716][T22588] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5339'. [ 1010.455337][T22608] netlink: 'syz.1.5348': attribute type 11 has an invalid length. [ 1011.548906][T22626] netlink: 'syz.2.5353': attribute type 3 has an invalid length. [ 1011.559790][T22626] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.5353'. [ 1011.965185][T22640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1011.973332][T22640] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.980870][T22640] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.990839][T22640] IPv6: NLM_F_CREATE should be set when creating new route [ 1013.351934][T22668] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1013.958227][T22678] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5373'. [ 1014.560342][T22694] netlink: 'syz.0.5378': attribute type 10 has an invalid length. [ 1014.582457][T22694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5378'. [ 1014.607619][T22694] bridge0: port 3(ipvlan1) entered blocking state [ 1014.619729][T22694] bridge0: port 3(ipvlan1) entered disabled state [ 1014.646087][T22694] ipvlan1: entered allmulticast mode [ 1014.651455][T22694] veth0_vlan: entered allmulticast mode [ 1014.658576][T22694] ipvlan1: left allmulticast mode [ 1014.671813][T22694] veth0_vlan: left allmulticast mode [ 1014.677174][T22694] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1014.949721][T22698] FAULT_INJECTION: forcing a failure. [ 1014.949721][T22698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.000801][T22698] CPU: 1 PID: 22698 Comm: syz.3.5379 Not tainted syzkaller #0 [ 1015.008329][T22698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1015.018418][T22698] Call Trace: [ 1015.021709][T22698] [ 1015.024651][T22698] dump_stack_lvl+0x18c/0x250 [ 1015.029355][T22698] ? show_regs_print_info+0x20/0x20 [ 1015.034623][T22698] ? load_image+0x420/0x420 [ 1015.039160][T22698] ? __might_fault+0xaa/0x120 [ 1015.043862][T22698] ? __lock_acquire+0x7d80/0x7d80 [ 1015.048918][T22698] should_fail_ex+0x394/0x4c0 [ 1015.053634][T22698] fpu__restore_sig+0x221/0x1210 [ 1015.058615][T22698] ? copy_fpstate_to_sigframe+0xce0/0xce0 [ 1015.064376][T22698] ? __lock_acquire+0x7d80/0x7d80 [ 1015.069433][T22698] ? __might_fault+0xc6/0x120 [ 1015.074134][T22698] ? __might_fault+0xaa/0x120 [ 1015.078843][T22698] __ia32_sys_rt_sigreturn+0x6d1/0x850 [ 1015.084342][T22698] ? x64_setup_rt_frame+0xc30/0xc30 [ 1015.089596][T22698] ? lock_chain_count+0x20/0x20 [ 1015.094481][T22698] ? lockdep_hardirqs_on+0x98/0x150 [ 1015.099735][T22698] do_syscall_64+0x55/0xb0 [ 1015.104258][T22698] ? clear_bhb_loop+0x40/0x90 [ 1015.108936][T22698] ? clear_bhb_loop+0x40/0x90 [ 1015.113613][T22698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1015.119501][T22698] RIP: 0033:0x7f59ac79e0d7 [ 1015.123937][T22698] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1015.143551][T22698] RSP: 002b:00007f59ad594028 EFLAGS: 00000246 [ 1015.149621][T22698] RAX: 000000000000002f RBX: 00007f59aca26090 RCX: 00007f59ac79e0d9 [ 1015.157585][T22698] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 0000000000000008 [ 1015.165551][T22698] RBP: 00007f59ad594090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.173514][T22698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.181473][T22698] R13: 00007f59aca26128 R14: 00007f59aca26090 R15: 00007ffe12df0818 [ 1015.189454][T22698] [ 1015.576891][T22717] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.5388'. [ 1015.983654][T22730] netlink: 'syz.3.5394': attribute type 10 has an invalid length. [ 1015.993537][T22730] hsr0: entered promiscuous mode [ 1016.017900][T22730] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1016.030413][T22730] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1016.040758][T22730] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1016.053854][T22730] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1016.290228][T22740] netlink: 'syz.3.5399': attribute type 10 has an invalid length. [ 1016.402129][T22743] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5399'. [ 1016.453685][T22740] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1016.549944][T22743] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5399'. [ 1017.763758][T22761] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1019.147714][T22790] netlink: 'syz.2.5418': attribute type 23 has an invalid length. [ 1019.179642][T22790] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.5418'. [ 1019.310209][T22791] FAULT_INJECTION: forcing a failure. [ 1019.310209][T22791] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.333003][T22791] CPU: 0 PID: 22791 Comm: syz.0.5417 Not tainted syzkaller #0 [ 1019.340550][T22791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1019.350738][T22791] Call Trace: [ 1019.354059][T22791] [ 1019.357026][T22791] dump_stack_lvl+0x18c/0x250 [ 1019.361750][T22791] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1019.367861][T22791] ? show_regs_print_info+0x20/0x20 [ 1019.373118][T22791] ? load_image+0x420/0x420 [ 1019.377725][T22791] should_fail_ex+0x394/0x4c0 [ 1019.382472][T22791] should_failslab+0x9/0x20 [ 1019.387030][T22791] slab_pre_alloc_hook+0x59/0x300 [ 1019.392088][T22791] ? __asan_memset+0x22/0x40 [ 1019.396710][T22791] kmem_cache_alloc_node+0x5e/0x310 [ 1019.401932][T22791] ? __alloc_skb+0x103/0x2c0 [ 1019.406551][T22791] __alloc_skb+0x103/0x2c0 [ 1019.410992][T22791] _sctp_make_chunk+0x5b/0x430 [ 1019.415786][T22791] sctp_make_init+0x5e7/0xf80 [ 1019.420508][T22791] ? sctp_addto_chunk+0x220/0x220 [ 1019.425550][T22791] ? kernel_text_address+0xa0/0xd0 [ 1019.430678][T22791] ? __kernel_text_address+0xd/0x30 [ 1019.435900][T22791] ? stack_trace_save+0x100/0x100 [ 1019.440940][T22791] ? arch_stack_walk+0x160/0x190 [ 1019.445930][T22791] sctp_sf_do_prm_asoc+0xcf/0x3e0 [ 1019.450975][T22791] sctp_do_sm+0x23b/0x5af0 [ 1019.455404][T22791] ? sctp_cname+0x110/0x110 [ 1019.459939][T22791] ? kasan_set_track+0x4e/0x70 [ 1019.464714][T22791] ? __kasan_kmalloc+0x8f/0xa0 [ 1019.469483][T22791] ? sctp_stream_init_ext+0x57/0x170 [ 1019.474776][T22791] ? sctp_sendmsg_to_asoc+0x12cc/0x17f0 [ 1019.480335][T22791] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 1019.486236][T22791] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 1019.491267][T22791] ? do_syscall_64+0x55/0xb0 [ 1019.495868][T22791] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1019.502020][T22791] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 1019.507949][T22791] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1019.513351][T22791] sctp_sendmsg_to_asoc+0x1009/0x17f0 [ 1019.518785][T22791] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 1019.524603][T22791] ? __sctp_connect+0xd80/0xd80 [ 1019.529463][T22791] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1019.534850][T22791] ? _local_bh_enable+0xa0/0xa0 [ 1019.539714][T22791] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1019.545531][T22791] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1019.551371][T22791] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1019.556928][T22791] ? security_sctp_bind_connect+0x89/0xb0 [ 1019.562669][T22791] sctp_sendmsg+0x1afa/0x27b0 [ 1019.567385][T22791] ? sctp_getsockopt+0xb60/0xb60 [ 1019.572333][T22791] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1019.578164][T22791] ? aa_af_perm+0x330/0x330 [ 1019.582689][T22791] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1019.589129][T22791] ? sock_rps_record_flow+0x19/0x3f0 [ 1019.594437][T22791] ? inet_sendmsg+0x7e/0x2a0 [ 1019.599056][T22791] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1019.604354][T22791] ? inet_send_prepare+0x250/0x250 [ 1019.609480][T22791] ____sys_sendmsg+0x61b/0x980 [ 1019.614279][T22791] ? __asan_memset+0x22/0x40 [ 1019.618886][T22791] ? __sys_sendmsg_sock+0x30/0x30 [ 1019.623916][T22791] ? __import_iovec+0x5f2/0x850 [ 1019.628815][T22791] ? import_iovec+0x73/0xa0 [ 1019.633345][T22791] ___sys_sendmsg+0x2a6/0x360 [ 1019.638168][T22791] ? __sys_sendmsg+0x2b0/0x2b0 [ 1019.642995][T22791] ? __lock_acquire+0x7d80/0x7d80 [ 1019.648087][T22791] __se_sys_sendmsg+0x1d0/0x2c0 [ 1019.652957][T22791] ? __x64_sys_sendmsg+0x80/0x80 [ 1019.657940][T22791] ? lockdep_hardirqs_on+0x98/0x150 [ 1019.663163][T22791] do_syscall_64+0x55/0xb0 [ 1019.667585][T22791] ? clear_bhb_loop+0x40/0x90 [ 1019.672265][T22791] ? clear_bhb_loop+0x40/0x90 [ 1019.676955][T22791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1019.682855][T22791] RIP: 0033:0x7f5359b9e0d9 [ 1019.687312][T22791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.706943][T22791] RSP: 002b:00007f535aafc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1019.715373][T22791] RAX: ffffffffffffffda RBX: 00007f5359e25fa0 RCX: 00007f5359b9e0d9 [ 1019.723354][T22791] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000008 [ 1019.731333][T22791] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.739325][T22791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1019.747309][T22791] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1019.755331][T22791] [ 1021.020217][T22812] netlink: 'syz.0.5427': attribute type 12 has an invalid length. [ 1021.030411][T22812] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5427'. [ 1021.142538][T22817] netlink: 'syz.2.5429': attribute type 3 has an invalid length. [ 1021.156878][T22817] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5429'. [ 1021.178125][T22821] FAULT_INJECTION: forcing a failure. [ 1021.178125][T22821] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.212639][T22821] CPU: 0 PID: 22821 Comm: syz.0.5430 Not tainted syzkaller #0 [ 1021.220162][T22821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1021.230237][T22821] Call Trace: [ 1021.233533][T22821] [ 1021.236474][T22821] dump_stack_lvl+0x18c/0x250 [ 1021.241177][T22821] ? show_regs_print_info+0x20/0x20 [ 1021.246396][T22821] ? load_image+0x420/0x420 [ 1021.250930][T22821] ? __might_sleep+0xe0/0xe0 [ 1021.255545][T22821] ? __lock_acquire+0x7d80/0x7d80 [ 1021.260594][T22821] should_fail_ex+0x394/0x4c0 [ 1021.265297][T22821] should_failslab+0x9/0x20 [ 1021.269820][T22821] slab_pre_alloc_hook+0x59/0x300 [ 1021.274870][T22821] ? exc_page_fault+0x8c/0x100 [ 1021.279654][T22821] ? sk_prot_alloc+0xe7/0x210 [ 1021.284348][T22821] ? sk_prot_alloc+0xe7/0x210 [ 1021.289038][T22821] __kmem_cache_alloc_node+0x53/0x250 [ 1021.294439][T22821] ? exc_page_fault+0x8c/0x100 [ 1021.299248][T22821] ? sk_prot_alloc+0xe7/0x210 [ 1021.303949][T22821] __kmalloc+0xa7/0x240 [ 1021.308127][T22821] sk_prot_alloc+0xe7/0x210 [ 1021.312654][T22821] ? sk_alloc+0x24/0x350 [ 1021.316918][T22821] sk_alloc+0x3a/0x350 [ 1021.321005][T22821] ? bpf_ctx_init+0x154/0x190 [ 1021.325699][T22821] bpf_prog_test_run_skb+0x371/0x18f0 [ 1021.331092][T22821] ? __fget_files+0x28/0x460 [ 1021.335700][T22821] ? __fget_files+0x3fc/0x460 [ 1021.340401][T22821] ? cpu_online+0x60/0x60 [ 1021.344744][T22821] bpf_prog_test_run+0x31f/0x390 [ 1021.349696][T22821] __sys_bpf+0x49d/0x890 [ 1021.353957][T22821] ? bpf_link_show_fdinfo+0x390/0x390 [ 1021.359355][T22821] ? lock_chain_count+0x20/0x20 [ 1021.364232][T22821] __x64_sys_bpf+0x7c/0x90 [ 1021.368659][T22821] do_syscall_64+0x55/0xb0 [ 1021.373088][T22821] ? clear_bhb_loop+0x40/0x90 [ 1021.377779][T22821] ? clear_bhb_loop+0x40/0x90 [ 1021.382471][T22821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1021.388373][T22821] RIP: 0033:0x7f5359b9e0d9 [ 1021.392800][T22821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.412423][T22821] RSP: 002b:00007f535aafc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1021.420852][T22821] RAX: ffffffffffffffda RBX: 00007f5359e25fa0 RCX: 00007f5359b9e0d9 [ 1021.428832][T22821] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1021.436814][T22821] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.444793][T22821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.452773][T22821] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1021.460770][T22821] [ 1022.825914][T22834] netlink: 'syz.1.5442': attribute type 23 has an invalid length. [ 1022.875676][T22834] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.5442'. [ 1024.145640][T22854] netlink: 'syz.0.5440': attribute type 3 has an invalid length. [ 1024.183209][T22854] netlink: 'syz.0.5440': attribute type 4 has an invalid length. [ 1024.191020][T22854] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.5440'. [ 1024.307860][T22863] batadv0: left allmulticast mode [ 1024.315054][T22863] batadv0: left promiscuous mode [ 1024.322154][T22863] bridge0: port 1(batadv0) entered disabled state [ 1025.715375][T22894] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.5457'. [ 1027.601668][T22939] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.5468'. [ 1028.898640][T22974] netlink: 'syz.2.5489': attribute type 10 has an invalid length. [ 1029.199916][T22974] team0 (unregistering): Port device team_slave_0 removed [ 1029.202863][T22977] netlink: 'syz.2.5489': attribute type 9 has an invalid length. [ 1029.222989][T22977] netlink: 198556 bytes leftover after parsing attributes in process `syz.2.5489'. [ 1029.272729][T22974] team0 (unregistering): Port device team_slave_1 removed [ 1029.513808][T22970] syz.1.5485 (22970) used greatest stack depth: 17960 bytes left [ 1029.647105][T22984] netlink: 'syz.2.5489': attribute type 9 has an invalid length. [ 1029.751118][T22984] netlink: 154732 bytes leftover after parsing attributes in process `syz.2.5489'. [ 1030.171556][T22999] netlink: 'syz.1.5498': attribute type 6 has an invalid length. [ 1030.201175][T22999] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5498'. [ 1030.534339][T23013] netlink: 'syz.0.5503': attribute type 33 has an invalid length. [ 1030.545983][T23013] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5503'. [ 1031.016006][T23017] FAULT_INJECTION: forcing a failure. [ 1031.016006][T23017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.069454][T23017] CPU: 0 PID: 23017 Comm: syz.2.5504 Not tainted syzkaller #0 [ 1031.076983][T23017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1031.087061][T23017] Call Trace: [ 1031.090353][T23017] [ 1031.093293][T23017] dump_stack_lvl+0x18c/0x250 [ 1031.098002][T23017] ? show_regs_print_info+0x20/0x20 [ 1031.103247][T23017] ? load_image+0x420/0x420 [ 1031.107771][T23017] ? __might_fault+0xaa/0x120 [ 1031.112460][T23017] ? __lock_acquire+0x7d80/0x7d80 [ 1031.117507][T23017] ? __virt_addr_valid+0x10c/0x380 [ 1031.122639][T23017] should_fail_ex+0x394/0x4c0 [ 1031.127344][T23017] _copy_from_user+0x2f/0xe0 [ 1031.131948][T23017] generic_map_update_batch+0x58c/0x800 [ 1031.137517][T23017] ? rcu_read_unlock+0xa0/0xa0 [ 1031.142298][T23017] ? __fdget+0x180/0x210 [ 1031.146559][T23017] ? rcu_read_unlock+0xa0/0xa0 [ 1031.151330][T23017] bpf_map_do_batch+0x3f2/0x600 [ 1031.156194][T23017] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 1031.161676][T23017] __sys_bpf+0x381/0x890 [ 1031.165929][T23017] ? bpf_link_show_fdinfo+0x390/0x390 [ 1031.171332][T23017] ? lock_chain_count+0x20/0x20 [ 1031.176207][T23017] __x64_sys_bpf+0x7c/0x90 [ 1031.180636][T23017] do_syscall_64+0x55/0xb0 [ 1031.185063][T23017] ? clear_bhb_loop+0x40/0x90 [ 1031.189753][T23017] ? clear_bhb_loop+0x40/0x90 [ 1031.194446][T23017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1031.200354][T23017] RIP: 0033:0x7f5edc79e0d9 [ 1031.204783][T23017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.224403][T23017] RSP: 002b:00007f5edd61a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1031.232835][T23017] RAX: ffffffffffffffda RBX: 00007f5edca25fa0 RCX: 00007f5edc79e0d9 [ 1031.240820][T23017] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 1031.248811][T23017] RBP: 00007f5edd61a090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.256806][T23017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1031.264793][T23017] R13: 00007f5edca26038 R14: 00007f5edca25fa0 R15: 00007ffc86e74aa8 [ 1031.272795][T23017] [ 1031.328213][T23022] netlink: 'syz.3.5506': attribute type 3 has an invalid length. [ 1031.368522][T23022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1032.994540][T23073] netlink: 'syz.3.5525': attribute type 2 has an invalid length. [ 1033.183794][T23078] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5526'. [ 1033.193580][T23078] openvswitch: netlink: Tunnel attr 260 out of range max 16 [ 1033.216706][T23078] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5526'. [ 1033.227313][T23078] openvswitch: netlink: Tunnel attr 260 out of range max 16 [ 1033.257391][T23078] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5526'. [ 1033.269150][T23078] openvswitch: netlink: Tunnel attr 260 out of range max 16 [ 1033.280795][T23078] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5526'. [ 1033.297683][T23078] openvswitch: netlink: Tunnel attr 260 out of range max 16 [ 1033.328194][T23078] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5526'. [ 1033.352953][T23078] openvswitch: netlink: Tunnel attr 260 out of range max 16 [ 1033.373684][T23078] openvswitch: netlink: Tunnel attr 260 out of range max 16 [ 1033.397426][T23078] openvswitch: netlink: Tunnel attr 260 out of range max 16 [ 1033.426639][T23078] openvswitch: netlink: Tunnel attr 260 out of range max 16 [ 1033.472150][T23078] openvswitch: netlink: Tunnel attr 260 out of range max 16 [ 1033.486954][T23078] openvswitch: netlink: Tunnel attr 260 out of range max 16 [ 1034.590121][T23119] batadv0: left allmulticast mode [ 1034.603315][T23119] batadv0: left promiscuous mode [ 1034.609912][T23119] bridge0: port 3(batadv0) entered disabled state [ 1034.637462][T23119] bridge_slave_1: left allmulticast mode [ 1034.645625][T23119] bridge_slave_1: left promiscuous mode [ 1034.662884][T23119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.705158][T23119] bridge_slave_0: left allmulticast mode [ 1034.711125][T23119] bridge_slave_0: left promiscuous mode [ 1034.728713][T23119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.793657][T23130] __nla_validate_parse: 28 callbacks suppressed [ 1034.793679][T23130] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5546'. [ 1034.929186][T23133] netlink: 'syz.2.5545': attribute type 10 has an invalid length. [ 1034.953187][T23133] batman_adv: batadv0: Adding interface: netdevsim0 [ 1034.961636][T23133] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.987537][T23133] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1035.022539][T23132] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5547'. [ 1035.365437][T23152] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5550'. [ 1035.626060][T23160] FAULT_INJECTION: forcing a failure. [ 1035.626060][T23160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.660584][T23160] CPU: 1 PID: 23160 Comm: syz.0.5556 Not tainted syzkaller #0 [ 1035.668098][T23160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1035.678178][T23160] Call Trace: [ 1035.681475][T23160] [ 1035.684419][T23160] dump_stack_lvl+0x18c/0x250 [ 1035.689133][T23160] ? show_regs_print_info+0x20/0x20 [ 1035.694359][T23160] ? load_image+0x420/0x420 [ 1035.696242][T23162] netlink: 'syz.3.5557': attribute type 21 has an invalid length. [ 1035.698874][T23160] ? __might_fault+0xaa/0x120 [ 1035.698901][T23160] ? __lock_acquire+0x7d80/0x7d80 [ 1035.698928][T23160] should_fail_ex+0x394/0x4c0 [ 1035.698957][T23160] _copy_to_user+0x2f/0xa0 [ 1035.698980][T23160] sock_map_bpf_prog_query+0x5f1/0x710 [ 1035.730970][T23160] ? sock_map_bpf_prog_query+0x16b/0x710 [ 1035.736608][T23160] ? sock_hash_mem_usage+0xe0/0xe0 [ 1035.741720][T23160] ? bpf_lsm_capable+0x9/0x10 [ 1035.746408][T23160] __sys_bpf+0x7a0/0x890 [ 1035.750643][T23160] ? bpf_link_show_fdinfo+0x390/0x390 [ 1035.756014][T23160] ? lock_chain_count+0x20/0x20 [ 1035.760865][T23160] __x64_sys_bpf+0x7c/0x90 [ 1035.765275][T23160] do_syscall_64+0x55/0xb0 [ 1035.769682][T23160] ? clear_bhb_loop+0x40/0x90 [ 1035.774348][T23160] ? clear_bhb_loop+0x40/0x90 [ 1035.779015][T23160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1035.784901][T23160] RIP: 0033:0x7f5359b9e0d9 [ 1035.789307][T23160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.808903][T23160] RSP: 002b:00007f535aafc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1035.817309][T23160] RAX: ffffffffffffffda RBX: 00007f5359e25fa0 RCX: 00007f5359b9e0d9 [ 1035.825273][T23160] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000010 [ 1035.833235][T23160] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.841196][T23160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.849156][T23160] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1035.857145][T23160] [ 1038.001192][T23228] mac80211_hwsim hwsim79 wlan1: entered promiscuous mode [ 1038.016900][T23228] mac80211_hwsim hwsim79 wlan1: entered allmulticast mode [ 1039.372600][T23272] netlink: 763 bytes leftover after parsing attributes in process `syz.1.5602'. [ 1039.513675][T23274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1039.521793][T23274] IPv6: NLM_F_CREATE should be set when creating new route [ 1040.102056][T23295] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5612'. [ 1040.585152][T23317] FAULT_INJECTION: forcing a failure. [ 1040.585152][T23317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.599560][T23317] CPU: 0 PID: 23317 Comm: syz.0.5621 Not tainted syzkaller #0 [ 1040.607047][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1040.617099][T23317] Call Trace: [ 1040.620369][T23317] [ 1040.623301][T23317] dump_stack_lvl+0x18c/0x250 [ 1040.627995][T23317] ? show_regs_print_info+0x20/0x20 [ 1040.633203][T23317] ? load_image+0x420/0x420 [ 1040.637728][T23317] ? __lock_acquire+0x7d80/0x7d80 [ 1040.642760][T23317] ? snprintf+0xe9/0x140 [ 1040.647020][T23317] should_fail_ex+0x394/0x4c0 [ 1040.651691][T23317] _copy_to_user+0x2f/0xa0 [ 1040.656108][T23317] simple_read_from_buffer+0xe7/0x150 [ 1040.661488][T23317] proc_fail_nth_read+0x1e8/0x260 [ 1040.662937][T23314] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5619'. [ 1040.666525][T23317] ? proc_fault_inject_write+0x360/0x360 [ 1040.666589][T23317] ? fsnotify_perm+0x271/0x5e0 [ 1040.682350][T23314] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5619'. [ 1040.686040][T23317] ? proc_fault_inject_write+0x360/0x360 [ 1040.686074][T23317] vfs_read+0x298/0x990 [ 1040.686105][T23317] ? kernel_read+0x1e0/0x1e0 [ 1040.708296][T23308] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5619'. [ 1040.709532][T23317] ? __fget_files+0x28/0x460 [ 1040.709565][T23317] ? __fget_files+0x3fc/0x460 [ 1040.709599][T23317] ? __fdget_pos+0x2a3/0x330 [ 1040.709621][T23317] ? ksys_read+0x74/0x260 [ 1040.709649][T23317] ksys_read+0x151/0x260 [ 1040.709676][T23317] ? vfs_write+0x9a0/0x9a0 [ 1040.709705][T23317] ? lockdep_hardirqs_on+0x98/0x150 [ 1040.709735][T23317] do_syscall_64+0x55/0xb0 [ 1040.709754][T23317] ? clear_bhb_loop+0x40/0x90 [ 1040.709774][T23317] ? clear_bhb_loop+0x40/0x90 [ 1040.709796][T23317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1040.770512][T23317] RIP: 0033:0x7f5359b5e90e [ 1040.774923][T23317] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1040.792182][T23318] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5619'. [ 1040.794510][T23317] RSP: 002b:00007f535aafbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1040.812046][T23317] RAX: ffffffffffffffda RBX: 00007f535aafc6c0 RCX: 00007f5359b5e90e [ 1040.820127][T23317] RDX: 000000000000000f RSI: 00007f535aafc0a0 RDI: 0000000000000004 [ 1040.828123][T23317] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.836105][T23317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.844090][T23317] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1040.852078][T23317] [ 1041.340638][T23328] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5626'. [ 1041.853274][T23344] netlink: 'syz.3.5633': attribute type 10 has an invalid length. [ 1041.879294][T23344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5633'. [ 1042.013279][T23349] netlink: 'syz.2.5635': attribute type 10 has an invalid length. [ 1042.208398][T23357] FAULT_INJECTION: forcing a failure. [ 1042.208398][T23357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.229932][T23357] CPU: 1 PID: 23357 Comm: syz.0.5639 Not tainted syzkaller #0 [ 1042.237442][T23357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1042.247520][T23357] Call Trace: [ 1042.250826][T23357] [ 1042.253776][T23357] dump_stack_lvl+0x18c/0x250 [ 1042.258490][T23357] ? show_regs_print_info+0x20/0x20 [ 1042.263719][T23357] ? load_image+0x420/0x420 [ 1042.268252][T23357] ? __might_fault+0xaa/0x120 [ 1042.272950][T23357] ? __lock_acquire+0x7d80/0x7d80 [ 1042.278006][T23357] should_fail_ex+0x394/0x4c0 [ 1042.282715][T23357] _copy_to_user+0x2f/0xa0 [ 1042.287160][T23357] copy_siginfo_to_user+0x24/0xa0 [ 1042.292207][T23357] x64_setup_rt_frame+0x749/0xc30 [ 1042.297295][T23357] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 1042.302873][T23357] ? arch_do_signal_or_restart+0x39b/0x7b0 [ 1042.308714][T23357] arch_do_signal_or_restart+0x411/0x7b0 [ 1042.314377][T23357] ? get_sigframe_size+0x20/0x20 [ 1042.319361][T23357] ? exit_to_user_mode_loop+0x3b/0x110 [ 1042.324846][T23357] exit_to_user_mode_loop+0x70/0x110 [ 1042.330159][T23357] exit_to_user_mode_prepare+0xee/0x180 [ 1042.335732][T23357] syscall_exit_to_user_mode+0x1a/0x50 [ 1042.341222][T23357] do_syscall_64+0x61/0xb0 [ 1042.345663][T23357] ? clear_bhb_loop+0x40/0x90 [ 1042.350368][T23357] ? clear_bhb_loop+0x40/0x90 [ 1042.355069][T23357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.360980][T23357] RIP: 0033:0x7f5359b5e90e [ 1042.365421][T23357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1042.385135][T23357] RSP: 002b:00007f535aafbfe8 EFLAGS: 00000246 [ 1042.391228][T23357] RAX: 0000000000000001 RBX: 00007f535aafc6c0 RCX: 00007f5359b5e90e [ 1042.391874][T23351] net_ratelimit: 24 callbacks suppressed [ 1042.391888][T23351] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1042.399205][T23357] RDX: 0000000000000001 RSI: 00007f535aafc090 RDI: 000000000000000b [ 1042.399221][T23357] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.399233][T23357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1042.399249][T23357] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1042.399280][T23357] [ 1042.414318][T23351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5636'. [ 1042.729387][T23377] netlink: 'syz.0.5645': attribute type 10 has an invalid length. [ 1042.828740][T23377] hsr0: entered promiscuous mode [ 1042.858807][T23377] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1042.923508][T23377] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1042.934371][T23377] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1042.947080][T23377] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1042.954182][T23379] netlink: 'syz.2.5646': attribute type 25 has an invalid length. [ 1042.977575][T23379] netlink: 'syz.2.5646': attribute type 3 has an invalid length. [ 1043.014978][T23382] netlink: 'syz.2.5646': attribute type 10 has an invalid length. [ 1043.034582][T23382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5646'. [ 1043.046149][T23382] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1043.053026][T23382] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.091902][T23382] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1043.117059][T23386] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5649'. [ 1043.980922][T23416] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1052.534154][T23429] __nla_validate_parse: 1 callbacks suppressed [ 1052.534172][T23429] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1052.784526][T23440] netlink: 'syz.1.5671': attribute type 23 has an invalid length. [ 1052.842083][T23440] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.5671'. [ 1053.868353][T23466] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5681'. [ 1053.920666][T23466] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1054.001008][T10225] hsr_slave_0: left promiscuous mode [ 1054.012649][T10225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.020095][T10225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.056103][T10225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.081269][T10225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.102475][T10225] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1054.109576][T10225] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1054.135903][T10225] batadv0: left allmulticast mode [ 1054.152481][T10225] batadv0: left promiscuous mode [ 1054.157579][T10225] bridge0: port 1(batadv0) entered disabled state [ 1054.199038][T10225] bridge_slave_1: left allmulticast mode [ 1054.213981][T21872] Bluetooth: hci0: command 0x0406 tx timeout [ 1054.220426][T21875] Bluetooth: hci1: command 0x0406 tx timeout [ 1054.232029][T10225] bridge_slave_1: left promiscuous mode [ 1054.254257][T10225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.286465][T10225] veth1_macvtap: left allmulticast mode [ 1054.296466][T10225] veth1_macvtap: left promiscuous mode [ 1054.310148][T10225] veth0_macvtap: left promiscuous mode [ 1054.542576][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.548936][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.085349][T23510] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5698'. [ 1056.227969][T23512] netlink: 'syz.2.5699': attribute type 10 has an invalid length. [ 1057.719381][T23535] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5706'. [ 1057.762692][T23535] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1057.917494][T23544] netlink: 'syz.2.5710': attribute type 10 has an invalid length. [ 1057.935582][T23544] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5710'. [ 1059.390990][T23580] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.5723'. [ 1059.498048][T23582] netlink: 'syz.1.5723': attribute type 3 has an invalid length. [ 1059.566759][T23582] netlink: 'syz.1.5723': attribute type 1 has an invalid length. [ 1059.629072][T23582] netlink: 'syz.1.5723': attribute type 1 has an invalid length. [ 1059.721895][T23582] netlink: 'syz.1.5723': attribute type 2 has an invalid length. [ 1059.818056][T23582] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.5723'. [ 1060.531351][T23601] netlink: 192188 bytes leftover after parsing attributes in process `syz.2.5731'. [ 1060.563806][T23601] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1060.633303][T23606] syzkaller0: entered promiscuous mode [ 1060.638829][T23606] syzkaller0: entered allmulticast mode [ 1063.441851][T23631] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1063.637391][T23639] netlink: 'syz.2.5742': attribute type 9 has an invalid length. [ 1063.651157][T23639] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.5742'. [ 1063.940908][T23652] netlink: 'syz.3.5749': attribute type 2 has an invalid length. [ 1063.988685][T23652] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5749'. [ 1065.352337][T23677] netlink: 'syz.0.5760': attribute type 21 has an invalid length. [ 1065.369547][T23677] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5760'. [ 1065.441064][T23679] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5759'. [ 1065.649847][T23686] netlink: 'syz.3.5763': attribute type 29 has an invalid length. [ 1067.863061][T23686] netlink: 'syz.3.5763': attribute type 29 has an invalid length. [ 1069.127475][T23751] netlink: 'syz.0.5787': attribute type 41 has an invalid length. [ 1069.146983][T23750] netlink: 'syz.2.5786': attribute type 41 has an invalid length. [ 1070.045019][T23784] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5797'. [ 1070.077761][T23784] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5797'. [ 1070.104680][T23788] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5797'. [ 1070.138354][T23784] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5797'. [ 1070.384919][T23797] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5801'. [ 1070.395185][T23797] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5801'. [ 1070.406785][T23797] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5801'. [ 1070.420296][T23797] netlink: 'syz.2.5801': attribute type 13 has an invalid length. [ 1070.468452][T23799] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5802'. [ 1070.807575][T23812] netlink: 'syz.1.5808': attribute type 10 has an invalid length. [ 1070.817025][T23812] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5808'. [ 1070.839503][T23812] bridge0: port 1(ipvlan1) entered blocking state [ 1070.848778][T23812] bridge0: port 1(ipvlan1) entered disabled state [ 1070.860375][T23812] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1071.031138][T23819] netlink: 'syz.2.5810': attribute type 10 has an invalid length. [ 1071.210875][ T5783] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1071.301627][T23830] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1071.485262][T23841] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5820'. [ 1071.617334][T23845] @0Ù: renamed from bond_slave_1 (while UP) [ 1071.729036][ T5783] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1071.818095][T23859] netlink: 'syz.0.5828': attribute type 10 has an invalid length. [ 1071.827579][T23859] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1071.840912][T23859] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1071.851827][T23859] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1071.865226][T23859] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1072.002623][T23865] netlink: 'syz.3.5830': attribute type 10 has an invalid length. [ 1072.027978][T23865] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1072.035650][T23865] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.082679][T23865] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1072.317873][T23878] netlink: 'syz.0.5835': attribute type 1 has an invalid length. [ 1072.328882][ T5783] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1072.352167][T23878] netlink: 'syz.0.5835': attribute type 4 has an invalid length. [ 1072.363519][T23878] netlink: 'syz.0.5835': attribute type 1 has an invalid length. [ 1072.904298][T23908] ipvlan1: entered allmulticast mode [ 1072.905672][ T5783] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1072.910003][T23908] veth0_vlan: entered allmulticast mode [ 1072.950396][T23908] bridge0: port 3(ipvlan1) entered blocking state [ 1072.970558][T23908] bridge0: port 3(ipvlan1) entered disabled state [ 1072.989345][T23908] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1074.107978][ T5783] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1075.039561][T23956] FAULT_INJECTION: forcing a failure. [ 1075.039561][T23956] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.060193][T23956] CPU: 1 PID: 23956 Comm: syz.1.5865 Not tainted syzkaller #0 [ 1075.067699][T23956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1075.077776][T23956] Call Trace: [ 1075.081072][T23956] [ 1075.084018][T23956] dump_stack_lvl+0x18c/0x250 [ 1075.088730][T23956] ? show_regs_print_info+0x20/0x20 [ 1075.093966][T23956] ? load_image+0x420/0x420 [ 1075.098504][T23956] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1075.104518][T23956] ? __asan_memset+0x22/0x40 [ 1075.109134][T23956] should_fail_ex+0x394/0x4c0 [ 1075.113840][T23956] should_failslab+0x9/0x20 [ 1075.118365][T23956] slab_pre_alloc_hook+0x59/0x300 [ 1075.123414][T23956] ? __debug_object_init+0xec/0x450 [ 1075.128637][T23956] kmem_cache_alloc+0x5a/0x2c0 [ 1075.133424][T23956] ? slab_build_skb+0x28/0x3e0 [ 1075.138213][T23956] slab_build_skb+0x28/0x3e0 [ 1075.142828][T23956] bpf_prog_test_run_skb+0x38f/0x18f0 [ 1075.148227][T23956] ? __fget_files+0x28/0x460 [ 1075.152845][T23956] ? __fget_files+0x3fc/0x460 [ 1075.157557][T23956] ? cpu_online+0x60/0x60 [ 1075.161910][T23956] bpf_prog_test_run+0x31f/0x390 [ 1075.166874][T23956] __sys_bpf+0x49d/0x890 [ 1075.171140][T23956] ? bpf_link_show_fdinfo+0x390/0x390 [ 1075.176551][T23956] ? lock_chain_count+0x20/0x20 [ 1075.181431][T23956] __x64_sys_bpf+0x7c/0x90 [ 1075.185867][T23956] do_syscall_64+0x55/0xb0 [ 1075.190322][T23956] ? clear_bhb_loop+0x40/0x90 [ 1075.195017][T23956] ? clear_bhb_loop+0x40/0x90 [ 1075.199713][T23956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1075.205624][T23956] RIP: 0033:0x7fda49f9e0d9 [ 1075.210055][T23956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.229682][T23956] RSP: 002b:00007fda4adc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1075.238199][T23956] RAX: ffffffffffffffda RBX: 00007fda4a225fa0 RCX: 00007fda49f9e0d9 [ 1075.246171][T23956] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1075.254141][T23956] RBP: 00007fda4adc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.262112][T23956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.270124][T23956] R13: 00007fda4a226038 R14: 00007fda4a225fa0 R15: 00007fffcc726f88 [ 1075.278110][T23956] [ 1075.397962][ T5783] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1075.440809][T23965] __nla_validate_parse: 7 callbacks suppressed [ 1075.440842][T23965] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1075.574970][T23967] validate_nla: 8 callbacks suppressed [ 1075.574988][T23967] netlink: 'syz.1.5870': attribute type 29 has an invalid length. [ 1075.595864][T23967] netlink: 'syz.1.5870': attribute type 29 has an invalid length. [ 1075.636678][T23967] netlink: 'syz.1.5870': attribute type 29 has an invalid length. [ 1075.663690][T23967] netlink: 'syz.1.5870': attribute type 29 has an invalid length. [ 1076.084218][T23973] netlink: 'syz.1.5870': attribute type 29 has an invalid length. [ 1076.574873][T23988] netlink: 'syz.1.5877': attribute type 21 has an invalid length. [ 1076.598943][T23988] netlink: 'syz.1.5877': attribute type 20 has an invalid length. [ 1076.715695][T23994] FAULT_INJECTION: forcing a failure. [ 1076.715695][T23994] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.733331][T23994] CPU: 0 PID: 23994 Comm: syz.0.5879 Not tainted syzkaller #0 [ 1076.740831][T23994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1076.750882][T23994] Call Trace: [ 1076.754153][T23994] [ 1076.757075][T23994] dump_stack_lvl+0x18c/0x250 [ 1076.761753][T23994] ? show_regs_print_info+0x20/0x20 [ 1076.766951][T23994] ? load_image+0x420/0x420 [ 1076.771468][T23994] ? __might_sleep+0xe0/0xe0 [ 1076.776053][T23994] ? __lock_acquire+0x7d80/0x7d80 [ 1076.781078][T23994] ? mark_lock+0x94/0x320 [ 1076.785415][T23994] should_fail_ex+0x394/0x4c0 [ 1076.790113][T23994] should_failslab+0x9/0x20 [ 1076.794616][T23994] slab_pre_alloc_hook+0x59/0x300 [ 1076.799646][T23994] ? __get_vm_area_node+0x125/0x370 [ 1076.804852][T23994] __kmem_cache_alloc_node+0x53/0x250 [ 1076.810309][T23994] ? __get_vm_area_node+0x125/0x370 [ 1076.815503][T23994] kmalloc_node_trace+0x26/0xe0 [ 1076.820353][T23994] __get_vm_area_node+0x125/0x370 [ 1076.825384][T23994] __vmalloc_node_range+0x36f/0x1320 [ 1076.830664][T23994] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1076.836200][T23994] ? mark_lock+0x94/0x320 [ 1076.840526][T23994] ? __lock_acquire+0x1336/0x7d80 [ 1076.845550][T23994] ? aa_get_newest_label+0xfd/0x5c0 [ 1076.850743][T23994] ? free_vm_area+0x50/0x50 [ 1076.855241][T23994] ? end_current_label_crit_section+0x170/0x170 [ 1076.861474][T23994] ? verify_lock_unused+0x140/0x140 [ 1076.866666][T23994] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1076.872206][T23994] __vmalloc+0x7a/0x90 [ 1076.876273][T23994] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1076.881823][T23994] bpf_prog_alloc_no_stats+0x46/0x430 [ 1076.887195][T23994] bpf_prog_alloc+0x3d/0x1a0 [ 1076.891784][T23994] bpf_prog_load+0x6b2/0x1610 [ 1076.896465][T23994] ? map_freeze+0x420/0x420 [ 1076.900981][T23994] ? __might_fault+0xaa/0x120 [ 1076.905653][T23994] ? __lock_acquire+0x7d80/0x7d80 [ 1076.910672][T23994] ? file_end_write+0x159/0x250 [ 1076.915518][T23994] ? __might_fault+0xaa/0x120 [ 1076.920182][T23994] ? __might_fault+0xc6/0x120 [ 1076.924848][T23994] ? __might_fault+0xaa/0x120 [ 1076.929512][T23994] ? bpf_lsm_bpf+0x9/0x10 [ 1076.933841][T23994] ? security_bpf+0x7e/0xa0 [ 1076.938340][T23994] __sys_bpf+0x5ba/0x890 [ 1076.942580][T23994] ? bpf_link_show_fdinfo+0x390/0x390 [ 1076.947954][T23994] ? lock_chain_count+0x20/0x20 [ 1076.952801][T23994] __x64_sys_bpf+0x7c/0x90 [ 1076.957210][T23994] do_syscall_64+0x55/0xb0 [ 1076.961619][T23994] ? clear_bhb_loop+0x40/0x90 [ 1076.966287][T23994] ? clear_bhb_loop+0x40/0x90 [ 1076.970958][T23994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1076.976843][T23994] RIP: 0033:0x7f5359b9e0d9 [ 1076.981250][T23994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.000857][T23994] RSP: 002b:00007f535aafc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1077.009264][T23994] RAX: ffffffffffffffda RBX: 00007f5359e25fa0 RCX: 00007f5359b9e0d9 [ 1077.017228][T23994] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1077.025190][T23994] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.033167][T23994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.041135][T23994] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1077.049118][T23994] [ 1077.058131][T23994] syz.0.5879: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1077.075257][T23994] CPU: 0 PID: 23994 Comm: syz.0.5879 Not tainted syzkaller #0 [ 1077.082765][T23994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1077.092836][T23994] Call Trace: [ 1077.096119][T23994] [ 1077.099040][T23994] dump_stack_lvl+0x18c/0x250 [ 1077.103716][T23994] ? show_regs_print_info+0x20/0x20 [ 1077.108904][T23994] ? load_image+0x420/0x420 [ 1077.113416][T23994] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1077.119849][T23994] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1077.126366][T23994] warn_alloc+0x246/0x340 [ 1077.130700][T23994] ? __get_vm_area_node+0x125/0x370 [ 1077.135924][T23994] ? zone_watermark_ok_safe+0x230/0x230 [ 1077.141476][T23994] ? rcu_is_watching+0x15/0xb0 [ 1077.146231][T23994] ? __get_vm_area_node+0x356/0x370 [ 1077.151438][T23994] __vmalloc_node_range+0x394/0x1320 [ 1077.156735][T23994] ? mark_lock+0x94/0x320 [ 1077.161074][T23994] ? __lock_acquire+0x1336/0x7d80 [ 1077.166103][T23994] ? aa_get_newest_label+0xfd/0x5c0 [ 1077.171299][T23994] ? free_vm_area+0x50/0x50 [ 1077.175794][T23994] ? end_current_label_crit_section+0x170/0x170 [ 1077.182040][T23994] ? verify_lock_unused+0x140/0x140 [ 1077.187273][T23994] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1077.192851][T23994] __vmalloc+0x7a/0x90 [ 1077.196941][T23994] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1077.202478][T23994] bpf_prog_alloc_no_stats+0x46/0x430 [ 1077.207837][T23994] bpf_prog_alloc+0x3d/0x1a0 [ 1077.212415][T23994] bpf_prog_load+0x6b2/0x1610 [ 1077.217081][T23994] ? map_freeze+0x420/0x420 [ 1077.221569][T23994] ? __might_fault+0xaa/0x120 [ 1077.226264][T23994] ? __lock_acquire+0x7d80/0x7d80 [ 1077.231283][T23994] ? file_end_write+0x159/0x250 [ 1077.236142][T23994] ? __might_fault+0xaa/0x120 [ 1077.240836][T23994] ? __might_fault+0xc6/0x120 [ 1077.245524][T23994] ? __might_fault+0xaa/0x120 [ 1077.250226][T23994] ? bpf_lsm_bpf+0x9/0x10 [ 1077.254577][T23994] ? security_bpf+0x7e/0xa0 [ 1077.259112][T23994] __sys_bpf+0x5ba/0x890 [ 1077.263467][T23994] ? bpf_link_show_fdinfo+0x390/0x390 [ 1077.268879][T23994] ? lock_chain_count+0x20/0x20 [ 1077.273762][T23994] __x64_sys_bpf+0x7c/0x90 [ 1077.278197][T23994] do_syscall_64+0x55/0xb0 [ 1077.282629][T23994] ? clear_bhb_loop+0x40/0x90 [ 1077.287347][T23994] ? clear_bhb_loop+0x40/0x90 [ 1077.292047][T23994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1077.297963][T23994] RIP: 0033:0x7f5359b9e0d9 [ 1077.302397][T23994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.322024][T23994] RSP: 002b:00007f535aafc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1077.330467][T23994] RAX: ffffffffffffffda RBX: 00007f5359e25fa0 RCX: 00007f5359b9e0d9 [ 1077.338459][T23994] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1077.346437][T23994] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.354396][T23994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.362356][T23994] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1077.370330][T23994] [ 1077.375600][T23994] Mem-Info: [ 1077.379040][T23994] active_anon:7679 inactive_anon:0 isolated_anon:0 [ 1077.379040][T23994] active_file:19580 inactive_file:40356 isolated_file:0 [ 1077.379040][T23994] unevictable:768 dirty:189 writeback:0 [ 1077.379040][T23994] slab_reclaimable:11131 slab_unreclaimable:95946 [ 1077.379040][T23994] mapped:27220 shmem:1361 pagetables:524 [ 1077.379040][T23994] sec_pagetables:0 bounce:0 [ 1077.379040][T23994] kernel_misc_reclaimable:0 [ 1077.379040][T23994] free:1341269 free_pcp:3882 free_cma:0 [ 1077.443302][T23994] Node 0 active_anon:30716kB inactive_anon:0kB active_file:78320kB inactive_file:161224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108880kB dirty:756kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10716kB pagetables:2096kB sec_pagetables:0kB all_unreclaimable? no [ 1077.483076][T23994] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1077.528097][T23994] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1077.558146][T23994] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1077.564453][T23994] Node 0 DMA32 free:1438680kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:30576kB inactive_anon:0kB active_file:78320kB inactive_file:160392kB unevictable:1536kB writepending:756kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:9388kB local_pcp:3360kB free_cma:0kB [ 1077.595909][T23994] lowmem_reserve[]: 0 0 0 0 0 [ 1077.601156][T23994] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1077.642045][T23994] lowmem_reserve[]: 0 0 0 0 0 [ 1077.651612][T23994] Node 1 Normal free:3911036kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:6848kB local_pcp:0kB free_cma:0kB [ 1077.682173][T23994] lowmem_reserve[]: 0 0 0 0 0 [ 1077.687858][T23994] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1077.722029][T23994] Node 0 DMA32: 462*4kB (UME) 942*8kB (UME) 1381*16kB (UME) 1537*32kB (UME) 869*64kB (UM) 473*128kB (UME) 157*256kB (UME) 101*512kB (UME) 43*1024kB (UME) 18*2048kB (M) 261*4096kB (M) = 1438680kB [ 1077.750333][T23994] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1077.772972][T23994] Node 1 Normal: 225*4kB (UME) 51*8kB (UME) 36*16kB (UME) 191*32kB (UME) 61*64kB (UME) 14*128kB (UE) 0*256kB 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 950*4096kB (M) = 3911036kB [ 1077.811261][T23994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1077.841593][T23994] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1077.859436][T23994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1077.879780][T23994] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1077.900040][T23994] 61297 total pagecache pages [ 1077.910191][T23994] 0 pages in swap cache [ 1077.918767][T23994] Free swap = 124996kB [ 1077.923169][T23994] Total swap = 124996kB [ 1077.928767][T23994] 2097051 pages RAM [ 1077.932674][T23994] 0 pages HighMem/MovableOnly [ 1077.947607][T23994] 416958 pages reserved [ 1077.951927][T23994] 0 pages cma reserved [ 1078.400237][T24042] netlink: 'syz.0.5896': attribute type 10 has an invalid length. [ 1078.410807][T24042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5896'. [ 1078.439935][T24042] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1078.452893][T24042] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.516493][T24042] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1079.019200][T24060] netlink: 'syz.0.5903': attribute type 23 has an invalid length. [ 1079.027812][T24060] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.5903'. [ 1080.268025][T24089] netlink: 'syz.1.5913': attribute type 10 has an invalid length. [ 1080.287384][T24089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5913'. [ 1080.908781][T24104] FAULT_INJECTION: forcing a failure. [ 1080.908781][T24104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.941701][T24104] CPU: 0 PID: 24104 Comm: syz.0.5920 Not tainted syzkaller #0 [ 1080.949222][T24104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1080.959285][T24104] Call Trace: [ 1080.962558][T24104] [ 1080.965480][T24104] dump_stack_lvl+0x18c/0x250 [ 1080.970166][T24104] ? show_regs_print_info+0x20/0x20 [ 1080.975359][T24104] ? load_image+0x420/0x420 [ 1080.979862][T24104] ? __might_fault+0xaa/0x120 [ 1080.984532][T24104] ? __lock_acquire+0x7d80/0x7d80 [ 1080.989552][T24104] should_fail_ex+0x394/0x4c0 [ 1080.994226][T24104] _copy_from_iter+0x1cd/0x1290 [ 1080.999076][T24104] ? rcu_is_watching+0x15/0xb0 [ 1081.003840][T24104] ? copyout_mc+0x70/0x70 [ 1081.008161][T24104] ? __virt_addr_valid+0x10c/0x380 [ 1081.013265][T24104] ? __virt_addr_valid+0x10c/0x380 [ 1081.018371][T24104] ? __virt_addr_valid+0x10c/0x380 [ 1081.023475][T24104] ? __check_object_size+0x4fc/0xa40 [ 1081.028751][T24104] netlink_sendmsg+0x76b/0xbf0 [ 1081.033513][T24104] ? netlink_getsockopt+0x590/0x590 [ 1081.038704][T24104] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1081.044239][T24104] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1081.049521][T24104] ? security_socket_sendmsg+0x80/0xa0 [ 1081.054969][T24104] ? netlink_getsockopt+0x590/0x590 [ 1081.060160][T24104] ____sys_sendmsg+0x61b/0x980 [ 1081.064949][T24104] ? __asan_memset+0x22/0x40 [ 1081.069553][T24104] ? __sys_sendmsg_sock+0x30/0x30 [ 1081.074582][T24104] ? __import_iovec+0x5f2/0x850 [ 1081.079564][T24104] ? import_iovec+0x73/0xa0 [ 1081.084079][T24104] ___sys_sendmsg+0x2a6/0x360 [ 1081.088756][T24104] ? get_pid_task+0x20/0x1e0 [ 1081.093352][T24104] ? __sys_sendmsg+0x2b0/0x2b0 [ 1081.098131][T24104] ? __lock_acquire+0x7d80/0x7d80 [ 1081.103168][T24104] __se_sys_sendmsg+0x1d0/0x2c0 [ 1081.108015][T24104] ? __x64_sys_sendmsg+0x80/0x80 [ 1081.112956][T24104] ? lockdep_hardirqs_on+0x98/0x150 [ 1081.118154][T24104] do_syscall_64+0x55/0xb0 [ 1081.122565][T24104] ? clear_bhb_loop+0x40/0x90 [ 1081.127240][T24104] ? clear_bhb_loop+0x40/0x90 [ 1081.131950][T24104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1081.137836][T24104] RIP: 0033:0x7f5359b9e0d9 [ 1081.142242][T24104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.161841][T24104] RSP: 002b:00007f535aafc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.170247][T24104] RAX: ffffffffffffffda RBX: 00007f5359e25fa0 RCX: 00007f5359b9e0d9 [ 1081.178210][T24104] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1081.186172][T24104] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.194137][T24104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.202122][T24104] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1081.210097][T24104] [ 1081.291877][T24107] netlink: 'syz.3.5921': attribute type 1 has an invalid length. [ 1081.300359][T24107] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.5921'. [ 1081.356811][T24107] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5921'. [ 1081.380833][T24107] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.5921'. [ 1082.882377][T24149] netlink: 'syz.3.5936': attribute type 3 has an invalid length. [ 1082.890229][T24149] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5936'. [ 1082.926359][T24156] FAULT_INJECTION: forcing a failure. [ 1082.926359][T24156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.941831][T24156] CPU: 0 PID: 24156 Comm: syz.0.5939 Not tainted syzkaller #0 [ 1082.949339][T24156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1082.959411][T24156] Call Trace: [ 1082.962700][T24156] [ 1082.965618][T24156] dump_stack_lvl+0x18c/0x250 [ 1082.970321][T24156] ? show_regs_print_info+0x20/0x20 [ 1082.975545][T24156] ? load_image+0x420/0x420 [ 1082.980082][T24156] ? __might_fault+0xaa/0x120 [ 1082.984788][T24156] ? __lock_acquire+0x7d80/0x7d80 [ 1082.989841][T24156] ? __virt_addr_valid+0x10c/0x380 [ 1082.994984][T24156] should_fail_ex+0x394/0x4c0 [ 1082.999690][T24156] _copy_from_user+0x2f/0xe0 [ 1083.004312][T24156] generic_map_update_batch+0x58c/0x800 [ 1083.009887][T24156] ? rcu_read_unlock+0xa0/0xa0 [ 1083.014673][T24156] ? __fdget+0x180/0x210 [ 1083.018938][T24156] ? rcu_read_unlock+0xa0/0xa0 [ 1083.023721][T24156] bpf_map_do_batch+0x3f2/0x600 [ 1083.028597][T24156] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 1083.034091][T24156] __sys_bpf+0x381/0x890 [ 1083.038357][T24156] ? bpf_link_show_fdinfo+0x390/0x390 [ 1083.043751][T24156] ? lock_chain_count+0x20/0x20 [ 1083.048596][T24156] __x64_sys_bpf+0x7c/0x90 [ 1083.053011][T24156] do_syscall_64+0x55/0xb0 [ 1083.057431][T24156] ? clear_bhb_loop+0x40/0x90 [ 1083.062095][T24156] ? clear_bhb_loop+0x40/0x90 [ 1083.066758][T24156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1083.072654][T24156] RIP: 0033:0x7f5359b9e0d9 [ 1083.077055][T24156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.096666][T24156] RSP: 002b:00007f535aafc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1083.105109][T24156] RAX: ffffffffffffffda RBX: 00007f5359e25fa0 RCX: 00007f5359b9e0d9 [ 1083.113105][T24156] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 1083.121097][T24156] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.129082][T24156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1083.137045][T24156] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1083.145039][T24156] [ 1083.243831][T24165] netlink: 'syz.3.5941': attribute type 2 has an invalid length. [ 1083.272030][T24165] netlink: 'syz.3.5941': attribute type 8 has an invalid length. [ 1083.283497][T24165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1083.706885][T24196] netlink: 'syz.0.5952': attribute type 10 has an invalid length. [ 1083.759318][T24201] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5954'. [ 1083.768565][T24201] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5954'. [ 1083.782866][T24201] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5954'. [ 1083.798325][T24202] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5954'. [ 1083.809706][T24201] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5954'. [ 1084.085051][T24217] FAULT_INJECTION: forcing a failure. [ 1084.085051][T24217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.101794][T24217] CPU: 1 PID: 24217 Comm: syz.2.5959 Not tainted syzkaller #0 [ 1084.109348][T24217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1084.116414][T24210] delete_channel: no stack [ 1084.119402][T24217] Call Trace: [ 1084.119411][T24217] [ 1084.119420][T24217] dump_stack_lvl+0x18c/0x250 [ 1084.134750][T24217] ? show_regs_print_info+0x20/0x20 [ 1084.139972][T24217] ? load_image+0x420/0x420 [ 1084.144503][T24217] ? __might_fault+0xaa/0x120 [ 1084.149182][T24217] ? __lock_acquire+0x7d80/0x7d80 [ 1084.154222][T24217] should_fail_ex+0x394/0x4c0 [ 1084.158905][T24217] _copy_from_user+0x2f/0xe0 [ 1084.163497][T24217] do_ipv6_setsockopt+0x2e6/0x3e50 [ 1084.168620][T24217] ? sk_dst_reset+0xa0/0xa0 [ 1084.173124][T24217] ? trace_event_raw_event_lock+0x240/0x240 [ 1084.179015][T24217] ? verify_lock_unused+0x140/0x140 [ 1084.184224][T24217] ? mark_lock+0x94/0x320 [ 1084.188552][T24217] ? __lock_acquire+0x1262/0x7d80 [ 1084.193588][T24217] ? aa_label_sk_perm+0x500/0x6a0 [ 1084.198623][T24217] ? aa_sk_perm+0x970/0x970 [ 1084.203166][T24217] ? trace_event_raw_event_lock+0x240/0x240 [ 1084.209057][T24217] ? __might_sleep+0xe0/0xe0 [ 1084.213648][T24217] ? ksys_write+0x1d2/0x260 [ 1084.218184][T24217] ? aa_sk_perm+0x83c/0x970 [ 1084.222684][T24217] ? __fget_files+0x28/0x460 [ 1084.227278][T24217] ? aa_af_perm+0x330/0x330 [ 1084.231781][T24217] ? __fget_files+0x28/0x460 [ 1084.236372][T24217] ? aa_sock_opt_perm+0x74/0x100 [ 1084.241307][T24217] ipv6_setsockopt+0x59/0x190 [ 1084.245978][T24217] ? sock_common_recvmsg+0x190/0x190 [ 1084.251286][T24217] do_sock_setsockopt+0x175/0x1a0 [ 1084.256308][T24217] ? __fdget+0x180/0x210 [ 1084.260550][T24217] __x64_sys_setsockopt+0x182/0x200 [ 1084.265747][T24217] do_syscall_64+0x55/0xb0 [ 1084.270157][T24217] ? clear_bhb_loop+0x40/0x90 [ 1084.274833][T24217] ? clear_bhb_loop+0x40/0x90 [ 1084.279505][T24217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1084.285390][T24217] RIP: 0033:0x7f5edc79e0d9 [ 1084.289802][T24217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.309401][T24217] RSP: 002b:00007f5edd61a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1084.317813][T24217] RAX: ffffffffffffffda RBX: 00007f5edca25fa0 RCX: 00007f5edc79e0d9 [ 1084.325778][T24217] RDX: 0000000000000013 RSI: 0000000000000029 RDI: 0000000000000003 [ 1084.333743][T24217] RBP: 00007f5edd61a090 R08: 0000000000000120 R09: 0000000000000000 [ 1084.341706][T24217] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1084.349682][T24217] R13: 00007f5edca26038 R14: 00007f5edca25fa0 R15: 00007ffc86e74aa8 [ 1084.357664][T24217] [ 1085.069445][T24253] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1085.252291][T24255] netlink: 'syz.1.5975': attribute type 10 has an invalid length. [ 1085.260715][T24255] netlink: 'syz.1.5975': attribute type 10 has an invalid length. [ 1085.276830][T24255] openvswitch: netlink: Message has 4 unknown bytes. [ 1085.476116][T24265] netlink: 'syz.0.5980': attribute type 2 has an invalid length. [ 1085.484279][T24265] netlink: 'syz.0.5980': attribute type 8 has an invalid length. [ 1085.495051][T24265] netlink: 'syz.0.5980': attribute type 2 has an invalid length. [ 1085.546870][T24268] FAULT_INJECTION: forcing a failure. [ 1085.546870][T24268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.569350][T24268] CPU: 1 PID: 24268 Comm: syz.2.5981 Not tainted syzkaller #0 [ 1085.576880][T24268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1085.586959][T24268] Call Trace: [ 1085.590256][T24268] [ 1085.593198][T24268] dump_stack_lvl+0x18c/0x250 [ 1085.597902][T24268] ? show_regs_print_info+0x20/0x20 [ 1085.603116][T24268] ? load_image+0x420/0x420 [ 1085.607640][T24268] ? __might_fault+0xaa/0x120 [ 1085.612335][T24268] ? __lock_acquire+0x7d80/0x7d80 [ 1085.617385][T24268] should_fail_ex+0x394/0x4c0 [ 1085.622094][T24268] _copy_to_user+0x2f/0xa0 [ 1085.626530][T24268] sock_map_bpf_prog_query+0x631/0x710 [ 1085.632020][T24268] ? sock_map_bpf_prog_query+0x16b/0x710 [ 1085.637677][T24268] ? sock_hash_mem_usage+0xe0/0xe0 [ 1085.642813][T24268] ? bpf_lsm_capable+0x9/0x10 [ 1085.647623][T24268] __sys_bpf+0x7a0/0x890 [ 1085.651887][T24268] ? bpf_link_show_fdinfo+0x390/0x390 [ 1085.657292][T24268] ? lock_chain_count+0x20/0x20 [ 1085.662167][T24268] __x64_sys_bpf+0x7c/0x90 [ 1085.666602][T24268] do_syscall_64+0x55/0xb0 [ 1085.671033][T24268] ? clear_bhb_loop+0x40/0x90 [ 1085.675733][T24268] ? clear_bhb_loop+0x40/0x90 [ 1085.680436][T24268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.686439][T24268] RIP: 0033:0x7f5edc79e0d9 [ 1085.690869][T24268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.710483][T24268] RSP: 002b:00007f5edd61a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1085.718899][T24268] RAX: ffffffffffffffda RBX: 00007f5edca25fa0 RCX: 00007f5edc79e0d9 [ 1085.726862][T24268] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000010 [ 1085.734997][T24268] RBP: 00007f5edd61a090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.742958][T24268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.750917][T24268] R13: 00007f5edca26038 R14: 00007f5edca25fa0 R15: 00007ffc86e74aa8 [ 1085.758894][T24268] [ 1086.079532][T24285] delete_channel: no stack [ 1086.169987][T24287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.179671][T24287] team0: Port device bond0 added [ 1088.126074][T21872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1088.142610][T21872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1088.150920][T21872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1088.159992][T21872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1088.167958][T21872] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1088.175564][T21872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1088.637467][T24337] chnl_net:caif_netlink_parms(): no params data found [ 1088.876791][T24337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.884476][T24337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.892560][T24337] bridge_slave_0: entered allmulticast mode [ 1088.902279][T24337] bridge_slave_0: entered promiscuous mode [ 1088.934097][T24337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.942872][T24337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.959461][T24337] bridge_slave_1: entered allmulticast mode [ 1088.970061][T24337] bridge_slave_1: entered promiscuous mode [ 1089.076729][T24337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.120394][T24337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.178608][T24337] team0: Port device team_slave_0 added [ 1089.275340][T24337] team0: Port device team_slave_1 added [ 1089.409368][T17722] bond0: (slave syz_tun): Releasing backup interface [ 1089.449273][T24337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.487343][T24337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.528201][T24337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.707678][T24337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.731911][T24337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.758588][T24337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.853655][T24337] hsr_slave_0: entered promiscuous mode [ 1089.865250][T24337] hsr_slave_1: entered promiscuous mode [ 1089.873952][T24337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1089.882288][T24337] Cannot create hsr debugfs directory [ 1090.037403][T24337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.125475][T24337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.219995][T24337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.221851][ T5783] Bluetooth: hci4: command tx timeout [ 1090.295776][T24337] batman_adv: batadv0: Removing interface: netdevsim0 [ 1090.303966][T24337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.477247][T24337] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1090.499680][T24376] validate_nla: 4 callbacks suppressed [ 1090.499697][T24376] netlink: 'syz.0.6025': attribute type 41 has an invalid length. [ 1090.516687][T24337] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1090.535249][T24337] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1090.563835][T24337] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1090.688633][T24337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.747798][T24337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.794257][T22191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.801453][T22191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.953007][T22191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.960193][T22191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.829604][T24337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.017141][T24337] veth0_vlan: entered promiscuous mode [ 1092.073900][T24337] veth1_vlan: entered promiscuous mode [ 1092.110944][T24337] veth0_macvtap: entered promiscuous mode [ 1092.129215][T24337] veth1_macvtap: entered promiscuous mode [ 1092.148218][T24337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.159397][T24337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.169266][T24337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.179855][T24337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.190313][T24337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.200976][T24337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.211253][T24337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.221920][T24337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.240523][T24337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.282735][T24337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.301990][ T5783] Bluetooth: hci4: command tx timeout [ 1092.307942][T24337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.319057][T24337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.331868][T24337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.342630][T24337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.354553][T24337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.364761][T24337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.375911][T24337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.388693][T24337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.405311][T24337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.421935][T24337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.430671][T24337] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.461928][T24337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.807900][T24419] __nla_validate_parse: 6 callbacks suppressed [ 1092.807918][T24419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1092.962104][T10225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.969979][T10225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.086151][T18385] hsr_slave_0: left promiscuous mode [ 1093.094488][T18385] hsr_slave_1: left promiscuous mode [ 1093.100760][T18385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.109283][T24433] FAULT_INJECTION: forcing a failure. [ 1093.109283][T24433] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.122166][T18385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.130691][T18385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.138618][T18385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.145840][T24433] CPU: 0 PID: 24433 Comm: syz.2.6038 Not tainted syzkaller #0 [ 1093.153305][T24433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1093.163354][T24433] Call Trace: [ 1093.166624][T24433] [ 1093.169550][T24433] dump_stack_lvl+0x18c/0x250 [ 1093.174231][T24433] ? show_regs_print_info+0x20/0x20 [ 1093.179421][T24433] ? load_image+0x420/0x420 [ 1093.183922][T24433] ? __might_sleep+0xe0/0xe0 [ 1093.188509][T24433] ? __lock_acquire+0x7d80/0x7d80 [ 1093.193532][T24433] should_fail_ex+0x394/0x4c0 [ 1093.198213][T24433] should_failslab+0x9/0x20 [ 1093.202712][T24433] slab_pre_alloc_hook+0x59/0x300 [ 1093.207731][T24433] ? __lock_acquire+0x7d80/0x7d80 [ 1093.212748][T24433] kmem_cache_alloc_node+0x5e/0x310 [ 1093.217938][T24433] ? __alloc_skb+0x103/0x2c0 [ 1093.222523][T24433] __alloc_skb+0x103/0x2c0 [ 1093.226962][T24433] netlink_sendmsg+0x66a/0xbf0 [ 1093.231731][T24433] ? netlink_getsockopt+0x590/0x590 [ 1093.236922][T24433] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1093.242461][T24433] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1093.247738][T24433] ? security_socket_sendmsg+0x80/0xa0 [ 1093.253187][T24433] ? netlink_getsockopt+0x590/0x590 [ 1093.258377][T24433] ____sys_sendmsg+0x61b/0x980 [ 1093.263138][T24433] ? __asan_memset+0x22/0x40 [ 1093.267728][T24433] ? __sys_sendmsg_sock+0x30/0x30 [ 1093.272743][T24433] ? __import_iovec+0x3fa/0x850 [ 1093.277593][T24433] ? import_iovec+0x73/0xa0 [ 1093.282090][T24433] ___sys_sendmsg+0x2a6/0x360 [ 1093.286783][T24433] ? __sys_sendmsg+0x2b0/0x2b0 [ 1093.291569][T24433] ? trace_call_bpf+0xc3/0x6c0 [ 1093.296351][T24433] __se_sys_sendmsg+0x1d0/0x2c0 [ 1093.301204][T24433] ? perf_trace_preemptirq_template+0x269/0x330 [ 1093.307480][T24433] ? __x64_sys_sendmsg+0x80/0x80 [ 1093.312426][T24433] ? lockdep_hardirqs_on+0x98/0x150 [ 1093.317645][T24433] do_syscall_64+0x55/0xb0 [ 1093.322056][T24433] ? clear_bhb_loop+0x40/0x90 [ 1093.326726][T24433] ? clear_bhb_loop+0x40/0x90 [ 1093.331394][T24433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.337288][T24433] RIP: 0033:0x7f5edc79e0d9 [ 1093.341696][T24433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.361305][T24433] RSP: 002b:00007f5edd61a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.369717][T24433] RAX: ffffffffffffffda RBX: 00007f5edca25fa0 RCX: 00007f5edc79e0d9 [ 1093.377722][T24433] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1093.385688][T24433] RBP: 00007f5edd61a090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.393651][T24433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.401630][T24433] R13: 00007f5edca26038 R14: 00007f5edca25fa0 R15: 00007ffc86e74aa8 [ 1093.409613][T24433] [ 1093.418731][T18385] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1093.426090][T18385] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1093.433787][T18385] bridge_slave_1: left allmulticast mode [ 1093.439459][T18385] bridge_slave_1: left promiscuous mode [ 1093.445381][T18385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.500349][T18385] veth1_macvtap: left promiscuous mode [ 1093.506270][T18385] veth0_macvtap: left promiscuous mode [ 1093.512435][T18385] veth1_vlan: left promiscuous mode [ 1093.517954][T18385] veth0_vlan: left promiscuous mode [ 1094.373669][ T5783] Bluetooth: hci4: command tx timeout [ 1094.389043][T18385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.669187][T18385] bond0 (unregistering): Released all slaves [ 1094.798155][T24437] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1094.809293][T24445] netlink: 'syz.0.6044': attribute type 10 has an invalid length. [ 1094.819948][T24445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6044'. [ 1094.873906][T10225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.917513][T10225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.014106][T24449] netlink: 'syz.0.6047': attribute type 10 has an invalid length. [ 1095.649685][T24475] netlink: 'syz.0.6056': attribute type 10 has an invalid length. [ 1095.669256][T24475] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1095.693516][T24475] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1095.707523][T24475] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1095.723766][T24475] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1096.452136][ T5783] Bluetooth: hci4: command tx timeout [ 1096.569783][T24495] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6063'. [ 1096.868361][T24511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6070'. [ 1097.136172][T24517] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6072'. [ 1097.419341][T24522] netlink: 'syz.3.6074': attribute type 10 has an invalid length. [ 1097.442007][T24522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6074'. [ 1097.638844][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 1098.409989][T24548] netlink: 'syz.0.6085': attribute type 10 has an invalid length. [ 1098.435911][T24548] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1098.462252][T24548] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1098.482041][T24548] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1098.536489][T24548] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1098.576418][T24559] netlink: 'syz.1.6089': attribute type 21 has an invalid length. [ 1098.602227][T24559] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6089'. [ 1098.643843][T24559] netlink: 'syz.1.6089': attribute type 5 has an invalid length. [ 1098.675544][T24559] netlink: 'syz.1.6089': attribute type 6 has an invalid length. [ 1098.696896][T24559] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6089'. [ 1100.051693][T24583] netlink: 'syz.1.6097': attribute type 39 has an invalid length. [ 1100.799765][T24583] hsr_slave_1 (unregistering): left promiscuous mode [ 1104.576983][T24658] netlink: 'syz.1.6121': attribute type 23 has an invalid length. [ 1104.603080][T24658] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.6121'. [ 1104.974083][T24678] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6125'. [ 1104.994154][T24678] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1105.006245][T24685] netlink: 'syz.3.6130': attribute type 29 has an invalid length. [ 1105.022232][T24685] netlink: 'syz.3.6130': attribute type 29 has an invalid length. [ 1105.693481][T24691] netlink: 'syz.3.6130': attribute type 29 has an invalid length. [ 1105.701619][T24693] netlink: 'syz.3.6130': attribute type 29 has an invalid length. [ 1106.027106][T24710] FAULT_INJECTION: forcing a failure. [ 1106.027106][T24710] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.051789][T24710] CPU: 1 PID: 24710 Comm: syz.0.6141 Not tainted syzkaller #0 [ 1106.059309][T24710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1106.069394][T24710] Call Trace: [ 1106.072684][T24710] [ 1106.075627][T24710] dump_stack_lvl+0x18c/0x250 [ 1106.080336][T24710] ? show_regs_print_info+0x20/0x20 [ 1106.085555][T24710] ? load_image+0x420/0x420 [ 1106.090086][T24710] ? verify_lock_unused+0x140/0x140 [ 1106.095327][T24710] should_fail_ex+0x394/0x4c0 [ 1106.100037][T24710] should_failslab+0x9/0x20 [ 1106.104571][T24710] slab_pre_alloc_hook+0x59/0x300 [ 1106.109631][T24710] kmem_cache_alloc+0x5a/0x2c0 [ 1106.114428][T24710] ? skb_clone+0x1eb/0x370 [ 1106.118870][T24710] skb_clone+0x1eb/0x370 [ 1106.123135][T24710] __netlink_deliver_tap+0x411/0x7f0 [ 1106.128448][T24710] ? netlink_deliver_tap+0x2e/0x1b0 [ 1106.133661][T24710] netlink_deliver_tap+0x19c/0x1b0 [ 1106.138772][T24710] netlink_unicast+0x77b/0x930 [ 1106.143545][T24710] netlink_sendmsg+0x8d0/0xbf0 [ 1106.148311][T24710] ? netlink_getsockopt+0x590/0x590 [ 1106.153501][T24710] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1106.159040][T24710] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1106.164322][T24710] ? security_socket_sendmsg+0x80/0xa0 [ 1106.169777][T24710] ? netlink_getsockopt+0x590/0x590 [ 1106.175059][T24710] ____sys_sendmsg+0x61b/0x980 [ 1106.179828][T24710] ? __asan_memset+0x22/0x40 [ 1106.184502][T24710] ? __sys_sendmsg_sock+0x30/0x30 [ 1106.189518][T24710] ? __import_iovec+0x5f2/0x850 [ 1106.194465][T24710] ? import_iovec+0x73/0xa0 [ 1106.198963][T24710] ___sys_sendmsg+0x2a6/0x360 [ 1106.203633][T24710] ? get_pid_task+0x20/0x1e0 [ 1106.208220][T24710] ? __sys_sendmsg+0x2b0/0x2b0 [ 1106.212990][T24710] ? __lock_acquire+0x7d80/0x7d80 [ 1106.218047][T24710] __se_sys_sendmsg+0x1d0/0x2c0 [ 1106.222915][T24710] ? __x64_sys_sendmsg+0x80/0x80 [ 1106.227868][T24710] ? lockdep_hardirqs_on+0x98/0x150 [ 1106.233073][T24710] do_syscall_64+0x55/0xb0 [ 1106.237488][T24710] ? clear_bhb_loop+0x40/0x90 [ 1106.242161][T24710] ? clear_bhb_loop+0x40/0x90 [ 1106.246836][T24710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1106.252722][T24710] RIP: 0033:0x7f5359b9e0d9 [ 1106.257134][T24710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.276752][T24710] RSP: 002b:00007f535aafc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1106.285170][T24710] RAX: ffffffffffffffda RBX: 00007f5359e25fa0 RCX: 00007f5359b9e0d9 [ 1106.293146][T24710] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1106.301116][T24710] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.309080][T24710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.317051][T24710] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1106.325033][T24710] [ 1107.614895][T24756] netlink: 'syz.3.6161': attribute type 10 has an invalid length. [ 1107.706620][T24756] team0 (unregistering): Port device team_slave_0 removed [ 1107.752902][T24756] team0 (unregistering): Port device team_slave_1 removed [ 1110.995978][T24795] FAULT_INJECTION: forcing a failure. [ 1110.995978][T24795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1111.061499][T24795] CPU: 1 PID: 24795 Comm: syz.0.6173 Not tainted syzkaller #0 [ 1111.069044][T24795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1111.079130][T24795] Call Trace: [ 1111.082441][T24795] [ 1111.085407][T24795] dump_stack_lvl+0x18c/0x250 [ 1111.090125][T24795] ? show_regs_print_info+0x20/0x20 [ 1111.095365][T24795] ? load_image+0x420/0x420 [ 1111.099910][T24795] ? __might_fault+0xaa/0x120 [ 1111.104620][T24795] ? __lock_acquire+0x7d80/0x7d80 [ 1111.109679][T24795] ? __virt_addr_valid+0x10c/0x380 [ 1111.114821][T24795] should_fail_ex+0x394/0x4c0 [ 1111.119536][T24795] _copy_from_user+0x2f/0xe0 [ 1111.124154][T24795] generic_map_update_batch+0x53e/0x800 [ 1111.129740][T24795] ? rcu_read_unlock+0xa0/0xa0 [ 1111.134530][T24795] ? __fdget+0x180/0x210 [ 1111.138801][T24795] ? rcu_read_unlock+0xa0/0xa0 [ 1111.143595][T24795] bpf_map_do_batch+0x3f2/0x600 [ 1111.148468][T24795] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 1111.154045][T24795] __sys_bpf+0x381/0x890 [ 1111.158317][T24795] ? bpf_link_show_fdinfo+0x390/0x390 [ 1111.163742][T24795] ? lock_chain_count+0x20/0x20 [ 1111.168639][T24795] __x64_sys_bpf+0x7c/0x90 [ 1111.173090][T24795] do_syscall_64+0x55/0xb0 [ 1111.177530][T24795] ? clear_bhb_loop+0x40/0x90 [ 1111.182231][T24795] ? clear_bhb_loop+0x40/0x90 [ 1111.186928][T24795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1111.192849][T24795] RIP: 0033:0x7f5359b9e0d9 [ 1111.197282][T24795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.216911][T24795] RSP: 002b:00007f535aafc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1111.225349][T24795] RAX: ffffffffffffffda RBX: 00007f5359e25fa0 RCX: 00007f5359b9e0d9 [ 1111.233340][T24795] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 1111.241330][T24795] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.249319][T24795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1111.257317][T24795] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1111.265329][T24795] [ 1112.496479][T24824] netlink: 'syz.3.6183': attribute type 10 has an invalid length. [ 1113.183072][T24852] syzkaller0: entered allmulticast mode [ 1113.240127][T24858] FAULT_INJECTION: forcing a failure. [ 1113.240127][T24858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.258361][T24858] CPU: 1 PID: 24858 Comm: syz.0.6195 Not tainted syzkaller #0 [ 1113.265861][T24858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1113.275921][T24858] Call Trace: [ 1113.279199][T24858] [ 1113.282139][T24858] dump_stack_lvl+0x18c/0x250 [ 1113.286837][T24858] ? show_regs_print_info+0x20/0x20 [ 1113.292039][T24858] ? load_image+0x420/0x420 [ 1113.296548][T24858] ? __lock_acquire+0x7d80/0x7d80 [ 1113.301572][T24858] ? snprintf+0xe9/0x140 [ 1113.305828][T24858] should_fail_ex+0x394/0x4c0 [ 1113.310510][T24858] _copy_to_user+0x2f/0xa0 [ 1113.314927][T24858] simple_read_from_buffer+0xe7/0x150 [ 1113.320313][T24858] proc_fail_nth_read+0x1e8/0x260 [ 1113.325347][T24858] ? proc_fault_inject_write+0x360/0x360 [ 1113.331001][T24858] ? fsnotify_perm+0x271/0x5e0 [ 1113.335787][T24858] ? proc_fault_inject_write+0x360/0x360 [ 1113.341430][T24858] vfs_read+0x298/0x990 [ 1113.345597][T24858] ? kernel_read+0x1e0/0x1e0 [ 1113.350199][T24858] ? __fget_files+0x28/0x460 [ 1113.354795][T24858] ? __fget_files+0x3fc/0x460 [ 1113.359491][T24858] ? __fdget_pos+0x2a3/0x330 [ 1113.364140][T24858] ? ksys_read+0x74/0x260 [ 1113.368476][T24858] ksys_read+0x151/0x260 [ 1113.372726][T24858] ? vfs_write+0x9a0/0x9a0 [ 1113.377149][T24858] ? lockdep_hardirqs_on+0x98/0x150 [ 1113.382353][T24858] do_syscall_64+0x55/0xb0 [ 1113.386895][T24858] ? clear_bhb_loop+0x40/0x90 [ 1113.391602][T24858] ? clear_bhb_loop+0x40/0x90 [ 1113.396308][T24858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1113.402216][T24858] RIP: 0033:0x7f5359b5e90e [ 1113.406679][T24858] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1113.426315][T24858] RSP: 002b:00007f535aafbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1113.434741][T24858] RAX: ffffffffffffffda RBX: 00007f535aafc6c0 RCX: 00007f5359b5e90e [ 1113.442716][T24858] RDX: 000000000000000f RSI: 00007f535aafc0a0 RDI: 0000000000000005 [ 1113.450748][T24858] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.458737][T24858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.466716][T24858] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1113.474706][T24858] [ 1113.510542][T24860] netlink: 'syz.2.6196': attribute type 21 has an invalid length. [ 1113.529773][T24860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6196'. [ 1113.540197][T24860] netlink: 'syz.2.6196': attribute type 1 has an invalid length. [ 1114.266716][T24899] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6210'. [ 1114.276686][T24899] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1114.384190][T24897] netlink: 'syz.1.6208': attribute type 21 has an invalid length. [ 1114.426204][T24897] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6208'. [ 1114.442575][T24906] netlink: 'syz.0.6212': attribute type 10 has an invalid length. [ 1114.674009][T24914] : renamed from bond_slave_0 (while UP) [ 1115.265182][T24929] netlink: 'syz.1.6217': attribute type 10 has an invalid length. [ 1115.312298][T24929] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1115.531262][T24935] vcan0: entered allmulticast mode [ 1115.554413][T24937] netlink: 'syz.3.6224': attribute type 10 has an invalid length. [ 1115.624307][T24937] batman_adv: batadv0: Adding interface: netdevsim0 [ 1115.639394][T24937] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.681478][T24937] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1115.711303][T24942] netlink: 'syz.2.6223': attribute type 10 has an invalid length. [ 1115.753822][T24942] veth0_macvtap: left promiscuous mode [ 1115.856339][T24952] FAULT_INJECTION: forcing a failure. [ 1115.856339][T24952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.905319][T24952] CPU: 1 PID: 24952 Comm: syz.3.6227 Not tainted syzkaller #0 [ 1115.912850][T24952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1115.922937][T24952] Call Trace: [ 1115.926240][T24952] [ 1115.929198][T24952] dump_stack_lvl+0x18c/0x250 [ 1115.933892][T24952] ? show_regs_print_info+0x20/0x20 [ 1115.939098][T24952] ? load_image+0x420/0x420 [ 1115.943609][T24952] ? __lock_acquire+0x7d80/0x7d80 [ 1115.948745][T24952] ? snprintf+0xe9/0x140 [ 1115.953007][T24952] should_fail_ex+0x394/0x4c0 [ 1115.957736][T24952] _copy_to_user+0x2f/0xa0 [ 1115.962184][T24952] simple_read_from_buffer+0xe7/0x150 [ 1115.967592][T24952] proc_fail_nth_read+0x1e8/0x260 [ 1115.972649][T24952] ? proc_fault_inject_write+0x360/0x360 [ 1115.978319][T24952] ? fsnotify_perm+0x271/0x5e0 [ 1115.983097][T24952] ? proc_fault_inject_write+0x360/0x360 [ 1115.988821][T24952] vfs_read+0x298/0x990 [ 1115.993004][T24952] ? kernel_read+0x1e0/0x1e0 [ 1115.997618][T24952] ? __fget_files+0x28/0x460 [ 1116.002220][T24952] ? __fget_files+0x3fc/0x460 [ 1116.006909][T24952] ? __fdget_pos+0x2a3/0x330 [ 1116.011502][T24952] ? ksys_read+0x74/0x260 [ 1116.015839][T24952] ksys_read+0x151/0x260 [ 1116.020086][T24952] ? vfs_write+0x9a0/0x9a0 [ 1116.024508][T24952] ? lockdep_hardirqs_on+0x98/0x150 [ 1116.029712][T24952] do_syscall_64+0x55/0xb0 [ 1116.034130][T24952] ? clear_bhb_loop+0x40/0x90 [ 1116.038807][T24952] ? clear_bhb_loop+0x40/0x90 [ 1116.043488][T24952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1116.049383][T24952] RIP: 0033:0x7f59ac75e90e [ 1116.053808][T24952] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1116.073432][T24952] RSP: 002b:00007f59ad5b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1116.081859][T24952] RAX: ffffffffffffffda RBX: 00007f59ad5b56c0 RCX: 00007f59ac75e90e [ 1116.089870][T24952] RDX: 000000000000000f RSI: 00007f59ad5b50a0 RDI: 0000000000000006 [ 1116.097948][T24952] RBP: 00007f59ad5b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.105926][T24952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.113898][T24952] R13: 00007f59aca26038 R14: 00007f59aca25fa0 R15: 00007ffe12df0818 [ 1116.121885][T24952] [ 1116.141007][T24954] netlink: 'syz.0.6228': attribute type 9 has an invalid length. [ 1116.149665][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.156710][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.166127][T24954] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6228'. [ 1116.370942][T24961] netlink: 'syz.2.6230': attribute type 10 has an invalid length. [ 1117.281538][T24998] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6243'. [ 1117.303776][T25001] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1117.760301][T25020] delete_channel: no stack [ 1117.773719][T25020] delete_channel: no stack [ 1117.819449][T25020] validate_nla: 2 callbacks suppressed [ 1117.819479][T25020] netlink: 'syz.2.6252': attribute type 17 has an invalid length. [ 1117.838841][T25020] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6252'. [ 1117.863875][T25020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1118.414619][T25047] netlink: 'syz.3.6263': attribute type 10 has an invalid length. [ 1118.431226][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.438950][T25046] tap0: linktype set to 804 [ 1118.444836][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.454033][T25046] tap0: linktype set to 804 [ 1118.460318][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.466627][T25046] tap0: linktype set to 804 [ 1118.472866][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.478961][T25046] tap0: linktype set to 804 [ 1118.485215][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.495055][T25046] tap0: linktype set to 804 [ 1118.500403][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.512260][T25046] tap0: linktype set to 804 [ 1118.517716][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.524660][T25046] tap0: linktype set to 804 [ 1118.530139][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.537881][T25046] tap0: linktype set to 804 [ 1118.543899][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.558953][T25046] tap0: linktype set to 804 [ 1118.569798][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.582895][T25046] tap0: linktype set to 804 [ 1118.738889][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.755597][T25046] tap0: linktype set to 804 [ 1118.770030][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.783412][T25046] tap0: linktype set to 804 [ 1118.791322][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.800879][T25046] tap0: linktype set to 804 [ 1118.812807][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.826212][T25046] tap0: linktype set to 804 [ 1118.837626][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.852235][T25046] tap0: linktype set to 804 [ 1118.872956][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.888125][T25046] tap0: linktype set to 804 [ 1118.902606][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.915883][T25046] tap0: linktype set to 804 [ 1118.928380][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.942020][T25046] tap0: linktype set to 804 [ 1118.953307][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1118.969630][T25046] tap0: linktype set to 804 [ 1118.985625][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1119.001080][T25046] tap0: linktype set to 804 [ 1119.017093][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1119.038002][T25046] tap0: linktype set to 804 [ 1119.058014][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1119.077512][T25046] tap0: linktype set to 804 [ 1119.132499][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1119.142261][T25046] tap0: linktype set to 804 [ 1119.153112][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1119.174119][T25046] tap0: linktype set to 804 [ 1119.180002][T25046] tap0: tun_chr_ioctl cmd 1074025677 [ 1119.192137][T25046] tap0: linktype set to 804 [ 1119.342834][T25054] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6265'. [ 1119.363811][T25052] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6266'. [ 1119.391998][T25054] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1119.634660][T25065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.642099][T25065] IPv6: NLM_F_CREATE should be set when creating new route [ 1119.649535][T25065] IPv6: NLM_F_CREATE should be set when creating new route [ 1119.661025][T25065] IPv6: NLM_F_CREATE should be set when creating new route [ 1121.361542][T25106] can: request_module (can-proto-0) failed. [ 1121.453759][T25115] netlink: 'syz.2.6287': attribute type 10 has an invalid length. [ 1121.466065][T25115] batman_adv: batadv0: Removing interface: netdevsim0 [ 1121.919082][T25115] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1122.021855][T25106] syzkaller0: entered promiscuous mode [ 1122.051805][T25106] syzkaller0: entered allmulticast mode [ 1124.548971][T25126] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6291'. [ 1124.562318][T25131] netlink: 'syz.0.6292': attribute type 21 has an invalid length. [ 1124.729968][T25151] netlink: 'syz.1.6300': attribute type 10 has an invalid length. [ 1124.760857][T25151] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1124.872369][T25155] netlink: 'syz.2.6301': attribute type 41 has an invalid length. [ 1127.295736][T25225] FAULT_INJECTION: forcing a failure. [ 1127.295736][T25225] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.321871][T25225] CPU: 1 PID: 25225 Comm: syz.0.6328 Not tainted syzkaller #0 [ 1127.329412][T25225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1127.339493][T25225] Call Trace: [ 1127.342801][T25225] [ 1127.345772][T25225] dump_stack_lvl+0x18c/0x250 [ 1127.350493][T25225] ? sctp_sendmsg+0x1519/0x27b0 [ 1127.355398][T25225] ? ___sys_sendmsg+0x2a6/0x360 [ 1127.360303][T25225] ? show_regs_print_info+0x20/0x20 [ 1127.365549][T25225] ? load_image+0x420/0x420 [ 1127.370105][T25225] should_fail_ex+0x394/0x4c0 [ 1127.374830][T25225] should_failslab+0x9/0x20 [ 1127.379379][T25225] slab_pre_alloc_hook+0x59/0x300 [ 1127.384471][T25225] ? sctp_add_bind_addr+0x8c/0x360 [ 1127.389644][T25225] __kmem_cache_alloc_node+0x53/0x250 [ 1127.395082][T25225] ? sctp_add_bind_addr+0x8c/0x360 [ 1127.400233][T25225] kmalloc_trace+0x2a/0xe0 [ 1127.404694][T25225] sctp_add_bind_addr+0x8c/0x360 [ 1127.409666][T25225] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1127.415338][T25225] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1127.421125][T25225] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1127.427269][T25225] ? sctp_v4_is_any+0x35/0x60 [ 1127.431989][T25225] ? sctp_copy_one_addr+0x8c/0x350 [ 1127.437131][T25225] sctp_bind_addr_copy+0xb3/0x3c0 [ 1127.442181][T25225] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1127.448575][T25225] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1127.453926][T25225] ? __sctp_connect+0xd80/0xd80 [ 1127.458815][T25225] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1127.464252][T25225] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1127.469842][T25225] ? security_sctp_bind_connect+0x89/0xb0 [ 1127.475620][T25225] sctp_sendmsg+0x1519/0x27b0 [ 1127.480397][T25225] ? sctp_getsockopt+0xb60/0xb60 [ 1127.485383][T25225] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1127.491253][T25225] ? aa_af_perm+0x330/0x330 [ 1127.495819][T25225] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1127.502301][T25225] ? sock_rps_record_flow+0x19/0x3f0 [ 1127.507656][T25225] ? inet_sendmsg+0xce/0x2a0 [ 1127.512297][T25225] ? inet_send_prepare+0x250/0x250 [ 1127.517465][T25225] ____sys_sendmsg+0x61b/0x980 [ 1127.522298][T25225] ? __asan_memset+0x22/0x40 [ 1127.526935][T25225] ? __sys_sendmsg_sock+0x30/0x30 [ 1127.531976][T25225] ? __import_iovec+0x5f2/0x850 [ 1127.536910][T25225] ? import_iovec+0x73/0xa0 [ 1127.541479][T25225] ___sys_sendmsg+0x2a6/0x360 [ 1127.546226][T25225] ? __sys_sendmsg+0x2b0/0x2b0 [ 1127.551108][T25225] ? __lock_acquire+0x7d80/0x7d80 [ 1127.556267][T25225] __se_sys_sendmsg+0x1d0/0x2c0 [ 1127.561183][T25225] ? __x64_sys_sendmsg+0x80/0x80 [ 1127.566228][T25225] ? lockdep_hardirqs_on+0x98/0x150 [ 1127.571488][T25225] do_syscall_64+0x55/0xb0 [ 1127.575944][T25225] ? clear_bhb_loop+0x40/0x90 [ 1127.580663][T25225] ? clear_bhb_loop+0x40/0x90 [ 1127.585391][T25225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1127.591323][T25225] RIP: 0033:0x7f5359b9e0d9 [ 1127.595781][T25225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.615434][T25225] RSP: 002b:00007f535aafc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1127.623896][T25225] RAX: ffffffffffffffda RBX: 00007f5359e25fa0 RCX: 00007f5359b9e0d9 [ 1127.631907][T25225] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000007 [ 1127.639917][T25225] RBP: 00007f535aafc090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.647926][T25225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1127.655944][T25225] R13: 00007f5359e26038 R14: 00007f5359e25fa0 R15: 00007ffcb5574068 [ 1127.664011][T25225] [ 1127.956257][T25242] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6336'. [ 1128.019253][T25246] FAULT_INJECTION: forcing a failure. [ 1128.019253][T25246] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.032271][T25246] CPU: 1 PID: 25246 Comm: syz.2.6337 Not tainted syzkaller #0 [ 1128.039749][T25246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1128.049803][T25246] Call Trace: [ 1128.053090][T25246] [ 1128.056028][T25246] dump_stack_lvl+0x18c/0x250 [ 1128.060701][T25246] ? show_regs_print_info+0x20/0x20 [ 1128.065904][T25246] ? load_image+0x420/0x420 [ 1128.070432][T25246] should_fail_ex+0x394/0x4c0 [ 1128.075126][T25246] should_failslab+0x9/0x20 [ 1128.079663][T25246] slab_pre_alloc_hook+0x59/0x300 [ 1128.084728][T25246] kmem_cache_alloc+0x5a/0x2c0 [ 1128.089523][T25246] ? batadv_tt_local_add+0x35a/0x1ad0 [ 1128.095045][T25246] batadv_tt_local_add+0x35a/0x1ad0 [ 1128.100282][T25246] ? batadv_claim_put+0x1c0/0x1c0 [ 1128.105400][T25246] ? skb_network_protocol+0x533/0x790 [ 1128.110805][T25246] ? batadv_tt_global_entry_put+0x140/0x140 [ 1128.116731][T25246] ? batadv_get_vid+0x163/0x280 [ 1128.121613][T25246] batadv_interface_tx+0x819/0x1510 [ 1128.126852][T25246] ? batadv_softif_is_valid+0x70/0x70 [ 1128.132266][T25246] dev_hard_start_xmit+0x269/0x790 [ 1128.137419][T25246] ? __dev_queue_xmit+0x275/0x3630 [ 1128.142553][T25246] __dev_queue_xmit+0x198c/0x3630 [ 1128.147625][T25246] ? __dev_queue_xmit+0x275/0x3630 [ 1128.152784][T25246] ? netdev_core_pick_tx+0x370/0x370 [ 1128.158097][T25246] ? pskb_expand_head+0x17a/0x1150 [ 1128.163233][T25246] ? pskb_expand_head+0x17a/0x1150 [ 1128.168374][T25246] ? skb_release_data+0x1de/0x7f0 [ 1128.173436][T25246] ? __bpf_redirect+0x8c2/0xdf0 [ 1128.178306][T25246] __bpf_tx_skb+0x181/0x260 [ 1128.182830][T25246] bpf_clone_redirect+0x315/0x4a0 [ 1128.184872][T25251] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6334'. [ 1128.187872][T25246] bpf_prog_e97454e6a39c6b06+0x61/0x66 [ 1128.187914][T25246] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1128.208491][T25246] ? __lock_acquire+0x7d80/0x7d80 [ 1128.213538][T25246] ? lock_chain_count+0x20/0x20 [ 1128.217625][T25251] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6334'. [ 1128.218397][T25246] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 1128.233762][T25246] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 1128.239074][T25246] ? ktime_get+0x7f/0x280 [ 1128.243441][T25246] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1128.244878][T25240] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6334'. [ 1128.249691][T25246] ? ktime_get_real_ts64+0x440/0x440 [ 1128.249717][T25246] ? __x64_sys_bpf+0x7c/0x90 [ 1128.249741][T25246] ? __local_bh_disable_ip+0x108/0x1a0 [ 1128.249761][T25246] ? __cant_sleep+0x220/0x220 [ 1128.249785][T25246] ? read_tsc+0x9/0x20 [ 1128.249805][T25246] ? ktime_get+0x24b/0x280 [ 1128.249829][T25246] ? bpf_test_run+0x174/0x870 [ 1128.249855][T25246] bpf_test_run+0x2df/0x870 [ 1128.249897][T25246] ? bpf_test_run+0x174/0x870 [ 1128.249923][T25246] ? dst_hold+0x70/0x70 [ 1128.249948][T25246] ? eth_get_headlen+0x210/0x210 [ 1128.266450][T25247] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6334'. [ 1128.268911][T25246] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 1128.324857][T25246] ? cpu_online+0x60/0x60 [ 1128.329206][T25246] bpf_prog_test_run+0x31f/0x390 [ 1128.334159][T25246] __sys_bpf+0x49d/0x890 [ 1128.338436][T25246] ? bpf_link_show_fdinfo+0x390/0x390 [ 1128.343860][T25246] ? lock_chain_count+0x20/0x20 [ 1128.348750][T25246] __x64_sys_bpf+0x7c/0x90 [ 1128.353207][T25246] do_syscall_64+0x55/0xb0 [ 1128.357648][T25246] ? clear_bhb_loop+0x40/0x90 [ 1128.362350][T25246] ? clear_bhb_loop+0x40/0x90 [ 1128.367063][T25246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1128.372983][T25246] RIP: 0033:0x7f5edc79e0d9 [ 1128.377421][T25246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.397053][T25246] RSP: 002b:00007f5edd61a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1128.405499][T25246] RAX: ffffffffffffffda RBX: 00007f5edca25fa0 RCX: 00007f5edc79e0d9 [ 1128.413501][T25246] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1128.421500][T25246] RBP: 00007f5edd61a090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.429500][T25246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.437490][T25246] R13: 00007f5edca26038 R14: 00007f5edca25fa0 R15: 00007ffc86e74aa8 [ 1128.445492][T25246] [ 1128.496937][T25253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6340'. [ 1128.511870][T25253] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6340'. [ 1128.653333][T25259] netlink: 'syz.0.6343': attribute type 21 has an invalid length. [ 1128.672435][T25259] netlink: 'syz.0.6343': attribute type 12 has an invalid length. [ 1128.702286][T25259] netlink: 'syz.0.6343': attribute type 13 has an invalid length. [ 1128.710154][T25259] netlink: 'syz.0.6343': attribute type 14 has an invalid length. [ 1128.719218][T25259] netlink: 'syz.0.6343': attribute type 15 has an invalid length. [ 1128.728322][T25259] netlink: 'syz.0.6343': attribute type 16 has an invalid length. [ 1128.739031][T25259] netlink: 12926 bytes leftover after parsing attributes in process `syz.0.6343'. [ 1129.186581][T25266] netlink: 'syz.2.6342': attribute type 10 has an invalid length. [ 1130.530575][T25311] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6360'. [ 1130.562136][T25311] tc_dump_action: action bad kind [ 1130.724216][T25316] netlink: 'syz.3.6362': attribute type 23 has an invalid length. [ 1130.738235][T25316] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.6362'. [ 1131.109867][T25336] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6368'. [ 1131.606203][T25359] FAULT_INJECTION: forcing a failure. [ 1131.606203][T25359] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.625177][T25359] CPU: 1 PID: 25359 Comm: syz.3.6377 Not tainted syzkaller #0 [ 1131.632699][T25359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1131.642782][T25359] Call Trace: [ 1131.646083][T25359] [ 1131.649033][T25359] dump_stack_lvl+0x18c/0x250 [ 1131.653750][T25359] ? show_regs_print_info+0x20/0x20 [ 1131.658979][T25359] ? load_image+0x420/0x420 [ 1131.663514][T25359] ? __lock_acquire+0x7d80/0x7d80 [ 1131.668570][T25359] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1131.674747][T25359] ? __lock_acquire+0x1262/0x7d80 [ 1131.679795][T25359] should_fail_ex+0x394/0x4c0 [ 1131.684494][T25359] should_failslab+0x9/0x20 [ 1131.689011][T25359] slab_pre_alloc_hook+0x59/0x300 [ 1131.694049][T25359] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1131.699582][T25359] __kmem_cache_alloc_node+0x53/0x250 [ 1131.704960][T25359] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1131.710421][T25359] kmalloc_trace+0x2a/0xe0 [ 1131.714843][T25359] __inet_diag_dump_start+0x8b/0x9f0 [ 1131.720125][T25359] ? netlink_lookup+0x30/0x200 [ 1131.724882][T25359] ? netlink_lookup+0x30/0x200 [ 1131.729647][T25359] __netlink_dump_start+0x43c/0x7a0 [ 1131.734842][T25359] inet_diag_rcv_msg_compat+0x215/0x440 [ 1131.740382][T25359] ? __inet_diag_dump+0x380/0x380 [ 1131.745405][T25359] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 1131.750428][T25359] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 1131.756137][T25359] ? inet_diag_dump_start_compat+0x20/0x20 [ 1131.761935][T25359] ? inet_diag_dump+0x50/0x50 [ 1131.766614][T25359] ? __inet_diag_dump+0x380/0x380 [ 1131.771635][T25359] sock_diag_rcv_msg+0x3d3/0x5f0 [ 1131.776573][T25359] netlink_rcv_skb+0x235/0x4c0 [ 1131.781334][T25359] ? sock_diag_bind+0xb0/0xb0 [ 1131.786010][T25359] ? netlink_ack+0x1160/0x1160 [ 1131.790775][T25359] ? __lock_acquire+0x7d80/0x7d80 [ 1131.795799][T25359] ? netlink_deliver_tap+0x2e/0x1b0 [ 1131.800989][T25359] sock_diag_rcv+0x2a/0x40 [ 1131.805400][T25359] netlink_unicast+0x7b1/0x930 [ 1131.810169][T25359] netlink_sendmsg+0x8d0/0xbf0 [ 1131.814939][T25359] ? netlink_getsockopt+0x590/0x590 [ 1131.820130][T25359] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1131.825670][T25359] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1131.830947][T25359] ? security_socket_sendmsg+0x80/0xa0 [ 1131.836395][T25359] ? netlink_getsockopt+0x590/0x590 [ 1131.841592][T25359] ____sys_sendmsg+0x61b/0x980 [ 1131.846359][T25359] ? __asan_memset+0x22/0x40 [ 1131.850943][T25359] ? __sys_sendmsg_sock+0x30/0x30 [ 1131.855959][T25359] ? __import_iovec+0x5f2/0x850 [ 1131.860836][T25359] ? import_iovec+0x73/0xa0 [ 1131.865363][T25359] ___sys_sendmsg+0x2a6/0x360 [ 1131.870129][T25359] ? get_pid_task+0x20/0x1e0 [ 1131.875372][T25359] ? __sys_sendmsg+0x2b0/0x2b0 [ 1131.880178][T25359] ? __lock_acquire+0x7d80/0x7d80 [ 1131.885255][T25359] __se_sys_sendmsg+0x1d0/0x2c0 [ 1131.890105][T25359] ? __x64_sys_sendmsg+0x80/0x80 [ 1131.895055][T25359] ? lockdep_hardirqs_on+0x98/0x150 [ 1131.900255][T25359] do_syscall_64+0x55/0xb0 [ 1131.904665][T25359] ? clear_bhb_loop+0x40/0x90 [ 1131.909347][T25359] ? clear_bhb_loop+0x40/0x90 [ 1131.914030][T25359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1131.919917][T25359] RIP: 0033:0x7f59ac79e0d9 [ 1131.924333][T25359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.943941][T25359] RSP: 002b:00007f59ad5b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.952375][T25359] RAX: ffffffffffffffda RBX: 00007f59aca25fa0 RCX: 00007f59ac79e0d9 [ 1131.960377][T25359] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1131.968372][T25359] RBP: 00007f59ad5b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.976374][T25359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.984377][T25359] R13: 00007f59aca26038 R14: 00007f59aca25fa0 R15: 00007ffe12df0818 [ 1131.992371][T25359] [ 1133.222287][T25401] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6392'. [ 1134.440043][T25419] ------------[ cut here ]------------ [ 1134.445615][T25419] WARNING: CPU: 1 PID: 25419 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 1134.455490][T25419] Modules linked in: [ 1134.459453][T25419] CPU: 1 PID: 25419 Comm: syz.2.6401 Not tainted syzkaller #0 [ 1134.467447][T25419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1134.478042][T25419] RIP: 0010:perf_pending_task+0x357/0x480 [ 1134.484051][T25419] Code: e8 ae c8 d5 ff 84 db 75 10 e8 15 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 c6 d5 ff e8 10 f1 4e ff eb e9 e8 f9 c5 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1134.503746][T25419] RSP: 0018:ffffc9000c8479c8 EFLAGS: 00010293 [ 1134.509853][T25419] RAX: ffffffff81b1ac27 RBX: ffff88805e09cd88 RCX: ffff88806646bc00 [ 1134.517915][T25419] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1134.525954][T25419] RBP: ffff88805e09cb48 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 1134.534779][T25419] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff88806646bc00 [ 1134.543007][T25419] R13: ffff88801b346930 R14: 0000000000000000 R15: 1ffff1100bc13969 [ 1134.551011][T25419] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1134.560022][T25419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1134.566665][T25419] CR2: 00007ffcb5572c80 CR3: 0000000030b4c000 CR4: 00000000003506e0 [ 1134.574727][T25419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 1134.582773][T25419] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1134.590781][T25419] Call Trace: [ 1134.594178][T25419] [ 1134.597142][T25419] task_work_run+0x1d4/0x260 [ 1134.601815][T25419] ? task_work_cancel+0x220/0x220 [ 1134.606890][T25419] do_exit+0x986/0x2530 [ 1134.611093][T25419] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1134.617174][T25419] ? put_task_struct+0xc0/0xc0 [ 1134.622048][T25419] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1134.628243][T25419] ? lockdep_hardirqs_on+0x98/0x150 [ 1134.634224][T25419] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1134.640431][T25419] do_group_exit+0x22d/0x2f0 [ 1134.645232][T25419] ? _raw_spin_unlock_irq+0x29/0x50 [ 1134.650479][T25419] get_signal+0x12a6/0x1390 [ 1134.655069][T25419] arch_do_signal_or_restart+0xc2/0x7b0 [ 1134.660657][T25419] ? get_sigframe_size+0x20/0x20 [ 1134.665683][T25419] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1134.671912][T25419] ? exit_to_user_mode_loop+0x3b/0x110 [ 1134.677409][T25419] exit_to_user_mode_loop+0x70/0x110 [ 1134.682789][T25419] exit_to_user_mode_prepare+0xee/0x180 [ 1134.688373][T25419] syscall_exit_to_user_mode+0x1a/0x50 [ 1134.694195][T25419] do_syscall_64+0x61/0xb0 [ 1134.698640][T25419] ? clear_bhb_loop+0x40/0x90 [ 1134.703376][T25419] ? clear_bhb_loop+0x40/0x90 [ 1134.708091][T25419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.714084][T25419] RIP: 0033:0x7f5edc79e0d9 [ 1134.718523][T25419] Code: Unable to access opcode bytes at 0x7f5edc79e0af. [ 1134.725608][T25419] RSP: 002b:00007f5edd61a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1134.734666][T25419] RAX: fffffffffffffe00 RBX: 00007f5edca25fa8 RCX: 00007f5edc79e0d9 [ 1134.742859][T25419] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5edca25fa8 [ 1134.750862][T25419] RBP: 00007f5edca25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.758898][T25419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.766932][T25419] R13: 00007f5edca26038 R14: 00007ffc86e749c0 R15: 00007ffc86e74aa8 [ 1134.775063][T25419] [ 1134.778106][T25419] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1134.785396][T25419] CPU: 1 PID: 25419 Comm: syz.2.6401 Not tainted syzkaller #0 [ 1134.792872][T25419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1134.802946][T25419] Call Trace: [ 1134.806243][T25419] [ 1134.809194][T25419] dump_stack_lvl+0x18c/0x250 [ 1134.813910][T25419] ? show_regs_print_info+0x20/0x20 [ 1134.819115][T25419] ? load_image+0x420/0x420 [ 1134.823633][T25419] panic+0x2ca/0x720 [ 1134.827531][T25419] ? bpf_jit_dump+0xd0/0xd0 [ 1134.832048][T25419] __warn+0x2e0/0x470 [ 1134.836027][T25419] ? perf_pending_task+0x357/0x480 [ 1134.841145][T25419] ? perf_pending_task+0x357/0x480 [ 1134.846260][T25419] report_bug+0x2be/0x4f0 [ 1134.850613][T25419] ? perf_pending_task+0x357/0x480 [ 1134.855726][T25419] ? perf_pending_task+0x357/0x480 [ 1134.860836][T25419] ? perf_pending_task+0x359/0x480 [ 1134.865945][T25419] handle_bug+0xcf/0x120 [ 1134.870184][T25419] exc_invalid_op+0x1a/0x50 [ 1134.874682][T25419] asm_exc_invalid_op+0x1a/0x20 [ 1134.879536][T25419] RIP: 0010:perf_pending_task+0x357/0x480 [ 1134.885254][T25419] Code: e8 ae c8 d5 ff 84 db 75 10 e8 15 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 c6 d5 ff e8 10 f1 4e ff eb e9 e8 f9 c5 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1134.904852][T25419] RSP: 0018:ffffc9000c8479c8 EFLAGS: 00010293 [ 1134.910910][T25419] RAX: ffffffff81b1ac27 RBX: ffff88805e09cd88 RCX: ffff88806646bc00 [ 1134.918871][T25419] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1134.926831][T25419] RBP: ffff88805e09cb48 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 1134.934794][T25419] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff88806646bc00 [ 1134.942765][T25419] R13: ffff88801b346930 R14: 0000000000000000 R15: 1ffff1100bc13969 [ 1134.950740][T25419] ? perf_pending_task+0x357/0x480 [ 1134.955857][T25419] ? perf_pending_task+0x357/0x480 [ 1134.960967][T25419] task_work_run+0x1d4/0x260 [ 1134.965580][T25419] ? task_work_cancel+0x220/0x220 [ 1134.970608][T25419] do_exit+0x986/0x2530 [ 1134.974761][T25419] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1134.980741][T25419] ? put_task_struct+0xc0/0xc0 [ 1134.985504][T25419] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1134.991652][T25419] ? lockdep_hardirqs_on+0x98/0x150 [ 1134.996848][T25419] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1135.002998][T25419] do_group_exit+0x22d/0x2f0 [ 1135.007587][T25419] ? _raw_spin_unlock_irq+0x29/0x50 [ 1135.012784][T25419] get_signal+0x12a6/0x1390 [ 1135.017295][T25419] arch_do_signal_or_restart+0xc2/0x7b0 [ 1135.022870][T25419] ? get_sigframe_size+0x20/0x20 [ 1135.027814][T25419] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1135.033964][T25419] ? exit_to_user_mode_loop+0x3b/0x110 [ 1135.039419][T25419] exit_to_user_mode_loop+0x70/0x110 [ 1135.044742][T25419] exit_to_user_mode_prepare+0xee/0x180 [ 1135.050288][T25419] syscall_exit_to_user_mode+0x1a/0x50 [ 1135.055744][T25419] do_syscall_64+0x61/0xb0 [ 1135.060158][T25419] ? clear_bhb_loop+0x40/0x90 [ 1135.064824][T25419] ? clear_bhb_loop+0x40/0x90 [ 1135.069490][T25419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1135.075391][T25419] RIP: 0033:0x7f5edc79e0d9 [ 1135.079815][T25419] Code: Unable to access opcode bytes at 0x7f5edc79e0af. [ 1135.086826][T25419] RSP: 002b:00007f5edd61a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1135.095235][T25419] RAX: fffffffffffffe00 RBX: 00007f5edca25fa8 RCX: 00007f5edc79e0d9 [ 1135.103227][T25419] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5edca25fa8 [ 1135.111218][T25419] RBP: 00007f5edca25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1135.119200][T25419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1135.127173][T25419] R13: 00007f5edca26038 R14: 00007ffc86e749c0 R15: 00007ffc86e74aa8 [ 1135.135153][T25419] [ 1135.138402][T25419] Kernel Offset: disabled [ 1135.142718][T25419] Rebooting in 86400 seconds..