last executing test programs: 11.500521864s ago: executing program 0 (id=2401): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x253bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff7fff}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000010c0)=ANY=[@ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x13a21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x2, 0x1}, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 10.509631593s ago: executing program 0 (id=2405): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 4) 10.038498572s ago: executing program 0 (id=2415): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) 9.709644818s ago: executing program 0 (id=2409): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f04305", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)="bbcd7f5529d4794a1c8e9aa338ea95cce274c8776670e2d313300f3ee89e324583d76748c798c227f8a0bde8b847bf5061dce31df505ee38006912659c679c818845f7974932a126af9fa2363a9589d3d532", 0x52}, {&(0x7f0000000100)="632e8963bf297ad8e768f3775f53e5bd161e9a75651f5fb412e4cf4cbefe6f83176d5660fd6e42425cc338289c2d0f02be2c6c85de9775a9d838a456645df932721e4203a5bb53", 0x47}, {&(0x7f0000000180)="05e2551a6e773fda5fefca72fa185be302d647b7fac13016fd", 0x19}, {&(0x7f00000001c0)="c258bd9c569f9bba24fa296d846be4b99eda2b743af4cee9f78a90d346fdd673ffb670a8175ff23767fdb5ab1401646e35c8e30c6222ef1973b45631fa21cfb9ae664f7ec3cb3ce8b2eb3c0cd58319003095df0198a9679a8df1c9d15ddc904974e3ed66ef2237e149efebade52085629d6693b40d66816d5bf6f2c4024d78592257f7a5ec2dd0baaa7da7a2e7252bd1", 0x90}], 0x4}, 0x4800) 6.101681419s ago: executing program 0 (id=2410): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(r2) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1}, 0x4) 5.847870559s ago: executing program 0 (id=2413): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0300000005000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r3, &(0x7f00000005c0)="ec823e0a8d39259577278f2c962e5414832b86efd9d412a44304137891bb2c6e24526c25d6050ba24200b0d4901984bd7567d7850c84a99c76234b3bfe264912d857", &(0x7f00000007c0)=""/114, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.59983783s ago: executing program 2 (id=2419): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190007000000ff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x19, &(0x7f0000000200)=r4, 0x21) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r2, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000001880)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000018c0), &(0x7f0000001900), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000001940)}}, 0x10) sendmsg$inet(r3, &(0x7f0000001b80)={&(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010102, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x10}}], 0x80}, 0xc608e97a041a551d) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x800, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0xb, &(0x7f0000000340)=""/11, 0x40f00, 0x8, '\x00', r5, @fallback=0x36, r6, 0x8, &(0x7f00000003c0)={0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xc, 0x4, 0xfffffe01}, 0x10, 0xffffffffffffffff, r0, 0x4, &(0x7f0000000500)=[0x1, r1, r7, r1, r1, r1, r1], &(0x7f0000000540)=[{0x2, 0x4, 0x6, 0xa}, {0x2, 0x5, 0x8, 0x3}, {0x3, 0x2, 0x0, 0xa}, {0x1, 0x4, 0x1}], 0x10, 0x5}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x80) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 3.164695435s ago: executing program 3 (id=2420): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2101, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b02d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[@ANYBLOB="2d728365fa20a7c41aa7e05a4fe52ee8d00b5dc09cc9b5cfe5df78984df65665c1c8bb0a20a6c91b6d8205092c03a32bfab7b7b21d69533267ab712c19805dd09264d716062ac8c06ae9233f89655642c6bbd6cf106b48e5e7053a203e16a6fa9714d1b07c1a0847831d414f9a88942b001c45da2f992aedc8"], 0xf) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100"], 0x48) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) write$cgroup_pressure(r8, &(0x7f00000000c0)={'some', 0x20, 0x3, 0x20, 0x29f}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r8, 0x20, &(0x7f0000000540)={&(0x7f00000006c0)=""/140, 0x8c, 0x0, &(0x7f0000000480)}}, 0x10) 2.934386844s ago: executing program 2 (id=2421): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0300000005000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r3, &(0x7f00000005c0)="ec823e0a8d39259577278f2c962e5414832b86efd9d412a44304137891bb2c6e24526c25d6050ba24200b0d4901984bd7567d7850c84a99c76234b3bfe264912d857", &(0x7f00000007c0)=""/114, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.698296912s ago: executing program 3 (id=2425): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000026c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000002680)='%pB \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002780)={r0, 0x58, &(0x7f0000002700)}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000300fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) recvmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000000040)=@isdn, 0x80, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f0000000140)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/131, 0x83}, {&(0x7f0000001280)=""/110, 0x6e}, {&(0x7f0000001300)=""/164, 0xa4}, {&(0x7f00000013c0)=""/33, 0x21}], 0x8, &(0x7f0000001480)=""/1, 0x1}, 0x2) 2.629449088s ago: executing program 1 (id=2426): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a8001600", 0x34}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.255663028s ago: executing program 1 (id=2427): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) 2.168821885s ago: executing program 3 (id=2428): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000)=r3, 0x8) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000006c0)={r4}) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x35, &(0x7f0000000000)='/proc/sys/net/ipv4nc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.168010895s ago: executing program 1 (id=2429): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001c40)) (fail_nth: 6) 1.593737441s ago: executing program 1 (id=2430): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0300000005000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b08eb9f815268658ad538a19c898b0279035f7a1d01e13986d1ac4b568fdd08a98e15bd3923356d21db09d69c403e691f49e4060ba832b8f41326442cd29d8ee3ead79fb445d213f1b524684ad192e550645cd3fefd92d20223b255d2fc78ea971dc96fd436c5426440c8774b36986707decb9460a2b766f9d68ad080000000000000025612a8d0e7d77df282db85dfe1fef2af90ba5bca11d06c8ab9f148c9bf74b48938c5677a42035677aebf57604f544e324b26bad2a1b738d9b77759bed0f2c82cc405169c45ed8072cede2f42f54346e32f39c90226dfbf48c32e7ad0907"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r3, &(0x7f00000005c0)="ec823e0a8d39259577278f2c962e5414832b86efd9d412a44304137891bb2c6e24526c25d6050ba24200b0d4901984bd7567d7850c84a99c76234b3bfe264912d857", &(0x7f00000007c0)=""/114, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.513434398s ago: executing program 3 (id=2431): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190007000000ff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x19, &(0x7f0000000200)=r4, 0x21) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r2, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000001880)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000018c0), &(0x7f0000001900), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000001940)}}, 0x10) sendmsg$inet(r3, &(0x7f0000001b80)={&(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010102, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x10}}], 0x80}, 0xc608e97a041a551d) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x800, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0xb, &(0x7f0000000340)=""/11, 0x40f00, 0x8, '\x00', r5, @fallback=0x36, r6, 0x8, &(0x7f00000003c0)={0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xc, 0x4, 0xfffffe01}, 0x10, 0xffffffffffffffff, r0, 0x4, &(0x7f0000000500)=[0x1, r1, r7, r1, r1, r1, r1], &(0x7f0000000540)=[{0x2, 0x4, 0x6, 0xa}, {0x2, 0x5, 0x8, 0x3}, {0x3, 0x2, 0x0, 0xa}, {0x1, 0x4, 0x1}], 0x10, 0x5}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x80) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 1.512321688s ago: executing program 2 (id=2438): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000)=r3, 0x8) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000006c0)={r4}) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x35, &(0x7f0000000000)='/proc/sys/net/ipv4nc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.24063078s ago: executing program 2 (id=2432): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2101, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b02d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[@ANYBLOB="2d728365fa20a7c41aa7e05a4fe52ee8d00b5dc09cc9b5cfe5df78984df65665c1c8bb0a20a6c91b6d8205092c03a32bfab7b7b21d69533267ab712c19805dd09264d716062ac8c06ae9233f89655642c6bbd6cf106b48e5e7053a203e16a6fa9714d1b07c1a0847831d414f9a88942b001c45da2f992aedc8"], 0xf) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100"], 0x48) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) write$cgroup_pressure(r7, &(0x7f00000000c0)={'some', 0x20, 0x3, 0x20, 0x29f}, 0x2f) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r7, 0x20, &(0x7f0000000540)={&(0x7f00000006c0)=""/140, 0x8c, 0x0, &(0x7f0000000480)}}, 0x10) 831.697923ms ago: executing program 3 (id=2433): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x253bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff7fff}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000010c0)=ANY=[@ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x13a21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x2, 0x1}, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 724.407061ms ago: executing program 2 (id=2434): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000840)=@l2={0x1f, 0x1}, 0x80, 0x0}, 0x440d0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x16, 0x5, &(0x7f0000000700)=ANY=[@ANYRESOCT], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe84, 0x0, 0x0, 0x10, 0x3f35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0400000000d85ff9782762f88ca", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={r0, r3}) close(r6) setsockopt$sock_attach_bpf(r5, 0x6, 0x5, &(0x7f0000000040), 0x4) 709.988043ms ago: executing program 1 (id=2435): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x4, @perf_bp={0x0, 0x1}, 0x104082, 0xa1b7, 0xffffffff, 0x0, 0x1ff, 0xffffffff, 0x0, 0x0, 0xffffb7fe, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000040)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="711091000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000700000000000000793b8b3b6e180000b400000095"], &(0x7f0000001080)='GPL\x00', 0x6, 0x23, &(0x7f00000000c0)=""/35, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 385.346099ms ago: executing program 2 (id=2436): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x2e, 0x0, 0x1, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000000000000800000004c17d2304000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) (fail_nth: 4) 68.389374ms ago: executing program 1 (id=2437): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x253bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff7fff}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000010c0)=ANY=[@ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x13a21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x2, 0x1}, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) close(r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 0s ago: executing program 3 (id=2439): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0300000005000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b08eb9f815268658ad538a19c898b0279035f7a1d01e13986d1ac4b568fdd08a98e15bd3923356d21db09d69c403e691f49e4060ba832b8f41326442cd29d8ee3ead79fb445d213f1b524684ad192e550645cd3fefd92d20223b255d2fc78ea971dc96fd436c5426440c8774b36986707decb9460a2b766f9d68ad080000000000000025612a8d0e7d77df282db85dfe1fef2af90ba5bca11d06c8ab9f148c9bf74b48938c5677a42035677aebf57604f544e324b26bad2a1b738d9b77759bed0f2c82cc405169c45ed8072cede2f42f54346e32f39c90226dfbf48c32e7ad0907"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r3, &(0x7f00000005c0)="ec823e0a8d39259577278f2c962e5414832b86efd9d412a44304137891bb2c6e24526c25d6050ba24200b0d4901984bd7567d7850c84a99c76234b3bfe264912d857", &(0x7f00000007c0)=""/114, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.628618][T10326] RIP: 0033:0x7ff65b98ebe9 [ 327.633071][T10326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.652733][T10326] RSP: 002b:00007ff65c7da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.661196][T10326] RAX: ffffffffffffffda RBX: 00007ff65bbc5fa0 RCX: 00007ff65b98ebe9 [ 327.669292][T10326] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 327.677302][T10326] RBP: 00007ff65c7da090 R08: 0000000000000000 R09: 0000000000000000 [ 327.685411][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.693443][T10326] R13: 00007ff65bbc6038 R14: 00007ff65bbc5fa0 R15: 00007ffe6b3f2f38 [ 327.701567][T10326] [ 328.412007][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 328.432211][T10337] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1564'. [ 330.424409][T10369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1575'. [ 330.468169][T10369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1575'. [ 330.521008][T10370] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1575'. [ 330.567813][T10369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1575'. [ 330.781158][T10372] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1576'. [ 332.346681][T10380] IPv6: Can't replace route, no match found [ 332.855037][T10402] IPv6: Can't replace route, no match found [ 333.562459][T10410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1586'. [ 333.582578][T10410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1586'. [ 333.605497][T10410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1586'. [ 333.631575][T10410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1586'. [ 333.808290][T10416] sit0: entered allmulticast mode [ 333.881761][T10416] sit0: entered promiscuous mode [ 334.345245][T10425] IPv6: Can't replace route, no match found [ 335.111342][T10422] IPv6: Can't replace route, no match found [ 335.131879][T10432] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1595'. [ 335.709851][T10437] IPv6: Can't replace route, no match found [ 335.820900][T10447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1598'. [ 335.858653][T10447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1598'. [ 335.898098][T10448] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1598'. [ 335.940148][T10447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1598'. [ 336.319363][T10458] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1602'. [ 337.302370][T10469] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1606'. [ 337.549273][T10472] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1608'. [ 337.614332][T10470] sit0: entered promiscuous mode [ 337.623980][T10472] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 337.809004][T10479] FAULT_INJECTION: forcing a failure. [ 337.809004][T10479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.822495][T10479] CPU: 1 PID: 10479 Comm: syz.2.1609 Not tainted syzkaller #0 [ 337.830009][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 337.840114][T10479] Call Trace: [ 337.843435][T10479] [ 337.846494][T10479] dump_stack_lvl+0x16c/0x230 [ 337.851226][T10479] ? show_regs_print_info+0x20/0x20 [ 337.856476][T10479] ? load_image+0x3b0/0x3b0 [ 337.861110][T10479] ? __might_fault+0xaa/0x120 [ 337.865851][T10479] ? __lock_acquire+0x7c80/0x7c80 [ 337.870939][T10479] should_fail_ex+0x39d/0x4d0 [ 337.875658][T10479] _copy_from_user+0x2f/0xe0 [ 337.880270][T10479] ___sys_sendmsg+0x159/0x290 [ 337.884980][T10479] ? __sys_sendmsg+0x270/0x270 [ 337.889783][T10479] ? __lock_acquire+0x7c80/0x7c80 [ 337.894879][T10479] __se_sys_sendmsg+0x1a5/0x270 [ 337.899746][T10479] ? __x64_sys_sendmsg+0x80/0x80 [ 337.904724][T10479] ? lockdep_hardirqs_on+0x98/0x150 [ 337.910029][T10479] do_syscall_64+0x55/0xb0 [ 337.914540][T10479] ? clear_bhb_loop+0x40/0x90 [ 337.919227][T10479] ? clear_bhb_loop+0x40/0x90 [ 337.924026][T10479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.930022][T10479] RIP: 0033:0x7f742518ebe9 [ 337.934467][T10479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.954110][T10479] RSP: 002b:00007f7425fd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.962658][T10479] RAX: ffffffffffffffda RBX: 00007f74253c5fa0 RCX: 00007f742518ebe9 [ 337.970897][T10479] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 337.978877][T10479] RBP: 00007f7425fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 337.986859][T10479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.994867][T10479] R13: 00007f74253c6038 R14: 00007f74253c5fa0 R15: 00007ffe7844dcf8 [ 338.002871][T10479] [ 338.068679][T10481] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1610'. [ 338.090741][T10481] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1610'. [ 338.110227][T10481] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1610'. [ 338.645564][T10497] netlink: 'syz.0.1614': attribute type 10 has an invalid length. [ 338.688491][T10497] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 338.968714][T10504] FAULT_INJECTION: forcing a failure. [ 338.968714][T10504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.005322][T10504] CPU: 0 PID: 10504 Comm: syz.3.1618 Not tainted syzkaller #0 [ 339.012961][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 339.023131][T10504] Call Trace: [ 339.026442][T10504] [ 339.029397][T10504] dump_stack_lvl+0x16c/0x230 [ 339.034471][T10504] ? show_regs_print_info+0x20/0x20 [ 339.039699][T10504] ? load_image+0x3b0/0x3b0 [ 339.044229][T10504] ? __might_fault+0xaa/0x120 [ 339.048922][T10504] ? __lock_acquire+0x7c80/0x7c80 [ 339.053975][T10504] should_fail_ex+0x39d/0x4d0 [ 339.058681][T10504] _copy_from_user+0x2f/0xe0 [ 339.063286][T10504] __sys_bpf+0x1e9/0x800 [ 339.067628][T10504] ? bpf_link_show_fdinfo+0x350/0x350 [ 339.073040][T10504] ? lock_chain_count+0x20/0x20 [ 339.077998][T10504] __x64_sys_bpf+0x7c/0x90 [ 339.082427][T10504] do_syscall_64+0x55/0xb0 [ 339.087133][T10504] ? clear_bhb_loop+0x40/0x90 [ 339.091826][T10504] ? clear_bhb_loop+0x40/0x90 [ 339.096526][T10504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.102438][T10504] RIP: 0033:0x7f327498ebe9 [ 339.106869][T10504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.126489][T10504] RSP: 002b:00007f32758b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.134947][T10504] RAX: ffffffffffffffda RBX: 00007f3274bc5fa0 RCX: 00007f327498ebe9 [ 339.142948][T10504] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 339.151024][T10504] RBP: 00007f32758b6090 R08: 0000000000000000 R09: 0000000000000000 [ 339.159006][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.166987][T10504] R13: 00007f3274bc6038 R14: 00007f3274bc5fa0 R15: 00007ffeecda98a8 [ 339.175163][T10504] [ 339.428248][T10507] netlink: 'syz.0.1619': attribute type 10 has an invalid length. [ 340.531693][T10507] team0: Port device geneve1 added [ 340.539622][T10509] IPv6: Can't replace route, no match found [ 340.978531][T10523] __nla_validate_parse: 8 callbacks suppressed [ 340.978553][T10523] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1625'. [ 341.159969][T10525] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1626'. [ 341.199760][T10527] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1627'. [ 341.295994][T10532] netlink: 'syz.0.1629': attribute type 10 has an invalid length. [ 341.372532][T10532] veth0_vlan: entered allmulticast mode [ 341.602831][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1630'. [ 341.967861][T10532] veth0_vlan: left promiscuous mode [ 343.020884][T10532] veth0_vlan: entered promiscuous mode [ 345.043409][T10532] team0: Device veth0_vlan failed to register rx_handler [ 346.420932][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1630'. [ 346.601054][T10532] syz.0.1629 (10532) used greatest stack depth: 18472 bytes left [ 351.792142][T10562] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1639'. [ 352.291630][T10575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1644'. [ 352.352883][T10565] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1641'. [ 352.364085][T10573] netlink: 'syz.0.1642': attribute type 12 has an invalid length. [ 352.372618][T10573] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1642'. [ 352.382987][T10575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1644'. [ 352.393565][T10576] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1644'. [ 352.407384][T10575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1644'. [ 352.800116][T10592] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1650'. [ 352.837624][T10592] : entered promiscuous mode [ 352.842575][T10592] bond_slave_1: entered promiscuous mode [ 352.894278][T10599] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1651'. [ 352.900802][T10598] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1653'. [ 353.725038][T10625] netlink: 'syz.2.1662': attribute type 12 has an invalid length. [ 353.889261][T10627] FAULT_INJECTION: forcing a failure. [ 353.889261][T10627] name failslab, interval 1, probability 0, space 0, times 0 [ 353.903197][T10627] CPU: 1 PID: 10627 Comm: syz.0.1664 Not tainted syzkaller #0 [ 353.910725][T10627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 353.921399][T10627] Call Trace: [ 353.924722][T10627] [ 353.927690][T10627] dump_stack_lvl+0x16c/0x230 [ 353.932514][T10627] ? show_regs_print_info+0x20/0x20 [ 353.937757][T10627] ? load_image+0x3b0/0x3b0 [ 353.942325][T10627] ? __might_sleep+0xe0/0xe0 [ 353.947046][T10627] ? __lock_acquire+0x7c80/0x7c80 [ 353.952226][T10627] should_fail_ex+0x39d/0x4d0 [ 353.957050][T10627] should_failslab+0x9/0x20 [ 353.961609][T10627] slab_pre_alloc_hook+0x59/0x310 [ 353.966684][T10627] ? apparmor_sk_alloc_security+0x77/0x100 [ 353.972521][T10627] __kmem_cache_alloc_node+0x53/0x260 [ 353.978015][T10627] ? apparmor_sk_alloc_security+0x77/0x100 [ 353.983853][T10627] kmalloc_trace+0x2a/0xe0 [ 353.988305][T10627] apparmor_sk_alloc_security+0x77/0x100 [ 353.994051][T10627] security_sk_alloc+0x6e/0xa0 [ 353.998928][T10627] sk_prot_alloc+0x101/0x210 [ 354.003659][T10627] ? sk_alloc+0x24/0x360 [ 354.008029][T10627] sk_alloc+0x3a/0x360 [ 354.012116][T10627] ? bpf_ctx_init+0x163/0x1a0 [ 354.016866][T10627] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 354.022518][T10627] bpf_prog_test_run_skb+0x39a/0x11c0 [ 354.027915][T10627] ? __fget_files+0x28/0x4d0 [ 354.032530][T10627] ? cpu_online+0x60/0x60 [ 354.036873][T10627] bpf_prog_test_run+0x321/0x390 [ 354.041928][T10627] __sys_bpf+0x440/0x800 [ 354.046200][T10627] ? bpf_link_show_fdinfo+0x350/0x350 [ 354.051596][T10627] ? lock_chain_count+0x20/0x20 [ 354.056747][T10627] __x64_sys_bpf+0x7c/0x90 [ 354.061190][T10627] do_syscall_64+0x55/0xb0 [ 354.065619][T10627] ? clear_bhb_loop+0x40/0x90 [ 354.070391][T10627] ? clear_bhb_loop+0x40/0x90 [ 354.075078][T10627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.080985][T10627] RIP: 0033:0x7f825078ebe9 [ 354.085406][T10627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.105024][T10627] RSP: 002b:00007f8251675038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.113453][T10627] RAX: ffffffffffffffda RBX: 00007f82509c5fa0 RCX: 00007f825078ebe9 [ 354.121520][T10627] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 354.129545][T10627] RBP: 00007f8251675090 R08: 0000000000000000 R09: 0000000000000000 [ 354.137523][T10627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.145606][T10627] R13: 00007f82509c6038 R14: 00007f82509c5fa0 R15: 00007fff87b04c88 [ 354.153801][T10627] [ 354.305213][T10634] netlink: 'syz.1.1667': attribute type 10 has an invalid length. [ 354.350946][T10634] veth0_vlan: entered allmulticast mode [ 354.739941][T10634] veth0_vlan: left promiscuous mode [ 354.790126][T10634] veth0_vlan: entered promiscuous mode [ 354.944286][T10634] team0: Device veth0_vlan failed to register rx_handler [ 355.250316][T10634] syz.1.1667 (10634) used greatest stack depth: 17192 bytes left [ 355.637308][T10661] netlink: 'syz.1.1677': attribute type 12 has an invalid length. [ 355.712766][T10664] netlink: 'syz.3.1678': attribute type 4 has an invalid length. [ 356.610341][T10696] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 356.820271][T10698] netlink: 'syz.0.1691': attribute type 10 has an invalid length. [ 356.884221][T10698] batman_adv: batadv0: Removing interface: netdevsim0 [ 356.897541][T10698] team0: Port device netdevsim0 added [ 356.940708][T10693] netlink: 'syz.0.1691': attribute type 10 has an invalid length. [ 357.089332][T10710] __nla_validate_parse: 19 callbacks suppressed [ 357.089350][T10710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1697'. [ 357.342331][T10693] team0: Port device netdevsim0 removed [ 357.383231][T10693] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 357.391931][T10693] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 357.425098][T10707] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 357.448189][T10710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1697'. [ 357.494519][T10711] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1697'. [ 357.506691][T10712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1697'. [ 357.635139][ T5795] Bluetooth: hci3: ISO packet for unknown connection handle 15 [ 357.679480][T10722] FAULT_INJECTION: forcing a failure. [ 357.679480][T10722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.698448][T10722] CPU: 0 PID: 10722 Comm: syz.1.1701 Not tainted syzkaller #0 [ 357.706114][T10722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 357.717378][T10722] Call Trace: [ 357.721320][T10722] [ 357.724281][T10722] dump_stack_lvl+0x16c/0x230 [ 357.729163][T10722] ? show_regs_print_info+0x20/0x20 [ 357.734366][T10722] ? load_image+0x3b0/0x3b0 [ 357.738867][T10722] ? __might_fault+0xaa/0x120 [ 357.743545][T10722] ? __lock_acquire+0x7c80/0x7c80 [ 357.748579][T10722] should_fail_ex+0x39d/0x4d0 [ 357.753371][T10722] _copy_to_user+0x2f/0xa0 [ 357.757878][T10722] bpf_verifier_vlog+0x2fa/0x870 [ 357.762824][T10722] btf_verifier_log+0x10b/0x180 [ 357.767687][T10722] ? btf_parse_graph_root+0xa90/0xa90 [ 357.773112][T10722] ? __btf_verifier_log+0xd5/0x120 [ 357.778233][T10722] ? btf_check_sec_info+0x330/0x330 [ 357.783974][T10722] btf_func_proto_log+0x6dc/0x840 [ 357.789011][T10722] __btf_verifier_log_type+0x3f0/0x620 [ 357.794494][T10722] ? btf_int_show+0x2890/0x2890 [ 357.799407][T10722] btf_func_proto_check_meta+0xed/0x150 [ 357.805064][T10722] btf_check_all_metas+0x355/0xa50 [ 357.810199][T10722] ? sort+0xa3/0xf0 [ 357.814042][T10722] ? sort_r+0x17f0/0x17f0 [ 357.818484][T10722] btf_parse_type_sec+0xf9/0x1930 [ 357.823547][T10722] ? btf_check_sec_info+0x27e/0x330 [ 357.828780][T10722] ? btf_parse_hdr+0x1da/0x6d0 [ 357.833554][T10722] ? btf_verifier_log+0x180/0x180 [ 357.838603][T10722] ? btf_parse_str_sec+0x20d/0x2a0 [ 357.843748][T10722] btf_new_fd+0x41c/0x980 [ 357.848116][T10722] ? bpf_btf_show_fdinfo+0x80/0x80 [ 357.853344][T10722] ? capable+0x88/0xe0 [ 357.857422][T10722] __sys_bpf+0x60e/0x800 [ 357.861708][T10722] ? bpf_link_show_fdinfo+0x350/0x350 [ 357.867284][T10722] ? lock_chain_count+0x20/0x20 [ 357.872144][T10722] __x64_sys_bpf+0x7c/0x90 [ 357.876594][T10722] do_syscall_64+0x55/0xb0 [ 357.881014][T10722] ? clear_bhb_loop+0x40/0x90 [ 357.885731][T10722] ? clear_bhb_loop+0x40/0x90 [ 357.890413][T10722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.896316][T10722] RIP: 0033:0x7ff65b98ebe9 [ 357.900839][T10722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.920471][T10722] RSP: 002b:00007ff65c7da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.928984][T10722] RAX: ffffffffffffffda RBX: 00007ff65bbc5fa0 RCX: 00007ff65b98ebe9 [ 357.936956][T10722] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 357.945051][T10722] RBP: 00007ff65c7da090 R08: 0000000000000000 R09: 0000000000000000 [ 357.953029][T10722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.961137][T10722] R13: 00007ff65bbc6038 R14: 00007ff65bbc5fa0 R15: 00007ffe6b3f2f38 [ 357.969227][T10722] [ 358.214757][T10731] bridge0: port 3(team0) entered disabled state [ 358.221601][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.229064][T10731] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.667983][T10744] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1709'. [ 358.686696][T10744] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1709'. [ 358.703365][T10744] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1709'. [ 358.732512][T10744] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1709'. [ 358.936056][T10758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1716'. [ 359.630443][T10779] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1724'. [ 359.736392][T10781] syz.1.1726[10781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.736660][T10781] syz.1.1726[10781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.753592][T10781] netlink: 'syz.1.1726': attribute type 3 has an invalid length. [ 360.296638][T10800] netlink: 'syz.2.1728': attribute type 10 has an invalid length. [ 360.358382][T10800] team0: Port device netdevsim0 added [ 360.376864][T10791] netlink: 'syz.2.1728': attribute type 10 has an invalid length. [ 360.918712][T10791] team0: Port device netdevsim0 removed [ 360.927939][T10791] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 360.936275][T10791] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 361.325033][T10828] FAULT_INJECTION: forcing a failure. [ 361.325033][T10828] name failslab, interval 1, probability 0, space 0, times 0 [ 361.338562][T10828] CPU: 1 PID: 10828 Comm: syz.2.1739 Not tainted syzkaller #0 [ 361.346175][T10828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 361.356243][T10828] Call Trace: [ 361.359535][T10828] [ 361.362493][T10828] dump_stack_lvl+0x16c/0x230 [ 361.367275][T10828] ? show_regs_print_info+0x20/0x20 [ 361.372485][T10828] ? load_image+0x3b0/0x3b0 [ 361.376999][T10828] ? __might_sleep+0xe0/0xe0 [ 361.381733][T10828] ? __lock_acquire+0x7c80/0x7c80 [ 361.386780][T10828] should_fail_ex+0x39d/0x4d0 [ 361.391572][T10828] should_failslab+0x9/0x20 [ 361.396090][T10828] slab_pre_alloc_hook+0x59/0x310 [ 361.401135][T10828] kmem_cache_alloc_lru+0x4d/0x2e0 [ 361.406256][T10828] ? __d_alloc+0x31/0x730 [ 361.410616][T10828] __d_alloc+0x31/0x730 [ 361.414790][T10828] ? __lock_acquire+0x7c80/0x7c80 [ 361.419997][T10828] ? do_raw_spin_lock+0x121/0x2c0 [ 361.425050][T10828] d_alloc_pseudo+0x1d/0x70 [ 361.429568][T10828] alloc_file_pseudo+0xcc/0x200 [ 361.434451][T10828] ? alloc_empty_backing_file+0xe0/0xe0 [ 361.440016][T10828] ? alloc_fd+0x58f/0x630 [ 361.444370][T10828] anon_inode_getfd+0xca/0x1c0 [ 361.449149][T10828] btf_new_fd+0x7ea/0x980 [ 361.453709][T10828] ? bpf_btf_show_fdinfo+0x80/0x80 [ 361.458849][T10828] ? capable+0x88/0xe0 [ 361.463021][T10828] __sys_bpf+0x60e/0x800 [ 361.467316][T10828] ? bpf_link_show_fdinfo+0x350/0x350 [ 361.472747][T10828] ? lock_chain_count+0x20/0x20 [ 361.477630][T10828] __x64_sys_bpf+0x7c/0x90 [ 361.482323][T10828] do_syscall_64+0x55/0xb0 [ 361.486751][T10828] ? clear_bhb_loop+0x40/0x90 [ 361.491440][T10828] ? clear_bhb_loop+0x40/0x90 [ 361.496129][T10828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.502060][T10828] RIP: 0033:0x7f742518ebe9 [ 361.506486][T10828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.526123][T10828] RSP: 002b:00007f7425fd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.534563][T10828] RAX: ffffffffffffffda RBX: 00007f74253c5fa0 RCX: 00007f742518ebe9 [ 361.542568][T10828] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 361.550546][T10828] RBP: 00007f7425fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 361.558524][T10828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.566502][T10828] R13: 00007f74253c6038 R14: 00007f74253c5fa0 R15: 00007ffe7844dcf8 [ 361.574494][T10828] [ 362.286675][T10851] netlink: 'syz.1.1745': attribute type 10 has an invalid length. [ 362.353314][T10851] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 362.360993][T10851] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 362.369416][T10851] team0: Port device netdevsim0 added [ 362.404688][T10844] netlink: 'syz.1.1745': attribute type 10 has an invalid length. [ 362.519213][T10844] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 362.547836][T10844] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 363.102680][T10844] team0: Port device netdevsim0 removed [ 363.114064][T10844] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 363.122659][T10844] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 363.226104][T10868] __nla_validate_parse: 10 callbacks suppressed [ 363.226124][T10868] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1753'. [ 364.091640][T10884] sock: sock_timestamping_bind_phc: sock not bind to device [ 364.208441][T10890] FAULT_INJECTION: forcing a failure. [ 364.208441][T10890] name failslab, interval 1, probability 0, space 0, times 0 [ 364.226532][T10890] CPU: 1 PID: 10890 Comm: syz.1.1761 Not tainted syzkaller #0 [ 364.234151][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 364.244338][T10890] Call Trace: [ 364.247653][T10890] [ 364.250789][T10890] dump_stack_lvl+0x16c/0x230 [ 364.255513][T10890] ? show_regs_print_info+0x20/0x20 [ 364.260788][T10890] ? load_image+0x3b0/0x3b0 [ 364.265361][T10890] ? __might_sleep+0xe0/0xe0 [ 364.270072][T10890] ? __lock_acquire+0x7c80/0x7c80 [ 364.275223][T10890] should_fail_ex+0x39d/0x4d0 [ 364.279936][T10890] should_failslab+0x9/0x20 [ 364.284463][T10890] slab_pre_alloc_hook+0x59/0x310 [ 364.289663][T10890] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 364.295472][T10890] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 364.301215][T10890] __kmem_cache_alloc_node+0x53/0x260 [ 364.306682][T10890] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 364.312416][T10890] __kmalloc+0xa4/0x240 [ 364.316590][T10890] tomoyo_realpath_from_path+0xe3/0x5d0 [ 364.322251][T10890] tomoyo_path_number_perm+0x1ea/0x590 [ 364.327743][T10890] ? tomoyo_path_number_perm+0x1ba/0x590 [ 364.333392][T10890] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 364.338867][T10890] ? ksys_write+0x1c1/0x250 [ 364.343425][T10890] ? __fget_files+0x28/0x4d0 [ 364.348057][T10890] security_file_ioctl+0x70/0xa0 [ 364.353031][T10890] __se_sys_ioctl+0x48/0x170 [ 364.357638][T10890] do_syscall_64+0x55/0xb0 [ 364.362066][T10890] ? clear_bhb_loop+0x40/0x90 [ 364.366795][T10890] ? clear_bhb_loop+0x40/0x90 [ 364.371570][T10890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.377476][T10890] RIP: 0033:0x7ff65b98ebe9 [ 364.381906][T10890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.401613][T10890] RSP: 002b:00007ff65c7da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.410217][T10890] RAX: ffffffffffffffda RBX: 00007ff65bbc5fa0 RCX: 00007ff65b98ebe9 [ 364.418199][T10890] RDX: 00f0ff1f00000000 RSI: 000000004004743b RDI: 0000000000000003 [ 364.426189][T10890] RBP: 00007ff65c7da090 R08: 0000000000000000 R09: 0000000000000000 [ 364.434185][T10890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.442185][T10890] R13: 00007ff65bbc6038 R14: 00007ff65bbc5fa0 R15: 00007ffe6b3f2f38 [ 364.450288][T10890] [ 364.457267][T10890] ERROR: Out of memory at tomoyo_realpath_from_path. [ 364.870341][T10907] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1767'. [ 366.267611][T10924] IPv6: Can't replace route, no match found [ 366.557830][T10927] netlink: 'syz.3.1774': attribute type 10 has an invalid length. [ 366.587026][T10927] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1774'. [ 366.615071][T10920] delete_channel: no stack [ 366.730557][T10933] FAULT_INJECTION: forcing a failure. [ 366.730557][T10933] name failslab, interval 1, probability 0, space 0, times 0 [ 366.754032][T10933] CPU: 0 PID: 10933 Comm: syz.1.1775 Not tainted syzkaller #0 [ 366.761569][T10933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 366.771744][T10933] Call Trace: [ 366.775099][T10933] [ 366.778133][T10933] dump_stack_lvl+0x16c/0x230 [ 366.782833][T10933] ? __sctp_connect+0x5a2/0xd20 [ 366.787800][T10933] ? sctp_setsockopt+0x6d8/0x11e0 [ 366.792840][T10933] ? show_regs_print_info+0x20/0x20 [ 366.798146][T10933] ? load_image+0x3b0/0x3b0 [ 366.803366][T10933] should_fail_ex+0x39d/0x4d0 [ 366.808074][T10933] should_failslab+0x9/0x20 [ 366.812596][T10933] slab_pre_alloc_hook+0x59/0x310 [ 366.817641][T10933] ? sctp_add_bind_addr+0x8c/0x360 [ 366.822772][T10933] __kmem_cache_alloc_node+0x53/0x260 [ 366.828167][T10933] ? sctp_add_bind_addr+0x8c/0x360 [ 366.833379][T10933] kmalloc_trace+0x2a/0xe0 [ 366.837812][T10933] sctp_add_bind_addr+0x8c/0x360 [ 366.842963][T10933] sctp_copy_local_addr_list+0x30c/0x4e0 [ 366.848746][T10933] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 366.854603][T10933] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 366.860704][T10933] ? sctp_v4_is_any+0x35/0x60 [ 366.865627][T10933] ? sctp_copy_one_addr+0x8c/0x350 [ 366.870998][T10933] sctp_bind_addr_copy+0x189/0x3c0 [ 366.876154][T10933] sctp_connect_new_asoc+0x2da/0x690 [ 366.881545][T10933] ? __sctp_connect+0xd20/0xd20 [ 366.886420][T10933] ? mark_lock+0x94/0x320 [ 366.890805][T10933] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 366.896832][T10933] __sctp_connect+0x5a2/0xd20 [ 366.901706][T10933] ? sctp_send_asconf+0x170/0x170 [ 366.907007][T10933] ? __local_bh_enable_ip+0x12e/0x1c0 [ 366.912479][T10933] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 366.918216][T10933] ? security_sctp_bind_connect+0x89/0xb0 [ 366.924051][T10933] sctp_setsockopt_connectx+0x104/0x1a0 [ 366.929615][T10933] sctp_setsockopt+0x6d8/0x11e0 [ 366.934480][T10933] ? sock_common_recvmsg+0x1b0/0x1b0 [ 366.939866][T10933] do_sock_setsockopt+0x175/0x1a0 [ 366.944900][T10933] ? __fdget+0x180/0x210 [ 366.949193][T10933] __x64_sys_setsockopt+0x184/0x200 [ 366.954495][T10933] do_syscall_64+0x55/0xb0 [ 366.958925][T10933] ? clear_bhb_loop+0x40/0x90 [ 366.963607][T10933] ? clear_bhb_loop+0x40/0x90 [ 366.968387][T10933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.974386][T10933] RIP: 0033:0x7ff65b98ebe9 [ 366.978868][T10933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.998745][T10933] RSP: 002b:00007ff65c7da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 367.007175][T10933] RAX: ffffffffffffffda RBX: 00007ff65bbc5fa0 RCX: 00007ff65b98ebe9 [ 367.015157][T10933] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 367.023136][T10933] RBP: 00007ff65c7da090 R08: 000000000000002c R09: 0000000000000000 [ 367.031287][T10933] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.039266][T10933] R13: 00007ff65bbc6038 R14: 00007ff65bbc5fa0 R15: 00007ffe6b3f2f38 [ 367.047262][T10933] [ 367.872184][T10956] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1782'. [ 367.885457][T10951] IPv6: Can't replace route, no match found [ 367.902809][T10956] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1782'. [ 367.912892][T10953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1782'. [ 367.938363][T10957] netlink: 'syz.1.1784': attribute type 39 has an invalid length. [ 367.954984][T10957] veth0_macvtap: left promiscuous mode [ 368.079126][T10953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1782'. [ 368.102991][T10959] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1784'. [ 368.252061][T10965] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1786'. [ 371.257096][T11007] netlink: 'syz.3.1798': attribute type 3 has an invalid length. [ 371.328862][T11007] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1798'. [ 371.653149][T11015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1801'. [ 371.751259][T11015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1801'. [ 373.183688][T11048] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.191257][T11048] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.290543][T11048] bridge0: entered allmulticast mode [ 373.664067][T11048] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 373.769155][T11048] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 373.811151][T11048] bridge0: port 3(netdevsim0) entered disabled state [ 373.839498][T11048] bridge_slave_1: left allmulticast mode [ 373.853688][T11048] bridge_slave_1: left promiscuous mode [ 373.864554][T11048] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.882801][T11048] bridge_slave_0: left allmulticast mode [ 373.896724][T11048] bridge_slave_0: left promiscuous mode [ 373.915053][T11048] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.429721][T11071] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1819'. [ 374.807054][T11068] IPv6: Can't replace route, no match found [ 375.563538][T11093] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1826'. [ 375.577888][T11095] netlink: 'syz.2.1826': attribute type 13 has an invalid length. [ 375.586789][T11095] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1826'. [ 375.613179][T11095] erspan0: refused to change device tx_queue_len [ 375.630424][T11095] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 375.866190][T11101] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1829'. [ 376.055778][T11106] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1828'. [ 376.127927][T11106] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1828'. [ 376.137877][T11098] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1828'. [ 376.149021][T11097] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1828'. [ 376.568420][T11109] IPv6: Can't replace route, no match found [ 376.877436][T11131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1838'. [ 376.890435][T11131] netlink: 'syz.1.1838': attribute type 13 has an invalid length. [ 376.900756][T11131] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1838'. [ 376.918647][T11131] erspan0: refused to change device tx_queue_len [ 376.927413][T11131] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 377.918795][T11147] IPv6: Can't replace route, no match found [ 378.464028][T11170] IPv6: Can't replace route, no match found [ 378.953946][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.960509][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.239778][T11176] netlink: 'syz.3.1854': attribute type 10 has an invalid length. [ 379.315493][T11176] team0: Device ipvlan1 failed to register rx_handler [ 379.539953][T11188] __nla_validate_parse: 1 callbacks suppressed [ 379.539970][T11188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1856'. [ 379.568962][T11188] netlink: 'syz.0.1856': attribute type 13 has an invalid length. [ 379.577655][T11188] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1856'. [ 379.610588][T11188] erspan0: refused to change device tx_queue_len [ 379.635101][T11188] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 380.026647][T11194] IPv6: Can't replace route, no match found [ 380.895073][T11214] FAULT_INJECTION: forcing a failure. [ 380.895073][T11214] name failslab, interval 1, probability 0, space 0, times 0 [ 380.908337][T11214] CPU: 1 PID: 11214 Comm: syz.3.1865 Not tainted syzkaller #0 [ 380.916908][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 380.927022][T11214] Call Trace: [ 380.930347][T11214] [ 380.933302][T11214] dump_stack_lvl+0x16c/0x230 [ 380.938036][T11214] ? show_regs_print_info+0x20/0x20 [ 380.943709][T11214] ? load_image+0x3b0/0x3b0 [ 380.948344][T11214] ? verify_lock_unused+0x140/0x140 [ 380.953660][T11214] ? perf_trace_lock+0x2ed/0x380 [ 380.959070][T11214] should_fail_ex+0x39d/0x4d0 [ 380.963781][T11214] should_failslab+0x9/0x20 [ 380.968391][T11214] slab_pre_alloc_hook+0x59/0x310 [ 380.973461][T11214] kmem_cache_alloc+0x5a/0x2e0 [ 380.978243][T11214] ? skb_clone+0x1eb/0x370 [ 380.982694][T11214] skb_clone+0x1eb/0x370 [ 380.986963][T11214] __netlink_deliver_tap+0x41c/0x830 [ 380.992386][T11214] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.998060][T11214] netlink_deliver_tap+0x19c/0x1b0 [ 381.003251][T11214] netlink_unicast+0x72c/0x8d0 [ 381.008072][T11214] netlink_sendmsg+0x8c1/0xbe0 [ 381.012965][T11214] ? netlink_getsockopt+0x580/0x580 [ 381.018193][T11214] ? aa_sock_msg_perm+0x94/0x150 [ 381.023173][T11214] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 381.028566][T11214] ? security_socket_sendmsg+0x80/0xa0 [ 381.034049][T11214] ? netlink_getsockopt+0x580/0x580 [ 381.039272][T11214] ____sys_sendmsg+0x5bf/0x950 [ 381.044073][T11214] ? __asan_memset+0x22/0x40 [ 381.048688][T11214] ? __sys_sendmsg_sock+0x30/0x30 [ 381.053833][T11214] ? __import_iovec+0x5f2/0x860 [ 381.058731][T11214] ? import_iovec+0x73/0xa0 [ 381.063270][T11214] ___sys_sendmsg+0x220/0x290 [ 381.067980][T11214] ? __sys_sendmsg+0x270/0x270 [ 381.072826][T11214] ? __lock_acquire+0x7c80/0x7c80 [ 381.077934][T11214] __se_sys_sendmsg+0x1a5/0x270 [ 381.082817][T11214] ? __x64_sys_sendmsg+0x80/0x80 [ 381.088243][T11214] ? lockdep_hardirqs_on+0x98/0x150 [ 381.093757][T11214] do_syscall_64+0x55/0xb0 [ 381.098194][T11214] ? clear_bhb_loop+0x40/0x90 [ 381.102888][T11214] ? clear_bhb_loop+0x40/0x90 [ 381.107584][T11214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.113592][T11214] RIP: 0033:0x7f327498ebe9 [ 381.118371][T11214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.138085][T11214] RSP: 002b:00007f32758b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.146704][T11214] RAX: ffffffffffffffda RBX: 00007f3274bc5fa0 RCX: 00007f327498ebe9 [ 381.154877][T11214] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 381.162967][T11214] RBP: 00007f32758b6090 R08: 0000000000000000 R09: 0000000000000000 [ 381.170965][T11214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.178954][T11214] R13: 00007f3274bc6038 R14: 00007f3274bc5fa0 R15: 00007ffeecda98a8 [ 381.186979][T11214] [ 381.192366][T11214] netlink: zone id is out of range [ 381.197543][T11214] netlink: set zone limit has 8 unknown bytes [ 381.480141][T11221] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1867'. [ 381.692868][T11223] netlink: zone id is out of range [ 381.712065][T11223] netlink: set zone limit has 8 unknown bytes [ 382.241773][T11230] IPv6: Can't replace route, no match found [ 382.580745][T11241] IPv6: Can't replace route, no match found [ 384.321748][T11266] IPv6: Can't replace route, no match found [ 384.679924][T11279] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1887'. [ 385.608741][T11297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.616126][T11297] IPv6: NLM_F_CREATE should be set when creating new route [ 385.908586][T11303] netlink: 'syz.2.1896': attribute type 1 has an invalid length. [ 385.918628][T11303] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1896'. [ 386.399077][T11323] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1903'. [ 386.831497][T11331] IPv6: Can't replace route, no match found [ 387.235567][T11333] IPv6: Can't replace route, no match found [ 387.383739][T11341] netlink: 'syz.2.1907': attribute type 8 has an invalid length. [ 387.391917][T11341] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1907'. [ 387.681705][T11349] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1911'. [ 387.706770][T11348] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1911'. [ 387.749977][T11351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.757485][T11351] IPv6: NLM_F_CREATE should be set when creating new route [ 387.765004][T11351] IPv6: NLM_F_CREATE should be set when creating new route [ 387.772385][T11351] IPv6: NLM_F_CREATE should be set when creating new route [ 387.896362][T11353] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1913'. [ 388.770071][T11365] IPv6: Can't replace route, no match found [ 389.282468][T11378] FAULT_INJECTION: forcing a failure. [ 389.282468][T11378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.317781][T11377] netlink: 'syz.3.1923': attribute type 12 has an invalid length. [ 389.326283][T11378] CPU: 1 PID: 11378 Comm: syz.0.1922 Not tainted syzkaller #0 [ 389.333814][T11378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 389.344031][T11378] Call Trace: [ 389.347379][T11378] [ 389.350755][T11378] dump_stack_lvl+0x16c/0x230 [ 389.355520][T11378] ? show_regs_print_info+0x20/0x20 [ 389.361315][T11378] ? load_image+0x3b0/0x3b0 [ 389.366072][T11378] ? __might_fault+0xaa/0x120 [ 389.370813][T11378] ? __lock_acquire+0x7c80/0x7c80 [ 389.375904][T11378] ? __local_bh_enable_ip+0x12e/0x1c0 [ 389.381381][T11378] ? _local_bh_enable+0xa0/0xa0 [ 389.386311][T11378] should_fail_ex+0x39d/0x4d0 [ 389.391094][T11378] copy_fpstate_to_sigframe+0x97b/0xbe0 [ 389.396736][T11378] ? copy_fpstate_to_sigframe+0x17b/0xbe0 [ 389.402547][T11378] ? fpregs_set+0x330/0x330 [ 389.407124][T11378] ? get_signal+0xa4b/0x1400 [ 389.411896][T11378] ? fpu__alloc_mathframe+0xa7/0x130 [ 389.417291][T11378] get_sigframe+0x5ce/0x7c0 [ 389.421932][T11378] ? load_gs_index+0x190/0x190 [ 389.426849][T11378] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 389.433377][T11378] ? get_signal+0x11f5/0x1400 [ 389.438165][T11378] x64_setup_rt_frame+0x158/0xcd0 [ 389.443300][T11378] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.448569][T11378] ? lockdep_hardirqs_on+0x98/0x150 [ 389.454013][T11378] ? _raw_spin_unlock_irq+0x2e/0x50 [ 389.459463][T11378] ? get_signal+0x11a0/0x1400 [ 389.464337][T11378] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 389.470077][T11378] arch_do_signal_or_restart+0x3e5/0x780 [ 389.475900][T11378] ? get_sigframe_size+0x20/0x20 [ 389.480909][T11378] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 389.487006][T11378] ? exit_to_user_mode_loop+0x3b/0x110 [ 389.492566][T11378] exit_to_user_mode_loop+0x70/0x110 [ 389.495718][T11375] netlink: 'syz.1.1921': attribute type 3 has an invalid length. [ 389.497909][T11378] exit_to_user_mode_prepare+0xb1/0x140 [ 389.497997][T11378] irqentry_exit_to_user_mode+0x9/0x40 [ 389.498031][T11378] exc_general_protection+0x170/0x200 [ 389.498107][T11378] ? do_syscall_64+0x61/0xb0 [ 389.527209][T11378] asm_exc_general_protection+0x26/0x30 [ 389.532833][T11378] RIP: 0033:0x7f8250767739 [ 389.537333][T11378] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 389.554131][T11375] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1921'. [ 389.557060][T11378] RSP: 002b:00007f82516747c8 EFLAGS: 00010283 [ 389.557095][T11378] RAX: 0000000000000999 RBX: 00007f8251674d30 RCX: 00007f8250988120 [ 389.557116][T11378] RDX: 9999999999999999 RSI: 00007f8250811b31 RDI: 9999999999999999 [ 389.557136][T11378] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 389.557161][T11378] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 389.557179][T11378] R13: 00007f8251674eb0 R14: 9999999999999999 R15: 0000000000000000 [ 389.557259][T11378] [ 389.617621][T11377] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1923'. [ 391.018665][T11387] IPv6: Can't replace route, no match found [ 394.197665][T11402] IPv6: Can't replace route, no match found [ 394.460466][T11416] netlink: 'syz.0.1933': attribute type 3 has an invalid length. [ 394.515054][T11416] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1933'. [ 394.650870][T11416] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 394.697845][T11416] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1933'. [ 394.793169][T11416] team0: Port device C removed [ 394.798624][T11416] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 395.177800][T11427] FAULT_INJECTION: forcing a failure. [ 395.177800][T11427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.205085][T11427] CPU: 0 PID: 11427 Comm: syz.3.1936 Not tainted syzkaller #0 [ 395.212628][T11427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 395.222758][T11427] Call Trace: [ 395.226070][T11427] [ 395.229034][T11427] dump_stack_lvl+0x16c/0x230 [ 395.233764][T11427] ? show_regs_print_info+0x20/0x20 [ 395.239091][T11427] ? load_image+0x3b0/0x3b0 [ 395.243661][T11427] ? __lock_acquire+0x7c80/0x7c80 [ 395.248824][T11427] should_fail_ex+0x39d/0x4d0 [ 395.253542][T11427] _copy_from_user+0x2f/0xe0 [ 395.258254][T11427] __copy_msghdr+0x3bb/0x580 [ 395.262883][T11427] ___sys_sendmsg+0x1a6/0x290 [ 395.267594][T11427] ? __sys_sendmsg+0x270/0x270 [ 395.272501][T11427] ? __lock_acquire+0x7c80/0x7c80 [ 395.277673][T11427] __se_sys_sendmsg+0x1a5/0x270 [ 395.282652][T11427] ? __x64_sys_sendmsg+0x80/0x80 [ 395.287752][T11427] ? lockdep_hardirqs_on+0x98/0x150 [ 395.292998][T11427] do_syscall_64+0x55/0xb0 [ 395.297533][T11427] ? clear_bhb_loop+0x40/0x90 [ 395.302259][T11427] ? clear_bhb_loop+0x40/0x90 [ 395.307048][T11427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.312980][T11427] RIP: 0033:0x7f327498ebe9 [ 395.317424][T11427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.337257][T11427] RSP: 002b:00007f32758b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.345747][T11427] RAX: ffffffffffffffda RBX: 00007f3274bc5fa0 RCX: 00007f327498ebe9 [ 395.353769][T11427] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000008 [ 395.361783][T11427] RBP: 00007f32758b6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.369790][T11427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.377789][T11427] R13: 00007f3274bc6038 R14: 00007f3274bc5fa0 R15: 00007ffeecda98a8 [ 395.385810][T11427] [ 396.024998][T11450] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1945'. [ 396.290957][T11454] IPv6: Can't replace route, no match found [ 396.572489][T11459] IPv6: Can't replace route, no match found [ 396.733672][T11463] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1949'. [ 397.266042][T11485] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 397.391075][T11488] syz.2.1959[11488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.391435][T11488] syz.2.1959[11488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.128747][T11517] FAULT_INJECTION: forcing a failure. [ 398.128747][T11517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.156948][T11517] CPU: 0 PID: 11517 Comm: syz.3.1970 Not tainted syzkaller #0 [ 398.164557][T11517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 398.174650][T11517] Call Trace: [ 398.177958][T11517] [ 398.180913][T11517] dump_stack_lvl+0x16c/0x230 [ 398.185638][T11517] ? show_regs_print_info+0x20/0x20 [ 398.190979][T11517] ? load_image+0x3b0/0x3b0 [ 398.195742][T11517] ? __might_fault+0xaa/0x120 [ 398.200477][T11517] ? __lock_acquire+0x7c80/0x7c80 [ 398.205812][T11517] should_fail_ex+0x39d/0x4d0 [ 398.210886][T11517] _copy_from_user+0x2f/0xe0 [ 398.215516][T11517] ___sys_sendmsg+0x159/0x290 [ 398.220228][T11517] ? __sys_sendmsg+0x270/0x270 [ 398.225049][T11517] ? __lock_acquire+0x7c80/0x7c80 [ 398.230134][T11517] __se_sys_sendmsg+0x1a5/0x270 [ 398.235198][T11517] ? __x64_sys_sendmsg+0x80/0x80 [ 398.240185][T11517] ? lockdep_hardirqs_on+0x98/0x150 [ 398.245430][T11517] do_syscall_64+0x55/0xb0 [ 398.249877][T11517] ? clear_bhb_loop+0x40/0x90 [ 398.254603][T11517] ? clear_bhb_loop+0x40/0x90 [ 398.259306][T11517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.265347][T11517] RIP: 0033:0x7f327498ebe9 [ 398.269807][T11517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.289448][T11517] RSP: 002b:00007f32758b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.297892][T11517] RAX: ffffffffffffffda RBX: 00007f3274bc5fa0 RCX: 00007f327498ebe9 [ 398.305929][T11517] RDX: 000000000c000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 398.313960][T11517] RBP: 00007f32758b6090 R08: 0000000000000000 R09: 0000000000000000 [ 398.321963][T11517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.329963][T11517] R13: 00007f3274bc6038 R14: 00007f3274bc5fa0 R15: 00007ffeecda98a8 [ 398.338072][T11517] [ 398.506647][T11521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1971'. [ 398.537092][T11521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1971'. [ 398.576722][T11523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1971'. [ 398.625108][T11521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1971'. [ 399.035413][T11532] netlink: 'syz.2.1974': attribute type 21 has an invalid length. [ 399.043870][T11532] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1974'. [ 399.053480][T11532] netlink: 'syz.2.1974': attribute type 4 has an invalid length. [ 399.067285][T11532] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1974'. [ 399.257124][T11529] pim6reg1: entered promiscuous mode [ 399.300734][T11529] pim6reg1: entered allmulticast mode [ 399.804002][T11550] netlink: 'syz.3.1979': attribute type 10 has an invalid length. [ 399.817772][T11550] netlink: 'syz.3.1979': attribute type 39 has an invalid length. [ 399.887952][T11555] FAULT_INJECTION: forcing a failure. [ 399.887952][T11555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.903285][T11555] CPU: 1 PID: 11555 Comm: syz.0.1981 Not tainted syzkaller #0 [ 399.910901][T11555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 399.921084][T11555] Call Trace: [ 399.924488][T11555] [ 399.927455][T11555] dump_stack_lvl+0x16c/0x230 [ 399.932201][T11555] ? show_regs_print_info+0x20/0x20 [ 399.937446][T11555] ? load_image+0x3b0/0x3b0 [ 399.942165][T11555] ? __lock_acquire+0x7c80/0x7c80 [ 399.947235][T11555] ? snprintf+0xdb/0x120 [ 399.951534][T11555] should_fail_ex+0x39d/0x4d0 [ 399.956264][T11555] _copy_to_user+0x2f/0xa0 [ 399.960725][T11555] simple_read_from_buffer+0xe7/0x150 [ 399.966148][T11555] proc_fail_nth_read+0x1e3/0x250 [ 399.971222][T11555] ? proc_fault_inject_write+0x340/0x340 [ 399.976897][T11555] ? fsnotify_perm+0x271/0x5e0 [ 399.981814][T11555] ? proc_fault_inject_write+0x340/0x340 [ 399.987574][T11555] vfs_read+0x27e/0x920 [ 399.991766][T11555] ? kernel_read+0x1e0/0x1e0 [ 399.996382][T11555] ? __fget_files+0x28/0x4d0 [ 400.000992][T11555] ? __fget_files+0x44a/0x4d0 [ 400.006147][T11555] ? __fdget_pos+0x2a3/0x330 [ 400.010876][T11555] ? ksys_read+0x75/0x250 [ 400.015266][T11555] ksys_read+0x147/0x250 [ 400.019540][T11555] ? vfs_write+0x940/0x940 [ 400.023973][T11555] ? lockdep_hardirqs_on+0x98/0x150 [ 400.029196][T11555] do_syscall_64+0x55/0xb0 [ 400.033744][T11555] ? clear_bhb_loop+0x40/0x90 [ 400.038427][T11555] ? clear_bhb_loop+0x40/0x90 [ 400.043117][T11555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.049029][T11555] RIP: 0033:0x7f825078d5fc [ 400.054410][T11555] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 400.074553][T11555] RSP: 002b:00007f8251675030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.083943][T11555] RAX: ffffffffffffffda RBX: 00007f82509c5fa0 RCX: 00007f825078d5fc [ 400.092445][T11555] RDX: 000000000000000f RSI: 00007f82516750a0 RDI: 0000000000000006 [ 400.100430][T11555] RBP: 00007f8251675090 R08: 0000000000000000 R09: 0000000000000000 [ 400.108497][T11555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.116476][T11555] R13: 00007f82509c6038 R14: 00007f82509c5fa0 R15: 00007fff87b04c88 [ 400.124618][T11555] [ 400.146174][T11558] FAULT_INJECTION: forcing a failure. [ 400.146174][T11558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.194987][T11558] CPU: 1 PID: 11558 Comm: syz.3.1982 Not tainted syzkaller #0 [ 400.202530][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 400.212746][T11558] Call Trace: [ 400.216068][T11558] [ 400.219299][T11558] dump_stack_lvl+0x16c/0x230 [ 400.224031][T11558] ? show_regs_print_info+0x20/0x20 [ 400.229375][T11558] ? load_image+0x3b0/0x3b0 [ 400.234048][T11558] ? __lock_acquire+0x7c80/0x7c80 [ 400.239208][T11558] ? snprintf+0xdb/0x120 [ 400.243794][T11558] should_fail_ex+0x39d/0x4d0 [ 400.248539][T11558] _copy_to_user+0x2f/0xa0 [ 400.253019][T11558] simple_read_from_buffer+0xe7/0x150 [ 400.258436][T11558] proc_fail_nth_read+0x1e3/0x250 [ 400.263575][T11558] ? proc_fault_inject_write+0x340/0x340 [ 400.269410][T11558] ? fsnotify_perm+0x271/0x5e0 [ 400.274364][T11558] ? proc_fault_inject_write+0x340/0x340 [ 400.280185][T11558] vfs_read+0x27e/0x920 [ 400.284362][T11558] ? kernel_read+0x1e0/0x1e0 [ 400.288980][T11558] ? __fget_files+0x28/0x4d0 [ 400.293586][T11558] ? __fget_files+0x44a/0x4d0 [ 400.298289][T11558] ? __fdget_pos+0x2a3/0x330 [ 400.303086][T11558] ? ksys_read+0x75/0x250 [ 400.307431][T11558] ksys_read+0x147/0x250 [ 400.311817][T11558] ? vfs_write+0x940/0x940 [ 400.316515][T11558] ? lockdep_hardirqs_on+0x98/0x150 [ 400.321734][T11558] do_syscall_64+0x55/0xb0 [ 400.326162][T11558] ? clear_bhb_loop+0x40/0x90 [ 400.330865][T11558] ? clear_bhb_loop+0x40/0x90 [ 400.335654][T11558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.341592][T11558] RIP: 0033:0x7f327498d5fc [ 400.346026][T11558] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 400.365872][T11558] RSP: 002b:00007f3275895030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.374324][T11558] RAX: ffffffffffffffda RBX: 00007f3274bc6090 RCX: 00007f327498d5fc [ 400.382399][T11558] RDX: 000000000000000f RSI: 00007f32758950a0 RDI: 000000000000000a [ 400.390383][T11558] RBP: 00007f3275895090 R08: 0000000000000000 R09: 0000000000000000 [ 400.398375][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.406368][T11558] R13: 00007f3274bc6128 R14: 00007f3274bc6090 R15: 00007ffeecda98a8 [ 400.414367][T11558] [ 400.730732][T11572] pim6reg1: entered promiscuous mode [ 400.736182][T11572] pim6reg1: entered allmulticast mode [ 401.454141][T11585] netlink: 'syz.2.1994': attribute type 4 has an invalid length. [ 401.530996][T11585] __nla_validate_parse: 1 callbacks suppressed [ 401.531015][T11585] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1994'. [ 401.625923][ T5795] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 402.768665][T11605] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2001'. [ 403.073938][T11623] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2007'. [ 403.366607][T11620] IPv6: Can't replace route, no match found [ 403.939237][T11642] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2014'. [ 404.431672][T11649] FAULT_INJECTION: forcing a failure. [ 404.431672][T11649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.451703][T11649] CPU: 0 PID: 11649 Comm: syz.2.2015 Not tainted syzkaller #0 [ 404.459233][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 404.469604][T11649] Call Trace: [ 404.472945][T11649] [ 404.475913][T11649] dump_stack_lvl+0x16c/0x230 [ 404.480640][T11649] ? show_regs_print_info+0x20/0x20 [ 404.485980][T11649] ? load_image+0x3b0/0x3b0 [ 404.490615][T11649] ? __might_fault+0xaa/0x120 [ 404.495325][T11649] ? __lock_acquire+0x7c80/0x7c80 [ 404.500394][T11649] should_fail_ex+0x39d/0x4d0 [ 404.505130][T11649] _copy_from_user+0x2f/0xe0 [ 404.509871][T11649] ___sys_recvmsg+0x12f/0x510 [ 404.514713][T11649] ? __sys_recvmsg+0x270/0x270 [ 404.519529][T11649] ? ksys_write+0x1c1/0x250 [ 404.524096][T11649] ? __fget_files+0x44a/0x4d0 [ 404.528837][T11649] __x64_sys_recvmsg+0x1f2/0x2c0 [ 404.533831][T11649] ? ___sys_recvmsg+0x510/0x510 [ 404.538839][T11649] ? lockdep_hardirqs_on+0x98/0x150 [ 404.544094][T11649] do_syscall_64+0x55/0xb0 [ 404.548541][T11649] ? clear_bhb_loop+0x40/0x90 [ 404.553242][T11649] ? clear_bhb_loop+0x40/0x90 [ 404.558031][T11649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.564155][T11649] RIP: 0033:0x7f742518ebe9 [ 404.568606][T11649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.588240][T11649] RSP: 002b:00007f7425fd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 404.596758][T11649] RAX: ffffffffffffffda RBX: 00007f74253c5fa0 RCX: 00007f742518ebe9 [ 404.604765][T11649] RDX: 0000000040002122 RSI: 00002000000005c0 RDI: 0000000000000003 [ 404.612756][T11649] RBP: 00007f7425fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 404.616937][ T5801] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 404.620825][T11649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.620846][T11649] R13: 00007f74253c6038 R14: 00007f74253c5fa0 R15: 00007ffe7844dcf8 [ 404.620877][T11649] [ 404.959797][T11659] netlink: 'syz.0.2018': attribute type 10 has an invalid length. [ 405.169843][T11661] IPv6: Can't replace route, no match found [ 405.219790][T11666] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2020'. [ 405.738850][T11675] netlink: set zone limit has 8 unknown bytes [ 405.784634][T11672] FAULT_INJECTION: forcing a failure. [ 405.784634][T11672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.824206][T11672] CPU: 0 PID: 11672 Comm: syz.3.2023 Not tainted syzkaller #0 [ 405.831756][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 405.841933][T11672] Call Trace: [ 405.845225][T11672] [ 405.848168][T11672] dump_stack_lvl+0x16c/0x230 [ 405.852880][T11672] ? show_regs_print_info+0x20/0x20 [ 405.858091][T11672] ? load_image+0x3b0/0x3b0 [ 405.862685][T11672] ? __might_fault+0xaa/0x120 [ 405.867374][T11672] ? __lock_acquire+0x7c80/0x7c80 [ 405.872414][T11672] should_fail_ex+0x39d/0x4d0 [ 405.877139][T11672] _copy_from_user+0x2f/0xe0 [ 405.881743][T11672] kstrtouint_from_user+0xc2/0x150 [ 405.886873][T11672] ? kstrtol_from_user+0x150/0x150 [ 405.892025][T11672] proc_fail_nth_write+0x89/0x240 [ 405.897152][T11672] ? proc_fail_nth_read+0x250/0x250 [ 405.902374][T11672] ? proc_fail_nth_read+0x250/0x250 [ 405.907582][T11672] vfs_write+0x288/0x940 [ 405.911853][T11672] ? file_end_write+0x250/0x250 [ 405.916756][T11672] ? __fget_files+0x28/0x4d0 [ 405.921386][T11672] ? __fget_files+0x44a/0x4d0 [ 405.926109][T11672] ? __fdget_pos+0x2a3/0x330 [ 405.930814][T11672] ? ksys_write+0x75/0x250 [ 405.935255][T11672] ksys_write+0x147/0x250 [ 405.939777][T11672] ? __ia32_sys_read+0x90/0x90 [ 405.944621][T11672] ? lockdep_hardirqs_on+0x98/0x150 [ 405.949961][T11672] do_syscall_64+0x55/0xb0 [ 405.954430][T11672] ? clear_bhb_loop+0x40/0x90 [ 405.959189][T11672] ? clear_bhb_loop+0x40/0x90 [ 405.963894][T11672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.969810][T11672] RIP: 0033:0x7f327498d69f [ 405.974237][T11672] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 405.994312][T11672] RSP: 002b:00007f32758b6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 406.002781][T11672] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f327498d69f [ 406.010854][T11672] RDX: 0000000000000001 RSI: 00007f32758b60a0 RDI: 0000000000000007 [ 406.018838][T11672] RBP: 00007f32758b6090 R08: 0000000000000000 R09: 0000000000000000 [ 406.026908][T11672] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 406.034896][T11672] R13: 00007f3274bc6038 R14: 00007f3274bc5fa0 R15: 00007ffeecda98a8 [ 406.042910][T11672] [ 406.194351][T11679] FAULT_INJECTION: forcing a failure. [ 406.194351][T11679] name failslab, interval 1, probability 0, space 0, times 0 [ 406.259987][T11679] CPU: 0 PID: 11679 Comm: syz.2.2025 Not tainted syzkaller #0 [ 406.267523][T11679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 406.277879][T11679] Call Trace: [ 406.281264][T11679] [ 406.284463][T11679] dump_stack_lvl+0x16c/0x230 [ 406.289245][T11679] ? show_regs_print_info+0x20/0x20 [ 406.294545][T11679] ? load_image+0x3b0/0x3b0 [ 406.299091][T11679] ? __might_sleep+0xe0/0xe0 [ 406.303781][T11679] ? __lock_acquire+0x7c80/0x7c80 [ 406.308902][T11679] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 406.314908][T11679] should_fail_ex+0x39d/0x4d0 [ 406.319614][T11679] should_failslab+0x9/0x20 [ 406.324307][T11679] slab_pre_alloc_hook+0x59/0x310 [ 406.329350][T11679] ? lockdep_hardirqs_on+0x98/0x150 [ 406.334647][T11679] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 406.340914][T11679] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 406.347190][T11679] __kmem_cache_alloc_node+0x53/0x260 [ 406.352603][T11679] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 406.359054][T11679] __kmalloc+0xa4/0x240 [ 406.363262][T11679] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 406.369372][T11679] genl_family_rcv_msg_doit+0xb9/0x2f0 [ 406.375030][T11679] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 406.380975][T11679] ? apparmor_capable+0x137/0x1a0 [ 406.386220][T11679] ? bpf_lsm_capable+0x9/0x10 [ 406.390928][T11679] ? security_capable+0x89/0xb0 [ 406.395821][T11679] genl_rcv_msg+0x60b/0x790 [ 406.400451][T11679] ? genl_bind+0x360/0x360 [ 406.404973][T11679] ? ovs_nat_update_key+0x920/0x920 [ 406.410533][T11679] ? ref_tracker_free+0x634/0x7d0 [ 406.415658][T11679] ? __copy_skb_header+0xa7/0x550 [ 406.420705][T11679] netlink_rcv_skb+0x216/0x480 [ 406.425487][T11679] ? genl_bind+0x360/0x360 [ 406.429916][T11679] ? netlink_ack+0x1110/0x1110 [ 406.434789][T11679] ? __lock_acquire+0x7c80/0x7c80 [ 406.439832][T11679] ? down_read+0x1ac/0x2e0 [ 406.444457][T11679] genl_rcv+0x28/0x40 [ 406.448659][T11679] netlink_unicast+0x751/0x8d0 [ 406.453485][T11679] netlink_sendmsg+0x8c1/0xbe0 [ 406.458490][T11679] ? netlink_getsockopt+0x580/0x580 [ 406.463731][T11679] ? aa_sock_msg_perm+0x94/0x150 [ 406.468784][T11679] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 406.474088][T11679] ? security_socket_sendmsg+0x80/0xa0 [ 406.479556][T11679] ? netlink_getsockopt+0x580/0x580 [ 406.484960][T11679] ____sys_sendmsg+0x5bf/0x950 [ 406.489837][T11679] ? __asan_memset+0x22/0x40 [ 406.494465][T11679] ? __sys_sendmsg_sock+0x30/0x30 [ 406.499595][T11679] ? __import_iovec+0x5f2/0x860 [ 406.504470][T11679] ? import_iovec+0x73/0xa0 [ 406.509004][T11679] ___sys_sendmsg+0x220/0x290 [ 406.513704][T11679] ? __sys_sendmsg+0x270/0x270 [ 406.518502][T11679] ? __lock_acquire+0x7c80/0x7c80 [ 406.523566][T11679] __se_sys_sendmsg+0x1a5/0x270 [ 406.528442][T11679] ? __x64_sys_sendmsg+0x80/0x80 [ 406.533418][T11679] ? lockdep_hardirqs_on+0x98/0x150 [ 406.538664][T11679] do_syscall_64+0x55/0xb0 [ 406.543088][T11679] ? clear_bhb_loop+0x40/0x90 [ 406.547781][T11679] ? clear_bhb_loop+0x40/0x90 [ 406.552475][T11679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.558388][T11679] RIP: 0033:0x7f742518ebe9 [ 406.562882][T11679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.582600][T11679] RSP: 002b:00007f7425fd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.591030][T11679] RAX: ffffffffffffffda RBX: 00007f74253c5fa0 RCX: 00007f742518ebe9 [ 406.599276][T11679] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 406.607881][T11679] RBP: 00007f7425fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 406.615861][T11679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.623837][T11679] R13: 00007f74253c6038 R14: 00007f74253c5fa0 R15: 00007ffe7844dcf8 [ 406.631833][T11679] [ 406.999512][T11690] netlink: 'syz.2.2029': attribute type 10 has an invalid length. [ 407.135049][ T5801] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 407.508902][T11712] netlink: 'syz.0.2036': attribute type 4 has an invalid length. [ 407.950167][T11723] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2041'. [ 408.539227][T11742] netlink: 'syz.1.2046': attribute type 2 has an invalid length. [ 408.556054][T11742] netlink: 'syz.1.2046': attribute type 9 has an invalid length. [ 408.575799][T11742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2046'. [ 408.630958][T11744] netlink: 'syz.3.2048': attribute type 21 has an invalid length. [ 408.830905][ T5801] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 408.891073][T11756] FAULT_INJECTION: forcing a failure. [ 408.891073][T11756] name failslab, interval 1, probability 0, space 0, times 0 [ 408.904654][T11756] CPU: 1 PID: 11756 Comm: syz.1.2051 Not tainted syzkaller #0 [ 408.912198][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 408.922386][T11756] Call Trace: [ 408.925704][T11756] [ 408.928705][T11756] dump_stack_lvl+0x16c/0x230 [ 408.933525][T11756] ? show_regs_print_info+0x20/0x20 [ 408.938864][T11756] ? load_image+0x3b0/0x3b0 [ 408.943420][T11756] ? __might_sleep+0xe0/0xe0 [ 408.948054][T11756] ? __lock_acquire+0x7c80/0x7c80 [ 408.953119][T11756] should_fail_ex+0x39d/0x4d0 [ 408.957839][T11756] should_failslab+0x9/0x20 [ 408.962468][T11756] slab_pre_alloc_hook+0x59/0x310 [ 408.967538][T11756] ? __lock_acquire+0x7c80/0x7c80 [ 408.972619][T11756] kmem_cache_alloc_node+0x60/0x330 [ 408.977866][T11756] ? __alloc_skb+0x108/0x2c0 [ 408.982536][T11756] __alloc_skb+0x108/0x2c0 [ 408.987013][T11756] netlink_sendmsg+0x65b/0xbe0 [ 408.991827][T11756] ? netlink_getsockopt+0x580/0x580 [ 408.997155][T11756] ? aa_sock_msg_perm+0x94/0x150 [ 409.002412][T11756] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 409.007832][T11756] ? security_socket_sendmsg+0x80/0xa0 [ 409.013423][T11756] ? netlink_getsockopt+0x580/0x580 [ 409.018708][T11756] ____sys_sendmsg+0x5bf/0x950 [ 409.023521][T11756] ? __asan_memset+0x22/0x40 [ 409.028153][T11756] ? __sys_sendmsg_sock+0x30/0x30 [ 409.033288][T11756] ? __import_iovec+0x5f2/0x860 [ 409.038354][T11756] ? import_iovec+0x73/0xa0 [ 409.042886][T11756] ___sys_sendmsg+0x220/0x290 [ 409.047613][T11756] ? __sys_sendmsg+0x270/0x270 [ 409.052417][T11756] ? __lock_acquire+0x7c80/0x7c80 [ 409.057471][T11756] __se_sys_sendmsg+0x1a5/0x270 [ 409.062342][T11756] ? __x64_sys_sendmsg+0x80/0x80 [ 409.067318][T11756] ? lockdep_hardirqs_on+0x98/0x150 [ 409.072713][T11756] do_syscall_64+0x55/0xb0 [ 409.077137][T11756] ? clear_bhb_loop+0x40/0x90 [ 409.081999][T11756] ? clear_bhb_loop+0x40/0x90 [ 409.086769][T11756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.092766][T11756] RIP: 0033:0x7ff65b98ebe9 [ 409.097737][T11756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.117582][T11756] RSP: 002b:00007ff65c7da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.126005][T11756] RAX: ffffffffffffffda RBX: 00007ff65bbc5fa0 RCX: 00007ff65b98ebe9 [ 409.134009][T11756] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 409.141990][T11756] RBP: 00007ff65c7da090 R08: 0000000000000000 R09: 0000000000000000 [ 409.150070][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.158046][T11756] R13: 00007ff65bbc6038 R14: 00007ff65bbc5fa0 R15: 00007ffe6b3f2f38 [ 409.166038][T11756] [ 409.176306][T11763] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2053'. [ 409.460329][ T5801] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 409.548077][T11772] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2058'. [ 409.875933][T11777] IPv6: Can't replace route, no match found [ 409.898937][T11785] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2062'. [ 410.182489][T11794] syzkaller0: entered promiscuous mode [ 410.199867][T11794] syzkaller0: entered allmulticast mode [ 410.495726][T11801] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2067'. [ 410.750566][T11809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2070'. [ 410.760020][T11809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2070'. [ 410.770514][T11809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2070'. [ 410.781004][T11809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2070'. [ 411.667938][T11819] IPv6: Can't replace route, no match found [ 411.957135][T11831] netlink: 'syz.0.2078': attribute type 33 has an invalid length. [ 412.021386][T11834] netlink: 'syz.3.2079': attribute type 10 has an invalid length. [ 412.049137][T11834] veth0_vlan: entered allmulticast mode [ 412.159458][T11834] veth0_vlan: left promiscuous mode [ 412.189397][T11834] veth0_vlan: entered promiscuous mode [ 412.228344][T11840] can: request_module (can-proto-0) failed. [ 412.262951][T11834] team0: Device veth0_vlan failed to register rx_handler [ 413.169339][T11856] IPv6: Can't replace route, no match found [ 413.438904][T11873] FAULT_INJECTION: forcing a failure. [ 413.438904][T11873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.456692][T11873] CPU: 0 PID: 11873 Comm: syz.0.2091 Not tainted syzkaller #0 [ 413.464216][T11873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 413.474324][T11873] Call Trace: [ 413.477647][T11873] [ 413.480614][T11873] dump_stack_lvl+0x16c/0x230 [ 413.485335][T11873] ? show_regs_print_info+0x20/0x20 [ 413.490575][T11873] ? load_image+0x3b0/0x3b0 [ 413.495194][T11873] ? __lock_acquire+0x7c80/0x7c80 [ 413.500252][T11873] ? snprintf+0xdb/0x120 [ 413.504532][T11873] should_fail_ex+0x39d/0x4d0 [ 413.509242][T11873] _copy_to_user+0x2f/0xa0 [ 413.513681][T11873] simple_read_from_buffer+0xe7/0x150 [ 413.519082][T11873] proc_fail_nth_read+0x1e3/0x250 [ 413.524150][T11873] ? proc_fault_inject_write+0x340/0x340 [ 413.529935][T11873] ? fsnotify_perm+0x271/0x5e0 [ 413.534731][T11873] ? proc_fault_inject_write+0x340/0x340 [ 413.540375][T11873] vfs_read+0x27e/0x920 [ 413.544582][T11873] ? kernel_read+0x1e0/0x1e0 [ 413.549187][T11873] ? __fget_files+0x28/0x4d0 [ 413.553792][T11873] ? __fget_files+0x44a/0x4d0 [ 413.558498][T11873] ? __fdget_pos+0x2a3/0x330 [ 413.563099][T11873] ? ksys_read+0x75/0x250 [ 413.567457][T11873] ksys_read+0x147/0x250 [ 413.571894][T11873] ? vfs_write+0x940/0x940 [ 413.576326][T11873] ? lockdep_hardirqs_on+0x98/0x150 [ 413.581546][T11873] do_syscall_64+0x55/0xb0 [ 413.585982][T11873] ? clear_bhb_loop+0x40/0x90 [ 413.590667][T11873] ? clear_bhb_loop+0x40/0x90 [ 413.595446][T11873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.601528][T11873] RIP: 0033:0x7f825078d5fc [ 413.605988][T11873] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 413.625977][T11873] RSP: 002b:00007f8251675030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.634410][T11873] RAX: ffffffffffffffda RBX: 00007f82509c5fa0 RCX: 00007f825078d5fc [ 413.642490][T11873] RDX: 000000000000000f RSI: 00007f82516750a0 RDI: 0000000000000004 [ 413.650466][T11873] RBP: 00007f8251675090 R08: 0000000000000000 R09: 0000000000000000 [ 413.658531][T11873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.666630][T11873] R13: 00007f82509c6038 R14: 00007f82509c5fa0 R15: 00007fff87b04c88 [ 413.674713][T11873] [ 414.393390][T11892] netlink: 'syz.1.2098': attribute type 21 has an invalid length. [ 414.430704][T11892] netlink: 'syz.1.2098': attribute type 20 has an invalid length. [ 414.857419][T11899] __nla_validate_parse: 1 callbacks suppressed [ 414.857439][T11899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2100'. [ 415.337131][T11911] veth0_virt_wifi: entered allmulticast mode [ 415.926906][T11923] netlink: 'syz.1.2107': attribute type 39 has an invalid length. [ 416.791888][T11946] delete_channel: no stack [ 416.798513][T11949] netlink: 'syz.3.2115': attribute type 33 has an invalid length. [ 416.826176][T11949] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2115'. [ 416.837987][T11951] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2116'. [ 417.449923][T11965] netlink: 'syz.2.2121': attribute type 27 has an invalid length. [ 417.460852][T11965] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2121'. [ 417.965100][T11981] FAULT_INJECTION: forcing a failure. [ 417.965100][T11981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.985645][T11981] CPU: 1 PID: 11981 Comm: syz.1.2125 Not tainted syzkaller #0 [ 417.993523][T11981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 418.003615][T11981] Call Trace: [ 418.006924][T11981] [ 418.010059][T11981] dump_stack_lvl+0x16c/0x230 [ 418.014782][T11981] ? show_regs_print_info+0x20/0x20 [ 418.020019][T11981] ? load_image+0x3b0/0x3b0 [ 418.024555][T11981] ? __might_fault+0xaa/0x120 [ 418.029268][T11981] ? __lock_acquire+0x7c80/0x7c80 [ 418.034440][T11981] should_fail_ex+0x39d/0x4d0 [ 418.039156][T11981] _copy_to_user+0x2f/0xa0 [ 418.043782][T11981] bpf_test_finish+0x24b/0x620 [ 418.048654][T11981] ? convert_skb_to___skb+0x420/0x420 [ 418.054150][T11981] ? _copy_from_user+0xa5/0xe0 [ 418.058940][T11981] ? bpf_test_init+0x134/0x150 [ 418.063746][T11981] bpf_prog_test_run_xdp+0x7fa/0xfa0 [ 418.069351][T11981] ? dev_put+0x80/0x80 [ 418.073471][T11981] ? dev_put+0x80/0x80 [ 418.077582][T11981] bpf_prog_test_run+0x321/0x390 [ 418.082565][T11981] __sys_bpf+0x440/0x800 [ 418.086927][T11981] ? bpf_link_show_fdinfo+0x350/0x350 [ 418.092349][T11981] ? lock_chain_count+0x20/0x20 [ 418.097327][T11981] __x64_sys_bpf+0x7c/0x90 [ 418.101903][T11981] do_syscall_64+0x55/0xb0 [ 418.106354][T11981] ? clear_bhb_loop+0x40/0x90 [ 418.111053][T11981] ? clear_bhb_loop+0x40/0x90 [ 418.115940][T11981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.121869][T11981] RIP: 0033:0x7ff65b98ebe9 [ 418.126321][T11981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.146055][T11981] RSP: 002b:00007ff65c7da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.154503][T11981] RAX: ffffffffffffffda RBX: 00007ff65bbc5fa0 RCX: 00007ff65b98ebe9 [ 418.162505][T11981] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 418.170501][T11981] RBP: 00007ff65c7da090 R08: 0000000000000000 R09: 0000000000000000 [ 418.178497][T11981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.186491][T11981] R13: 00007ff65bbc6038 R14: 00007ff65bbc5fa0 R15: 00007ffe6b3f2f38 [ 418.194513][T11981] [ 418.552706][T11979] netlink: 'syz.3.2124': attribute type 10 has an invalid length. [ 418.591878][T11979] netlink: 'syz.3.2124': attribute type 19 has an invalid length. [ 418.637296][T11979] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2124'. [ 418.648564][T11989] IPv6: Can't replace route, no match found [ 419.624723][T12002] IPv6: Can't replace route, no match found [ 419.655533][T12014] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2134'. [ 420.315364][T12028] pim6reg1: entered promiscuous mode [ 420.321230][T12028] pim6reg1: entered allmulticast mode [ 420.417973][T12028] IPv6: Can't replace route, no match found [ 420.447080][T12028] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 420.698647][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2140'. [ 420.715145][T12035] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2140'. [ 420.724942][T12035] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 423.911482][T12098] IPv6: Can't replace route, no match found [ 424.047595][T12102] IPv6: Can't replace route, no match found [ 424.931468][T12124] pim6reg1: entered allmulticast mode [ 425.770096][T12143] IPv6: Can't replace route, no match found [ 426.025491][T12152] IPv6: Can't replace route, no match found [ 426.148973][T12154] FAULT_INJECTION: forcing a failure. [ 426.148973][T12154] name failslab, interval 1, probability 0, space 0, times 0 [ 426.196132][T12154] CPU: 1 PID: 12154 Comm: syz.1.2179 Not tainted syzkaller #0 [ 426.203684][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 426.213788][T12154] Call Trace: [ 426.217107][T12154] [ 426.220072][T12154] dump_stack_lvl+0x16c/0x230 [ 426.224793][T12154] ? sctp_sendmsg+0x155c/0x27e0 [ 426.229723][T12154] ? ___sys_sendmsg+0x220/0x290 [ 426.234600][T12154] ? show_regs_print_info+0x20/0x20 [ 426.239814][T12154] ? load_image+0x3b0/0x3b0 [ 426.244364][T12154] should_fail_ex+0x39d/0x4d0 [ 426.249094][T12154] should_failslab+0x9/0x20 [ 426.253744][T12154] slab_pre_alloc_hook+0x59/0x310 [ 426.258983][T12154] ? sctp_add_bind_addr+0x8c/0x360 [ 426.264125][T12154] __kmem_cache_alloc_node+0x53/0x260 [ 426.269957][T12154] ? sctp_add_bind_addr+0x8c/0x360 [ 426.275085][T12154] kmalloc_trace+0x2a/0xe0 [ 426.279521][T12154] sctp_add_bind_addr+0x8c/0x360 [ 426.284479][T12154] sctp_copy_local_addr_list+0x30c/0x4e0 [ 426.290132][T12154] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 426.295867][T12154] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 426.301955][T12154] ? sctp_v4_is_any+0x35/0x60 [ 426.306649][T12154] ? sctp_copy_one_addr+0x8c/0x350 [ 426.311987][T12154] sctp_bind_addr_copy+0xb3/0x3c0 [ 426.317125][T12154] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 426.323473][T12154] sctp_connect_new_asoc+0x2da/0x690 [ 426.328787][T12154] ? __sctp_connect+0xd20/0xd20 [ 426.333649][T12154] ? __local_bh_enable_ip+0x12e/0x1c0 [ 426.339038][T12154] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 426.344685][T12154] ? security_sctp_bind_connect+0x89/0xb0 [ 426.350421][T12154] sctp_sendmsg+0x155c/0x27e0 [ 426.355127][T12154] ? sctp_getsockopt+0xb60/0xb60 [ 426.360073][T12154] ? perf_trace_lock+0xf7/0x380 [ 426.364955][T12154] ? aa_sk_perm+0x7fc/0x930 [ 426.369479][T12154] ? aa_af_perm+0x2b0/0x2b0 [ 426.374011][T12154] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 426.380543][T12154] ? sock_rps_record_flow+0x19/0x400 [ 426.385928][T12154] ? inet_send_prepare+0x260/0x260 [ 426.391134][T12154] ? inet_sendmsg+0xe9/0x2f0 [ 426.395733][T12154] ? inet_send_prepare+0x260/0x260 [ 426.400865][T12154] ____sys_sendmsg+0x5bf/0x950 [ 426.405649][T12154] ? __asan_memset+0x22/0x40 [ 426.410249][T12154] ? __sys_sendmsg_sock+0x30/0x30 [ 426.415283][T12154] ? __import_iovec+0x5f2/0x860 [ 426.420156][T12154] ? import_iovec+0x73/0xa0 [ 426.424677][T12154] ___sys_sendmsg+0x220/0x290 [ 426.429371][T12154] ? __sys_sendmsg+0x270/0x270 [ 426.434174][T12154] ? __lock_acquire+0x7c80/0x7c80 [ 426.439236][T12154] __se_sys_sendmsg+0x1a5/0x270 [ 426.444277][T12154] ? perf_trace_preemptirq_template+0x281/0x340 [ 426.450710][T12154] ? __x64_sys_sendmsg+0x80/0x80 [ 426.455792][T12154] ? lockdep_hardirqs_on+0x98/0x150 [ 426.461014][T12154] do_syscall_64+0x55/0xb0 [ 426.465442][T12154] ? clear_bhb_loop+0x40/0x90 [ 426.470212][T12154] ? clear_bhb_loop+0x40/0x90 [ 426.474900][T12154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.480813][T12154] RIP: 0033:0x7ff65b98ebe9 [ 426.485242][T12154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.504899][T12154] RSP: 002b:00007ff65c7da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.513337][T12154] RAX: ffffffffffffffda RBX: 00007ff65bbc5fa0 RCX: 00007ff65b98ebe9 [ 426.521321][T12154] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 426.529416][T12154] RBP: 00007ff65c7da090 R08: 0000000000000000 R09: 0000000000000000 [ 426.537412][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.545393][T12154] R13: 00007ff65bbc6038 R14: 00007ff65bbc5fa0 R15: 00007ffe6b3f2f38 [ 426.553405][T12154] [ 427.735999][T12186] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2182'. [ 427.791275][T12179] IPv6: Can't replace route, no match found [ 428.858337][T12209] netlink: 'syz.3.2188': attribute type 29 has an invalid length. [ 428.869514][T12209] netlink: 'syz.3.2188': attribute type 29 has an invalid length. [ 428.897276][T12209] netlink: 'syz.3.2188': attribute type 29 has an invalid length. [ 428.985240][T12207] IPv6: Can't replace route, no match found [ 429.286375][T12219] FAULT_INJECTION: forcing a failure. [ 429.286375][T12219] name failslab, interval 1, probability 0, space 0, times 0 [ 429.299609][T12219] CPU: 1 PID: 12219 Comm: syz.3.2193 Not tainted syzkaller #0 [ 429.307124][T12219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 429.317270][T12219] Call Trace: [ 429.320547][T12219] [ 429.323482][T12219] dump_stack_lvl+0x16c/0x230 [ 429.328209][T12219] ? show_regs_print_info+0x20/0x20 [ 429.333414][T12219] ? load_image+0x3b0/0x3b0 [ 429.337940][T12219] ? __might_sleep+0xe0/0xe0 [ 429.343067][T12219] ? __lock_acquire+0x7c80/0x7c80 [ 429.348115][T12219] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 429.354108][T12219] should_fail_ex+0x39d/0x4d0 [ 429.358821][T12219] should_failslab+0x9/0x20 [ 429.363330][T12219] slab_pre_alloc_hook+0x59/0x310 [ 429.368462][T12219] ? lockdep_hardirqs_on+0x98/0x150 [ 429.373839][T12219] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 429.380528][T12219] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 429.386816][T12219] __kmem_cache_alloc_node+0x53/0x260 [ 429.392222][T12219] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 429.398476][T12219] __kmalloc+0xa4/0x240 [ 429.402661][T12219] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 429.408750][T12219] genl_family_rcv_msg_doit+0xb9/0x2f0 [ 429.414234][T12219] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 429.420228][T12219] ? apparmor_capable+0x137/0x1a0 [ 429.425520][T12219] ? bpf_lsm_capable+0x9/0x10 [ 429.430315][T12219] ? security_capable+0x89/0xb0 [ 429.435180][T12219] genl_rcv_msg+0x60b/0x790 [ 429.439715][T12219] ? genl_bind+0x360/0x360 [ 429.444159][T12219] ? ovs_nat_update_key+0x920/0x920 [ 429.449458][T12219] ? ref_tracker_free+0x634/0x7d0 [ 429.454580][T12219] ? __copy_skb_header+0xa7/0x550 [ 429.459737][T12219] netlink_rcv_skb+0x216/0x480 [ 429.464549][T12219] ? genl_bind+0x360/0x360 [ 429.468982][T12219] ? netlink_ack+0x1110/0x1110 [ 429.473770][T12219] ? __lock_acquire+0x7c80/0x7c80 [ 429.478835][T12219] ? down_read+0x1ac/0x2e0 [ 429.483269][T12219] genl_rcv+0x28/0x40 [ 429.487276][T12219] netlink_unicast+0x751/0x8d0 [ 429.492057][T12219] netlink_sendmsg+0x8c1/0xbe0 [ 429.496864][T12219] ? netlink_getsockopt+0x580/0x580 [ 429.502198][T12219] ? aa_sock_msg_perm+0x94/0x150 [ 429.507162][T12219] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 429.512552][T12219] ? security_socket_sendmsg+0x80/0xa0 [ 429.518116][T12219] ? netlink_getsockopt+0x580/0x580 [ 429.523331][T12219] ____sys_sendmsg+0x5bf/0x950 [ 429.528118][T12219] ? __asan_memset+0x22/0x40 [ 429.532734][T12219] ? __sys_sendmsg_sock+0x30/0x30 [ 429.537774][T12219] ? __import_iovec+0x5f2/0x860 [ 429.542745][T12219] ? import_iovec+0x73/0xa0 [ 429.547269][T12219] ___sys_sendmsg+0x220/0x290 [ 429.552060][T12219] ? __sys_sendmsg+0x270/0x270 [ 429.556853][T12219] ? __lock_acquire+0x7c80/0x7c80 [ 429.561911][T12219] __se_sys_sendmsg+0x1a5/0x270 [ 429.566782][T12219] ? __x64_sys_sendmsg+0x80/0x80 [ 429.571753][T12219] ? lockdep_hardirqs_on+0x98/0x150 [ 429.576971][T12219] do_syscall_64+0x55/0xb0 [ 429.581403][T12219] ? clear_bhb_loop+0x40/0x90 [ 429.586092][T12219] ? clear_bhb_loop+0x40/0x90 [ 429.590783][T12219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.596698][T12219] RIP: 0033:0x7f327498ebe9 [ 429.601223][T12219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.620951][T12219] RSP: 002b:00007f32758b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.629387][T12219] RAX: ffffffffffffffda RBX: 00007f3274bc5fa0 RCX: 00007f327498ebe9 [ 429.637469][T12219] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 429.645449][T12219] RBP: 00007f32758b6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.653525][T12219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.661595][T12219] R13: 00007f3274bc6038 R14: 00007f3274bc5fa0 R15: 00007ffeecda98a8 [ 429.669633][T12219] [ 429.788666][T12221] netlink: 'syz.3.2194': attribute type 29 has an invalid length. [ 429.821062][T12221] netlink: 'syz.3.2194': attribute type 29 has an invalid length. [ 429.835112][T12221] netlink: 'syz.3.2194': attribute type 29 has an invalid length. [ 430.255164][T12242] netlink: 'syz.0.2202': attribute type 33 has an invalid length. [ 430.264267][T12242] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2202'. [ 430.274818][T12240] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2201'. [ 430.405569][T12244] netlink: 'syz.1.2203': attribute type 16 has an invalid length. [ 430.450770][T12244] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2203'. [ 430.717632][T12250] netlink: 'syz.0.2204': attribute type 29 has an invalid length. [ 430.731520][T12250] netlink: 'syz.0.2204': attribute type 29 has an invalid length. [ 431.152950][T12260] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2209'. [ 431.179118][T12254] IPv6: Can't replace route, no match found [ 431.547539][T12267] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2212'. [ 431.682301][T12271] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2213'. [ 431.793370][T12276] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2216'. [ 432.471286][T12290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2219'. [ 432.526376][T12290] ipvlan1: entered promiscuous mode [ 432.538716][T12290] ipvlan1: entered allmulticast mode [ 432.555551][T12290] bridge0: port 4(ipvlan1) entered blocking state [ 432.570864][T12290] bridge0: port 4(ipvlan1) entered disabled state [ 432.595338][T12290] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 432.630430][T12302] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2223'. [ 433.575631][T12312] team0: Device hsr_slave_0 failed to register rx_handler [ 434.249789][T12307] IPv6: Can't replace route, no match found [ 434.290859][T12316] validate_nla: 8 callbacks suppressed [ 434.290878][T12316] netlink: 'syz.2.2227': attribute type 33 has an invalid length. [ 434.358800][T12316] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2227'. [ 434.513707][T12329] netlink: 'syz.0.2231': attribute type 9 has an invalid length. [ 434.580788][T12329] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2231'. [ 434.610779][T12328] netlink: 'syz.0.2231': attribute type 9 has an invalid length. [ 434.618664][T12328] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2231'. [ 434.791991][T12336] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2234'. [ 435.156718][T12343] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2237'. [ 435.913305][T12355] IPv6: Can't replace route, no match found [ 436.559872][T12370] Dead loop on virtual device ip6_vti0, fix it urgently! [ 436.567857][T12365] netlink: 'syz.3.2244': attribute type 21 has an invalid length. [ 436.633332][T12370] FAULT_INJECTION: forcing a failure. [ 436.633332][T12370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.652463][T12370] CPU: 0 PID: 12370 Comm: syz.0.2245 Not tainted syzkaller #0 [ 436.660002][T12370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 436.670193][T12370] Call Trace: [ 436.673532][T12370] [ 436.676511][T12370] dump_stack_lvl+0x16c/0x230 [ 436.681236][T12370] ? show_regs_print_info+0x20/0x20 [ 436.686448][T12370] ? load_image+0x3b0/0x3b0 [ 436.690963][T12370] ? __might_fault+0xaa/0x120 [ 436.695654][T12370] ? __lock_acquire+0x7c80/0x7c80 [ 436.700704][T12370] should_fail_ex+0x39d/0x4d0 [ 436.705679][T12370] _copy_from_user+0x2f/0xe0 [ 436.710279][T12370] kstrtouint_from_user+0xc2/0x150 [ 436.715408][T12370] ? kstrtol_from_user+0x150/0x150 [ 436.720551][T12370] proc_fail_nth_write+0x89/0x240 [ 436.725593][T12370] ? proc_fail_nth_read+0x250/0x250 [ 436.730857][T12370] ? proc_fail_nth_read+0x250/0x250 [ 436.736089][T12370] vfs_write+0x288/0x940 [ 436.740392][T12370] ? file_end_write+0x250/0x250 [ 436.745284][T12370] ? __fget_files+0x28/0x4d0 [ 436.749906][T12370] ? __fget_files+0x44a/0x4d0 [ 436.754612][T12370] ? __fdget_pos+0x2a3/0x330 [ 436.759248][T12370] ? ksys_write+0x75/0x250 [ 436.763721][T12370] ksys_write+0x147/0x250 [ 436.768067][T12370] ? __ia32_sys_read+0x90/0x90 [ 436.772952][T12370] ? lockdep_hardirqs_on+0x98/0x150 [ 436.779867][T12370] do_syscall_64+0x55/0xb0 [ 436.784866][T12370] ? clear_bhb_loop+0x40/0x90 [ 436.789574][T12370] ? clear_bhb_loop+0x40/0x90 [ 436.794270][T12370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.800277][T12370] RIP: 0033:0x7f825078d69f [ 436.804708][T12370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 436.824415][T12370] RSP: 002b:00007f8251654030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 436.833114][T12370] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f825078d69f [ 436.841193][T12370] RDX: 0000000000000001 RSI: 00007f82516540a0 RDI: 0000000000000008 [ 436.849176][T12370] RBP: 00007f8251654090 R08: 0000000000000000 R09: 0000000000000000 [ 436.857164][T12370] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 436.865143][T12370] R13: 00007f82509c6128 R14: 00007f82509c6090 R15: 00007fff87b04c88 [ 436.873490][T12370] [ 436.924190][T12366] netlink: 'syz.3.2244': attribute type 10 has an invalid length. [ 436.995301][T12366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2244'. [ 437.057913][T12366] ipvlan1: entered promiscuous mode [ 437.131040][T12366] ipvlan1: entered allmulticast mode [ 437.163471][T12366] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 437.322973][T12380] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2249'. [ 438.273479][T12394] delete_channel: no stack [ 438.278519][T12394] delete_channel: no stack [ 438.337377][T12394] netlink: 'syz.0.2252': attribute type 29 has an invalid length. [ 438.373252][T12394] netlink: 'syz.0.2252': attribute type 29 has an invalid length. [ 438.493748][T12398] netlink: 'syz.0.2252': attribute type 10 has an invalid length. [ 438.545324][T12398] batman_adv: batadv0: Adding interface: team0 [ 438.564856][T12398] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.608291][T12398] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 439.976943][T12428] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2262'. [ 440.141542][T12430] delete_channel: no stack [ 440.146401][T12430] delete_channel: no stack [ 440.579870][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.586597][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.326645][T12441] IPv6: Can't replace route, no match found [ 441.606852][T12451] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2272'. [ 441.627864][T12451] netlink: zone id is out of range [ 441.642862][T12451] netlink: zone id is out of range [ 441.653209][T12451] netlink: zone id is out of range [ 441.658682][T12451] netlink: zone id is out of range [ 441.664061][T12451] netlink: zone id is out of range [ 441.669402][T12451] netlink: zone id is out of range [ 441.681199][ T5801] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 441.689455][T12452] netlink: 'syz.0.2272': attribute type 1 has an invalid length. [ 441.690697][T12451] netlink: zone id is out of range [ 441.705057][T12452] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2272'. [ 441.721311][T12451] netlink: zone id is out of range [ 441.726505][T12451] netlink: zone id is out of range [ 441.760821][T12451] netlink: zone id is out of range [ 441.936084][T12456] netlink: 'syz.1.2275': attribute type 10 has an invalid length. [ 442.215685][T12456] bridge_slave_1: left allmulticast mode [ 442.225902][T12465] FAULT_INJECTION: forcing a failure. [ 442.225902][T12465] name failslab, interval 1, probability 0, space 0, times 0 [ 442.242145][T12456] bridge_slave_1: left promiscuous mode [ 442.248656][T12456] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.273651][T12465] CPU: 1 PID: 12465 Comm: syz.2.2277 Not tainted syzkaller #0 [ 442.281201][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 442.291325][T12465] Call Trace: [ 442.294702][T12465] [ 442.297685][T12465] dump_stack_lvl+0x16c/0x230 [ 442.302449][T12465] ? show_regs_print_info+0x20/0x20 [ 442.307717][T12465] ? load_image+0x3b0/0x3b0 [ 442.312321][T12465] ? __lock_acquire+0x7c80/0x7c80 [ 442.317424][T12465] should_fail_ex+0x39d/0x4d0 [ 442.322158][T12465] should_failslab+0x9/0x20 [ 442.326868][T12465] slab_pre_alloc_hook+0x59/0x310 [ 442.331960][T12465] ? sk_prot_alloc+0xe7/0x210 [ 442.336778][T12465] ? sk_prot_alloc+0xe7/0x210 [ 442.341488][T12465] __kmem_cache_alloc_node+0x53/0x260 [ 442.346907][T12465] ? sk_prot_alloc+0xe7/0x210 [ 442.351614][T12465] __kmalloc+0xa4/0x240 [ 442.355834][T12465] sk_prot_alloc+0xe7/0x210 [ 442.360555][T12465] ? sk_alloc+0x24/0x360 [ 442.364939][T12465] sk_alloc+0x3a/0x360 [ 442.369036][T12465] ? bpf_ctx_init+0x163/0x1a0 [ 442.373743][T12465] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 442.379336][T12465] bpf_prog_test_run_skb+0x39a/0x11c0 [ 442.384740][T12465] ? __fget_files+0x28/0x4d0 [ 442.389487][T12465] ? cpu_online+0x60/0x60 [ 442.393853][T12465] bpf_prog_test_run+0x321/0x390 [ 442.398838][T12465] __sys_bpf+0x440/0x800 [ 442.403203][T12465] ? bpf_link_show_fdinfo+0x350/0x350 [ 442.408646][T12465] ? lock_chain_count+0x20/0x20 [ 442.413554][T12465] __x64_sys_bpf+0x7c/0x90 [ 442.418182][T12465] do_syscall_64+0x55/0xb0 [ 442.422636][T12465] ? clear_bhb_loop+0x40/0x90 [ 442.427376][T12465] ? clear_bhb_loop+0x40/0x90 [ 442.432124][T12465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.438076][T12465] RIP: 0033:0x7f742518ebe9 [ 442.442538][T12465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.462380][T12465] RSP: 002b:00007f7425fd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.470924][T12465] RAX: ffffffffffffffda RBX: 00007f74253c5fa0 RCX: 00007f742518ebe9 [ 442.478922][T12465] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 442.486918][T12465] RBP: 00007f7425fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 442.494914][T12465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.502910][T12465] R13: 00007f74253c6038 R14: 00007f74253c5fa0 R15: 00007ffe7844dcf8 [ 442.511220][T12465] [ 442.565379][T12456] bridge_slave_1: entered promiscuous mode [ 442.575327][T12456] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 442.586812][T12464] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2276'. [ 443.025561][T12474] IPv6: Can't replace route, no match found [ 443.984789][T12495] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2285'. [ 444.063725][T12491] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2285'. [ 444.108474][T12500] netlink: 'syz.0.2286': attribute type 29 has an invalid length. [ 444.158094][T12501] netlink: 'syz.0.2286': attribute type 29 has an invalid length. [ 446.507941][T12500] netlink: 'syz.0.2286': attribute type 29 has an invalid length. [ 446.690494][T12525] netlink: 'syz.0.2294': attribute type 3 has an invalid length. [ 446.729501][T12525] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2294'. [ 446.742752][T12529] netlink: 'syz.3.2296': attribute type 27 has an invalid length. [ 446.753587][T12529] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2296'. [ 446.767456][T12525] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2294'. [ 447.254371][T12551] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2302'. [ 447.342456][T12549] netlink: 'syz.2.2303': attribute type 29 has an invalid length. [ 447.353266][T12549] netlink: 'syz.2.2303': attribute type 29 has an invalid length. [ 447.379840][T12549] netlink: 'syz.2.2303': attribute type 29 has an invalid length. [ 447.759696][T12565] sit0: left promiscuous mode [ 447.861444][T12565] sit0: entered promiscuous mode [ 448.249152][T12585] IPv6: Can't replace route, no match found [ 448.346606][T12589] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2313'. [ 448.781863][T12591] netlink: 'syz.0.2314': attribute type 39 has an invalid length. [ 448.799774][T12597] syz.3.2316[12597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.800051][T12597] syz.3.2316[12597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.810226][T12591] netlink: 'syz.0.2314': attribute type 10 has an invalid length. [ 448.846380][T12591] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2314'. [ 449.391597][T12606] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2321'. [ 449.708416][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.718833][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.731374][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.744992][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.753771][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 449.762067][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 449.814530][T12614] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2325'. [ 450.250131][ T2959] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.806180][ T2959] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.082257][ T2959] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.121192][T12633] netlink: 'syz.0.2332': attribute type 1 has an invalid length. [ 451.131191][T12633] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2332'. [ 451.175582][T12633] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2332'. [ 451.189513][ T2959] bond0: (slave netdevsim0): Releasing backup interface [ 451.394844][ T2959] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.558579][T12639] IPv6: Can't replace route, no match found [ 451.760721][T12615] chnl_net:caif_netlink_parms(): no params data found [ 451.830881][ T5795] Bluetooth: hci2: command tx timeout [ 452.268591][T12669] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2337'. [ 452.294771][T12615] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.326450][T12615] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.385063][T12615] bridge_slave_0: entered allmulticast mode [ 452.416901][T12615] bridge_slave_0: entered promiscuous mode [ 452.453963][T12615] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.482408][T12615] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.536836][T12615] bridge_slave_1: entered allmulticast mode [ 452.568228][T12615] bridge_slave_1: entered promiscuous mode [ 453.302429][T12615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.508703][T12615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.884234][T12697] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2342'. [ 453.920854][ T5795] Bluetooth: hci2: command tx timeout [ 453.945142][T12615] team0: Port device team_slave_0 added [ 454.043300][T12615] team0: Port device team_slave_1 added [ 454.255822][T12615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.281018][T12615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.325160][T12615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.367498][T12615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.383514][T12615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.438683][T12615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.858388][T12615] hsr_slave_0: entered promiscuous mode [ 454.887866][T12615] hsr_slave_1: entered promiscuous mode [ 455.207918][T12615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.217336][T12615] Cannot create hsr debugfs directory [ 455.530212][T12734] netlink: 'syz.3.2349': attribute type 20 has an invalid length. [ 455.564188][T12738] netlink: 'syz.3.2349': attribute type 29 has an invalid length. [ 455.667671][T12738] netlink: 'syz.3.2349': attribute type 29 has an invalid length. [ 455.766349][T12734] netlink: 'syz.3.2349': attribute type 29 has an invalid length. [ 455.842816][ T2959] hsr_slave_0: left promiscuous mode [ 455.991374][ T5795] Bluetooth: hci2: command tx timeout [ 456.005427][ T2959] hsr_slave_1: left promiscuous mode [ 456.047655][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.104150][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.158154][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.165996][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.321736][ T2959] veth1_macvtap: left allmulticast mode [ 456.327584][ T2959] veth1_macvtap: left promiscuous mode [ 456.366127][ T2959] veth0_macvtap: left promiscuous mode [ 456.421184][ T2959] veth1_vlan: left promiscuous mode [ 456.426676][ T2959] veth0_vlan: left promiscuous mode [ 457.082275][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 457.130200][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 457.175246][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.224194][ T2959] bond0 (unregistering): (slave 30): Releasing backup interface [ 457.447663][ T2959] team0 (unregistering): Port device dummy0 removed [ 457.717030][ T2959] bond0 (unregistering): Released all slaves [ 457.760786][T12742] netlink: 'syz.3.2349': attribute type 29 has an invalid length. [ 458.045390][T12755] netlink: 'syz.0.2353': attribute type 3 has an invalid length. [ 458.070832][ T5795] Bluetooth: hci2: command tx timeout [ 458.149816][T12755] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2353'. [ 458.860342][T12763] netlink: 'syz.3.2356': attribute type 33 has an invalid length. [ 458.880890][T12763] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2356'. [ 459.274512][T12769] žÿ: renamed from team_slave_1 (while UP) [ 459.400166][T12615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 459.455503][T12615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 459.506564][T12615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 459.660974][T12615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 459.943535][T12789] net_ratelimit: 42 callbacks suppressed [ 459.943557][T12789] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 459.956670][T12789] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 460.063834][T12615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.099934][T12615] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.194515][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.201819][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.255904][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.263156][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.330414][T12796] netlink: 'syz.0.2362': attribute type 20 has an invalid length. [ 460.357774][T12793] IPv6: Can't replace route, no match found [ 460.359696][T12796] netlink: 'syz.0.2362': attribute type 29 has an invalid length. [ 460.375767][T12796] netlink: 'syz.0.2362': attribute type 29 has an invalid length. [ 460.724314][T12805] validate_nla: 2 callbacks suppressed [ 460.724333][T12805] netlink: 'syz.3.2365': attribute type 33 has an invalid length. [ 460.762017][T12805] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2365'. [ 460.958019][T12803] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2363'. [ 461.027248][T12615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.224224][T12615] veth0_vlan: entered promiscuous mode [ 461.267327][T12615] veth1_vlan: entered promiscuous mode [ 461.373890][T12615] veth0_macvtap: entered promiscuous mode [ 461.405252][T12615] veth1_macvtap: entered promiscuous mode [ 461.472268][T12615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.500731][T12615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.530781][T12615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.560673][T12615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.582781][T12615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.615706][T12615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.640332][T12615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.655551][T12615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.667913][T12615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.685600][T12615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.701640][T12615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.710405][T12615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.750648][T12615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.769714][T12615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.837968][T12814] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2373'. [ 462.430338][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.445562][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.523073][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.542756][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.550492][T12823] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2368'. [ 462.903945][T12831] netlink: 'syz.1.2372': attribute type 20 has an invalid length. [ 463.363578][T12831] netlink: 'syz.1.2372': attribute type 29 has an invalid length. [ 463.405749][T12831] netlink: 'syz.1.2372': attribute type 29 has an invalid length. [ 463.441062][T12831] netlink: 'syz.1.2372': attribute type 29 has an invalid length. [ 463.497981][T12839] netlink: 'syz.1.2372': attribute type 29 has an invalid length. [ 463.925259][T12847] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2377'. [ 464.562844][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 464.574206][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 464.582489][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 464.593044][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 464.608524][ T5801] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 464.617884][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 465.725318][ T3504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.793856][T12866] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2381'. [ 465.838924][T12866] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 465.927055][ T3504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.740534][ T5801] Bluetooth: hci4: command tx timeout [ 466.813860][ T3504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.093994][ T3504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.265438][T12880] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2385'. [ 468.452265][T12852] chnl_net:caif_netlink_parms(): no params data found [ 468.790832][ T5801] Bluetooth: hci4: command tx timeout [ 468.951212][T12898] netlink: 'syz.0.2390': attribute type 33 has an invalid length. [ 468.962229][T12898] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2390'. [ 468.982224][T12852] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.989810][T12852] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.005561][T12852] bridge_slave_0: entered allmulticast mode [ 469.013433][T12852] bridge_slave_0: entered promiscuous mode [ 469.119754][T12852] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.177058][T12852] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.186448][T12852] bridge_slave_1: entered allmulticast mode [ 469.206408][T12852] bridge_slave_1: entered promiscuous mode [ 469.645802][T12910] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2394'. [ 469.824677][T12852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.837665][T12852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.927494][T12852] team0: Port device team_slave_0 added [ 469.941678][T12852] team0: Port device team_slave_1 added [ 470.091918][T12916] syzkaller0: entered promiscuous mode [ 470.097545][T12916] syzkaller0: entered allmulticast mode [ 470.233724][T12852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.241316][T12852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.272183][T12852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.872175][ T5801] Bluetooth: hci4: command tx timeout [ 472.368546][T12852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.375781][T12852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.406346][T12852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.546453][T12929] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2403'. [ 472.563155][T12852] hsr_slave_0: entered promiscuous mode [ 472.956105][ T5801] Bluetooth: hci4: command tx timeout [ 472.991271][T12852] hsr_slave_1: entered promiscuous mode [ 473.394750][ T3504] bond0: (slave wlan1): Releasing backup interface [ 473.528860][T12941] FAULT_INJECTION: forcing a failure. [ 473.528860][T12941] name failslab, interval 1, probability 0, space 0, times 0 [ 473.551374][T12941] CPU: 1 PID: 12941 Comm: syz.0.2405 Not tainted syzkaller #0 [ 473.559187][T12941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 473.569530][T12941] Call Trace: [ 473.572856][T12941] [ 473.575822][T12941] dump_stack_lvl+0x16c/0x230 [ 473.580640][T12941] ? show_regs_print_info+0x20/0x20 [ 473.585951][T12941] ? load_image+0x3b0/0x3b0 [ 473.590467][T12941] ? __might_sleep+0xe0/0xe0 [ 473.595076][T12941] ? __lock_acquire+0x7c80/0x7c80 [ 473.600138][T12941] ? kasan_set_track+0x5f/0x70 [ 473.604918][T12941] ? __kasan_kmalloc+0x8f/0xa0 [ 473.609692][T12941] ? find_get_pmu_context+0x81/0x9e0 [ 473.615168][T12941] should_fail_ex+0x39d/0x4d0 [ 473.619868][T12941] should_failslab+0x9/0x20 [ 473.624485][T12941] slab_pre_alloc_hook+0x59/0x310 [ 473.629535][T12941] kmem_cache_alloc_lru+0x4d/0x2e0 [ 473.634662][T12941] ? __d_alloc+0x31/0x730 [ 473.639013][T12941] __d_alloc+0x31/0x730 [ 473.643188][T12941] d_alloc_pseudo+0x1d/0x70 [ 473.647728][T12941] alloc_file_pseudo+0xcc/0x200 [ 473.652773][T12941] ? alloc_empty_backing_file+0xe0/0xe0 [ 473.658447][T12941] anon_inode_getfile+0xc5/0x1a0 [ 473.663406][T12941] __se_sys_perf_event_open+0xeb5/0x1c20 [ 473.669135][T12941] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 473.674808][T12941] ? lock_chain_count+0x20/0x20 [ 473.679674][T12941] ? lockdep_hardirqs_on+0x98/0x150 [ 473.684981][T12941] ? __x64_sys_perf_event_open+0x20/0xc0 [ 473.690651][T12941] do_syscall_64+0x55/0xb0 [ 473.695097][T12941] ? clear_bhb_loop+0x40/0x90 [ 473.699811][T12941] ? clear_bhb_loop+0x40/0x90 [ 473.704518][T12941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.710433][T12941] RIP: 0033:0x7f825078ebe9 [ 473.714956][T12941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.734934][T12941] RSP: 002b:00007f8251675038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 473.743370][T12941] RAX: ffffffffffffffda RBX: 00007f82509c5fa0 RCX: 00007f825078ebe9 [ 473.751351][T12941] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 473.759426][T12941] RBP: 00007f8251675090 R08: 0000000000000000 R09: 0000000000000000 [ 473.767586][T12941] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 473.775684][T12941] R13: 00007f82509c6038 R14: 00007f82509c5fa0 R15: 00007fff87b04c88 [ 473.785037][T12941] [ 474.183780][ T3504] hsr_slave_0: left promiscuous mode [ 474.227922][ T3504] hsr_slave_1: left promiscuous mode [ 474.478884][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.530795][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.570174][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.619446][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.771544][ T3504] veth1_macvtap: left promiscuous mode [ 474.777278][ T3504] veth0_macvtap: left promiscuous mode [ 474.783334][ T3504] veth1_vlan: left promiscuous mode [ 477.094876][ T3504] team0 (unregistering): Port device team_slave_1 removed [ 477.182967][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.227912][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.451695][ T3504] team0 (unregistering): Port device dummy0 removed [ 477.727346][ T3504] bond0 (unregistering): Released all slaves [ 477.766961][T12954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2409'. [ 477.976467][T12964] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 478.014037][T12964] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2411'. [ 478.767392][T12852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 478.797819][T12852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 478.824258][T12852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 478.845456][T12852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 479.009160][T12852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.029746][T12852] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.043730][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.051005][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.066210][T12057] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.073465][T12057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.248664][T12852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.293641][T12852] veth0_vlan: entered promiscuous mode [ 479.306012][T12852] veth1_vlan: entered promiscuous mode [ 479.337798][T12852] veth0_macvtap: entered promiscuous mode [ 479.348423][T12852] veth1_macvtap: entered promiscuous mode [ 479.367097][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.378367][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.388792][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.399715][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.412301][T12852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.427745][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.438704][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.448730][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.459579][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.471594][T12852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.484533][T12852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.493354][T12852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.502132][T12852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.511118][T12852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.585546][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.598015][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.629317][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.637296][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.802603][T12984] netlink: 'syz.3.2374': attribute type 33 has an invalid length. [ 479.830066][T12984] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2374'. [ 480.499605][ T2959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.513916][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.523588][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.540255][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.549331][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.559906][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 480.569383][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.945052][ T2959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.036209][ T2959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.055980][T13006] netlink: 'syz.3.2420': attribute type 20 has an invalid length. [ 481.161411][ T2959] bond0: (slave netdevsim0): Releasing backup interface [ 481.183234][ T2959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.209977][T13012] netlink: 'syz.1.2424': attribute type 33 has an invalid length. [ 481.218616][T13012] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2424'. [ 481.481770][T13017] netlink: 'syz.3.2425': attribute type 3 has an invalid length. [ 481.527942][T13017] netlink: 'syz.3.2425': attribute type 16 has an invalid length. [ 481.548854][T13019] netlink: 'syz.1.2426': attribute type 33 has an invalid length. [ 481.631288][T13017] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2425'. [ 481.641008][T13019] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2426'. [ 481.731302][T13001] chnl_net:caif_netlink_parms(): no params data found [ 481.910885][T13026] FAULT_INJECTION: forcing a failure. [ 481.910885][T13026] name failslab, interval 1, probability 0, space 0, times 0 [ 481.939357][T13026] CPU: 1 PID: 13026 Comm: syz.1.2429 Not tainted syzkaller #0 [ 481.946919][T13026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 481.957209][T13026] Call Trace: [ 481.960514][T13026] [ 481.963475][T13026] dump_stack_lvl+0x16c/0x230 [ 481.968195][T13026] ? show_regs_print_info+0x20/0x20 [ 481.973482][T13026] ? load_image+0x3b0/0x3b0 [ 481.978109][T13026] ? __might_sleep+0xe0/0xe0 [ 481.982742][T13026] ? __lock_acquire+0x7c80/0x7c80 [ 481.988066][T13026] should_fail_ex+0x39d/0x4d0 [ 481.992799][T13026] should_failslab+0x9/0x20 [ 481.997336][T13026] slab_pre_alloc_hook+0x59/0x310 [ 482.002489][T13026] ? apparmor_sk_alloc_security+0x77/0x100 [ 482.008329][T13026] __kmem_cache_alloc_node+0x53/0x260 [ 482.013745][T13026] ? apparmor_sk_alloc_security+0x77/0x100 [ 482.019765][T13026] kmalloc_trace+0x2a/0xe0 [ 482.024223][T13026] apparmor_sk_alloc_security+0x77/0x100 [ 482.029892][T13026] security_sk_alloc+0x6e/0xa0 [ 482.034692][T13026] sk_prot_alloc+0x101/0x210 [ 482.039326][T13026] sk_alloc+0x3a/0x360 [ 482.043475][T13026] ? sock_alloc+0xfe/0x220 [ 482.047932][T13026] kcm_ioctl+0x215/0xff0 [ 482.052260][T13026] ? kcm_release+0x5b0/0x5b0 [ 482.056919][T13026] ? tomoyo_path_number_perm+0x4dc/0x590 [ 482.062720][T13026] ? tomoyo_path_number_perm+0x1ba/0x590 [ 482.068509][T13026] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 482.074115][T13026] sock_do_ioctl+0xd7/0x2f0 [ 482.078685][T13026] ? sock_show_fdinfo+0xb0/0xb0 [ 482.083706][T13026] sock_ioctl+0x623/0x7a0 [ 482.088076][T13026] ? sock_poll+0x3d0/0x3d0 [ 482.092650][T13026] ? bpf_lsm_file_ioctl+0x9/0x10 [ 482.097711][T13026] ? security_file_ioctl+0x80/0xa0 [ 482.102944][T13026] ? sock_poll+0x3d0/0x3d0 [ 482.107399][T13026] __se_sys_ioctl+0xfd/0x170 [ 482.112027][T13026] do_syscall_64+0x55/0xb0 [ 482.116470][T13026] ? clear_bhb_loop+0x40/0x90 [ 482.121181][T13026] ? clear_bhb_loop+0x40/0x90 [ 482.125889][T13026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.131908][T13026] RIP: 0033:0x7ff65b98ebe9 [ 482.136353][T13026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.156093][T13026] RSP: 002b:00007ff65c7da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.164716][T13026] RAX: ffffffffffffffda RBX: 00007ff65bbc5fa0 RCX: 00007ff65b98ebe9 [ 482.172807][T13026] RDX: 0000200000001c40 RSI: 00000000000089e2 RDI: 0000000000000006 [ 482.180805][T13026] RBP: 00007ff65c7da090 R08: 0000000000000000 R09: 0000000000000000 [ 482.188806][T13026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.196891][T13026] R13: 00007ff65bbc6038 R14: 00007ff65bbc5fa0 R15: 00007ffe6b3f2f38 [ 482.204933][T13026] [ 482.642194][ T5801] Bluetooth: hci1: command tx timeout [ 482.831824][T13001] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.831896][T13042] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2431'. [ 482.839236][T13001] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.877821][T13001] bridge_slave_0: entered allmulticast mode [ 482.892478][T13001] bridge_slave_0: entered promiscuous mode [ 482.990449][T13001] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.003148][T13001] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.011726][T13001] bridge_slave_1: entered allmulticast mode [ 483.018693][T13001] bridge_slave_1: entered promiscuous mode [ 483.046860][T13045] netlink: 'syz.2.2432': attribute type 20 has an invalid length. [ 483.113206][T13001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.206096][T13001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.475951][T13001] team0: Port device team_slave_0 added [ 483.512222][T13001] team0: Port device team_slave_1 added [ 483.747467][T13001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.757355][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.785066][T13001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.799293][T13001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.807094][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.870976][T13001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.074299][T13001] hsr_slave_0: entered promiscuous mode [ 484.085453][T13001] hsr_slave_1: entered promiscuous mode [ 484.096557][T13001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.118054][T13001] Cannot create hsr debugfs directory [ 484.728889][ T5801] Bluetooth: hci1: command tx timeout [ 485.135488][ T2959] [ 485.137884][ T2959] ====================================================== [ 485.144935][ T2959] WARNING: possible circular locking dependency detected [ 485.152154][ T2959] syzkaller #0 Not tainted [ 485.156780][ T2959] ------------------------------------------------------ [ 485.163913][ T2959] kworker/u4:7/2959 is trying to acquire lock: [ 485.170090][ T2959] ffff88802bb84d00 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 485.179743][ T2959] [ 485.179743][ T2959] but task is already holding lock: [ 485.187143][ T2959] ffff88801df90768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 485.197746][ T2959] [ 485.197746][ T2959] which lock already depends on the new lock. [ 485.197746][ T2959] [ 485.208359][ T2959] [ 485.208359][ T2959] the existing dependency chain (in reverse order) is: [ 485.217395][ T2959] [ 485.217395][ T2959] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 485.225168][ T2959] __mutex_lock+0x129/0xcc0 [ 485.230234][ T2959] ieee80211_open+0x144/0x200 [ 485.235561][ T2959] __dev_open+0x2bc/0x430 [ 485.240461][ T2959] dev_open+0xab/0x170 [ 485.245089][ T2959] team_add_slave+0xae7/0x2660 [ 485.250404][ T2959] do_setlink+0xe14/0x3fb0 [ 485.255381][ T2959] rtnl_newlink+0x175b/0x2020 [ 485.260632][ T2959] rtnetlink_rcv_msg+0x7c7/0xf10 [ 485.266118][ T2959] netlink_rcv_skb+0x216/0x480 [ 485.271465][ T2959] netlink_unicast+0x751/0x8d0 [ 485.276934][ T2959] netlink_sendmsg+0x8c1/0xbe0 [ 485.282226][ T2959] ____sys_sendmsg+0x5bf/0x950 [ 485.287520][ T2959] ___sys_sendmsg+0x220/0x290 [ 485.292727][ T2959] __se_sys_sendmsg+0x1a5/0x270 [ 485.298118][ T2959] do_syscall_64+0x55/0xb0 [ 485.303062][ T2959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.309489][ T2959] [ 485.309489][ T2959] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 485.317677][ T2959] __lock_acquire+0x2ddb/0x7c80 [ 485.323052][ T2959] lock_acquire+0x197/0x410 [ 485.328092][ T2959] __mutex_lock+0x129/0xcc0 [ 485.333141][ T2959] team_del_slave+0x32/0x1c0 [ 485.338348][ T2959] team_device_event+0x28d/0xa20 [ 485.343900][ T2959] notifier_call_chain+0x197/0x390 [ 485.349538][ T2959] unregister_netdevice_many_notify+0xf36/0x1810 [ 485.356482][ T2959] unregister_netdevice_queue+0x324/0x360 [ 485.362728][ T2959] _cfg80211_unregister_wdev+0x16b/0x580 [ 485.368888][ T2959] ieee80211_remove_interfaces+0x496/0x680 [ 485.375230][ T2959] ieee80211_unregister_hw+0x5d/0x2a0 [ 485.381127][ T2959] mac80211_hwsim_del_radio+0x274/0x450 [ 485.387286][ T2959] hwsim_exit_net+0x585/0x640 [ 485.392495][ T2959] cleanup_net+0x6f4/0xb90 [ 485.397525][ T2959] process_scheduled_works+0xa45/0x15b0 [ 485.403767][ T2959] worker_thread+0xa55/0xfc0 [ 485.408885][ T2959] kthread+0x2fa/0x390 [ 485.413471][ T2959] ret_from_fork+0x48/0x80 [ 485.418421][ T2959] ret_from_fork_asm+0x11/0x20 [ 485.423713][ T2959] [ 485.423713][ T2959] other info that might help us debug this: [ 485.423713][ T2959] [ 485.433940][ T2959] Possible unsafe locking scenario: [ 485.433940][ T2959] [ 485.441566][ T2959] CPU0 CPU1 [ 485.446933][ T2959] ---- ---- [ 485.452393][ T2959] lock(&rdev->wiphy.mtx); [ 485.456920][ T2959] lock(team->team_lock_key#3); [ 485.464480][ T2959] lock(&rdev->wiphy.mtx); [ 485.471506][ T2959] lock(team->team_lock_key#3); [ 485.476542][ T2959] [ 485.476542][ T2959] *** DEADLOCK *** [ 485.476542][ T2959] [ 485.484772][ T2959] 5 locks held by kworker/u4:7/2959: [ 485.490062][ T2959] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 485.500969][ T2959] #1: ffffc9000bf47d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 485.511620][ T2959] #2: ffffffff8dfaf510 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 485.521046][ T2959] #3: ffffffff8dfbc348 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 485.530898][ T2959] #4: ffff88801df90768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 485.541701][ T2959] [ 485.541701][ T2959] stack backtrace: [ 485.547590][ T2959] CPU: 0 PID: 2959 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 485.555148][ T2959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 485.565358][ T2959] Workqueue: netns cleanup_net [ 485.570147][ T2959] Call Trace: [ 485.573517][ T2959] [ 485.576453][ T2959] dump_stack_lvl+0x16c/0x230 [ 485.581145][ T2959] ? load_image+0x3b0/0x3b0 [ 485.585659][ T2959] ? show_regs_print_info+0x20/0x20 [ 485.590874][ T2959] ? print_circular_bug+0x12b/0x1a0 [ 485.596194][ T2959] check_noncircular+0x2bd/0x3c0 [ 485.601146][ T2959] ? print_deadlock_bug+0x5d0/0x5d0 [ 485.606522][ T2959] ? lockdep_lock+0xe0/0x220 [ 485.611121][ T2959] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 485.616745][ T2959] ? _find_first_zero_bit+0xd3/0x100 [ 485.622096][ T2959] __lock_acquire+0x2ddb/0x7c80 [ 485.626989][ T2959] ? verify_lock_unused+0x140/0x140 [ 485.632325][ T2959] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 485.637994][ T2959] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 485.644608][ T2959] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 485.650178][ T2959] lock_acquire+0x197/0x410 [ 485.654692][ T2959] ? team_del_slave+0x32/0x1c0 [ 485.659476][ T2959] ? __might_sleep+0xe0/0xe0 [ 485.664075][ T2959] ? read_lock_is_recursive+0x20/0x20 [ 485.669469][ T2959] __mutex_lock+0x129/0xcc0 [ 485.673985][ T2959] ? team_del_slave+0x32/0x1c0 [ 485.678766][ T2959] ? __lock_acquire+0x7c80/0x7c80 [ 485.683808][ T2959] ? rcu_is_watching+0x15/0xb0 [ 485.688584][ T2959] ? trace_contention_end+0x39/0xe0 [ 485.694766][ T2959] ? __mutex_lock+0x304/0xcc0 [ 485.699460][ T2959] ? team_del_slave+0x32/0x1c0 [ 485.704235][ T2959] ? mutex_lock_nested+0x20/0x20 [ 485.709699][ T2959] ? bond_netdev_event+0xe1/0xef0 [ 485.714744][ T2959] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 485.720476][ T2959] ? bond_ipsec_offload_ok+0x410/0x410 [ 485.725965][ T2959] team_del_slave+0x32/0x1c0 [ 485.730568][ T2959] team_device_event+0x28d/0xa20 [ 485.735524][ T2959] notifier_call_chain+0x197/0x390 [ 485.740646][ T2959] unregister_netdevice_many_notify+0xf36/0x1810 [ 485.747071][ T2959] ? lock_chain_count+0x20/0x20 [ 485.752110][ T2959] ? unregister_netdevice_many+0x20/0x20 [ 485.757781][ T2959] ? kernfs_remove_by_name_ns+0x117/0x150 [ 485.763636][ T2959] ? __lock_acquire+0x7c80/0x7c80 [ 485.768682][ T2959] unregister_netdevice_queue+0x324/0x360 [ 485.774443][ T2959] ? list_netdevice+0x730/0x730 [ 485.779497][ T2959] ? kernfs_remove_by_name_ns+0x117/0x150 [ 485.785234][ T2959] _cfg80211_unregister_wdev+0x16b/0x580 [ 485.790884][ T2959] ieee80211_remove_interfaces+0x496/0x680 [ 485.796708][ T2959] ? ieee80211_do_stop+0x1db0/0x1db0 [ 485.802007][ T2959] ? rcu_is_watching+0x15/0xb0 [ 485.806785][ T2959] ieee80211_unregister_hw+0x5d/0x2a0 [ 485.812253][ T2959] mac80211_hwsim_del_radio+0x274/0x450 [ 485.817895][ T2959] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 485.823536][ T2959] hwsim_exit_net+0x585/0x640 [ 485.828311][ T2959] ? hwsim_init_net+0x90/0x90 [ 485.833002][ T2959] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 485.838914][ T2959] cleanup_net+0x6f4/0xb90 [ 485.843343][ T2959] ? ops_free_list+0x3b0/0x3b0 [ 485.848130][ T2959] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.853464][ T2959] ? process_scheduled_works+0x957/0x15b0 [ 485.859304][ T2959] ? process_scheduled_works+0x957/0x15b0 [ 485.865142][ T2959] process_scheduled_works+0xa45/0x15b0 [ 485.870805][ T2959] ? assign_work+0x400/0x400 [ 485.875457][ T2959] ? assign_work+0x39e/0x400 [ 485.880069][ T2959] worker_thread+0xa55/0xfc0 [ 485.884857][ T2959] kthread+0x2fa/0x390 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 485.888931][ T2959] ? pr_cont_work+0x560/0x560 [ 485.893621][ T2959] ? kthread_blkcg+0xd0/0xd0 [ 485.898233][ T2959] ret_from_fork+0x48/0x80 [ 485.902744][ T2959] ? kthread_blkcg+0xd0/0xd0 [ 485.907335][ T2959] ret_from_fork_asm+0x11/0x20 [ 485.912117][ T2959] [ 485.945001][ T2959] team0: Port device wlan1 removed [ 486.685781][ T2959] hsr_slave_0: left promiscuous mode [ 486.708524][ T2959] hsr_slave_1: left promiscuous mode [ 486.739192][ T2959] batman_adv: batadv0: Removing interface: team0 [ 486.751549][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.764464][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.781838][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.789394][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.797756][ T2959] bridge0: port 3(dummy0) entered disabled state [ 486.806911][ T2959] bridge_slave_1: left allmulticast mode [ 486.812774][ T2959] bridge_slave_1: left promiscuous mode [ 486.818468][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.827374][ T2959] bridge_slave_0: left allmulticast mode [ 486.833206][ T2959] bridge_slave_0: left promiscuous mode [ 486.838917][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.849396][ T2959] veth1_macvtap: left promiscuous mode [ 486.855120][ T2959] veth0_macvtap: left promiscuous mode [ 486.862410][ T2959] veth1_vlan: left allmulticast mode [ 486.867841][ T2959] veth1_vlan: left promiscuous mode [ 486.874449][ T2959] bridge0: left promiscuous mode [ 486.934558][ T2959] team0 (unregistering): Port device geneve1 removed [ 486.988801][ T2959] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 487.150346][ T2959] team0 (unregistering): Port device 76žÿ removed [ 487.211245][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.239443][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.416213][ T2959] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 487.424962][ T2959] bond0 (unregistering): Released all slaves [ 487.903052][ T2959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.965038][ T2959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.026255][ T2959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.077063][ T2959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.183646][ T2959] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.226070][ T2959] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.274886][ T2959] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.344959][ T2959] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.432899][ T2959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.484642][ T2959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.545567][ T2959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.591997][ T2959] bond0: (slave netdevsim0): Releasing backup interface [ 488.600295][ T2959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.866650][ T2959] hsr_slave_0: left promiscuous mode [ 489.872897][ T2959] hsr_slave_1: left promiscuous mode [ 489.878721][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.886448][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.896801][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.904297][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.912220][ T2959] bridge_slave_1: left allmulticast mode [ 489.917932][ T2959] bridge_slave_1: left promiscuous mode [ 489.923825][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.932790][ T2959] bridge_slave_0: left allmulticast mode [ 489.938480][ T2959] bridge_slave_0: left promiscuous mode [ 489.944591][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.955604][ T2959] hsr_slave_0: left promiscuous mode [ 489.961867][ T2959] hsr_slave_1: left promiscuous mode [ 489.967610][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.975192][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.982829][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.990216][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.997959][ T2959] bridge_slave_1: left allmulticast mode [ 490.003864][ T2959] bridge_slave_1: left promiscuous mode [ 490.009634][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.018538][ T2959] bridge_slave_0: left allmulticast mode [ 490.024487][ T2959] bridge_slave_0: left promiscuous mode [ 490.030145][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.041415][ T2959] hsr_slave_0: left promiscuous mode [ 490.047105][ T2959] hsr_slave_1: left promiscuous mode [ 490.053103][ T2959] team0: left allmulticast mode [ 490.058051][ T2959] C: left allmulticast mode [ 490.063624][ T2959] team_slave_1: left allmulticast mode [ 490.069265][ T2959] team0: left promiscuous mode [ 490.077657][ T2959] C: left promiscuous mode [ 490.082938][ T2959] team_slave_1: left promiscuous mode [ 490.088635][ T2959] bridge0: port 3(team0) entered disabled state [ 490.096146][ T2959] bridge_slave_0: left promiscuous mode [ 490.101872][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.111559][ T2959] hsr_slave_0: left promiscuous mode [ 490.117268][ T2959] hsr_slave_1: left promiscuous mode [ 490.123242][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.130906][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.139517][ T2959] bridge_slave_1: left allmulticast mode [ 490.145220][ T2959] bridge_slave_1: left promiscuous mode [ 490.151272][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.159346][ T2959] bridge_slave_0: left allmulticast mode [ 490.165176][ T2959] bridge_slave_0: left promiscuous mode [ 490.171014][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.183027][ T2959] veth1_macvtap: left promiscuous mode [ 490.188697][ T2959] veth0_macvtap: left promiscuous mode [ 490.194548][ T2959] veth1_vlan: left promiscuous mode [ 490.199860][ T2959] veth0_vlan: left promiscuous mode [ 490.206072][ T2959] veth1_macvtap: left promiscuous mode [ 490.212866][ T2959] veth0_macvtap: left promiscuous mode [ 490.218468][ T2959] veth1_vlan: left promiscuous mode [ 490.226127][ T2959] veth0_vlan: left promiscuous mode [ 490.232772][ T2959] veth1_macvtap: left promiscuous mode [ 490.238333][ T2959] veth1_vlan: left promiscuous mode [ 490.523872][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 490.555132][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 490.583026][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.597237][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.664279][ T2959] bond0 (unregistering): Released all slaves [ 490.839696][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 490.869646][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 490.882541][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.901983][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.962106][ T2959] bond0 (unregistering): Released all slaves [ 491.197022][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 491.224057][ T2959] team0 (unregistering): Port device C removed [ 491.248555][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.281949][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.309282][ T2959] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 491.360237][ T2959] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 491.368916][ T2959] bond0 (unregistering): Released all slaves [ 491.486110][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 491.497279][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 491.522553][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.554765][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.612784][ T2959] bond0 (unregistering): Released all slaves