last executing test programs: 7.225788384s ago: executing program 3 (id=2769): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) write$cgroup_devices(r0, 0x0, 0xa) r1 = socket$kcm(0x2, 0x200000000000003, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x74, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e0000002d008188042f8eeae0b8402e7b6e67d83c000000e3bd6efb440009000400010009000000000000000000", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x1, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x0, 0x13, 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/172) syz_clone(0x8060100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.396648795s ago: executing program 3 (id=2775): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfffffffffffffffd, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000000)=r3, 0x8) (fail_nth: 2) 5.998151334s ago: executing program 3 (id=2782): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd63"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 5.867694971s ago: executing program 3 (id=2784): r0 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT], 0x0, 0x52}, 0x28) sendmsg$kcm(r0, 0x0, 0x5744935563dc1402) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYBLOB='\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB='.'], 0x50) socket$kcm(0x29, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000ff0f00000000000000000000180100002020780000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000800850000000600000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r4, 0x10e, 0x8, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x10, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r6, &(0x7f00000002c0)='cgroup.freeze\x00', 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) r8 = socket$kcm(0x18, 0x2, 0x0) close(r8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x56, 0x60, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 5.193135084s ago: executing program 3 (id=2792): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)}], 0x1}, 0x40) 4.841548451s ago: executing program 3 (id=2797): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0x7, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 3.958657535s ago: executing program 4 (id=2802): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b564", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8a4, 0x8000}, 0x10000, 0xc8, 0x200, 0x7, 0x400000, 0x0, 0x7, 0x0, 0x1}, 0x0, 0x8, r0, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10008a, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000006000000040000000000001104000000020000000e000000000000110400000003000000010000000000000a03000000000000000100000604000ef1fa5a000036000000003000615f00"], &(0x7f0000000180)=""/6, 0x5e, 0x6, 0x1, 0x8, 0x10000, @value=r4}, 0x28) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) write$cgroup_int(r4, &(0x7f00000000c0)=0x2, 0x12) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8, r7}, 0xc) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000002c0)=r8, 0x4) 2.735883375s ago: executing program 4 (id=2805): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000ac0)=""/258, 0x102}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="069621e0a770c2a26f8a3ab5cae26cbd17a6206a017570216b4b28c62348fda9776966cb2684597684fb1441dcb94143a871946e9c58dae45ee075e6e46713d51f8944c6097c43eb1d8e0d5dd07387ddd7ea6cf6ef2d1d2ff78ca5368128b325665a1e7db626453182c857ad589daac286d8f0a95e", 0x75}, {&(0x7f0000000640)="803c76e4b4a9215c8a24a4883331944e44afaa8c16085f2359d1fecf149b195875b04f981c58430ea223efdbf75e04993e3768d0a5bd6d4355e4af400111e6c0ab5070bfd4322221f08be882161cb8418e61deb2dc872a8b2c93eced10254577b8a95950807b67e305fd52353f349e1b81d18983ae7348ca0354dd1d4f94822bb1adfadb87d7584e049944ab957a3ded92d89c7592d380", 0x97}], 0x2}, 0x20044800) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea608641602f36504001a00381931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb3678a40cb53fc8d8faaafe63e09e8b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001380)=""/266, 0x10a}, {&(0x7f00000014c0)=""/210, 0xd2}, {&(0x7f0000003980)=""/4039, 0xfc7}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f00000008c0)=""/203, 0xcb}, {&(0x7f0000000000)=""/112, 0x70}], 0x9}, 0x12000) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0xfffffffffffffffd, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0xc83c, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[], 0x12) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x7) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f0000000540)=""/139) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 2.554402834s ago: executing program 1 (id=2808): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x10, 0xfc, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x9, 0x1, 0x0, 0x80000001, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd63"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 2.401683851s ago: executing program 1 (id=2811): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x50}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x3, 0x2, 0x6, 0x5, 0x0, 0xbf8, 0x100, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000180), 0x14}, 0x8090, 0x87, 0x1, 0x2, 0x5, 0x8, 0xfff8, 0x0, 0x2, 0x0, 0x4}, r4, 0x3, r0, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x50}, 0x122) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x3, 0x2, 0x6, 0x5, 0x0, 0xbf8, 0x100, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000180), 0x14}, 0x8090, 0x87, 0x1, 0x2, 0x5, 0x8, 0xfff8, 0x0, 0x2, 0x0, 0x4}, r4, 0x3, r0, 0x2) (async) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x2) (async) 1.955079653s ago: executing program 2 (id=2813): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000007c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000188eb21036c1ac0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0], 0x96) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/58, 0x3a}], 0x1, &(0x7f0000000580)=""/139, 0x8b}, 0x12000) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) 1.850634228s ago: executing program 0 (id=2815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac"], 0xfdef) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000321053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b000000000000000001"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8e16cb239da51e7f218eff00", @ANYRES32, @ANYBLOB="2000000000000000950000000000000045"], 0x0}, 0x90) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc15afde5b3403f50018bf3a8", 0x10}], 0x1}, 0x20040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x571302, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r5, 0x0, 0x0) 1.662731358s ago: executing program 0 (id=2817): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4802, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)=ANY=[], 0xfffffffffffffd63) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000080000000000", @ANYBLOB="0000ffffffffddffdcfffffffffd2e3d"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.662523258s ago: executing program 1 (id=2818): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r3 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r0, 0x0, 0x3, &(0x7f0000000000)=')}\x00'}, 0x30) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000011580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) 1.662356158s ago: executing program 2 (id=2819): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040), 0x0, 0x0, 0x0}, 0x38) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a", 0xa}], 0x1}, 0x0) 1.662154518s ago: executing program 4 (id=2820): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000130000000000000000"], 0x48) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x7fffffff}, 0x28) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) close(0x3) 1.570404062s ago: executing program 2 (id=2821): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000c40)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080040}, 0x20051) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) write$cgroup_subtree(r1, 0x0, 0xfe33) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10042) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) r5 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbfffd, 0x1, @perf_bp={0x0, 0xc}, 0x110e44, 0x10000, 0x0, 0x5, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r5, 0x9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x40000000000001}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 609.828459ms ago: executing program 0 (id=2822): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) 482.456806ms ago: executing program 2 (id=2823): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x10, 0xfc, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x9, 0x1, 0x0, 0x80000001, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd63"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 466.043727ms ago: executing program 4 (id=2824): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1", 0x6c}], 0x1}, 0x40) 430.406198ms ago: executing program 0 (id=2825): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a80016fc200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700) 354.550822ms ago: executing program 1 (id=2826): r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg$kcm(r3, &(0x7f00000041c0)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 329.867593ms ago: executing program 2 (id=2827): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup(0xffffffffffffffff, &(0x7f00000007c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/58, 0x3a}], 0x1, &(0x7f0000000580)=""/139, 0x8b}, 0x12000) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 302.702254ms ago: executing program 4 (id=2828): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x40800) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) ioctl$TUNSETVNETBE(r2, 0x400454de, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x36500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009000000", @ANYRES32, @ANYBLOB="00000000000021b167", @ANYBLOB], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000006000000800000000000000022", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)={r6}) 246.727327ms ago: executing program 0 (id=2829): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400407}, [@generic={0x69, 0x1, 0x1, 0x7e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f00000002c0), 0x0}, 0x20) 143.529352ms ago: executing program 0 (id=2830): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2042) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000005f11000000000000731a03ff00001b009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x23}, 0x22) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000100), &(0x7f0000000140)=r8}, 0x20) recvmsg$kcm(r9, &(0x7f00000008c0)={&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)=""/36, 0x24}], 0x2, &(0x7f0000000840)=""/81, 0x51}, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000007c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x1, 0x44, 0x6, 0x10800, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0xd}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x16, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe6d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xde69}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x89}]}, 0x0, 0x40, 0xe, &(0x7f0000000180)=""/14, 0x40f00, 0x8, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xa, 0x95, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r7, r10, r12], 0x0, 0x10, 0x4}, 0x94) 143.005032ms ago: executing program 1 (id=2831): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040), 0x0, 0x0, 0x0}, 0x38) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a", 0xa}], 0x1}, 0x0) 50.278027ms ago: executing program 4 (id=2832): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000000) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x7, 0x0, 0xa05e60a690a7a8a9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3000) 35.426208ms ago: executing program 2 (id=2833): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000005c0)='cgroup.threads\x00', 0x2, 0x0) r4 = syz_clone(0x8000000, &(0x7f0000000240)="3162a9ceda7808ce5c49a0b13aa0ee97b3a4d5d4115351115a6dbb288fba49048d7dd6a0d3211962ce4020c9f91e13aaa2648403ae2bb621ae3567d75580c6b7d8355291a182cf37539f76e120fa82645ff362e112cc0d22e431b449238295b70e5c2fb708ebf2b7eeeac8ad29dacbaabca609b23b60bd3f56e3558b97261aa2b4037c464ec722f8d8f38fb173620f5c6770", 0x92, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000340)="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") write$cgroup_pid(r3, &(0x7f0000000440)=r4, 0x12) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x10d, 0x11, &(0x7f0000000000), 0x4) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a00000008000000010000004000000046000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000000300"/28], 0x50) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x63, 0x5, 0x10, 0x5, 0x0, 0x1, 0x33a07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x500, 0x4}, 0x11f384, 0x80000000000, 0x100, 0x8, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x1bffffffffffffc}, 0x0, 0x8001, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 1 (id=2834): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3c17, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x11, r1}, {}, {}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x10000000}}, @exit], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) kernel console output (not intermixed with test programs): 8c/0x4c0 [ 312.807878][ T8879] should_failslab+0x5/0x20 [ 312.812835][ T8879] slab_pre_alloc_hook+0x51/0xc0 [ 312.817843][ T8879] kmem_cache_alloc_trace+0x47/0x2a0 [ 312.823177][ T8879] ? apparmor_sk_alloc_security+0x74/0x100 [ 312.829398][ T8879] apparmor_sk_alloc_security+0x74/0x100 [ 312.835301][ T8879] security_sk_alloc+0x6a/0xa0 [ 312.840210][ T8879] sk_prot_alloc+0x101/0x210 [ 312.845114][ T8879] ? sk_alloc+0x1d/0x310 [ 312.849503][ T8879] sk_alloc+0x2f/0x310 [ 312.853972][ T8879] bpf_prog_test_run_skb+0x240/0x1180 [ 312.859706][ T8879] ? __fget_files+0x40f/0x480 [ 312.864690][ T8879] ? cpu_online+0x60/0x60 [ 312.869399][ T8879] bpf_prog_test_run+0x31e/0x390 [ 312.874820][ T8879] __sys_bpf+0x5a5/0x6f0 [ 312.879569][ T8879] ? bpf_link_show_fdinfo+0x380/0x380 [ 312.885439][ T8879] ? rcu_nmi_exit+0x6f/0xf0 [ 312.890406][ T8879] ? vtime_user_exit+0x2c8/0x3e0 [ 312.895575][ T8879] __x64_sys_bpf+0x78/0x90 [ 312.900463][ T8879] do_syscall_64+0x4c/0xa0 [ 312.905019][ T8879] ? clear_bhb_loop+0x30/0x80 [ 312.909986][ T8879] ? clear_bhb_loop+0x30/0x80 [ 312.914872][ T8879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.920890][ T8879] RIP: 0033:0x7f7f3289e799 [ 312.925340][ T8879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.945687][ T8879] RSP: 002b:00007f7f30af8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.954518][ T8879] RAX: ffffffffffffffda RBX: 00007f7f32b17fa0 RCX: 00007f7f3289e799 [ 312.962835][ T8879] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 312.970916][ T8879] RBP: 00007f7f30af8090 R08: 0000000000000000 R09: 0000000000000000 [ 312.979999][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.988105][ T8879] R13: 00007f7f32b18038 R14: 00007f7f32b17fa0 R15: 00007ffd58baf618 [ 312.996305][ T8879] [ 313.258343][ T8892] validate_nla: 4 callbacks suppressed [ 313.258362][ T8892] netlink: 'syz.4.1582': attribute type 21 has an invalid length. [ 313.312993][ T8892] __nla_validate_parse: 3 callbacks suppressed [ 313.313018][ T8892] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1582'. [ 313.513999][ T8892] netlink: 'syz.4.1582': attribute type 4 has an invalid length. [ 313.588016][ T8892] netlink: 'syz.4.1582': attribute type 3 has an invalid length. [ 313.634978][ T8892] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1582'. [ 313.684854][ T8890] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 314.143538][ T8921] sctp: [Deprecated]: syz.4.1593 (pid 8921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.143538][ T8921] Use struct sctp_sack_info instead [ 315.222197][ T8945] netlink: 'syz.1.1604': attribute type 21 has an invalid length. [ 315.311043][ T8945] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1604'. [ 315.376060][ T8945] netlink: 'syz.1.1604': attribute type 4 has an invalid length. [ 315.532044][ T8945] netlink: 'syz.1.1604': attribute type 3 has an invalid length. [ 315.611003][ T8945] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1604'. [ 315.902876][ T8957] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.1608'. [ 315.920381][ T9] wlan1: Trigger new scan to find an IBSS to join [ 315.977001][ T8959] netlink: 'syz.2.1608': attribute type 16 has an invalid length. [ 316.054036][ T8959] netlink: 'syz.2.1608': attribute type 21 has an invalid length. [ 316.110312][ T8959] netlink: 'syz.2.1608': attribute type 25 has an invalid length. [ 316.133677][ T8959] netlink: 'syz.2.1608': attribute type 27 has an invalid length. [ 316.196393][ T8959] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.1608'. [ 317.182433][ T8997] FAULT_INJECTION: forcing a failure. [ 317.182433][ T8997] name failslab, interval 1, probability 0, space 0, times 0 [ 317.323402][ T8997] CPU: 1 PID: 8997 Comm: syz.2.1623 Not tainted syzkaller #0 [ 317.335000][ T8997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.348132][ T8997] Call Trace: [ 317.352740][ T8997] [ 317.356065][ T8997] dump_stack_lvl+0x188/0x250 [ 317.362126][ T8997] ? show_regs_print_info+0x20/0x20 [ 317.368760][ T8997] ? load_image+0x400/0x400 [ 317.376024][ T8997] ? __might_sleep+0xf0/0xf0 [ 317.381693][ T8997] ? __lock_acquire+0x7d10/0x7d10 [ 317.390983][ T8997] should_fail+0x38c/0x4c0 [ 317.400753][ T8997] should_failslab+0x5/0x20 [ 317.408321][ T8997] slab_pre_alloc_hook+0x51/0xc0 [ 317.415931][ T8997] __kmalloc+0x6b/0x330 [ 317.424735][ T8997] ? bpf_test_init+0xf8/0x1b0 [ 317.431123][ T8997] ? __lock_acquire+0x7d10/0x7d10 [ 317.441010][ T8997] bpf_test_init+0xf8/0x1b0 [ 317.446281][ T8997] bpf_prog_test_run_skb+0x181/0x1180 [ 317.453033][ T8997] ? __fget_files+0x40f/0x480 [ 317.458823][ T8997] ? cpu_online+0x60/0x60 [ 317.463794][ T8997] bpf_prog_test_run+0x31e/0x390 [ 317.469702][ T8997] __sys_bpf+0x5a5/0x6f0 [ 317.474272][ T8997] ? bpf_link_show_fdinfo+0x380/0x380 [ 317.480422][ T8997] ? rcu_nmi_exit+0x6f/0xf0 [ 317.486086][ T8997] ? vtime_user_exit+0x2c8/0x3e0 [ 317.493214][ T8997] __x64_sys_bpf+0x78/0x90 [ 317.499231][ T8997] do_syscall_64+0x4c/0xa0 [ 317.504249][ T8997] ? clear_bhb_loop+0x30/0x80 [ 317.509408][ T8997] ? clear_bhb_loop+0x30/0x80 [ 317.515921][ T8997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.524027][ T8997] RIP: 0033:0x7f0adb3ab799 [ 317.530380][ T8997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.555843][ T8997] RSP: 002b:00007f0ad9605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 317.565938][ T8997] RAX: ffffffffffffffda RBX: 00007f0adb624fa0 RCX: 00007f0adb3ab799 [ 317.575203][ T8997] RDX: 0000000000000050 RSI: 0000200000001300 RDI: 000000000000000a [ 317.583837][ T8997] RBP: 00007f0ad9605090 R08: 0000000000000000 R09: 0000000000000000 [ 317.594366][ T8997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.603052][ T8997] R13: 00007f0adb625038 R14: 00007f0adb624fa0 R15: 00007ffc1fd4ee68 [ 317.613167][ T8997] [ 317.781198][ T9005] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1625'. [ 317.830069][ T9005] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1625'. [ 319.169929][ T9034] validate_nla: 6 callbacks suppressed [ 319.169949][ T9034] netlink: 'syz.3.1637': attribute type 4 has an invalid length. [ 319.311977][ T9040] netlink: 'syz.0.1639': attribute type 40 has an invalid length. [ 319.512851][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.613367][ T9054] netlink: 'syz.2.1643': attribute type 21 has an invalid length. [ 319.665800][ T9054] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1643'. [ 319.750240][ T9054] netlink: 'syz.2.1643': attribute type 4 has an invalid length. [ 319.790136][ T9054] netlink: 'syz.2.1643': attribute type 3 has an invalid length. [ 319.841970][ T9054] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1643'. [ 320.370379][ T9072] netlink: 'syz.3.1648': attribute type 21 has an invalid length. [ 320.880099][ T154] wlan1: Trigger new scan to find an IBSS to join [ 320.971393][ T9097] netlink: 'syz.3.1660': attribute type 21 has an invalid length. [ 320.991056][ T9097] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1660'. [ 321.010370][ T9097] netlink: 'syz.3.1660': attribute type 4 has an invalid length. [ 321.036259][ T9097] netlink: 'syz.3.1660': attribute type 3 has an invalid length. [ 321.050809][ T9097] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1660'. [ 321.348882][ T9104] netlink: 'syz.2.1662': attribute type 1 has an invalid length. [ 321.374453][ T9108] FAULT_INJECTION: forcing a failure. [ 321.374453][ T9108] name failslab, interval 1, probability 0, space 0, times 0 [ 321.379351][ T9104] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1662'. [ 321.407814][ T9108] CPU: 0 PID: 9108 Comm: syz.3.1663 Not tainted syzkaller #0 [ 321.415376][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.426091][ T9108] Call Trace: [ 321.429625][ T9108] [ 321.432596][ T9108] dump_stack_lvl+0x188/0x250 [ 321.437326][ T9108] ? show_regs_print_info+0x20/0x20 [ 321.442582][ T9108] ? load_image+0x400/0x400 [ 321.447366][ T9108] ? __might_sleep+0xf0/0xf0 [ 321.452434][ T9108] ? __lock_acquire+0x7d10/0x7d10 [ 321.457506][ T9108] ? mark_lock+0x94/0x320 [ 321.461876][ T9108] should_fail+0x38c/0x4c0 [ 321.466475][ T9108] should_failslab+0x5/0x20 [ 321.471184][ T9108] slab_pre_alloc_hook+0x51/0xc0 [ 321.476365][ T9108] __kmalloc+0x6b/0x330 [ 321.480562][ T9108] ? tomoyo_realpath_from_path+0x118/0x610 [ 321.486414][ T9108] tomoyo_realpath_from_path+0x118/0x610 [ 321.492205][ T9108] tomoyo_path_number_perm+0x242/0x660 [ 321.498010][ T9108] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 321.505008][ T9108] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 321.510590][ T9108] security_file_ioctl+0x6c/0xa0 [ 321.515864][ T9108] __se_sys_ioctl+0x48/0x170 [ 321.520836][ T9108] do_syscall_64+0x4c/0xa0 [ 321.525641][ T9108] ? clear_bhb_loop+0x30/0x80 [ 321.530527][ T9108] ? clear_bhb_loop+0x30/0x80 [ 321.535526][ T9108] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.541595][ T9108] RIP: 0033:0x7f0fb5613799 [ 321.546262][ T9108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.566608][ T9108] RSP: 002b:00007f0fb386d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.575213][ T9108] RAX: ffffffffffffffda RBX: 00007f0fb588cfa0 RCX: 00007f0fb5613799 [ 321.583423][ T9108] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 321.591624][ T9108] RBP: 00007f0fb386d090 R08: 0000000000000000 R09: 0000000000000000 [ 321.600218][ T9108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.608508][ T9108] R13: 00007f0fb588d038 R14: 00007f0fb588cfa0 R15: 00007ffea870eb68 [ 321.616620][ T9108] [ 321.637847][ T9108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 321.830188][ T154] wlan1: Creating new IBSS network, BSSID 2a:20:85:48:4b:25 [ 322.057509][ T9127] FAULT_INJECTION: forcing a failure. [ 322.057509][ T9127] name failslab, interval 1, probability 0, space 0, times 0 [ 322.138717][ T9127] CPU: 0 PID: 9127 Comm: syz.2.1671 Not tainted syzkaller #0 [ 322.146568][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.156962][ T9127] Call Trace: [ 322.160371][ T9127] [ 322.163495][ T9127] dump_stack_lvl+0x188/0x250 [ 322.168708][ T9127] ? show_regs_print_info+0x20/0x20 [ 322.174600][ T9127] ? load_image+0x400/0x400 [ 322.179408][ T9127] should_fail+0x38c/0x4c0 [ 322.184524][ T9127] should_failslab+0x5/0x20 [ 322.189377][ T9127] slab_pre_alloc_hook+0x51/0xc0 [ 322.195808][ T9127] ? skb_clone+0x1bd/0x350 [ 322.200711][ T9127] kmem_cache_alloc+0x3d/0x290 [ 322.206479][ T9127] skb_clone+0x1bd/0x350 [ 322.211822][ T9127] bpf_clone_redirect+0x15f/0x470 [ 322.217340][ T9127] bpf_prog_973cd02a7a0e8181+0x56/0x954 [ 322.223960][ T9127] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 322.230830][ T9127] ? lock_chain_count+0x20/0x20 [ 322.236485][ T9127] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 322.243091][ T9127] ? lockdep_hardirqs_on+0x94/0x140 [ 322.248678][ T9127] ? ktime_get+0x7b/0x270 [ 322.253240][ T9127] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 322.260070][ T9127] ? ktime_get_real_ts64+0x440/0x440 [ 322.266119][ T9127] ? read_lock_is_recursive+0x10/0x10 [ 322.271558][ T9127] ? __cant_sleep+0x220/0x220 [ 322.276399][ T9127] ? bpf_test_timer_continue+0x13d/0x380 [ 322.283321][ T9127] bpf_test_run+0x2a8/0x800 [ 322.288063][ T9127] ? convert___skb_to_skb+0x4c0/0x4c0 [ 322.293498][ T9127] ? eth_get_headlen+0x200/0x200 [ 322.298698][ T9127] ? __build_skb+0x1e2/0x2e0 [ 322.303348][ T9127] ? convert___skb_to_skb+0x3d/0x4c0 [ 322.308786][ T9127] bpf_prog_test_run_skb+0x9cc/0x1180 [ 322.314590][ T9127] ? cpu_online+0x60/0x60 [ 322.319455][ T9127] bpf_prog_test_run+0x31e/0x390 [ 322.324554][ T9127] __sys_bpf+0x5a5/0x6f0 [ 322.329063][ T9127] ? bpf_link_show_fdinfo+0x380/0x380 [ 322.334688][ T9127] ? vtime_user_exit+0x2c8/0x3e0 [ 322.340422][ T9127] __x64_sys_bpf+0x78/0x90 [ 322.345122][ T9127] do_syscall_64+0x4c/0xa0 [ 322.349729][ T9127] ? clear_bhb_loop+0x30/0x80 [ 322.354653][ T9127] ? clear_bhb_loop+0x30/0x80 [ 322.359480][ T9127] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.365932][ T9127] RIP: 0033:0x7f0adb3ab799 [ 322.370503][ T9127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.392108][ T9127] RSP: 002b:00007f0ad9605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.401103][ T9127] RAX: ffffffffffffffda RBX: 00007f0adb624fa0 RCX: 00007f0adb3ab799 [ 322.409565][ T9127] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 322.417962][ T9127] RBP: 00007f0ad9605090 R08: 0000000000000000 R09: 0000000000000000 [ 322.426428][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.434946][ T9127] R13: 00007f0adb625038 R14: 00007f0adb624fa0 R15: 00007ffc1fd4ee68 [ 322.443631][ T9127] [ 323.068244][ T9145] tap0: tun_chr_ioctl cmd 1074025677 [ 323.096636][ T9145] tap0: linktype set to 785 [ 323.284517][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.291057][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.307609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 323.342820][ T9166] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1684'. [ 323.402854][ T9166] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 323.458654][ T9166] CPU: 0 PID: 9166 Comm: syz.3.1684 Not tainted syzkaller #0 [ 323.466470][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.476962][ T9166] Call Trace: [ 323.480386][ T9166] [ 323.483363][ T9166] dump_stack_lvl+0x188/0x250 [ 323.488287][ T9166] ? show_regs_print_info+0x20/0x20 [ 323.493635][ T9166] ? load_image+0x400/0x400 [ 323.498377][ T9166] sysfs_warn_dup+0x8a/0xa0 [ 323.502941][ T9166] sysfs_do_create_link_sd+0xc0/0x110 [ 323.508669][ T9166] device_add+0x7ed/0xfb0 [ 323.513084][ T9166] wiphy_register+0x1e81/0x2c30 [ 323.518210][ T9166] ? cfg80211_event_work+0x40/0x40 [ 323.523464][ T9166] ? minstrel_ht_alloc+0x808/0x980 [ 323.528790][ T9166] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 323.535004][ T9166] ieee80211_register_hw+0x2aa1/0x3af0 [ 323.540723][ T9166] ? ieee80211_tasklet_handler+0x20/0x20 [ 323.546646][ T9166] ? rcu_is_watching+0x11/0xa0 [ 323.551573][ T9166] ? memset+0x1e/0x40 [ 323.555848][ T9166] ? hrtimer_init+0x10c/0x220 [ 323.560581][ T9166] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 323.566378][ T9166] hwsim_new_radio_nl+0xa6f/0xc40 [ 323.571476][ T9166] genl_rcv_msg+0xcea/0xf90 [ 323.576068][ T9166] ? genl_bind+0x380/0x380 [ 323.580646][ T9166] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 323.586070][ T9166] ? verify_lock_unused+0x140/0x140 [ 323.591444][ T9166] ? perf_trace_lock_acquire+0xed/0x3e0 [ 323.597369][ T9166] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 323.604171][ T9166] ? perf_trace_lock+0xe4/0x390 [ 323.609431][ T9166] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 323.616275][ T9166] netlink_rcv_skb+0x1f5/0x440 [ 323.621170][ T9166] ? genl_bind+0x380/0x380 [ 323.626146][ T9166] ? netlink_ack+0xb50/0xb50 [ 323.630965][ T9166] ? __lock_acquire+0x7d10/0x7d10 [ 323.636031][ T9166] ? down_read+0x1aa/0x2e0 [ 323.640994][ T9166] genl_rcv+0x24/0x40 [ 323.645065][ T9166] netlink_unicast+0x774/0x920 [ 323.650028][ T9166] netlink_sendmsg+0x8ba/0xbe0 [ 323.655443][ T9166] ? netlink_getsockopt+0x570/0x570 [ 323.660964][ T9166] ? aa_sock_msg_perm+0x94/0x150 [ 323.665945][ T9166] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 323.671709][ T9166] ? security_socket_sendmsg+0x7c/0xa0 [ 323.677796][ T9166] ? netlink_getsockopt+0x570/0x570 [ 323.683516][ T9166] ____sys_sendmsg+0x5b7/0x8f0 [ 323.688607][ T9166] ? __sys_sendmsg_sock+0x30/0x30 [ 323.693812][ T9166] ? import_iovec+0x6f/0xa0 [ 323.698452][ T9166] ___sys_sendmsg+0x236/0x2e0 [ 323.703171][ T9166] ? __sys_sendmsg+0x2a0/0x2a0 [ 323.707976][ T9166] ? trace_event_raw_event_lock+0x270/0x270 [ 323.713930][ T9166] __se_sys_sendmsg+0x1af/0x290 [ 323.719169][ T9166] ? __x64_sys_sendmsg+0x80/0x80 [ 323.724396][ T9166] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 323.730615][ T9166] ? lockdep_hardirqs_on+0x94/0x140 [ 323.735937][ T9166] do_syscall_64+0x4c/0xa0 [ 323.740390][ T9166] ? clear_bhb_loop+0x30/0x80 [ 323.745088][ T9166] ? clear_bhb_loop+0x30/0x80 [ 323.749965][ T9166] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.755989][ T9166] RIP: 0033:0x7f0fb5613799 [ 323.760733][ T9166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.780709][ T9166] RSP: 002b:00007f0fb386d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.789330][ T9166] RAX: ffffffffffffffda RBX: 00007f0fb588cfa0 RCX: 00007f0fb5613799 [ 323.797786][ T9166] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 323.806543][ T9166] RBP: 00007f0fb56a9c99 R08: 0000000000000000 R09: 0000000000000000 [ 323.815149][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.823885][ T9166] R13: 00007f0fb588d038 R14: 00007f0fb588cfa0 R15: 00007ffea870eb68 [ 323.832021][ T9166] [ 324.176438][ T9177] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1688'. [ 324.260090][ T9177] validate_nla: 2 callbacks suppressed [ 324.260124][ T9177] netlink: 'syz.4.1688': attribute type 4 has an invalid length. [ 324.473903][ T9187] netlink: 'syz.3.1689': attribute type 9 has an invalid length. [ 324.485187][ T9177] netlink: 'syz.4.1688': attribute type 3 has an invalid length. [ 324.495165][ T9187] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1689'. [ 324.521493][ T9177] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1688'. [ 325.002551][ T9211] FAULT_INJECTION: forcing a failure. [ 325.002551][ T9211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.040141][ T9211] CPU: 0 PID: 9211 Comm: syz.2.1701 Not tainted syzkaller #0 [ 325.048785][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.059681][ T9211] Call Trace: [ 325.063004][ T9211] [ 325.066407][ T9211] dump_stack_lvl+0x188/0x250 [ 325.071577][ T9211] ? show_regs_print_info+0x20/0x20 [ 325.076927][ T9211] ? load_image+0x400/0x400 [ 325.081485][ T9211] ? __lock_acquire+0x7d10/0x7d10 [ 325.086698][ T9211] ? perf_trace_lock_acquire+0xed/0x3e0 [ 325.092380][ T9211] should_fail+0x38c/0x4c0 [ 325.097181][ T9211] _copy_from_user+0x2e/0x170 [ 325.102700][ T9211] __copy_msghdr_from_user+0xc9/0x630 [ 325.108528][ T9211] ? verify_lock_unused+0x140/0x140 [ 325.114723][ T9211] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 325.120526][ T9211] ___sys_sendmsg+0x19a/0x2e0 [ 325.125724][ T9211] ? __sys_sendmsg+0x2a0/0x2a0 [ 325.130800][ T9211] ? trace_event_raw_event_lock+0x270/0x270 [ 325.137334][ T9211] ? vfs_write+0x8b2/0xd60 [ 325.142346][ T9211] __se_sys_sendmsg+0x1af/0x290 [ 325.148188][ T9211] ? __x64_sys_sendmsg+0x80/0x80 [ 325.155010][ T9211] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 325.161167][ T9211] ? lockdep_hardirqs_on+0x94/0x140 [ 325.166785][ T9211] do_syscall_64+0x4c/0xa0 [ 325.172425][ T9211] ? clear_bhb_loop+0x30/0x80 [ 325.177276][ T9211] ? clear_bhb_loop+0x30/0x80 [ 325.182349][ T9211] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.188969][ T9211] RIP: 0033:0x7f0adb3ab799 [ 325.193786][ T9211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.214944][ T9211] RSP: 002b:00007f0ad9605028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.224351][ T9211] RAX: ffffffffffffffda RBX: 00007f0adb624fa0 RCX: 00007f0adb3ab799 [ 325.232966][ T9211] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000003 [ 325.241389][ T9211] RBP: 00007f0ad9605090 R08: 0000000000000000 R09: 0000000000000000 [ 325.249483][ T9211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.258188][ T9211] R13: 00007f0adb625038 R14: 00007f0adb624fa0 R15: 00007ffc1fd4ee68 [ 325.267005][ T9211] [ 325.361989][ C1] Illegal XDP return value 16128, expect packet loss! [ 325.769500][ T9218] FAULT_INJECTION: forcing a failure. [ 325.769500][ T9218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.850023][ T9218] CPU: 1 PID: 9218 Comm: syz.3.1704 Not tainted syzkaller #0 [ 325.858022][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.868388][ T9218] Call Trace: [ 325.872062][ T9218] [ 325.875115][ T9218] dump_stack_lvl+0x188/0x250 [ 325.879937][ T9218] ? show_regs_print_info+0x20/0x20 [ 325.885218][ T9218] ? load_image+0x400/0x400 [ 325.890017][ T9218] ? __might_sleep+0xf0/0xf0 [ 325.894651][ T9218] ? __lock_acquire+0x7d10/0x7d10 [ 325.899983][ T9218] ? mark_lock+0x94/0x320 [ 325.904810][ T9218] should_fail+0x38c/0x4c0 [ 325.909298][ T9218] copy_page_from_iter+0x33c/0x760 [ 325.914664][ T9218] pipe_write+0x96f/0x1aa0 [ 325.919152][ T9218] ? pipe_write+0x141/0x1aa0 [ 325.924507][ T9218] ? pipe_read+0x1260/0x1260 [ 325.929581][ T9218] ? end_current_label_crit_section+0x14b/0x170 [ 325.936065][ T9218] ? memset+0x1e/0x40 [ 325.940212][ T9218] ? iov_iter_init+0xb4/0x170 [ 325.945127][ T9218] vfs_write+0x745/0xd60 [ 325.949437][ T9218] ? file_end_write+0x250/0x250 [ 325.954354][ T9218] ? __fget_files+0x40f/0x480 [ 325.959546][ T9218] ? __fdget_pos+0x1e2/0x370 [ 325.964274][ T9218] ? ksys_write+0x71/0x260 [ 325.968749][ T9218] ksys_write+0x152/0x260 [ 325.973213][ T9218] ? __ia32_sys_read+0x80/0x80 [ 325.978108][ T9218] ? lockdep_hardirqs_on+0x94/0x140 [ 325.983379][ T9218] do_syscall_64+0x4c/0xa0 [ 325.988026][ T9218] ? clear_bhb_loop+0x30/0x80 [ 325.993006][ T9218] ? clear_bhb_loop+0x30/0x80 [ 325.997914][ T9218] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.003941][ T9218] RIP: 0033:0x7f0fb5613799 [ 326.008406][ T9218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.029771][ T9218] RSP: 002b:00007f0fb386d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.038562][ T9218] RAX: ffffffffffffffda RBX: 00007f0fb588cfa0 RCX: 00007f0fb5613799 [ 326.047287][ T9218] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000000 [ 326.056076][ T9218] RBP: 00007f0fb386d090 R08: 0000000000000000 R09: 0000000000000000 [ 326.064955][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.073976][ T9218] R13: 00007f0fb588d038 R14: 00007f0fb588cfa0 R15: 00007ffea870eb68 [ 326.082649][ T9218] [ 326.407013][ T9230] netlink: 'syz.0.1707': attribute type 21 has an invalid length. [ 326.426961][ T9230] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1707'. [ 326.480151][ T9230] netlink: 'syz.0.1707': attribute type 4 has an invalid length. [ 326.501033][ T9230] netlink: 'syz.0.1707': attribute type 3 has an invalid length. [ 326.509528][ T9230] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1707'. [ 327.499376][ T9254] FAULT_INJECTION: forcing a failure. [ 327.499376][ T9254] name failslab, interval 1, probability 0, space 0, times 0 [ 327.521738][ T9256] netlink: 'syz.4.1716': attribute type 2 has an invalid length. [ 327.530289][ T9254] CPU: 1 PID: 9254 Comm: syz.3.1715 Not tainted syzkaller #0 [ 327.537999][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.548561][ T9254] Call Trace: [ 327.551971][ T9254] [ 327.554949][ T9254] dump_stack_lvl+0x188/0x250 [ 327.555819][ T9256] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1716'. [ 327.559783][ T9254] ? show_regs_print_info+0x20/0x20 [ 327.559820][ T9254] ? load_image+0x400/0x400 [ 327.559843][ T9254] ? __might_sleep+0xf0/0xf0 [ 327.559865][ T9254] ? __lock_acquire+0x7d10/0x7d10 [ 327.559898][ T9254] should_fail+0x38c/0x4c0 [ 327.594782][ T9254] should_failslab+0x5/0x20 [ 327.600672][ T9254] slab_pre_alloc_hook+0x51/0xc0 [ 327.607376][ T9254] __kmalloc+0x6b/0x330 [ 327.611886][ T9254] ? bpf_test_init+0xf8/0x1b0 [ 327.616864][ T9254] bpf_test_init+0xf8/0x1b0 [ 327.623976][ T9254] bpf_prog_test_run_skb+0x181/0x1180 [ 327.629518][ T9254] ? lockdep_hardirqs_on+0x94/0x140 [ 327.635080][ T9254] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 327.641773][ T9254] ? cpu_online+0x60/0x60 [ 327.646333][ T9254] bpf_prog_test_run+0x31e/0x390 [ 327.652028][ T9254] __sys_bpf+0x5a5/0x6f0 [ 327.656600][ T9254] ? bpf_link_show_fdinfo+0x380/0x380 [ 327.662417][ T9254] __x64_sys_bpf+0x78/0x90 [ 327.667135][ T9254] do_syscall_64+0x4c/0xa0 [ 327.671933][ T9254] ? clear_bhb_loop+0x30/0x80 [ 327.676663][ T9254] ? clear_bhb_loop+0x30/0x80 [ 327.681606][ T9254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 327.687734][ T9254] RIP: 0033:0x7f0fb5613799 [ 327.692713][ T9254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.713312][ T9254] RSP: 002b:00007f0fb386d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.722458][ T9254] RAX: ffffffffffffffda RBX: 00007f0fb588cfa0 RCX: 00007f0fb5613799 [ 327.730962][ T9254] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 327.739076][ T9254] RBP: 00007f0fb386d090 R08: 0000000000000000 R09: 0000000000000000 [ 327.747647][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.755913][ T9254] R13: 00007f0fb588d038 R14: 00007f0fb588cfa0 R15: 00007ffea870eb68 [ 327.764833][ T9254] [ 327.969081][ T9262] bridge0: port 3(team0) entered disabled state [ 328.048997][ T9262] device bridge_slave_1 left promiscuous mode [ 328.128221][ T9262] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.323520][ T9262] device bridge_slave_0 left promiscuous mode [ 328.341640][ T9262] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.436208][ T9262] bond0: (slave bridge0): Releasing backup interface [ 328.454981][ T9262] device bridge0 left promiscuous mode [ 328.673578][ T9269] netlink: 'syz.3.1721': attribute type 21 has an invalid length. [ 328.717180][ T9269] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1721'. [ 328.741610][ T9269] netlink: 'syz.3.1721': attribute type 4 has an invalid length. [ 328.767900][ T9269] netlink: 'syz.3.1721': attribute type 3 has an invalid length. [ 328.777554][ T9269] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1721'. [ 328.794475][ T9275] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.803605][ T9275] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1722'. [ 329.273428][ T9297] FAULT_INJECTION: forcing a failure. [ 329.273428][ T9297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.388031][ T9297] CPU: 1 PID: 9297 Comm: syz.3.1730 Not tainted syzkaller #0 [ 329.397481][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.410420][ T9297] Call Trace: [ 329.414802][ T9297] [ 329.418038][ T9297] dump_stack_lvl+0x188/0x250 [ 329.423759][ T9297] ? show_regs_print_info+0x20/0x20 [ 329.429168][ T9297] ? load_image+0x400/0x400 [ 329.433904][ T9297] ? __lock_acquire+0x7d10/0x7d10 [ 329.439847][ T9297] should_fail+0x38c/0x4c0 [ 329.444780][ T9297] _copy_from_user+0x2e/0x170 [ 329.450394][ T9297] iovec_from_user+0x142/0x370 [ 329.455394][ T9297] __import_iovec+0x70/0x490 [ 329.460391][ T9297] import_iovec+0x6f/0xa0 [ 329.464973][ T9297] ___sys_sendmsg+0x1fd/0x2e0 [ 329.469977][ T9297] ? __sys_sendmsg+0x2a0/0x2a0 [ 329.475077][ T9297] ? vfs_write+0x8b2/0xd60 [ 329.479742][ T9297] __se_sys_sendmsg+0x1af/0x290 [ 329.484787][ T9297] ? __x64_sys_sendmsg+0x80/0x80 [ 329.490284][ T9297] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 329.496532][ T9297] ? lockdep_hardirqs_on+0x94/0x140 [ 329.501806][ T9297] do_syscall_64+0x4c/0xa0 [ 329.506696][ T9297] ? clear_bhb_loop+0x30/0x80 [ 329.511692][ T9297] ? clear_bhb_loop+0x30/0x80 [ 329.516571][ T9297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 329.523032][ T9297] RIP: 0033:0x7f0fb5613799 [ 329.527772][ T9297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.548345][ T9297] RSP: 002b:00007f0fb386d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.557302][ T9297] RAX: ffffffffffffffda RBX: 00007f0fb588cfa0 RCX: 00007f0fb5613799 [ 329.566034][ T9297] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 329.574445][ T9297] RBP: 00007f0fb386d090 R08: 0000000000000000 R09: 0000000000000000 [ 329.582632][ T9297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.591464][ T9297] R13: 00007f0fb588d038 R14: 00007f0fb588cfa0 R15: 00007ffea870eb68 [ 329.600708][ T9297] [ 329.772683][ T9304] device syzkaller0 entered promiscuous mode [ 329.824899][ T9289] delete_channel: no stack [ 329.944068][ T9314] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1736'. [ 329.997471][ T9315] netlink: 'syz.1.1737': attribute type 21 has an invalid length. [ 330.060910][ T9315] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1737'. [ 330.107645][ T9315] netlink: 'syz.1.1737': attribute type 4 has an invalid length. [ 330.164497][ T9315] netlink: 'syz.1.1737': attribute type 3 has an invalid length. [ 330.210897][ T9314] openvswitch: netlink: Key type 15645 is out of range max 29 [ 330.266832][ T9315] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1737'. [ 331.435262][ T9364] netlink: 'syz.1.1755': attribute type 21 has an invalid length. [ 331.491950][ T9364] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1755'. [ 331.609839][ T9364] netlink: 'syz.1.1755': attribute type 4 has an invalid length. [ 331.617890][ T9364] netlink: 'syz.1.1755': attribute type 3 has an invalid length. [ 331.723900][ T9364] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1755'. [ 333.206577][ T9409] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1768'. [ 333.294161][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 334.144659][ T9423] netlink: 'syz.0.1774': attribute type 21 has an invalid length. [ 334.180088][ T9423] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1774'. [ 334.212518][ T9423] netlink: 'syz.0.1774': attribute type 4 has an invalid length. [ 334.239819][ T9423] netlink: 'syz.0.1774': attribute type 3 has an invalid length. [ 334.249092][ T9423] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1774'. [ 334.433193][ T9443] netlink: 'syz.2.1777': attribute type 41 has an invalid length. [ 334.445194][ T9443] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1777'. [ 334.474838][ T9443] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 334.872013][ T9462] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1785'. [ 335.380844][ T9469] device wlan0 entered promiscuous mode [ 335.419860][ T9472] netlink: 'syz.2.1788': attribute type 21 has an invalid length. [ 335.476046][ T9472] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1788'. [ 335.509383][ T9472] netlink: 'syz.2.1788': attribute type 4 has an invalid length. [ 335.641458][ T9472] netlink: 'syz.2.1788': attribute type 3 has an invalid length. [ 335.714718][ T9472] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1788'. [ 338.037265][ T9496] netlink: 'syz.3.1798': attribute type 10 has an invalid length. [ 338.190727][ T9502] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1800'. [ 338.247101][ T9507] netlink: 'syz.1.1803': attribute type 21 has an invalid length. [ 338.275647][ T9507] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1803'. [ 338.332864][ T9503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.352863][ T9507] netlink: 'syz.1.1803': attribute type 4 has an invalid length. [ 338.412540][ T9507] netlink: 'syz.1.1803': attribute type 3 has an invalid length. [ 338.461558][ T9507] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1803'. [ 339.132368][ T9521] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1806'. [ 339.620786][ T9533] netlink: 'syz.0.1810': attribute type 10 has an invalid length. [ 339.784729][ T9533] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 340.114384][ T9549] netlink: 'syz.4.1816': attribute type 21 has an invalid length. [ 340.139844][ T9549] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1816'. [ 340.199058][ T9549] netlink: 'syz.4.1816': attribute type 4 has an invalid length. [ 340.261507][ T9549] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1816'. [ 340.905684][ T9564] validate_nla: 1 callbacks suppressed [ 340.905724][ T9564] netlink: 'syz.1.1820': attribute type 7 has an invalid length. [ 340.959985][ T9564] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1820'. [ 341.160727][ T9578] netlink: 'syz.3.1826': attribute type 21 has an invalid length. [ 341.180112][ T9575] netlink: 'syz.0.1825': attribute type 29 has an invalid length. [ 341.197886][ T9582] netlink: 'syz.2.1827': attribute type 1 has an invalid length. [ 341.213348][ T9578] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1826'. [ 341.226471][ T9582] netlink: 'syz.2.1827': attribute type 3 has an invalid length. [ 341.237082][ T9575] netlink: 'syz.0.1825': attribute type 29 has an invalid length. [ 341.253536][ T9582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1827'. [ 341.678572][ T9602] netlink: 'syz.4.1832': attribute type 21 has an invalid length. [ 341.726486][ T9602] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1832'. [ 341.773153][ T9602] netlink: 'syz.4.1832': attribute type 4 has an invalid length. [ 341.786047][ T9602] netlink: 'syz.4.1832': attribute type 3 has an invalid length. [ 341.979321][ T9600] netlink: 'syz.3.1833': attribute type 2 has an invalid length. [ 343.467148][ T9651] __nla_validate_parse: 3 callbacks suppressed [ 343.467403][ T9651] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1851'. [ 343.527688][ T9651] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1851'. [ 343.867692][ T9655] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1852'. [ 343.882245][ T9653] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1852'. [ 345.107116][ T9693] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1860'. [ 345.128677][ T9698] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1867'. [ 345.128773][ T9698] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1867'. [ 345.529425][ T9712] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1872'. [ 346.030507][ T9725] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1877'. [ 346.049022][ T9731] FAULT_INJECTION: forcing a failure. [ 346.049022][ T9731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.070488][ T9733] validate_nla: 10 callbacks suppressed [ 346.070508][ T9733] netlink: 'syz.0.1877': attribute type 2 has an invalid length. [ 346.086399][ T9731] CPU: 1 PID: 9731 Comm: syz.1.1880 Not tainted syzkaller #0 [ 346.095064][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.106406][ T9731] Call Trace: [ 346.110083][ T9731] [ 346.113070][ T9731] dump_stack_lvl+0x188/0x250 [ 346.117963][ T9731] ? show_regs_print_info+0x20/0x20 [ 346.123323][ T9731] ? load_image+0x400/0x400 [ 346.127971][ T9731] ? __lock_acquire+0x7d10/0x7d10 [ 346.133154][ T9731] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 346.139383][ T9731] should_fail+0x38c/0x4c0 [ 346.144127][ T9731] _copy_from_user+0x2e/0x170 [ 346.149320][ T9731] __copy_msghdr_from_user+0xc9/0x630 [ 346.155292][ T9731] ? lock_chain_count+0x20/0x20 [ 346.160321][ T9731] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 346.165801][ T9731] ___sys_sendmsg+0x19a/0x2e0 [ 346.171393][ T9731] ? __sys_sendmsg+0x2a0/0x2a0 [ 346.176346][ T9731] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 346.182356][ T9731] __se_sys_sendmsg+0x1af/0x290 [ 346.187542][ T9731] ? __x64_sys_sendmsg+0x80/0x80 [ 346.193691][ T9731] ? syscall_enter_from_user_mode+0x2a/0x70 [ 346.200032][ T9731] do_syscall_64+0x4c/0xa0 [ 346.205372][ T9731] ? clear_bhb_loop+0x30/0x80 [ 346.210478][ T9731] ? clear_bhb_loop+0x30/0x80 [ 346.215500][ T9731] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 346.221989][ T9731] RIP: 0033:0x7f7f3289e799 [ 346.227006][ T9731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.247880][ T9731] RSP: 002b:00007f7f30af8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.257483][ T9731] RAX: ffffffffffffffda RBX: 00007f7f32b17fa0 RCX: 00007f7f3289e799 [ 346.265506][ T9731] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000008 [ 346.273630][ T9731] RBP: 00007f7f30af8090 R08: 0000000000000000 R09: 0000000000000000 [ 346.282653][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.291209][ T9731] R13: 00007f7f32b18038 R14: 00007f7f32b17fa0 R15: 00007ffd58baf618 [ 346.299335][ T9731] [ 346.381857][ T9733] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1877'. [ 346.983272][ T9740] netlink: 'syz.4.1882': attribute type 21 has an invalid length. [ 347.035783][ T9740] netlink: 'syz.4.1882': attribute type 4 has an invalid length. [ 347.082070][ T9740] netlink: 'syz.4.1882': attribute type 3 has an invalid length. [ 347.275664][ T9750] netlink: 'syz.0.1885': attribute type 10 has an invalid length. [ 347.542376][ T9750] team0: Device vxcan1 is of different type [ 347.915038][ T9765] netlink: 'syz.1.1892': attribute type 3 has an invalid length. [ 348.170430][ T9766] netlink: 'syz.2.1891': attribute type 7 has an invalid length. [ 348.369252][ T9764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.673325][ T9786] netlink: 'syz.3.1898': attribute type 21 has an invalid length. [ 348.744774][ T9786] __nla_validate_parse: 4 callbacks suppressed [ 348.744795][ T9786] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1898'. [ 349.405798][ T9786] netlink: 'syz.3.1898': attribute type 4 has an invalid length. [ 349.416789][ T9780] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1896'. [ 349.450220][ T9786] netlink: 'syz.3.1898': attribute type 3 has an invalid length. [ 349.499278][ T9786] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1898'. [ 349.547153][ T9784] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1896'. [ 349.871059][ T9798] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1912'. [ 349.947657][ T9798] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1912'. [ 350.335848][ T9812] FAULT_INJECTION: forcing a failure. [ 350.335848][ T9812] name failslab, interval 1, probability 0, space 0, times 0 [ 350.387560][ T9812] CPU: 1 PID: 9812 Comm: syz.1.1907 Not tainted syzkaller #0 [ 350.395974][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.407153][ T9812] Call Trace: [ 350.410939][ T9812] [ 350.414004][ T9812] dump_stack_lvl+0x188/0x250 [ 350.418907][ T9812] ? show_regs_print_info+0x20/0x20 [ 350.424732][ T9812] ? load_image+0x400/0x400 [ 350.429736][ T9812] ? __might_sleep+0xf0/0xf0 [ 350.434669][ T9812] ? __lock_acquire+0x7d10/0x7d10 [ 350.440165][ T9812] should_fail+0x38c/0x4c0 [ 350.445260][ T9812] should_failslab+0x5/0x20 [ 350.450196][ T9812] slab_pre_alloc_hook+0x51/0xc0 [ 350.455615][ T9812] ? ipv6_setsockopt+0xe19/0x3cc0 [ 350.461219][ T9812] __kmalloc_track_caller+0x69/0x330 [ 350.466730][ T9812] ? ipv6_setsockopt+0xe19/0x3cc0 [ 350.472034][ T9812] ? _local_bh_enable+0xa0/0xa0 [ 350.477514][ T9812] ipv6_set_mcast_msfilter+0x98/0x2c0 [ 350.483452][ T9812] ipv6_setsockopt+0xe19/0x3cc0 [ 350.488634][ T9812] ? ipv6_update_options+0x400/0x400 [ 350.494157][ T9812] ? verify_lock_unused+0x140/0x140 [ 350.499946][ T9812] ? mark_lock+0x94/0x320 [ 350.504925][ T9812] ? __lock_acquire+0x12e8/0x7d10 [ 350.510339][ T9812] ? __lock_acquire+0x13bc/0x7d10 [ 350.515699][ T9812] ? verify_lock_unused+0x140/0x140 [ 350.521319][ T9812] ? aa_label_sk_perm+0x3d0/0x530 [ 350.526836][ T9812] ? aa_sk_perm+0x910/0x910 [ 350.531466][ T9812] ? __might_sleep+0xf0/0xf0 [ 350.536848][ T9812] ? rcu_lock_release+0x9/0x20 [ 350.543101][ T9812] ? __lock_acquire+0x7d10/0x7d10 [ 350.548702][ T9812] ? aa_sk_perm+0x7dc/0x910 [ 350.553534][ T9812] ? aa_af_perm+0x340/0x340 [ 350.559014][ T9812] ? __fget_files+0x40f/0x480 [ 350.564315][ T9812] ? aa_sock_opt_perm+0x74/0x100 [ 350.569636][ T9812] ? sctp_setsockopt+0xd8/0xf80 [ 350.575024][ T9812] ? sock_common_recvmsg+0x1c0/0x1c0 [ 350.581502][ T9812] __sys_setsockopt+0x2bf/0x3d0 [ 350.588033][ T9812] __x64_sys_setsockopt+0xb1/0xc0 [ 350.593206][ T9812] do_syscall_64+0x4c/0xa0 [ 350.598319][ T9812] ? clear_bhb_loop+0x30/0x80 [ 350.603500][ T9812] ? clear_bhb_loop+0x30/0x80 [ 350.608669][ T9812] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.615694][ T9812] RIP: 0033:0x7f7f3289e799 [ 350.620571][ T9812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.642227][ T9812] RSP: 002b:00007f7f30af8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 350.651072][ T9812] RAX: ffffffffffffffda RBX: 00007f7f32b17fa0 RCX: 00007f7f3289e799 [ 350.659487][ T9812] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 350.668081][ T9812] RBP: 00007f7f30af8090 R08: 0000000000000120 R09: 0000000000000000 [ 350.677561][ T9812] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 350.686541][ T9812] R13: 00007f7f32b18038 R14: 00007f7f32b17fa0 R15: 00007ffd58baf618 [ 350.695726][ T9812] [ 350.875919][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 350.952795][ T9825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1915'. [ 351.048756][ T9828] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1918'. [ 351.319170][ T9835] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1920'. [ 351.354748][ T9841] validate_nla: 6 callbacks suppressed [ 351.354772][ T9841] netlink: 'syz.2.1921': attribute type 21 has an invalid length. [ 351.382246][ T9841] netlink: 'syz.2.1921': attribute type 4 has an invalid length. [ 351.415454][ T9841] netlink: 'syz.2.1921': attribute type 3 has an invalid length. [ 351.660618][ T9835] tipc: Started in network mode [ 351.676598][ T9835] tipc: Node identity 1a, cluster identity 4711 [ 351.712544][ T9835] tipc: Node number set to 26 [ 351.764539][ T9845] netlink: 'syz.1.1923': attribute type 4 has an invalid length. [ 351.879003][ T9850] netlink: 'syz.4.1925': attribute type 10 has an invalid length. [ 351.931527][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.127105][ T9850] team0: Port device bridge0 removed [ 352.147260][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.155504][ T9850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.174672][ T9850] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 352.552877][ T9870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.560799][ T9870] IPv6: NLM_F_CREATE should be set when creating new route [ 352.568590][ T9870] IPv6: NLM_F_CREATE should be set when creating new route [ 352.576593][ T9870] IPv6: NLM_F_CREATE should be set when creating new route [ 352.720472][ T9872] netlink: 'syz.4.1932': attribute type 22 has an invalid length. [ 355.459159][ T9885] __nla_validate_parse: 4 callbacks suppressed [ 355.459280][ T9885] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1938'. [ 355.526073][ T9885] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.1938'. [ 355.611167][ T9885] tipc: Started in network mode [ 355.667312][ T9885] tipc: Node identity 1a, cluster identity 4711 [ 355.751429][ T9885] tipc: Node number set to 26 [ 355.752790][ T9904] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1942'. [ 355.853650][ T9896] netlink: 'syz.2.1940': attribute type 21 has an invalid length. [ 355.914493][ T9896] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1940'. [ 356.000081][ T9896] netlink: 'syz.2.1940': attribute type 4 has an invalid length. [ 356.062905][ T9896] netlink: 'syz.2.1940': attribute type 3 has an invalid length. [ 356.149311][ T9896] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1940'. [ 356.778812][ T9924] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1950'. [ 356.896620][ T9922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.052575][ T9924] netlink: 'syz.4.1950': attribute type 2 has an invalid length. [ 357.089930][ T9924] netlink: 'syz.4.1950': attribute type 2 has an invalid length. [ 357.150889][ T9924] netlink: 198832 bytes leftover after parsing attributes in process `syz.4.1950'. [ 357.402199][ T9942] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1956'. [ 357.643277][ T9945] netlink: 'syz.1.1957': attribute type 21 has an invalid length. [ 357.667179][ T9945] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1957'. [ 357.785313][ T9945] netlink: 'syz.1.1957': attribute type 4 has an invalid length. [ 357.873161][ T9952] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1958'. [ 357.896107][ T9945] netlink: 'syz.1.1957': attribute type 3 has an invalid length. [ 358.242136][ T9956] netlink: 'syz.4.1962': attribute type 29 has an invalid length. [ 358.269875][ T9956] netlink: 'syz.4.1962': attribute type 29 has an invalid length. [ 358.874748][ T9972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.125237][ T9975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.134995][ T9975] IPv6: NLM_F_CREATE should be set when creating new route [ 359.147905][ T9975] IPv6: NLM_F_CREATE should be set when creating new route [ 359.156422][ T9975] IPv6: NLM_F_CREATE should be set when creating new route [ 359.322857][ T9987] netlink: 'syz.4.1971': attribute type 21 has an invalid length. [ 359.382029][ T9987] netlink: 'syz.4.1971': attribute type 4 has an invalid length. [ 359.521293][ T9987] netlink: 'syz.4.1971': attribute type 3 has an invalid length. [ 360.087783][T10010] tipc: Started in network mode [ 360.151581][T10010] tipc: Node identity 1a, cluster identity 4711 [ 360.209907][T10010] tipc: Node number set to 26 [ 360.633132][T10019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.028149][T10032] __nla_validate_parse: 7 callbacks suppressed [ 361.028171][T10032] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1988'. [ 361.080093][T10032] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1988'. [ 361.365517][T10036] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1990'. [ 361.467670][T10036] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 361.823655][T10053] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2006'. [ 361.982026][T10053] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2006'. [ 362.308233][T10062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.686036][T10077] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2004'. [ 362.842978][T10082] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2007'. [ 363.040010][T10091] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2010'. [ 363.272945][T10099] validate_nla: 8 callbacks suppressed [ 363.272964][T10099] netlink: 'syz.0.2009': attribute type 41 has an invalid length. [ 363.350962][T10099] netlink: 'syz.0.2009': attribute type 4 has an invalid length. [ 363.422790][T10099] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2009'. [ 363.534848][T10099] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 363.636182][T10098] netlink: 'syz.3.2012': attribute type 21 has an invalid length. [ 363.660068][T10098] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2012'. [ 363.741233][T10098] netlink: 'syz.3.2012': attribute type 4 has an invalid length. [ 363.779943][T10098] netlink: 'syz.3.2012': attribute type 3 has an invalid length. [ 364.023386][T10115] netlink: 'syz.1.2027': attribute type 41 has an invalid length. [ 364.051714][T10115] netlink: 'syz.1.2027': attribute type 4 has an invalid length. [ 364.122334][T10115] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 364.632647][T10127] netlink: 'syz.1.2023': attribute type 3 has an invalid length. [ 364.880389][ T1273] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 365.074071][T10142] netlink: 'syz.2.2031': attribute type 21 has an invalid length. [ 365.167445][T10142] netlink: 'syz.2.2031': attribute type 4 has an invalid length. [ 366.161690][T10164] __nla_validate_parse: 8 callbacks suppressed [ 366.161713][T10164] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2038'. [ 366.183246][T10159] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2035'. [ 366.307415][T10159] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 366.607139][T10181] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2047'. [ 366.671242][T10181] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2047'. [ 366.733385][T10188] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2048'. [ 366.816513][T10188] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2048'. [ 366.839534][T10188] FAULT_INJECTION: forcing a failure. [ 366.839534][T10188] name failslab, interval 1, probability 0, space 0, times 0 [ 366.865548][T10188] CPU: 1 PID: 10188 Comm: syz.1.2048 Not tainted syzkaller #0 [ 366.873757][T10188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.884238][T10188] Call Trace: [ 366.887927][T10188] [ 366.891268][T10188] dump_stack_lvl+0x188/0x250 [ 366.896913][T10188] ? show_regs_print_info+0x20/0x20 [ 366.902380][T10188] ? load_image+0x400/0x400 [ 366.906981][T10188] ? ip_tun_cmp_encap+0x1a0/0x1a0 [ 366.912772][T10188] should_fail+0x38c/0x4c0 [ 366.917446][T10188] should_failslab+0x5/0x20 [ 366.922360][T10188] slab_pre_alloc_hook+0x51/0xc0 [ 366.927633][T10188] __kmalloc+0x6b/0x330 [ 366.932011][T10188] ? ip_tun_build_state+0x138/0x660 [ 366.937470][T10188] ? __nla_parse+0x3c/0x50 [ 366.942408][T10188] ip_tun_build_state+0x138/0x660 [ 366.947856][T10188] ? iptunnel_pmtud_build_icmpv6+0x1050/0x1050 [ 366.954353][T10188] ? rcu_lock_release+0x5/0x20 [ 366.959315][T10188] lwtunnel_build_state+0x34a/0x490 [ 366.965397][T10188] fib_nh_common_init+0x145/0x2d0 [ 366.970759][T10188] ? fib_dump_info+0x1070/0x1070 [ 366.976106][T10188] ? skb_gro_incr_csum_unnecessary+0x300/0x300 [ 366.982704][T10188] fib_nh_init+0x9a/0x400 [ 366.987511][T10188] fib_create_info+0xf99/0x24f0 [ 366.992630][T10188] ? __lock_acquire+0x7d10/0x7d10 [ 366.998201][T10188] fib_table_insert+0xe4/0x1bb0 [ 367.003121][T10188] ? lwtunnel_valid_encap_type+0x22f/0x550 [ 367.009487][T10188] ? rtm_to_fib_config+0x1122/0x1560 [ 367.014987][T10188] ? fib_new_table+0x106/0x2d0 [ 367.020120][T10188] inet_rtm_newroute+0x147/0x230 [ 367.026065][T10188] ? rcu_read_unlock+0x90/0x90 [ 367.031150][T10188] ? rcu_read_unlock+0x90/0x90 [ 367.036124][T10188] rtnetlink_rcv_msg+0x844/0xf30 [ 367.041219][T10188] ? rtnetlink_bind+0x80/0x80 [ 367.046144][T10188] ? migrate_enable+0x13e/0x200 [ 367.051453][T10188] ? trace_call_bpf+0x515/0x5b0 [ 367.057698][T10188] ? _local_bh_enable+0xa0/0xa0 [ 367.062874][T10188] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 367.069828][T10188] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 367.075185][T10188] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 367.081920][T10188] ? perf_trace_lock+0x301/0x390 [ 367.087235][T10188] ? trace_event_raw_event_lock+0x270/0x270 [ 367.093571][T10188] ? __skb_clone+0x480/0x790 [ 367.098623][T10188] netlink_rcv_skb+0x1f5/0x440 [ 367.103956][T10188] ? rtnetlink_bind+0x80/0x80 [ 367.109265][T10188] ? netlink_ack+0xb50/0xb50 [ 367.114977][T10188] netlink_unicast+0x774/0x920 [ 367.120180][T10188] netlink_sendmsg+0x8ba/0xbe0 [ 367.125275][T10188] ? netlink_getsockopt+0x570/0x570 [ 367.130719][T10188] ? aa_sock_msg_perm+0x94/0x150 [ 367.136770][T10188] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 367.142967][T10188] ? security_socket_sendmsg+0x7c/0xa0 [ 367.149523][T10188] ? netlink_getsockopt+0x570/0x570 [ 367.155320][T10188] ____sys_sendmsg+0x5b7/0x8f0 [ 367.160949][T10188] ? __sys_sendmsg_sock+0x30/0x30 [ 367.168284][T10188] ? import_iovec+0x6f/0xa0 [ 367.173713][T10188] ___sys_sendmsg+0x236/0x2e0 [ 367.178983][T10188] ? __sys_sendmsg+0x2a0/0x2a0 [ 367.185227][T10188] ? trace_event_raw_event_lock+0x270/0x270 [ 367.192358][T10188] ? vfs_write+0x8b2/0xd60 [ 367.197785][T10188] __se_sys_sendmsg+0x1af/0x290 [ 367.203692][T10188] ? __x64_sys_sendmsg+0x80/0x80 [ 367.209608][T10188] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 367.216587][T10188] ? lockdep_hardirqs_on+0x94/0x140 [ 367.223780][T10188] do_syscall_64+0x4c/0xa0 [ 367.229552][T10188] ? clear_bhb_loop+0x30/0x80 [ 367.234910][T10188] ? clear_bhb_loop+0x30/0x80 [ 367.240412][T10188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 367.247438][T10188] RIP: 0033:0x7f7f3289e799 [ 367.252310][T10188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.273073][T10188] RSP: 002b:00007f7f30af8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.282269][T10188] RAX: ffffffffffffffda RBX: 00007f7f32b17fa0 RCX: 00007f7f3289e799 [ 367.290951][T10188] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 367.299157][T10188] RBP: 00007f7f30af8090 R08: 0000000000000000 R09: 0000000000000000 [ 367.307838][T10188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.316705][T10188] R13: 00007f7f32b18038 R14: 00007f7f32b17fa0 R15: 00007ffd58baf618 [ 367.326311][T10188] [ 367.380674][T10194] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2049'. [ 367.418067][T10194] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2049'. [ 367.637845][T10199] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2052'. [ 368.010160][T10216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2064'. [ 368.122839][T10219] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 368.556888][T10236] validate_nla: 21 callbacks suppressed [ 368.556914][T10236] netlink: 'syz.1.2063': attribute type 21 has an invalid length. [ 368.609827][T10228] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 368.632564][T10236] netlink: 'syz.1.2063': attribute type 4 has an invalid length. [ 368.658120][T10236] netlink: 'syz.1.2063': attribute type 3 has an invalid length. [ 368.741329][T10234] netlink: 'syz.3.2062': attribute type 7 has an invalid length. [ 368.757131][T10234] netlink: 'syz.3.2062': attribute type 1 has an invalid length. [ 368.845696][T10245] netlink: 'syz.0.2066': attribute type 21 has an invalid length. [ 368.878230][T10245] netlink: 'syz.0.2066': attribute type 4 has an invalid length. [ 368.897619][T10245] netlink: 'syz.0.2066': attribute type 3 has an invalid length. [ 369.367472][T10256] netlink: 'syz.2.2082': attribute type 21 has an invalid length. [ 369.423864][T10256] netlink: 'syz.2.2082': attribute type 4 has an invalid length. [ 369.769653][T10272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.452697][T10298] device team0 entered promiscuous mode [ 370.459114][T10298] device team_slave_0 entered promiscuous mode [ 370.525654][T10298] device team_slave_1 entered promiscuous mode [ 370.660261][T10298] bridge0: port 3(team0) entered blocking state [ 370.686129][T10298] bridge0: port 3(team0) entered disabled state [ 371.030065][T10298] bridge0: port 3(team0) entered blocking state [ 371.039658][T10298] bridge0: port 3(team0) entered forwarding state [ 371.187036][T10309] __nla_validate_parse: 16 callbacks suppressed [ 371.187058][T10309] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2091'. [ 371.235202][T10309] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2091'. [ 371.355690][T10324] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2098'. [ 371.497093][T10328] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2099'. [ 371.638093][T10328] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2099'. [ 371.968685][T10340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2103'. [ 371.989311][T10340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2103'. [ 372.016524][T10340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2103'. [ 372.035934][T10342] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2104'. [ 372.097994][T10348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2103'. [ 372.385411][T10354] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 372.796916][T10362] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 372.806504][T10362] CPU: 1 PID: 10362 Comm: syz.0.2112 Not tainted syzkaller #0 [ 372.814745][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.826435][T10362] Call Trace: [ 372.829974][T10362] [ 372.833146][T10362] dump_stack_lvl+0x188/0x250 [ 372.838317][T10362] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 372.845059][T10362] ? show_regs_print_info+0x20/0x20 [ 372.850421][T10362] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 372.857099][T10362] sysfs_warn_dup+0x8a/0xa0 [ 372.861679][T10362] sysfs_do_create_link_sd+0xc0/0x110 [ 372.867338][T10362] device_add+0x7ed/0xfb0 [ 372.872891][T10362] wiphy_register+0x1e81/0x2c30 [ 372.878121][T10362] ? cfg80211_event_work+0x40/0x40 [ 372.884083][T10362] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 372.890440][T10362] ieee80211_register_hw+0x2aa1/0x3af0 [ 372.896178][T10362] ? ieee80211_tasklet_handler+0x20/0x20 [ 372.902004][T10362] ? rcu_is_watching+0x11/0xa0 [ 372.907347][T10362] ? memset+0x1e/0x40 [ 372.911756][T10362] ? hrtimer_init+0x10c/0x220 [ 372.916703][T10362] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 372.922770][T10362] hwsim_new_radio_nl+0xa6f/0xc40 [ 372.928070][T10362] genl_rcv_msg+0xcea/0xf90 [ 372.932738][T10362] ? genl_bind+0x380/0x380 [ 372.937313][T10362] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 372.942842][T10362] ? verify_lock_unused+0x140/0x140 [ 372.948220][T10362] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 372.954360][T10362] ? lock_chain_count+0x20/0x20 [ 372.959489][T10362] ? rcu_is_watching+0x11/0xa0 [ 372.964494][T10362] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 372.971172][T10362] netlink_rcv_skb+0x1f5/0x440 [ 372.976077][T10362] ? genl_bind+0x380/0x380 [ 372.980656][T10362] ? netlink_ack+0xb50/0xb50 [ 372.985330][T10362] ? __lock_acquire+0x7d10/0x7d10 [ 372.990509][T10362] ? down_read+0x1aa/0x2e0 [ 372.995194][T10362] genl_rcv+0x24/0x40 [ 372.999336][T10362] netlink_unicast+0x774/0x920 [ 373.004399][T10362] netlink_sendmsg+0x8ba/0xbe0 [ 373.009272][T10362] ? netlink_getsockopt+0x570/0x570 [ 373.014900][T10362] ? aa_sock_msg_perm+0x94/0x150 [ 373.020007][T10362] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 373.025573][T10362] ? security_socket_sendmsg+0x7c/0xa0 [ 373.031563][T10362] ? netlink_getsockopt+0x570/0x570 [ 373.037016][T10362] ____sys_sendmsg+0x5b7/0x8f0 [ 373.041920][T10362] ? __sys_sendmsg_sock+0x30/0x30 [ 373.047120][T10362] ? import_iovec+0x6f/0xa0 [ 373.051880][T10362] ___sys_sendmsg+0x236/0x2e0 [ 373.057050][T10362] ? __sys_sendmsg+0x2a0/0x2a0 [ 373.061898][T10362] ? ktime_get_real_ts64+0x440/0x440 [ 373.067924][T10362] __se_sys_sendmsg+0x1af/0x290 [ 373.072843][T10362] ? __x64_sys_sendmsg+0x80/0x80 [ 373.077817][T10362] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 373.084066][T10362] ? lockdep_hardirqs_on+0x94/0x140 [ 373.089300][T10362] do_syscall_64+0x4c/0xa0 [ 373.093795][T10362] ? clear_bhb_loop+0x30/0x80 [ 373.098607][T10362] ? clear_bhb_loop+0x30/0x80 [ 373.103469][T10362] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 373.109847][T10362] RIP: 0033:0x7fbbb6bcf799 [ 373.114391][T10362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.135218][T10362] RSP: 002b:00007fbbb4e29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.144410][T10362] RAX: ffffffffffffffda RBX: 00007fbbb6e48fa0 RCX: 00007fbbb6bcf799 [ 373.153323][T10362] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 373.162254][T10362] RBP: 00007fbbb6c65c99 R08: 0000000000000000 R09: 0000000000000000 [ 373.170832][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.179275][T10362] R13: 00007fbbb6e49038 R14: 00007fbbb6e48fa0 R15: 00007ffe621be368 [ 373.187945][T10362] [ 373.233577][T10370] device syzkaller0 left promiscuous mode [ 373.975782][T10399] validate_nla: 21 callbacks suppressed [ 373.975807][T10399] netlink: 'syz.4.2126': attribute type 21 has an invalid length. [ 373.998247][T10399] netlink: 'syz.4.2126': attribute type 4 has an invalid length. [ 374.007413][T10399] netlink: 'syz.4.2126': attribute type 3 has an invalid length. [ 374.274350][T10408] openvswitch: netlink: Flow key attribute not present in set flow. [ 374.442692][T10411] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 374.452020][T10411] CPU: 0 PID: 10411 Comm: syz.3.2130 Not tainted syzkaller #0 [ 374.461178][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.472121][T10411] Call Trace: [ 374.475550][T10411] [ 374.478577][T10411] dump_stack_lvl+0x188/0x250 [ 374.483400][T10411] ? show_regs_print_info+0x20/0x20 [ 374.488838][T10411] ? load_image+0x400/0x400 [ 374.493554][T10411] sysfs_warn_dup+0x8a/0xa0 [ 374.498256][T10411] sysfs_do_create_link_sd+0xc0/0x110 [ 374.503742][T10411] device_add+0x7ed/0xfb0 [ 374.508655][T10411] wiphy_register+0x1e81/0x2c30 [ 374.514093][T10411] ? cfg80211_event_work+0x40/0x40 [ 374.519648][T10411] ? minstrel_ht_alloc+0x808/0x980 [ 374.525006][T10411] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 374.532246][T10411] ieee80211_register_hw+0x2aa1/0x3af0 [ 374.538224][T10411] ? ieee80211_tasklet_handler+0x20/0x20 [ 374.544823][T10411] ? ieee80211_register_hw+0x6/0x3af0 [ 374.550461][T10411] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 374.556284][T10411] hwsim_new_radio_nl+0xa6f/0xc40 [ 374.561624][T10411] genl_rcv_msg+0xcea/0xf90 [ 374.566358][T10411] ? genl_bind+0x380/0x380 [ 374.571113][T10411] ? mark_lock+0x94/0x320 [ 374.575941][T10411] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 374.582244][T10411] ? lock_chain_count+0x20/0x20 [ 374.587426][T10411] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 374.593722][T10411] ? lockdep_hardirqs_on+0x94/0x140 [ 374.599080][T10411] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 374.605983][T10411] netlink_rcv_skb+0x1f5/0x440 [ 374.611155][T10411] ? genl_bind+0x380/0x380 [ 374.615799][T10411] ? netlink_ack+0xb50/0xb50 [ 374.620997][T10411] ? __lock_acquire+0x7d10/0x7d10 [ 374.626178][T10411] ? down_read+0x1aa/0x2e0 [ 374.630779][T10411] genl_rcv+0x24/0x40 [ 374.635231][T10411] netlink_unicast+0x774/0x920 [ 374.640402][T10411] netlink_sendmsg+0x8ba/0xbe0 [ 374.645289][T10411] ? netlink_getsockopt+0x570/0x570 [ 374.650702][T10411] ? aa_sock_msg_perm+0x94/0x150 [ 374.655911][T10411] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 374.661241][T10411] ? security_socket_sendmsg+0x7c/0xa0 [ 374.667634][T10411] ? netlink_getsockopt+0x570/0x570 [ 374.674074][T10411] ____sys_sendmsg+0x5b7/0x8f0 [ 374.679897][T10411] ? __sys_sendmsg_sock+0x30/0x30 [ 374.685619][T10411] ? import_iovec+0x6f/0xa0 [ 374.690349][T10411] ___sys_sendmsg+0x236/0x2e0 [ 374.695168][T10411] ? __sys_sendmsg+0x2a0/0x2a0 [ 374.700017][T10411] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 374.705977][T10411] __se_sys_sendmsg+0x1af/0x290 [ 374.711520][T10411] ? __x64_sys_sendmsg+0x80/0x80 [ 374.717306][T10411] ? trace_sys_enter+0x1f/0x80 [ 374.722774][T10411] do_syscall_64+0x4c/0xa0 [ 374.727491][T10411] ? clear_bhb_loop+0x30/0x80 [ 374.732306][T10411] ? clear_bhb_loop+0x30/0x80 [ 374.737038][T10411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.743224][T10411] RIP: 0033:0x7f0fb5613799 [ 374.747740][T10411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.767774][T10411] RSP: 002b:00007f0fb386d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.776723][T10411] RAX: ffffffffffffffda RBX: 00007f0fb588cfa0 RCX: 00007f0fb5613799 [ 374.785006][T10411] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 374.793575][T10411] RBP: 00007f0fb56a9c99 R08: 0000000000000000 R09: 0000000000000000 [ 374.801867][T10411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.810809][T10411] R13: 00007f0fb588d038 R14: 00007f0fb588cfa0 R15: 00007ffea870eb68 [ 374.819408][T10411] [ 374.990143][T10417] netlink: 'syz.2.2132': attribute type 21 has an invalid length. [ 375.029920][T10417] netlink: 'syz.2.2132': attribute type 4 has an invalid length. [ 375.037909][T10417] netlink: 'syz.2.2132': attribute type 3 has an invalid length. [ 375.200535][T10425] netlink: 'syz.0.2135': attribute type 12 has an invalid length. [ 375.353162][T10425] netlink: 'syz.0.2135': attribute type 28 has an invalid length. [ 375.362541][T10425] netlink: 'syz.0.2135': attribute type 3 has an invalid length. [ 375.563064][T10436] netlink: 'syz.1.2139': attribute type 21 has an invalid length. [ 376.355837][T10457] __nla_validate_parse: 21 callbacks suppressed [ 376.355925][T10457] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2148'. [ 376.385429][T10462] netlink: 111 bytes leftover after parsing attributes in process `syz.2.2149'. [ 376.416600][T10457] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 376.440049][T10457] CPU: 1 PID: 10457 Comm: syz.1.2148 Not tainted syzkaller #0 [ 376.447806][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.458505][T10457] Call Trace: [ 376.461837][T10457] [ 376.465165][T10457] dump_stack_lvl+0x188/0x250 [ 376.470086][T10457] ? show_regs_print_info+0x20/0x20 [ 376.475657][T10457] ? load_image+0x400/0x400 [ 376.480313][T10457] sysfs_warn_dup+0x8a/0xa0 [ 376.485066][T10457] sysfs_do_create_link_sd+0xc0/0x110 [ 376.490927][T10457] device_add+0x7ed/0xfb0 [ 376.495345][T10457] wiphy_register+0x1e81/0x2c30 [ 376.500554][T10457] ? cfg80211_event_work+0x40/0x40 [ 376.505930][T10457] ? _dev_printk+0x1/0x180 [ 376.510728][T10457] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 376.517341][T10457] ieee80211_register_hw+0x2aa1/0x3af0 [ 376.522962][T10457] ? ieee80211_tasklet_handler+0x20/0x20 [ 376.529080][T10457] ? rcu_is_watching+0x11/0xa0 [ 376.533967][T10457] ? memset+0x1e/0x40 [ 376.538324][T10457] ? hrtimer_init+0x10c/0x220 [ 376.543149][T10457] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 376.549348][T10457] hwsim_new_radio_nl+0xa6f/0xc40 [ 376.554883][T10457] genl_rcv_msg+0xcea/0xf90 [ 376.559510][T10457] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 376.565758][T10457] ? genl_bind+0x380/0x380 [ 376.570215][T10457] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 376.576047][T10457] ? verify_lock_unused+0x140/0x140 [ 376.581450][T10457] ? perf_trace_lock_acquire+0x340/0x3e0 [ 376.587135][T10457] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 376.593780][T10457] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 376.600617][T10457] netlink_rcv_skb+0x1f5/0x440 [ 376.605496][T10457] ? genl_bind+0x380/0x380 [ 376.609936][T10457] ? netlink_ack+0xb50/0xb50 [ 376.614638][T10457] ? __lock_acquire+0x7d10/0x7d10 [ 376.619966][T10457] ? down_read+0x1aa/0x2e0 [ 376.624514][T10457] genl_rcv+0x24/0x40 [ 376.628621][T10457] netlink_unicast+0x774/0x920 [ 376.633434][T10457] netlink_sendmsg+0x8ba/0xbe0 [ 376.638338][T10457] ? lockdep_hardirqs_on+0x94/0x140 [ 376.643835][T10457] ? netlink_getsockopt+0x570/0x570 [ 376.649170][T10457] ? bpf_lsm_socket_accept+0x10/0x10 [ 376.654634][T10457] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 376.660051][T10457] ? security_socket_sendmsg+0x7c/0xa0 [ 376.665743][T10457] ? netlink_getsockopt+0x570/0x570 [ 376.671353][T10457] ____sys_sendmsg+0x5b7/0x8f0 [ 376.676449][T10457] ? __sys_sendmsg_sock+0x30/0x30 [ 376.682509][T10457] ? import_iovec+0x6f/0xa0 [ 376.687233][T10457] ___sys_sendmsg+0x236/0x2e0 [ 376.692047][T10457] ? __sys_sendmsg+0x2a0/0x2a0 [ 376.697466][T10457] ? __fget_files+0x3a6/0x480 [ 376.702431][T10457] __se_sys_sendmsg+0x1af/0x290 [ 376.707324][T10457] ? __x64_sys_sendmsg+0x80/0x80 [ 376.712448][T10457] ? trace_sys_enter+0x1f/0x80 [ 376.717275][T10457] do_syscall_64+0x4c/0xa0 [ 376.721817][T10457] ? clear_bhb_loop+0x30/0x80 [ 376.726529][T10457] ? clear_bhb_loop+0x30/0x80 [ 376.731326][T10457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.737356][T10457] RIP: 0033:0x7f7f3289e799 [ 376.741820][T10457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.761825][T10457] RSP: 002b:00007f7f30af8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.770716][T10457] RAX: ffffffffffffffda RBX: 00007f7f32b17fa0 RCX: 00007f7f3289e799 [ 376.778913][T10457] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 376.787193][T10457] RBP: 00007f7f32934c99 R08: 0000000000000000 R09: 0000000000000000 [ 376.795677][T10457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.804253][T10457] R13: 00007f7f32b18038 R14: 00007f7f32b17fa0 R15: 00007ffd58baf618 [ 376.812375][T10457] [ 377.024105][T10469] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2155'. [ 377.044887][T10474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2153'. [ 377.059067][T10474] device syzkaller0 left promiscuous mode [ 377.070253][T10474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2153'. [ 377.146919][T10476] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2157'. [ 377.185655][T10476] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2157'. [ 377.811426][T10497] device wlan0 entered promiscuous mode [ 377.848026][T10497] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2165'. [ 377.888640][T10497] bridge_slave_1: default FDB implementation only supports local addresses [ 377.908605][T10501] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2166'. [ 377.921458][T10498] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2165'. [ 379.001530][T10542] validate_nla: 17 callbacks suppressed [ 379.001549][T10542] netlink: 'syz.4.2183': attribute type 13 has an invalid length. [ 379.016243][T10543] netlink: 'syz.4.2183': attribute type 13 has an invalid length. [ 379.381276][T10562] netlink: 'syz.4.2190': attribute type 21 has an invalid length. [ 379.393650][T10562] netlink: 'syz.4.2190': attribute type 4 has an invalid length. [ 379.404617][T10562] netlink: 'syz.4.2190': attribute type 3 has an invalid length. [ 379.773659][T10570] netlink: 'syz.1.2193': attribute type 21 has an invalid length. [ 379.806954][T10570] netlink: 'syz.1.2193': attribute type 4 has an invalid length. [ 379.825426][T10570] netlink: 'syz.1.2193': attribute type 3 has an invalid length. [ 380.038245][T10572] netlink: 'syz.4.2194': attribute type 25 has an invalid length. [ 380.047926][T10572] netlink: 'syz.4.2194': attribute type 29 has an invalid length. [ 380.335372][T10582] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 380.391868][T10581] delete_channel: no stack [ 380.819330][T10600] delete_channel: no stack [ 381.734311][T10630] __nla_validate_parse: 21 callbacks suppressed [ 381.734338][T10630] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2214'. [ 381.784121][T10630] å1ÿ: renamed from bond_slave_0 [ 382.173539][T10644] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2219'. [ 382.220363][T10644] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2219'. [ 382.407504][T10650] delete_channel: no stack [ 382.641857][T10665] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2226'. [ 382.769422][T10665] team0: Device veth1_macvtap failed to register rx_handler [ 383.674434][T10671] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2227'. [ 383.702608][T10671] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2227'. [ 384.392378][T10700] validate_nla: 22 callbacks suppressed [ 384.392400][T10700] netlink: 'syz.4.2234': attribute type 21 has an invalid length. [ 384.586499][T10700] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2234'. [ 384.595140][T10707] netlink: 'syz.2.2235': attribute type 41 has an invalid length. [ 384.726840][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.733585][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.744108][T10700] netlink: 'syz.4.2234': attribute type 4 has an invalid length. [ 384.841016][T10700] netlink: 'syz.4.2234': attribute type 3 has an invalid length. [ 384.898886][T10700] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2234'. [ 384.971476][T10707] netlink: 'syz.2.2235': attribute type 41 has an invalid length. [ 385.002257][T10702] delete_channel: no stack [ 385.707174][T10725] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.913711][T10731] netlink: 'syz.0.2247': attribute type 25 has an invalid length. [ 385.945066][T10731] netlink: 'syz.0.2247': attribute type 29 has an invalid length. [ 386.734435][T10761] netlink: 'syz.0.2253': attribute type 41 has an invalid length. [ 386.821503][T10761] netlink: 'syz.0.2253': attribute type 41 has an invalid length. [ 386.858360][T10759] delete_channel: no stack [ 387.042729][T10774] netlink: 'syz.3.2257': attribute type 21 has an invalid length. [ 387.128038][T10774] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2257'. [ 387.267537][T10774] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2257'. [ 387.570720][T10781] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2272'. [ 387.614861][T10781] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2272'. [ 388.476877][T10804] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2269'. [ 388.533270][T10804] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2269'. [ 388.891730][T10816] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2276'. [ 388.972184][T10818] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2277'. [ 389.039897][T10818] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2277'. [ 390.101756][T10855] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2291'. [ 390.442084][T10862] validate_nla: 11 callbacks suppressed [ 390.442107][T10862] netlink: 'syz.4.2294': attribute type 21 has an invalid length. [ 390.610968][T10862] netlink: 'syz.4.2294': attribute type 4 has an invalid length. [ 390.770407][T10862] netlink: 'syz.4.2294': attribute type 3 has an invalid length. [ 391.708695][T10903] netlink: 'syz.4.2309': attribute type 29 has an invalid length. [ 391.728551][T10903] netlink: 'syz.4.2309': attribute type 29 has an invalid length. [ 391.748824][T10903] netlink: 'syz.4.2309': attribute type 29 has an invalid length. [ 392.023421][T10921] netlink: 'syz.1.2315': attribute type 2 has an invalid length. [ 392.038173][T10921] netlink: 'syz.1.2315': attribute type 7 has an invalid length. [ 392.563978][T10932] can: request_module (can-proto-0) failed. [ 392.571638][T10936] netlink: 'syz.3.2320': attribute type 21 has an invalid length. [ 392.571672][T10936] __nla_validate_parse: 8 callbacks suppressed [ 392.571687][T10936] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2320'. [ 392.571765][T10936] netlink: 'syz.3.2320': attribute type 4 has an invalid length. [ 392.571795][T10936] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2320'. [ 392.868015][T10942] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2324'. [ 392.971847][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2326'. [ 393.016225][T10949] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2325'. [ 393.089009][T10953] device team0 left promiscuous mode [ 393.142443][T10953] device team_slave_0 left promiscuous mode [ 393.190480][T10953] device team_slave_1 left promiscuous mode [ 393.336773][T10953] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.375886][T10953] bond0: (slave team0): Enslaving as an active interface with an up link [ 393.421726][T10971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2333'. [ 393.457301][T10971] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 393.518192][T10968] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2332'. [ 393.628237][T10977] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2335'. [ 393.649975][T10977] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2335'. [ 393.851869][T10982] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2338'. [ 394.588972][T11011] FAULT_INJECTION: forcing a failure. [ 394.588972][T11011] name failslab, interval 1, probability 0, space 0, times 0 [ 394.791932][T11011] CPU: 0 PID: 11011 Comm: syz.4.2349 Not tainted syzkaller #0 [ 394.805155][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.821341][T11011] Call Trace: [ 394.826708][T11011] [ 394.830628][T11011] dump_stack_lvl+0x188/0x250 [ 394.838889][T11011] ? show_regs_print_info+0x20/0x20 [ 394.846269][T11011] ? load_image+0x400/0x400 [ 394.852684][T11011] ? __might_sleep+0xf0/0xf0 [ 394.860201][T11011] ? __lock_acquire+0x7d10/0x7d10 [ 394.866898][T11011] ? netlink_insert+0xe95/0x11f0 [ 394.875289][T11011] should_fail+0x38c/0x4c0 [ 394.883407][T11011] should_failslab+0x5/0x20 [ 394.889778][T11011] slab_pre_alloc_hook+0x51/0xc0 [ 394.895878][T11011] kmem_cache_alloc_node+0x47/0x2d0 [ 394.902478][T11011] ? __alloc_skb+0xf4/0x750 [ 394.908353][T11011] __alloc_skb+0xf4/0x750 [ 394.915879][T11011] netlink_sendmsg+0x654/0xbe0 [ 394.921683][T11011] ? netlink_getsockopt+0x570/0x570 [ 394.928236][T11011] ? netlink_getsockopt+0x570/0x570 [ 394.935290][T11011] ____sys_sendmsg+0x5b7/0x8f0 [ 394.941662][T11011] ? __sys_sendmsg_sock+0x30/0x30 [ 394.948144][T11011] ? import_iovec+0x6f/0xa0 [ 394.955508][T11011] ___sys_sendmsg+0x236/0x2e0 [ 394.962103][T11011] ? __sys_sendmsg+0x2a0/0x2a0 [ 394.968249][T11011] ? rcu_nmi_exit+0x6f/0xf0 [ 394.975185][T11011] __se_sys_sendmsg+0x1af/0x290 [ 394.982145][T11011] ? __x64_sys_sendmsg+0x80/0x80 [ 394.988005][T11011] ? lockdep_hardirqs_on+0x94/0x140 [ 394.995084][T11011] do_syscall_64+0x4c/0xa0 [ 395.001282][T11011] ? clear_bhb_loop+0x30/0x80 [ 395.006963][T11011] ? clear_bhb_loop+0x30/0x80 [ 395.013522][T11011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 395.021855][T11011] RIP: 0033:0x7f8096a9f799 [ 395.027291][T11011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.056480][T11011] RSP: 002b:00007f8094cf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.068555][T11011] RAX: ffffffffffffffda RBX: 00007f8096d18fa0 RCX: 00007f8096a9f799 [ 395.081053][T11011] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 0000000000000004 [ 395.094970][T11011] RBP: 00007f8094cf9090 R08: 0000000000000000 R09: 0000000000000000 [ 395.108577][T11011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.123300][T11011] R13: 00007f8096d19038 R14: 00007f8096d18fa0 R15: 00007fffbf4cc478 [ 395.137944][T11011] [ 395.709148][T11035] validate_nla: 12 callbacks suppressed [ 395.709169][T11035] netlink: 'syz.2.2355': attribute type 6 has an invalid length. [ 396.242079][ T5645] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.477857][T11060] netlink: 'syz.1.2367': attribute type 21 has an invalid length. [ 396.539903][T11060] netlink: 'syz.1.2367': attribute type 4 has an invalid length. [ 396.604636][T11060] netlink: 'syz.1.2367': attribute type 3 has an invalid length. [ 396.950119][T11067] tun0: tun_chr_ioctl cmd 1074025677 [ 396.981470][T11067] tun0: linktype set to 774 [ 397.177343][T11078] netlink: 'syz.0.2372': attribute type 6 has an invalid length. [ 397.196197][T11082] FAULT_INJECTION: forcing a failure. [ 397.196197][T11082] name failslab, interval 1, probability 0, space 0, times 0 [ 397.269926][T11082] CPU: 1 PID: 11082 Comm: syz.3.2374 Not tainted syzkaller #0 [ 397.278432][T11082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.289467][T11082] Call Trace: [ 397.292894][T11082] [ 397.296049][T11082] dump_stack_lvl+0x188/0x250 [ 397.300977][T11082] ? show_regs_print_info+0x20/0x20 [ 397.306716][T11082] ? load_image+0x400/0x400 [ 397.311826][T11082] should_fail+0x38c/0x4c0 [ 397.316788][T11082] should_failslab+0x5/0x20 [ 397.322708][T11082] slab_pre_alloc_hook+0x51/0xc0 [ 397.328436][T11082] kmem_cache_alloc_trace+0x47/0x2a0 [ 397.334937][T11082] ? sctp_add_bind_addr+0x89/0x350 [ 397.341635][T11082] sctp_add_bind_addr+0x89/0x350 [ 397.348069][T11082] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 397.354518][T11082] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 397.360920][T11082] ? sctp_v6_is_any+0x60/0x70 [ 397.365872][T11082] ? sctp_copy_one_addr+0x93/0x660 [ 397.371503][T11082] sctp_bind_addr_copy+0xaf/0x3c0 [ 397.377120][T11082] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 397.383787][T11082] sctp_connect_new_asoc+0x2f5/0x6a0 [ 397.389441][T11082] ? __sctp_connect+0xd80/0xd80 [ 397.395622][T11082] ? __local_bh_enable_ip+0x136/0x1c0 [ 397.401996][T11082] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 397.408263][T11082] ? security_sctp_bind_connect+0x85/0xb0 [ 397.415423][T11082] sctp_sendmsg+0x158d/0x2900 [ 397.422783][T11082] ? aa_sk_perm+0x7dc/0x910 [ 397.427449][T11082] ? sctp_getsockopt+0x8a0/0x8a0 [ 397.432832][T11082] ? aa_af_perm+0x340/0x340 [ 397.437776][T11082] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 397.444931][T11082] ? sock_rps_record_flow+0x17/0x3b0 [ 397.450903][T11082] ? inet_sendmsg+0xe5/0x2f0 [ 397.455798][T11082] ? inet_send_prepare+0x260/0x260 [ 397.461459][T11082] ____sys_sendmsg+0x5b7/0x8f0 [ 397.466994][T11082] ? __sys_sendmsg_sock+0x30/0x30 [ 397.472082][T11082] ? import_iovec+0x6f/0xa0 [ 397.477137][T11082] ___sys_sendmsg+0x236/0x2e0 [ 397.482191][T11082] ? __sys_sendmsg+0x2a0/0x2a0 [ 397.487596][T11082] ? trace_event_raw_event_lock+0x270/0x270 [ 397.494267][T11082] ? vfs_write+0x8b2/0xd60 [ 397.499781][T11082] __se_sys_sendmsg+0x1af/0x290 [ 397.505234][T11082] ? __x64_sys_sendmsg+0x80/0x80 [ 397.511099][T11082] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 397.517375][T11082] ? lockdep_hardirqs_on+0x94/0x140 [ 397.522790][T11082] do_syscall_64+0x4c/0xa0 [ 397.527392][T11082] ? clear_bhb_loop+0x30/0x80 [ 397.533780][T11082] ? clear_bhb_loop+0x30/0x80 [ 397.539366][T11082] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 397.545629][T11082] RIP: 0033:0x7f0fb5613799 [ 397.550275][T11082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.572002][T11082] RSP: 002b:00007f0fb386d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.581892][T11082] RAX: ffffffffffffffda RBX: 00007f0fb588cfa0 RCX: 00007f0fb5613799 [ 397.591138][T11082] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 397.599389][T11082] RBP: 00007f0fb386d090 R08: 0000000000000000 R09: 0000000000000000 [ 397.608407][T11082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.617803][T11082] R13: 00007f0fb588d038 R14: 00007f0fb588cfa0 R15: 00007ffea870eb68 [ 397.626497][T11082] [ 397.631966][T11081] __nla_validate_parse: 13 callbacks suppressed [ 397.631994][T11081] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2373'. [ 398.675893][T11081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.698310][T11081] device bond_slave_1 left promiscuous mode [ 398.712577][T11081] bond0 (unregistering): Released all slaves [ 398.778481][T11093] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2378'. [ 398.929348][T11101] netlink: 'syz.3.2391': attribute type 6 has an invalid length. [ 399.057328][T11106] netlink: 'syz.2.2382': attribute type 21 has an invalid length. [ 399.138036][T11106] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2382'. [ 399.164867][T11113] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2384'. [ 399.220889][T11106] netlink: 'syz.2.2382': attribute type 4 has an invalid length. [ 399.330476][T11106] netlink: 'syz.2.2382': attribute type 3 has an invalid length. [ 399.338644][T11106] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2382'. [ 400.336115][T11128] tun0: tun_chr_ioctl cmd 1074025677 [ 400.370851][T11128] tun0: linktype set to 774 [ 400.455606][T11142] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2394'. [ 401.232073][T11146] netlink: 'syz.0.2395': attribute type 17 has an invalid length. [ 401.284043][T11146] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2395'. [ 401.350707][T11146] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 401.448781][T11146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.477939][T11156] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2399'. [ 401.550918][T11151] netlink: 'syz.4.2397': attribute type 6 has an invalid length. [ 401.655322][T11163] netlink: 'syz.1.2412': attribute type 6 has an invalid length. [ 401.873469][T11173] netlink: 'syz.2.2404': attribute type 10 has an invalid length. [ 401.950167][T11173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.090054][T11173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.252039][T11173] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 402.273337][T11175] netlink: 'syz.1.2405': attribute type 21 has an invalid length. [ 402.302908][T11175] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2405'. [ 402.357722][T11175] netlink: 'syz.1.2405': attribute type 4 has an invalid length. [ 402.389821][T11175] netlink: 'syz.1.2405': attribute type 3 has an invalid length. [ 402.432339][T11175] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2405'. [ 402.491788][T11174] netlink: 'syz.2.2404': attribute type 10 has an invalid length. [ 402.742685][T11196] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2409'. [ 402.795067][T11200] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2411'. [ 402.819857][T11201] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2410'. [ 403.128617][T11211] netlink: 'syz.2.2416': attribute type 6 has an invalid length. [ 403.296496][T11215] tun0: tun_chr_ioctl cmd 1074025677 [ 403.304401][T11215] tun0: linktype set to 774 [ 403.472397][T11220] FAULT_INJECTION: forcing a failure. [ 403.472397][T11220] name failslab, interval 1, probability 0, space 0, times 0 [ 403.507776][T11220] CPU: 0 PID: 11220 Comm: syz.2.2420 Not tainted syzkaller #0 [ 403.515415][T11220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.525760][T11220] Call Trace: [ 403.529084][T11220] [ 403.532101][T11220] dump_stack_lvl+0x188/0x250 [ 403.536836][T11220] ? show_regs_print_info+0x20/0x20 [ 403.542259][T11220] ? load_image+0x400/0x400 [ 403.546954][T11220] ? __lock_acquire+0x7d10/0x7d10 [ 403.552283][T11220] should_fail+0x38c/0x4c0 [ 403.556937][T11220] should_failslab+0x5/0x20 [ 403.561701][T11220] slab_pre_alloc_hook+0x51/0xc0 [ 403.566700][T11220] __kmalloc+0x6b/0x330 [ 403.571433][T11220] ? sk_prot_alloc+0xe7/0x210 [ 403.576465][T11220] sk_prot_alloc+0xe7/0x210 [ 403.581060][T11220] ? sk_alloc+0x1d/0x310 [ 403.585842][T11220] sk_alloc+0x2f/0x310 [ 403.589969][T11220] bpf_prog_test_run_skb+0x240/0x1180 [ 403.595479][T11220] ? __fget_files+0x40f/0x480 [ 403.600223][T11220] ? cpu_online+0x60/0x60 [ 403.604800][T11220] bpf_prog_test_run+0x31e/0x390 [ 403.610509][T11220] __sys_bpf+0x5a5/0x6f0 [ 403.614816][T11220] ? bpf_link_show_fdinfo+0x380/0x380 [ 403.620623][T11220] ? vtime_user_exit+0x2c8/0x3e0 [ 403.625794][T11220] __x64_sys_bpf+0x78/0x90 [ 403.630538][T11220] do_syscall_64+0x4c/0xa0 [ 403.635488][T11220] ? clear_bhb_loop+0x30/0x80 [ 403.640310][T11220] ? clear_bhb_loop+0x30/0x80 [ 403.645493][T11220] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 403.651554][T11220] RIP: 0033:0x7f0adb3ab799 [ 403.656018][T11220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.678602][T11220] RSP: 002b:00007f0ad9605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.687427][T11220] RAX: ffffffffffffffda RBX: 00007f0adb624fa0 RCX: 00007f0adb3ab799 [ 403.696289][T11220] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 403.704632][T11220] RBP: 00007f0ad9605090 R08: 0000000000000000 R09: 0000000000000000 [ 403.713144][T11220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.721377][T11220] R13: 00007f0adb625038 R14: 00007f0adb624fa0 R15: 00007ffc1fd4ee68 [ 403.729612][T11220] [ 403.776931][T11223] netlink: 'syz.4.2421': attribute type 21 has an invalid length. [ 403.869790][T11223] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2421'. [ 403.950134][T11223] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2421'. [ 404.278602][T11242] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2427'. [ 404.301703][T11244] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.2425'. [ 405.082973][T11270] tun0: tun_chr_ioctl cmd 1074025677 [ 405.112695][T11270] tun0: linktype set to 774 [ 405.239786][T11278] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2439'. [ 405.315512][T11282] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2441'. [ 405.398554][T11282] bridge_slave_1: default FDB implementation only supports local addresses [ 405.442905][T11280] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2440'. [ 406.744483][T11335] validate_nla: 3 callbacks suppressed [ 406.744517][T11335] netlink: 'syz.3.2458': attribute type 21 has an invalid length. [ 407.031356][T11345] netlink: 'syz.1.2462': attribute type 29 has an invalid length. [ 407.064245][T11345] netlink: 'syz.1.2462': attribute type 3 has an invalid length. [ 407.312303][T11360] netlink: 'syz.3.2467': attribute type 10 has an invalid length. [ 407.354050][T11360] device geneve0 entered promiscuous mode [ 407.419821][T11360] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 407.740092][T11377] netlink: 'syz.4.2473': attribute type 6 has an invalid length. [ 408.334818][T11390] __nla_validate_parse: 6 callbacks suppressed [ 408.334856][T11390] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.2478'. [ 408.481933][T11390] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2478'. [ 408.532481][T11395] netlink: 'syz.4.2477': attribute type 21 has an invalid length. [ 408.591725][T11395] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2477'. [ 408.629326][T11390] netlink: 'syz.2.2478': attribute type 2 has an invalid length. [ 409.269666][T11390] bridge0: port 3(team0) entered disabled state [ 409.277387][T11390] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.286281][T11390] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.588671][T11407] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2482'. [ 409.625142][T11407] bridge_slave_1: default FDB implementation only supports local addresses [ 409.658736][T11410] netlink: 'syz.3.2483': attribute type 29 has an invalid length. [ 409.685972][T11415] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2485'. [ 409.700091][T11410] netlink: 'syz.3.2483': attribute type 3 has an invalid length. [ 409.723705][T11410] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2483'. [ 409.726109][T11407] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2482'. [ 409.924395][T11425] netlink: 'syz.1.2488': attribute type 6 has an invalid length. [ 409.963031][T11424] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2498'. [ 410.041187][T11424] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2498'. [ 410.195530][T11429] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2491'. [ 411.345153][T11477] bridge_slave_1: default FDB implementation only supports local addresses [ 413.489407][T11520] validate_nla: 5 callbacks suppressed [ 413.489428][T11520] netlink: 'syz.0.2524': attribute type 6 has an invalid length. [ 414.654491][T11540] __nla_validate_parse: 5 callbacks suppressed [ 414.654511][T11540] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2533'. [ 414.996254][T11564] netlink: 'syz.3.2541': attribute type 4 has an invalid length. [ 415.014394][T11564] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2541'. [ 415.182487][T11573] netlink: 'syz.4.2545': attribute type 6 has an invalid length. [ 415.400776][T11577] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2548'. [ 415.701867][T11585] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2551'. [ 415.803568][T11592] FAULT_INJECTION: forcing a failure. [ 415.803568][T11592] name failslab, interval 1, probability 0, space 0, times 0 [ 415.844838][T11592] CPU: 0 PID: 11592 Comm: syz.0.2554 Not tainted syzkaller #0 [ 415.852773][T11592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.863675][T11592] Call Trace: [ 415.867422][T11592] [ 415.870660][T11592] dump_stack_lvl+0x188/0x250 [ 415.875849][T11592] ? show_regs_print_info+0x20/0x20 [ 415.881285][T11592] ? load_image+0x400/0x400 [ 415.886064][T11592] ? __might_sleep+0xf0/0xf0 [ 415.890890][T11592] ? __lock_acquire+0x7d10/0x7d10 [ 415.896352][T11592] should_fail+0x38c/0x4c0 [ 415.901588][T11592] should_failslab+0x5/0x20 [ 415.906841][T11592] slab_pre_alloc_hook+0x51/0xc0 [ 415.911920][T11592] ? iget_locked+0x1f8/0x820 [ 415.916947][T11592] kmem_cache_alloc+0x3d/0x290 [ 415.922078][T11592] iget_locked+0x1f8/0x820 [ 415.926882][T11592] ? mark_lock+0x94/0x320 [ 415.931319][T11592] kernfs_get_inode+0x4b/0x6d0 [ 415.936362][T11592] cgroup_attach_permissions+0x2bc/0xa90 [ 415.942488][T11592] __cgroup_procs_write+0x1e4/0x350 [ 415.948057][T11592] cgroup_procs_write+0x23/0x40 [ 415.952962][T11592] ? cgroup_procs_next+0xa0/0xa0 [ 415.958003][T11592] cgroup_file_write+0x2c3/0x660 [ 415.963640][T11592] ? read_lock_is_recursive+0x10/0x10 [ 415.969607][T11592] ? cgroup_seqfile_stop+0xd0/0xd0 [ 415.975196][T11592] ? cgroup_seqfile_stop+0xd0/0xd0 [ 415.980522][T11592] kernfs_fop_write_iter+0x379/0x4c0 [ 415.986694][T11592] vfs_write+0x745/0xd60 [ 415.991460][T11592] ? file_end_write+0x250/0x250 [ 415.996965][T11592] ? __fget_files+0x40f/0x480 [ 416.004817][T11592] ? mutex_lock_nested+0x17/0x20 [ 416.010340][T11592] ? __fdget_pos+0x2bf/0x370 [ 416.014970][T11592] ? ksys_write+0x71/0x260 [ 416.020451][T11592] ksys_write+0x152/0x260 [ 416.025028][T11592] ? __ia32_sys_read+0x80/0x80 [ 416.030773][T11592] ? lockdep_hardirqs_on+0x94/0x140 [ 416.036678][T11592] do_syscall_64+0x4c/0xa0 [ 416.041899][T11592] ? clear_bhb_loop+0x30/0x80 [ 416.047015][T11592] ? clear_bhb_loop+0x30/0x80 [ 416.052560][T11592] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 416.058859][T11592] RIP: 0033:0x7fbbb6bcf799 [ 416.064237][T11592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.087093][T11592] RSP: 002b:00007fbbb4e29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 416.096236][T11592] RAX: ffffffffffffffda RBX: 00007fbbb6e48fa0 RCX: 00007fbbb6bcf799 [ 416.105264][T11592] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000007 [ 416.114723][T11592] RBP: 00007fbbb4e29090 R08: 0000000000000000 R09: 0000000000000000 [ 416.123772][T11592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.132505][T11592] R13: 00007fbbb6e49038 R14: 00007fbbb6e48fa0 R15: 00007ffe621be368 [ 416.141541][T11592] [ 416.340906][T11603] netlink: 'syz.4.2557': attribute type 6 has an invalid length. [ 416.457473][T11612] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2561'. [ 416.674547][T11614] netlink: 'syz.0.2558': attribute type 39 has an invalid length. [ 417.462957][T11645] FAULT_INJECTION: forcing a failure. [ 417.462957][T11645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.528685][T11645] CPU: 0 PID: 11645 Comm: syz.2.2566 Not tainted syzkaller #0 [ 417.537420][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.548553][T11645] Call Trace: [ 417.552262][T11645] [ 417.555532][T11645] dump_stack_lvl+0x188/0x250 [ 417.560584][T11645] ? show_regs_print_info+0x20/0x20 [ 417.566514][T11645] ? load_image+0x400/0x400 [ 417.571617][T11645] ? __lock_acquire+0x7d10/0x7d10 [ 417.577404][T11645] should_fail+0x38c/0x4c0 [ 417.582229][T11645] _copy_from_user+0x2e/0x170 [ 417.587227][T11645] ___sys_recvmsg+0x173/0x5c0 [ 417.592148][T11645] ? __sys_recvmsg+0x280/0x280 [ 417.597337][T11645] ? __lock_acquire+0x7d10/0x7d10 [ 417.602710][T11645] __x64_sys_recvmsg+0x1f9/0x2c0 [ 417.607790][T11645] ? ___sys_recvmsg+0x5c0/0x5c0 [ 417.612691][T11645] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 417.618930][T11645] ? lockdep_hardirqs_on+0x94/0x140 [ 417.624483][T11645] do_syscall_64+0x4c/0xa0 [ 417.629339][T11645] ? clear_bhb_loop+0x30/0x80 [ 417.634163][T11645] ? clear_bhb_loop+0x30/0x80 [ 417.639527][T11645] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.645820][T11645] RIP: 0033:0x7f0adb3ab799 [ 417.650290][T11645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.671236][T11645] RSP: 002b:00007f0ad95e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 417.680702][T11645] RAX: ffffffffffffffda RBX: 00007f0adb625090 RCX: 00007f0adb3ab799 [ 417.689020][T11645] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 417.697390][T11645] RBP: 00007f0ad95e4090 R08: 0000000000000000 R09: 0000000000000000 [ 417.707193][T11645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.713234][T11648] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2570'. [ 417.716180][T11645] R13: 00007f0adb625128 R14: 00007f0adb625090 R15: 00007ffc1fd4ee68 [ 417.716221][T11645] [ 417.914228][T11660] netlink: 'syz.2.2572': attribute type 6 has an invalid length. [ 417.936129][T11661] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2573'. [ 418.685400][T11696] netlink: 'syz.2.2585': attribute type 6 has an invalid length. [ 419.151689][T11704] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2588'. [ 419.571686][T11727] netlink: 134736 bytes leftover after parsing attributes in process `syz.3.2595'. [ 419.618404][T11727] netlink: 'syz.3.2595': attribute type 10 has an invalid length. [ 419.716596][T11727] bond0: (slave team0): Releasing backup interface [ 419.820148][T11727] team0 (unregistering): Port device team_slave_0 removed [ 419.871324][T11727] team0 (unregistering): Port device team_slave_1 removed [ 420.222228][T11751] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2603'. [ 421.903110][T11802] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2619'. [ 422.682651][T11826] netlink: 'syz.0.2629': attribute type 15 has an invalid length. [ 422.732207][T11826] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.2629'. [ 422.779822][T11832] netlink: 'syz.0.2629': attribute type 4 has an invalid length. [ 422.816991][T11835] FAULT_INJECTION: forcing a failure. [ 422.816991][T11835] name failslab, interval 1, probability 0, space 0, times 0 [ 422.856876][T11832] netlink: 'syz.0.2629': attribute type 5 has an invalid length. [ 422.895981][T11835] CPU: 0 PID: 11835 Comm: syz.1.2631 Not tainted syzkaller #0 [ 422.904640][T11835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 422.915167][T11835] Call Trace: [ 422.918506][T11835] [ 422.921574][T11835] dump_stack_lvl+0x188/0x250 [ 422.926314][T11835] ? show_regs_print_info+0x20/0x20 [ 422.931981][T11835] ? load_image+0x400/0x400 [ 422.936651][T11835] should_fail+0x38c/0x4c0 [ 422.941457][T11835] should_failslab+0x5/0x20 [ 422.946105][T11835] slab_pre_alloc_hook+0x51/0xc0 [ 422.951118][T11835] kmem_cache_alloc_trace+0x47/0x2a0 [ 422.956953][T11835] ? sctp_add_bind_addr+0x89/0x350 [ 422.962250][T11835] sctp_add_bind_addr+0x89/0x350 [ 422.967424][T11835] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 422.973123][T11835] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 422.979428][T11835] ? sctp_v4_is_any+0x31/0x50 [ 422.984264][T11835] ? sctp_copy_one_addr+0x93/0x660 [ 422.989589][T11835] sctp_bind_addr_copy+0xaf/0x3c0 [ 422.994928][T11835] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 423.002046][T11835] sctp_connect_new_asoc+0x2f5/0x6a0 [ 423.008392][T11835] ? __sctp_connect+0xd80/0xd80 [ 423.014009][T11835] ? __local_bh_enable_ip+0x136/0x1c0 [ 423.019623][T11835] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 423.025611][T11835] ? security_sctp_bind_connect+0x85/0xb0 [ 423.031803][T11835] sctp_sendmsg+0x158d/0x2900 [ 423.036781][T11835] ? aa_sk_perm+0x7dc/0x910 [ 423.042044][T11835] ? sctp_getsockopt+0x8a0/0x8a0 [ 423.047671][T11835] ? aa_af_perm+0x340/0x340 [ 423.052335][T11835] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 423.059595][T11835] ? sock_rps_record_flow+0x17/0x3b0 [ 423.065477][T11835] ? inet_sendmsg+0xe5/0x2f0 [ 423.070308][T11835] ? inet_send_prepare+0x260/0x260 [ 423.075684][T11835] ____sys_sendmsg+0x5b7/0x8f0 [ 423.080892][T11835] ? __sys_sendmsg_sock+0x30/0x30 [ 423.085991][T11835] ? import_iovec+0x6f/0xa0 [ 423.090648][T11835] ___sys_sendmsg+0x236/0x2e0 [ 423.093432][T11839] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2633'. [ 423.095858][T11835] ? __sys_sendmsg+0x2a0/0x2a0 [ 423.111640][T11835] ? vfs_write+0x8b2/0xd60 [ 423.118070][T11835] __se_sys_sendmsg+0x1af/0x290 [ 423.124597][T11835] ? __x64_sys_sendmsg+0x80/0x80 [ 423.131212][T11835] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 423.138600][T11835] ? lockdep_hardirqs_on+0x94/0x140 [ 423.145747][T11835] do_syscall_64+0x4c/0xa0 [ 423.146940][T11839] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 423.150781][T11835] ? clear_bhb_loop+0x30/0x80 [ 423.150818][T11835] ? clear_bhb_loop+0x30/0x80 [ 423.150842][T11835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 423.150869][T11835] RIP: 0033:0x7f7f3289e799 [ 423.150892][T11835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.150910][T11835] RSP: 002b:00007f7f30af8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.150934][T11835] RAX: ffffffffffffffda RBX: 00007f7f32b17fa0 RCX: 00007f7f3289e799 [ 423.150949][T11835] RDX: 0000000000000054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 423.150964][T11835] RBP: 00007f7f30af8090 R08: 0000000000000000 R09: 0000000000000000 [ 423.150982][T11835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.150994][T11835] R13: 00007f7f32b18038 R14: 00007f7f32b17fa0 R15: 00007ffd58baf618 [ 423.151028][T11835] [ 423.162449][T11832] netlink: 'syz.0.2629': attribute type 6 has an invalid length. [ 423.279649][T11832] netlink: 'syz.0.2629': attribute type 7 has an invalid length. [ 423.482175][T11849] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2636'. [ 423.560755][T11832] netlink: 'syz.0.2629': attribute type 11 has an invalid length. [ 423.579964][T11832] netlink: 'syz.0.2629': attribute type 15 has an invalid length. [ 423.602162][T11832] netlink: 'syz.0.2629': attribute type 16 has an invalid length. [ 423.649224][T11832] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.2629'. [ 424.580055][T11874] validate_nla: 7 callbacks suppressed [ 424.580077][T11874] netlink: 'syz.4.2645': attribute type 10 has an invalid length. [ 424.638280][T11874] device veth0_macvtap left promiscuous mode [ 424.985227][T11880] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.2649'. [ 425.104231][T11882] netlink: 'syz.1.2648': attribute type 16 has an invalid length. [ 425.139959][T11882] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2648'. [ 425.176688][T11882] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 425.473660][T11897] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2656'. [ 425.526498][T11897] bridge_slave_1: default FDB implementation only supports local addresses [ 425.559844][T11891] netlink: 'syz.3.2653': attribute type 15 has an invalid length. [ 425.589336][T11891] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.2653'. [ 425.619870][T11899] netlink: 'syz.3.2653': attribute type 4 has an invalid length. [ 425.660248][T11899] netlink: 'syz.3.2653': attribute type 5 has an invalid length. [ 425.687293][T11899] netlink: 'syz.3.2653': attribute type 6 has an invalid length. [ 425.704121][T11899] netlink: 'syz.3.2653': attribute type 7 has an invalid length. [ 425.715878][T11899] netlink: 'syz.3.2653': attribute type 11 has an invalid length. [ 425.758557][T11907] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2660'. [ 425.773452][T11899] netlink: 'syz.3.2653': attribute type 15 has an invalid length. [ 425.794451][T11899] netlink: 'syz.3.2653': attribute type 16 has an invalid length. [ 425.814060][T11899] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.2653'. [ 426.377145][T11909] device geneve1 entered promiscuous mode [ 426.614009][T11909] team0: Port device geneve1 added [ 427.115003][T11938] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2668'. [ 427.144363][T11938] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 427.153229][T11938] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 427.267205][T11946] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.2673'. [ 427.704885][T11960] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2676'. [ 427.769365][T11966] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.2678'. [ 427.819887][T11969] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.2678'. [ 427.870674][T11971] FAULT_INJECTION: forcing a failure. [ 427.870674][T11971] name failslab, interval 1, probability 0, space 0, times 0 [ 427.897999][T11971] CPU: 0 PID: 11971 Comm: syz.0.2681 Not tainted syzkaller #0 [ 427.907580][T11971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.920296][T11971] Call Trace: [ 427.923884][T11971] [ 427.927210][T11971] dump_stack_lvl+0x188/0x250 [ 427.932565][T11971] ? show_regs_print_info+0x20/0x20 [ 427.938387][T11971] ? load_image+0x400/0x400 [ 427.943676][T11971] ? __might_sleep+0xf0/0xf0 [ 427.948506][T11971] ? __lock_acquire+0x7d10/0x7d10 [ 427.954103][T11971] should_fail+0x38c/0x4c0 [ 427.958601][T11971] should_failslab+0x5/0x20 [ 427.963591][T11971] slab_pre_alloc_hook+0x51/0xc0 [ 427.968727][T11971] __kmalloc_node_track_caller+0x68/0x3a0 [ 427.975254][T11971] ? __ip_append_data+0x2105/0x32d0 [ 427.980961][T11971] ? kmem_cache_alloc_node+0x162/0x2d0 [ 427.986762][T11971] ? __alloc_skb+0xf4/0x750 [ 427.991705][T11971] ? __ip_append_data+0x2105/0x32d0 [ 427.997635][T11971] __alloc_skb+0x22c/0x750 [ 428.002644][T11971] __ip_append_data+0x2105/0x32d0 [ 428.007758][T11971] ? udp_sendmsg+0x2370/0x2370 [ 428.013616][T11971] ? ip_setup_cork+0x890/0x890 [ 428.018791][T11971] ? __local_bh_enable_ip+0x136/0x1c0 [ 428.024640][T11971] ip_append_data+0x132/0x1a0 [ 428.030696][T11971] ? udp_sendmsg+0x2370/0x2370 [ 428.035657][T11971] udp_sendmsg+0x5c0/0x2370 [ 428.040859][T11971] ? __lock_acquire+0x12e8/0x7d10 [ 428.046739][T11971] ? mark_lock+0x94/0x320 [ 428.052373][T11971] ? udp_sendmsg+0x2370/0x2370 [ 428.057750][T11971] ? __lock_acquire+0x12e8/0x7d10 [ 428.063277][T11971] ? udp_cmsg_send+0x350/0x350 [ 428.068125][T11971] ? perf_trace_lock_acquire+0xed/0x3e0 [ 428.074215][T11971] ? mark_lock+0x94/0x320 [ 428.079338][T11971] ? __lock_acquire+0x13bc/0x7d10 [ 428.084890][T11971] udpv6_sendmsg+0x4de/0x2650 [ 428.090270][T11971] ? aa_label_sk_perm+0x3d0/0x530 [ 428.096919][T11971] ? verify_lock_unused+0x140/0x140 [ 428.103208][T11971] ? udp_v6_early_demux+0xec0/0xec0 [ 428.110693][T11971] ? __lock_acquire+0x12e8/0x7d10 [ 428.118402][T11971] ? aa_sk_perm+0x7dc/0x910 [ 428.124317][T11971] ? aa_af_perm+0x340/0x340 [ 428.129996][T11971] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 428.137753][T11971] ? sock_rps_record_flow+0x17/0x3b0 [ 428.144893][T11971] ? inet_send_prepare+0x58/0x260 [ 428.150323][T11971] ? inet6_sendmsg+0x5b/0xd0 [ 428.155153][T11971] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 428.161709][T11971] ____sys_sendmsg+0x5b7/0x8f0 [ 428.168391][T11971] ? __sys_sendmsg_sock+0x30/0x30 [ 428.173771][T11971] ? import_iovec+0x6f/0xa0 [ 428.178403][T11971] ___sys_sendmsg+0x236/0x2e0 [ 428.183351][T11971] ? __sys_sendmsg+0x2a0/0x2a0 [ 428.188365][T11971] ? vfs_write+0x8b2/0xd60 [ 428.193969][T11971] __se_sys_sendmsg+0x1af/0x290 [ 428.199517][T11971] ? __x64_sys_sendmsg+0x80/0x80 [ 428.204636][T11971] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 428.211539][T11971] ? lockdep_hardirqs_on+0x94/0x140 [ 428.217980][T11971] do_syscall_64+0x4c/0xa0 [ 428.223129][T11971] ? clear_bhb_loop+0x30/0x80 [ 428.228308][T11971] ? clear_bhb_loop+0x30/0x80 [ 428.233633][T11971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 428.239854][T11971] RIP: 0033:0x7fbbb6bcf799 [ 428.244392][T11971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.266635][T11971] RSP: 002b:00007fbbb4e29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.275650][T11971] RAX: ffffffffffffffda RBX: 00007fbbb6e48fa0 RCX: 00007fbbb6bcf799 [ 428.284153][T11971] RDX: 0000000020000080 RSI: 00002000000006c0 RDI: 0000000000000003 [ 428.293292][T11971] RBP: 00007fbbb4e29090 R08: 0000000000000000 R09: 0000000000000000 [ 428.302304][T11971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.310705][T11971] R13: 00007fbbb6e49038 R14: 00007fbbb6e48fa0 R15: 00007ffe621be368 [ 428.320957][T11971] [ 428.325549][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 428.755975][T11987] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.2687'. [ 429.621177][T12016] validate_nla: 24 callbacks suppressed [ 429.621218][T12016] netlink: 'syz.4.2695': attribute type 16 has an invalid length. [ 429.637608][T12016] netlink: 'syz.4.2695': attribute type 21 has an invalid length. [ 429.647270][T12016] netlink: 'syz.4.2695': attribute type 25 has an invalid length. [ 429.656405][T12016] netlink: 'syz.4.2695': attribute type 27 has an invalid length. [ 429.666455][T12016] netlink: 'syz.4.2695': attribute type 28 has an invalid length. [ 429.676684][T12016] netlink: 'syz.4.2695': attribute type 29 has an invalid length. [ 429.692428][T12016] netlink: 'syz.4.2695': attribute type 7 has an invalid length. [ 430.402316][T12041] netlink: 'syz.1.2705': attribute type 41 has an invalid length. [ 430.517126][T12037] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 430.679590][T12039] netlink: 'syz.3.2707': attribute type 1 has an invalid length. [ 430.688327][T12039] __nla_validate_parse: 6 callbacks suppressed [ 430.688364][T12039] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2707'. [ 431.455914][T12076] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2719'. [ 431.604327][T12082] netlink: 'syz.1.2722': attribute type 27 has an invalid length. [ 431.679448][T12082] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2722'. [ 431.706649][T12082] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2722'. [ 431.741324][T12082] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2722'. [ 431.778660][ T4207] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 431.929104][T12082] device veth0_vlan left promiscuous mode [ 431.957086][T12082] device veth0_vlan entered promiscuous mode [ 432.020437][T12082] team0: Device veth0_vlan failed to register rx_handler [ 432.547873][T12096] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2724'. [ 432.562022][T12099] bond0: (slave bridge0): Error: Slave device does not support XDP [ 432.684492][T12106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.903272][T12118] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2733'. [ 433.127148][T12123] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2737'. [ 433.170800][T12123] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2737'. [ 433.242125][T12126] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2737'. [ 434.461006][T12171] batman_adv: batadv0: Adding interface: veth0_vlan [ 434.482146][T12171] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.516909][ T4207] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 434.525130][T12171] batman_adv: batadv0: Interface activated: veth0_vlan [ 434.930909][T12172] device veth0_vlan left promiscuous mode [ 434.958540][T12172] device veth0_vlan entered promiscuous mode [ 435.068639][T12172] team0: Device veth0_vlan failed to register rx_handler [ 435.611120][T12208] validate_nla: 8 callbacks suppressed [ 435.611138][T12208] netlink: 'syz.0.2770': attribute type 39 has an invalid length. [ 435.623003][T12205] netlink: get zone limit has 8 unknown bytes [ 435.714937][T12208] FAULT_INJECTION: forcing a failure. [ 435.714937][T12208] name failslab, interval 1, probability 0, space 0, times 0 [ 435.728978][T12205] __nla_validate_parse: 7 callbacks suppressed [ 435.729001][T12205] netlink: 751 bytes leftover after parsing attributes in process `syz.2.2779'. [ 435.751381][T12208] CPU: 1 PID: 12208 Comm: syz.0.2770 Not tainted syzkaller #0 [ 435.759611][T12208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.771160][T12208] Call Trace: [ 435.774891][T12208] [ 435.778461][T12208] dump_stack_lvl+0x188/0x250 [ 435.783850][T12208] ? show_regs_print_info+0x20/0x20 [ 435.790728][T12208] ? load_image+0x400/0x400 [ 435.795887][T12208] ? __might_sleep+0xf0/0xf0 [ 435.801389][T12208] ? __lock_acquire+0x7d10/0x7d10 [ 435.807549][T12208] should_fail+0x38c/0x4c0 [ 435.812689][T12208] should_failslab+0x5/0x20 [ 435.818186][T12208] slab_pre_alloc_hook+0x51/0xc0 [ 435.824109][T12208] kmem_cache_alloc_node+0x47/0x2d0 [ 435.830038][T12208] ? __alloc_skb+0xf4/0x750 [ 435.835612][T12208] __alloc_skb+0xf4/0x750 [ 435.840455][T12208] netlink_ack+0x372/0xb50 [ 435.845423][T12208] ? __copy_skb_header+0x3ba/0x4f0 [ 435.852398][T12208] ? netlink_dump+0xcf0/0xcf0 [ 435.857589][T12208] ? __skb_clone+0x480/0x790 [ 435.863411][T12208] netlink_rcv_skb+0x27a/0x440 [ 435.869862][T12208] ? rtnetlink_bind+0x80/0x80 [ 435.875197][T12208] ? netlink_ack+0xb50/0xb50 [ 435.880234][T12208] netlink_unicast+0x774/0x920 [ 435.885342][T12208] netlink_sendmsg+0x8ba/0xbe0 [ 435.890280][T12208] ? netlink_getsockopt+0x570/0x570 [ 435.896274][T12208] ? aa_sock_msg_perm+0x94/0x150 [ 435.901645][T12208] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 435.907626][T12208] ? security_socket_sendmsg+0x7c/0xa0 [ 435.913433][T12208] ? netlink_getsockopt+0x570/0x570 [ 435.919730][T12208] ____sys_sendmsg+0x5b7/0x8f0 [ 435.925035][T12208] ? __sys_sendmsg_sock+0x30/0x30 [ 435.930589][T12208] ? import_iovec+0x6f/0xa0 [ 435.935393][T12208] ___sys_sendmsg+0x236/0x2e0 [ 435.940386][T12208] ? __sys_sendmsg+0x2a0/0x2a0 [ 435.945875][T12208] __se_sys_sendmsg+0x1af/0x290 [ 435.951114][T12208] ? __x64_sys_sendmsg+0x80/0x80 [ 435.956302][T12208] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 435.962816][T12208] ? lockdep_hardirqs_on+0x94/0x140 [ 435.968606][T12208] do_syscall_64+0x4c/0xa0 [ 435.973562][T12208] ? clear_bhb_loop+0x30/0x80 [ 435.978687][T12208] ? clear_bhb_loop+0x30/0x80 [ 435.983729][T12208] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 435.989955][T12208] RIP: 0033:0x7fbbb6bcf799 [ 435.994955][T12208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.017976][T12208] RSP: 002b:00007fbbb4e29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.028131][T12208] RAX: ffffffffffffffda RBX: 00007fbbb6e48fa0 RCX: 00007fbbb6bcf799 [ 436.037365][T12208] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 436.048276][T12208] RBP: 00007fbbb4e29090 R08: 0000000000000000 R09: 0000000000000000 [ 436.057059][T12208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.066144][T12208] R13: 00007fbbb6e49038 R14: 00007fbbb6e48fa0 R15: 00007ffe621be368 [ 436.074916][T12208] [ 436.169439][T12206] bond0: (slave geneve0): Error: Slave device does not support XDP [ 436.366935][T12229] FAULT_INJECTION: forcing a failure. [ 436.366935][T12229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.396188][T12229] CPU: 0 PID: 12229 Comm: syz.3.2775 Not tainted syzkaller #0 [ 436.404584][T12229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.415674][T12229] Call Trace: [ 436.419439][T12229] [ 436.422430][T12229] dump_stack_lvl+0x188/0x250 [ 436.427344][T12229] ? show_regs_print_info+0x20/0x20 [ 436.433127][T12229] ? load_image+0x400/0x400 [ 436.437840][T12229] ? __lock_acquire+0x7d10/0x7d10 [ 436.444229][T12229] should_fail+0x38c/0x4c0 [ 436.449070][T12229] _copy_from_user+0x2e/0x170 [ 436.454074][T12229] sctp_setsockopt+0x191/0xf80 [ 436.458930][T12229] ? sock_common_recvmsg+0x1c0/0x1c0 [ 436.464453][T12229] __sys_setsockopt+0x2bf/0x3d0 [ 436.469539][T12229] __x64_sys_setsockopt+0xb1/0xc0 [ 436.474906][T12229] do_syscall_64+0x4c/0xa0 [ 436.479841][T12229] ? clear_bhb_loop+0x30/0x80 [ 436.484670][T12229] ? clear_bhb_loop+0x30/0x80 [ 436.489709][T12229] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.496436][T12229] RIP: 0033:0x7f0fb5613799 [ 436.501263][T12229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.524145][T12229] RSP: 002b:00007f0fb386d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 436.532766][T12229] RAX: ffffffffffffffda RBX: 00007f0fb588cfa0 RCX: 00007f0fb5613799 [ 436.541463][T12229] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 436.550638][T12229] RBP: 00007f0fb386d090 R08: 0000000000000008 R09: 0000000000000000 [ 436.559051][T12229] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.567373][T12229] R13: 00007f0fb588d038 R14: 00007f0fb588cfa0 R15: 00007ffea870eb68 [ 436.576452][T12229] [ 436.593714][T12235] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2778'. [ 436.734195][T12243] netlink: 'syz.0.2780': attribute type 27 has an invalid length. [ 436.818181][T12244] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2780'. [ 436.846600][T12244] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2780'. [ 436.901519][T12252] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.2785'. [ 436.954336][ T4207] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 436.965185][T12243] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2780'. [ 436.981888][T12244] netlink: 'syz.0.2780': attribute type 10 has an invalid length. [ 437.257876][T12244] device veth0_vlan left promiscuous mode [ 437.297273][T12244] device veth0_vlan entered promiscuous mode [ 437.346831][T12244] team0: Device veth0_vlan failed to register rx_handler [ 437.666668][T12275] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2793'. [ 437.910919][T12279] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.2795'. [ 438.452440][T12295] netlink: 'syz.4.2799': attribute type 12 has an invalid length. [ 438.510411][T12295] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2799'. [ 439.192595][T12307] netlink: 'syz.4.2802': attribute type 1 has an invalid length. [ 439.498007][T12307] netlink: 'syz.4.2802': attribute type 3 has an invalid length. [ 439.609905][T12307] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2802'. [ 439.988825][T12322] netlink: 'syz.4.2805': attribute type 27 has an invalid length. [ 440.137223][ T4207] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 440.157556][T12322] netlink: 'syz.4.2805': attribute type 10 has an invalid length. [ 440.172068][T12322] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 440.436419][T12322] batman_adv: batadv0: Removing interface: veth0_vlan [ 440.500715][T12322] device veth0_vlan left promiscuous mode [ 440.513291][T12322] device veth0_vlan entered promiscuous mode [ 440.539886][T12322] team0: Device veth0_vlan failed to register rx_handler [ 440.672623][T12340] netlink: 'syz.2.2812': attribute type 12 has an invalid length. [ 440.931454][T12349] __nla_validate_parse: 5 callbacks suppressed [ 440.931476][T12349] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2815'. [ 440.950014][T12349] netlink: 21648 bytes leftover after parsing attributes in process `syz.0.2815'. [ 441.172938][T12361] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2818'. [ 442.156100][T12370] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2822'. [ 442.328370][T12376] netlink: 'syz.0.2825': attribute type 12 has an invalid length. [ 442.358951][T12376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2825'. [ 442.735439][ C0] [ 442.735450][ C0] ================================ [ 442.735456][ C0] WARNING: inconsistent lock state [ 442.735467][ C0] syzkaller #0 Not tainted [ 442.735479][ C0] -------------------------------- [ 442.735484][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 442.735493][ C0] syz.4.2832/12392 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 442.735518][ C0] ffff88807e843238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 442.735572][ C0] {INITIAL USE} state was registered at: [ 442.735580][ C0] lock_acquire+0x19e/0x400 [ 442.735603][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 442.735621][ C0] trie_update_elem+0xc7/0xc50 [ 442.735640][ C0] bpf_map_update_value+0x57d/0x650 [ 442.735660][ C0] map_update_elem+0x626/0x770 [ 442.735679][ C0] __sys_bpf+0x46b/0x6f0 [ 442.735697][ C0] __x64_sys_bpf+0x78/0x90 [ 442.735715][ C0] do_syscall_64+0x4c/0xa0 [ 442.735734][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.735753][ C0] irq event stamp: 1396 [ 442.735760][ C0] hardirqs last enabled at (1395): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 442.735788][ C0] hardirqs last disabled at (1396): [] exc_debug+0x6e/0x130 [ 442.735812][ C0] softirqs last enabled at (1352): [] local_bh_enable+0x5/0x20 [ 442.735837][ C0] softirqs last disabled at (1342): [] local_bh_disable+0x5/0x20 [ 442.735861][ C0] [ 442.735861][ C0] other info that might help us debug this: [ 442.735867][ C0] Possible unsafe locking scenario: [ 442.735867][ C0] [ 442.735872][ C0] CPU0 [ 442.735875][ C0] ---- [ 442.735878][ C0] lock(&trie->lock); [ 442.735924][ C0] [ 442.735928][ C0] lock(&trie->lock); [ 442.735939][ C0] [ 442.735939][ C0] *** DEADLOCK *** [ 442.735939][ C0] [ 442.735943][ C0] no locks held by syz.4.2832/12392. [ 442.735951][ C0] [ 442.735951][ C0] stack backtrace: [ 442.735957][ C0] CPU: 0 PID: 12392 Comm: syz.4.2832 Not tainted syzkaller #0 [ 442.735977][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.735988][ C0] Call Trace: [ 442.735995][ C0] <#DB> [ 442.736003][ C0] dump_stack_lvl+0x188/0x250 [ 442.736030][ C0] ? show_regs_print_info+0x20/0x20 [ 442.736068][ C0] ? print_usage_bug+0x42a/0x690 [ 442.736094][ C0] ? verify_lock_unused+0x18/0x140 [ 442.736126][ C0] lock_acquire+0x2c3/0x400 [ 442.736148][ C0] ? rcu_lock_acquire+0x5/0x30 [ 442.736168][ C0] ? rcu_lock_release+0x5/0x40 [ 442.736192][ C0] ? trie_delete_elem+0x90/0x710 [ 442.736218][ C0] ? read_lock_is_recursive+0x10/0x10 [ 442.736246][ C0] ? look_up_lock_class+0x71/0x110 [ 442.736273][ C0] ? verify_lock_unused+0x18/0x140 [ 442.736303][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 442.736323][ C0] ? trie_delete_elem+0x90/0x710 [ 442.736346][ C0] ? _raw_spin_lock+0x40/0x40 [ 442.736369][ C0] ? rcu_lock_acquire+0x9/0x30 [ 442.736400][ C0] trie_delete_elem+0x90/0x710 [ 442.736429][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 442.736461][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xf94 [ 442.736485][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 442.736519][ C0] ? perf_event_switch_output+0x730/0x730 [ 442.736557][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 442.736585][ C0] __perf_event_overflow+0x364/0x530 [ 442.736618][ C0] perf_swevent_event+0x4ad/0x530 [ 442.736650][ C0] perf_bp_event+0x276/0x320 [ 442.736681][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 442.736749][ C0] ? rcu_lock_acquire+0x9/0x30 [ 442.736775][ C0] ? read_lock_is_recursive+0x10/0x10 [ 442.736813][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 442.736845][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 442.736877][ C0] notify_die+0x141/0x1a0 [ 442.736904][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 442.736937][ C0] ? exc_debug+0x6e/0x130 [ 442.736957][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 442.736983][ C0] notify_debug+0x20/0x30 [ 442.737003][ C0] exc_debug+0xcf/0x130 [ 442.737029][ C0] asm_exc_debug+0x1a/0x40 [ 442.737049][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 442.737075][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 442.737101][ C0] RSP: 0018:ffffc9000335fd08 EFLAGS: 00050202 [ 442.737118][ C0] RAX: ffffffff83e3e101 RBX: 0000000000000080 RCX: 000000000000007e [ 442.737133][ C0] RDX: 0000000000000080 RSI: 0000200000000302 RDI: ffffc9000335fe22 [ 442.737148][ C0] RBP: 0000000000000000 R08: ffffc9000335fe9f R09: 1ffff9200066bfd3 [ 442.737162][ C0] R10: dffffc0000000000 R11: fffff5200066bfd4 R12: 00007ffffffff000 [ 442.737178][ C0] R13: 0000200000000380 R14: ffffc9000335fe20 R15: 0000200000000300 [ 442.737206][ C0] ? _copy_from_user+0x31/0x170 [ 442.737237][ C0] [ 442.737243][ C0] [ 442.737249][ C0] _copy_from_user+0xfa/0x170 [ 442.737275][ C0] perf_copy_attr+0x167/0x840 [ 442.737308][ C0] __se_sys_perf_event_open+0xf5/0x1bb0 [ 442.737346][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 442.737395][ C0] ? syscall_enter_from_user_mode+0x2a/0x70 [ 442.737418][ C0] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 442.737445][ C0] do_syscall_64+0x4c/0xa0 [ 442.737465][ C0] ? clear_bhb_loop+0x30/0x80 [ 442.737485][ C0] ? clear_bhb_loop+0x30/0x80 [ 442.737509][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.737530][ C0] RIP: 0033:0x7f8096a9f799 [ 442.737549][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.737566][ C0] RSP: 002b:00007f8094cf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 442.737586][ C0] RAX: ffffffffffffffda RBX: 00007f8096d18fa0 RCX: 00007f8096a9f799 [ 442.737602][ C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000300 [ 442.737616][ C0] RBP: 00007f8096b35c99 R08: 000000000000000b R09: 0000000000000000 [ 442.737630][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 442.737644][ C0] R13: 00007f8096d19038 R14: 00007f8096d18fa0 R15: 00007fffbf4cc478 [ 442.737684][ C0] [ 446.161895][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.168586][ T1421] ieee802154 phy1 wpan1: encryption failed: -22