last executing test programs: 6.228267058s ago: executing program 4 (id=5487): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$SIOCSIFHWADDR(r0, 0x89f6, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) 5.97674375s ago: executing program 3 (id=5491): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0xb, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a80009002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) recvmsg$kcm(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)=""/73, 0x49}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000580)=""/112, 0x70}, {&(0x7f0000000600)=""/156, 0x9c}], 0x5, &(0x7f00000006c0)=""/64, 0x40}, 0x42) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r9 = perf_event_open$cgroup(&(0x7f0000000900)={0x5, 0x80, 0x29, 0x4, 0x0, 0xf7, 0x0, 0xfff, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000008c0), 0x4}, 0x490, 0x3, 0x4ae, 0x7, 0x4, 0x6, 0x4, 0x0, 0x1, 0x0, 0x7}, r7, 0xffffffffffffffff, r8, 0xe) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x1) 5.404383892s ago: executing program 4 (id=5492): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000280), &(0x7f0000000140)}, 0x20) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000011c0)={0x0, 0x41, &(0x7f0000000080)=[{&(0x7f0000000440)="81a4c24dd4030e7327a047df93609b3242d919a5e48ccde364a62a6655eadb247769442ee4a902fad41a30c618daf8ab5182c93e9d61e651fae41ed639aea0725ff60ef425b400ea81aad4b2fc0985", 0x4f}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x80108907, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xfdef) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, 0x0, 0xfdef) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db00b904021d0800fd007c05e8fe55a10a000140014002020a0e1888caa971afff00060411000000160026000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x0) 5.322668519s ago: executing program 3 (id=5495): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1807, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2010a600, 0x0, 0x24, 0x0, 0x0, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000bc0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @broadcast}, 0x80, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000006, 0x0, @perf_config_ext, 0x100820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x7d}, 0x100c, 0x5, 0x0, 0x9, 0x0, 0x7, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000002000000061000eed4763ad5000f9cea50abebe5d7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) 4.733856763s ago: executing program 1 (id=5498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb701) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'wg2\x00'}) 4.645993931s ago: executing program 1 (id=5499): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2140) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x2100, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff00000000000000020000dc00020000000000001202000000020000000000000e0300"], 0x0, 0x54}, 0x28) 4.356903406s ago: executing program 1 (id=5502): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x21, &(0x7f0000000200), 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x12) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20004000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8018001201", 0x2e}], 0x1}, 0x24000000) 4.356269917s ago: executing program 4 (id=5503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000000) openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x5, &(0x7f00000000c0), 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000855400002500000095000000000000006cf526cbf14e2e8804c8b657d21991cd7db8c1ac1c1732c548c3eb79df4a5c3537aad4c9261722598bd9"], &(0x7f0000000000)='GPL\x00', 0x4, 0xd2, &(0x7f0000000040)=""/210}, 0x21) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000600), 0x1000, r12}, 0x38) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r9) 4.249257206s ago: executing program 3 (id=5505): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000078300721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 3.853872002s ago: executing program 1 (id=5507): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="ffffffffffffffff098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 3.753973301s ago: executing program 3 (id=5508): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"}) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='\x00') r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$sock(r7, &(0x7f0000000240)={&(0x7f0000000100)=@nl=@kern={0x10, 0x0, 0x0, 0x40000}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r8) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x76, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) socket$kcm(0x21, 0x2, 0x2) 2.998273449s ago: executing program 2 (id=5512): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='io.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000000)=r3, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000580)=@in6={0xa, 0xce63, 0x0, @loopback={0xfe80000000000000}}, 0x80, 0x0}, 0x0) 981.804981ms ago: executing program 0 (id=5513): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000200000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014006500b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) 981.574571ms ago: executing program 1 (id=5514): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000280), &(0x7f0000000140)}, 0x20) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000011c0)={0x0, 0x41, &(0x7f0000000080)=[{&(0x7f0000000440)="81a4c24dd4030e7327a047df93609b3242d919a5e48ccde364a62a6655eadb247769442ee4a902fad41a30c618daf8ab5182c93e9d61e651fae41ed639aea0725ff60ef425b400ea81aad4b2fc0985", 0x4f}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x80108907, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xfdef) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, 0x0, 0xfdef) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db00b904021d0800fd007c05e8fe55a10a000140014002020a0e1888caa971afff00060411000000160026000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43db", 0xbd}], 0x1}, 0x0) 943.955975ms ago: executing program 4 (id=5515): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 15) 927.510696ms ago: executing program 2 (id=5516): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2140) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2, 0x3c}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) 917.638507ms ago: executing program 3 (id=5517): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x8, 0x2}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x67d46b41afb03d78) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b07000000000000000000000080000000000000fb45f45259a148e72b2eb62cada491b80bcc4610ab4bb05ce1ff323d6e91011212146b90f383181f5d60", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000500)="df9c006348bc64803403fd9f5ecc20e681a3d1dbd78a26fba574b8b196ef1a58aa90474017522980720e85e72ef40fdb7230c344ef9bb0eacb5b484dd12031647ac9508470b4c0506834710824e895f544861c23b3e63e6b4c26c709894d25340802bbc68853f3c1c707c01a54d2b0440ab8820453e4d9bef05039e58e22dc2beeafe73f71caf7783a56229d5d6879", &(0x7f0000000000)=""/27, 0x4}, 0x20) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000d0000001569167ea9dfcda7fa040000000200000000e50000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7}, &(0x7f0000000300), &(0x7f0000000400)=r1}, 0x20) r8 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x141) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20) 861.782102ms ago: executing program 0 (id=5519): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c0340060000a1", 0x1c}], 0x1}, 0x0) 463.689578ms ago: executing program 2 (id=5520): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="b4000000000b00007910000000000000db100003a10803009500740000000000079c69dc7ded5dbe11b62ac5ea9fca11027d19e93adb605feb92de3145e8ed7ac5b8902070213cdfdc646c4890cdeb50347c32060581172b94c6dd22a2b589b6cbad46ed6ef79f7468f5e603950c4f67581c92ef8a7e000017d5f1110ed29d3b2aaf153bcf69bebf18262352ba68d39942c3b567e06411d8879622f74cc431dabd332c4c4702e4c3d41bfb54b574e8947309c7503c3e8ea23e12e064f442e8cbeab77cdf1ebd8465593c0000000000000000000000000000006f429b14459ffd88bee4b9d894ddad0980af53a1feb155f1010400bfb5b81b73035fd5a76985d4710fb6fbfb2a933a09dd6317e77ca962327022fb34017197ff712a35c63cdd0dec053fdbc310f29c6b8be788b559a80135bb7369351b952ade2339eddde60eb16301b0f4640be5852e1cef861b861b7b19ea03dfc83f729d02e9e73db24dd5dfb09d4b1bbbd5dd5daa4615b0845f264f229f9806862e116612ade616b1769e97549d095b0a4d02801406491d77a65fe74f8aa67391e8cb3c000020000000000083b92cdfc143ceba1c18cab05100ecc4"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu<20\t&&') r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x37, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x3b, 0x0, 0x0) 386.201175ms ago: executing program 4 (id=5521): r0 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6) (async) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e1208001e0000000401a8001200fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) (async) close(r4) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[], 0xa) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffffffffd98, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x894a, &(0x7f0000000080)) 261.872266ms ago: executing program 0 (id=5522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb701) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'wg2\x00'}) 205.493021ms ago: executing program 3 (id=5523): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03210000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 143.695546ms ago: executing program 4 (id=5524): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001c80)=ANY=[], 0x2f8}, 0x20000080) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x78) 98.898661ms ago: executing program 0 (id=5525): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00', 0x8000000}, 0x80) 98.614751ms ago: executing program 2 (id=5526): socket$kcm(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xd7, 0xfffffff8, 0x0, 0x42410, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f00000005c0)="172d2784a189ebab810dfc57ccd013759de3af7fb006797deb886e509c0d655685cf4bd3d68a408b8b8201441099d803696c9687bdb1bf45f0580881f5fe513602a8383a600b3e0c2f01a4aea9073fc0c5a789d90bac007eea2a99f1cc059fe8c42c6ca7a709bf065c70ab464c48080325fbd03cd537d556f9aa68714005232b37479784c5a7242c351ec33e3abf2a809c19e365ffe7d499a713cceedd205796defcdefb814ae9cab5d80ac8730129d36994d6bfb1914e7ad5b5df0348f863d2d87f48f9b6d5617fd036433e5debe72d07af3bf1cfa866ed60d61fbacc", &(0x7f00000003c0)=""/124, 0x7567ace70fd23b87}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x1, 0x84) 0s ago: executing program 1 (id=5527): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6400}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x6400, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) kernel console output (not intermixed with test programs): 132 bytes leftover after parsing attributes in process `syz.1.3763'. [ 618.442347][T15763] netlink: 'syz.0.3771': attribute type 3 has an invalid length. [ 618.479853][T15763] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3771'. [ 618.770146][T15779] netlink: 'syz.1.3776': attribute type 3 has an invalid length. [ 618.788876][T15779] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3776'. [ 618.881741][T15781] netlink: 'syz.2.3778': attribute type 3 has an invalid length. [ 618.899220][T15781] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3778'. [ 618.993228][T15784] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3780'. [ 619.119372][T15792] netlink: 'syz.3.3783': attribute type 11 has an invalid length. [ 619.139303][T15792] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3783'. [ 619.894066][T15791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.129360][T15817] validate_nla: 1 callbacks suppressed [ 620.129379][T15817] netlink: 'syz.1.3791': attribute type 10 has an invalid length. [ 620.207000][T15817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3791'. [ 622.094562][T15838] netlink: 'syz.3.3799': attribute type 1 has an invalid length. [ 622.113244][T15838] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3799'. [ 622.278181][T15848] netlink: 'syz.0.3803': attribute type 11 has an invalid length. [ 622.332286][T15848] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3803'. [ 622.462704][T15858] netlink: 'syz.3.3807': attribute type 10 has an invalid length. [ 622.886375][T15867] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3810'. [ 622.969644][T15847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.349542][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.355970][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.641682][T15876] netlink: 'syz.3.3814': attribute type 10 has an invalid length. [ 625.800156][T15883] netlink: 'syz.1.3815': attribute type 3 has an invalid length. [ 625.884950][T15883] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3815'. [ 626.257931][T15887] netlink: 'syz.3.3817': attribute type 1 has an invalid length. [ 626.327458][T15887] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3817'. [ 626.492731][T15901] netlink: 'syz.4.3821': attribute type 11 has an invalid length. [ 626.503890][T15901] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3821'. [ 627.277494][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.357484][T15918] netlink: 'syz.2.3826': attribute type 11 has an invalid length. [ 627.382583][T15918] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3826'. [ 628.212141][T15917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.935608][T15958] device syzkaller0 entered promiscuous mode [ 629.489467][T15966] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3845'. [ 629.719690][T15966] team0: Port device team_slave_0 removed [ 629.760475][T15966] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 629.984876][T15978] netlink: 'syz.4.3849': attribute type 11 has an invalid length. [ 630.021305][T15978] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3849'. [ 631.788434][T15977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.958250][T16000] netlink: 'syz.1.3856': attribute type 2 has an invalid length. [ 632.179798][T16000] device 0 entered promiscuous mode [ 632.205980][T16005] netlink: 'syz.0.3859': attribute type 27 has an invalid length. [ 632.248920][T16005] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 632.675496][T16026] netlink: 'syz.2.3864': attribute type 3 has an invalid length. [ 632.702058][T16018] Ÿë: port 2(erspan0) entered blocking state [ 632.716345][T16018] Ÿë: port 2(erspan0) entered disabled state [ 632.725814][T16026] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3864'. [ 632.802799][T16018] device erspan0 entered promiscuous mode [ 632.847989][T16020] Ÿë: port 2(erspan0) entered blocking state [ 632.854346][T16020] Ÿë: port 2(erspan0) entered forwarding state [ 632.911621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): Ÿë: link becomes ready [ 633.903012][T16048] FAULT_INJECTION: forcing a failure. [ 633.903012][T16048] name failslab, interval 1, probability 0, space 0, times 0 [ 633.977173][T16048] CPU: 1 PID: 16048 Comm: syz.4.3871 Not tainted syzkaller #0 [ 633.984718][T16048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.995817][T16048] Call Trace: [ 633.999114][T16048] [ 634.002051][T16048] dump_stack_lvl+0x188/0x24e [ 634.006747][T16048] ? show_regs_print_info+0x12/0x12 [ 634.011961][T16048] ? load_image+0x400/0x400 [ 634.016477][T16048] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.022479][T16048] should_fail_ex+0x399/0x4d0 [ 634.027173][T16048] should_failslab+0x5/0x20 [ 634.031693][T16048] slab_pre_alloc_hook+0x59/0x310 [ 634.036734][T16048] kmem_cache_alloc+0x56/0x2f0 [ 634.041497][T16048] ? __build_skb+0x2a/0x3c0 [ 634.046004][T16048] __build_skb+0x2a/0x3c0 [ 634.050351][T16048] build_skb+0x1e/0x230 [ 634.054513][T16048] bpf_prog_test_run_skb+0x37e/0x12a0 [ 634.059888][T16048] ? __fget_files+0x28/0x4b0 [ 634.064617][T16048] ? __fget_files+0x43d/0x4b0 [ 634.069766][T16048] ? cpu_online+0xa0/0xa0 [ 634.074158][T16048] bpf_prog_test_run+0x31e/0x390 [ 634.079141][T16048] __sys_bpf+0x62b/0x780 [ 634.083405][T16048] ? bpf_link_show_fdinfo+0x380/0x380 [ 634.089004][T16048] ? lock_chain_count+0x20/0x20 [ 634.094590][T16048] __x64_sys_bpf+0x78/0x90 [ 634.099158][T16048] do_syscall_64+0x4c/0xa0 [ 634.103619][T16048] ? clear_bhb_loop+0x60/0xb0 [ 634.108414][T16048] ? clear_bhb_loop+0x60/0xb0 [ 634.113092][T16048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 634.118983][T16048] RIP: 0033:0x7f6098b9c629 [ 634.123572][T16048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.143222][T16048] RSP: 002b:00007f60999fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 634.151721][T16048] RAX: ffffffffffffffda RBX: 00007f6098e15fa0 RCX: 00007f6098b9c629 [ 634.159708][T16048] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 634.167810][T16048] RBP: 00007f60999fe090 R08: 0000000000000000 R09: 0000000000000000 [ 634.175819][T16048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.183888][T16048] R13: 00007f6098e16038 R14: 00007f6098e15fa0 R15: 00007ffc7f2e9c58 [ 634.192070][T16048] [ 634.543020][T16060] netlink: 'syz.2.3876': attribute type 1 has an invalid length. [ 634.565377][T16060] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3876'. [ 635.635763][T16086] netlink: 'syz.1.3886': attribute type 11 has an invalid length. [ 635.681124][T16086] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3886'. [ 636.364107][T16085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.668005][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 637.710371][T16142] netlink: 'syz.1.3906': attribute type 11 has an invalid length. [ 637.744301][T16142] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3906'. [ 637.928750][T16151] netlink: 'syz.0.3911': attribute type 25 has an invalid length. [ 638.596273][T16140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.956093][T16176] netlink: 'syz.1.3916': attribute type 1 has an invalid length. [ 638.977953][T16176] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3916'. [ 639.090385][T16181] netlink: 'syz.4.3920': attribute type 9 has an invalid length. [ 639.107794][T16181] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.3920'. [ 639.444427][T16193] netlink: 'syz.2.3925': attribute type 12 has an invalid length. [ 639.450647][T16195] netlink: 'syz.3.3926': attribute type 11 has an invalid length. [ 639.457908][T16193] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3925'. [ 639.482498][T16195] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3926'. [ 640.123407][T16206] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3929'. [ 640.161023][T16206] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 640.171975][T16206] CPU: 1 PID: 16206 Comm: syz.2.3929 Not tainted syzkaller #0 [ 640.179497][T16206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.189575][T16206] Call Trace: [ 640.192894][T16206] [ 640.195857][T16206] dump_stack_lvl+0x188/0x24e [ 640.200572][T16206] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 640.207377][T16206] ? show_regs_print_info+0x12/0x12 [ 640.212625][T16206] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 640.218834][T16206] sysfs_warn_dup+0x8a/0xa0 [ 640.223380][T16206] sysfs_do_create_link_sd+0xc0/0x110 [ 640.228969][T16206] device_add+0x7ed/0xfb0 [ 640.233383][T16206] wiphy_register+0x1d9f/0x2ac0 [ 640.238290][T16206] ? cfg80211_event_work+0x40/0x40 [ 640.243440][T16206] ? minstrel_ht_alloc+0x894/0xa20 [ 640.248683][T16206] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 640.254785][T16206] ieee80211_register_hw+0x2d00/0x39f0 [ 640.260303][T16206] ? ieee80211_register_hw+0xeb1/0x39f0 [ 640.265888][T16206] ? ieee80211_register_hw+0xeb1/0x39f0 [ 640.271516][T16206] ? ieee80211_tasklet_handler+0x20/0x20 [ 640.277187][T16206] ? lockdep_hardirqs_on+0x94/0x140 [ 640.282529][T16206] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 640.286691][T16194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.288711][T16206] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 640.288763][T16206] hwsim_new_radio_nl+0xafa/0xce0 [ 640.288801][T16206] genl_family_rcv_msg_doit+0x22a/0x330 [ 640.315110][T16206] ? end_current_label_crit_section+0x170/0x170 [ 640.321996][T16206] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 640.328029][T16206] ? bpf_lsm_capable+0x5/0x10 [ 640.332708][T16206] ? security_capable+0x85/0xb0 [ 640.337559][T16206] genl_rcv_msg+0x604/0x790 [ 640.342079][T16206] ? genl_bind+0x360/0x360 [ 640.346538][T16206] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 640.352881][T16206] netlink_rcv_skb+0x1fb/0x450 [ 640.357652][T16206] ? genl_bind+0x360/0x360 [ 640.362091][T16206] ? netlink_ack+0x1170/0x1170 [ 640.366867][T16206] ? down_read+0x1a8/0x2d0 [ 640.371723][T16206] genl_rcv+0x24/0x40 [ 640.375727][T16206] netlink_unicast+0x74d/0x8d0 [ 640.380591][T16206] netlink_sendmsg+0x8ad/0xbd0 [ 640.385470][T16206] ? netlink_getsockopt+0x550/0x550 [ 640.390674][T16206] ? aa_sock_msg_perm+0x94/0x150 [ 640.395759][T16206] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 640.401060][T16206] ? security_socket_sendmsg+0x7c/0xa0 [ 640.406550][T16206] ? netlink_getsockopt+0x550/0x550 [ 640.411754][T16206] ____sys_sendmsg+0x5be/0x970 [ 640.416530][T16206] ? __sys_sendmsg_sock+0x30/0x30 [ 640.421562][T16206] ? __import_iovec+0x315/0x500 [ 640.426422][T16206] ? import_iovec+0x6f/0xa0 [ 640.430923][T16206] ___sys_sendmsg+0x2a2/0x360 [ 640.435645][T16206] ? __sys_sendmsg+0x290/0x290 [ 640.440439][T16206] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 640.446640][T16206] __se_sys_sendmsg+0x1bb/0x2a0 [ 640.451494][T16206] ? ct_nmi_exit+0x145/0x1c0 [ 640.456081][T16206] ? __x64_sys_sendmsg+0x80/0x80 [ 640.461034][T16206] ? lockdep_hardirqs_on+0x94/0x140 [ 640.466228][T16206] do_syscall_64+0x4c/0xa0 [ 640.470645][T16206] ? clear_bhb_loop+0x60/0xb0 [ 640.475326][T16206] ? clear_bhb_loop+0x60/0xb0 [ 640.480004][T16206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.485943][T16206] RIP: 0033:0x7f910d39c629 [ 640.490403][T16206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.510027][T16206] RSP: 002b:00007f910e2e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.518447][T16206] RAX: ffffffffffffffda RBX: 00007f910d615fa0 RCX: 00007f910d39c629 [ 640.526445][T16206] RDX: 0000000000000500 RSI: 0000200000000000 RDI: 0000000000000006 [ 640.534531][T16206] RBP: 00007f910d432b39 R08: 0000000000000000 R09: 0000000000000000 [ 640.542507][T16206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.550476][T16206] R13: 00007f910d616038 R14: 00007f910d615fa0 R15: 00007ffc3d93f668 [ 640.558461][T16206] [ 640.596738][T16207] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3929'. [ 640.770553][T16211] netlink: 'syz.3.3933': attribute type 2 has an invalid length. [ 640.981739][T16219] netlink: 'syz.3.3934': attribute type 10 has an invalid length. [ 641.569733][T16247] netlink: 'syz.2.3944': attribute type 11 has an invalid length. [ 641.593221][T16250] netlink: 'syz.3.3943': attribute type 1 has an invalid length. [ 641.638051][T16247] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3944'. [ 641.652759][T16250] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3943'. [ 641.771955][T16258] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.3946'. [ 642.182806][T16246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.671170][T16273] netlink: 'syz.4.3952': attribute type 3 has an invalid length. [ 642.909610][T16281] netlink: 'syz.0.3958': attribute type 3 has an invalid length. [ 642.937206][T16281] __nla_validate_parse: 2 callbacks suppressed [ 642.937224][T16281] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3958'. [ 642.959060][T16281] FAULT_INJECTION: forcing a failure. [ 642.959060][T16281] name failslab, interval 1, probability 0, space 0, times 0 [ 643.007243][T16281] CPU: 1 PID: 16281 Comm: syz.0.3958 Not tainted syzkaller #0 [ 643.014759][T16281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.024834][T16281] Call Trace: [ 643.028148][T16281] [ 643.031097][T16281] dump_stack_lvl+0x188/0x24e [ 643.035816][T16281] ? show_regs_print_info+0x12/0x12 [ 643.041058][T16281] ? load_image+0x400/0x400 [ 643.045585][T16281] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 643.051602][T16281] should_fail_ex+0x399/0x4d0 [ 643.056314][T16281] should_failslab+0x5/0x20 [ 643.060846][T16281] slab_pre_alloc_hook+0x59/0x310 [ 643.064765][T16291] netlink: 'syz.4.3961': attribute type 11 has an invalid length. [ 643.065878][T16281] kmem_cache_alloc+0x56/0x2f0 [ 643.065902][T16281] ? __build_skb+0x2a/0x3c0 [ 643.083166][T16281] __build_skb+0x2a/0x3c0 [ 643.086606][T16291] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3961'. [ 643.087504][T16281] build_skb+0x1e/0x230 [ 643.087533][T16281] bpf_prog_test_run_skb+0x37e/0x12a0 [ 643.087553][T16281] ? __fget_files+0x28/0x4b0 [ 643.087576][T16281] ? __fget_files+0x43d/0x4b0 [ 643.087610][T16281] ? cpu_online+0xa0/0xa0 [ 643.087630][T16281] bpf_prog_test_run+0x31e/0x390 [ 643.087656][T16281] __sys_bpf+0x62b/0x780 [ 643.129126][T16281] ? bpf_link_show_fdinfo+0x380/0x380 [ 643.134504][T16281] ? lock_chain_count+0x20/0x20 [ 643.139427][T16281] __x64_sys_bpf+0x78/0x90 [ 643.143857][T16281] do_syscall_64+0x4c/0xa0 [ 643.148262][T16281] ? clear_bhb_loop+0x60/0xb0 [ 643.152932][T16281] ? clear_bhb_loop+0x60/0xb0 [ 643.157632][T16281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.163543][T16281] RIP: 0033:0x7f74c099c629 [ 643.167970][T16281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.187607][T16281] RSP: 002b:00007f74c17ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 643.196048][T16281] RAX: ffffffffffffffda RBX: 00007f74c0c15fa0 RCX: 00007f74c099c629 [ 643.204041][T16281] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 643.212034][T16281] RBP: 00007f74c17ca090 R08: 0000000000000000 R09: 0000000000000000 [ 643.220026][T16281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.228021][T16281] R13: 00007f74c0c16038 R14: 00007f74c0c15fa0 R15: 00007ffc80cbf438 [ 643.236030][T16281] [ 643.945043][T16290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.093523][T16323] netlink: 'syz.0.3972': attribute type 7 has an invalid length. [ 645.111210][T16323] netlink: 'syz.0.3972': attribute type 5 has an invalid length. [ 645.125331][T16326] netlink: 'syz.2.3971': attribute type 10 has an invalid length. [ 645.143812][T16326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3971'. [ 645.430125][T16329] netlink: 'syz.1.3974': attribute type 11 has an invalid length. [ 645.472047][T16329] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3974'. [ 646.246699][T16328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.299566][T16365] netlink: 'syz.0.3984': attribute type 28 has an invalid length. [ 647.329673][T16366] netlink: 'syz.0.3984': attribute type 28 has an invalid length. [ 647.538685][T16373] netlink: 'syz.4.3987': attribute type 11 has an invalid length. [ 647.574968][T16373] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3987'. [ 647.585952][T16375] netlink: 'syz.2.3985': attribute type 1 has an invalid length. [ 647.684135][T16375] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.3985'. [ 647.864956][T16383] netlink: 'syz.2.3991': attribute type 11 has an invalid length. [ 647.881941][T16383] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3991'. [ 648.726828][T16382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.813330][T16371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.734168][T16402] netlink: 'syz.3.4006': attribute type 1 has an invalid length. [ 649.774045][T16402] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4006'. [ 651.224926][T16422] netlink: 26 bytes leftover after parsing attributes in process `syz.4.4004'. [ 651.368681][T16424] netlink: 'syz.1.4005': attribute type 11 has an invalid length. [ 651.409196][T16424] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4005'. [ 651.458586][T16432] netlink: 'syz.3.4008': attribute type 10 has an invalid length. [ 651.496404][T16435] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.4010'. [ 651.979246][T16423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.027105][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 653.623500][T16478] netlink: 'syz.4.4024': attribute type 11 has an invalid length. [ 653.646494][T16478] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4024'. [ 654.839699][T16476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.162764][T16516] netlink: 'syz.4.4035': attribute type 10 has an invalid length. [ 655.228265][T16516] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 655.351808][T16516] netlink: 'syz.4.4035': attribute type 10 has an invalid length. [ 655.391639][T16516] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4035'. [ 656.293934][T16549] netlink: 'syz.1.4046': attribute type 11 has an invalid length. [ 656.302553][T16549] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4046'. [ 657.222156][T16546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.825810][T16563] netlink: 'syz.0.4049': attribute type 41 has an invalid length. [ 658.237173][T16563] netlink: 'syz.0.4049': attribute type 41 has an invalid length. [ 658.273252][T16570] netlink: 'syz.3.4051': attribute type 1 has an invalid length. [ 658.287118][T16570] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4051'. [ 659.824496][T16600] netlink: 'syz.4.4063': attribute type 11 has an invalid length. [ 659.883661][T16600] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4063'. [ 660.344166][T16608] netlink: 'syz.1.4065': attribute type 10 has an invalid length. [ 660.358491][T16599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.418628][T16608] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 660.751440][T16621] netlink: 'syz.1.4065': attribute type 10 has an invalid length. [ 660.777071][T16621] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4065'. [ 661.214796][T16624] netlink: 'syz.0.4068': attribute type 10 has an invalid length. [ 661.254997][T16631] netlink: 'syz.3.4072': attribute type 3 has an invalid length. [ 661.277044][T16631] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4072'. [ 661.280087][T16624] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.299358][T16624] bond0: (slave team0): Enslaving as an active interface with an up link [ 661.319276][T16628] netlink: 'syz.4.4070': attribute type 1 has an invalid length. [ 661.327921][T16628] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4070'. [ 661.827179][T16645] netlink: 'syz.2.4077': attribute type 11 has an invalid length. [ 661.866184][T16645] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4077'. [ 662.357848][T16644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.627858][T16653] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4080'. [ 662.714903][T16655] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 662.722905][T16655] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 663.433364][T16676] netlink: 'syz.3.4087': attribute type 10 has an invalid length. [ 663.537327][T16676] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 663.681573][T16676] netlink: 'syz.3.4087': attribute type 10 has an invalid length. [ 663.717633][T16676] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4087'. [ 664.394440][T16680] netlink: 'syz.1.4097': attribute type 10 has an invalid length. [ 664.434621][T16680] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.459639][T16680] bond0: (slave team0): Enslaving as an active interface with an up link [ 664.478793][T16694] netlink: 'syz.4.4092': attribute type 1 has an invalid length. [ 664.486725][T16694] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4092'. [ 665.263290][T16719] netlink: 'syz.3.4106': attribute type 11 has an invalid length. [ 665.295999][T16716] device syzkaller0 entered promiscuous mode [ 665.308788][T16719] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4106'. [ 665.519427][T16718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.590042][T16721] team0: Port device team_slave_0 removed [ 665.598889][T16721] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 665.632099][T16730] netlink: 'syz.0.4117': attribute type 11 has an invalid length. [ 665.646065][T16730] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4117'. [ 666.412560][T16724] netlink: 'syz.2.4105': attribute type 4 has an invalid length. [ 666.418736][T16728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.423294][T16724] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4105'. [ 666.461445][T16734] netlink: 'syz.1.4108': attribute type 1 has an invalid length. [ 666.469401][T16734] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4108'. [ 666.482681][T16736] netlink: 'syz.3.4107': attribute type 10 has an invalid length. [ 666.922712][T16748] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4112'. [ 666.925928][T16745] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4112'. [ 668.669431][T16738] netlink: 'syz.0.4109': attribute type 10 has an invalid length. [ 668.691129][T16738] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 668.702626][T16744] netlink: 'syz.0.4109': attribute type 10 has an invalid length. [ 668.710866][T16744] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4109'. [ 668.867742][T16745] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 669.112415][T16762] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4116'. [ 669.139924][T16762] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4116'. [ 669.532334][T16778] netlink: 'syz.4.4122': attribute type 1 has an invalid length. [ 669.557597][T16778] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4122'. [ 670.814673][T16813] netlink: 'syz.4.4135': attribute type 11 has an invalid length. [ 670.841407][T16813] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4135'. [ 670.874879][T16817] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 670.990727][T16817] netlink: 'syz.3.4139': attribute type 4 has an invalid length. [ 671.052912][T16817] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4139'. [ 671.188751][T16826] netlink: 'syz.1.4142': attribute type 2 has an invalid length. [ 671.950296][T16830] __nla_validate_parse: 1 callbacks suppressed [ 671.950313][T16830] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4153'. [ 671.975685][T16812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.507163][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 675.390046][T16861] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 675.400158][T16866] netlink: 'syz.2.4156': attribute type 12 has an invalid length. [ 675.408150][T16866] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4156'. [ 675.419730][T16861] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 675.447220][T16861] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 675.608898][T16871] netlink: 'syz.4.4158': attribute type 10 has an invalid length. [ 675.783350][T16871] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 676.415677][T16908] netlink: 'syz.1.4171': attribute type 12 has an invalid length. [ 676.437873][T16908] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4171'. [ 676.936203][T16926] netlink: 'syz.4.4179': attribute type 46 has an invalid length. [ 679.364376][T16943] netlink: 'syz.2.4184': attribute type 12 has an invalid length. [ 679.372364][T16943] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4184'. [ 679.381487][T16947] netlink: 'syz.3.4186': attribute type 10 has an invalid length. [ 680.320811][T16981] netlink: 'syz.4.4202': attribute type 21 has an invalid length. [ 680.339151][T16985] netlink: 'syz.3.4204': attribute type 12 has an invalid length. [ 680.373623][T16985] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4204'. [ 680.396036][T16981] netlink: 'syz.4.4202': attribute type 10 has an invalid length. [ 680.405228][T16981] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4202'. [ 680.512466][T16981] bridge0: port 3(veth0_vlan) entered blocking state [ 680.566778][T16981] bridge0: port 3(veth0_vlan) entered disabled state [ 680.713604][T16981] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 680.737547][T16990] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.4202'. [ 681.223320][T17014] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4216'. [ 681.826433][T17033] FAULT_INJECTION: forcing a failure. [ 681.826433][T17033] name failslab, interval 1, probability 0, space 0, times 0 [ 681.860098][T17033] CPU: 0 PID: 17033 Comm: syz.2.4223 Not tainted syzkaller #0 [ 681.867641][T17033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.877723][T17033] Call Trace: [ 681.881059][T17033] [ 681.884033][T17033] dump_stack_lvl+0x188/0x24e [ 681.888754][T17033] ? show_regs_print_info+0x12/0x12 [ 681.893983][T17033] ? load_image+0x400/0x400 [ 681.898517][T17033] ? __might_sleep+0xd0/0xd0 [ 681.903141][T17033] ? __lock_acquire+0x7d10/0x7d10 [ 681.908211][T17033] should_fail_ex+0x399/0x4d0 [ 681.912935][T17033] should_failslab+0x5/0x20 [ 681.917476][T17033] slab_pre_alloc_hook+0x59/0x310 [ 681.922547][T17033] ? tomoyo_encode+0x27e/0x540 [ 681.927354][T17033] __kmem_cache_alloc_node+0x4f/0x260 [ 681.932779][T17033] ? tomoyo_encode+0x27e/0x540 [ 681.937579][T17033] __kmalloc+0xa0/0x240 [ 681.941963][T17033] tomoyo_encode+0x27e/0x540 [ 681.946598][T17033] tomoyo_realpath_from_path+0x58e/0x5d0 [ 681.952290][T17033] ? tomoyo_path_number_perm+0x205/0x650 [ 681.957972][T17033] tomoyo_path_number_perm+0x22f/0x650 [ 681.963481][T17033] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 681.969001][T17033] ? ksys_write+0x1c0/0x250 [ 681.973529][T17033] ? common_file_perm+0x171/0x1c0 [ 681.978601][T17033] ? __fget_files+0x28/0x4b0 [ 681.983227][T17033] ? __fget_files+0x28/0x4b0 [ 681.987864][T17033] security_file_ioctl+0x6c/0xa0 [ 681.992829][T17033] __se_sys_ioctl+0x48/0x170 [ 681.997445][T17033] do_syscall_64+0x4c/0xa0 [ 682.001868][T17033] ? clear_bhb_loop+0x60/0xb0 [ 682.006547][T17033] ? clear_bhb_loop+0x60/0xb0 [ 682.011227][T17033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.017554][T17033] RIP: 0033:0x7f910d39c629 [ 682.021969][T17033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.041575][T17033] RSP: 002b:00007f910e2e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.050273][T17033] RAX: ffffffffffffffda RBX: 00007f910d615fa0 RCX: 00007f910d39c629 [ 682.058347][T17033] RDX: 0000200000000900 RSI: 00000000000089f6 RDI: 0000000000000005 [ 682.066332][T17033] RBP: 00007f910e2e1090 R08: 0000000000000000 R09: 0000000000000000 [ 682.074342][T17033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.082332][T17033] R13: 00007f910d616038 R14: 00007f910d615fa0 R15: 00007ffc3d93f668 [ 682.090352][T17033] [ 682.107459][T17033] ERROR: Out of memory at tomoyo_realpath_from_path. [ 682.646460][T17047] netlink: 'syz.3.4227': attribute type 21 has an invalid length. [ 682.708323][T17056] netlink: 'syz.3.4227': attribute type 10 has an invalid length. [ 682.716190][T17056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4227'. [ 682.771556][T17056] bridge0: port 3(veth0_vlan) entered blocking state [ 682.814146][T17056] bridge0: port 3(veth0_vlan) entered disabled state [ 682.836122][T17056] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 682.896057][T17064] netlink: 'syz.4.4234': attribute type 11 has an invalid length. [ 682.904548][T17064] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4234'. [ 682.934280][T17047] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.4227'. [ 683.487311][T17070] netlink: 'syz.0.4235': attribute type 10 has an invalid length. [ 683.498864][T17063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.522481][T17070] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 685.140831][T17102] netlink: 'syz.2.4246': attribute type 11 has an invalid length. [ 685.155378][T17102] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4246'. [ 685.596486][T17115] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4250'. [ 685.792778][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.799324][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.971523][T17101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.015261][T17125] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4252'. [ 686.043208][T17125] openvswitch: netlink: Message has 6 unknown bytes. [ 686.258942][T17135] netlink: 'syz.2.4253': attribute type 1 has an invalid length. [ 686.307180][T17135] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4253'. [ 687.223142][T17156] netlink: 'syz.2.4264': attribute type 11 has an invalid length. [ 687.251144][T17154] netlink: 'syz.3.4263': attribute type 1 has an invalid length. [ 687.262069][T17156] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4264'. [ 687.271700][T17154] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.4263'. [ 687.756658][T17176] netlink: 'syz.0.4272': attribute type 12 has an invalid length. [ 687.770280][T17176] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4272'. [ 687.840913][T17177] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4271'. [ 687.872397][T17177] openvswitch: netlink: Message has 6 unknown bytes. [ 688.055383][T17155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.617247][T17194] netlink: 'syz.0.4277': attribute type 21 has an invalid length. [ 688.655989][T17194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4277'. [ 688.748549][T17207] netlink: 'syz.3.4283': attribute type 12 has an invalid length. [ 688.775202][T17207] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4283'. [ 688.890174][T17212] netlink: 'syz.0.4285': attribute type 11 has an invalid length. [ 689.469598][T17211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.764826][T17242] netlink: 'syz.0.4295': attribute type 1 has an invalid length. [ 691.182783][T17255] netlink: 'syz.2.4301': attribute type 10 has an invalid length. [ 691.413597][T17255] team0 (unregistering): Port device team_slave_1 removed [ 691.531646][T17265] netlink: 'syz.3.4305': attribute type 21 has an invalid length. [ 691.552657][T17270] netlink: 'syz.4.4307': attribute type 3 has an invalid length. [ 691.577366][T17270] __nla_validate_parse: 2 callbacks suppressed [ 691.577383][T17270] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4307'. [ 692.011139][T17283] device syzkaller0 entered promiscuous mode [ 695.252442][T17316] netlink: 'syz.0.4322': attribute type 7 has an invalid length. [ 695.264867][T17316] netlink: 'syz.0.4322': attribute type 7 has an invalid length. [ 695.273274][T17323] netlink: 'syz.3.4325': attribute type 10 has an invalid length. [ 695.288182][T17323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4325'. [ 695.547569][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4329'. [ 696.291107][T17342] netlink: 'syz.0.4332': attribute type 11 has an invalid length. [ 696.332590][T17342] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4332'. [ 696.384597][T17344] netlink: 'syz.3.4333': attribute type 11 has an invalid length. [ 696.421108][T17344] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4333'. [ 696.440162][T17341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.030727][T17343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.205170][T17368] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4342'. [ 697.995815][T17374] Ÿë: port 1(gretap0) entered blocking state [ 698.002410][T17374] Ÿë: port 1(gretap0) entered disabled state [ 698.010810][T17374] device gretap0 entered promiscuous mode [ 698.037483][T17387] netlink: 'syz.0.4345': attribute type 10 has an invalid length. [ 698.225454][T17395] netlink: 'syz.3.4348': attribute type 11 has an invalid length. [ 698.235375][T17395] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4348'. [ 698.300422][T17391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.426328][T17399] device wg2 entered promiscuous mode [ 698.513547][T17403] netlink: 'syz.2.4352': attribute type 11 has an invalid length. [ 698.579346][T17403] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4352'. [ 699.287558][T17402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.536148][T17421] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4358'. [ 700.197628][T17437] netlink: 'syz.3.4363': attribute type 11 has an invalid length. [ 700.248360][T17437] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4363'. [ 700.350717][T17436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.411536][T17447] netlink: 'syz.1.4367': attribute type 1 has an invalid length. [ 700.441647][T17447] netlink: 'syz.1.4367': attribute type 4 has an invalid length. [ 700.466664][T17447] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4367'. [ 700.570425][T17451] device wg2 entered promiscuous mode [ 700.652302][T17458] netlink: 'syz.1.4371': attribute type 11 has an invalid length. [ 700.686321][T17458] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4371'. [ 701.643067][T17454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.687933][T17475] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4378'. [ 701.909937][T17483] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4382'. [ 702.945645][T17513] device wg2 entered promiscuous mode [ 702.982248][T17515] FAULT_INJECTION: forcing a failure. [ 702.982248][T17515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.983501][T17509] device syzkaller0 entered promiscuous mode [ 703.026642][T17515] CPU: 0 PID: 17515 Comm: syz.1.4391 Not tainted syzkaller #0 [ 703.034268][T17515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 703.044354][T17515] Call Trace: [ 703.047664][T17515] [ 703.050621][T17515] dump_stack_lvl+0x188/0x24e [ 703.055341][T17515] ? show_regs_print_info+0x12/0x12 [ 703.060577][T17515] ? load_image+0x400/0x400 [ 703.065110][T17515] ? __lock_acquire+0x7d10/0x7d10 [ 703.070175][T17515] should_fail_ex+0x399/0x4d0 [ 703.074989][T17515] _copy_from_user+0x2c/0x170 [ 703.079698][T17515] get_user_ifreq+0x67/0x170 [ 703.084432][T17515] sock_ioctl+0x637/0x710 [ 703.088816][T17515] ? sock_poll+0x410/0x410 [ 703.093299][T17515] ? bpf_lsm_file_ioctl+0x5/0x10 [ 703.098792][T17515] ? security_file_ioctl+0x7c/0xa0 [ 703.103938][T17515] ? sock_poll+0x410/0x410 [ 703.108402][T17515] __se_sys_ioctl+0xfa/0x170 [ 703.113711][T17515] do_syscall_64+0x4c/0xa0 [ 703.118174][T17515] ? clear_bhb_loop+0x60/0xb0 [ 703.122886][T17515] ? clear_bhb_loop+0x60/0xb0 [ 703.127616][T17515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 703.133530][T17515] RIP: 0033:0x7fd492f9c629 [ 703.137958][T17515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.157775][T17515] RSP: 002b:00007fd493e6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 703.166196][T17515] RAX: ffffffffffffffda RBX: 00007fd493215fa0 RCX: 00007fd492f9c629 [ 703.174188][T17515] RDX: 0000200000000900 RSI: 00000000000089f6 RDI: 0000000000000005 [ 703.182163][T17515] RBP: 00007fd493e6a090 R08: 0000000000000000 R09: 0000000000000000 [ 703.190132][T17515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.198205][T17515] R13: 00007fd493216038 R14: 00007fd493215fa0 R15: 00007ffe29321508 [ 703.206230][T17515] [ 704.596418][T17565] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4409'. [ 704.633762][T17565] netlink: 'syz.2.4409': attribute type 9 has an invalid length. [ 704.676785][T17565] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4409'. [ 704.835589][T17573] netlink: 'syz.1.4411': attribute type 1 has an invalid length. [ 704.858748][T17573] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4411'. [ 707.336199][T17610] netlink: 'syz.2.4423': attribute type 3 has an invalid length. [ 707.344364][T17610] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4423'. [ 707.669102][T17618] netlink: 'syz.3.4429': attribute type 8 has an invalid length. [ 707.704986][T17618] netlink: 'syz.3.4429': attribute type 1 has an invalid length. [ 707.714853][T17622] netlink: 'syz.4.4427': attribute type 1 has an invalid length. [ 707.737944][T17622] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4427'. [ 707.755579][T17618] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.4429'. [ 708.824367][T17657] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.4441'. [ 710.511538][T17693] netlink: 'syz.4.4456': attribute type 3 has an invalid length. [ 710.551101][T17695] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4455'. [ 710.560398][T17693] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4456'. [ 710.979886][T17707] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.4461'. [ 712.319215][T17723] netlink: 'syz.3.4464': attribute type 1 has an invalid length. [ 712.360655][T17723] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4464'. [ 712.616815][T17729] netlink: 'syz.2.4467': attribute type 33 has an invalid length. [ 712.633971][T17729] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4467'. [ 713.492588][T17754] device syzkaller0 entered promiscuous mode [ 716.637053][T17778] netlink: 'syz.2.4479': attribute type 1 has an invalid length. [ 716.644840][T17778] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4479'. [ 718.057944][T17820] sock: sock_set_timeout: `syz.4.4496' (pid 17820) tries to set negative timeout [ 718.083358][T17822] netlink: 26 bytes leftover after parsing attributes in process `syz.1.4494'. [ 718.454118][T17830] netlink: 'syz.2.4501': attribute type 10 has an invalid length. [ 719.237402][T17830] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 719.258921][T17834] netlink: 'syz.1.4502': attribute type 33 has an invalid length. [ 719.278983][T17834] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4502'. [ 720.932918][T17888] netlink: 'syz.0.4518': attribute type 10 has an invalid length. [ 722.041146][T17909] FAULT_INJECTION: forcing a failure. [ 722.041146][T17909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.064708][T17909] CPU: 0 PID: 17909 Comm: syz.2.4524 Not tainted syzkaller #0 [ 722.072261][T17909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 722.082352][T17909] Call Trace: [ 722.085658][T17909] [ 722.088619][T17909] dump_stack_lvl+0x188/0x24e [ 722.093345][T17909] ? show_regs_print_info+0x12/0x12 [ 722.098676][T17909] ? load_image+0x400/0x400 [ 722.103232][T17909] ? __lock_acquire+0x7d10/0x7d10 [ 722.108321][T17909] should_fail_ex+0x399/0x4d0 [ 722.113041][T17909] _copy_from_user+0x2c/0x170 [ 722.117756][T17909] ip_tunnel_siocdevprivate+0xbe/0x1e0 [ 722.123256][T17909] ? ip_tunnel_update+0xaa0/0xaa0 [ 722.128331][T17909] ? full_name_hash+0x8e/0xe0 [ 722.133143][T17909] dev_ifsioc+0xa4a/0xd40 [ 722.137523][T17909] ? dev_ioctl+0xe80/0xe80 [ 722.141966][T17909] ? __lock_acquire+0x7d10/0x7d10 [ 722.147036][T17909] ? full_name_hash+0x8e/0xe0 [ 722.151775][T17909] ? dev_load+0x1d/0x1e0 [ 722.156056][T17909] ? dev_load+0x1d/0x1e0 [ 722.160344][T17909] dev_ioctl+0x5f8/0xe80 [ 722.164637][T17909] ? get_user_ifreq+0xc7/0x170 [ 722.169453][T17909] sock_ioctl+0x691/0x710 [ 722.173825][T17909] ? sock_poll+0x410/0x410 [ 722.178471][T17909] ? bpf_lsm_file_ioctl+0x5/0x10 [ 722.183467][T17909] ? security_file_ioctl+0x7c/0xa0 [ 722.188706][T17909] ? sock_poll+0x410/0x410 [ 722.193167][T17909] __se_sys_ioctl+0xfa/0x170 [ 722.197906][T17909] do_syscall_64+0x4c/0xa0 [ 722.202332][T17909] ? clear_bhb_loop+0x60/0xb0 [ 722.207010][T17909] ? clear_bhb_loop+0x60/0xb0 [ 722.211695][T17909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 722.217687][T17909] RIP: 0033:0x7f910d39c629 [ 722.222104][T17909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.241717][T17909] RSP: 002b:00007f910e2e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.250133][T17909] RAX: ffffffffffffffda RBX: 00007f910d615fa0 RCX: 00007f910d39c629 [ 722.258105][T17909] RDX: 0000200000000900 RSI: 00000000000089f6 RDI: 0000000000000005 [ 722.266073][T17909] RBP: 00007f910e2e1090 R08: 0000000000000000 R09: 0000000000000000 [ 722.274133][T17909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.282112][T17909] R13: 00007f910d616038 R14: 00007f910d615fa0 R15: 00007ffc3d93f668 [ 722.290110][T17909] [ 722.339708][T17918] syzkaller1: tun_chr_ioctl cmd 1074025684 [ 722.501342][T17912] netlink: 'syz.0.4526': attribute type 3 has an invalid length. [ 722.539830][T17912] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4526'. [ 723.174153][T17947] netlink: 'syz.3.4537': attribute type 10 has an invalid length. [ 724.659720][T17982] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4551'. [ 726.210567][T17999] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4558'. [ 726.775085][T18015] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 727.102320][T18028] netlink: 'syz.2.4570': attribute type 2 has an invalid length. [ 727.165362][T18028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4570'. [ 727.232452][T18031] netlink: 'syz.2.4570': attribute type 3 has an invalid length. [ 727.317249][T18031] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4570'. [ 728.921406][T18090] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4591'. [ 730.278763][T18129] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.4607'. [ 730.868806][T18140] netlink: 'syz.3.4612': attribute type 10 has an invalid length. [ 730.927936][T18144] netlink: 'syz.4.4614': attribute type 10 has an invalid length. [ 731.021894][T18144] bond0: (slave wlan1): Releasing backup interface [ 731.245283][T18144] team0: Port device wlan1 added [ 731.262805][T18151] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4617'. [ 731.794390][T18164] netlink: 'syz.0.4620': attribute type 3 has an invalid length. [ 731.854941][T18164] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4620'. [ 732.770549][T18188] FAULT_INJECTION: forcing a failure. [ 732.770549][T18188] name failslab, interval 1, probability 0, space 0, times 0 [ 732.815322][T18188] CPU: 0 PID: 18188 Comm: syz.3.4632 Not tainted syzkaller #0 [ 732.822836][T18188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.832911][T18188] Call Trace: [ 732.836197][T18188] [ 732.839131][T18188] dump_stack_lvl+0x188/0x24e [ 732.843831][T18188] ? show_regs_print_info+0x12/0x12 [ 732.849055][T18188] ? load_image+0x400/0x400 [ 732.853592][T18188] ? __might_sleep+0xd0/0xd0 [ 732.858205][T18188] ? __lock_acquire+0x7d10/0x7d10 [ 732.863261][T18188] should_fail_ex+0x399/0x4d0 [ 732.867978][T18188] should_failslab+0x5/0x20 [ 732.872506][T18188] slab_pre_alloc_hook+0x59/0x310 [ 732.877567][T18188] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 732.883135][T18188] __kmem_cache_alloc_node+0x4f/0x260 [ 732.888529][T18188] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 732.894093][T18188] __kmalloc+0xa0/0x240 [ 732.898272][T18188] bpf_prog_test_run_skb+0x234/0x12a0 [ 732.903670][T18188] ? lockdep_hardirqs_on+0x94/0x140 [ 732.908898][T18188] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 732.915082][T18188] ? cpu_online+0xa0/0xa0 [ 732.919435][T18188] ? cpu_online+0xa0/0xa0 [ 732.923778][T18188] bpf_prog_test_run+0x31e/0x390 [ 732.928734][T18188] __sys_bpf+0x62b/0x780 [ 732.933006][T18188] ? bpf_link_show_fdinfo+0x380/0x380 [ 732.938431][T18188] ? lock_chain_count+0x20/0x20 [ 732.943312][T18188] __x64_sys_bpf+0x78/0x90 [ 732.947750][T18188] do_syscall_64+0x4c/0xa0 [ 732.952186][T18188] ? clear_bhb_loop+0x60/0xb0 [ 732.956882][T18188] ? clear_bhb_loop+0x60/0xb0 [ 732.961608][T18188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.967537][T18188] RIP: 0033:0x7fcfdef9c629 [ 732.971980][T18188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.991695][T18188] RSP: 002b:00007fcfdfe94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 733.000143][T18188] RAX: ffffffffffffffda RBX: 00007fcfdf215fa0 RCX: 00007fcfdef9c629 [ 733.008142][T18188] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 733.016127][T18188] RBP: 00007fcfdfe94090 R08: 0000000000000000 R09: 0000000000000000 [ 733.024111][T18188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.032104][T18188] R13: 00007fcfdf216038 R14: 00007fcfdf215fa0 R15: 00007ffd475c5ce8 [ 733.040373][T18188] [ 733.158657][T18198] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 733.264786][T18202] netlink: 'syz.2.4636': attribute type 3 has an invalid length. [ 733.310539][T18202] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4636'. [ 734.004168][T18212] netlink: 'syz.0.4640': attribute type 7 has an invalid length. [ 734.037163][T18212] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4640'. [ 734.063786][T18208] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4639'. [ 734.445553][T18225] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4645'. [ 734.568528][T18228] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4645'. [ 734.589011][T18229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4647'. [ 734.650608][T18225] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 734.697263][T18225] CPU: 1 PID: 18225 Comm: syz.2.4645 Not tainted syzkaller #0 [ 734.704823][T18225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.714990][T18225] Call Trace: [ 734.718300][T18225] [ 734.721248][T18225] dump_stack_lvl+0x188/0x24e [ 734.725959][T18225] ? show_regs_print_info+0x12/0x12 [ 734.731189][T18225] ? load_image+0x400/0x400 [ 734.735739][T18225] sysfs_warn_dup+0x8a/0xa0 [ 734.740271][T18225] sysfs_do_create_link_sd+0xc0/0x110 [ 734.745934][T18225] device_add+0x7ed/0xfb0 [ 734.750292][T18225] wiphy_register+0x1d9f/0x2ac0 [ 734.755193][T18225] ? cfg80211_event_work+0x40/0x40 [ 734.760339][T18225] ? minstrel_ht_alloc+0x894/0xa20 [ 734.765492][T18225] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 734.771604][T18225] ieee80211_register_hw+0x2d00/0x39f0 [ 734.777120][T18225] ? ieee80211_register_hw+0xeb1/0x39f0 [ 734.782706][T18225] ? ieee80211_register_hw+0xeb1/0x39f0 [ 734.788564][T18225] ? ieee80211_tasklet_handler+0x20/0x20 [ 734.794258][T18225] ? memset+0x1e/0x40 [ 734.798725][T18225] ? __hrtimer_init+0x186/0x270 [ 734.803623][T18225] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 734.809416][T18225] hwsim_new_radio_nl+0xafa/0xce0 [ 734.814493][T18225] genl_family_rcv_msg_doit+0x22a/0x330 [ 734.820084][T18225] ? end_current_label_crit_section+0x170/0x170 [ 734.826376][T18225] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 734.832685][T18225] ? bpf_lsm_capable+0x5/0x10 [ 734.837396][T18225] ? security_capable+0x85/0xb0 [ 734.842284][T18225] genl_rcv_msg+0x604/0x790 [ 734.846906][T18225] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 734.853099][T18225] ? genl_bind+0x360/0x360 [ 734.857563][T18225] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 734.863941][T18225] ? lock_acquire+0x225/0x4a0 [ 734.868664][T18225] netlink_rcv_skb+0x1fb/0x450 [ 734.873567][T18225] ? genl_bind+0x360/0x360 [ 734.878036][T18225] ? netlink_ack+0x1170/0x1170 [ 734.882842][T18225] ? down_read+0x1a8/0x2d0 [ 734.887292][T18225] genl_rcv+0x24/0x40 [ 734.891314][T18225] netlink_unicast+0x74d/0x8d0 [ 734.896143][T18225] netlink_sendmsg+0x8ad/0xbd0 [ 734.900960][T18225] ? netlink_getsockopt+0x550/0x550 [ 734.906238][T18225] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 734.911542][T18225] ? security_socket_sendmsg+0x7c/0xa0 [ 734.917021][T18225] ? netlink_getsockopt+0x550/0x550 [ 734.922240][T18225] ____sys_sendmsg+0x5be/0x970 [ 734.927026][T18225] ? __sys_sendmsg_sock+0x30/0x30 [ 734.932090][T18225] ? __import_iovec+0x315/0x500 [ 734.936986][T18225] ? import_iovec+0x6f/0xa0 [ 734.941535][T18225] ___sys_sendmsg+0x2a2/0x360 [ 734.946257][T18225] ? __sys_sendmsg+0x290/0x290 [ 734.951074][T18225] ? ktime_get_real_ts64+0x440/0x440 [ 734.956409][T18225] __se_sys_sendmsg+0x1bb/0x2a0 [ 734.961291][T18225] ? __x64_sys_sendmsg+0x80/0x80 [ 734.966267][T18225] ? lockdep_hardirqs_on+0x94/0x140 [ 734.971507][T18225] do_syscall_64+0x4c/0xa0 [ 734.975961][T18225] ? clear_bhb_loop+0x60/0xb0 [ 734.980666][T18225] ? clear_bhb_loop+0x60/0xb0 [ 734.985371][T18225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.991291][T18225] RIP: 0033:0x7f910d39c629 [ 734.995720][T18225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.015353][T18225] RSP: 002b:00007f910e2e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.023792][T18225] RAX: ffffffffffffffda RBX: 00007f910d615fa0 RCX: 00007f910d39c629 [ 735.031775][T18225] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000006 [ 735.039757][T18225] RBP: 00007f910d432b39 R08: 0000000000000000 R09: 0000000000000000 [ 735.047826][T18225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.055915][T18225] R13: 00007f910d616038 R14: 00007f910d615fa0 R15: 00007ffc3d93f668 [ 735.063931][T18225] [ 735.531820][T18245] netlink: 'syz.1.4652': attribute type 3 has an invalid length. [ 735.570895][T18245] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4652'. [ 735.905413][T18248] netlink: 'syz.3.4653': attribute type 1 has an invalid length. [ 735.917607][T18248] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4653'. [ 736.114669][T18257] netlink: 'syz.4.4656': attribute type 10 has an invalid length. [ 736.175363][T18257] team0: Device hsr_slave_0 failed to register rx_handler [ 736.322295][T18265] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4660'. [ 736.356630][T18269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4661'. [ 737.858868][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 737.920841][T18306] netlink: 'syz.4.4674': attribute type 10 has an invalid length. [ 738.629916][T18311] netlink: 'syz.2.4676': attribute type 1 has an invalid length. [ 738.656093][T18311] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4676'. [ 739.985518][T18341] __nla_validate_parse: 1 callbacks suppressed [ 739.985554][T18341] netlink: 26 bytes leftover after parsing attributes in process `syz.2.4685'. [ 741.234026][T18379] netlink: 'syz.1.4696': attribute type 1 has an invalid length. [ 741.257250][T18379] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4696'. [ 741.481735][T18387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4701'. [ 745.752691][T18434] FAULT_INJECTION: forcing a failure. [ 745.752691][T18434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 745.797792][T18434] CPU: 0 PID: 18434 Comm: syz.2.4720 Not tainted syzkaller #0 [ 745.805320][T18434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 745.815404][T18434] Call Trace: [ 745.818706][T18434] [ 745.821650][T18434] dump_stack_lvl+0x188/0x24e [ 745.826331][T18434] ? show_regs_print_info+0x12/0x12 [ 745.831540][T18434] ? load_image+0x400/0x400 [ 745.836056][T18434] ? __lock_acquire+0x7d10/0x7d10 [ 745.841115][T18434] should_fail_ex+0x399/0x4d0 [ 745.845837][T18434] prepare_alloc_pages+0x1e2/0x5f0 [ 745.850976][T18434] __alloc_pages+0x130/0x4f0 [ 745.855571][T18434] ? zone_statistics+0x170/0x170 [ 745.860554][T18434] __pmd_alloc+0xa6/0x760 [ 745.864889][T18434] ? __pud_alloc+0x150/0x150 [ 745.869474][T18434] ? count_memcg_event_mm+0x36b/0x3c0 [ 745.875017][T18434] ? __lock_acquire+0x7d10/0x7d10 [ 745.880044][T18434] ? count_memcg_event_mm+0x8a/0x3c0 [ 745.885327][T18434] ? put_page+0x270/0x270 [ 745.889662][T18434] ? hugepage_vma_check+0x466/0x540 [ 745.894873][T18434] handle_mm_fault+0xa03/0x3ee0 [ 745.899738][T18434] ? mt_find+0x157/0x830 [ 745.904003][T18434] ? numa_migrate_prep+0x250/0x250 [ 745.909214][T18434] ? lock_chain_count+0x20/0x20 [ 745.914094][T18434] ? lock_mm_and_find_vma+0xae/0x2f0 [ 745.919382][T18434] do_user_addr_fault+0x51f/0xb10 [ 745.924427][T18434] exc_page_fault+0x60/0x100 [ 745.929020][T18434] asm_exc_page_fault+0x22/0x30 [ 745.933867][T18434] RIP: 0010:copy_user_short_string+0xa/0x40 [ 745.939767][T18434] Code: 83 f8 12 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 745.959397][T18434] RSP: 0018:ffffc9000deefb48 EFLAGS: 00050207 [ 745.965467][T18434] RAX: ffffffff8410ea01 RBX: 0000000000000034 RCX: 0000000000000006 [ 745.973437][T18434] RDX: 0000000000000004 RSI: 000000110c230000 RDI: ffffc9000deefbc0 [ 745.981492][T18434] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 745.989465][T18434] R10: dffffc0000000000 R11: fffff52001bddf7e R12: 00007fffffffefcc [ 745.997435][T18434] R13: 000000110c230000 R14: ffffc9000deefbc0 R15: 000000110c230000 [ 746.005420][T18434] ? _copy_from_user+0xa1/0x170 [ 746.010289][T18434] _copy_from_user+0xf4/0x170 [ 746.014976][T18434] ip_tunnel_siocdevprivate+0xbe/0x1e0 [ 746.020439][T18434] ? ip_tunnel_update+0xaa0/0xaa0 [ 746.025475][T18434] ? full_name_hash+0x8e/0xe0 [ 746.030246][T18434] dev_ifsioc+0xa4a/0xd40 [ 746.034579][T18434] ? dev_ioctl+0xe80/0xe80 [ 746.038999][T18434] ? full_name_hash+0x8e/0xe0 [ 746.043678][T18434] ? dev_load+0x1d/0x1e0 [ 746.047920][T18434] ? dev_load+0x1d/0x1e0 [ 746.052162][T18434] dev_ioctl+0x5f8/0xe80 [ 746.056402][T18434] ? get_user_ifreq+0xc7/0x170 [ 746.061174][T18434] sock_ioctl+0x691/0x710 [ 746.065518][T18434] ? sock_poll+0x410/0x410 [ 746.069955][T18434] ? bpf_lsm_file_ioctl+0x5/0x10 [ 746.074894][T18434] ? security_file_ioctl+0x7c/0xa0 [ 746.080008][T18434] ? sock_poll+0x410/0x410 [ 746.084463][T18434] __se_sys_ioctl+0xfa/0x170 [ 746.089064][T18434] do_syscall_64+0x4c/0xa0 [ 746.093506][T18434] ? clear_bhb_loop+0x60/0xb0 [ 746.098182][T18434] ? clear_bhb_loop+0x60/0xb0 [ 746.102863][T18434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.108756][T18434] RIP: 0033:0x7f910d39c629 [ 746.113170][T18434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.132774][T18434] RSP: 002b:00007f910e2e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.141194][T18434] RAX: ffffffffffffffda RBX: 00007f910d615fa0 RCX: 00007f910d39c629 [ 746.149171][T18434] RDX: 0000200000000900 RSI: 00000000000089f6 RDI: 0000000000000005 [ 746.157139][T18434] RBP: 00007f910e2e1090 R08: 0000000000000000 R09: 0000000000000000 [ 746.165105][T18434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.173073][T18434] R13: 00007f910d616038 R14: 00007f910d615fa0 R15: 00007ffc3d93f668 [ 746.181075][T18434] [ 746.233162][T18439] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 746.275187][T18439] netlink: 'syz.3.4719': attribute type 25 has an invalid length. [ 746.296375][T18439] netlink: 'syz.3.4719': attribute type 1 has an invalid length. [ 746.357255][T18439] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.368021][T18443] netlink: 'syz.4.4721': attribute type 1 has an invalid length. [ 746.382936][T18443] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4721'. [ 746.404663][T18439] netlink: 'syz.3.4719': attribute type 3 has an invalid length. [ 746.438169][T18439] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4719'. [ 746.732443][T18456] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4729'. [ 747.229861][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.236388][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.785795][T18477] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4738'. [ 747.857102][T18483] FAULT_INJECTION: forcing a failure. [ 747.857102][T18483] name failslab, interval 1, probability 0, space 0, times 0 [ 747.897020][T18483] CPU: 1 PID: 18483 Comm: syz.1.4737 Not tainted syzkaller #0 [ 747.904543][T18483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 747.914601][T18483] Call Trace: [ 747.917936][T18483] [ 747.920888][T18483] dump_stack_lvl+0x188/0x24e [ 747.925600][T18483] ? show_regs_print_info+0x12/0x12 [ 747.930823][T18483] ? load_image+0x400/0x400 [ 747.935335][T18483] should_fail_ex+0x399/0x4d0 [ 747.940017][T18483] should_failslab+0x5/0x20 [ 747.944518][T18483] slab_pre_alloc_hook+0x59/0x310 [ 747.949552][T18483] kmem_cache_alloc+0x56/0x2f0 [ 747.954321][T18483] ? skb_clone+0x1e7/0x370 [ 747.958740][T18483] skb_clone+0x1e7/0x370 [ 747.962985][T18483] bpf_clone_redirect+0x163/0x4a0 [ 747.968099][T18483] bpf_prog_c6f54bbad6dab1ee+0x56/0x5b [ 747.973555][T18483] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 747.979535][T18483] ? lock_chain_count+0x20/0x20 [ 747.984389][T18483] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 747.990631][T18483] ? lockdep_hardirqs_on+0x94/0x140 [ 747.995823][T18483] ? ktime_get+0x7b/0x270 [ 748.000170][T18483] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 748.006406][T18483] ? ktime_get_real_ts64+0x440/0x440 [ 748.011690][T18483] ? read_lock_is_recursive+0x10/0x10 [ 748.017062][T18483] ? __cant_sleep+0x220/0x220 [ 748.021823][T18483] ? bpf_test_timer_continue+0x142/0x380 [ 748.027458][T18483] bpf_test_run+0x2b6/0x830 [ 748.031970][T18483] ? convert___skb_to_skb+0x580/0x580 [ 748.037338][T18483] ? eth_get_headlen+0x200/0x200 [ 748.042266][T18483] ? __build_skb+0x257/0x3c0 [ 748.046854][T18483] ? convert___skb_to_skb+0x3d/0x580 [ 748.052135][T18483] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 748.057510][T18483] ? cpu_online+0xa0/0xa0 [ 748.061833][T18483] bpf_prog_test_run+0x31e/0x390 [ 748.066776][T18483] __sys_bpf+0x62b/0x780 [ 748.071019][T18483] ? bpf_link_show_fdinfo+0x380/0x380 [ 748.076397][T18483] ? lock_chain_count+0x20/0x20 [ 748.081264][T18483] __x64_sys_bpf+0x78/0x90 [ 748.085687][T18483] do_syscall_64+0x4c/0xa0 [ 748.090276][T18483] ? clear_bhb_loop+0x60/0xb0 [ 748.094948][T18483] ? clear_bhb_loop+0x60/0xb0 [ 748.099654][T18483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.105543][T18483] RIP: 0033:0x7fd492f9c629 [ 748.109950][T18483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.129550][T18483] RSP: 002b:00007fd493e6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.137964][T18483] RAX: ffffffffffffffda RBX: 00007fd493215fa0 RCX: 00007fd492f9c629 [ 748.145933][T18483] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 748.153896][T18483] RBP: 00007fd493e6a090 R08: 0000000000000000 R09: 0000000000000000 [ 748.161859][T18483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 748.169849][T18483] R13: 00007fd493216038 R14: 00007fd493215fa0 R15: 00007ffe29321508 [ 748.177834][T18483] [ 751.385217][T18509] netlink: 'syz.1.4743': attribute type 1 has an invalid length. [ 751.411023][T18509] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4743'. [ 751.754682][T18523] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4754'. [ 753.392562][T18568] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4770'. [ 753.755148][T18582] netlink: 'syz.4.4773': attribute type 1 has an invalid length. [ 753.787089][T18582] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4773'. [ 754.085739][T18589] netlink: 'syz.2.4779': attribute type 3 has an invalid length. [ 754.115049][T18586] netlink: 'syz.2.4779': attribute type 3 has an invalid length. [ 754.137444][T18589] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4779'. [ 754.162885][T18586] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4779'. [ 754.189342][T18594] netlink: 'syz.3.4778': attribute type 1 has an invalid length. [ 754.212186][T18594] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.4778'. [ 754.527066][T18606] netlink: 'syz.1.4783': attribute type 27 has an invalid length. [ 754.535012][T18606] C: renamed from team_slave_0 [ 755.158443][T18631] netlink: 'syz.2.4792': attribute type 10 has an invalid length. [ 755.903791][T18655] netlink: 'syz.2.4796': attribute type 1 has an invalid length. [ 755.947656][T18655] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4796'. [ 756.023790][T18659] netlink: 'syz.4.4800': attribute type 3 has an invalid length. [ 756.042372][T18659] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4800'. [ 756.569769][T18675] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4805'. [ 756.635019][T18675] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 756.659003][T18685] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4805'. [ 757.882088][T18712] netlink: 'syz.1.4813': attribute type 7 has an invalid length. [ 757.902231][T18712] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4813'. [ 758.186527][T18722] netlink: 'syz.1.4815': attribute type 10 has an invalid length. [ 758.215042][T18722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4815'. [ 758.236557][T18722] device batadv0 entered promiscuous mode [ 758.287206][T18722] bridge0: port 3(batadv0) entered blocking state [ 758.307706][T18722] bridge0: port 3(batadv0) entered disabled state [ 758.370300][T18722] bridge0: port 3(batadv0) entered blocking state [ 758.376863][T18722] bridge0: port 3(batadv0) entered forwarding state [ 758.468312][T18724] netlink: 'syz.3.4816': attribute type 25 has an invalid length. [ 758.573254][T18731] netlink: 'syz.0.4818': attribute type 21 has an invalid length. [ 758.657112][ T75] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 758.666843][ T75] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 758.687806][T18740] netlink: 'syz.4.4820': attribute type 1 has an invalid length. [ 758.733900][T18740] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4820'. [ 759.751626][T18756] netlink: 'syz.0.4825': attribute type 1 has an invalid length. [ 759.804978][T18756] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.4825'. [ 761.187467][T18785] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 761.751526][T18802] netlink: 'syz.3.4840': attribute type 1 has an invalid length. [ 761.797375][T18802] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4840'. [ 763.384995][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4846'. [ 763.522936][T18820] netlink: 'syz.1.4847': attribute type 12 has an invalid length. [ 763.541237][T18820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4847'. [ 763.887638][T18832] netlink: 'syz.1.4852': attribute type 10 has an invalid length. [ 764.013680][T18832] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 764.569880][T18852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4859'. [ 764.617135][T18852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4859'. [ 764.658619][T18852] netlink: 'syz.1.4859': attribute type 39 has an invalid length. [ 764.806440][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4861'. [ 764.892460][T18855] netlink: 'syz.0.4860': attribute type 21 has an invalid length. [ 764.959145][T18855] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4860'. [ 765.560452][T18872] netlink: 'syz.0.4868': attribute type 29 has an invalid length. [ 765.590382][T18872] netlink: 'syz.0.4868': attribute type 29 has an invalid length. [ 765.746472][T18875] netlink: 'syz.3.4870': attribute type 10 has an invalid length. [ 766.513484][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4878'. [ 767.256073][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 767.310237][T18930] netlink: 'syz.4.4889': attribute type 10 has an invalid length. [ 768.605876][T18969] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 768.675256][T18971] netlink: 'syz.0.4905': attribute type 10 has an invalid length. [ 769.093530][T18983] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4910'. [ 769.122788][T18983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4910'. [ 769.173755][T18983] netlink: 'syz.4.4910': attribute type 39 has an invalid length. [ 770.078910][T18986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4911'. [ 770.088810][T18989] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4912'. [ 770.606623][T18999] netlink: 'syz.3.4916': attribute type 21 has an invalid length. [ 770.622688][T18999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4916'. [ 771.062008][T19012] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 771.754593][T19037] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4929'. [ 771.785427][T19037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4929'. [ 771.821873][T19037] netlink: 'syz.0.4929': attribute type 39 has an invalid length. [ 772.573025][T19052] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4934'. [ 772.618139][T19052] netlink: 'syz.1.4934': attribute type 13 has an invalid length. [ 772.626010][T19052] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4934'. [ 772.684181][T19052] erspan0: refused to change device tx_queue_len [ 772.757720][T19056] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4936'. [ 772.915348][T19061] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 773.006778][T19064] Â: renamed from pim6reg1 [ 774.750802][T19103] netlink: 'syz.3.4955': attribute type 3 has an invalid length. [ 774.766607][T19103] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4955'. [ 775.623774][T19114] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 775.883347][T19126] FAULT_INJECTION: forcing a failure. [ 775.883347][T19126] name failslab, interval 1, probability 0, space 0, times 0 [ 775.932362][T19126] CPU: 1 PID: 19126 Comm: syz.3.4964 Not tainted syzkaller #0 [ 775.939918][T19126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 775.950084][T19126] Call Trace: [ 775.953361][T19126] [ 775.956311][T19126] dump_stack_lvl+0x188/0x24e [ 775.960997][T19126] ? show_regs_print_info+0x12/0x12 [ 775.966192][T19126] ? load_image+0x400/0x400 [ 775.970692][T19126] ? __might_sleep+0xd0/0xd0 [ 775.975278][T19126] ? __lock_acquire+0x7d10/0x7d10 [ 775.980305][T19126] should_fail_ex+0x399/0x4d0 [ 775.984986][T19126] should_failslab+0x5/0x20 [ 775.989506][T19126] slab_pre_alloc_hook+0x59/0x310 [ 775.994532][T19126] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 776.000082][T19126] __kmem_cache_alloc_node+0x4f/0x260 [ 776.005453][T19126] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 776.010993][T19126] __kmalloc+0xa0/0x240 [ 776.015159][T19126] bpf_prog_test_run_skb+0x234/0x12a0 [ 776.020571][T19126] ? __fget_files+0x28/0x4b0 [ 776.025157][T19126] ? __fget_files+0x28/0x4b0 [ 776.029756][T19126] ? __fget_files+0x43d/0x4b0 [ 776.034437][T19126] ? cpu_online+0xa0/0xa0 [ 776.038763][T19126] bpf_prog_test_run+0x31e/0x390 [ 776.043790][T19126] __sys_bpf+0x62b/0x780 [ 776.048076][T19126] ? bpf_link_show_fdinfo+0x380/0x380 [ 776.053460][T19126] ? lock_chain_count+0x20/0x20 [ 776.058319][T19126] __x64_sys_bpf+0x78/0x90 [ 776.062740][T19126] do_syscall_64+0x4c/0xa0 [ 776.067155][T19126] ? clear_bhb_loop+0x60/0xb0 [ 776.071909][T19126] ? clear_bhb_loop+0x60/0xb0 [ 776.076586][T19126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.082478][T19126] RIP: 0033:0x7fcfdef9c629 [ 776.086892][T19126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.106587][T19126] RSP: 002b:00007fcfdfe94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 776.115004][T19126] RAX: ffffffffffffffda RBX: 00007fcfdf215fa0 RCX: 00007fcfdef9c629 [ 776.122981][T19126] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 776.130949][T19126] RBP: 00007fcfdfe94090 R08: 0000000000000000 R09: 0000000000000000 [ 776.138934][T19126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.146907][T19126] R13: 00007fcfdf216038 R14: 00007fcfdf215fa0 R15: 00007ffd475c5ce8 [ 776.154904][T19126] [ 779.260639][T19176] netlink: 'syz.0.4981': attribute type 10 has an invalid length. [ 779.373879][T19176] bond0: (slave team0): Releasing backup interface [ 779.444508][T19176] team0 (unregistering): Port device team_slave_0 removed [ 779.475224][T19176] team0 (unregistering): Port device team_slave_1 removed [ 779.485059][T19176] team0 (unregistering): Port device geneve1 removed [ 779.509972][T19178] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 779.535208][T19183] IPv6: Can't replace route, no match found [ 779.548673][T19187] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 779.622060][T19188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4983'. [ 779.778740][T19197] netlink: 'syz.2.4988': attribute type 3 has an invalid length. [ 779.786843][T19197] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4988'. [ 782.814808][T19239] netlink: 'syz.1.4999': attribute type 1 has an invalid length. [ 782.851953][T19239] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4999'. [ 783.702357][T19268] netlink: 'syz.2.5012': attribute type 17 has an invalid length. [ 783.886127][T19268] tun0: tun_chr_ioctl cmd 1074025680 [ 784.228030][T19283] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5017'. [ 784.543983][T19294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5020'. [ 785.592804][T19330] netlink: 'syz.4.5032': attribute type 10 has an invalid length. [ 785.674865][T19334] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5034'. [ 788.932301][T19378] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5046'. [ 789.450295][T19390] netlink: 'syz.0.5051': attribute type 17 has an invalid length. [ 789.542443][T19390] tun0: tun_chr_ioctl cmd 1074025680 [ 790.405948][T19423] netlink: 111 bytes leftover after parsing attributes in process `syz.2.5067'. [ 793.700885][T19489] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5088'. [ 793.991294][T19503] netlink: 'syz.2.5094': attribute type 11 has an invalid length. [ 794.072450][T19503] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5094'. [ 794.142821][T19502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.294739][T19508] FAULT_INJECTION: forcing a failure. [ 794.294739][T19508] name failslab, interval 1, probability 0, space 0, times 0 [ 794.383240][T19508] CPU: 0 PID: 19508 Comm: syz.0.5096 Not tainted syzkaller #0 [ 794.390763][T19508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 794.400856][T19508] Call Trace: [ 794.404157][T19508] [ 794.407099][T19508] dump_stack_lvl+0x188/0x24e [ 794.411849][T19508] ? show_regs_print_info+0x12/0x12 [ 794.417070][T19508] ? load_image+0x400/0x400 [ 794.421600][T19508] should_fail_ex+0x399/0x4d0 [ 794.426307][T19508] should_failslab+0x5/0x20 [ 794.430847][T19508] slab_pre_alloc_hook+0x59/0x310 [ 794.435985][T19508] kmem_cache_alloc+0x56/0x2f0 [ 794.440773][T19508] ? skb_clone+0x1e7/0x370 [ 794.445220][T19508] skb_clone+0x1e7/0x370 [ 794.449492][T19508] bpf_clone_redirect+0x163/0x4a0 [ 794.454549][T19508] bpf_prog_c6f54bbad6dab1ee+0x56/0x5b [ 794.460041][T19508] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 794.466075][T19508] ? lock_chain_count+0x20/0x20 [ 794.470958][T19508] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 794.477223][T19508] ? lockdep_hardirqs_on+0x94/0x140 [ 794.482440][T19508] ? ktime_get+0x7b/0x270 [ 794.486801][T19508] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 794.493068][T19508] ? ktime_get_real_ts64+0x440/0x440 [ 794.498386][T19508] ? read_lock_is_recursive+0x10/0x10 [ 794.503794][T19508] ? __cant_sleep+0x220/0x220 [ 794.508507][T19508] ? bpf_test_timer_continue+0x142/0x380 [ 794.514172][T19508] bpf_test_run+0x2b6/0x830 [ 794.518715][T19508] ? convert___skb_to_skb+0x580/0x580 [ 794.524113][T19508] ? eth_get_headlen+0x200/0x200 [ 794.529066][T19508] ? __build_skb+0x257/0x3c0 [ 794.533714][T19508] ? convert___skb_to_skb+0x3d/0x580 [ 794.539032][T19508] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 794.544447][T19508] ? cpu_online+0xa0/0xa0 [ 794.548802][T19508] bpf_prog_test_run+0x31e/0x390 [ 794.553856][T19508] __sys_bpf+0x62b/0x780 [ 794.558124][T19508] ? bpf_link_show_fdinfo+0x380/0x380 [ 794.563542][T19508] ? lock_chain_count+0x20/0x20 [ 794.568512][T19508] __x64_sys_bpf+0x78/0x90 [ 794.572954][T19508] do_syscall_64+0x4c/0xa0 [ 794.577394][T19508] ? clear_bhb_loop+0x60/0xb0 [ 794.582102][T19508] ? clear_bhb_loop+0x60/0xb0 [ 794.586805][T19508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.592730][T19508] RIP: 0033:0x7f74c099c629 [ 794.597172][T19508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.616803][T19508] RSP: 002b:00007f74c17ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 794.625239][T19508] RAX: ffffffffffffffda RBX: 00007f74c0c15fa0 RCX: 00007f74c099c629 [ 794.633236][T19508] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 794.641224][T19508] RBP: 00007f74c17ca090 R08: 0000000000000000 R09: 0000000000000000 [ 794.649211][T19508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 794.657199][T19508] R13: 00007f74c0c16038 R14: 00007f74c0c15fa0 R15: 00007ffc80cbf438 [ 794.665207][T19508] [ 794.878770][T19522] netlink: 'syz.0.5100': attribute type 7 has an invalid length. [ 794.893256][T19522] netlink: 208404 bytes leftover after parsing attributes in process `syz.0.5100'. [ 797.860118][T19541] netlink: 'syz.2.5108': attribute type 11 has an invalid length. [ 797.897077][T19541] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5108'. [ 798.077412][T19538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.216467][T19547] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 798.523475][T19550] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 799.340238][ T4281] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 799.422902][T19567] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5119'. [ 799.730515][T19582] netlink: 'syz.4.5123': attribute type 11 has an invalid length. [ 799.739106][T19582] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5123'. [ 799.850261][T19581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.945431][T19590] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 800.643178][T19620] netlink: 'syz.3.5136': attribute type 11 has an invalid length. [ 800.664430][T19620] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5136'. [ 800.983273][T19618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.076081][T19625] FAULT_INJECTION: forcing a failure. [ 801.076081][T19625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.156071][T19625] CPU: 1 PID: 19625 Comm: syz.4.5137 Not tainted syzkaller #0 [ 801.163595][T19625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 801.173667][T19625] Call Trace: [ 801.176964][T19625] [ 801.179903][T19625] dump_stack_lvl+0x188/0x24e [ 801.184611][T19625] ? show_regs_print_info+0x12/0x12 [ 801.189835][T19625] ? load_image+0x400/0x400 [ 801.194366][T19625] ? __lock_acquire+0x7d10/0x7d10 [ 801.199511][T19625] should_fail_ex+0x399/0x4d0 [ 801.204218][T19625] _copy_from_user+0x2c/0x170 [ 801.208928][T19625] bpf_prog_test_run_skb+0x262/0x12a0 [ 801.214367][T19625] ? __fget_files+0x28/0x4b0 [ 801.218974][T19625] ? __fget_files+0x28/0x4b0 [ 801.223565][T19625] ? __fget_files+0x43d/0x4b0 [ 801.228264][T19625] ? cpu_online+0xa0/0xa0 [ 801.232602][T19625] bpf_prog_test_run+0x31e/0x390 [ 801.237541][T19625] __sys_bpf+0x62b/0x780 [ 801.241779][T19625] ? bpf_link_show_fdinfo+0x380/0x380 [ 801.247244][T19625] ? lock_chain_count+0x20/0x20 [ 801.252103][T19625] __x64_sys_bpf+0x78/0x90 [ 801.256660][T19625] do_syscall_64+0x4c/0xa0 [ 801.261091][T19625] ? clear_bhb_loop+0x60/0xb0 [ 801.265772][T19625] ? clear_bhb_loop+0x60/0xb0 [ 801.270451][T19625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.276341][T19625] RIP: 0033:0x7f6098b9c629 [ 801.280773][T19625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.300388][T19625] RSP: 002b:00007f60999fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 801.308801][T19625] RAX: ffffffffffffffda RBX: 00007f6098e15fa0 RCX: 00007f6098b9c629 [ 801.316764][T19625] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 801.324728][T19625] RBP: 00007f60999fe090 R08: 0000000000000000 R09: 0000000000000000 [ 801.332692][T19625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.340656][T19625] R13: 00007f6098e16038 R14: 00007f6098e15fa0 R15: 00007ffc7f2e9c58 [ 801.348636][T19625] [ 801.685014][T19638] netlink: 'syz.1.5143': attribute type 3 has an invalid length. [ 801.726206][T19638] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5143'. [ 801.863080][T19651] netlink: 'syz.2.5147': attribute type 3 has an invalid length. [ 801.886660][T19651] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5147'. [ 801.944547][T19653] netlink: 'syz.2.5147': attribute type 22 has an invalid length. [ 801.987662][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5147'. [ 802.012450][T19660] netlink: 'syz.4.5149': attribute type 11 has an invalid length. [ 802.022696][T19652] netlink: 'syz.2.5147': attribute type 22 has an invalid length. [ 802.035483][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5147'. [ 802.045000][T19660] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5149'. [ 802.126359][T19658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.210239][T19666] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5151'. [ 802.314642][T19672] netlink: 'syz.2.5155': attribute type 10 has an invalid length. [ 802.522608][T19680] FAULT_INJECTION: forcing a failure. [ 802.522608][T19680] name failslab, interval 1, probability 0, space 0, times 0 [ 802.602527][T19680] CPU: 1 PID: 19680 Comm: syz.2.5156 Not tainted syzkaller #0 [ 802.610143][T19680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 802.620566][T19680] Call Trace: [ 802.623863][T19680] [ 802.626831][T19680] dump_stack_lvl+0x188/0x24e [ 802.631529][T19680] ? show_regs_print_info+0x12/0x12 [ 802.636808][T19680] ? load_image+0x400/0x400 [ 802.641404][T19680] ? __might_sleep+0xd0/0xd0 [ 802.645988][T19680] ? __lock_acquire+0x7d10/0x7d10 [ 802.651134][T19680] should_fail_ex+0x399/0x4d0 [ 802.655933][T19680] should_failslab+0x5/0x20 [ 802.660538][T19680] slab_pre_alloc_hook+0x59/0x310 [ 802.665563][T19680] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 802.671119][T19680] __kmem_cache_alloc_node+0x4f/0x260 [ 802.676524][T19680] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 802.682096][T19680] __kmalloc+0xa0/0x240 [ 802.686294][T19680] bpf_prog_test_run_skb+0x234/0x12a0 [ 802.691693][T19680] ? __fget_files+0x28/0x4b0 [ 802.692726][T19685] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5158'. [ 802.696293][T19680] ? __fget_files+0x28/0x4b0 [ 802.696323][T19680] ? __fget_files+0x43d/0x4b0 [ 802.696354][T19680] ? cpu_online+0xa0/0xa0 [ 802.696375][T19680] bpf_prog_test_run+0x31e/0x390 [ 802.696402][T19680] __sys_bpf+0x62b/0x780 [ 802.696427][T19680] ? bpf_link_show_fdinfo+0x380/0x380 [ 802.733599][T19680] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 802.739794][T19680] __x64_sys_bpf+0x78/0x90 [ 802.744247][T19680] do_syscall_64+0x4c/0xa0 [ 802.748692][T19680] ? clear_bhb_loop+0x60/0xb0 [ 802.753387][T19680] ? clear_bhb_loop+0x60/0xb0 [ 802.758093][T19680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 802.764010][T19680] RIP: 0033:0x7f910d39c629 [ 802.768430][T19680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.788060][T19680] RSP: 002b:00007f910e2e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 802.796497][T19680] RAX: ffffffffffffffda RBX: 00007f910d615fa0 RCX: 00007f910d39c629 [ 802.804835][T19680] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 802.812832][T19680] RBP: 00007f910e2e1090 R08: 0000000000000000 R09: 0000000000000000 [ 802.820830][T19680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.828839][T19680] R13: 00007f910d616038 R14: 00007f910d615fa0 R15: 00007ffc3d93f668 [ 802.836855][T19680] [ 802.940868][T19685] team0: Port device team_slave_0 removed [ 802.960926][T19685] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 803.056434][T19689] netlink: 'syz.3.5159': attribute type 3 has an invalid length. [ 803.358099][T19704] netlink: 'syz.4.5164': attribute type 11 has an invalid length. [ 803.432330][T19701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.286344][T19729] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 804.586218][T19731] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 804.749731][T19734] __nla_validate_parse: 2 callbacks suppressed [ 804.749767][T19734] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5172'. [ 804.853355][T19740] netlink: 'syz.4.5175': attribute type 3 has an invalid length. [ 804.937104][T19740] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5175'. [ 804.988781][T19739] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5174'. [ 805.117218][T19751] netlink: 'syz.0.5178': attribute type 10 has an invalid length. [ 805.147290][T19751] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5178'. [ 805.179366][T19751] bridge0: port 3(batadv0) entered blocking state [ 805.197723][T19753] netlink: 'syz.4.5179': attribute type 11 has an invalid length. [ 805.205612][T19753] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5179'. [ 805.219906][T19751] bridge0: port 3(batadv0) entered disabled state [ 805.235872][T19751] device batadv0 entered promiscuous mode [ 805.244061][T19751] bridge0: port 3(batadv0) entered blocking state [ 805.250687][T19751] bridge0: port 3(batadv0) entered forwarding state [ 805.362869][T19752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.369455][T19761] netlink: 'syz.1.5180': attribute type 39 has an invalid length. [ 805.572350][T19760] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5182'. [ 805.623868][T19767] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 805.677352][ T6132] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 805.686658][ T6132] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 805.787947][T19780] FAULT_INJECTION: forcing a failure. [ 805.787947][T19780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.805933][T19780] CPU: 1 PID: 19780 Comm: syz.1.5187 Not tainted syzkaller #0 [ 805.813460][T19780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 805.823534][T19780] Call Trace: [ 805.826820][T19780] [ 805.829760][T19780] dump_stack_lvl+0x188/0x24e [ 805.834462][T19780] ? show_regs_print_info+0x12/0x12 [ 805.839768][T19780] ? load_image+0x400/0x400 [ 805.844300][T19780] ? __lock_acquire+0x7d10/0x7d10 [ 805.849359][T19780] should_fail_ex+0x399/0x4d0 [ 805.854073][T19780] _copy_from_user+0x2c/0x170 [ 805.858866][T19780] __sys_bpf+0x2ea/0x780 [ 805.863128][T19780] ? bpf_link_show_fdinfo+0x380/0x380 [ 805.868610][T19780] ? lock_chain_count+0x20/0x20 [ 805.873467][T19780] __x64_sys_bpf+0x78/0x90 [ 805.877885][T19780] do_syscall_64+0x4c/0xa0 [ 805.882301][T19780] ? clear_bhb_loop+0x60/0xb0 [ 805.887057][T19780] ? clear_bhb_loop+0x60/0xb0 [ 805.891725][T19780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 805.897610][T19780] RIP: 0033:0x7fd492f9c629 [ 805.902020][T19780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.921623][T19780] RSP: 002b:00007fd493e6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 805.930042][T19780] RAX: ffffffffffffffda RBX: 00007fd493215fa0 RCX: 00007fd492f9c629 [ 805.938010][T19780] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 805.945972][T19780] RBP: 00007fd493e6a090 R08: 0000000000000000 R09: 0000000000000000 [ 805.953940][T19780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.961960][T19780] R13: 00007fd493216038 R14: 00007fd493215fa0 R15: 00007ffe29321508 [ 805.969939][T19780] [ 806.104859][T19782] netlink: 'syz.2.5188': attribute type 3 has an invalid length. [ 806.115373][T19782] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5188'. [ 806.153115][T19789] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5189'. [ 806.162443][T19789] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5189'. [ 806.177928][T19784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5189'. [ 806.428217][T19798] netlink: 'syz.3.5196': attribute type 11 has an invalid length. [ 806.499237][T19797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.696479][T19804] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 806.919863][T19817] netlink: 'syz.4.5203': attribute type 29 has an invalid length. [ 807.056100][T19817] netlink: 'syz.4.5203': attribute type 29 has an invalid length. [ 807.126668][T19820] netlink: 'syz.4.5203': attribute type 29 has an invalid length. [ 807.138446][T19823] netlink: 'syz.4.5203': attribute type 29 has an invalid length. [ 807.168557][T19826] netlink: 'syz.4.5203': attribute type 29 has an invalid length. [ 807.246580][T19817] netlink: 'syz.4.5203': attribute type 29 has an invalid length. [ 807.415276][T19830] netlink: 'syz.1.5207': attribute type 41 has an invalid length. [ 807.424356][T19830] netlink: 'syz.1.5207': attribute type 41 has an invalid length. [ 807.444596][T19840] netlink: 'syz.4.5209': attribute type 10 has an invalid length. [ 807.632929][T19846] netlink: 'syz.0.5212': attribute type 11 has an invalid length. [ 807.649526][T19845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.669204][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.675565][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.469953][T19884] netlink: 'syz.0.5226': attribute type 11 has an invalid length. [ 809.543263][T19883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.425662][T19892] netlink: 'syz.3.5228': attribute type 25 has an invalid length. [ 810.449027][T19892] bridge0: port 1(bridge_slave_0) entered learning state [ 811.624614][T19924] netlink: 'syz.3.5239': attribute type 11 has an invalid length. [ 811.637296][T19924] __nla_validate_parse: 7 callbacks suppressed [ 811.637314][T19924] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5239'. [ 811.760616][T19923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.853290][T19980] FAULT_INJECTION: forcing a failure. [ 815.853290][T19980] name failslab, interval 1, probability 0, space 0, times 0 [ 815.875161][T19980] CPU: 1 PID: 19980 Comm: syz.4.5258 Not tainted syzkaller #0 [ 815.882677][T19980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 815.892750][T19980] Call Trace: [ 815.896044][T19980] [ 815.899000][T19980] dump_stack_lvl+0x188/0x24e [ 815.903704][T19980] ? show_regs_print_info+0x12/0x12 [ 815.908922][T19980] ? load_image+0x400/0x400 [ 815.913469][T19980] should_fail_ex+0x399/0x4d0 [ 815.918176][T19980] should_failslab+0x5/0x20 [ 815.922699][T19980] slab_pre_alloc_hook+0x59/0x310 [ 815.927746][T19980] kmem_cache_alloc+0x56/0x2f0 [ 815.932534][T19980] ? skb_clone+0x1e7/0x370 [ 815.936980][T19980] skb_clone+0x1e7/0x370 [ 815.941243][T19980] bpf_clone_redirect+0x163/0x4a0 [ 815.946302][T19980] bpf_prog_c6f54bbad6dab1ee+0x56/0x5b [ 815.951783][T19980] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 815.957798][T19980] ? lock_chain_count+0x20/0x20 [ 815.962676][T19980] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 815.968934][T19980] ? lockdep_hardirqs_on+0x94/0x140 [ 815.974149][T19980] ? ktime_get+0x7b/0x270 [ 815.978493][T19980] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 815.984751][T19980] ? ktime_get_real_ts64+0x440/0x440 [ 815.990053][T19980] ? read_lock_is_recursive+0x10/0x10 [ 815.995450][T19980] ? __cant_sleep+0x220/0x220 [ 816.000150][T19980] ? bpf_test_timer_continue+0x142/0x380 [ 816.005807][T19980] bpf_test_run+0x2b6/0x830 [ 816.010359][T19980] ? convert___skb_to_skb+0x580/0x580 [ 816.015764][T19980] ? eth_get_headlen+0x200/0x200 [ 816.020741][T19980] ? __build_skb+0x257/0x3c0 [ 816.025360][T19980] ? convert___skb_to_skb+0x3d/0x580 [ 816.030758][T19980] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 816.036169][T19980] ? cpu_online+0xa0/0xa0 [ 816.040515][T19980] bpf_prog_test_run+0x31e/0x390 [ 816.045475][T19980] __sys_bpf+0x62b/0x780 [ 816.049739][T19980] ? bpf_link_show_fdinfo+0x380/0x380 [ 816.055150][T19980] ? lock_chain_count+0x20/0x20 [ 816.060033][T19980] __x64_sys_bpf+0x78/0x90 [ 816.064468][T19980] do_syscall_64+0x4c/0xa0 [ 816.068922][T19980] ? clear_bhb_loop+0x60/0xb0 [ 816.073620][T19980] ? clear_bhb_loop+0x60/0xb0 [ 816.078317][T19980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.084241][T19980] RIP: 0033:0x7f6098b9c629 [ 816.088691][T19980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.108328][T19980] RSP: 002b:00007f60999fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.116763][T19980] RAX: ffffffffffffffda RBX: 00007f6098e15fa0 RCX: 00007f6098b9c629 [ 816.124749][T19980] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 816.132737][T19980] RBP: 00007f60999fe090 R08: 0000000000000000 R09: 0000000000000000 [ 816.140729][T19980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 816.148886][T19980] R13: 00007f6098e16038 R14: 00007f6098e15fa0 R15: 00007ffc7f2e9c58 [ 816.156927][T19980] [ 816.459891][T19983] validate_nla: 1 callbacks suppressed [ 816.459904][T19983] netlink: 'syz.4.5259': attribute type 3 has an invalid length. [ 816.536883][T19983] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5259'. [ 817.310060][T20005] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5266'. [ 817.598432][T20023] netlink: 'syz.4.5272': attribute type 46 has an invalid length. [ 817.606347][T20023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5272'. [ 819.168121][T20065] netlink: 'syz.4.5290': attribute type 3 has an invalid length. [ 819.188903][T20065] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5290'. [ 819.485474][T20074] netlink: 'syz.4.5295': attribute type 11 has an invalid length. [ 819.512793][T20074] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5295'. [ 819.645526][T20073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.812185][T20081] netlink: 'syz.2.5298': attribute type 3 has an invalid length. [ 819.837092][T20081] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5298'. [ 820.167633][T20091] FAULT_INJECTION: forcing a failure. [ 820.167633][T20091] name failslab, interval 1, probability 0, space 0, times 0 [ 820.247334][T20091] CPU: 0 PID: 20091 Comm: syz.4.5302 Not tainted syzkaller #0 [ 820.255052][T20091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 820.265150][T20091] Call Trace: [ 820.268469][T20091] [ 820.271437][T20091] dump_stack_lvl+0x188/0x24e [ 820.276166][T20091] ? show_regs_print_info+0x12/0x12 [ 820.281406][T20091] ? load_image+0x400/0x400 [ 820.285974][T20091] ? __might_sleep+0xd0/0xd0 [ 820.290597][T20091] ? __lock_acquire+0x7d10/0x7d10 [ 820.295655][T20091] should_fail_ex+0x399/0x4d0 [ 820.300360][T20091] should_failslab+0x5/0x20 [ 820.304874][T20091] slab_pre_alloc_hook+0x59/0x310 [ 820.309905][T20091] ? trace_call_bpf+0x5d6/0x6b0 [ 820.314772][T20091] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 820.320507][T20091] __kmem_cache_alloc_node+0x4f/0x260 [ 820.325896][T20091] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 820.331628][T20091] __kmalloc+0xa0/0x240 [ 820.335892][T20091] tomoyo_realpath_from_path+0xdf/0x5d0 [ 820.341475][T20091] ? tomoyo_path_number_perm+0x205/0x650 [ 820.347128][T20091] tomoyo_path_number_perm+0x22f/0x650 [ 820.352616][T20091] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 820.358087][T20091] ? ksys_write+0x1c0/0x250 [ 820.362605][T20091] ? common_file_perm+0x171/0x1c0 [ 820.367708][T20091] ? __fget_files+0x28/0x4b0 [ 820.372303][T20091] ? __fget_files+0x28/0x4b0 [ 820.376937][T20091] security_file_ioctl+0x6c/0xa0 [ 820.381910][T20091] __se_sys_ioctl+0x48/0x170 [ 820.386526][T20091] do_syscall_64+0x4c/0xa0 [ 820.390961][T20091] ? clear_bhb_loop+0x60/0xb0 [ 820.395652][T20091] ? clear_bhb_loop+0x60/0xb0 [ 820.400348][T20091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 820.406246][T20091] RIP: 0033:0x7f6098b9c629 [ 820.410702][T20091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.430338][T20091] RSP: 002b:00007f60999fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.438779][T20091] RAX: ffffffffffffffda RBX: 00007f6098e15fa0 RCX: 00007f6098b9c629 [ 820.446758][T20091] RDX: 0000200000000900 RSI: 00000000000089f6 RDI: 0000000000000004 [ 820.454773][T20091] RBP: 00007f60999fe090 R08: 0000000000000000 R09: 0000000000000000 [ 820.462774][T20091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.470753][T20091] R13: 00007f6098e16038 R14: 00007f6098e15fa0 R15: 00007ffc7f2e9c58 [ 820.478854][T20091] [ 820.652434][T20091] ERROR: Out of memory at tomoyo_realpath_from_path. [ 820.980039][T20103] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5306'. [ 821.022907][T20103] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5306'. [ 821.084367][T20108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5306'. [ 821.289126][T20112] netlink: 'syz.1.5310': attribute type 11 has an invalid length. [ 821.300212][T20114] FAULT_INJECTION: forcing a failure. [ 821.300212][T20114] name failslab, interval 1, probability 0, space 0, times 0 [ 821.316067][T20112] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5310'. [ 821.326190][T20114] CPU: 1 PID: 20114 Comm: syz.3.5311 Not tainted syzkaller #0 [ 821.333694][T20114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 821.344015][T20114] Call Trace: [ 821.347288][T20114] [ 821.350211][T20114] dump_stack_lvl+0x188/0x24e [ 821.354894][T20114] ? show_regs_print_info+0x12/0x12 [ 821.360100][T20114] ? load_image+0x400/0x400 [ 821.364642][T20114] ? __might_sleep+0xd0/0xd0 [ 821.369293][T20114] ? __lock_acquire+0x7d10/0x7d10 [ 821.374465][T20114] should_fail_ex+0x399/0x4d0 [ 821.379428][T20114] should_failslab+0x5/0x20 [ 821.383952][T20114] slab_pre_alloc_hook+0x59/0x310 [ 821.389192][T20114] ? sk_prot_alloc+0xe7/0x210 [ 821.393986][T20114] __kmem_cache_alloc_node+0x4f/0x260 [ 821.399369][T20114] ? sk_prot_alloc+0xe7/0x210 [ 821.404089][T20114] __kmalloc+0xa0/0x240 [ 821.408261][T20114] sk_prot_alloc+0xe7/0x210 [ 821.412773][T20114] ? sk_alloc+0x20/0x340 [ 821.417021][T20114] sk_alloc+0x36/0x340 [ 821.421090][T20114] ? bpf_ctx_init+0x163/0x1a0 [ 821.425765][T20114] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 821.431328][T20114] bpf_prog_test_run_skb+0x35e/0x12a0 [ 821.436724][T20114] ? __fget_files+0x28/0x4b0 [ 821.441328][T20114] ? __fget_files+0x43d/0x4b0 [ 821.446014][T20114] ? cpu_online+0xa0/0xa0 [ 821.450347][T20114] bpf_prog_test_run+0x31e/0x390 [ 821.455287][T20114] __sys_bpf+0x62b/0x780 [ 821.459528][T20114] ? bpf_link_show_fdinfo+0x380/0x380 [ 821.464934][T20114] ? lock_chain_count+0x20/0x20 [ 821.469962][T20114] __x64_sys_bpf+0x78/0x90 [ 821.474373][T20114] do_syscall_64+0x4c/0xa0 [ 821.478891][T20114] ? clear_bhb_loop+0x60/0xb0 [ 821.483571][T20114] ? clear_bhb_loop+0x60/0xb0 [ 821.488258][T20114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.494264][T20114] RIP: 0033:0x7fcfdef9c629 [ 821.498685][T20114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.518284][T20114] RSP: 002b:00007fcfdfe94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 821.526687][T20114] RAX: ffffffffffffffda RBX: 00007fcfdf215fa0 RCX: 00007fcfdef9c629 [ 821.534652][T20114] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 821.542634][T20114] RBP: 00007fcfdfe94090 R08: 0000000000000000 R09: 0000000000000000 [ 821.551118][T20114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.559078][T20114] R13: 00007fcfdf216038 R14: 00007fcfdf215fa0 R15: 00007ffd475c5ce8 [ 821.567068][T20114] [ 821.628510][T20111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.180321][T20144] netlink: 'syz.1.5321': attribute type 10 has an invalid length. [ 823.228862][T20149] netlink: 'syz.4.5323': attribute type 11 has an invalid length. [ 823.237104][T20149] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5323'. [ 823.258916][T20148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.306409][T20144] bond0: (slave team0): Releasing backup interface [ 823.345213][T20144] team0 (unregistering): Port device team_slave_1 removed [ 823.643706][T20162] FAULT_INJECTION: forcing a failure. [ 823.643706][T20162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.677196][T20162] CPU: 1 PID: 20162 Comm: syz.1.5329 Not tainted syzkaller #0 [ 823.684722][T20162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 823.694794][T20162] Call Trace: [ 823.698091][T20162] [ 823.701124][T20162] dump_stack_lvl+0x188/0x24e [ 823.705837][T20162] ? show_regs_print_info+0x12/0x12 [ 823.711068][T20162] ? load_image+0x400/0x400 [ 823.715597][T20162] ? __lock_acquire+0x7d10/0x7d10 [ 823.720671][T20162] should_fail_ex+0x399/0x4d0 [ 823.725430][T20162] _copy_from_user+0x2c/0x170 [ 823.730132][T20162] bpf_prog_test_run_skb+0x262/0x12a0 [ 823.735514][T20162] ? __fget_files+0x28/0x4b0 [ 823.740118][T20162] ? __fget_files+0x28/0x4b0 [ 823.744715][T20162] ? __fget_files+0x43d/0x4b0 [ 823.749490][T20162] ? cpu_online+0xa0/0xa0 [ 823.753817][T20162] bpf_prog_test_run+0x31e/0x390 [ 823.758759][T20162] __sys_bpf+0x62b/0x780 [ 823.763001][T20162] ? bpf_link_show_fdinfo+0x380/0x380 [ 823.768643][T20162] ? lock_chain_count+0x20/0x20 [ 823.773520][T20162] __x64_sys_bpf+0x78/0x90 [ 823.778202][T20162] do_syscall_64+0x4c/0xa0 [ 823.782797][T20162] ? clear_bhb_loop+0x60/0xb0 [ 823.787474][T20162] ? clear_bhb_loop+0x60/0xb0 [ 823.792148][T20162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.798037][T20162] RIP: 0033:0x7fd492f9c629 [ 823.802544][T20162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.822235][T20162] RSP: 002b:00007fd493e6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 823.830647][T20162] RAX: ffffffffffffffda RBX: 00007fd493215fa0 RCX: 00007fd492f9c629 [ 823.838615][T20162] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 823.847276][T20162] RBP: 00007fd493e6a090 R08: 0000000000000000 R09: 0000000000000000 [ 823.855263][T20162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.863227][T20162] R13: 00007fd493216038 R14: 00007fd493215fa0 R15: 00007ffe29321508 [ 823.871205][T20162] [ 823.918438][T20168] netlink: 'syz.3.5327': attribute type 3 has an invalid length. [ 823.924503][T20166] netlink: 'syz.4.5330': attribute type 3 has an invalid length. [ 823.936129][T20166] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5330'. [ 823.958954][T20168] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5327'. [ 824.006507][T20170] netlink: 'syz.2.5331': attribute type 3 has an invalid length. [ 824.022905][T20170] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5331'. [ 824.274832][T20182] netlink: 'syz.0.5335': attribute type 11 has an invalid length. [ 824.356033][T20182] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5335'. [ 824.383081][T20183] netlink: 'syz.2.5345': attribute type 3 has an invalid length. [ 824.392108][T20183] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5345'. [ 824.394867][T20188] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.418441][T20178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.417164][T20201] device sit0 entered promiscuous mode [ 826.558826][T20209] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5342'. [ 826.587254][T20209] netlink: zone id is out of range [ 826.625462][T20209] netlink: del zone limit has 4 unknown bytes [ 826.800164][T20218] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5347'. [ 826.865423][T20217] netlink: 'syz.3.5346': attribute type 3 has an invalid length. [ 826.891245][T20213] netlink: 'syz.1.5344': attribute type 3 has an invalid length. [ 826.905603][T20217] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5346'. [ 826.924204][T20213] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5344'. [ 827.311840][T20227] netlink: 'syz.3.5349': attribute type 3 has an invalid length. [ 827.332230][T20226] netlink: 'syz.1.5352': attribute type 3 has an invalid length. [ 827.484316][T20231] netlink: 'syz.0.5350': attribute type 11 has an invalid length. [ 827.696578][T20228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.165471][T20244] netlink: 'syz.1.5360': attribute type 1 has an invalid length. [ 828.211330][T20248] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 828.560090][T20251] netlink: 'syz.4.5361': attribute type 3 has an invalid length. [ 828.576748][T20254] netlink: 'syz.3.5363': attribute type 3 has an invalid length. [ 828.577075][T20251] __nla_validate_parse: 4 callbacks suppressed [ 828.577120][T20251] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5361'. [ 828.600763][T20254] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5363'. [ 828.932649][T20265] netlink: 'syz.4.5367': attribute type 3 has an invalid length. [ 828.941471][T20265] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5367'. [ 829.038091][T20270] netlink: 'syz.3.5369': attribute type 11 has an invalid length. [ 829.107574][T20270] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5369'. [ 829.162736][T20269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 829.597760][T20288] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 830.193536][T20310] netlink: 'syz.2.5384': attribute type 11 has an invalid length. [ 830.228544][T20310] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5384'. [ 830.289445][T20309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.704393][T20322] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 830.865567][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 831.060144][T20329] netlink: 'syz.0.5390': attribute type 3 has an invalid length. [ 831.069120][T20329] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5390'. [ 832.532681][T20359] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5402'. [ 832.667683][T20365] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 832.700312][T20363] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 833.276831][T20378] syzkaller0: tun_chr_ioctl cmd 35092 [ 834.376456][T20398] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 834.423784][T20403] netlink: 'syz.1.5418': attribute type 3 has an invalid length. [ 834.466054][T20403] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5418'. [ 834.512510][T20402] netlink: 'syz.2.5417': attribute type 3 has an invalid length. [ 834.602083][T20402] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5417'. [ 834.782220][T20410] netlink: 'syz.1.5422': attribute type 11 has an invalid length. [ 834.799352][T20410] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5422'. [ 834.850816][T20409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.209514][T20427] syzkaller0: tun_chr_ioctl cmd 35092 [ 835.968194][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 836.133184][T20450] netlink: 'syz.1.5436': attribute type 3 has an invalid length. [ 836.141673][T20450] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5436'. [ 836.325789][T20455] netlink: 'syz.0.5437': attribute type 3 has an invalid length. [ 836.391166][T20456] netlink: 'syz.4.5438': attribute type 11 has an invalid length. [ 836.442387][T20455] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5437'. [ 836.452532][T20461] netlink: 'syz.0.5437': attribute type 10 has an invalid length. [ 836.456616][T20456] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5438'. [ 836.517940][T20461] device hsr0 entered promiscuous mode [ 836.526495][T20454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.650114][T20461] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 836.778169][T20461] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 836.844504][T20461] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 836.857976][T20461] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 836.865084][T20464] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5441'. [ 837.246349][T20477] netlink: 'syz.3.5447': attribute type 3 has an invalid length. [ 837.284136][T20477] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5447'. [ 837.475344][T20488] netlink: 'syz.0.5451': attribute type 3 has an invalid length. [ 837.484636][T20488] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5451'. [ 837.632935][T20494] netlink: 'syz.4.5455': attribute type 11 has an invalid length. [ 837.667360][T20494] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5455'. [ 837.693885][T20496] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 837.711894][T20491] netlink: 'syz.3.5454': attribute type 3 has an invalid length. [ 837.747525][T20489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.015056][T20503] netlink: 'syz.4.5459': attribute type 10 has an invalid length. [ 838.095082][T20503] team0: Port device wlan1 removed [ 838.178220][T20503] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 838.422159][T20516] netlink: 'syz.1.5464': attribute type 3 has an invalid length. [ 838.844875][T20529] netlink: 'syz.2.5469': attribute type 11 has an invalid length. [ 838.892494][T20528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.400942][T20562] syzkaller0: tun_chr_ioctl cmd 35092 [ 840.664340][T20573] netlink: 'syz.3.5484': attribute type 11 has an invalid length. [ 840.697098][T20573] __nla_validate_parse: 4 callbacks suppressed [ 840.697117][T20573] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5484'. [ 840.766727][T20572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.041075][T20575] validate_nla: 2 callbacks suppressed [ 841.041094][T20575] netlink: 'syz.1.5486': attribute type 3 has an invalid length. [ 841.104528][T20575] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5486'. [ 841.160767][T20588] netlink: 'syz.3.5491': attribute type 21 has an invalid length. [ 841.906816][T20596] netlink: 'syz.0.5493': attribute type 10 has an invalid length. [ 841.949139][T20602] FAULT_INJECTION: forcing a failure. [ 841.949139][T20602] name failslab, interval 1, probability 0, space 0, times 0 [ 841.990057][T20602] CPU: 1 PID: 20602 Comm: syz.1.5496 Not tainted syzkaller #0 [ 841.997564][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 842.007632][T20602] Call Trace: [ 842.010923][T20602] [ 842.013862][T20602] dump_stack_lvl+0x188/0x24e [ 842.018564][T20602] ? show_regs_print_info+0x12/0x12 [ 842.023785][T20602] ? load_image+0x400/0x400 [ 842.028311][T20602] ? __might_sleep+0xd0/0xd0 [ 842.032915][T20602] ? __lock_acquire+0x7d10/0x7d10 [ 842.037960][T20602] should_fail_ex+0x399/0x4d0 [ 842.042664][T20602] should_failslab+0x5/0x20 [ 842.047187][T20602] slab_pre_alloc_hook+0x59/0x310 [ 842.052223][T20602] ? apparmor_sk_alloc_security+0x74/0x100 [ 842.058051][T20602] __kmem_cache_alloc_node+0x4f/0x260 [ 842.063443][T20602] ? apparmor_sk_alloc_security+0x74/0x100 [ 842.069279][T20602] kmalloc_trace+0x26/0xe0 [ 842.073719][T20602] apparmor_sk_alloc_security+0x74/0x100 [ 842.079387][T20602] security_sk_alloc+0x6a/0xa0 [ 842.084179][T20602] sk_prot_alloc+0x101/0x210 [ 842.088800][T20602] ? sk_alloc+0x20/0x340 [ 842.093068][T20602] sk_alloc+0x36/0x340 [ 842.097250][T20602] ? bpf_ctx_init+0x163/0x1a0 [ 842.101974][T20602] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 842.107519][T20602] bpf_prog_test_run_skb+0x35e/0x12a0 [ 842.112890][T20602] ? __fget_files+0x28/0x4b0 [ 842.117488][T20602] ? __fget_files+0x43d/0x4b0 [ 842.122165][T20602] ? cpu_online+0xa0/0xa0 [ 842.126489][T20602] bpf_prog_test_run+0x31e/0x390 [ 842.131426][T20602] __sys_bpf+0x62b/0x780 [ 842.135668][T20602] ? bpf_link_show_fdinfo+0x380/0x380 [ 842.141056][T20602] ? lock_chain_count+0x20/0x20 [ 842.145907][T20602] __x64_sys_bpf+0x78/0x90 [ 842.150323][T20602] do_syscall_64+0x4c/0xa0 [ 842.154738][T20602] ? clear_bhb_loop+0x60/0xb0 [ 842.159407][T20602] ? clear_bhb_loop+0x60/0xb0 [ 842.164075][T20602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.169955][T20602] RIP: 0033:0x7fd492f9c629 [ 842.174362][T20602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.193962][T20602] RSP: 002b:00007fd493e6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 842.202368][T20602] RAX: ffffffffffffffda RBX: 00007fd493215fa0 RCX: 00007fd492f9c629 [ 842.210330][T20602] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 842.218293][T20602] RBP: 00007fd493e6a090 R08: 0000000000000000 R09: 0000000000000000 [ 842.226273][T20602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.234236][T20602] R13: 00007fd493216038 R14: 00007fd493215fa0 R15: 00007ffe29321508 [ 842.242223][T20602] [ 842.905040][T20630] netlink: 'syz.4.5503': attribute type 29 has an invalid length. [ 842.922835][T20630] netlink: 'syz.4.5503': attribute type 3 has an invalid length. [ 842.931882][T20630] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5503'. [ 842.990152][T20626] device syzkaller0 entered promiscuous mode [ 843.003345][T20631] netlink: 'syz.1.5502': attribute type 10 has an invalid length. [ 843.303401][T20638] FAULT_INJECTION: forcing a failure. [ 843.303401][T20638] name failslab, interval 1, probability 0, space 0, times 0 [ 843.364292][T20638] CPU: 1 PID: 20638 Comm: syz.1.5507 Not tainted syzkaller #0 [ 843.371807][T20638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 843.381879][T20638] Call Trace: [ 843.385180][T20638] [ 843.388143][T20638] dump_stack_lvl+0x188/0x24e [ 843.392867][T20638] ? show_regs_print_info+0x12/0x12 [ 843.398088][T20638] ? load_image+0x400/0x400 [ 843.402599][T20638] ? __might_sleep+0xd0/0xd0 [ 843.407198][T20638] ? __lock_acquire+0x7d10/0x7d10 [ 843.412247][T20638] should_fail_ex+0x399/0x4d0 [ 843.416953][T20638] should_failslab+0x5/0x20 [ 843.421484][T20638] slab_pre_alloc_hook+0x59/0x310 [ 843.426520][T20638] ? sk_prot_alloc+0xe7/0x210 [ 843.431213][T20638] __kmem_cache_alloc_node+0x4f/0x260 [ 843.436607][T20638] ? sk_prot_alloc+0xe7/0x210 [ 843.441293][T20638] __kmalloc+0xa0/0x240 [ 843.445468][T20638] sk_prot_alloc+0xe7/0x210 [ 843.449990][T20638] ? sk_alloc+0x20/0x340 [ 843.454343][T20638] sk_alloc+0x36/0x340 [ 843.458443][T20638] ? bpf_ctx_init+0x163/0x1a0 [ 843.463131][T20638] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 843.468685][T20638] bpf_prog_test_run_skb+0x35e/0x12a0 [ 843.474053][T20638] ? __fget_files+0x28/0x4b0 [ 843.478638][T20638] ? __fget_files+0x43d/0x4b0 [ 843.483329][T20638] ? cpu_online+0xa0/0xa0 [ 843.487648][T20638] bpf_prog_test_run+0x31e/0x390 [ 843.492583][T20638] __sys_bpf+0x62b/0x780 [ 843.496828][T20638] ? bpf_link_show_fdinfo+0x380/0x380 [ 843.502202][T20638] ? lock_chain_count+0x20/0x20 [ 843.507053][T20638] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 843.513041][T20638] __x64_sys_bpf+0x78/0x90 [ 843.517467][T20638] do_syscall_64+0x4c/0xa0 [ 843.521963][T20638] ? clear_bhb_loop+0x60/0xb0 [ 843.526632][T20638] ? clear_bhb_loop+0x60/0xb0 [ 843.531301][T20638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 843.537182][T20638] RIP: 0033:0x7fd492f9c629 [ 843.541590][T20638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.561197][T20638] RSP: 002b:00007fd493e6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 843.569604][T20638] RAX: ffffffffffffffda RBX: 00007fd493215fa0 RCX: 00007fd492f9c629 [ 843.577582][T20638] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 843.585553][T20638] RBP: 00007fd493e6a090 R08: 0000000000000000 R09: 0000000000000000 [ 843.593524][T20638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.601485][T20638] R13: 00007fd493216038 R14: 00007fd493215fa0 R15: 00007ffe29321508 [ 843.609462][T20638] [ 843.805246][T20644] syzkaller0: tun_chr_ioctl cmd 35092 [ 846.032756][T20642] netlink: 'syz.3.5508': attribute type 10 has an invalid length. [ 846.245759][T20666] netlink: 'syz.4.5515': attribute type 3 has an invalid length. [ 846.269181][T20666] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5515'. [ 846.282569][T20666] FAULT_INJECTION: forcing a failure. [ 846.282569][T20666] name failslab, interval 1, probability 0, space 0, times 0 [ 846.300417][T20666] CPU: 1 PID: 20666 Comm: syz.4.5515 Not tainted syzkaller #0 [ 846.307960][T20666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 846.318044][T20666] Call Trace: [ 846.321341][T20666] [ 846.324291][T20666] dump_stack_lvl+0x188/0x24e [ 846.328994][T20666] ? show_regs_print_info+0x12/0x12 [ 846.334203][T20666] ? load_image+0x400/0x400 [ 846.338728][T20666] should_fail_ex+0x399/0x4d0 [ 846.343415][T20666] should_failslab+0x5/0x20 [ 846.347943][T20666] slab_pre_alloc_hook+0x59/0x310 [ 846.352985][T20666] kmem_cache_alloc+0x56/0x2f0 [ 846.357754][T20666] ? skb_clone+0x1e7/0x370 [ 846.362178][T20666] skb_clone+0x1e7/0x370 [ 846.366422][T20666] bpf_clone_redirect+0x163/0x4a0 [ 846.371457][T20666] bpf_prog_c6f54bbad6dab1ee+0x56/0x5b [ 846.376917][T20666] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 846.382911][T20666] ? lock_chain_count+0x20/0x20 [ 846.387761][T20666] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 846.394009][T20666] ? lockdep_hardirqs_on+0x94/0x140 [ 846.399211][T20666] ? ktime_get+0x7b/0x270 [ 846.403538][T20666] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 846.409794][T20666] ? ktime_get_real_ts64+0x440/0x440 [ 846.415082][T20666] ? read_lock_is_recursive+0x10/0x10 [ 846.420465][T20666] ? __cant_sleep+0x220/0x220 [ 846.425147][T20666] ? bpf_test_timer_continue+0x142/0x380 [ 846.430781][T20666] bpf_test_run+0x2b6/0x830 [ 846.435297][T20666] ? convert___skb_to_skb+0x580/0x580 [ 846.440669][T20666] ? eth_get_headlen+0x200/0x200 [ 846.445600][T20666] ? __build_skb+0x257/0x3c0 [ 846.450202][T20666] ? convert___skb_to_skb+0x3d/0x580 [ 846.455488][T20666] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 846.460872][T20666] ? cpu_online+0xa0/0xa0 [ 846.465199][T20666] bpf_prog_test_run+0x31e/0x390 [ 846.470137][T20666] __sys_bpf+0x62b/0x780 [ 846.474377][T20666] ? bpf_link_show_fdinfo+0x380/0x380 [ 846.479767][T20666] ? lock_chain_count+0x20/0x20 [ 846.484621][T20666] __x64_sys_bpf+0x78/0x90 [ 846.489037][T20666] do_syscall_64+0x4c/0xa0 [ 846.493453][T20666] ? clear_bhb_loop+0x60/0xb0 [ 846.498213][T20666] ? clear_bhb_loop+0x60/0xb0 [ 846.502884][T20666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.508771][T20666] RIP: 0033:0x7f6098b9c629 [ 846.513180][T20666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.532780][T20666] RSP: 002b:00007f60999fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 846.541198][T20666] RAX: ffffffffffffffda RBX: 00007f6098e15fa0 RCX: 00007f6098b9c629 [ 846.549165][T20666] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 846.557128][T20666] RBP: 00007f60999fe090 R08: 0000000000000000 R09: 0000000000000000 [ 846.565088][T20666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 846.573051][T20666] R13: 00007f6098e16038 R14: 00007f6098e15fa0 R15: 00007ffc7f2e9c58 [ 846.581115][T20666] [ 846.850265][T20682] syzkaller0: tun_chr_ioctl cmd 35092 [ 846.952423][T20684] netlink: 'syz.3.5523': attribute type 10 has an invalid length. [ 846.962894][T20684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5523'. [ 846.972772][T20684] device batadv0 entered promiscuous mode [ 846.996717][T20684] bridge0: port 3(batadv0) entered blocking state [ 847.027270][T20684] bridge0: port 3(batadv0) entered disabled state [ 847.035295][T20684] bridge0: port 3(batadv0) entered blocking state [ 847.041864][T20684] bridge0: port 3(batadv0) entered forwarding state [ 847.112577][ T6132] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 847.121986][ T6132] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 847.137805][T20689] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 847.145656][T20689] #PF: supervisor instruction fetch in kernel mode [ 847.152164][T20689] #PF: error_code(0x0010) - not-present page [ 847.158165][T20689] PGD 77e61067 P4D 77e61067 PUD 0 [ 847.163299][T20689] Oops: 0010 [#1] PREEMPT SMP KASAN [ 847.168512][T20689] CPU: 1 PID: 20689 Comm: syz.2.5526 Not tainted syzkaller #0 [ 847.175973][T20689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 847.186031][T20689] RIP: 0010:0x0 [ 847.189513][T20689] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 847.196892][T20689] RSP: 0018:ffffc90003407218 EFLAGS: 00010246 [ 847.202972][T20689] RAX: 1ffffffff1657fa3 RBX: 1ffff92000680e54 RCX: 0000000000000000 [ 847.210944][T20689] RDX: ffffc900034072c0 RSI: 0000000000000001 RDI: ffff888059c38000 [ 847.218915][T20689] RBP: ffffc90003407330 R08: ffff888059c3803f R09: 1ffff1100b387007 [ 847.226877][T20689] R10: dffffc0000000000 R11: ffffed100b387008 R12: ffffe8ffffd54af8 [ 847.234840][T20689] R13: ffffffff8b2bfd18 R14: 0000000000000000 R15: ffff888059c38000 [ 847.242802][T20689] FS: 00007f910e2e16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 847.251726][T20689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.258299][T20689] CR2: ffffffffffffffd6 CR3: 000000004bea3000 CR4: 00000000003506e0 [ 847.266261][T20689] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 847.274309][T20689] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 847.282271][T20689] Call Trace: [ 847.285541][T20689] [ 847.288580][T20689] bond_xdp_xmit+0x31e/0x550 [ 847.293186][T20689] ? bond_xdp_xmit+0x94/0x550 [ 847.297867][T20689] ? bond_xdp+0x850/0x850 [ 847.302196][T20689] bq_xmit_all+0xd3f/0x11b0 [ 847.306708][T20689] ? perf_tp_event+0xaa1/0xc00 [ 847.311478][T20689] ? __dev_flush+0x1b0/0x1b0 [ 847.316065][T20689] ? irqentry_enter+0x33/0x50 [ 847.320731][T20689] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 847.326704][T20689] ? lock_chain_count+0x20/0x20 [ 847.331549][T20689] ? rcu_is_watching+0x11/0xa0 [ 847.336309][T20689] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 847.342454][T20689] ? lockdep_hardirqs_on+0x94/0x140 [ 847.347642][T20689] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 847.353818][T20689] ? rcu_read_lock_bh_held+0x76/0xf0 [ 847.359120][T20689] ? rcu_read_lock_held+0x40/0x40 [ 847.364154][T20689] bq_enqueue+0x337/0x3d0 [ 847.368491][T20689] dev_map_enqueue_multi+0x102b/0x11b0 [ 847.373974][T20689] ? perf_trace_preemptirq_template+0x268/0x320 [ 847.380326][T20689] ? dev_map_enqueue+0x340/0x340 [ 847.385287][T20689] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 847.391468][T20689] ? rcu_read_lock_held+0x40/0x40 [ 847.396499][T20689] ? rcu_is_watching+0x11/0xa0 [ 847.401271][T20689] xdp_do_redirect_frame+0x477/0x650 [ 847.406578][T20689] bpf_test_run_xdp_live+0xa99/0x1a90 [ 847.411947][T20689] ? 0xffffffffa0004440 [ 847.416096][T20689] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 847.421633][T20689] ? xdp_convert_md_to_buff+0x330/0x330 [ 847.427181][T20689] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 847.433419][T20689] ? bpf_test_init+0x119/0x140 [ 847.438170][T20689] ? xdp_convert_md_to_buff+0x5b/0x330 [ 847.443631][T20689] bpf_prog_test_run_xdp+0x736/0xf10 [ 847.448911][T20689] ? dev_put+0x80/0x80 [ 847.452978][T20689] ? dev_put+0x80/0x80 [ 847.457127][T20689] bpf_prog_test_run+0x31e/0x390 [ 847.462061][T20689] __sys_bpf+0x62b/0x780 [ 847.466295][T20689] ? bpf_link_show_fdinfo+0x380/0x380 [ 847.471665][T20689] ? lock_chain_count+0x20/0x20 [ 847.476507][T20689] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 847.482484][T20689] __x64_sys_bpf+0x78/0x90 [ 847.486903][T20689] do_syscall_64+0x4c/0xa0 [ 847.491321][T20689] ? clear_bhb_loop+0x60/0xb0 [ 847.495989][T20689] ? clear_bhb_loop+0x60/0xb0 [ 847.500658][T20689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 847.506541][T20689] RIP: 0033:0x7f910d39c629 [ 847.510949][T20689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.530544][T20689] RSP: 002b:00007f910e2e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 847.538948][T20689] RAX: ffffffffffffffda RBX: 00007f910d615fa0 RCX: 00007f910d39c629 [ 847.546936][T20689] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 847.554922][T20689] RBP: 00007f910d432b39 R08: 0000000000000000 R09: 0000000000000000 [ 847.562900][T20689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.570879][T20689] R13: 00007f910d616038 R14: 00007f910d615fa0 R15: 00007ffc3d93f668 [ 847.578845][T20689] [ 847.581860][T20689] Modules linked in: [ 847.585776][T20689] CR2: 0000000000000000 [ 847.589925][T20689] ---[ end trace 0000000000000000 ]--- [ 847.595365][T20689] RIP: 0010:0x0 [ 847.598816][T20689] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 847.606164][T20689] RSP: 0018:ffffc90003407218 EFLAGS: 00010246 [ 847.612228][T20689] RAX: 1ffffffff1657fa3 RBX: 1ffff92000680e54 RCX: 0000000000000000 [ 847.620191][T20689] RDX: ffffc900034072c0 RSI: 0000000000000001 RDI: ffff888059c38000 [ 847.628152][T20689] RBP: ffffc90003407330 R08: ffff888059c3803f R09: 1ffff1100b387007 [ 847.636118][T20689] R10: dffffc0000000000 R11: ffffed100b387008 R12: ffffe8ffffd54af8 [ 847.644077][T20689] R13: ffffffff8b2bfd18 R14: 0000000000000000 R15: ffff888059c38000 [ 847.652036][T20689] FS: 00007f910e2e16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 847.660958][T20689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.667528][T20689] CR2: ffffffffffffffd6 CR3: 000000004bea3000 CR4: 00000000003506e0 [ 847.675494][T20689] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 847.683454][T20689] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 847.691415][T20689] Kernel panic - not syncing: Fatal exception in interrupt [ 847.698901][T20689] Kernel Offset: disabled [ 847.703216][T20689] Rebooting in 86400 seconds..