last executing test programs: 6.744091073s ago: executing program 1 (id=885): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xbfe0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400022}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003140)={r1, 0x0, 0x1000, 0x42, &(0x7f00000000c0)="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", &(0x7f00000010c0)=""/66, 0xde, 0x0, 0x1000, 0x1000, &(0x7f0000001140)="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", &(0x7f0000002140)="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", 0x5, 0x0, 0x1}, 0x50) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000031c0)=@bloom_filter={0x1e, 0x740b, 0x4, 0x9378, 0x8000, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000033c0), 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003540)={{0x1, 0xffffffffffffffff}, &(0x7f00000034c0), &(0x7f0000003500)='%pB \x00'}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003580)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x1, 0xb, &(0x7f0000003240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x0, 0x0, 0x2, 0x5, 0xa, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @ldst={0x3, 0x3, 0x4, 0x7, 0x2, 0xfffffffffffffff4, 0x8}]}, &(0x7f00000032c0)='syzkaller\x00', 0x5, 0x81, &(0x7f0000003300)=""/129, 0x41000, 0xe2, '\x00', 0x0, @fallback=0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003400)={0x4, 0xf, 0x5, 0x80000000}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000003600)=[r4, r5, r6, r7], 0x0, 0x10, 0x4}, 0x94) close(0x3) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.764633977s ago: executing program 2 (id=904): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f00000001c0)=""/155}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x2000}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xefc4000000000000, 0x29210, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0xd}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, r1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r9 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000080), &(0x7f00000001c0)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r8, &(0x7f0000000200)}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRES32=r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=r11, @ANYBLOB='&'], 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f00000002c0)=r10}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)}], 0x1}, 0x4001) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'erspan0\x00', 0x200}) close(r3) 3.50547767s ago: executing program 0 (id=905): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188", 0x8}], 0x1}, 0x20) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00"], 0xfe33) (async) recvmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/210, 0xd2}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x5, &(0x7f00000016c0)=""/221, 0xdd}, 0x101) 3.215801483s ago: executing program 0 (id=907): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0x3) socketpair(0x25, 0x1, 0x8, &(0x7f0000000800)) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x24}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff9b}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0x2, &(0x7f0000000040)=r3, 0xf15e) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12208, 0x2, 0x0, 0x0, 0x6, 0x5, 0x2}, 0x0, 0x0, r3, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2020) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@fallback, 0xffffffffffffffff, 0x19, 0x10}, 0x20) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000004bc0)={&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000004940)=[{&(0x7f0000000140)="0f6816", 0x3}], 0x1, &(0x7f0000004ac0)=ANY=[@ANYBLOB="60000000000000000000000007000000890b0c7f000001ac1414aa4424a4c080000005ffffffff000000050000800000009307000000000000080000000004940d0d4c8664e8fc4e14d8607889131bac1414aaac1e000100000000e000000100140000000000000000000000020000007c0000000000000014000000000000000000000002000000000001000000000011000000000000000000000001000000000000000000000014000000000000000000000002000000ef000000000000001c"], 0xe0}, 0x88c) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000f4ff0095"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) mkdirat$cgroup(0xffffffffffffffff, 0xfffffffffffffffc, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="aa581ff83dac4a636cb9b825c4009d215634b12c4ce8a4e1d32e2e4b6e56cfa1ba584ba7d17f3a6a991d96384d307c768c81c980e56f316d71e106acf3d5b8711479f234fa73a5a6d7", 0x49}], 0x2}, 0x0) close(r6) socket$kcm(0x10, 0x3, 0x10) 3.178062994s ago: executing program 2 (id=909): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000100)="b9ff0307684426", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0xfd, 0x0, 0x0, 0x0, 0xe9, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x100000, 0x10000, 0x9e4, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xc, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x106) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r7}, 0x20) r8 = getpid() perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x7, 0xff, 0x3, 0x4, 0x0, 0xffff, 0x8005, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000200), 0xd}, 0x0, 0xc, 0x4, 0x8, 0x2, 0x6, 0x6b38, 0x0, 0x3, 0x0, 0x2}, r8, 0xe, r0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x541b, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 3.095608184s ago: executing program 1 (id=910): socket$kcm(0x23, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000481c) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x4, 0x100}, 0x2000, 0x400000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x541b, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0xfff5}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) socket$kcm(0x29, 0x7, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x2d, &(0x7f00000004c0)=[{&(0x7f0000000080)="93", 0x1}], 0x1}, 0x4011) recvmsg$unix(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10061) recvmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) 2.6754429s ago: executing program 2 (id=913): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x39}], 0x10}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x8, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x1, 0x9, 0x7, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xf3, &(0x7f00000002c0)=""/243, 0x41100, 0x40, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x5, 0x4f094025, 0x80000000}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x2, 0x4, 0x8, 0x6}, {0x2, 0x3, 0x3, 0xc}, {0x4, 0x4, 0xf, 0x4}], 0x10, 0xfffffffd}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r1, 0x13, 0x0, 0xee, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700), 0x0}, 0x40) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4018, r0}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r12 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r14) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r12, 0x84, 0x64, &(0x7f0000000000)=r15, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@cgroup=r6, r2, 0x5, 0x8, r4, @void, @value=r7, @void, @void, r5}, 0x20) 2.559592581s ago: executing program 3 (id=914): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0xdb, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xe4, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x10}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0xfffffffa, 0xd, 0x5, 0xa000, 0xffffffffffffffff, 0x9, '\x00', r0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000b20000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500000000000000950000010000000000000086da9f1d000600000d4b5322469f37aa9492465ee791e5a24f4eb3830d51db46d9c28d0e793a161a832f84a58affcfdc48f5af00bc72aabc6f4b2e9926d2d0c6bf7ef6633a31b25ab62a408addbbda3fb2d59411dfda1a"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0xfcdf) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r1, 0x4) 2.307747824s ago: executing program 2 (id=915): perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001780), 0x4) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 1.986289547s ago: executing program 0 (id=916): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7fffffff}, 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r6) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) (async) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) socket$kcm(0x10, 0x2, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r11 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f0000000180)=r10, 0x4) sendmsg$inet(r11, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac1414", @ANYRES64, @ANYRES16], 0x30}, 0x40880) 1.926552788s ago: executing program 3 (id=917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) (async) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'macvtap0\x00', 0x200}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095", @ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 1.73721475s ago: executing program 2 (id=918): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xd56}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x43}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000a00)={0x1, 0x80, 0xc, 0x9, 0x5, 0x3c, 0x0, 0x401, 0x40800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3a, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x2820, 0xfffffffffffff9ee, 0xffff, 0x2, 0x2311, 0xffffc58f, 0x91, 0x0, 0x7, 0x0, 0x9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000002980)={&(0x7f0000000380)=@nl, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000580)=""/234, 0xea}], 0x2, &(0x7f0000001980)=""/4096, 0x1000}, 0x140) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0x18, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 1.583906262s ago: executing program 1 (id=919): perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x40, 0xfd, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240), 0x586dda86e98c43d4}, 0x2004, 0xc8, 0x3, 0x0, 0xffffffffdffffffd, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x7, 0xffffffffffffffff, 0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'vlan0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd29000084000000050100"], 0x48) socketpair(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_config_ext={0x3, 0x8}, 0x10600, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) close(0xffffffffffffffff) (async) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) write$cgroup_int(r3, &(0x7f0000000040), 0x1) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) (async) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x102d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x5}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) 1.544895382s ago: executing program 0 (id=920): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000000000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001080)=""/4042, 0xfca}, {&(0x7f0000000f80)=""/222, 0xde}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000008c0)=""/137, 0x89}, {&(0x7f0000000b00)=""/172, 0xac}, {&(0x7f0000000240)=""/165, 0xa5}, {0x0}, {&(0x7f0000000040)=""/57, 0x39}, {&(0x7f00000005c0)=""/146, 0x92}], 0xa}, 0x2000) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a40)="5c00000012006bab9a3fe3d86e17aa0a8100bae53dca2b007ea23e163ec40028e82fccdc09da157ef6a608649e7531765f0ef82e3c0073a705259a3651f607004b000000000098cae3ac8afd030047345ac6be8037e70e4509c5bb0c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000004) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='Z', 0x1}], 0x1}, 0x10) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000000)={'ipvlan1\x00'}) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000) r7 = perf_event_open$cgroup(&(0x7f0000004e40)={0x4, 0x80, 0x0, 0x9, 0x40, 0x5, 0x0, 0x5, 0x888, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0xfffffffffffffff9}, 0x0, 0xfffffffffffffff7, 0x5, 0x5, 0x4, 0x8, 0x5190, 0x0, 0xe26, 0x0, 0xffffffffffffff01}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000009c0)=ANY=[], &(0x7f0000000680)=""/18, 0x40, 0x12, 0x5, 0x4}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) r10 = socket$kcm(0xf, 0x3, 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x7, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000140)='syzkaller\x00') sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1180f42ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r11, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r9}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x1f, &(0x7f0000000c80)=ANY=[@ANYBLOB="18110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000000000850000008600000018400000020000000000000000000000b7080000000000007b8af8ff00000000b7080000048200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000070000000000000008000000185600000a0371682fa73c9465a749db28e96d8d000000000000000000000018a00000", @ANYRES32=r11, @ANYBLOB="0000000000000000183a00000300000000000000000000009500000000000000186100000c00000000000000ff0000000c380300fffbffff"], &(0x7f0000000800)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000840)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000880)=[{0x3, 0x1, 0x8b4, 0xa}, {0x5, 0x3, 0x0, 0xc}, {0x5, 0x2, 0xb, 0xc}], 0x10, 0x7}, 0x94) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 757.482731ms ago: executing program 3 (id=921): socketpair(0x2, 0x80000, 0x80000000, &(0x7f0000000340)) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @loopback, 0x3}}, 0x80, 0x0}, 0x4004090) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000480)=0x1) (async, rerun: 64) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) (rerun: 64) openat$cgroup_ro(r2, &(0x7f0000000400)='cgroup.kill\x00', 0x0, 0x0) (async) mkdir(&(0x7f00000004c0)='./file0\x00', 0x100) (async, rerun: 32) r3 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x7, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0xb, 0x0, 0x73c4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9c0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300)=r4, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x30, 0x0, 0x90) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) (async, rerun: 32) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 671.903483ms ago: executing program 2 (id=922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="2b637075202b70696473a0b9ca778fa45887b0adf2f9382ccef9a76a050046743eeb4dc84224691c36aacb209021511a33c298f0c0a931e919620862dfe9b965f6afdc5ea8fff3874093cf21c45a0c0ee837fa3e0629ce3e6f0820fcbbd5bb7b26ce7a4dd1ce3b0905eb4229fc747e3224b12f8473c106f006ad74c09a205bf6be6c63ede73ed79d58f49caa03a49562a05023fa4ea7bfb2dbb1d17a1d80f187e74b3ab4621552bd92c940f33165b54a87decf776fd8c237280b1512427cc40ef053fd252911ca4cff9a2449f4cb51fce64afcdcb3eeff04b6869a1d0d2cd35f508d7c1b53138faa1b46eabc8937b1682b"], 0xb) socketpair(0x10, 0x4, 0x8, &(0x7f00000005c0)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd2, 0x3, 0x0, 0x0, 0x0, 0x5, 0x81030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xd7, 0x1}, 0xae31cbdd19173c73, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfffffffffffffff7}, 0x8100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000001, 0x0, 0x4}, 0x0, 0xaffffffffffffffc, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r7) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x40000000000000}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r9 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)='dB', 0x64}], 0x1}, 0x22044880) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r10, @ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r11, 0x0, 0x0}, 0x10) 671.620412ms ago: executing program 1 (id=923): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) 558.232364ms ago: executing program 3 (id=924): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="180200008100000000000000d17e00008500000020000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 495.178454ms ago: executing program 0 (id=925): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0xdb, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xe4, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x10}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0xfffffffa, 0xd, 0x5, 0xa000, 0xffffffffffffffff, 0x9, '\x00', r0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000b20000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500000000000000950000010000000000000086da9f1d000600000d4b5322469f37aa9492465ee791e5a24f4eb3830d51db46d9c28d0e793a161a832f84a58affcfdc48f5af00bc72aabc6f4b2e9926d2d0c6bf7ef6633a31b25ab62a408addbbda3fb2d59411dfda1a"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0xfcdf) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r1, 0x4) 389.812806ms ago: executing program 3 (id=926): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0xc, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f6ffffff850000002d000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) recvmsg$unix(r1, 0x0, 0x10002) (async) r2 = socket$kcm(0x21, 0x2, 0x2) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffffffffffffffc7) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x21b}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 276.358917ms ago: executing program 1 (id=927): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="160000000400000004000000ff00000000020000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000ddbd3f8387683d1dadeace27c0fb743e97e88fc98af51d238446c97017f659c1063235c14b4c6ad52043c19f29dd004b3fa44eba3cc027008d67fa281d66e05192d28e64a8f1d2205d1f4eacb168125baca6c04b361b1dc751226e0a004034a8c109c7b2d85f7bf818600800000000000009712ed37ae078d71484a4c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2040) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8918, &(0x7f0000000000)={'hsr0\x00', @random="0200ff7fffff"}) 101.827999ms ago: executing program 3 (id=928): socketpair(0x22, 0x2, 0x4, &(0x7f0000000800)) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) 97.699579ms ago: executing program 0 (id=929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)="c6d3ddca886199f5af98723127d2", &(0x7f0000000340), 0xffffffff, r0}, 0x38) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000300)='A', 0x0}, 0x20) close(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 0s ago: executing program 1 (id=930): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) r5 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x1e, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNGETVNETLE(r1, 0x8955, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0xd876, 0x200000000000c8, 0x10000, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a20"], 0xfdef) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000e"], 0x28}, 0x0) syz_clone(0x81084000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)) kernel console output (not intermixed with test programs): ep mac addresses unique to avoid problems! [ 86.517844][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.571012][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.584194][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.594609][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.605222][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.619725][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.631483][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.640893][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.650265][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.659465][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.673924][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.701838][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.721473][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.739069][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.752857][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.763409][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.773488][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.784454][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.797754][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.815471][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.827270][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.837694][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.848869][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.859472][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.870040][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.881492][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.924588][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.935773][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.950490][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.964930][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.981728][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.991193][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.011579][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.022561][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.208381][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.245752][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.366784][ T5777] Bluetooth: hci1: command tx timeout [ 87.372389][ T5771] Bluetooth: hci0: command tx timeout [ 87.447376][ T5771] Bluetooth: hci3: command tx timeout [ 87.460333][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.478378][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.495090][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.502927][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.525707][ T5771] Bluetooth: hci2: command tx timeout [ 87.562417][ T5833] Zero length message leads to an empty skb [ 87.593160][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.617589][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.618116][ C1] hrtimer: interrupt took 80375 ns [ 89.446351][ T5771] Bluetooth: hci0: command tx timeout [ 89.451968][ T5771] Bluetooth: hci1: command tx timeout [ 89.526469][ T5771] Bluetooth: hci3: command tx timeout [ 89.606093][ T5771] Bluetooth: hci2: command tx timeout [ 90.678240][ T5845] netlink: 'syz.0.1': attribute type 21 has an invalid length. [ 90.799522][ T5848] netlink: 'syz.3.6': attribute type 3 has an invalid length. [ 90.845391][ T5848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6'. [ 91.427303][ T5855] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 91.509358][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.518576][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.639198][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.646619][ T5855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.655003][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.662470][ T5855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.714571][ T5855] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 91.753330][ T5856] warning: `syz.3.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.820950][ T5857] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 91.833384][ T5857] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 91.973948][ T5862] netlink: 'syz.2.9': attribute type 10 has an invalid length. [ 92.120793][ T5862] team0: Device wg1 is of different type [ 92.180888][ T8] cfg80211: failed to load regulatory.db [ 92.269319][ T5862] syz.2.9 (5862) used greatest stack depth: 20200 bytes left [ 92.340269][ T5867] netlink: 'syz.0.11': attribute type 21 has an invalid length. [ 92.379123][ T5867] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11'. [ 92.706844][ T5869] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 (while UP) [ 93.011476][ T5873] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 93.027771][ T5873] veth1_macvtap: left promiscuous mode [ 93.454583][ T5879] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15'. [ 93.534346][ T5883] FAULT_INJECTION: forcing a failure. [ 93.534346][ T5883] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.557208][ T5879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.596245][ T5883] CPU: 1 PID: 5883 Comm: syz.1.17 Not tainted syzkaller #0 [ 93.603545][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 93.613669][ T5883] Call Trace: [ 93.616990][ T5883] [ 93.619953][ T5883] dump_stack_lvl+0x18c/0x250 [ 93.624733][ T5883] ? show_regs_print_info+0x20/0x20 [ 93.629982][ T5883] ? load_image+0x420/0x420 [ 93.634523][ T5883] ? __might_fault+0xaa/0x120 [ 93.639231][ T5883] ? __lock_acquire+0x7d40/0x7d40 [ 93.644287][ T5883] ? __local_bh_enable_ip+0x13a/0x1c0 [ 93.649698][ T5883] ? _local_bh_enable+0xa0/0xa0 [ 93.654585][ T5883] should_fail_ex+0x39d/0x4d0 [ 93.659313][ T5883] copy_fpstate_to_sigframe+0xa05/0xc60 [ 93.664904][ T5883] ? kmem_cache_free+0xf8/0x270 [ 93.669797][ T5883] ? __dequeue_signal+0x52b/0x680 [ 93.674860][ T5883] ? dequeue_signal+0xe9/0x4b0 [ 93.679706][ T5883] ? copy_fpstate_to_sigframe+0x191/0xc60 [ 93.685473][ T5883] ? fpregs_set+0x370/0x370 [ 93.690034][ T5883] ? fpu__alloc_mathframe+0xa7/0x120 [ 93.695365][ T5883] get_sigframe+0x5e2/0x7d0 [ 93.699927][ T5883] ? load_gs_index+0x1a0/0x1a0 [ 93.704739][ T5883] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 93.710754][ T5883] ? get_signal+0x11f5/0x13f0 [ 93.715469][ T5883] x64_setup_rt_frame+0x15e/0xc40 [ 93.720548][ T5883] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.725781][ T5883] ? lockdep_hardirqs_on+0x98/0x150 [ 93.731011][ T5883] ? perf_trace_preemptirq_template+0xac/0x330 [ 93.737204][ T5883] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 93.743220][ T5883] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 93.748807][ T5883] ? arch_do_signal_or_restart+0x3b1/0x800 [ 93.754654][ T5883] arch_do_signal_or_restart+0x42c/0x800 [ 93.760343][ T5883] ? get_sigframe_size+0x20/0x20 [ 93.765333][ T5883] ? ksys_write+0x1fb/0x260 [ 93.769892][ T5883] ? exit_to_user_mode_loop+0x3b/0x110 [ 93.775410][ T5883] exit_to_user_mode_loop+0x70/0x110 [ 93.780736][ T5883] exit_to_user_mode_prepare+0xee/0x180 [ 93.786324][ T5883] syscall_exit_to_user_mode+0x1a/0x50 [ 93.791814][ T5883] do_syscall_64+0x61/0xa0 [ 93.796261][ T5883] ? clear_bhb_loop+0x40/0x90 [ 93.800968][ T5883] ? clear_bhb_loop+0x40/0x90 [ 93.805687][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.811624][ T5883] RIP: 0033:0x7f678315d60e [ 93.816083][ T5883] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.835893][ T5883] RSP: 002b:00007f6784044fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.844345][ T5883] RAX: 0000000000000001 RBX: 00007f67840456c0 RCX: 00007f678315d60e [ 93.852351][ T5883] RDX: 0000000000000001 RSI: 00007f6784045090 RDI: 0000000000000007 [ 93.860352][ T5883] RBP: 00007f6784045090 R08: 0000000000000000 R09: 0000000000000000 [ 93.868353][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.876348][ T5883] R13: 00007f6783416038 R14: 00007f6783415fa0 R15: 00007ffcde1d75d8 [ 93.884363][ T5883] [ 94.230929][ T5879] syz.0.15 (5879) used greatest stack depth: 19240 bytes left [ 94.336727][ T5896] Illegal XDP return value 4091779279 on prog (id 17) dev N/A, expect packet loss! [ 94.430606][ T5897] netlink: 6 bytes leftover after parsing attributes in process `syz.0.21'. [ 94.468294][ T5897] openvswitch: netlink: Flow actions attr not present in new flow. [ 95.424093][ T5912] netlink: 'syz.3.24': attribute type 21 has an invalid length. [ 95.934812][ T5908] netlink: 'syz.0.32': attribute type 10 has an invalid length. [ 96.300570][ T5908] team0: Device wg1 is of different type [ 96.615249][ T5908] syz.0.32 (5908) used greatest stack depth: 19016 bytes left [ 96.756512][ T5931] netlink: 'syz.0.28': attribute type 10 has an invalid length. [ 96.796713][ T5931] veth1_macvtap: left promiscuous mode [ 97.360547][ T5940] netlink: 'syz.2.30': attribute type 21 has an invalid length. [ 97.375779][ T5940] netlink: 156 bytes leftover after parsing attributes in process `syz.2.30'. [ 97.404605][ T5945] netlink: 128 bytes leftover after parsing attributes in process `syz.3.29'. [ 97.439535][ T5945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.769140][ T5955] netlink: 'syz.0.36': attribute type 3 has an invalid length. [ 97.794081][ T5955] netlink: 132 bytes leftover after parsing attributes in process `syz.0.36'. [ 97.871380][ T5956] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 97.894985][ T5956] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 98.188685][ T5966] netlink: 'syz.3.38': attribute type 10 has an invalid length. [ 98.257651][ T5967] netlink: 'syz.2.39': attribute type 21 has an invalid length. [ 98.301751][ T5969] netlink: 'syz.1.49': attribute type 3 has an invalid length. [ 98.325100][ T5969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.49'. [ 98.349954][ T5966] team0: Device wg1 is of different type [ 99.075832][ T5979] mac80211_hwsim hwsim4 ..ãc¤±: renamed from wlan1 (while UP) [ 99.611586][ T5988] netlink: 'syz.3.42': attribute type 21 has an invalid length. [ 99.622471][ T5988] netlink: 156 bytes leftover after parsing attributes in process `syz.3.42'. [ 99.683877][ T5989] netlink: 128 bytes leftover after parsing attributes in process `syz.2.43'. [ 99.720724][ T5990] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.53'. [ 99.776304][ T5990] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 99.883625][ T5989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.904410][ T5992] netlink: 'syz.0.53': attribute type 10 has an invalid length. [ 99.928063][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.936258][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.981760][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.989165][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.997064][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.004442][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.034128][ T5992] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 100.402420][ T5996] netlink: 'syz.1.56': attribute type 21 has an invalid length. [ 100.423943][ T5996] netlink: 156 bytes leftover after parsing attributes in process `syz.1.56'. [ 100.679989][ T6003] veth1_macvtap: left promiscuous mode [ 100.940640][ T6010] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 100.955623][ T6010] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 101.329188][ T6000] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.60'. [ 101.367285][ T6000] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 104.412591][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 104.816641][ T6038] netlink: 128 bytes leftover after parsing attributes in process `syz.2.61'. [ 104.858465][ T6038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.684079][ T6061] validate_nla: 1 callbacks suppressed [ 105.684134][ T6061] netlink: 'syz.1.65': attribute type 10 has an invalid length. [ 105.711655][ T6061] veth1_macvtap: left promiscuous mode [ 106.003938][ T6069] netlink: 132 bytes leftover after parsing attributes in process `syz.0.68'. [ 109.776167][ T6093] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.920500][ T6093] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.77'. [ 112.492075][ T6129] netlink: 'syz.0.86': attribute type 13 has an invalid length. [ 112.517206][ T6129] netlink: 160 bytes leftover after parsing attributes in process `syz.0.86'. [ 112.736180][ T6133] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.87'. [ 112.748363][ T6133] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 114.450185][ T6129] erspan0: refused to change device tx_queue_len [ 114.505858][ T6129] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 114.844782][ T6147] netlink: 'syz.0.92': attribute type 29 has an invalid length. [ 114.876705][ T6147] netlink: 'syz.0.92': attribute type 29 has an invalid length. [ 115.508844][ T6157] netlink: 'syz.1.96': attribute type 29 has an invalid length. [ 115.576019][ T6157] netlink: 'syz.1.96': attribute type 29 has an invalid length. [ 119.023086][ T6226] syzkaller0: entered promiscuous mode [ 119.310760][ T6251] sock: sock_timestamping_bind_phc: sock not bind to device [ 121.569703][ T6278] syz.1.117: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 121.627637][ T6278] CPU: 0 PID: 6278 Comm: syz.1.117 Not tainted syzkaller #0 [ 121.635091][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.645202][ T6278] Call Trace: [ 121.648538][ T6278] [ 121.651528][ T6278] dump_stack_lvl+0x18c/0x250 [ 121.656291][ T6278] ? show_regs_print_info+0x20/0x20 [ 121.661557][ T6278] ? load_image+0x420/0x420 [ 121.666121][ T6278] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 121.672580][ T6278] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 121.679139][ T6278] warn_alloc+0x246/0x340 [ 121.683512][ T6278] ? stack_trace_save+0xaa/0x100 [ 121.688490][ T6278] ? zone_watermark_ok_safe+0x230/0x230 [ 121.694119][ T6278] ? kasan_set_track+0x5f/0x70 [ 121.698941][ T6278] ? kasan_set_track+0x4e/0x70 [ 121.703743][ T6278] ? __kasan_kmalloc+0x8f/0xa0 [ 121.708544][ T6278] ? xsk_init_queue+0xad/0x100 [ 121.713348][ T6278] ? xsk_setsockopt+0x4e5/0x760 [ 121.718236][ T6278] ? do_sock_setsockopt+0x175/0x1a0 [ 121.723467][ T6278] ? __x64_sys_setsockopt+0x182/0x200 [ 121.728874][ T6278] __vmalloc_node_range+0x126/0x1330 [ 121.734222][ T6278] ? free_vm_area+0x50/0x50 [ 121.738779][ T6278] vmalloc_user+0x74/0x80 [ 121.743157][ T6278] ? xskq_create+0xbf/0x170 [ 121.747702][ T6278] xskq_create+0xbf/0x170 [ 121.752071][ T6278] xsk_init_queue+0xad/0x100 [ 121.756810][ T6278] xsk_setsockopt+0x4e5/0x760 [ 121.761530][ T6278] ? xsk_poll+0x680/0x680 [ 121.765927][ T6278] ? __fget_files+0x28/0x4b0 [ 121.770556][ T6278] ? __fget_files+0x28/0x4b0 [ 121.775185][ T6278] ? aa_sock_opt_perm+0x74/0x100 [ 121.780163][ T6278] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 121.785752][ T6278] ? security_socket_setsockopt+0x7e/0xa0 [ 121.791521][ T6278] ? xsk_poll+0x680/0x680 [ 121.795897][ T6278] do_sock_setsockopt+0x175/0x1a0 [ 121.800956][ T6278] ? __fdget+0x180/0x210 [ 121.805245][ T6278] __x64_sys_setsockopt+0x182/0x200 [ 121.810482][ T6278] do_syscall_64+0x55/0xa0 [ 121.814931][ T6278] ? clear_bhb_loop+0x40/0x90 [ 121.819659][ T6278] ? clear_bhb_loop+0x40/0x90 [ 121.824402][ T6278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.830329][ T6278] RIP: 0033:0x7f678319cdd9 [ 121.834776][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.854423][ T6278] RSP: 002b:00007f6784024028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.862872][ T6278] RAX: ffffffffffffffda RBX: 00007f6783416090 RCX: 00007f678319cdd9 [ 121.870880][ T6278] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 121.878883][ T6278] RBP: 00007f6783232d69 R08: 0000000000000004 R09: 0000000000000000 [ 121.886886][ T6278] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 121.894889][ T6278] R13: 00007f6783416128 R14: 00007f6783416090 R15: 00007ffcde1d75d8 [ 121.902941][ T6278] [ 121.954696][ T6278] Mem-Info: [ 121.965821][ T6278] active_anon:8825 inactive_anon:0 isolated_anon:0 [ 121.965821][ T6278] active_file:1170 inactive_file:39943 isolated_file:0 [ 121.965821][ T6278] unevictable:768 dirty:36 writeback:0 [ 121.965821][ T6278] slab_reclaimable:9769 slab_unreclaimable:92084 [ 121.965821][ T6278] mapped:24140 shmem:1361 pagetables:564 [ 121.965821][ T6278] sec_pagetables:0 bounce:0 [ 121.965821][ T6278] kernel_misc_reclaimable:0 [ 121.965821][ T6278] free:1357795 free_pcp:12456 free_cma:0 [ 122.045396][ T6278] Node 0 active_anon:35400kB inactive_anon:0kB active_file:4680kB inactive_file:159568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96560kB dirty:140kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11308kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no [ 122.106623][ T6278] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 122.189197][ T6278] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.279641][ T6278] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 122.312761][ T6278] Node 0 DMA32 free:1521140kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35116kB inactive_anon:0kB active_file:4680kB inactive_file:158740kB unevictable:1536kB writepending:148kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:30076kB local_pcp:16740kB free_cma:0kB [ 122.350801][ T6278] lowmem_reserve[]: 0 0 0 0 0 [ 122.358521][ T6221] tipc: Subscription rejected, illegal request [ 122.362044][ T6278] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.384487][ T6286] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.119'. [ 122.403524][ T6278] lowmem_reserve[]: 0 0 0 0 0 [ 122.410942][ T6278] Node 1 Normal free:3894992kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20096kB local_pcp:8512kB free_cma:0kB [ 122.441466][ T6278] lowmem_reserve[]: 0 0 0 0 0 [ 122.447831][ T6278] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.463521][ T6290] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.120'. [ 122.489809][ T6278] Node 0 DMA32: 2*4kB (UM) 654*8kB (UM) 430*16kB (UME) 13*32kB (ME) 13*64kB (UME) 6*128kB (UME) 0*256kB 3*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 366*4096kB (M) = 1520952kB [ 122.536332][ T6278] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 122.594720][ T6278] Node 1 Normal: 228*4kB (UME) 58*8kB (UME) 51*16kB (UME) 60*32kB (UME) 19*64kB (UME) 6*128kB (UE) 1*256kB (E) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3894992kB [ 122.631371][ T6278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.656057][ T6278] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.665445][ T6278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.681929][ T6278] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.691766][ T6278] 42474 total pagecache pages [ 122.703783][ T6278] 0 pages in swap cache [ 122.708480][ T6278] Free swap = 124996kB [ 122.712799][ T6278] Total swap = 124996kB [ 122.726398][ T6278] 2097051 pages RAM [ 122.730297][ T6278] 0 pages HighMem/MovableOnly [ 122.757267][ T6278] 416927 pages reserved [ 122.782390][ T6278] 0 pages cma reserved [ 122.844591][ T6292] netlink: 'syz.3.121': attribute type 46 has an invalid length. [ 123.321572][ T6308] netlink: 'syz.2.126': attribute type 8 has an invalid length. [ 123.343880][ T6308] netlink: 'syz.2.126': attribute type 1 has an invalid length. [ 123.366107][ T6308] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.126'. [ 123.446199][ T6307] netlink: 'syz.2.126': attribute type 4 has an invalid length. [ 123.463314][ T6307] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.126'. [ 123.518500][ T6308] bridge0: port 3(syz_tun) entered blocking state [ 123.542916][ T6308] bridge0: port 3(syz_tun) entered disabled state [ 123.563169][ T6308] syz_tun: entered allmulticast mode [ 123.703180][ T6308] syz_tun: entered promiscuous mode [ 123.798808][ T6308] bridge0: port 3(syz_tun) entered blocking state [ 123.808582][ T6308] bridge0: port 3(syz_tun) entered forwarding state [ 125.925794][ T6317] netlink: 'syz.3.128': attribute type 10 has an invalid length. [ 125.989690][ T6317] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 126.173552][ T6320] bridge0: port 3(batadv0) entered blocking state [ 126.200416][ T6320] bridge0: port 3(batadv0) entered disabled state [ 126.207513][ T6320] batadv0: entered allmulticast mode [ 126.214501][ T6320] batadv0: entered promiscuous mode [ 126.259222][ T6320] bridge0: port 3(batadv0) entered blocking state [ 126.265989][ T6320] bridge0: port 3(batadv0) entered forwarding state [ 126.302755][ T6325] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.502782][ T6333] netlink: 'syz.1.134': attribute type 3 has an invalid length. [ 126.513793][ T6333] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.134'. [ 126.635475][ T6217] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 126.645392][ T6217] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 127.646295][ T6356] netlink: 'syz.0.140': attribute type 3 has an invalid length. [ 127.654504][ T6356] netlink: 132 bytes leftover after parsing attributes in process `syz.0.140'. [ 128.525948][ T6350] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.139'. [ 128.540785][ T6350] bridge_slave_1: default FDB implementation only supports local addresses [ 128.550360][ T6351] netlink: 'syz.1.139': attribute type 10 has an invalid length. [ 128.563839][ T6351] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 128.796401][ T6367] ip6gretap0: refused to change device tx_queue_len [ 129.361159][ T6388] netlink: 'syz.0.150': attribute type 21 has an invalid length. [ 129.847658][ T6397] netlink: 'syz.0.152': attribute type 21 has an invalid length. [ 129.856940][ T6397] netlink: 128 bytes leftover after parsing attributes in process `syz.0.152'. [ 129.896603][ T6397] netlink: 'syz.0.152': attribute type 5 has an invalid length. [ 129.905401][ T6397] netlink: 3 bytes leftover after parsing attributes in process `syz.0.152'. [ 130.459176][ T6398] netlink: 'syz.0.152': attribute type 13 has an invalid length. [ 130.485790][ T6398] netlink: 'syz.0.152': attribute type 58 has an invalid length. [ 130.493704][ T6398] netlink: 152 bytes leftover after parsing attributes in process `syz.0.152'. [ 130.961172][ T6406] netlink: 'syz.3.154': attribute type 3 has an invalid length. [ 131.031346][ T6406] netlink: 'syz.3.154': attribute type 8 has an invalid length. [ 131.064885][ T6406] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.154'. [ 131.136458][ T6417] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.157'. [ 131.162490][ T6417] netlink: zone id is out of range [ 131.173679][ T6413] netlink: 'syz.2.157': attribute type 11 has an invalid length. [ 131.196862][ T6417] netlink: zone id is out of range [ 131.202516][ T6417] netlink: zone id is out of range [ 131.225818][ T6413] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.157'. [ 131.244042][ T6417] netlink: zone id is out of range [ 131.267145][ T6417] netlink: zone id is out of range [ 131.272541][ T6417] netlink: zone id is out of range [ 131.305868][ T6417] netlink: zone id is out of range [ 131.311547][ T6417] netlink: zone id is out of range [ 131.326276][ T6417] netlink: zone id is out of range [ 131.331812][ T6417] netlink: zone id is out of range [ 133.132271][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.139501][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.518003][ T6435] netlink: 'syz.2.165': attribute type 10 has an invalid length. [ 134.531125][ T6435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.165'. [ 134.545054][ T6435] team0: entered promiscuous mode [ 134.571688][ T6435] team_slave_0: entered promiscuous mode [ 134.580847][ T6435] team_slave_1: entered promiscuous mode [ 134.605066][ T6435] team0: entered allmulticast mode [ 134.638403][ T6435] team_slave_0: entered allmulticast mode [ 134.648860][ T6435] team_slave_1: entered allmulticast mode [ 134.674584][ T6435] bridge0: port 4(team0) entered blocking state [ 134.688190][ T6435] bridge0: port 4(team0) entered disabled state [ 134.708459][ T6435] bridge0: port 4(team0) entered blocking state [ 134.714973][ T6435] bridge0: port 4(team0) entered forwarding state [ 134.845263][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.343269][ T6456] netlink: 'syz.2.171': attribute type 1 has an invalid length. [ 135.356860][ T6456] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.171'. [ 135.913584][ T6472] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 135.937009][ T6472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.174'. [ 136.013909][ T6472] batman_adv: batadv0: Adding interface: ipvlan1 [ 136.047035][ T6472] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.081037][ T6472] batman_adv: batadv0: Interface activated: ipvlan1 [ 136.303039][ T6479] netlink: 'syz.1.175': attribute type 10 has an invalid length. [ 136.521346][ T6479] team0: Port device geneve1 added [ 136.699403][ T6488] tap0: tun_chr_ioctl cmd 1074025680 [ 137.524217][ T6505] syzkaller0: entered promiscuous mode [ 137.580873][ T6505] syzkaller0: entered allmulticast mode [ 137.702149][ T6512] bridge0: port 3(ip6gretap0) entered blocking state [ 137.722305][ T6512] bridge0: port 3(ip6gretap0) entered disabled state [ 137.733866][ T6516] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.188'. [ 137.765287][ T6512] ip6gretap0: entered allmulticast mode [ 137.881775][ T6512] ip6gretap0: entered promiscuous mode [ 137.946439][ T6512] bridge0: port 3(ip6gretap0) entered blocking state [ 137.965644][ T6512] bridge0: port 3(ip6gretap0) entered forwarding state [ 138.089042][ T6510] netlink: 'syz.3.187': attribute type 3 has an invalid length. [ 138.097398][ T6510] netlink: 152 bytes leftover after parsing attributes in process `syz.3.187'. [ 138.108219][ T6513] netlink: 'syz.0.189': attribute type 33 has an invalid length. [ 138.117076][ T6513] netlink: 152 bytes leftover after parsing attributes in process `syz.0.189'. [ 140.931573][ T6543] syz.3.194 (6543) used obsolete PPPIOCDETACH ioctl [ 141.125382][ T6557] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.197'. [ 141.167972][ T6558] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.197'. [ 141.353913][ T6563] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.199'. [ 141.776559][ T6568] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.202'. [ 141.811382][ T6568] bridge_slave_1: default FDB implementation only supports local addresses [ 142.214339][ T6577] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.204'. [ 142.319660][ T6583] netlink: 'syz.3.206': attribute type 21 has an invalid length. [ 142.653869][ T6592] netlink: 'syz.0.211': attribute type 4 has an invalid length. [ 142.690175][ T6592] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.211'. [ 143.826076][ T6624] netlink: 'syz.2.219': attribute type 5 has an invalid length. [ 144.100722][ T6632] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.221'. [ 144.129349][ T6632] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.167647][ T6630] netlink: 148 bytes leftover after parsing attributes in process `syz.2.221'. [ 146.715678][ T6655] C: renamed from team_slave_0 (while UP) [ 146.738509][ T6655] netlink: 'syz.1.224': attribute type 3 has an invalid length. [ 146.786507][ T6655] netlink: 144 bytes leftover after parsing attributes in process `syz.1.224'. [ 148.338290][ T6717] netlink: 'syz.2.230': attribute type 5 has an invalid length. [ 148.681505][ T6728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.689353][ T6728] IPv6: NLM_F_CREATE should be set when creating new route [ 148.696862][ T6728] IPv6: NLM_F_CREATE should be set when creating new route [ 148.704182][ T6728] IPv6: NLM_F_CREATE should be set when creating new route [ 149.652365][ T6745] netlink: 'syz.3.240': attribute type 21 has an invalid length. [ 150.277236][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 150.837614][ T6780] netlink: 'syz.1.251': attribute type 17 has an invalid length. [ 150.858734][ T6780] netlink: 'syz.1.251': attribute type 16 has an invalid length. [ 150.880414][ T6780] netlink: 152 bytes leftover after parsing attributes in process `syz.1.251'. [ 151.102193][ T6785] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.252'. [ 151.140732][ T6787] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.253'. [ 151.192141][ T6788] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.253'. [ 151.718419][ T6807] FAULT_INJECTION: forcing a failure. [ 151.718419][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.731800][ T6807] CPU: 0 PID: 6807 Comm: syz.1.259 Not tainted syzkaller #0 [ 151.739146][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.749394][ T6807] Call Trace: [ 151.752718][ T6807] [ 151.755696][ T6807] dump_stack_lvl+0x18c/0x250 [ 151.760446][ T6807] ? show_regs_print_info+0x20/0x20 [ 151.765706][ T6807] ? load_image+0x420/0x420 [ 151.770280][ T6807] ? __might_fault+0xaa/0x120 [ 151.775013][ T6807] ? __lock_acquire+0x7d40/0x7d40 [ 151.780112][ T6807] should_fail_ex+0x39d/0x4d0 [ 151.784862][ T6807] _copy_from_user+0x2f/0xe0 [ 151.789523][ T6807] __sys_bpf+0x23e/0x890 [ 151.793829][ T6807] ? bpf_link_show_fdinfo+0x390/0x390 [ 151.799311][ T6807] ? lock_chain_count+0x20/0x20 [ 151.804226][ T6807] __x64_sys_bpf+0x7c/0x90 [ 151.808791][ T6807] do_syscall_64+0x55/0xa0 [ 151.813258][ T6807] ? clear_bhb_loop+0x40/0x90 [ 151.818008][ T6807] ? clear_bhb_loop+0x40/0x90 [ 151.822748][ T6807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.828699][ T6807] RIP: 0033:0x7f678319cdd9 [ 151.833165][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.852831][ T6807] RSP: 002b:00007f6784045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.861302][ T6807] RAX: ffffffffffffffda RBX: 00007f6783415fa0 RCX: 00007f678319cdd9 [ 151.869328][ T6807] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 151.877356][ T6807] RBP: 00007f6784045090 R08: 0000000000000000 R09: 0000000000000000 [ 151.885466][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.893494][ T6807] R13: 00007f6783416038 R14: 00007f6783415fa0 R15: 00007ffcde1d75d8 [ 151.901552][ T6807] [ 152.162435][ T6811] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.262'. [ 152.274035][ T6818] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.263'. [ 152.842949][ T6841] FAULT_INJECTION: forcing a failure. [ 152.842949][ T6841] name failslab, interval 1, probability 0, space 0, times 1 [ 152.856183][ T6841] CPU: 0 PID: 6841 Comm: syz.2.271 Not tainted syzkaller #0 [ 152.863536][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.873642][ T6841] Call Trace: [ 152.876966][ T6841] [ 152.879923][ T6841] dump_stack_lvl+0x18c/0x250 [ 152.884636][ T6841] ? show_regs_print_info+0x20/0x20 [ 152.889860][ T6841] ? load_image+0x420/0x420 [ 152.894390][ T6841] ? __might_sleep+0xe0/0xe0 [ 152.899007][ T6841] ? __lock_acquire+0x7d40/0x7d40 [ 152.904067][ T6841] should_fail_ex+0x39d/0x4d0 [ 152.908812][ T6841] should_failslab+0x9/0x20 [ 152.913386][ T6841] slab_pre_alloc_hook+0x59/0x310 [ 152.918464][ T6841] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 152.924030][ T6841] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 152.929598][ T6841] __kmem_cache_alloc_node+0x53/0x250 [ 152.935012][ T6841] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 152.940623][ T6841] __kmalloc+0xa4/0x230 [ 152.944819][ T6841] bpf_prog_test_run_skb+0x238/0x12b0 [ 152.950262][ T6841] ? __fget_files+0x28/0x4b0 [ 152.954883][ T6841] ? __fget_files+0x28/0x4b0 [ 152.959517][ T6841] ? __fget_files+0x43d/0x4b0 [ 152.964260][ T6841] ? cpu_online+0x60/0x60 [ 152.968627][ T6841] bpf_prog_test_run+0x321/0x390 [ 152.973603][ T6841] __sys_bpf+0x49d/0x890 [ 152.977888][ T6841] ? bpf_link_show_fdinfo+0x390/0x390 [ 152.983305][ T6841] ? lock_chain_count+0x20/0x20 [ 152.988194][ T6841] __x64_sys_bpf+0x7c/0x90 [ 152.992647][ T6841] do_syscall_64+0x55/0xa0 [ 152.997092][ T6841] ? clear_bhb_loop+0x40/0x90 [ 153.001808][ T6841] ? clear_bhb_loop+0x40/0x90 [ 153.006529][ T6841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.012474][ T6841] RIP: 0033:0x7ff8f819cdd9 [ 153.016924][ T6841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.036565][ T6841] RSP: 002b:00007ff8f8f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.045013][ T6841] RAX: ffffffffffffffda RBX: 00007ff8f8415fa0 RCX: 00007ff8f819cdd9 [ 153.053013][ T6841] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 153.061011][ T6841] RBP: 00007ff8f8f84090 R08: 0000000000000000 R09: 0000000000000000 [ 153.069009][ T6841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.077009][ T6841] R13: 00007ff8f8416038 R14: 00007ff8f8415fa0 R15: 00007ffe74e457f8 [ 153.085036][ T6841] [ 155.632708][ T6884] FAULT_INJECTION: forcing a failure. [ 155.632708][ T6884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.658511][ T6881] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 155.668300][ T6884] CPU: 1 PID: 6884 Comm: syz.1.283 Not tainted syzkaller #0 [ 155.675648][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.685757][ T6884] Call Trace: [ 155.689086][ T6884] [ 155.692060][ T6884] dump_stack_lvl+0x18c/0x250 [ 155.696802][ T6884] ? show_regs_print_info+0x20/0x20 [ 155.702058][ T6884] ? load_image+0x420/0x420 [ 155.706635][ T6884] ? __might_fault+0xaa/0x120 [ 155.711361][ T6884] ? __lock_acquire+0x7d40/0x7d40 [ 155.716436][ T6884] should_fail_ex+0x39d/0x4d0 [ 155.721167][ T6884] _copy_from_user+0x2f/0xe0 [ 155.725812][ T6884] bpf_prog_test_run_skb+0x266/0x12b0 [ 155.731218][ T6884] ? __fget_files+0x28/0x4b0 [ 155.735847][ T6884] ? __fget_files+0x28/0x4b0 [ 155.740476][ T6884] ? __fget_files+0x43d/0x4b0 [ 155.745196][ T6884] ? cpu_online+0x60/0x60 [ 155.749563][ T6884] bpf_prog_test_run+0x321/0x390 [ 155.754551][ T6884] __sys_bpf+0x49d/0x890 [ 155.758838][ T6884] ? bpf_link_show_fdinfo+0x390/0x390 [ 155.764253][ T6884] ? lock_chain_count+0x20/0x20 [ 155.769154][ T6884] __x64_sys_bpf+0x7c/0x90 [ 155.773694][ T6884] do_syscall_64+0x55/0xa0 [ 155.778141][ T6884] ? clear_bhb_loop+0x40/0x90 [ 155.782850][ T6884] ? clear_bhb_loop+0x40/0x90 [ 155.787568][ T6884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.793504][ T6884] RIP: 0033:0x7f678319cdd9 [ 155.797954][ T6884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.817600][ T6884] RSP: 002b:00007f6784045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.826057][ T6884] RAX: ffffffffffffffda RBX: 00007f6783415fa0 RCX: 00007f678319cdd9 [ 155.834057][ T6884] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 155.842060][ T6884] RBP: 00007f6784045090 R08: 0000000000000000 R09: 0000000000000000 [ 155.850064][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.858111][ T6884] R13: 00007f6783416038 R14: 00007f6783415fa0 R15: 00007ffcde1d75d8 [ 155.866132][ T6884] [ 155.905330][ T6881] netlink: 'syz.2.282': attribute type 3 has an invalid length. [ 155.922801][ T6881] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.282'. [ 156.589255][ T6911] netlink: 'syz.1.289': attribute type 13 has an invalid length. [ 156.630173][ T6911] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.289'. [ 156.956655][ T6922] FAULT_INJECTION: forcing a failure. [ 156.956655][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 157.031677][ T6922] CPU: 1 PID: 6922 Comm: syz.2.293 Not tainted syzkaller #0 [ 157.039069][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.049188][ T6922] Call Trace: [ 157.052513][ T6922] [ 157.055485][ T6922] dump_stack_lvl+0x18c/0x250 [ 157.060223][ T6922] ? show_regs_print_info+0x20/0x20 [ 157.065488][ T6922] ? load_image+0x420/0x420 [ 157.070047][ T6922] ? __might_sleep+0xe0/0xe0 [ 157.074693][ T6922] ? __lock_acquire+0x7d40/0x7d40 [ 157.079785][ T6922] should_fail_ex+0x39d/0x4d0 [ 157.084534][ T6922] should_failslab+0x9/0x20 [ 157.089113][ T6922] slab_pre_alloc_hook+0x59/0x310 [ 157.094201][ T6922] ? sk_prot_alloc+0xe7/0x210 [ 157.098928][ T6922] ? sk_prot_alloc+0xe7/0x210 [ 157.103665][ T6922] __kmem_cache_alloc_node+0x53/0x250 [ 157.109107][ T6922] ? sk_prot_alloc+0xe7/0x210 [ 157.113949][ T6922] __kmalloc+0xa4/0x230 [ 157.118170][ T6922] sk_prot_alloc+0xe7/0x210 [ 157.122724][ T6922] ? sk_alloc+0x24/0x360 [ 157.127019][ T6922] sk_alloc+0x3a/0x360 [ 157.131156][ T6922] ? bpf_ctx_init+0x163/0x1a0 [ 157.135878][ T6922] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 157.141474][ T6922] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 157.146893][ T6922] ? __fget_files+0x28/0x4b0 [ 157.151538][ T6922] ? __fget_files+0x28/0x4b0 [ 157.156181][ T6922] ? __fget_files+0x43d/0x4b0 [ 157.160914][ T6922] ? cpu_online+0x60/0x60 [ 157.165331][ T6922] bpf_prog_test_run+0x321/0x390 [ 157.170324][ T6922] __sys_bpf+0x49d/0x890 [ 157.174621][ T6922] ? bpf_link_show_fdinfo+0x390/0x390 [ 157.180054][ T6922] ? lock_chain_count+0x20/0x20 [ 157.184966][ T6922] __x64_sys_bpf+0x7c/0x90 [ 157.189436][ T6922] do_syscall_64+0x55/0xa0 [ 157.193902][ T6922] ? clear_bhb_loop+0x40/0x90 [ 157.198629][ T6922] ? clear_bhb_loop+0x40/0x90 [ 157.203360][ T6922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.209314][ T6922] RIP: 0033:0x7ff8f819cdd9 [ 157.213776][ T6922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.233439][ T6922] RSP: 002b:00007ff8f8f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.241919][ T6922] RAX: ffffffffffffffda RBX: 00007ff8f8415fa0 RCX: 00007ff8f819cdd9 [ 157.249952][ T6922] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 157.257977][ T6922] RBP: 00007ff8f8f84090 R08: 0000000000000000 R09: 0000000000000000 [ 157.266018][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.274036][ T6922] R13: 00007ff8f8416038 R14: 00007ff8f8415fa0 R15: 00007ffe74e457f8 [ 157.282080][ T6922] [ 158.598355][ T6956] FAULT_INJECTION: forcing a failure. [ 158.598355][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 158.619491][ T6956] CPU: 0 PID: 6956 Comm: syz.1.302 Not tainted syzkaller #0 [ 158.626975][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.637088][ T6956] Call Trace: [ 158.640421][ T6956] [ 158.643404][ T6956] dump_stack_lvl+0x18c/0x250 [ 158.648217][ T6956] ? show_regs_print_info+0x20/0x20 [ 158.653492][ T6956] ? load_image+0x420/0x420 [ 158.658085][ T6956] ? __might_sleep+0xe0/0xe0 [ 158.662754][ T6956] ? __lock_acquire+0x7d40/0x7d40 [ 158.667839][ T6956] should_fail_ex+0x39d/0x4d0 [ 158.672594][ T6956] should_failslab+0x9/0x20 [ 158.677184][ T6956] slab_pre_alloc_hook+0x59/0x310 [ 158.682293][ T6956] ? apparmor_sk_alloc_security+0x77/0x100 [ 158.688159][ T6956] __kmem_cache_alloc_node+0x53/0x250 [ 158.693612][ T6956] ? apparmor_sk_alloc_security+0x77/0x100 [ 158.699477][ T6956] kmalloc_trace+0x2a/0xe0 [ 158.703957][ T6956] apparmor_sk_alloc_security+0x77/0x100 [ 158.709653][ T6956] security_sk_alloc+0x6e/0xa0 [ 158.714473][ T6956] sk_prot_alloc+0x101/0x210 [ 158.719159][ T6956] ? sk_alloc+0x24/0x360 [ 158.723444][ T6956] sk_alloc+0x3a/0x360 [ 158.727543][ T6956] ? bpf_ctx_init+0x163/0x1a0 [ 158.732312][ T6956] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 158.737889][ T6956] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 158.743287][ T6956] ? __fget_files+0x28/0x4b0 [ 158.747912][ T6956] ? __fget_files+0x28/0x4b0 [ 158.752549][ T6956] ? __fget_files+0x43d/0x4b0 [ 158.757271][ T6956] ? cpu_online+0x60/0x60 [ 158.761657][ T6956] bpf_prog_test_run+0x321/0x390 [ 158.766632][ T6956] __sys_bpf+0x49d/0x890 [ 158.770903][ T6956] ? bpf_link_show_fdinfo+0x390/0x390 [ 158.776320][ T6956] ? lock_chain_count+0x20/0x20 [ 158.781213][ T6956] __x64_sys_bpf+0x7c/0x90 [ 158.785662][ T6956] do_syscall_64+0x55/0xa0 [ 158.790105][ T6956] ? clear_bhb_loop+0x40/0x90 [ 158.794819][ T6956] ? clear_bhb_loop+0x40/0x90 [ 158.799536][ T6956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.805469][ T6956] RIP: 0033:0x7f678319cdd9 [ 158.809913][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.829643][ T6956] RSP: 002b:00007f6784045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.838092][ T6956] RAX: ffffffffffffffda RBX: 00007f6783415fa0 RCX: 00007f678319cdd9 [ 158.846143][ T6956] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 158.854154][ T6956] RBP: 00007f6784045090 R08: 0000000000000000 R09: 0000000000000000 [ 158.862153][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.870156][ T6956] R13: 00007f6783416038 R14: 00007f6783415fa0 R15: 00007ffcde1d75d8 [ 158.878175][ T6956] [ 158.926452][ T6959] net_ratelimit: 332 callbacks suppressed [ 158.926468][ T6959] netlink: set zone limit has 8 unknown bytes [ 159.151058][ T6966] netlink: 'syz.2.307': attribute type 10 has an invalid length. [ 159.219859][ T6966] veth0_vlan: left promiscuous mode [ 159.275960][ T6966] veth0_vlan: entered promiscuous mode [ 159.298027][ T6966] team0: Device veth0_vlan failed to register rx_handler [ 159.738060][ T6975] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.310'. [ 159.766251][ T6975] netlink: 60 bytes leftover after parsing attributes in process `syz.0.310'. [ 159.801575][ T6975] netlink: 60 bytes leftover after parsing attributes in process `syz.0.310'. [ 159.834740][ T6976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.310'. [ 160.961496][ T6986] FAULT_INJECTION: forcing a failure. [ 160.961496][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 160.978874][ T6986] CPU: 0 PID: 6986 Comm: syz.2.314 Not tainted syzkaller #0 [ 160.986249][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.996350][ T6986] Call Trace: [ 160.999674][ T6986] [ 161.002645][ T6986] dump_stack_lvl+0x18c/0x250 [ 161.007390][ T6986] ? show_regs_print_info+0x20/0x20 [ 161.012640][ T6986] ? load_image+0x420/0x420 [ 161.017188][ T6986] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 161.023217][ T6986] ? __asan_memset+0x22/0x40 [ 161.027864][ T6986] should_fail_ex+0x39d/0x4d0 [ 161.032605][ T6986] should_failslab+0x9/0x20 [ 161.037162][ T6986] slab_pre_alloc_hook+0x59/0x310 [ 161.042240][ T6986] ? __debug_object_init+0xec/0x450 [ 161.047505][ T6986] kmem_cache_alloc+0x5a/0x2d0 [ 161.052334][ T6986] ? slab_build_skb+0x2b/0x3f0 [ 161.057139][ T6986] slab_build_skb+0x2b/0x3f0 [ 161.061767][ T6986] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 161.067176][ T6986] ? __fget_files+0x28/0x4b0 [ 161.071802][ T6986] ? __fget_files+0x28/0x4b0 [ 161.076432][ T6986] ? __fget_files+0x43d/0x4b0 [ 161.081158][ T6986] ? cpu_online+0x60/0x60 [ 161.085525][ T6986] bpf_prog_test_run+0x321/0x390 [ 161.090510][ T6986] __sys_bpf+0x49d/0x890 [ 161.094787][ T6986] ? bpf_link_show_fdinfo+0x390/0x390 [ 161.100205][ T6986] ? lock_chain_count+0x20/0x20 [ 161.105097][ T6986] __x64_sys_bpf+0x7c/0x90 [ 161.109548][ T6986] do_syscall_64+0x55/0xa0 [ 161.113989][ T6986] ? clear_bhb_loop+0x40/0x90 [ 161.118706][ T6986] ? clear_bhb_loop+0x40/0x90 [ 161.123413][ T6986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.129333][ T6986] RIP: 0033:0x7ff8f819cdd9 [ 161.133791][ T6986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.153454][ T6986] RSP: 002b:00007ff8f8f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.161899][ T6986] RAX: ffffffffffffffda RBX: 00007ff8f8415fa0 RCX: 00007ff8f819cdd9 [ 161.169916][ T6986] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 161.177961][ T6986] RBP: 00007ff8f8f84090 R08: 0000000000000000 R09: 0000000000000000 [ 161.185982][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.193998][ T6986] R13: 00007ff8f8416038 R14: 00007ff8f8415fa0 R15: 00007ffe74e457f8 [ 161.202026][ T6986] [ 161.289969][ T6988] netlink: 'syz.0.315': attribute type 4 has an invalid length. [ 161.338223][ T6988] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.315'. [ 161.661476][ T6997] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.319'. [ 162.387123][ T7020] FAULT_INJECTION: forcing a failure. [ 162.387123][ T7020] name failslab, interval 1, probability 0, space 0, times 0 [ 162.399866][ T7020] CPU: 1 PID: 7020 Comm: syz.2.326 Not tainted syzkaller #0 [ 162.407290][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.417399][ T7020] Call Trace: [ 162.420762][ T7020] [ 162.423737][ T7020] dump_stack_lvl+0x18c/0x250 [ 162.428479][ T7020] ? show_regs_print_info+0x20/0x20 [ 162.433755][ T7020] ? load_image+0x420/0x420 [ 162.438337][ T7020] should_fail_ex+0x39d/0x4d0 [ 162.443076][ T7020] should_failslab+0x9/0x20 [ 162.447622][ T7020] slab_pre_alloc_hook+0x59/0x310 [ 162.452697][ T7020] ? verify_lock_unused+0x140/0x140 [ 162.458060][ T7020] kmem_cache_alloc+0x5a/0x2d0 [ 162.462888][ T7020] ? skb_clone+0x1eb/0x370 [ 162.467348][ T7020] skb_clone+0x1eb/0x370 [ 162.471628][ T7020] bpf_clone_redirect+0x167/0x4a0 [ 162.476727][ T7020] bpf_prog_208b094576c80b22+0x5e/0x63 [ 162.482224][ T7020] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 162.488239][ T7020] ? lock_chain_count+0x20/0x20 [ 162.493124][ T7020] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 162.499402][ T7020] ? lockdep_softirqs_on+0x580/0x580 [ 162.504721][ T7020] ? ktime_get+0x7f/0x280 [ 162.509084][ T7020] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 162.515360][ T7020] ? ktime_get_real_ts64+0x440/0x440 [ 162.520699][ T7020] ? __x64_sys_bpf+0x7c/0x90 [ 162.525332][ T7020] ? __local_bh_disable_ip+0x108/0x1a0 [ 162.530825][ T7020] ? __cant_sleep+0x220/0x220 [ 162.535552][ T7020] ? read_tsc+0x9/0x20 [ 162.539660][ T7020] ? ktime_get+0x24b/0x280 [ 162.544148][ T7020] ? bpf_test_run+0x174/0x870 [ 162.548873][ T7020] bpf_test_run+0x2df/0x870 [ 162.553422][ T7020] ? bpf_test_run+0x174/0x870 [ 162.558132][ T7020] ? convert___skb_to_skb+0x590/0x590 [ 162.563540][ T7020] ? eth_get_headlen+0x210/0x210 [ 162.568549][ T7020] ? slab_build_skb+0x25f/0x3f0 [ 162.573426][ T7020] ? convert___skb_to_skb+0x3d/0x590 [ 162.578749][ T7020] bpf_prog_test_run_skb+0xad2/0x12b0 [ 162.584175][ T7020] ? cpu_online+0x60/0x60 [ 162.588534][ T7020] bpf_prog_test_run+0x321/0x390 [ 162.593508][ T7020] __sys_bpf+0x49d/0x890 [ 162.597784][ T7020] ? bpf_link_show_fdinfo+0x390/0x390 [ 162.603208][ T7020] ? lock_chain_count+0x20/0x20 [ 162.608101][ T7020] __x64_sys_bpf+0x7c/0x90 [ 162.612560][ T7020] do_syscall_64+0x55/0xa0 [ 162.617006][ T7020] ? clear_bhb_loop+0x40/0x90 [ 162.621723][ T7020] ? clear_bhb_loop+0x40/0x90 [ 162.626442][ T7020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.632381][ T7020] RIP: 0033:0x7ff8f819cdd9 [ 162.636825][ T7020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.656471][ T7020] RSP: 002b:00007ff8f8f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.664922][ T7020] RAX: ffffffffffffffda RBX: 00007ff8f8415fa0 RCX: 00007ff8f819cdd9 [ 162.672925][ T7020] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 162.680933][ T7020] RBP: 00007ff8f8f84090 R08: 0000000000000000 R09: 0000000000000000 [ 162.688934][ T7020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.696940][ T7020] R13: 00007ff8f8416038 R14: 00007ff8f8415fa0 R15: 00007ffe74e457f8 [ 162.704957][ T7020] [ 162.771745][ T7022] netlink: 'syz.1.327': attribute type 21 has an invalid length. [ 162.789558][ T7022] netlink: 'syz.1.327': attribute type 1 has an invalid length. [ 162.813121][ T7022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.327'. [ 163.658356][ T7052] netlink: 'syz.0.336': attribute type 3 has an invalid length. [ 163.681518][ T7052] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.336'. [ 163.842755][ T7058] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.337'. [ 163.966298][ T7058] netlink: 'syz.3.337': attribute type 10 has an invalid length. [ 163.991858][ T7058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.337'. [ 164.029393][ T7058] team0: entered promiscuous mode [ 164.055019][ T7058] team_slave_0: entered promiscuous mode [ 164.065147][ T7063] FAULT_INJECTION: forcing a failure. [ 164.065147][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 164.077909][ T7063] CPU: 0 PID: 7063 Comm: syz.1.338 Not tainted syzkaller #0 [ 164.085250][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.095356][ T7063] Call Trace: [ 164.098684][ T7063] [ 164.101662][ T7063] dump_stack_lvl+0x18c/0x250 [ 164.106416][ T7063] ? show_regs_print_info+0x20/0x20 [ 164.111675][ T7063] ? load_image+0x420/0x420 [ 164.116251][ T7063] should_fail_ex+0x39d/0x4d0 [ 164.121001][ T7063] should_failslab+0x9/0x20 [ 164.125568][ T7063] slab_pre_alloc_hook+0x59/0x310 [ 164.130660][ T7063] ? verify_lock_unused+0x140/0x140 [ 164.135917][ T7063] kmem_cache_alloc+0x5a/0x2d0 [ 164.140734][ T7063] ? skb_clone+0x1eb/0x370 [ 164.145188][ T7063] skb_clone+0x1eb/0x370 [ 164.149465][ T7063] bpf_clone_redirect+0x167/0x4a0 [ 164.154535][ T7063] bpf_prog_208b094576c80b22+0x5e/0x63 [ 164.160032][ T7063] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 164.166049][ T7063] ? lock_chain_count+0x20/0x20 [ 164.170933][ T7063] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 164.177306][ T7063] ? lockdep_softirqs_on+0x580/0x580 [ 164.182623][ T7063] ? ktime_get+0x7f/0x280 [ 164.186995][ T7063] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 164.193273][ T7063] ? ktime_get_real_ts64+0x440/0x440 [ 164.198589][ T7063] ? __x64_sys_bpf+0x7c/0x90 [ 164.203238][ T7063] ? __local_bh_disable_ip+0x108/0x1a0 [ 164.208728][ T7063] ? __cant_sleep+0x220/0x220 [ 164.213443][ T7063] ? read_tsc+0x9/0x20 [ 164.217585][ T7063] ? ktime_get+0x24b/0x280 [ 164.222035][ T7063] ? bpf_test_run+0x174/0x870 [ 164.226744][ T7063] bpf_test_run+0x2df/0x870 [ 164.231290][ T7063] ? bpf_test_run+0x174/0x870 [ 164.236006][ T7063] ? convert___skb_to_skb+0x590/0x590 [ 164.241421][ T7063] ? eth_get_headlen+0x210/0x210 [ 164.246431][ T7063] ? slab_build_skb+0x25f/0x3f0 [ 164.251324][ T7063] ? convert___skb_to_skb+0x3d/0x590 [ 164.256668][ T7063] bpf_prog_test_run_skb+0xad2/0x12b0 [ 164.262104][ T7063] ? cpu_online+0x60/0x60 [ 164.266486][ T7063] bpf_prog_test_run+0x321/0x390 [ 164.271463][ T7063] __sys_bpf+0x49d/0x890 [ 164.275743][ T7063] ? bpf_link_show_fdinfo+0x390/0x390 [ 164.281163][ T7063] ? lock_chain_count+0x20/0x20 [ 164.286059][ T7063] __x64_sys_bpf+0x7c/0x90 [ 164.290514][ T7063] do_syscall_64+0x55/0xa0 [ 164.294979][ T7063] ? clear_bhb_loop+0x40/0x90 [ 164.299708][ T7063] ? clear_bhb_loop+0x40/0x90 [ 164.304553][ T7063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.310550][ T7063] RIP: 0033:0x7f678319cdd9 [ 164.315006][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.334654][ T7063] RSP: 002b:00007f6784045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.343282][ T7063] RAX: ffffffffffffffda RBX: 00007f6783415fa0 RCX: 00007f678319cdd9 [ 164.351293][ T7063] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 164.359297][ T7063] RBP: 00007f6784045090 R08: 0000000000000000 R09: 0000000000000000 [ 164.367302][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.375309][ T7063] R13: 00007f6783416038 R14: 00007f6783415fa0 R15: 00007ffcde1d75d8 [ 164.383356][ T7063] [ 164.400607][ T7058] team_slave_1: entered promiscuous mode [ 164.418197][ T7058] team0: entered allmulticast mode [ 164.430659][ T7058] team_slave_0: entered allmulticast mode [ 164.442503][ T7058] team_slave_1: entered allmulticast mode [ 164.463972][ T7058] bridge0: port 4(team0) entered blocking state [ 164.505790][ T7058] bridge0: port 4(team0) entered disabled state [ 164.518802][ T7058] bridge0: port 4(team0) entered blocking state [ 164.525256][ T7058] bridge0: port 4(team0) entered forwarding state [ 166.209344][ T7098] netlink: 'syz.2.348': attribute type 21 has an invalid length. [ 166.536335][ T7098] Ÿë: port 1(ip6gretap0) entered blocking state [ 166.574455][ T7098] Ÿë: port 1(ip6gretap0) entered disabled state [ 166.655009][ T7098] ip6gretap0: entered allmulticast mode [ 166.669707][ T7098] ip6gretap0: entered promiscuous mode [ 168.743262][ T7134] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 169.122330][ T7152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.364'. [ 169.317568][ T7152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.364'. [ 169.390402][ T7148] netlink: 60 bytes leftover after parsing attributes in process `syz.2.364'. [ 169.660483][ T7159] netlink: 14 bytes leftover after parsing attributes in process `syz.3.365'. [ 170.005595][ T7159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.112068][ T7159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.190529][ T7159] bond0 (unregistering): Released all slaves [ 170.229404][ T7150] netlink: 'syz.0.366': attribute type 10 has an invalid length. [ 170.292602][ T7150] batman_adv: batadv0: Adding interface: netdevsim0 [ 170.335657][ T7150] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.375662][ T7150] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 170.725995][ T7179] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.374'. [ 171.158342][ T7192] IPv6: Can't replace route, no match found [ 171.838536][ T7219] FAULT_INJECTION: forcing a failure. [ 171.838536][ T7219] name failslab, interval 1, probability 0, space 0, times 0 [ 171.851382][ T7219] CPU: 0 PID: 7219 Comm: syz.2.385 Not tainted syzkaller #0 [ 171.858719][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.868832][ T7219] Call Trace: [ 171.872153][ T7219] [ 171.875133][ T7219] dump_stack_lvl+0x18c/0x250 [ 171.879878][ T7219] ? show_regs_print_info+0x20/0x20 [ 171.885225][ T7219] ? load_image+0x420/0x420 [ 171.889802][ T7219] should_fail_ex+0x39d/0x4d0 [ 171.894537][ T7219] should_failslab+0x9/0x20 [ 171.899097][ T7219] slab_pre_alloc_hook+0x59/0x310 [ 171.904202][ T7219] kmem_cache_alloc+0x5a/0x2d0 [ 171.909034][ T7219] ? __nf_conntrack_alloc+0x99/0x380 [ 171.914377][ T7219] __nf_conntrack_alloc+0x99/0x380 [ 171.919535][ T7219] init_conntrack+0x177/0xf10 [ 171.924273][ T7219] ? early_drop+0x7f0/0x7f0 [ 171.928815][ T7219] ? nf_conntrack_find_get+0x650/0x650 [ 171.934306][ T7219] ? __local_bh_enable_ip+0x13a/0x1c0 [ 171.939715][ T7219] ? __siphash_unaligned+0x22e/0x3a0 [ 171.945052][ T7219] nf_conntrack_in+0xc06/0x15c0 [ 171.949971][ T7219] ? nf_ct_pernet+0x270/0x270 [ 171.954695][ T7219] ? ipt_do_table+0x2c1/0x15e0 [ 171.959515][ T7219] ? read_lock_is_recursive+0x20/0x20 [ 171.964940][ T7219] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 171.970458][ T7219] ? ipv4_conntrack_local+0x123/0x200 [ 171.975864][ T7219] ? ipv4_conntrack_in+0x20/0x20 [ 171.980845][ T7219] nf_hook_slow+0xbd/0x200 [ 171.985303][ T7219] ? nf_hook+0x390/0x390 [ 171.989590][ T7219] nf_hook+0x228/0x390 [ 171.993696][ T7219] ? nf_hook+0xa2/0x390 [ 171.997880][ T7219] ? __ip_local_out+0x5f0/0x5f0 [ 172.002771][ T7219] ? nf_hook+0x390/0x390 [ 172.007056][ T7219] ? kasan_quarantine_put+0xd8/0x220 [ 172.012382][ T7219] ? lockdep_hardirqs_on+0x98/0x150 [ 172.017641][ T7219] ? ip_fast_csum+0x1ee/0x2b0 [ 172.022357][ T7219] __ip_local_out+0x4db/0x5f0 [ 172.027063][ T7219] ? nf_hook+0x390/0x390 [ 172.031344][ T7219] ip_local_out+0x2a/0x130 [ 172.035822][ T7219] iptunnel_xmit+0x4f0/0x920 [ 172.040904][ T7219] ip_tunnel_xmit+0x1cbc/0x2410 [ 172.045825][ T7219] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 172.050904][ T7219] ? validate_xmit_xfrm+0xbc/0x12c0 [ 172.056155][ T7219] ? gre_build_header+0x25b/0x990 [ 172.061231][ T7219] ipgre_xmit+0x7a6/0xb20 [ 172.065625][ T7219] dev_hard_start_xmit+0x246/0x740 [ 172.070808][ T7219] __dev_queue_xmit+0x19a3/0x3660 [ 172.075896][ T7219] ? __dev_queue_xmit+0x265/0x3660 [ 172.081058][ T7219] ? __kmem_cache_alloc_node+0x13a/0x250 [ 172.086736][ T7219] ? netdev_core_pick_tx+0x340/0x340 [ 172.092063][ T7219] ? skb_release_data+0x1d1/0x7b0 [ 172.097145][ T7219] __bpf_tx_skb+0x189/0x250 [ 172.101710][ T7219] bpf_clone_redirect+0x30f/0x4a0 [ 172.106785][ T7219] bpf_prog_208b094576c80b22+0x5e/0x63 [ 172.112278][ T7219] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 172.118297][ T7219] ? lock_chain_count+0x20/0x20 [ 172.123216][ T7219] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 172.129494][ T7219] ? lockdep_softirqs_on+0x580/0x580 [ 172.134815][ T7219] ? ktime_get+0x7f/0x280 [ 172.139180][ T7219] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 172.145722][ T7219] ? ktime_get_real_ts64+0x440/0x440 [ 172.151079][ T7219] ? __x64_sys_bpf+0x7c/0x90 [ 172.155715][ T7219] ? __local_bh_disable_ip+0x108/0x1a0 [ 172.161216][ T7219] ? __cant_sleep+0x220/0x220 [ 172.165939][ T7219] ? read_tsc+0x9/0x20 [ 172.170040][ T7219] ? ktime_get+0x24b/0x280 [ 172.174498][ T7219] ? bpf_test_run+0x174/0x870 [ 172.179230][ T7219] bpf_test_run+0x2df/0x870 [ 172.183827][ T7219] ? bpf_test_run+0x174/0x870 [ 172.188580][ T7219] ? convert___skb_to_skb+0x590/0x590 [ 172.194007][ T7219] ? eth_get_headlen+0x210/0x210 [ 172.198998][ T7219] ? slab_build_skb+0x25f/0x3f0 [ 172.203911][ T7219] ? convert___skb_to_skb+0x3d/0x590 [ 172.209250][ T7219] bpf_prog_test_run_skb+0xad2/0x12b0 [ 172.214676][ T7219] ? cpu_online+0x60/0x60 [ 172.219049][ T7219] bpf_prog_test_run+0x321/0x390 [ 172.224037][ T7219] __sys_bpf+0x49d/0x890 [ 172.228328][ T7219] ? bpf_link_show_fdinfo+0x390/0x390 [ 172.233802][ T7219] ? lock_chain_count+0x20/0x20 [ 172.238698][ T7219] __x64_sys_bpf+0x7c/0x90 [ 172.243149][ T7219] do_syscall_64+0x55/0xa0 [ 172.247742][ T7219] ? clear_bhb_loop+0x40/0x90 [ 172.252496][ T7219] ? clear_bhb_loop+0x40/0x90 [ 172.257222][ T7219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.263151][ T7219] RIP: 0033:0x7ff8f819cdd9 [ 172.267601][ T7219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.287248][ T7219] RSP: 002b:00007ff8f8f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.295698][ T7219] RAX: ffffffffffffffda RBX: 00007ff8f8415fa0 RCX: 00007ff8f819cdd9 [ 172.303705][ T7219] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 172.311712][ T7219] RBP: 00007ff8f8f84090 R08: 0000000000000000 R09: 0000000000000000 [ 172.319719][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.327753][ T7219] R13: 00007ff8f8416038 R14: 00007ff8f8415fa0 R15: 00007ffe74e457f8 [ 172.335786][ T7219] [ 172.730405][ T7231] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.389'. [ 172.989876][ T7241] netlink: 'syz.1.392': attribute type 5 has an invalid length. [ 173.694928][ T7256] FAULT_INJECTION: forcing a failure. [ 173.694928][ T7256] name failslab, interval 1, probability 0, space 0, times 0 [ 173.707677][ T7256] CPU: 0 PID: 7256 Comm: syz.0.397 Not tainted syzkaller #0 [ 173.715019][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.725132][ T7256] Call Trace: [ 173.728460][ T7256] [ 173.731432][ T7256] dump_stack_lvl+0x18c/0x250 [ 173.736171][ T7256] ? bpf_prog_test_run_skb+0xad2/0x12b0 [ 173.741781][ T7256] ? __sys_bpf+0x49d/0x890 [ 173.746285][ T7256] ? show_regs_print_info+0x20/0x20 [ 173.751560][ T7256] ? load_image+0x420/0x420 [ 173.756225][ T7256] should_fail_ex+0x39d/0x4d0 [ 173.760966][ T7256] should_failslab+0x9/0x20 [ 173.765528][ T7256] slab_pre_alloc_hook+0x59/0x310 [ 173.770626][ T7256] ? nf_ct_ext_add+0x1ab/0x440 [ 173.775459][ T7256] ? nf_ct_ext_add+0x1ab/0x440 [ 173.780272][ T7256] __kmem_cache_alloc_node+0x53/0x250 [ 173.785690][ T7256] ? nf_ct_ext_add+0x1ab/0x440 [ 173.790507][ T7256] __kmalloc_node_track_caller+0xa2/0x230 [ 173.796272][ T7256] krealloc+0x86/0x120 [ 173.800385][ T7256] nf_ct_ext_add+0x1ab/0x440 [ 173.805014][ T7256] init_conntrack+0x69c/0xf10 [ 173.809732][ T7256] ? early_drop+0x7f0/0x7f0 [ 173.814269][ T7256] ? nf_conntrack_find_get+0x650/0x650 [ 173.819765][ T7256] ? __local_bh_enable_ip+0x13a/0x1c0 [ 173.825169][ T7256] ? __siphash_unaligned+0x22e/0x3a0 [ 173.830495][ T7256] nf_conntrack_in+0xc06/0x15c0 [ 173.835404][ T7256] ? nf_ct_pernet+0x270/0x270 [ 173.840121][ T7256] ? ipt_do_table+0x2c1/0x15e0 [ 173.844929][ T7256] ? read_lock_is_recursive+0x20/0x20 [ 173.850335][ T7256] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 173.855826][ T7256] ? ipv4_conntrack_local+0x123/0x200 [ 173.861235][ T7256] ? ipv4_conntrack_in+0x20/0x20 [ 173.866214][ T7256] nf_hook_slow+0xbd/0x200 [ 173.870703][ T7256] ? nf_hook+0x390/0x390 [ 173.874978][ T7256] nf_hook+0x228/0x390 [ 173.879107][ T7256] ? nf_hook+0xa2/0x390 [ 173.883299][ T7256] ? __ip_local_out+0x5f0/0x5f0 [ 173.888187][ T7256] ? nf_hook+0x390/0x390 [ 173.892462][ T7256] ? kasan_quarantine_put+0xd8/0x220 [ 173.897783][ T7256] ? lockdep_hardirqs_on+0x98/0x150 [ 173.903020][ T7256] ? ip_fast_csum+0x1ee/0x2b0 [ 173.907727][ T7256] __ip_local_out+0x4db/0x5f0 [ 173.912466][ T7256] ? nf_hook+0x390/0x390 [ 173.916742][ T7256] ip_local_out+0x2a/0x130 [ 173.921197][ T7256] iptunnel_xmit+0x4f0/0x920 [ 173.925831][ T7256] ip_tunnel_xmit+0x1cbc/0x2410 [ 173.930739][ T7256] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 173.935790][ T7256] ? validate_xmit_xfrm+0xbc/0x12c0 [ 173.941023][ T7256] ? gre_build_header+0x25b/0x990 [ 173.946093][ T7256] ipgre_xmit+0x7a6/0xb20 [ 173.950472][ T7256] dev_hard_start_xmit+0x246/0x740 [ 173.955627][ T7256] __dev_queue_xmit+0x19a3/0x3660 [ 173.960709][ T7256] ? __dev_queue_xmit+0x265/0x3660 [ 173.965868][ T7256] ? __kmem_cache_alloc_node+0x13a/0x250 [ 173.971533][ T7256] ? netdev_core_pick_tx+0x340/0x340 [ 173.976857][ T7256] ? skb_release_data+0x1d1/0x7b0 [ 173.981941][ T7256] __bpf_tx_skb+0x189/0x250 [ 173.986491][ T7256] bpf_clone_redirect+0x30f/0x4a0 [ 173.991563][ T7256] bpf_prog_208b094576c80b22+0x5e/0x63 [ 173.997060][ T7256] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 174.003075][ T7256] ? lock_chain_count+0x20/0x20 [ 174.007959][ T7256] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 174.014232][ T7256] ? lockdep_softirqs_on+0x580/0x580 [ 174.019549][ T7256] ? ktime_get+0x7f/0x280 [ 174.023923][ T7256] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 174.030202][ T7256] ? ktime_get_real_ts64+0x440/0x440 [ 174.035529][ T7256] ? __x64_sys_bpf+0x7c/0x90 [ 174.040155][ T7256] ? __local_bh_disable_ip+0x108/0x1a0 [ 174.045644][ T7256] ? __cant_sleep+0x220/0x220 [ 174.050364][ T7256] ? read_tsc+0x9/0x20 [ 174.054476][ T7256] ? ktime_get+0x24b/0x280 [ 174.058928][ T7256] ? bpf_test_run+0x174/0x870 [ 174.063637][ T7256] bpf_test_run+0x2df/0x870 [ 174.068187][ T7256] ? bpf_test_run+0x174/0x870 [ 174.072906][ T7256] ? convert___skb_to_skb+0x590/0x590 [ 174.078347][ T7256] ? eth_get_headlen+0x210/0x210 [ 174.083354][ T7256] ? slab_build_skb+0x25f/0x3f0 [ 174.088237][ T7256] ? convert___skb_to_skb+0x3d/0x590 [ 174.093556][ T7256] bpf_prog_test_run_skb+0xad2/0x12b0 [ 174.098973][ T7256] ? cpu_online+0x60/0x60 [ 174.103334][ T7256] bpf_prog_test_run+0x321/0x390 [ 174.108305][ T7256] __sys_bpf+0x49d/0x890 [ 174.112594][ T7256] ? bpf_link_show_fdinfo+0x390/0x390 [ 174.118041][ T7256] ? lock_chain_count+0x20/0x20 [ 174.122930][ T7256] __x64_sys_bpf+0x7c/0x90 [ 174.127379][ T7256] do_syscall_64+0x55/0xa0 [ 174.131824][ T7256] ? clear_bhb_loop+0x40/0x90 [ 174.136579][ T7256] ? clear_bhb_loop+0x40/0x90 [ 174.141298][ T7256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.147227][ T7256] RIP: 0033:0x7f08e659cdd9 [ 174.151677][ T7256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.171319][ T7256] RSP: 002b:00007f08e7512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.179765][ T7256] RAX: ffffffffffffffda RBX: 00007f08e6815fa0 RCX: 00007f08e659cdd9 [ 174.187767][ T7256] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 174.195770][ T7256] RBP: 00007f08e7512090 R08: 0000000000000000 R09: 0000000000000000 [ 174.203771][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.211852][ T7256] R13: 00007f08e6816038 R14: 00007f08e6815fa0 R15: 00007fff8ace3db8 [ 174.219890][ T7256] [ 174.597181][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'. [ 174.633863][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'. [ 174.671215][ T7267] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'. [ 174.784217][ T7282] netlink: 'syz.3.402': attribute type 10 has an invalid length. [ 175.172810][ T7298] FAULT_INJECTION: forcing a failure. [ 175.172810][ T7298] name failslab, interval 1, probability 0, space 0, times 0 [ 175.185592][ T7298] CPU: 1 PID: 7298 Comm: syz.1.410 Not tainted syzkaller #0 [ 175.192936][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.203048][ T7298] Call Trace: [ 175.206376][ T7298] [ 175.209370][ T7298] dump_stack_lvl+0x18c/0x250 [ 175.214121][ T7298] ? show_regs_print_info+0x20/0x20 [ 175.219401][ T7298] ? load_image+0x420/0x420 [ 175.223979][ T7298] should_fail_ex+0x39d/0x4d0 [ 175.228732][ T7298] should_failslab+0x9/0x20 [ 175.233336][ T7298] slab_pre_alloc_hook+0x59/0x310 [ 175.238473][ T7298] kmem_cache_alloc_node+0x60/0x320 [ 175.243744][ T7298] ? __alloc_skb+0x103/0x2c0 [ 175.248378][ T7298] __alloc_skb+0x103/0x2c0 [ 175.252830][ T7298] ip_frag_next+0xd1/0xaf0 [ 175.257285][ T7298] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 175.262175][ T7298] ip_do_fragment+0x76f/0x1760 [ 175.266995][ T7298] ? __ip_local_out+0x5f0/0x5f0 [ 175.271883][ T7298] ? ip_fragment+0x210/0x210 [ 175.276506][ T7298] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 175.281437][ T7298] ip_output+0x2a1/0x3b0 [ 175.285718][ T7298] ? ip_output+0x60/0x3b0 [ 175.290092][ T7298] iptunnel_xmit+0x4f0/0x920 [ 175.294742][ T7298] ip_tunnel_xmit+0x1cbc/0x2410 [ 175.299655][ T7298] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 175.304724][ T7298] ? validate_xmit_xfrm+0xbc/0x12c0 [ 175.309966][ T7298] ? gre_build_header+0x25b/0x990 [ 175.315041][ T7298] ipgre_xmit+0x7a6/0xb20 [ 175.319441][ T7298] dev_hard_start_xmit+0x246/0x740 [ 175.324626][ T7298] __dev_queue_xmit+0x19a3/0x3660 [ 175.329711][ T7298] ? __dev_queue_xmit+0x265/0x3660 [ 175.334894][ T7298] ? __kmem_cache_alloc_node+0x13a/0x250 [ 175.340682][ T7298] ? netdev_core_pick_tx+0x340/0x340 [ 175.346016][ T7298] ? skb_release_data+0x1d1/0x7b0 [ 175.351113][ T7298] __bpf_tx_skb+0x189/0x250 [ 175.355663][ T7298] bpf_clone_redirect+0x30f/0x4a0 [ 175.360769][ T7298] bpf_prog_208b094576c80b22+0x5e/0x63 [ 175.366277][ T7298] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 175.372305][ T7298] ? lock_chain_count+0x20/0x20 [ 175.377197][ T7298] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 175.383485][ T7298] ? lockdep_softirqs_on+0x580/0x580 [ 175.388815][ T7298] ? ktime_get+0x7f/0x280 [ 175.393177][ T7298] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 175.399452][ T7298] ? ktime_get_real_ts64+0x440/0x440 [ 175.404783][ T7298] ? __x64_sys_bpf+0x7c/0x90 [ 175.409404][ T7298] ? __local_bh_disable_ip+0x108/0x1a0 [ 175.414892][ T7298] ? __cant_sleep+0x220/0x220 [ 175.419609][ T7298] ? read_tsc+0x9/0x20 [ 175.423712][ T7298] ? ktime_get+0x24b/0x280 [ 175.428170][ T7298] ? bpf_test_run+0x174/0x870 [ 175.432882][ T7298] bpf_test_run+0x2df/0x870 [ 175.437439][ T7298] ? bpf_test_run+0x174/0x870 [ 175.442154][ T7298] ? convert___skb_to_skb+0x590/0x590 [ 175.447712][ T7298] ? eth_get_headlen+0x210/0x210 [ 175.452720][ T7298] ? slab_build_skb+0x25f/0x3f0 [ 175.457613][ T7298] ? convert___skb_to_skb+0x3d/0x590 [ 175.462951][ T7298] bpf_prog_test_run_skb+0xad2/0x12b0 [ 175.468375][ T7298] ? cpu_online+0x60/0x60 [ 175.472739][ T7298] bpf_prog_test_run+0x321/0x390 [ 175.477749][ T7298] __sys_bpf+0x49d/0x890 [ 175.482025][ T7298] ? bpf_link_show_fdinfo+0x390/0x390 [ 175.487438][ T7298] ? lock_chain_count+0x20/0x20 [ 175.492335][ T7298] __x64_sys_bpf+0x7c/0x90 [ 175.496786][ T7298] do_syscall_64+0x55/0xa0 [ 175.501238][ T7298] ? clear_bhb_loop+0x40/0x90 [ 175.505965][ T7298] ? clear_bhb_loop+0x40/0x90 [ 175.510680][ T7298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.516604][ T7298] RIP: 0033:0x7f678319cdd9 [ 175.521048][ T7298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.540708][ T7298] RSP: 002b:00007f6784045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.549153][ T7298] RAX: ffffffffffffffda RBX: 00007f6783415fa0 RCX: 00007f678319cdd9 [ 175.557159][ T7298] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 175.565157][ T7298] RBP: 00007f6784045090 R08: 0000000000000000 R09: 0000000000000000 [ 175.573155][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.581155][ T7298] R13: 00007f6783416038 R14: 00007f6783415fa0 R15: 00007ffcde1d75d8 [ 175.589173][ T7298] [ 176.161055][ T7315] netlink: 'syz.2.415': attribute type 6 has an invalid length. [ 176.175740][ T7315] netlink: 'syz.2.415': attribute type 1 has an invalid length. [ 176.187678][ T7315] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.415'. [ 176.396873][ T7327] netlink: 'syz.0.417': attribute type 21 has an invalid length. [ 176.585458][ T7331] netlink: 60 bytes leftover after parsing attributes in process `syz.2.419'. [ 176.722603][ T7331] netlink: 60 bytes leftover after parsing attributes in process `syz.2.419'. [ 176.756075][ T7333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.419'. [ 176.782522][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.816296][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.832879][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.850711][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.134233][ T7335] netlink: 60 bytes leftover after parsing attributes in process `syz.2.419'. [ 177.158828][ T7333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.419'. [ 177.169006][ T7347] FAULT_INJECTION: forcing a failure. [ 177.169006][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 177.181815][ T7347] CPU: 1 PID: 7347 Comm: syz.1.421 Not tainted syzkaller #0 [ 177.189154][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.199279][ T7347] Call Trace: [ 177.202609][ T7347] [ 177.205587][ T7347] dump_stack_lvl+0x18c/0x250 [ 177.210333][ T7347] ? show_regs_print_info+0x20/0x20 [ 177.215589][ T7347] ? load_image+0x420/0x420 [ 177.220152][ T7347] ? ipt_do_table+0x13cc/0x15e0 [ 177.225083][ T7347] should_fail_ex+0x39d/0x4d0 [ 177.229832][ T7347] should_failslab+0x9/0x20 [ 177.234399][ T7347] slab_pre_alloc_hook+0x59/0x310 [ 177.239500][ T7347] kmem_cache_alloc_node+0x60/0x320 [ 177.244771][ T7347] ? __alloc_skb+0x103/0x2c0 [ 177.249463][ T7347] __alloc_skb+0x103/0x2c0 [ 177.253948][ T7347] ip_frag_next+0xd1/0xaf0 [ 177.258440][ T7347] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 177.263355][ T7347] ip_do_fragment+0x76f/0x1760 [ 177.268191][ T7347] ? __ip_local_out+0x5f0/0x5f0 [ 177.273107][ T7347] ? ip_fragment+0x210/0x210 [ 177.277755][ T7347] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 177.282684][ T7347] ip_output+0x2a1/0x3b0 [ 177.286986][ T7347] ? ip_output+0x60/0x3b0 [ 177.291383][ T7347] iptunnel_xmit+0x4f0/0x920 [ 177.296058][ T7347] ip_tunnel_xmit+0x1cbc/0x2410 [ 177.301004][ T7347] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 177.306075][ T7347] ? validate_xmit_xfrm+0xbc/0x12c0 [ 177.311333][ T7347] ? gre_build_header+0x25b/0x990 [ 177.316417][ T7347] ipgre_xmit+0x7a6/0xb20 [ 177.320803][ T7347] dev_hard_start_xmit+0x246/0x740 [ 177.325986][ T7347] __dev_queue_xmit+0x19a3/0x3660 [ 177.331066][ T7347] ? __dev_queue_xmit+0x265/0x3660 [ 177.336279][ T7347] ? __kmem_cache_alloc_node+0x13a/0x250 [ 177.341950][ T7347] ? netdev_core_pick_tx+0x340/0x340 [ 177.347303][ T7347] ? skb_release_data+0x1d1/0x7b0 [ 177.352384][ T7347] __bpf_tx_skb+0x189/0x250 [ 177.356925][ T7347] bpf_clone_redirect+0x30f/0x4a0 [ 177.362035][ T7347] bpf_prog_208b094576c80b22+0x5e/0x63 [ 177.367742][ T7347] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 177.373793][ T7347] ? lock_chain_count+0x20/0x20 [ 177.378795][ T7347] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 177.385109][ T7347] ? lockdep_softirqs_on+0x580/0x580 [ 177.390447][ T7347] ? ktime_get+0x7f/0x280 [ 177.394818][ T7347] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 177.401120][ T7347] ? ktime_get_real_ts64+0x440/0x440 [ 177.406449][ T7347] ? __x64_sys_bpf+0x7c/0x90 [ 177.411080][ T7347] ? __local_bh_disable_ip+0x108/0x1a0 [ 177.416569][ T7347] ? __cant_sleep+0x220/0x220 [ 177.421289][ T7347] ? read_tsc+0x9/0x20 [ 177.425416][ T7347] ? ktime_get+0x24b/0x280 [ 177.429876][ T7347] ? bpf_test_run+0x174/0x870 [ 177.434592][ T7347] bpf_test_run+0x2df/0x870 [ 177.439149][ T7347] ? bpf_test_run+0x174/0x870 [ 177.443862][ T7347] ? convert___skb_to_skb+0x590/0x590 [ 177.449276][ T7347] ? eth_get_headlen+0x210/0x210 [ 177.454276][ T7347] ? slab_build_skb+0x25f/0x3f0 [ 177.459194][ T7347] ? convert___skb_to_skb+0x3d/0x590 [ 177.464530][ T7347] bpf_prog_test_run_skb+0xad2/0x12b0 [ 177.469987][ T7347] ? cpu_online+0x60/0x60 [ 177.474408][ T7347] bpf_prog_test_run+0x321/0x390 [ 177.479416][ T7347] __sys_bpf+0x49d/0x890 [ 177.483694][ T7347] ? bpf_link_show_fdinfo+0x390/0x390 [ 177.489126][ T7347] ? lock_chain_count+0x20/0x20 [ 177.494020][ T7347] __x64_sys_bpf+0x7c/0x90 [ 177.498475][ T7347] do_syscall_64+0x55/0xa0 [ 177.502918][ T7347] ? clear_bhb_loop+0x40/0x90 [ 177.507635][ T7347] ? clear_bhb_loop+0x40/0x90 [ 177.512354][ T7347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.518328][ T7347] RIP: 0033:0x7f678319cdd9 [ 177.522777][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.542417][ T7347] RSP: 002b:00007f6784045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.550911][ T7347] RAX: ffffffffffffffda RBX: 00007f6783415fa0 RCX: 00007f678319cdd9 [ 177.558919][ T7347] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 177.566932][ T7347] RBP: 00007f6784045090 R08: 0000000000000000 R09: 0000000000000000 [ 177.574940][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.582945][ T7347] R13: 00007f6783416038 R14: 00007f6783415fa0 R15: 00007ffcde1d75d8 [ 177.590970][ T7347] [ 178.148686][ T7364] netlink: 'syz.1.426': attribute type 21 has an invalid length. [ 178.189847][ T7364] netlink: 16174 bytes leftover after parsing attributes in process `syz.1.426'. [ 178.660864][ T7371] netlink: 'syz.2.429': attribute type 39 has an invalid length. [ 178.821456][ T7371] bridge0: port 3(syz_tun) entered disabled state [ 178.988776][ T7371] syz_tun (unregistering): left allmulticast mode [ 179.006561][ T7371] syz_tun (unregistering): left promiscuous mode [ 179.015440][ T7371] bridge0: port 3(syz_tun) entered disabled state [ 179.120937][ T7370] netlink: 'syz.2.429': attribute type 39 has an invalid length. [ 181.210376][ T7446] syz.1.451 uses obsolete (PF_INET,SOCK_PACKET) [ 181.296748][ T7458] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 181.323321][ T7458] __nla_validate_parse: 3 callbacks suppressed [ 181.323337][ T7458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.453'. [ 181.445838][ T7458] veth0_vlan: entered allmulticast mode [ 181.466863][ T7458] bridge0: port 3(veth0_vlan) entered blocking state [ 181.513263][ T7458] bridge0: port 3(veth0_vlan) entered disabled state [ 181.541489][ T7458] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 182.051191][ T7465] tap0: tun_chr_ioctl cmd 35108 [ 182.258354][ T7468] FAULT_INJECTION: forcing a failure. [ 182.258354][ T7468] name failslab, interval 1, probability 0, space 0, times 0 [ 182.271109][ T7468] CPU: 0 PID: 7468 Comm: syz.0.455 Not tainted syzkaller #0 [ 182.278449][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.288619][ T7468] Call Trace: [ 182.291948][ T7468] [ 182.294934][ T7468] dump_stack_lvl+0x18c/0x250 [ 182.299778][ T7468] ? show_regs_print_info+0x20/0x20 [ 182.305056][ T7468] ? load_image+0x420/0x420 [ 182.309646][ T7468] should_fail_ex+0x39d/0x4d0 [ 182.314393][ T7468] should_failslab+0x9/0x20 [ 182.318955][ T7468] slab_pre_alloc_hook+0x59/0x310 [ 182.324040][ T7468] ? ip_finish_output2+0xb04/0x11e0 [ 182.329306][ T7468] kmem_cache_alloc_node+0x60/0x320 [ 182.334579][ T7468] ? __alloc_skb+0x103/0x2c0 [ 182.339229][ T7468] __alloc_skb+0x103/0x2c0 [ 182.343702][ T7468] ip_frag_next+0xd1/0xaf0 [ 182.348245][ T7468] ip_do_fragment+0x76f/0x1760 [ 182.353070][ T7468] ? __ip_local_out+0x5f0/0x5f0 [ 182.358003][ T7468] ? ip_fragment+0x210/0x210 [ 182.362636][ T7468] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 182.367532][ T7468] ip_output+0x2a1/0x3b0 [ 182.371822][ T7468] ? ip_output+0x60/0x3b0 [ 182.376233][ T7468] iptunnel_xmit+0x4f0/0x920 [ 182.380888][ T7468] ip_tunnel_xmit+0x1cbc/0x2410 [ 182.385802][ T7468] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 182.390876][ T7468] ? validate_xmit_xfrm+0xbc/0x12c0 [ 182.396115][ T7468] ? gre_build_header+0x25b/0x990 [ 182.401184][ T7468] ipgre_xmit+0x7a6/0xb20 [ 182.405573][ T7468] dev_hard_start_xmit+0x246/0x740 [ 182.410735][ T7468] __dev_queue_xmit+0x19a3/0x3660 [ 182.415806][ T7468] ? __dev_queue_xmit+0x265/0x3660 [ 182.420956][ T7468] ? __kmem_cache_alloc_node+0x13a/0x250 [ 182.426641][ T7468] ? netdev_core_pick_tx+0x340/0x340 [ 182.431978][ T7468] ? skb_release_data+0x1d1/0x7b0 [ 182.437061][ T7468] __bpf_tx_skb+0x189/0x250 [ 182.441608][ T7468] bpf_clone_redirect+0x30f/0x4a0 [ 182.446681][ T7468] bpf_prog_208b094576c80b22+0x5e/0x63 [ 182.452208][ T7468] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 182.458264][ T7468] ? lock_chain_count+0x20/0x20 [ 182.463147][ T7468] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 182.469426][ T7468] ? lockdep_softirqs_on+0x580/0x580 [ 182.474742][ T7468] ? ktime_get+0x7f/0x280 [ 182.479102][ T7468] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 182.485382][ T7468] ? ktime_get_real_ts64+0x440/0x440 [ 182.490710][ T7468] ? __x64_sys_bpf+0x7c/0x90 [ 182.495355][ T7468] ? __local_bh_disable_ip+0x108/0x1a0 [ 182.500893][ T7468] ? __cant_sleep+0x220/0x220 [ 182.505639][ T7468] ? read_tsc+0x9/0x20 [ 182.509748][ T7468] ? ktime_get+0x24b/0x280 [ 182.514207][ T7468] ? bpf_test_run+0x174/0x870 [ 182.519006][ T7468] bpf_test_run+0x2df/0x870 [ 182.523571][ T7468] ? bpf_test_run+0x174/0x870 [ 182.528293][ T7468] ? convert___skb_to_skb+0x590/0x590 [ 182.533718][ T7468] ? eth_get_headlen+0x210/0x210 [ 182.538707][ T7468] ? slab_build_skb+0x25f/0x3f0 [ 182.543587][ T7468] ? convert___skb_to_skb+0x3d/0x590 [ 182.548909][ T7468] bpf_prog_test_run_skb+0xad2/0x12b0 [ 182.554423][ T7468] ? cpu_online+0x60/0x60 [ 182.558790][ T7468] bpf_prog_test_run+0x321/0x390 [ 182.563766][ T7468] __sys_bpf+0x49d/0x890 [ 182.568060][ T7468] ? bpf_link_show_fdinfo+0x390/0x390 [ 182.573476][ T7468] ? lock_chain_count+0x20/0x20 [ 182.578384][ T7468] __x64_sys_bpf+0x7c/0x90 [ 182.582834][ T7468] do_syscall_64+0x55/0xa0 [ 182.587288][ T7468] ? clear_bhb_loop+0x40/0x90 [ 182.592098][ T7468] ? clear_bhb_loop+0x40/0x90 [ 182.596811][ T7468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.602737][ T7468] RIP: 0033:0x7f08e659cdd9 [ 182.607184][ T7468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.626841][ T7468] RSP: 002b:00007f08e7512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.635290][ T7468] RAX: ffffffffffffffda RBX: 00007f08e6815fa0 RCX: 00007f08e659cdd9 [ 182.643374][ T7468] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 182.651458][ T7468] RBP: 00007f08e7512090 R08: 0000000000000000 R09: 0000000000000000 [ 182.659464][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.667469][ T7468] R13: 00007f08e6816038 R14: 00007f08e6815fa0 R15: 00007fff8ace3db8 [ 182.675493][ T7468] [ 183.142861][ T7490] netlink: 'syz.0.463': attribute type 21 has an invalid length. [ 183.150887][ T7490] netlink: 168 bytes leftover after parsing attributes in process `syz.0.463'. [ 184.223768][ T7513] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.471'. [ 186.971298][ T7562] netlink: 'syz.3.483': attribute type 21 has an invalid length. [ 186.980851][ T7562] netlink: 156 bytes leftover after parsing attributes in process `syz.3.483'. [ 187.002119][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 187.406413][ T7572] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.481'. [ 187.436941][ T7572] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.481'. [ 188.181475][ T7591] geneve1: entered promiscuous mode [ 188.202570][ T7591] geneve1: entered allmulticast mode [ 188.356817][ T7593] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.492'. [ 188.436453][ T7597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.492'. [ 188.931559][ T7603] netlink: 'syz.0.493': attribute type 4 has an invalid length. [ 189.053427][ T7603] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.493'. [ 189.461000][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 189.511658][ T7610] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 189.523417][ T7610] netlink: 'syz.3.497': attribute type 3 has an invalid length. [ 189.541758][ T7614] FAULT_INJECTION: forcing a failure. [ 189.541758][ T7614] name failslab, interval 1, probability 0, space 0, times 0 [ 189.554585][ T7614] CPU: 0 PID: 7614 Comm: syz.0.498 Not tainted syzkaller #0 [ 189.561945][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.572062][ T7614] Call Trace: [ 189.575382][ T7614] [ 189.578356][ T7614] dump_stack_lvl+0x18c/0x250 [ 189.583101][ T7614] ? show_regs_print_info+0x20/0x20 [ 189.588372][ T7614] ? load_image+0x420/0x420 [ 189.592927][ T7614] ? mark_lock+0x94/0x320 [ 189.597367][ T7614] should_fail_ex+0x39d/0x4d0 [ 189.602113][ T7614] should_failslab+0x9/0x20 [ 189.606667][ T7614] slab_pre_alloc_hook+0x59/0x310 [ 189.611770][ T7614] kmem_cache_alloc+0x5a/0x2d0 [ 189.616594][ T7614] ? dst_alloc+0x105/0x170 [ 189.621078][ T7614] dst_alloc+0x105/0x170 [ 189.625387][ T7614] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 189.631569][ T7614] ? ip_route_output_key_hash+0x13d/0x330 [ 189.637349][ T7614] ip_route_output_key_hash+0x1f3/0x330 [ 189.642963][ T7614] ? ip_route_input_rcu+0x30f0/0x30f0 [ 189.648414][ T7614] ? __asan_memset+0x22/0x40 [ 189.653080][ T7614] ip_route_output_flow+0x2a/0x150 [ 189.658262][ T7614] ip_tunnel_xmit+0x9b1/0x2410 [ 189.663090][ T7614] ? ip_tunnel_xmit+0x130/0x2410 [ 189.668103][ T7614] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 189.673206][ T7614] ? validate_xmit_xfrm+0xbc/0x12c0 [ 189.678487][ T7614] ? gre_build_header+0x25b/0x990 [ 189.683596][ T7614] ipgre_xmit+0x7a6/0xb20 [ 189.688008][ T7614] dev_hard_start_xmit+0x246/0x740 [ 189.693204][ T7614] __dev_queue_xmit+0x19a3/0x3660 [ 189.698307][ T7614] ? __dev_queue_xmit+0x265/0x3660 [ 189.703485][ T7614] ? __kmem_cache_alloc_node+0x13a/0x250 [ 189.709178][ T7614] ? netdev_core_pick_tx+0x340/0x340 [ 189.714524][ T7614] ? skb_release_data+0x1d1/0x7b0 [ 189.719645][ T7614] __bpf_tx_skb+0x189/0x250 [ 189.724207][ T7614] bpf_clone_redirect+0x30f/0x4a0 [ 189.729327][ T7614] bpf_prog_208b094576c80b22+0x5e/0x63 [ 189.734840][ T7614] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 189.740882][ T7614] ? perf_trace_preemptirq_template+0xac/0x330 [ 189.747111][ T7614] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 189.753154][ T7614] ? lockdep_softirqs_on+0x580/0x580 [ 189.758500][ T7614] ? lock_chain_count+0x20/0x20 [ 189.763402][ T7614] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 189.769754][ T7614] ? __local_bh_disable_ip+0x108/0x1a0 [ 189.775284][ T7614] ? __cant_sleep+0x220/0x220 [ 189.780063][ T7614] ? __local_bh_enable_ip+0x13a/0x1c0 [ 189.785490][ T7614] ? _local_bh_enable+0xa0/0xa0 [ 189.790407][ T7614] ? bpf_test_timer_continue+0x135/0x380 [ 189.796106][ T7614] ? bpf_test_run+0x174/0x870 [ 189.800845][ T7614] bpf_test_run+0x2df/0x870 [ 189.805420][ T7614] ? bpf_test_run+0x174/0x870 [ 189.810165][ T7614] ? convert___skb_to_skb+0x590/0x590 [ 189.815599][ T7614] ? eth_get_headlen+0x210/0x210 [ 189.820609][ T7614] ? slab_build_skb+0x25f/0x3f0 [ 189.825514][ T7614] ? convert___skb_to_skb+0x3d/0x590 [ 189.830860][ T7614] bpf_prog_test_run_skb+0xad2/0x12b0 [ 189.836312][ T7614] ? cpu_online+0x60/0x60 [ 189.840722][ T7614] bpf_prog_test_run+0x321/0x390 [ 189.845716][ T7614] __sys_bpf+0x49d/0x890 [ 189.850020][ T7614] ? bpf_link_show_fdinfo+0x390/0x390 [ 189.855508][ T7614] ? lock_chain_count+0x20/0x20 [ 189.860443][ T7614] __x64_sys_bpf+0x7c/0x90 [ 189.864937][ T7614] do_syscall_64+0x55/0xa0 [ 189.869408][ T7614] ? clear_bhb_loop+0x40/0x90 [ 189.874149][ T7614] ? clear_bhb_loop+0x40/0x90 [ 189.878884][ T7614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.884843][ T7614] RIP: 0033:0x7f08e659cdd9 [ 189.889312][ T7614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.908998][ T7614] RSP: 002b:00007f08e7512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.917482][ T7614] RAX: ffffffffffffffda RBX: 00007f08e6815fa0 RCX: 00007f08e659cdd9 [ 189.925506][ T7614] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 189.933524][ T7614] RBP: 00007f08e7512090 R08: 0000000000000000 R09: 0000000000000000 [ 189.941546][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.949568][ T7614] R13: 00007f08e6816038 R14: 00007f08e6815fa0 R15: 00007fff8ace3db8 [ 189.957614][ T7614] [ 189.969443][ T7610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.497'. [ 190.298596][ T7621] netlink: 188 bytes leftover after parsing attributes in process `syz.3.501'. [ 191.368467][ T7647] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 191.450696][ T7647] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 191.468566][ T7646] netlink: 'syz.2.510': attribute type 22 has an invalid length. [ 191.708817][ T7650] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 191.765870][ T7650] netlink: 'syz.0.511': attribute type 4 has an invalid length. [ 193.221967][ T7682] netlink: 'syz.3.522': attribute type 10 has an invalid length. [ 193.230587][ T7682] __nla_validate_parse: 2 callbacks suppressed [ 193.230604][ T7682] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.522'. [ 193.834007][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.894477][ T7700] vlan0: entered promiscuous mode [ 193.910932][ T7700] vlan0: entered allmulticast mode [ 193.923463][ T7700] veth0_vlan: entered allmulticast mode [ 193.979536][ T7699] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 194.020133][ T7699] bridge0: port 4(team0) entered disabled state [ 194.059843][ T7699] team0: left allmulticast mode [ 194.065111][ T7699] team_slave_0: left allmulticast mode [ 194.076357][ T7699] team_slave_1: left allmulticast mode [ 194.082610][ T7699] team0: left promiscuous mode [ 194.091878][ T7699] team_slave_0: left promiscuous mode [ 194.100615][ T7699] team_slave_1: left promiscuous mode [ 194.109893][ T7699] bridge0: port 4(team0) entered disabled state [ 194.141289][ T7699] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.175236][ T7699] bond0: (slave team0): Enslaving as an active interface with an up link [ 194.572998][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.579708][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.772700][ T7714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.532'. [ 194.856589][ T7713] netlink: 68 bytes leftover after parsing attributes in process `syz.0.532'. [ 194.870401][ T7714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.532'. [ 195.363214][ T7725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.244528][ T7739] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.541'. [ 197.253453][ T7742] netlink: 'syz.1.542': attribute type 8 has an invalid length. [ 197.283932][ T7742] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 197.325860][ T7742] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.542'. [ 197.350741][ T7743] netlink: 'syz.1.542': attribute type 4 has an invalid length. [ 197.372455][ T7743] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.542'. [ 198.999844][ T7762] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 199.070394][ T7762] veth0_macvtap: left promiscuous mode [ 199.590145][ T7784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.554'. [ 199.600042][ T7784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.554'. [ 199.642860][ T7785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.554'. [ 199.868924][ T7793] netlink: 'syz.3.557': attribute type 5 has an invalid length. [ 199.885917][ T7793] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 199.894408][ T7793] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.557'. [ 200.762342][ T7826] netlink: 60 bytes leftover after parsing attributes in process `syz.3.567'. [ 200.787428][ T7826] netlink: 60 bytes leftover after parsing attributes in process `syz.3.567'. [ 200.836234][ T7827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.567'. [ 200.872054][ T7826] netlink: 60 bytes leftover after parsing attributes in process `syz.3.567'. [ 202.375897][ T7886] netlink: 'syz.2.582': attribute type 9 has an invalid length. [ 202.463391][ T7886] netlink: 135040 bytes leftover after parsing attributes in process `syz.2.582'. [ 202.505656][ T7883] netlink: 'syz.1.584': attribute type 10 has an invalid length. [ 202.513485][ T7883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.584'. [ 202.564327][ T7883] team0: entered promiscuous mode [ 202.587697][ T7883] C: entered promiscuous mode [ 202.628277][ T7883] team_slave_1: entered promiscuous mode [ 202.667008][ T7883] geneve1: entered promiscuous mode [ 202.695135][ T7883] team0: entered allmulticast mode [ 202.714730][ T7883] C: entered allmulticast mode [ 202.731220][ T7883] team_slave_1: entered allmulticast mode [ 202.747112][ T7883] geneve1: entered allmulticast mode [ 202.767564][ T7883] bridge0: port 4(team0) entered blocking state [ 202.792015][ T7883] bridge0: port 4(team0) entered disabled state [ 202.857210][ T7883] bridge0: port 4(team0) entered blocking state [ 202.863748][ T7883] bridge0: port 4(team0) entered forwarding state [ 203.197982][ T7910] FAULT_INJECTION: forcing a failure. [ 203.197982][ T7910] name failslab, interval 1, probability 0, space 0, times 0 [ 203.210819][ T7910] CPU: 0 PID: 7910 Comm: syz.3.589 Not tainted syzkaller #0 [ 203.218161][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.228265][ T7910] Call Trace: [ 203.231593][ T7910] [ 203.234570][ T7910] dump_stack_lvl+0x18c/0x250 [ 203.239323][ T7910] ? show_regs_print_info+0x20/0x20 [ 203.244626][ T7910] ? load_image+0x420/0x420 [ 203.249198][ T7910] ? ipt_do_table+0x13cc/0x15e0 [ 203.254111][ T7910] should_fail_ex+0x39d/0x4d0 [ 203.258859][ T7910] should_failslab+0x9/0x20 [ 203.263427][ T7910] slab_pre_alloc_hook+0x59/0x310 [ 203.268525][ T7910] kmem_cache_alloc_node+0x60/0x320 [ 203.273791][ T7910] ? __alloc_skb+0x103/0x2c0 [ 203.278441][ T7910] __alloc_skb+0x103/0x2c0 [ 203.282923][ T7910] ip_frag_next+0xd1/0xaf0 [ 203.287400][ T7910] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 203.292318][ T7910] ip_do_fragment+0x76f/0x1760 [ 203.297163][ T7910] ? __ip_local_out+0x5f0/0x5f0 [ 203.302157][ T7910] ? ip_fragment+0x210/0x210 [ 203.306813][ T7910] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 203.311727][ T7910] ip_output+0x2a1/0x3b0 [ 203.316014][ T7910] ? ip_output+0x60/0x3b0 [ 203.320394][ T7910] iptunnel_xmit+0x4f0/0x920 [ 203.325063][ T7910] ip_tunnel_xmit+0x1cbc/0x2410 [ 203.329993][ T7910] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 203.335065][ T7910] ? validate_xmit_xfrm+0xbc/0x12c0 [ 203.340320][ T7910] ? gre_build_header+0x25b/0x990 [ 203.345423][ T7910] ipgre_xmit+0x7a6/0xb20 [ 203.349824][ T7910] dev_hard_start_xmit+0x246/0x740 [ 203.355010][ T7910] __dev_queue_xmit+0x19a3/0x3660 [ 203.360097][ T7910] ? __dev_queue_xmit+0x265/0x3660 [ 203.365293][ T7910] ? __kmem_cache_alloc_node+0x13a/0x250 [ 203.370990][ T7910] ? netdev_core_pick_tx+0x340/0x340 [ 203.376371][ T7910] ? skb_release_data+0x1d1/0x7b0 [ 203.381484][ T7910] __bpf_tx_skb+0x189/0x250 [ 203.386037][ T7910] bpf_clone_redirect+0x30f/0x4a0 [ 203.391121][ T7910] bpf_prog_208b094576c80b22+0x5e/0x63 [ 203.396630][ T7910] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 203.402664][ T7910] ? lock_chain_count+0x20/0x20 [ 203.407575][ T7910] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 203.413607][ T7910] ? lockdep_softirqs_on+0x580/0x580 [ 203.418939][ T7910] ? lock_chain_count+0x20/0x20 [ 203.423849][ T7910] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 203.430166][ T7910] ? __local_bh_disable_ip+0x108/0x1a0 [ 203.435678][ T7910] ? __cant_sleep+0x220/0x220 [ 203.440408][ T7910] ? __local_bh_enable_ip+0x13a/0x1c0 [ 203.445828][ T7910] ? _local_bh_enable+0xa0/0xa0 [ 203.450737][ T7910] ? bpf_test_timer_continue+0x135/0x380 [ 203.456432][ T7910] ? bpf_test_run+0x174/0x870 [ 203.461158][ T7910] bpf_test_run+0x2df/0x870 [ 203.465722][ T7910] ? bpf_test_run+0x174/0x870 [ 203.470463][ T7910] ? convert___skb_to_skb+0x590/0x590 [ 203.475889][ T7910] ? eth_get_headlen+0x210/0x210 [ 203.480897][ T7910] ? slab_build_skb+0x25f/0x3f0 [ 203.485796][ T7910] ? convert___skb_to_skb+0x3d/0x590 [ 203.491140][ T7910] bpf_prog_test_run_skb+0xad2/0x12b0 [ 203.496585][ T7910] ? cpu_online+0x60/0x60 [ 203.500966][ T7910] bpf_prog_test_run+0x321/0x390 [ 203.505957][ T7910] __sys_bpf+0x49d/0x890 [ 203.510257][ T7910] ? bpf_link_show_fdinfo+0x390/0x390 [ 203.515698][ T7910] ? lock_chain_count+0x20/0x20 [ 203.520623][ T7910] __x64_sys_bpf+0x7c/0x90 [ 203.525097][ T7910] do_syscall_64+0x55/0xa0 [ 203.529558][ T7910] ? clear_bhb_loop+0x40/0x90 [ 203.534287][ T7910] ? clear_bhb_loop+0x40/0x90 [ 203.539023][ T7910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.544971][ T7910] RIP: 0033:0x7f801cb9cdd9 [ 203.549441][ T7910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.569097][ T7910] RSP: 002b:00007f801daa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.577563][ T7910] RAX: ffffffffffffffda RBX: 00007f801ce15fa0 RCX: 00007f801cb9cdd9 [ 203.585588][ T7910] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 203.593612][ T7910] RBP: 00007f801daa3090 R08: 0000000000000000 R09: 0000000000000000 [ 203.601630][ T7910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.609657][ T7910] R13: 00007f801ce16038 R14: 00007f801ce15fa0 R15: 00007ffd9ac6aea8 [ 203.617706][ T7910] [ 204.788831][ T7951] netlink: 'syz.0.604': attribute type 3 has an invalid length. [ 204.832813][ T7951] netlink: 'syz.0.604': attribute type 6 has an invalid length. [ 204.842110][ T7951] __nla_validate_parse: 1 callbacks suppressed [ 204.842126][ T7951] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.604'. [ 205.051912][ T7954] netlink: 60 bytes leftover after parsing attributes in process `syz.2.605'. [ 205.129929][ T7954] netlink: 60 bytes leftover after parsing attributes in process `syz.2.605'. [ 205.227261][ T7963] netlink: 'syz.3.608': attribute type 29 has an invalid length. [ 205.246203][ T7963] netlink: 'syz.3.608': attribute type 29 has an invalid length. [ 205.254645][ T7962] netlink: 'syz.3.608': attribute type 29 has an invalid length. [ 205.264296][ T7963] netlink: 'syz.3.608': attribute type 29 has an invalid length. [ 205.701816][ T7981] syz.1.612[7981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.701969][ T7981] syz.1.612[7981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.524342][ T8004] netlink: 180 bytes leftover after parsing attributes in process `syz.3.620'. [ 206.742245][ T8010] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.622'. [ 206.761744][ T8011] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.622'. [ 206.966151][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 206.972302][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 206.979531][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.985683][ T5082] Bluetooth: hci0: command 0x0406 tx timeout [ 207.187587][ T8016] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.623'. [ 207.240454][ T8015] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.623'. [ 209.486395][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'. [ 209.502138][ T8024] netlink: 152 bytes leftover after parsing attributes in process `syz.0.624'. [ 210.154504][ T8023] delete_channel: no stack [ 210.385839][ T8040] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.393827][ T8040] netlink: 1 bytes leftover after parsing attributes in process `syz.3.630'. [ 210.428075][ T8043] syz.0.632[8043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.428220][ T8043] syz.0.632[8043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.491576][ T8065] FAULT_INJECTION: forcing a failure. [ 211.491576][ T8065] name failslab, interval 1, probability 0, space 0, times 0 [ 211.515613][ T8065] CPU: 1 PID: 8065 Comm: syz.3.637 Not tainted syzkaller #0 [ 211.522959][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.533074][ T8065] Call Trace: [ 211.536412][ T8065] [ 211.539422][ T8065] dump_stack_lvl+0x18c/0x250 [ 211.544177][ T8065] ? show_regs_print_info+0x20/0x20 [ 211.549480][ T8065] ? load_image+0x420/0x420 [ 211.554077][ T8065] should_fail_ex+0x39d/0x4d0 [ 211.558828][ T8065] should_failslab+0x9/0x20 [ 211.563411][ T8065] slab_pre_alloc_hook+0x59/0x310 [ 211.568512][ T8065] ? ip_finish_output2+0xb04/0x11e0 [ 211.573767][ T8065] kmem_cache_alloc_node+0x60/0x320 [ 211.579031][ T8065] ? __alloc_skb+0x103/0x2c0 [ 211.583678][ T8065] __alloc_skb+0x103/0x2c0 [ 211.588151][ T8065] ip_frag_next+0xd1/0xaf0 [ 211.593156][ T8065] ip_do_fragment+0x76f/0x1760 [ 211.597976][ T8065] ? __ip_local_out+0x5f0/0x5f0 [ 211.602901][ T8065] ? ip_fragment+0x210/0x210 [ 211.607543][ T8065] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 211.612456][ T8065] ip_output+0x2a1/0x3b0 [ 211.616756][ T8065] ? ip_output+0x60/0x3b0 [ 211.621134][ T8065] iptunnel_xmit+0x4f0/0x920 [ 211.625776][ T8065] ip_tunnel_xmit+0x1cbc/0x2410 [ 211.630670][ T8065] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 211.635729][ T8065] ? validate_xmit_xfrm+0xbc/0x12c0 [ 211.640964][ T8065] ? gre_build_header+0x25b/0x990 [ 211.646030][ T8065] ipgre_xmit+0x7a6/0xb20 [ 211.650405][ T8065] dev_hard_start_xmit+0x246/0x740 [ 211.655576][ T8065] __dev_queue_xmit+0x19a3/0x3660 [ 211.660652][ T8065] ? __dev_queue_xmit+0x265/0x3660 [ 211.665812][ T8065] ? __kmem_cache_alloc_node+0x13a/0x250 [ 211.671495][ T8065] ? netdev_core_pick_tx+0x340/0x340 [ 211.676823][ T8065] ? skb_release_data+0x1d1/0x7b0 [ 211.681895][ T8065] __bpf_tx_skb+0x189/0x250 [ 211.686434][ T8065] bpf_clone_redirect+0x30f/0x4a0 [ 211.691515][ T8065] ? bpf_test_run+0x174/0x870 [ 211.696231][ T8065] bpf_prog_208b094576c80b22+0x5e/0x63 [ 211.701720][ T8065] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 211.707771][ T8065] ? lock_chain_count+0x20/0x20 [ 211.712744][ T8065] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 211.718754][ T8065] ? lockdep_softirqs_on+0x580/0x580 [ 211.724067][ T8065] ? lock_chain_count+0x20/0x20 [ 211.728948][ T8065] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 211.735229][ T8065] ? __local_bh_disable_ip+0x108/0x1a0 [ 211.740714][ T8065] ? __cant_sleep+0x220/0x220 [ 211.745423][ T8065] ? __local_bh_enable_ip+0x13a/0x1c0 [ 211.750830][ T8065] ? _local_bh_enable+0xa0/0xa0 [ 211.755710][ T8065] ? bpf_test_run+0x174/0x870 [ 211.760436][ T8065] ? kvm_sched_clock_read+0x11/0x20 [ 211.765719][ T8065] bpf_test_run+0x4fa/0x870 [ 211.770271][ T8065] ? bpf_test_run+0x174/0x870 [ 211.774987][ T8065] ? convert___skb_to_skb+0x590/0x590 [ 211.780395][ T8065] ? eth_get_headlen+0x210/0x210 [ 211.785383][ T8065] ? slab_build_skb+0x25f/0x3f0 [ 211.790263][ T8065] ? convert___skb_to_skb+0x3d/0x590 [ 211.795590][ T8065] bpf_prog_test_run_skb+0xad2/0x12b0 [ 211.801018][ T8065] ? cpu_online+0x60/0x60 [ 211.805393][ T8065] bpf_prog_test_run+0x321/0x390 [ 211.810368][ T8065] __sys_bpf+0x49d/0x890 [ 211.814650][ T8065] ? bpf_link_show_fdinfo+0x390/0x390 [ 211.820068][ T8065] ? lock_chain_count+0x20/0x20 [ 211.824962][ T8065] __x64_sys_bpf+0x7c/0x90 [ 211.829410][ T8065] do_syscall_64+0x55/0xa0 [ 211.833855][ T8065] ? clear_bhb_loop+0x40/0x90 [ 211.838565][ T8065] ? clear_bhb_loop+0x40/0x90 [ 211.843272][ T8065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.849204][ T8065] RIP: 0033:0x7f801cb9cdd9 [ 211.853649][ T8065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.873284][ T8065] RSP: 002b:00007f801daa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.881732][ T8065] RAX: ffffffffffffffda RBX: 00007f801ce15fa0 RCX: 00007f801cb9cdd9 [ 211.889739][ T8065] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 211.897756][ T8065] RBP: 00007f801daa3090 R08: 0000000000000000 R09: 0000000000000000 [ 211.905757][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.913746][ T8065] R13: 00007f801ce16038 R14: 00007f801ce15fa0 R15: 00007ffd9ac6aea8 [ 211.921793][ T8065] [ 212.074301][ T8068] netlink: 'syz.0.638': attribute type 33 has an invalid length. [ 212.112881][ T8068] netlink: 152 bytes leftover after parsing attributes in process `syz.0.638'. [ 214.066689][ T8089] netlink: 'syz.3.645': attribute type 2 has an invalid length. [ 214.074873][ T8089] netlink: 'syz.3.645': attribute type 8 has an invalid length. [ 214.120062][ T8089] netlink: 132 bytes leftover after parsing attributes in process `syz.3.645'. [ 215.492748][ T8120] netlink: 'syz.0.656': attribute type 2 has an invalid length. [ 215.518781][ T8120] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.656'. [ 215.789530][ T8135] netlink: 'syz.1.659': attribute type 10 has an invalid length. [ 215.854321][ T8135] macvlan1: entered allmulticast mode [ 215.910794][ T8135] veth1_vlan: entered allmulticast mode [ 216.011523][ T8135] macvlan1: entered promiscuous mode [ 216.110971][ T8135] team0: Port device macvlan1 added [ 216.384292][ T8149] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.664'. [ 217.550562][ T8175] netlink: 'syz.3.671': attribute type 21 has an invalid length. [ 217.902739][ T8185] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 217.950018][ T8185] macvlan1: entered allmulticast mode [ 217.988057][ T8185] veth1_vlan: entered allmulticast mode [ 218.050794][ T8185] team0: Port device macvlan1 added [ 218.164275][ T8193] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.676'. [ 218.183560][ T8196] netlink: 132 bytes leftover after parsing attributes in process `syz.1.676'. [ 218.610674][ T8204] netlink: 43243 bytes leftover after parsing attributes in process `syz.3.679'. [ 218.780411][ T5783] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 219.037767][ T8218] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 219.069539][ T8218] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.684'. [ 219.110329][ T8218] netlink: 1 bytes leftover after parsing attributes in process `syz.0.684'. [ 220.660634][ T8252] netlink: 'syz.2.695': attribute type 11 has an invalid length. [ 220.704992][ T8252] netlink: 176 bytes leftover after parsing attributes in process `syz.2.695'. [ 221.164631][ T8263] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 222.024361][ T8267] netlink: 'syz.1.699': attribute type 6 has an invalid length. [ 222.102932][ T8267] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 222.183741][ T8283] netlink: 'syz.1.699': attribute type 5 has an invalid length. [ 222.186092][ T8267] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.699'. [ 222.285572][ T8283] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 222.293377][ T8283] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.699'. [ 223.047193][ T8292] netlink: 'syz.3.706': attribute type 10 has an invalid length. [ 223.068087][ T8292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.706'. [ 223.084300][ T8292] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 224.699373][ T8330] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.719'. [ 224.731352][ T8330] netlink: zone id is out of range [ 224.776118][ T8330] netlink: zone id is out of range [ 224.809096][ T8330] netlink: zone id is out of range [ 224.815019][ T8330] netlink: zone id is out of range [ 224.848359][ T8330] netlink: zone id is out of range [ 224.857920][ T8330] netlink: zone id is out of range [ 224.863676][ T8330] netlink: zone id is out of range [ 224.895437][ T8330] netlink: zone id is out of range [ 224.905002][ T8330] netlink: zone id is out of range [ 226.779347][ T8377] @ÿ: renamed from bond_slave_0 (while UP) [ 226.845817][ T8377] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.735'. [ 227.642905][ T8386] netlink: 'syz.2.736': attribute type 1 has an invalid length. [ 227.675562][ T8386] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.736'. [ 227.695083][ T8386] netlink: 9 bytes leftover after parsing attributes in process `syz.2.736'. [ 227.763537][ T8386] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.736'. [ 227.806263][ T8386] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.736'. [ 227.847949][ T8386] netlink: 'syz.2.736': attribute type 2 has an invalid length. [ 227.889237][ T8386] netlink: 14191 bytes leftover after parsing attributes in process `syz.2.736'. [ 227.940743][ T8390] netlink: 'syz.1.737': attribute type 11 has an invalid length. [ 227.953638][ T8390] netlink: 176 bytes leftover after parsing attributes in process `syz.1.737'. [ 228.400816][ T8407] netlink: 'syz.3.741': attribute type 22 has an invalid length. [ 228.462529][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 229.349425][ T8409] syzkaller0: entered promiscuous mode [ 229.355100][ T8409] syzkaller0: entered allmulticast mode [ 230.689959][ T8440] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.752'. [ 232.244777][ T8442] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 232.258342][ T8442] hsr_slave_0: left promiscuous mode [ 232.265284][ T8442] hsr_slave_1: left promiscuous mode [ 232.786221][ T8460] netlink: 180 bytes leftover after parsing attributes in process `syz.3.758'. [ 232.799847][ T5783] Bluetooth: hci1: ISO packet for unknown connection handle 2097 [ 233.233180][ T8470] netlink: 'syz.0.762': attribute type 10 has an invalid length. [ 233.243375][ T8470] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.762'. [ 233.553907][ T8478] netlink: 132 bytes leftover after parsing attributes in process `syz.3.765'. [ 234.699692][ T8499] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.771'. [ 234.750458][ T8504] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.773'. [ 235.078822][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 235.094781][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 235.100127][ T8501] netlink: 'syz.1.772': attribute type 3 has an invalid length. [ 235.111789][ T8501] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.772'. [ 235.285108][ T8521] netlink: 'syz.2.776': attribute type 33 has an invalid length. [ 235.306807][ T8521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.776'. [ 235.342269][ T8521] netlink: 'syz.2.776': attribute type 10 has an invalid length. [ 235.388349][ T8521] team0: Device veth0_vlan failed to register rx_handler [ 235.962390][ T8538] netlink: 'syz.1.782': attribute type 25 has an invalid length. [ 235.975752][ T8538] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.782'. [ 236.230732][ T8547] netlink: 'syz.2.784': attribute type 10 has an invalid length. [ 236.256591][ T6205] tipc: Subscription rejected, illegal request [ 236.271432][ T8547] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 236.332284][ T8547] batman_adv: batadv0: Removing interface: ipvlan1 [ 236.367113][ T8547] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 237.017485][ T8564] netlink: 'syz.2.789': attribute type 6 has an invalid length. [ 237.389507][ T8579] netlink: 'syz.3.796': attribute type 64 has an invalid length. [ 237.433286][ T8580] netlink: 'syz.2.795': attribute type 10 has an invalid length. [ 238.223642][ T8597] netlink: 'syz.3.802': attribute type 2 has an invalid length. [ 238.245600][ T8598] netlink: 'syz.3.802': attribute type 2 has an invalid length. [ 238.292979][ T8594] __nla_validate_parse: 1 callbacks suppressed [ 238.292999][ T8594] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.802'. [ 238.319415][ T8594] net_ratelimit: 13 callbacks suppressed [ 238.319431][ T8594] openvswitch: netlink: Key type 29 is not supported [ 238.342450][ T8597] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.802'. [ 238.371652][ T8597] openvswitch: netlink: Key type 29 is not supported [ 238.473350][ T8602] netlink: 'syz.0.804': attribute type 11 has an invalid length. [ 238.484317][ T8602] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.804'. [ 238.682667][ T8604] netlink: 123072 bytes leftover after parsing attributes in process `syz.1.805'. [ 239.027412][ T8620] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.807'. [ 241.430671][ T8679] syz.1.826[8679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.431692][ T8679] syz.1.826[8679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.445387][ T8679] validate_nla: 1 callbacks suppressed [ 241.445406][ T8679] netlink: 'syz.1.826': attribute type 10 has an invalid length. [ 241.526798][ T8679] netlink: 55 bytes leftover after parsing attributes in process `syz.1.826'. [ 241.903097][ T8679] veth1_vlan (unregistering): left allmulticast mode [ 242.033129][ T8679] macvlan1 (unregistering): left promiscuous mode [ 242.044534][ T8679] team0: Port device macvlan1 removed [ 242.373689][ T8707] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.835'. [ 242.485034][ T8707] wg2: entered promiscuous mode [ 242.491989][ T8707] wg2: entered allmulticast mode [ 242.734553][ T8717] netlink: 'syz.1.839': attribute type 1 has an invalid length. [ 242.760059][ T8717] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.839'. [ 242.768691][ T8719] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 242.778721][ T8719] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.841'. [ 243.234634][ T8735] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.847'. [ 244.679500][ T8791] netlink: 'syz.2.861': attribute type 10 has an invalid length. [ 244.701512][ T8791] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 244.713268][ T8791] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 246.552145][ T8817] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 246.592668][ T8817] netlink: 'syz.3.870': attribute type 3 has an invalid length. [ 246.621454][ T8817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.870'. [ 246.783104][ T8832] netlink: 'syz.0.874': attribute type 9 has an invalid length. [ 246.800032][ T8832] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.874'. [ 246.918994][ T8836] netlink: 'syz.0.874': attribute type 9 has an invalid length. [ 246.940273][ T8836] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.874'. [ 246.957778][ T8834] delete_channel: no stack [ 246.974010][ T8840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.259703][ T8847] FAULT_INJECTION: forcing a failure. [ 247.259703][ T8847] name failslab, interval 1, probability 0, space 0, times 0 [ 247.272504][ T8847] CPU: 0 PID: 8847 Comm: syz.1.881 Not tainted syzkaller #0 [ 247.279848][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.289967][ T8847] Call Trace: [ 247.293280][ T8847] [ 247.296246][ T8847] dump_stack_lvl+0x18c/0x250 [ 247.300978][ T8847] ? show_regs_print_info+0x20/0x20 [ 247.306226][ T8847] ? load_image+0x420/0x420 [ 247.310778][ T8847] ? mark_lock+0x94/0x320 [ 247.315148][ T8847] should_fail_ex+0x39d/0x4d0 [ 247.319873][ T8847] should_failslab+0x9/0x20 [ 247.324421][ T8847] slab_pre_alloc_hook+0x59/0x310 [ 247.329491][ T8847] kmem_cache_alloc+0x5a/0x2d0 [ 247.334317][ T8847] ? dst_alloc+0x105/0x170 [ 247.338774][ T8847] dst_alloc+0x105/0x170 [ 247.343063][ T8847] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 247.349183][ T8847] ? ip_route_output_key_hash+0x13d/0x330 [ 247.354940][ T8847] ip_route_output_key_hash+0x1f3/0x330 [ 247.360523][ T8847] ? ip_route_input_rcu+0x30f0/0x30f0 [ 247.365945][ T8847] ? __asan_memset+0x22/0x40 [ 247.370577][ T8847] ip_route_output_flow+0x2a/0x150 [ 247.375729][ T8847] ip_tunnel_xmit+0x9b1/0x2410 [ 247.380555][ T8847] ? ip_tunnel_xmit+0x130/0x2410 [ 247.385559][ T8847] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 247.390652][ T8847] ? validate_xmit_xfrm+0xbc/0x12c0 [ 247.395917][ T8847] ? gre_build_header+0x25b/0x990 [ 247.400990][ T8847] ipgre_xmit+0x7a6/0xb20 [ 247.405372][ T8847] dev_hard_start_xmit+0x246/0x740 [ 247.410535][ T8847] __dev_queue_xmit+0x19a3/0x3660 [ 247.415613][ T8847] ? __dev_queue_xmit+0x265/0x3660 [ 247.420761][ T8847] ? __kmem_cache_alloc_node+0x13a/0x250 [ 247.426427][ T8847] ? netdev_core_pick_tx+0x340/0x340 [ 247.431752][ T8847] ? skb_release_data+0x1d1/0x7b0 [ 247.436835][ T8847] __bpf_tx_skb+0x189/0x250 [ 247.441407][ T8847] bpf_clone_redirect+0x30f/0x4a0 [ 247.446527][ T8847] bpf_prog_208b094576c80b22+0x5e/0x63 [ 247.452029][ T8847] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 247.458049][ T8847] ? preempt_schedule+0xc0/0xd0 [ 247.462935][ T8847] ? perf_trace_preemptirq_template+0xac/0x330 [ 247.469132][ T8847] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 247.475147][ T8847] ? lockdep_softirqs_on+0x580/0x580 [ 247.480465][ T8847] ? lock_chain_count+0x20/0x20 [ 247.485350][ T8847] ? __local_bh_disable_ip+0x108/0x1a0 [ 247.490839][ T8847] ? __cant_sleep+0x220/0x220 [ 247.495548][ T8847] ? __local_bh_enable_ip+0x13a/0x1c0 [ 247.500943][ T8847] ? _local_bh_enable+0xa0/0xa0 [ 247.505826][ T8847] ? bpf_test_timer_continue+0x135/0x380 [ 247.511498][ T8847] ? bpf_test_run+0x174/0x870 [ 247.516201][ T8847] bpf_test_run+0x2df/0x870 [ 247.520742][ T8847] ? bpf_test_run+0x174/0x870 [ 247.525449][ T8847] ? convert___skb_to_skb+0x590/0x590 [ 247.530891][ T8847] ? eth_get_headlen+0x210/0x210 [ 247.535901][ T8847] ? slab_build_skb+0x25f/0x3f0 [ 247.540777][ T8847] ? convert___skb_to_skb+0x3d/0x590 [ 247.546102][ T8847] bpf_prog_test_run_skb+0xad2/0x12b0 [ 247.551521][ T8847] ? cpu_online+0x60/0x60 [ 247.555969][ T8847] bpf_prog_test_run+0x321/0x390 [ 247.560963][ T8847] __sys_bpf+0x49d/0x890 [ 247.565246][ T8847] ? bpf_link_show_fdinfo+0x390/0x390 [ 247.570657][ T8847] ? lock_chain_count+0x20/0x20 [ 247.575553][ T8847] __x64_sys_bpf+0x7c/0x90 [ 247.580006][ T8847] do_syscall_64+0x55/0xa0 [ 247.584446][ T8847] ? clear_bhb_loop+0x40/0x90 [ 247.589158][ T8847] ? clear_bhb_loop+0x40/0x90 [ 247.593886][ T8847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.599813][ T8847] RIP: 0033:0x7f678319cdd9 [ 247.604262][ T8847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.623905][ T8847] RSP: 002b:00007f6784045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.632396][ T8847] RAX: ffffffffffffffda RBX: 00007f6783415fa0 RCX: 00007f678319cdd9 [ 247.640399][ T8847] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 247.648397][ T8847] RBP: 00007f6784045090 R08: 0000000000000000 R09: 0000000000000000 [ 247.656414][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.664453][ T8847] R13: 00007f6783416038 R14: 00007f6783415fa0 R15: 00007ffcde1d75d8 [ 247.672475][ T8847] [ 247.878292][ T8848] netlink: 'syz.0.879': attribute type 10 has an invalid length. [ 247.919766][ T8848] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 247.927103][ T8848] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 248.084833][ T8848] team0: Port device wlan1 added [ 248.342084][ T8871] netlink: 'syz.0.886': attribute type 9 has an invalid length. [ 248.366157][ T8871] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.886'. [ 248.883955][ T8884] netlink: 'syz.2.889': attribute type 33 has an invalid length. [ 248.915603][ T8884] netlink: 160 bytes leftover after parsing attributes in process `syz.2.889'. [ 249.215418][ T8894] netlink: 76 bytes leftover after parsing attributes in process `syz.3.891'. [ 249.475559][ T8899] netlink: 'syz.0.893': attribute type 21 has an invalid length. [ 249.641133][ T8907] netlink: 'syz.2.895': attribute type 10 has an invalid length. [ 249.739434][ T8907] vlan0: left promiscuous mode [ 249.744592][ T8907] vlan0: left allmulticast mode [ 249.789886][ T8907] veth0_vlan: left allmulticast mode [ 249.880408][ T8909] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.896'. [ 249.896313][ T8910] netlink: 703 bytes leftover after parsing attributes in process `syz.0.896'. [ 250.157522][ T8918] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.899'. [ 250.172124][ T8919] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.899'. [ 250.593467][ T8929] team0: Port device team_slave_0 removed [ 251.610547][ T8950] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 253.330653][ T8992] netlink: set zone limit has 8 unknown bytes [ 253.406166][ T8998] __nla_validate_parse: 1 callbacks suppressed [ 253.406186][ T8998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.920'. [ 253.934969][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.975978][ T8998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.920'. [ 254.009750][ T9005] tap0: tun_chr_ioctl cmd 2147767506 [ 254.816208][ C1] [ 254.816217][ C1] ================================ [ 254.816223][ C1] WARNING: inconsistent lock state [ 254.816235][ C1] syzkaller #0 Not tainted [ 254.816245][ C1] -------------------------------- [ 254.816250][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 254.816259][ C1] syz.0.929/9031 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 254.816279][ C1] ffff88802cfa3218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 254.816331][ C1] {INITIAL USE} state was registered at: [ 254.816343][ C1] lock_acquire+0x19e/0x420 [ 254.816365][ C1] _raw_spin_lock+0x2e/0x40 [ 254.816386][ C1] htab_lock_bucket+0x17d/0x300 [ 254.816404][ C1] htab_map_update_elem+0x229/0x1040 [ 254.816422][ C1] bpf_map_update_value+0x660/0x720 [ 254.816438][ C1] generic_map_update_batch+0x5ec/0x810 [ 254.816455][ C1] bpf_map_do_batch+0x3d7/0x610 [ 254.816479][ C1] __sys_bpf+0x381/0x890 [ 254.816496][ C1] __x64_sys_bpf+0x7c/0x90 [ 254.816512][ C1] do_syscall_64+0x55/0xa0 [ 254.816528][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.816551][ C1] irq event stamp: 1240 [ 254.816557][ C1] hardirqs last enabled at (1239): [] exc_debug+0xf5/0x140 [ 254.816581][ C1] hardirqs last disabled at (1240): [] exc_debug+0x73/0x140 [ 254.816604][ C1] softirqs last enabled at (1208): [] bpf_map_alloc_id+0x87/0xd0 [ 254.816630][ C1] softirqs last disabled at (1206): [] bpf_map_alloc_id+0x21/0xd0 [ 254.816655][ C1] [ 254.816655][ C1] other info that might help us debug this: [ 254.816660][ C1] Possible unsafe locking scenario: [ 254.816660][ C1] [ 254.816665][ C1] CPU0 [ 254.816668][ C1] ---- [ 254.816671][ C1] lock(&htab->lockdep_key); [ 254.816684][ C1] [ 254.816687][ C1] lock(&htab->lockdep_key); [ 254.816698][ C1] [ 254.816698][ C1] *** DEADLOCK *** [ 254.816698][ C1] [ 254.816703][ C1] no locks held by syz.0.929/9031. [ 254.816711][ C1] [ 254.816711][ C1] stack backtrace: [ 254.816717][ C1] CPU: 1 PID: 9031 Comm: syz.0.929 Not tainted syzkaller #0 [ 254.816734][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.816745][ C1] Call Trace: [ 254.816753][ C1] <#DB> [ 254.816760][ C1] dump_stack_lvl+0x18c/0x250 [ 254.816794][ C1] ? show_regs_print_info+0x20/0x20 [ 254.816829][ C1] ? print_usage_bug+0x475/0x690 [ 254.816853][ C1] ? verify_lock_unused+0x18/0x140 [ 254.816882][ C1] lock_acquire+0x2c2/0x420 [ 254.816905][ C1] ? htab_lock_bucket+0x17d/0x300 [ 254.816927][ C1] ? read_lock_is_recursive+0x20/0x20 [ 254.816958][ C1] _raw_spin_lock+0x2e/0x40 [ 254.816981][ C1] ? htab_lock_bucket+0x17d/0x300 [ 254.817003][ C1] htab_lock_bucket+0x17d/0x300 [ 254.817028][ C1] ? htab_lru_map_delete_node+0x760/0x760 [ 254.817051][ C1] ? look_up_lock_class+0x75/0x140 [ 254.817076][ C1] ? verify_lock_unused+0x18/0x140 [ 254.817100][ C1] ? htab_map_hash+0x1d7/0x330 [ 254.817136][ C1] htab_map_delete_elem+0x1a4/0x650 [ 254.817161][ C1] ? htab_map_update_elem+0x1040/0x1040 [ 254.817183][ C1] ? perf_callchain+0x220/0x220 [ 254.817208][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 254.817229][ C1] bpf_overflow_handler+0x43f/0x510 [ 254.817262][ C1] ? bpf_overflow_handler+0xde/0x510 [ 254.817289][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 254.817322][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 254.817347][ C1] __perf_event_overflow+0x447/0x630 [ 254.817374][ C1] perf_swevent_overflow+0x268/0x340 [ 254.817405][ C1] ? perf_event_switch_output+0x790/0x790 [ 254.817439][ C1] perf_swevent_event+0x45c/0x570 [ 254.817464][ C1] ? perf_tp_event+0x1520/0x1520 [ 254.817493][ C1] perf_bp_event+0x319/0x430 [ 254.817514][ C1] ? look_up_lock_class+0x75/0x140 [ 254.817541][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 254.817564][ C1] ? rcu_is_watching+0x15/0xb0 [ 254.817591][ C1] ? lock_release+0xb5/0x8c0 [ 254.817633][ C1] ? lock_acquire+0x2c2/0x420 [ 254.817670][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 254.817699][ C1] notifier_call_chain+0x197/0x380 [ 254.817727][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 254.817753][ C1] atomic_notifier_call_chain+0xda/0x180 [ 254.817780][ C1] notify_die+0x145/0x1a0 [ 254.817807][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 254.817836][ C1] ? rcu_is_watching+0x15/0xb0 [ 254.817864][ C1] notify_debug+0x2e/0x50 [ 254.817883][ C1] exc_debug+0xde/0x140 [ 254.817904][ C1] asm_exc_debug+0x1e/0x40 [ 254.817929][ C1] RIP: 0010:rep_movs_alternative+0x15/0x90 [ 254.817951][ C1] Code: 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 [ 254.817969][ C1] RSP: 0018:ffffc900030a7cb0 EFLAGS: 00040202 [ 254.817986][ C1] RAX: ffffffff842a1f6e RBX: 0000000000000004 RCX: 0000000000000001 [ 254.818000][ C1] RDX: 0000000000000001 RSI: 0000200000000303 RDI: ffff888076043f53 [ 254.818014][ C1] RBP: 0000200000000300 R08: 0000000000000003 R09: 0000000000000004 [ 254.818026][ C1] R10: dffffc0000000000 R11: ffffed100ec087ea R12: 0000200000000304 [ 254.818041][ C1] R13: ffff88802bfc0000 R14: ffff888076043f50 R15: 0000200000000300 [ 254.818060][ C1] ? _copy_from_user+0x5e/0xe0 [ 254.818090][ C1] [ 254.818096][ C1] [ 254.818109][ C1] _copy_from_user+0x8b/0xe0 [ 254.818136][ C1] vmemdup_user+0xac/0x1e0 [ 254.818164][ C1] map_lookup_elem+0x276/0x7c0 [ 254.818185][ C1] ? __might_fault+0xaa/0x120 [ 254.818206][ C1] ? security_bpf+0x7e/0xa0 [ 254.818232][ C1] __sys_bpf+0x438/0x890 [ 254.818255][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 254.818284][ C1] ? lock_chain_count+0x20/0x20 [ 254.818310][ C1] __x64_sys_bpf+0x7c/0x90 [ 254.818330][ C1] do_syscall_64+0x55/0xa0 [ 254.818346][ C1] ? clear_bhb_loop+0x40/0x90 [ 254.818370][ C1] ? clear_bhb_loop+0x40/0x90 [ 254.818396][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.818421][ C1] RIP: 0033:0x7f08e659cdd9 [ 254.818437][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.818454][ C1] RSP: 002b:00007f08e7512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.818474][ C1] RAX: ffffffffffffffda RBX: 00007f08e6815fa0 RCX: 00007f08e659cdd9 [ 254.818488][ C1] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000001 [ 254.818500][ C1] RBP: 00007f08e6632d69 R08: 0000000000000000 R09: 0000000000000000 [ 254.818512][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.818524][ C1] R13: 00007f08e6816038 R14: 00007f08e6815fa0 R15: 00007fff8ace3db8 [ 254.818547][ C1] [ 256.009253][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.015720][ T1288] ieee802154 phy1 wpan1: encryption failed: -22