last executing test programs: 2m36.592257038s ago: executing program 0 (id=2501): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0xfffffeff) sendmsg$inet(r0, 0x0, 0x3406c096) 2m36.407856881s ago: executing program 0 (id=2504): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 43) 2m36.253164415s ago: executing program 0 (id=2505): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120cfe014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44) 2m36.146312178s ago: executing program 0 (id=2507): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x180}, 0x50) 2m21.828337449s ago: executing program 0 (id=2508): r0 = socket$kcm(0x10, 0x2, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) r1 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r1, 0x29, 0x3, 0x0, 0x500) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4000003, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc0ffffff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4a046) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffafb5020000140000008500000083000000bc0900000000000055090100000009007b00000000000000bf91000000000000b7020000000000008500000000000024b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x2, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unlink(&(0x7f0000000140)='./cgroup\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x6, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0}, 0x8000, 0x7, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r5, 0x0, 0xfe33) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xe, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd93}, [@jmp={0x5, 0x1, 0xc, 0x9, 0xb, 0xffffffffffffffe0, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x3, 0x5, 0x3, 0xffffffffffffffe0, 0x14}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x0, 0x0, 0x3, 0x8, 0xa, 0x20, 0xffffffffffffffff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @map_val={0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xffff5e33}, @ldst={0x3, 0x3, 0x0, 0x5, 0x2, 0x20, 0xfffffffffffffffc}]}, &(0x7f0000000700)='GPL\x00', 0x1e5, 0xe2, &(0x7f0000000740)=""/226, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0x9, 0x7ef, 0x3b0}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000880)=[r4, r7, r7, r4], &(0x7f00000008c0)=[{0x1, 0x3, 0x6, 0x5}, {0x4, 0x3, 0xd, 0x1}, {0x1, 0x2, 0x8, 0x8}, {0x2, 0x4, 0xb, 0xb}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f80)={r8, 0x0, 0x0, 0x4f, &(0x7f00000009c0), &(0x7f0000001dc0)=""/79, 0x8, 0x0, 0xab, 0x39, &(0x7f0000001e40)="d9e7bfae778e6da20fd7a66de84a844775757c9410f5e615741d5fefb74e65a6a0360c5039392e8b95174554121050346785b07fe89cb9c6546ceb389406baaef68673eeca6e57dd8fbfe4260736359beb32e73582480fc19260b40b8f4412f1cfd3ecac8190be256ee1f3cb3a88d4966ef5892f3942e5672ce7aa62310c1489818615c3d5c8708ad99d29b532adf265d2971c19cc05ae7c9655257faa69febdb694a6aaf69ba73963c35b", &(0x7f0000001f00)="f9e0d431099cede476c01503f3f769a73a2f5815bc290034e5ae80cd9ab63065ed0095a6b0631f593f2bbb17ce373c3a8664c49d10fb2395f0", 0x4, 0x0, 0xffffffff}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r9, 0x0, 0x20000400) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000fdffffff00000000fdffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000f0014008500000086000000b708000000000000dbaaf8fff1000000b5080000010000087b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91224fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m21.445670158s ago: executing program 0 (id=2595): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000004", @ANYRES32], 0x0}, 0x90) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (fail_nth: 9) 2m6.204508689s ago: executing program 32 (id=2595): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000004", @ANYRES32], 0x0}, 0x90) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (fail_nth: 9) 3.368699406s ago: executing program 2 (id=3584): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x108808, 0x5, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xc}, 0xf7e5) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="a315f3f5c8b485312e50ce6141539963f4ce8124239a506e0b4336ec68fd6e547331cbf0a6624e9022fe78329a81e94d61c19cd5cf7117ec5fb787330c93856dfe67e7eeb1aadbea9885de08643398fab25ee8", 0x53}, {&(0x7f0000000180)="c1d81495ab5569dd49d229e2b25340690d99f8f9d75aa36e522ef54957e0afa1b6eebfede3c046db2e250c3c9fa0f2202d7bdc46c1cc06380c680e4c08b397c5070f3d5714b9e71059ec1c131bd4a2a094a67f6577842b16cc2b770d680fe01c39c78e344dc6867fb24cb2ea0db57cfd47cf5295679613e20fa67766d99e", 0x7e}, {&(0x7f0000000200)="4e71de70cf28f213027170e04ac8baa7ff3729311880a1fc49d3b41bd0074b4e02e1ed657b52163032492c8c4f7174195edc1bf77603db73489531f2e4d49868bc75e2086b8bc0751333a1949b71530365f718a85363797f16919b67d981c479264f81a88c0a0f27709f2556c98c2285402dc47d15f7d4993286e9c847bd732a5e83061aacbe915cc584f28396a4e8a9f9daffd61c76ecf17493847a14db0b4ad9feca8eeaa2fa6643840cffa0632893987f9b6b27f4423e7354c166f30e5469420e612e62d6348d697556ebd5", 0xcd}, {&(0x7f0000000300)="19e34341e189e0291979d17b92a9ee6ffe4c11684c4c01c610718427dab738ccd3636f5e8b963a73110e9b1bb5369bd6c34a7b312265be4f7d595768434f5c4aa2c8dbbf74195633271dd40b385f7384a34f0b56e525e1359d68e772f02b2bfd53f4c4c62918587b132115f4695f61c3ed52e27601da8e75d04b76fedb712a2da71bf5f1bdf4ca29c5275efbc11c6377a9c821", 0x93}], 0x4, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}, 0x4004090) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0) recvmsg$kcm(r1, 0x0, 0xc3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e817782db4cb904021d080006", 0x15}], 0x1}, 0x2002c040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r3) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x66) close(r0) 3.15115548s ago: executing program 4 (id=3586): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x6, 0x0, 0x0, 0x20, 0x36500, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x7602, 0x7, 0x306e, 0x3, 0x0, 0x6, 0x85}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x500, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB='\b'], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0xe0}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={r0}) 2.927251706s ago: executing program 4 (id=3589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000060000001200009500000000000000bf9c00000000000095"], &(0x7f0000000000)='GPL\x00', 0x6}, 0x94) 2.689625271s ago: executing program 4 (id=3592): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0010800000000000000000008000000000000052b3fb1e609c1a38ed142c454f73598184a6d77edbe10ac2aa067f04c1de58cf673ccbe4980304f77729c12de69b4ef242c23c610eb35ea768c5c2733a4fe2460b764a6d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d087c06007c06e8fe", 0x1a}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e2306", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc050) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="02", 0x1}, {0x0, 0x500}], 0x2}, 0x400c090) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1, 0x5, 0x4, 0xc}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r6 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r6, 0x0, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000000)=@phonet={0x23, 0x14, 0xc, 0xc0}, 0x80, 0x0}, 0x2400c019) 2.688969341s ago: executing program 2 (id=3600): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="f8", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x8100000, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.308436139s ago: executing program 1 (id=3593): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.307790349s ago: executing program 2 (id=3594): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c8139699ec02000066792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca137691d0edf8a2d09342e31f0da8a13513878629085e3cfb6162fc6d9f616d5bfb2f2d37addbe331db4535a8103c8c7b6a1635d7196aad3d4f8c41af664e6d8d3fcc7e115149f20290401b048d6b3d1fdfdd4911498b5dfc091e0409f5e897f7a2878e80dd34b9c9c2c67f5a09a4987e5b41ec87e29a97a02639be024577d52f76ea16c3178404298d600"/663], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) (async, rerun: 32) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) (rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x2}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x1000}) (rerun: 32) socketpair(0x1d, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811208000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x407}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e7002f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex, 0x13, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) 2.092470914s ago: executing program 1 (id=3596): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="e2620000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040042000000a8001600a400014020000400ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e425e86112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1be1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000827ffad95667e006dcdf63951d215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee0000000000", 0xcc}], 0x1}, 0x20040881) 2.032865725s ago: executing program 2 (id=3597): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x394b, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.984826876s ago: executing program 3 (id=3598): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x9b, 0x4, 0x1000, 0xfffff271, 0x6, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x7, 0x10, "090041c20949e0afc65b200dd6a0"}]}}}], 0x40}, 0x20002800) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r1, 0x7e0}, 0x38) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f00000008c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], 0x0, 0xfa, &(0x7f0000000bc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) sendmsg$inet(r0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="f19cccca465fa800aad09430fcc6007f7e882f47df421746bfffd2325ea26066c63795e43669f2eea4467f15703cec76c1373a8897dd78e3a52dd41ea854e40595f1ad60d85039f229c5ab0dc7882ad53db13ef9f76533a1c0d13258a4f9361806416ed951e3f75eb571fb36270790dd5dca568a2e66a42ce7310d1d2b87098c556c64713d21f83761a6452f28dfae5538b69ed4d7eed1630d9cf66ca553a60e1c960a4737ec36ed7a1dbefd54e3ef9ac77d2b4f686e1503fc0c2426568fc462bbec1db957", 0xc5}], 0x1, &(0x7f0000000e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010101, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast}}}], 0x90}, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x7, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) syz_clone(0x40000200, 0x0, 0x0, 0x0, 0x0, 0x0) 1.834474329s ago: executing program 1 (id=3599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xeb, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x8404, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0xfffffffffffffffc, 0xffffffff, 0x0, 0x100, 0x0, 0xff, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfeffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002280)=ANY=[], 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c000200", 0x10}], 0x1}, 0x10049014) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x29, 0x0, &(0x7f0000000280)="4e6f466c21233bd7f42b4dc8611a1e1088672ffa9153177f95ca88f2b010232a390e9e80d6c527972f", 0x0, 0x2, 0x0, 0x7}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000940)="38d26a3d9673399025aae4121e4207", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, r0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.684897513s ago: executing program 2 (id=3601): socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b0100ffc3e8fe55a11800150006001418030000120800040043000000a8001600a400014020000b00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711051000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000000)=""/65) syz_clone(0x11002000, &(0x7f00000001c0)="ef75abe60291d995454989f71fe21fc8cc70b46e66f2d8d069fb3ad9d3c40a17dcf93e1c93a4d8e1d29f91453ddd4fb5f21370ec194fbfd05efe8460bedfd3ec7716b75d4b8e958c6d9f6e38c60382ef1491da40c995f5cf9ff002cf8e07bfe3e300f6055911c8d8bde5c246a96cfb54386a1fc180c63d3ad3417c22408b534fbaa62d828808d9846913e8b35d928680c7a5a22ed7d95e7dc71d690e2c95c5e2111899e296", 0xa5, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="ca8408718b9e966f733c57a345173f58fb3a51bfa3e33ab229020a77a62eb0d30bce25568dd21b8651e93a111142fe742e11b732c040ff8d3cfa859a152fd7ab5767d96940df66a77961d5") perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7ff}, 0x8ac, 0x0, 0x0, 0x0, 0x1000000100, 0x8, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x10007, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$kcm(0x15, 0x5, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) 1.470999367s ago: executing program 4 (id=3602): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c20000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1}, 0x28) socketpair(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90224fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000500), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000001, 0x1, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r2}, 0x86) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11, r9}, 0xc) sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socketpair(0x1e, 0x80000, 0xd, &(0x7f0000000180)) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r1, 0x0, 0xfe33) 1.262599032s ago: executing program 3 (id=3603): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000002000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000079000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x31}, 0x94) 936.044229ms ago: executing program 3 (id=3604): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x81021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x446debb0, 0x3fff8000}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xd, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)}, 0x10182) (async) socket$kcm(0x1e, 0x4, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020059fe", 0x6}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94ea}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000080000000000000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008383d73c18000000000000005509010000c92d90c0f0546f6cc832abab729c000000950000000000000018500000040000000000009e4ba0da4f215901f73b4918e20000000000b702000001000000850000008500009b5aa90347f28435beb79d16b02c7c96b7c6b8e5aace92cacc6759501420cc7ea285a8eac642a1592a403a1a41ac006319ec706613fbe5d7ce184ff78227c830a1c654"], &(0x7f0000000680)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)}, 0x94) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x10021) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r0}, 0x18) 750.827943ms ago: executing program 3 (id=3605): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f00000002c0)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa19}, {{0x18, 0x1, 0x1, 0x0, r2, 0x0, 0x0, 0xfeff}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x3}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{0x0}], 0x1}, 0x4000001) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048811) 294.956423ms ago: executing program 1 (id=3606): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181224175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329924b8b39e6dc4b2077a4b9645d8e0a445ae2c7be53d66007d491ab0f6851a2cc1cffeed15f586a035c1a2888c56f43"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) (fail_nth: 98) 205.163825ms ago: executing program 4 (id=3607): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x3a) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac141410e0000001000000002c0000000000000000000004"], 0x50}, 0x0) recvmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000b40)=""/140, 0x8c}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f00000001c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000000d40)=""/4099, 0x1003}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000880)=""/120, 0x78}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000000940)=""/94, 0x5e}, {&(0x7f0000000400)=""/105, 0x69}, {&(0x7f0000000480)=""/48, 0x30}], 0x12}, 0x2122) 172.181176ms ago: executing program 3 (id=3608): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000081000000000000000400063018d000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 161.228256ms ago: executing program 1 (id=3609): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000e000000000000000010000008100000000000000b0000000000000000000000007000000831304"], 0xc8}, 0x24000000) 81.047578ms ago: executing program 2 (id=3610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35c22915}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x6300, 0x0, 0x0}, 0x50) 62.807438ms ago: executing program 1 (id=3611): r0 = syz_clone(0x40188100, &(0x7f00000001c0), 0x0, &(0x7f0000000240), &(0x7f0000000140), 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x102009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{0x0}], 0x1}, 0x9cdc2384056b48b8) (async) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r3, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffed3}, 0x4014) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) (async) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) (async) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180049e0f6c5930000030000000e000000000000190200000002000000000000070000f4c48379fccdbb00d770598d981b33aaeb1dd3fb81"], 0x0, 0x33, 0x0, 0x0, 0xfffffffa}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x240000, 0x0) (async) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x22) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) (async) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) (async) close(r4) (async) sendmsg$inet(r1, &(0x7f0000001b00)={&(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x5) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x65, 0x0, 0x0) 49.965258ms ago: executing program 3 (id=3612): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001b80)={&(0x7f0000000300)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x18}, 0xffff0000) 0s ago: executing program 4 (id=3613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200240, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r2}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) r6 = perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x3, 0x1, 0x4, 0x1, 0x0, 0xf1, 0x10000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000480), 0x9}, 0x0, 0xfffffffffffffe73, 0x3, 0x3, 0x100000000, 0xfffffffa, 0x2, 0x0, 0xfffffffc, 0x0, 0xffffffffffffff82}, 0xffffffffffffffff, 0xc, r1, 0x8) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0xa2) recvmsg(r1, &(0x7f00000009c0)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000000680)=""/226, 0xe2}, {&(0x7f0000000780)=""/246, 0xf6}], 0x3, &(0x7f00000008c0)=""/193, 0xc1}, 0x12003) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000a00)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x6, [@union={0x7, 0x5, 0x0, 0x5, 0x0, 0x0, [{0x7, 0x0, 0x3659}, {0xd, 0x3}, {0x3, 0x2, 0xfffffeff}, {0x4, 0x4, 0x60}, {0x10, 0x1, 0x3}]}, @const={0x5, 0x0, 0x0, 0xa, 0x3}, @union={0xe, 0x3, 0x0, 0x5, 0x1, 0x8, [{0x3, 0x5, 0x8}, {0x2, 0x3, 0x7}, {0x1, 0x3, 0x8000}]}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x99}]}, @const={0x7}, @typedef={0xf, 0x0, 0x0, 0x8, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @ptr={0x6, 0x0, 0x0, 0x2, 0x3}, @fwd={0x5}]}, {0x0, [0x0, 0x30, 0x5f, 0x30]}}, &(0x7f0000000cc0)=""/133, 0xfe, 0x85, 0x0, 0x0, 0x10000}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x12, &(0x7f0000000e00)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xbe}], &(0x7f0000000ec0)='syzkaller\x00', 0x4, 0xca, &(0x7f0000000f00)=""/202, 0x61780, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001000)=[r5, r5, r5], &(0x7f0000001040)=[{0x0, 0x1, 0x8, 0x3}, {0x5, 0x1, 0xf, 0xa}, {0x5, 0x5, 0x3, 0x6}, {0x5, 0x1, 0x9, 0x7}, {0x4, 0x4, 0x7, 0xb}, {0x3, 0x1, 0x0, 0xb}, {0x2, 0x3, 0x8, 0x3}], 0x10, 0x7ff}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x18, 0x13, &(0x7f0000000a40)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @alu={0x4, 0x1, 0xd, 0x2, 0x5, 0x30, 0x7}, @cb_func={0x18, 0x9}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x6f, &(0x7f0000000b40)=""/111, 0x1f00, 0x50, '\x00', r3, @fallback=0x18, r7, 0x8, &(0x7f0000000dc0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r8, 0x2, &(0x7f0000001180)=[r5], &(0x7f00000011c0)=[{0x5, 0x5, 0x1, 0x9}, {0x4, 0x1, 0x2, 0xc}], 0x10, 0x7}, 0x94) r10 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000012c0)='cgroup.procs\x00', 0x2, 0x0) r11 = getpid() write$cgroup_pid(r10, &(0x7f0000001300)=r11, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)=r9}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0], 0x0, 0xf6, &(0x7f00000014c0)=[{}], 0x8, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0xca, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001700)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x40801, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000019c0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000001780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}]}, &(0x7f0000001840)='GPL\x00', 0x2, 0x46, &(0x7f0000001880)=""/70, 0x41100, 0x10, '\x00', 0x0, 0x1c, r6, 0x8, &(0x7f0000001900)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001940)={0x0, 0xf, 0x0, 0x800}, 0x10, 0x2717f, r9, 0x4, 0x0, &(0x7f0000001980)=[{0x1, 0x1, 0xd, 0x2}, {0x1, 0x4, 0x2, 0xe}, {0x0, 0x3, 0x2, 0xb}, {0x3, 0x4, 0x10, 0x6}], 0x10, 0xfb6}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) sendmsg$unix(r14, &(0x7f0000003080)={&(0x7f0000001ac0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000001b40)}, {&(0x7f0000001b80)="81bda7107719ff5253c5a2815d19e103e2f68ca30140aa77bebae14428c4017a6d3b84724b6908092228412a3bab369142479f9856b20b2b78515c9c747bd01ceb05c452287b5a27a525af1c8436bc12f304eef4072ce0b6d174ddc4c53b50062c5909a56c", 0x65}, {&(0x7f0000001c00)="dbf9fe7046a88c85a6a51f0a8f94ebf5c109325dc8607acfb63496ef2305b3a3863ca0a148d2b61be9c6bdd697e6d47697efd6e8e8fd208e5ebd579eb150fd585ce58e24d1912ea526939a2993710cff941778ae5b0ac663849a79ebadea71a58d87840d58a52666862bc11d678af45885ffc9e6149371d2d63699580cb14c588c2b989d25265b3a1468867a2e0814e1722f2e90651aca6b42198ef16039d23f1037d046e7466af5850a3634e4d627e604c76b6b3764056bcb4e27439d248848881a995163b5d8ec0aacedc5ebe20d81054260b183d70aebd1b5267c2d358c95b7bf817d5adaf952b752d34e4b25d5fbd3d7c888ce4afea97623899c4f8258e29333f7414f670074b231dadca2ee9ad975a1ae41e0652a0e135512f6d1d6d699a681972daa3ffd6e52755c4b69e2e9e3941f946e8b7f2ce849a1efd12c708fdfb579714db5d417ff3acb0d96cfd4a60e24b86ddf6dc1896acfd1ba1611a3d7509ced74c4631fd20f72c276ec22b4a6a08b4fcc2725673f14274ff8a0e24d98195ce64ea4d52efa9267663585137c96256bdecec3eaffcde59345fa3c32fac4a04e1ce3588278f8d53a71674ad4b16ba9000793f439af99d65e5eaa76125a1dea856b7c275e1434b794e022453d9dfa441d0911fdfc42f4633d2927e87bc4a7b7eb1bf4eb486f83d5cede3e5f90488a437953fec691833f7a0f5e634a684b7829c1755826a2af4de09f02c78addfaf9179d7577200551e16daf36a42646aaf7bc02b7cbe9ed17f66d55b2ee69a8dd014fea021e0ba87a5be87416c884c6c4098f08443b18a447921fec3896f6fd0d266154923e378906da43584371791bad9a81072228b388f9472f10efdb49aafd989959ce4a3d25deee884308b299f2d6572cdc2bf114f9dc8228dae5259087b7c32f0933ce37a1f6bc594fbf05e6d511d4f30bfa02a05419a4f3782d6f8ead3ff959b7c7ca3f6249dc7d70b45d14344657f9308415ec9a60161f021f7b120107b2a2e94e5291bbd0e70aee2d382ff689f5866fb6a63724577c09ccc3a456f090a51ae61aab5a0613dbc6ef5cd09f9963879b7a4a9ae60cfc78c585459348208f317df02ce0908ba71a192fc74664af6543813236c7dbd5de3dec1a9cfc8f08542cfdfe62684fc0f702c7227c2f1c9e3573b90e6b7f79e5a1cc133a476514aa9cc0dc66d1cc0a62a3f0084376d4e57856f0ba944cd48e9e897a8d7532201368b5870f23b5640818b2075a8522e5ad2081963f1bf1fbf47c224c40fda0531b7bdbb9ec4b719a7c9426c4cccac9b65200179778a97a81840bb9f5f7255d55d5ba7b1ff9ab78d96f61de8474c532438031858f96462c8c2e5e35584e3fe6a17fc8dbe7e248fcab3b54d9743e6ffbc05e5f99200f8838f228bfb6634f7123b24bab8daf61653e7a9136f13c0f4fc7ffd650b531f436ca722ed3ffe9153856a7a450050c88a30e3ed396a6d2d6232fbba6a23e7ab7e96d543fa5bf5faff9520c8301a9a9618a4434c31dca427b1542857854af0b1818f34eb1be44cdd1a661dbbf642979ec0c0d3211fc251cdb729e91cd5f23c58151bff86fb9b083900b0a01b2df726e8d2f0b6cdae07ff729c41a5966be607189c7ef9f511f0f205d0d738b8e8b22d180413afca46fd80ac057c6251ae0846ac231878a3fc32646b10460c0b35f2778ec0be7b10a8ae6fc4d3a96d7718254fd261bd32c6269a90d9463a17cee7dca1fe9659069b10c4dbd9c57f18093562008c40e3a11a517d6024f23948b481623c82942576f941e7c0fb30e760a885c8080ba5b67decfaadae4b53dbe55ad154a0ee8bc0109d578af7c59ca956adbeba7ff3c0db8fad834adc6d5f69f41bdad55e063053bfe100f8cca4ddc3281030df7301917317b581a9ad30f3eb9987509facaf232c44d54c5990bbc2e76007522ecc4f336a7f33f0d74eaa12106e6b25d91a0b6ae324f8317d4c9b357526eb01823f3a0c4f6e741b81e6c12c6c0a961baea5d70eb303e604822d643d93d8f2ac3fedbe0ebc1b3e2463beb4508bddad0b6a061d193fe91ece2b42f8927d94539094fe10c38df765094057372805aaa3f26096420dc80dc4515710492b6484e9d7013093bda6185e6d4598ebb3daa0dfb6f0f0d5435a8b6a5ccdba3cc19d9e78c5fae9b71a4c4dc7b4d14733410644bc4047c792b3335d740ad2e4ea9e7803f8733a5e154144830680ad1febb406b1533b7d28a4839b8f34eb2a8eb35d0b6fda156ce65699bf863bec672dc3b718f7d2d90bd58955792c3b14956aa22d63e90e92a3aef00bca4f32054aeaf4312d51b507b2e746702757b8ae5df4b0dd0ddac89f0d74889230271f4437683c20564d5705ac2847ee5f8ba040cfb9981544b38fe11c603766339e2fda515f37da4b5fdf4533debe8ed1dd2b00862175de4998b3af37c21b3908c6d4b9d66443b94288b25ab77dd1118a4b956d08c2e378cd9c1689f97932b0f7cd1fc5435ce110642d7dabf41944b75d705f4bede1ae68163c5ed80d9d23edcbfe87acc128da72cd98d46b3d79aa75956cf67614a61aecae7d5ce1901a295ff5f9741e9bac3b24a646ebd51528e46e57ef93cb5c86d55adc0fe6b53bf9698824a5e0a25b4f80eca5cff14c41ff8a8c10b8c823bd526eab27b18daae1078b4fd35616d8c2e0be7e12beba6343822ab02c6796bd0d1087ad97db006f87a6b8120fd4daf37abb441ad129a59ded03b4ec5221381810dc460f58767e3678bdb9cb06050d49fdf0ad73bedc141f9dbb8353ab18ea797b0d221f3a52b20e01831228fe15ddf24f3033863ca4be9cb9432d0e5df0f842066199c8d03d9a3489f18a107ffe672743c9ef5f8363b7c53fd087e5c4edc191f2b78a84e966d9bd99b21800c29ba4b30aa2422a45c337b8ee1ab653c6eacca2efb9cb4807213979695e4d286cfa6636cd5bce2097527fcd87e217f15dca4acb2ed4d7afb9902ded15b8d69a86b65cd964483ab00babb6d7b6013cc4139f02be6c98111e8b1e85ec260919c6c9d86da96ae09364ffe401c56283cabe9d5750e9cdbd7f36820b21f4b168d37f3322e843ccf8d48e5eeb068d982c2a53a144c005822e085f8aab4f028443ad74729e0d9f45d4936f073b4f8a0c020332e73129a2b4a02e016cbd6ec7ce8dc75da2ed2e35647f3e4f60ff6a64f558033970a6b42bf7001d31610533cc1141e55d257d453faa3291e0063733365cc1efd99c104f26d0dbef34130354d4256736cb83e4b812f12a81d5e4c8ac0d8c4830f9edfd9c2ad480708bc2f9627f7b0943bf2a9b94a30723631dd0b97bf0f73a6fd76402676f09b0d49bbcadec7946baa31fbe6d8f9e281ff53bcd274c12065a60340ae6023acb02a050ec5a73c474d9fef8c29b3bd3d7370aeeb75f89c355c07eaf33b04e724f75dd41e25cd5a1df9bd3b0b81165fc95f8e2258d7dd0471da5c73b6ed6fe44caa253a08e45a04276f1b44ef991e71b55030abe1f7be791020ecfbe2d3ab1bae1a48fcb1084d630818741e6990e19fc83631e30b02710b249e93df3b5499a3b45ec1cd61a716ee20bad7a030e5b9a3ee74b1aee6b06a320cfc63e477e5d95560bf041fa66846dbbf4169ce5eea96a4d277e5f9e003722e28fb8cae1d47e5e23101349cc2896c6bd909e613f1fbbffeb5b1806bd3081862bb2a807a1a012dd9b14a0fc334b7afe05f2714aefc5cb29ab38f91057ff74731c49cea0680d800f7245a2a4ee9296d4d5d42e5b32cfaf990cdd1d3ce624241351df2b3db5d39f4e1b8da28f120ff0c8e321a2e8eba999f71bde1da664a4521a5d83f79d317b02ec94d17d989bb5ab5ae5fff4305de1bba0628d05525f4c452d5653b3c5d7de0c4053a3661185cca5581d9a1bd589968ae42cab85197fbf224a48b44c45ef4de9f7d7a9f2a9a03be21bd21b2d686116ad8d67241a6a7bb120fef71e25f12b47ce511c5cff9aa589ba1927647d4aa0d58bfceb3aaf5f4925b60e79be07497427184c1eed458fcc5b7efee16057066ddf02a3c2a25e62babb92fbbc1593d7e1e5d3d7e6eb784977b2744d977da7f53d1ef54287ddb691026a8ea15ad7d25ae70014e20a87182d236b44489883808a244cb59300acd77889a74ea4611e152839305bda7d8d5da8ffef86939e5b22da58417832554ef0b06fdb8be1b01d917a4cee010900cca2a9531280db510827175baf0a9104b4c6a965b2f1cd614050383b33e3f67b653d564eb9c019a23042bc886319e0279abe54c8e54668bdde18bb0949e50d23a278d6fbdc84c429e4880d0e00b3e68dd08c28371e1c293977e258d73814e2481987baf8c1617375f8c274fabd3ee9b62f67adba11714b1b26243b67eb9736ee8fba7a7fddfbe69ff10fedd2723104cf820b863fe36c3148daae4acba7793de9aebf248d3c2a8507598fa6d64d7002bf320656b47e65951d6dabef739aa44b5e882fa0f786d84a956164c849806a621988e6a63d6a9e36d8515e726e92aae8b323f693a1206dfc34ff8f4437e520473585941ad97165a2563662c48a7b2f1346f63b340bdac991e4316871401817bc31f9dcfaa8d785ad252fa88f14dbbe8ce6a769b54c0c97d7918f9b92f7eadcf0d39892137a62cd21e8cd7df89017b1256dca29c064c9ae399a50b6f454a330f0db4148ed7b5de6d2481181c98800ed58b80b7927ddd27902193da8303a92e8777f4d6be7074deec7d739be9a53070d929d1c30fd6a5f799ed526fbbdc1f2cfb3e263a93a299228449aec46ff2bcc6a18bec23babc2220f4e4c66431f616934d061f4192ae5be2b11933d5aaafea49e9c6fbedcabe06e978d098aa84cb4ff879f760dd768c6ad9541f8acaae8ef51cc895f6f08b2f1bc597f972f57cc4161467d8b1196a15f342c1a01d8c7712a1bcd1722addf1bcd4dbf0d1ffe3b9fd38fcdb6f0fd873dae9a8c1479b69c4f81650a22434a270065ed102e20b5b9dcdbca7ecf39be2ff35c8ab0f8e5b6a7d4c353b54a8e3131920300f66b8d0ba7c64a084a16746e8a999bf0ab6e472bcb03e265bc41bd8deaac000c3947ea7f28dd6892a1f20d8ea4eeeadf9fda427965e3742e8963ecaca3ba90c75790f819e6370d6ce7253d5b7109d2b0b8276cfde20507a70ff3566b4aa506ae56423922f944ffdfa2f7e94aea62c9de4b38b63ecf2a47765b7ce9f9af01ec4721a10a65b255683d9e54cbc75c86cd61a9a2b33db610285c36661f30784746c2843543088a8d5b10669c0b5ae548966ded925a357a2373baaf201c4a3613dd79b92373917fadbeaa2e8c4928f4938a32e2cc7acbedaf2a87cb1c3f109e8ec476d52185de8ed5cffbc713ab29f0646af413f87f8f28187f86b321f32051c113ca86e5f874faefc9f39afad0224c0b0368b34c91efc03241792b910cbfa2967465828fafafad0b1bfa11ee3b9a78837385a95e77930e4da9271f98997733f0eb72b73159ee1c6dce412f6cfc7ec02e1d6de9306e6612765ece9254ff571bd5c380ea528823e246a848a7eb349f58c602fd80ae63baec7155ed286af36262c83532d064665e7ef9bd3ffddaca55d0a64fdb1ef8eab900055c75c03b60fcc4c6d636f08ed9befb7812f80028d9c87a91e96f171f1189f7b659c529155e4706a76a95ac39f8ad44db8ca89b111425652bc2088b4c60ce3c6e525d468e3b25d4d50221bffc572318a2aea217412a1689652c59c8ddce20b76e379c751672b3ece210b473bb27c74b7989b5f44e3389c1a0f54fe488cecfe624fb970acd98bf3e1958c275d34acd7fa3c", 0x1000}, {&(0x7f0000002c00)="c9", 0x1}, {&(0x7f0000002c40)="120f079fc463bff2e60261c553852aaee7093a3da04217fea1827e65946c96a808bac7bace801b2efb1839bad9e3e10c32f13c9764c063c6c8ea8d506c389f0b7c67eef317e5337d4ac548a65692f3b58c23c457b2d9c885513f7df35e9a8414d97d50d22eddc41e32846a3da876e00717da76c0712c0f01d7243aafd86e20697779e6e5d8ccbb3f32f22fb5684246d71404fa140320acee7960ccd125038a9c085b5de5268b7c79c51e815750ac3375172f3b995b21323a49be0a2025597ac9236abd4732a0d4340fed5183681926dc027b08f0", 0xd4}, {&(0x7f0000002d40)="e128eae28807167fc73400e56cdf091eabf3438d6108879ad9f2aae63581a3e6d94df1a1353f69d42c84c3b9ef09f286c9a3b9d2b7f2d2d12b1c80621ffdac511bf1a3739c78f28c705d2948c13593c39ef60cb49e979988a7e5b02826411e2f17cd35c7e6bdfda39143be2605b561c487de5ba39e1c66620651d490e9ed11b5e53cece42b5ffe1b2bede7", 0x8b}, {&(0x7f0000002e00)="e2bda317c339068ad1da93cc05f166700fa3a002447a3a059478c2ddf66e7ca7d25474edc1498aa5492b7da1861e0e6817f026c3bc70e2ff5dcea607ed0ee14fb2e8c24c4ce67c074c2f0def3661a44b0e7b174dc4fb2dfdaeb79773c81fc944eb228701a6c2c130f1a5e72d9273aae2215855638fefde1fefc34472f3ecfa095ce0f07e7b7c386c7781f6718fc485f6b456d7757cf49fa35fda57fa7a5fad42656accfe215a85e79cb7244ea0c37e613a7cb1b3c42de4585b6824f0b80d3f0209233595b9f4dbc7b6c1ad7ca465fb3e", 0xd0}], 0x7, &(0x7f0000002f80)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {r11}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r9, r13, r13]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01, 0xee00}}}], 0xd8, 0x1}, 0x40040c4) sendmsg$tipc(r2, &(0x7f0000003280)={&(0x7f00000030c0)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10, &(0x7f0000003140)=[{&(0x7f0000003100)="f11f2c0e7ca5799f24b02ff216f307381ca092c5e067", 0x16}], 0x1, &(0x7f0000003180)="dbbbf5c6fbe45acefca47f22e16367c42447b77544b5ef0dcec5574e57a3047898a637c854ee6a0403c0b472c0f98c8a7ce0f024d1f3036e48baa5fe58a7f1fca2594dca72708449946e03b6ca17778bd21b8ee36785c1c2a95e8cf4b228857f69c79bb0af73733df08572e607f95b35c9ba94675bb8fbc80821a2905be0c2c519efcbf75bbdc26b2b03c056bc60caea09c3e75ee1aaa87e761003b87b7b25d35eaf343602e1eceb76ae92782803370dc02ebc730bf31c93c4428b2bcc415f957448b723946c30fb96", 0xc9, 0x1}, 0x800) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000003540)={&(0x7f00000032c0)="c6144b466970d908e84c7194522866db65fc83d6e2e6250843ec90d46cc0cd3c8c05dcc46a6bf26a10edd9c755ad52b2a53bfc672856cdab893f3901b38c1db5167df7a3b030a97eea36c84ad69a09170870da3e7a61e67bdfe04e748f43ca44f4d0253b2634e293c8afa8d3e0334436f3ad94eba8deafe7f9c3cba1aaa7e64f2d687802d26560e704ce4c990b17667d106973e0cfb5133deba687fd90befa5df77a27772ac08fdab4318ded4f3d355e5fcf80765022314bd6bd249dfb37eab575f2cf56890e0b7e5d60", &(0x7f00000033c0)=""/29, &(0x7f0000003400)="5d096670f2d6f230284960e39ad7bfd77c865775ad88e515947c01c2d6a75b0684c65b2d06e7bcd82edb4994f86eaca9830b258fbdb4d224aefb0fae8fd97762cc64dd4186c4ab043326467bc1cf12c0c816835b41bc1be4703eb5ef66e27ace1ba2a8e799eb8eaebcd265bf302fcd95e7a8cd74e02b70fcc7ae8adf7e280685fcc0ffc8ca81676c437b54c88c59121ebb802c2a3bb532b291d1ff7b820ce843e31981542e3c27e9cbe5503b98c09a74993e766fa69da4aacb5392c8452acac8b2952d9d498adaa59df3db1b5e62", &(0x7f0000003500)="14e10b86077d682b56ab8bbe4431bb568404a3581be560cdb8a0d6a8f43b8e05", 0x0, r12, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004740)={r13, 0x0, 0xd8, 0xa, &(0x7f0000003580)="bb213041f041ce904409e47938b6e6478b741cd2df1796f0477597b8c4680a4ef62e53a512b3cf567a85bf9291f3def1373cf1bafaade62012bc2953473ac4ff244389fd3027d88cd27a31f20d470f7a371d30500e231bedcefc10b565a06477ab06bdb49a12851e48eade6ff2cc9a47066838a48a4fb8b50fa6f0f335771b3e560e1060be759e22a56b3b50487548c0ddebc020a738d6a5aca5e9eb7340af95a59fc674482dea0555455463dfe146aa38decdf309c5dc653db2b6677a6e2efb525b6d6d825d487acb3ace8888268b7cbf2bd83aafad1076", &(0x7f0000003680)=""/10, 0x4, 0x0, 0x1000, 0x76, &(0x7f00000036c0)="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", &(0x7f00000046c0)="48d537936801dcdfe2d9ba4fcfdeeb9870f5078b3eadd2d1d063e9db0ce1c8e61229721487fc829b037c5f972508511c5d506a548dd621b93b0a31217af2429c8b936200faca3778e76daaccda82631c4e4366300f0abd45b10d916c1e9deddc6f68b947172d63070aaac4530e17dadb8f407558e682", 0x4, 0x0, 0xfffffffa}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004980)={r13, 0x0, 0x73, 0x13, &(0x7f00000047c0)="4c3a22ef54a3faf972ff3f9259d5e9eb33fec822991c0966b98026ce1677718051de6445a759dc691a147d60a81150945825e61a88ad7c8f48ec158cc9f51aec4aeea98d94ad6140875cd9ef36788a0c95a6e14911d759fc3d467cb8d4098454e4867e05e611fd822ea42703f828716d9a7eed", &(0x7f0000004840)=""/19, 0x3a9f0, 0x0, 0x92, 0x25, &(0x7f0000004880)="0eb6f96b153eafd28d37773a6fc05c93714ee888aa5c2e90868181474e2c3dd8103b088fe9e81eab4f4864746c534099a5fe85b23f86d504a6d717a2badad0f2566e458804f6e7360927705f31ae73b2a796095bd67d6f9288a082eea9c976639b3dbed2472f48c98dbabb911815331fecb678cd5849a1d26623028112b98ed5fbde3b6f8328f2cfaa8961c95dfb94f5ff56", &(0x7f0000004940)="be06de8315b4aa0fcadcffacf68305f2e5aabe79ef1395d107584584e4159aa29b06755415", 0x1, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): [ 395.041589][T12960] FAULT_INJECTION: forcing a failure. [ 395.041589][T12960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.055035][T12960] CPU: 1 PID: 12960 Comm: syz.1.2666 Not tainted syzkaller #0 [ 395.062529][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 395.072611][T12960] Call Trace: [ 395.075906][T12960] [ 395.078844][T12960] dump_stack_lvl+0x18c/0x250 [ 395.083527][T12960] ? show_regs_print_info+0x20/0x20 [ 395.088734][T12960] ? load_image+0x420/0x420 [ 395.093239][T12960] ? __might_fault+0xaa/0x120 [ 395.097909][T12960] ? __lock_acquire+0x7d80/0x7d80 [ 395.102938][T12960] should_fail_ex+0x394/0x4c0 [ 395.107736][T12960] _copy_from_user+0x2f/0xe0 [ 395.112351][T12960] ___sys_recvmsg+0x174/0x590 [ 395.117040][T12960] ? __sys_recvmsg+0x2a0/0x2a0 [ 395.121803][T12960] ? ksys_write+0x1d2/0x260 [ 395.126316][T12960] ? __fget_files+0x3fc/0x460 [ 395.131023][T12960] __x64_sys_recvmsg+0x21e/0x2f0 [ 395.135991][T12960] ? ___sys_recvmsg+0x590/0x590 [ 395.140853][T12960] ? lockdep_hardirqs_on+0x98/0x150 [ 395.146051][T12960] do_syscall_64+0x55/0xb0 [ 395.150466][T12960] ? clear_bhb_loop+0x40/0x90 [ 395.155138][T12960] ? clear_bhb_loop+0x40/0x90 [ 395.159820][T12960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.165717][T12960] RIP: 0033:0x7f23bc39de59 [ 395.170169][T12960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.189774][T12960] RSP: 002b:00007f23ba5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 395.198185][T12960] RAX: ffffffffffffffda RBX: 00007f23bc625fa0 RCX: 00007f23bc39de59 [ 395.206155][T12960] RDX: 0000000000000003 RSI: 0000200000000280 RDI: 0000000000000004 [ 395.214128][T12960] RBP: 00007f23ba5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.222100][T12960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.230073][T12960] R13: 00007f23bc626038 R14: 00007f23bc625fa0 R15: 00007ffc72535298 [ 395.238056][T12960] [ 395.452543][T12970] validate_nla: 5 callbacks suppressed [ 395.452559][T12970] netlink: 'syz.2.2670': attribute type 21 has an invalid length. [ 395.470530][T12970] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2670'. [ 395.497889][T12970] netlink: 'syz.2.2670': attribute type 5 has an invalid length. [ 395.505764][T12970] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2670'. [ 395.671739][T12977] netlink: 'syz.2.2672': attribute type 3 has an invalid length. [ 395.680575][T12977] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2672'. [ 395.758318][T12981] netlink: 'syz.1.2674': attribute type 21 has an invalid length. [ 395.792520][T12981] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2674'. [ 395.810951][T12981] bridge_slave_1: default FDB implementation only supports local addresses [ 395.854614][T12985] netlink: 'syz.2.2676': attribute type 58 has an invalid length. [ 395.875934][T12985] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2676'. [ 396.169631][T13000] netlink: 'syz.2.2681': attribute type 21 has an invalid length. [ 396.430902][T13010] netlink: 'syz.1.2685': attribute type 3 has an invalid length. [ 396.543607][T13008] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 396.561565][T13008] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 396.571963][T13000] netlink: 'syz.2.2681': attribute type 11 has an invalid length. [ 396.833383][T13015] netlink: 'syz.3.2687': attribute type 3 has an invalid length. [ 396.841540][T13015] netlink: 'syz.3.2687': attribute type 1 has an invalid length. [ 397.106143][T13027] team0: Port device team_slave_0 removed [ 397.405471][T13038] sctp: [Deprecated]: syz.3.2694 (pid 13038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.405471][T13038] Use struct sctp_sack_info instead [ 397.936553][T13058] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 398.491464][T13058] batman_adv: batadv0: Removing interface: veth0_vlan [ 398.695920][T13072] __nla_validate_parse: 6 callbacks suppressed [ 398.695955][T13072] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2709'. [ 399.105565][T13090] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 399.719567][T13102] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2721'. [ 399.983461][T13110] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2724'. [ 400.704118][T13137] validate_nla: 6 callbacks suppressed [ 400.704155][T13137] netlink: 'syz.2.2733': attribute type 3 has an invalid length. [ 400.736305][T13137] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2733'. [ 401.515528][T13171] netlink: 'syz.3.2747': attribute type 3 has an invalid length. [ 401.534279][T13171] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2747'. [ 401.569331][T13179] netlink: 'syz.1.2751': attribute type 10 has an invalid length. [ 401.577381][T13179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2751'. [ 401.586918][T13179] macvlan1: entered promiscuous mode [ 401.593058][T13179] batman_adv: batadv0: Adding interface: macvlan1 [ 401.599650][T13179] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.625764][T13179] batman_adv: batadv0: Interface activated: macvlan1 [ 402.055659][T13198] cgroup: fork rejected by pids controller in /syz3 [ 402.196164][T13203] netlink: 'syz.2.2760': attribute type 3 has an invalid length. [ 402.204280][T13203] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2760'. [ 402.598517][T13320] syz.1.2767 (13320) used obsolete PPPIOCDETACH ioctl [ 402.852433][T13329] netlink: 'syz.2.2772': attribute type 3 has an invalid length. [ 402.865361][T13329] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2772'. [ 403.377568][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.380165][ T9271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.398675][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 403.415246][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.428381][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.440514][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 403.448910][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.603125][ T9271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.754790][ T9271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.823277][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.834170][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.854996][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.881809][ T9271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.897638][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.912440][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 403.920263][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 404.129973][T13362] netlink: 'syz.1.2783': attribute type 3 has an invalid length. [ 404.152833][T13362] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2783'. [ 404.231071][T13340] chnl_net:caif_netlink_parms(): no params data found [ 404.903814][T13370] syzkaller0: entered promiscuous mode [ 404.910576][T13370] syzkaller0: entered allmulticast mode [ 404.922370][T13352] chnl_net:caif_netlink_parms(): no params data found [ 404.945706][T13340] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.953492][T13340] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.961338][T13340] bridge_slave_0: entered allmulticast mode [ 404.969588][T13340] bridge_slave_0: entered promiscuous mode [ 404.980883][T13340] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.988390][T13340] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.995724][T13340] bridge_slave_1: entered allmulticast mode [ 405.017646][T13340] bridge_slave_1: entered promiscuous mode [ 405.539094][ T5780] Bluetooth: hci3: command tx timeout [ 406.031142][ T5780] Bluetooth: hci4: command tx timeout [ 406.940336][T13340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.047457][T13340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.229679][T13340] team0: Port device team_slave_0 added [ 407.244741][T13410] netlink: 'syz.1.2791': attribute type 3 has an invalid length. [ 407.265092][T13410] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2791'. [ 407.323691][T13340] team0: Port device team_slave_1 added [ 407.330320][T13352] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.346434][T13352] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.353759][T13352] bridge_slave_0: entered allmulticast mode [ 407.380681][T13352] bridge_slave_0: entered promiscuous mode [ 407.466185][T13352] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.473365][T13352] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.497912][T13352] bridge_slave_1: entered allmulticast mode [ 407.505079][T13352] bridge_slave_1: entered promiscuous mode [ 407.618545][ T5780] Bluetooth: hci3: command tx timeout [ 407.670252][T13352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.726664][T13340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.733665][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.812274][T13340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.857235][T13352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.886296][T13340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.911408][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.940908][T13340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.103834][T13352] team0: Port device team_slave_0 added [ 408.110460][ T5780] Bluetooth: hci4: command tx timeout [ 408.117654][T13443] netlink: 'syz.1.2798': attribute type 10 has an invalid length. [ 408.125662][T13443] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2798'. [ 408.139125][T13443] team0: entered promiscuous mode [ 408.144177][T13443] team_slave_1: entered promiscuous mode [ 408.150291][T13443] team0: entered allmulticast mode [ 408.155425][T13443] team_slave_1: entered allmulticast mode [ 408.164555][T13443] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 408.307577][T13352] team0: Port device team_slave_1 added [ 408.400321][T13340] hsr_slave_0: entered promiscuous mode [ 408.429153][T13340] hsr_slave_1: entered promiscuous mode [ 408.556083][ T9271] hsr_slave_0: left promiscuous mode [ 408.583451][ T9271] hsr_slave_1: left promiscuous mode [ 408.604845][ T9271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.625490][ T9271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.640552][T13458] netlink: 'syz.1.2802': attribute type 3 has an invalid length. [ 408.649218][T13458] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2802'. [ 408.660767][ T9271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.668859][ T9271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.677140][ T9271] bridge_slave_1: left allmulticast mode [ 408.683393][ T9271] bridge_slave_1: left promiscuous mode [ 408.689692][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.699392][ T9271] bridge_slave_0: left allmulticast mode [ 408.710824][ T9271] bridge_slave_0: left promiscuous mode [ 408.730775][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.775300][ T9271] veth1_macvtap: left promiscuous mode [ 408.781202][ T9271] veth0_macvtap: left promiscuous mode [ 408.787468][ T9271] veth1_vlan: left promiscuous mode [ 408.792969][ T9271] veth0_vlan: left promiscuous mode [ 408.819031][T13467] netlink: 'syz.2.2805': attribute type 9 has an invalid length. [ 408.829573][T13467] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2805'. [ 409.533214][ T9271] team0 (unregistering): Port device team_slave_1 removed [ 409.579505][ T9271] team0 (unregistering): Port device C removed [ 409.621337][ T9271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.666765][ T9271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.707026][ T5780] Bluetooth: hci3: command tx timeout [ 409.992849][ T9271] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 410.003171][ T9271] bond0 (unregistering): Released all slaves [ 410.099848][T13352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.107107][T13352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.133209][T13352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.151716][T13352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.168059][T13352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.194390][ T5780] Bluetooth: hci4: command tx timeout [ 410.199281][T13352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.402564][T13352] hsr_slave_0: entered promiscuous mode [ 410.409680][T13352] hsr_slave_1: entered promiscuous mode [ 410.426071][T13352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.433688][T13352] Cannot create hsr debugfs directory [ 411.161515][T13499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2810'. [ 411.517480][T13340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 411.542543][T13340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 411.583157][T13340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 411.605744][T13340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 411.754088][T13515] netlink: 'syz.2.2814': attribute type 3 has an invalid length. [ 411.784086][T13515] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2814'. [ 411.786689][ T5780] Bluetooth: hci3: command tx timeout [ 411.804909][T13352] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 411.817790][T13352] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 411.855664][T13352] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 411.882364][T13352] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.133013][T13340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.168389][T13352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.192201][T13340] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.251087][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.258317][ T9271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.286005][ T5780] Bluetooth: hci4: command tx timeout [ 412.292168][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.299299][ T9271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.333544][T13352] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.357787][ T9272] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.364935][ T9272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.399516][ T8972] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.406735][ T8972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.749076][T13544] netlink: 'syz.2.2824': attribute type 10 has an invalid length. [ 412.775126][T13544] bridge0: port 3(hsr0) entered disabled state [ 412.781645][T13544] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.789462][T13544] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.833439][T13544] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 412.858353][T13544] bridge0: port 3(hsr0) entered blocking state [ 412.864710][T13544] bridge0: port 3(hsr0) entered forwarding state [ 412.871424][T13544] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.878649][T13544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.886200][T13544] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.893480][T13544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.935274][T13544] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 413.171522][T13556] netlink: 'syz.1.2825': attribute type 3 has an invalid length. [ 413.186175][T13556] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2825'. [ 413.203676][T13352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.280207][T13340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.422182][T13340] veth0_vlan: entered promiscuous mode [ 413.448094][T13340] veth1_vlan: entered promiscuous mode [ 413.602787][T13340] veth0_macvtap: entered promiscuous mode [ 413.632092][T13340] veth1_macvtap: entered promiscuous mode [ 413.709449][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.733217][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.754286][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.766730][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.777972][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.788863][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.804158][T13340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.853877][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.867686][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.900526][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.924625][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.944095][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.970992][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.983792][T13340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.169352][T13340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.208857][T13340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.225579][T13340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.234460][T13340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.261975][T13589] netlink: 'syz.1.2831': attribute type 21 has an invalid length. [ 414.292583][T13352] veth0_vlan: entered promiscuous mode [ 414.304944][T13591] netlink: 'syz.2.2833': attribute type 10 has an invalid length. [ 414.333808][T13591] geneve0: entered promiscuous mode [ 414.460443][T13591] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 414.529327][T13352] veth1_vlan: entered promiscuous mode [ 414.727034][ T9266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.735308][ T9266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.769468][T13352] veth0_macvtap: entered promiscuous mode [ 414.825784][ T8972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.838287][T13352] veth1_macvtap: entered promiscuous mode [ 414.874295][ T8972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.922788][T13606] netlink: 'syz.1.2835': attribute type 3 has an invalid length. [ 414.938239][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.949102][T13606] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2835'. [ 414.958913][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.971084][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.988863][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.007418][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.029326][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.050812][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.075243][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.098559][T13352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.148874][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.176462][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.214225][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.241725][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.261892][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.292944][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.308673][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.326025][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.357744][T13352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.374267][T13352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.405036][T13352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.434269][T13352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.454547][T13352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.766041][ T9268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.786122][ T9268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.891872][ T9271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.929035][ T9271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.835161][T13657] netlink: 'syz.4.2844': attribute type 3 has an invalid length. [ 416.856127][T13657] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2844'. [ 420.478692][T13733] netlink: 'syz.1.2860': attribute type 3 has an invalid length. [ 420.487118][T13733] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2860'. [ 420.688190][T13745] FAULT_INJECTION: forcing a failure. [ 420.688190][T13745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.724228][T13745] CPU: 0 PID: 13745 Comm: syz.1.2865 Not tainted syzkaller #0 [ 420.731770][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.741850][T13745] Call Trace: [ 420.745156][T13745] [ 420.748109][T13745] dump_stack_lvl+0x18c/0x250 [ 420.752866][T13745] ? show_regs_print_info+0x20/0x20 [ 420.758098][T13745] ? load_image+0x420/0x420 [ 420.762636][T13745] ? __might_fault+0xaa/0x120 [ 420.767343][T13745] ? __lock_acquire+0x7d80/0x7d80 [ 420.772570][T13745] ? __virt_addr_valid+0x10c/0x380 [ 420.777718][T13745] should_fail_ex+0x394/0x4c0 [ 420.782423][T13745] _copy_to_user+0x2f/0xa0 [ 420.786867][T13745] generic_map_lookup_batch+0x85d/0xc60 [ 420.792457][T13745] ? bpf_map_update_value+0x710/0x710 [ 420.797859][T13745] ? bpf_map_update_value+0x710/0x710 [ 420.803435][T13745] ? bpf_map_do_batch+0x2d8/0x600 [ 420.808497][T13745] ? bpf_map_update_value+0x710/0x710 [ 420.813888][T13745] bpf_map_do_batch+0x2e3/0x600 [ 420.818771][T13745] __sys_bpf+0x7d7/0x890 [ 420.823039][T13745] ? bpf_link_show_fdinfo+0x390/0x390 [ 420.828435][T13745] ? lock_chain_count+0x20/0x20 [ 420.833287][T13745] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 420.839272][T13745] __x64_sys_bpf+0x7c/0x90 [ 420.843688][T13745] do_syscall_64+0x55/0xb0 [ 420.848108][T13745] ? clear_bhb_loop+0x40/0x90 [ 420.852783][T13745] ? clear_bhb_loop+0x40/0x90 [ 420.857470][T13745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.863365][T13745] RIP: 0033:0x7f23bc39de59 [ 420.867777][T13745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.887384][T13745] RSP: 002b:00007f23ba5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.895793][T13745] RAX: ffffffffffffffda RBX: 00007f23bc625fa0 RCX: 00007f23bc39de59 [ 420.903760][T13745] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 420.911728][T13745] RBP: 00007f23ba5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.919700][T13745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.927718][T13745] R13: 00007f23bc626038 R14: 00007f23bc625fa0 R15: 00007ffc72535298 [ 420.935722][T13745] [ 421.339095][T13759] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2869'. [ 421.371321][T13759] netlink: 8446 bytes leftover after parsing attributes in process `syz.3.2869'. [ 421.475493][T13766] FAULT_INJECTION: forcing a failure. [ 421.475493][T13766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.540733][T13766] CPU: 0 PID: 13766 Comm: syz.2.2873 Not tainted syzkaller #0 [ 421.548260][T13766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.558340][T13766] Call Trace: [ 421.561631][T13766] [ 421.564587][T13766] dump_stack_lvl+0x18c/0x250 [ 421.569307][T13766] ? show_regs_print_info+0x20/0x20 [ 421.574573][T13766] ? load_image+0x420/0x420 [ 421.579112][T13766] ? __lock_acquire+0x7d80/0x7d80 [ 421.584259][T13766] ? snprintf+0xe9/0x140 [ 421.588544][T13766] should_fail_ex+0x394/0x4c0 [ 421.593257][T13766] _copy_to_user+0x2f/0xa0 [ 421.597699][T13766] simple_read_from_buffer+0xe7/0x150 [ 421.603085][T13766] proc_fail_nth_read+0x1e8/0x260 [ 421.608119][T13766] ? proc_fault_inject_write+0x360/0x360 [ 421.613753][T13766] ? fsnotify_perm+0x271/0x5e0 [ 421.618522][T13766] ? proc_fault_inject_write+0x360/0x360 [ 421.624158][T13766] vfs_read+0x298/0x990 [ 421.628362][T13766] ? kernel_read+0x1e0/0x1e0 [ 421.632964][T13766] ? __fget_files+0x28/0x460 [ 421.637555][T13766] ? __fget_files+0x3fc/0x460 [ 421.642238][T13766] ? __fdget_pos+0x2a3/0x330 [ 421.646833][T13766] ? ksys_read+0x74/0x260 [ 421.651162][T13766] ksys_read+0x151/0x260 [ 421.655405][T13766] ? vfs_write+0x9a0/0x9a0 [ 421.659821][T13766] ? lockdep_hardirqs_on+0x98/0x150 [ 421.665019][T13766] do_syscall_64+0x55/0xb0 [ 421.669435][T13766] ? clear_bhb_loop+0x40/0x90 [ 421.674106][T13766] ? clear_bhb_loop+0x40/0x90 [ 421.678804][T13766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.684704][T13766] RIP: 0033:0x7f184ed5e68e [ 421.689135][T13766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 421.708742][T13766] RSP: 002b:00007f184fc13fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.717152][T13766] RAX: ffffffffffffffda RBX: 00007f184fc146c0 RCX: 00007f184ed5e68e [ 421.725119][T13766] RDX: 000000000000000f RSI: 00007f184fc140a0 RDI: 0000000000000004 [ 421.733084][T13766] RBP: 00007f184fc14090 R08: 0000000000000000 R09: 0000000000000000 [ 421.741051][T13766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.749104][T13766] R13: 00007f184f026038 R14: 00007f184f025fa0 R15: 00007ffd8340d2e8 [ 421.757080][T13766] [ 421.907449][T13768] netlink: 'syz.4.2874': attribute type 3 has an invalid length. [ 421.915676][T13768] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2874'. [ 422.579473][T13789] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2884'. [ 422.633278][T13789] debugfs: Directory '!' with parent 'ieee80211' already present! [ 422.859164][T13793] netlink: 'syz.3.2886': attribute type 3 has an invalid length. [ 422.873034][T13793] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2886'. [ 423.362649][T13799] netlink: 'syz.3.2888': attribute type 3 has an invalid length. [ 423.376511][T13799] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2888'. [ 425.575408][T13814] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2894'. [ 425.609222][T13814] netlink: 174904 bytes leftover after parsing attributes in process `syz.4.2894'. [ 425.694965][T13820] FAULT_INJECTION: forcing a failure. [ 425.694965][T13820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.709720][T13820] CPU: 0 PID: 13820 Comm: syz.1.2897 Not tainted syzkaller #0 [ 425.717232][T13820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 425.727299][T13820] Call Trace: [ 425.730580][T13820] [ 425.733515][T13820] dump_stack_lvl+0x18c/0x250 [ 425.738206][T13820] ? show_regs_print_info+0x20/0x20 [ 425.743409][T13820] ? load_image+0x420/0x420 [ 425.747916][T13820] ? __might_fault+0xaa/0x120 [ 425.752594][T13820] ? __lock_acquire+0x7d80/0x7d80 [ 425.757622][T13820] should_fail_ex+0x394/0x4c0 [ 425.762304][T13820] _copy_from_user+0x2f/0xe0 [ 425.766893][T13820] ___sys_sendmsg+0x1c7/0x360 [ 425.771574][T13820] ? get_pid_task+0x20/0x1e0 [ 425.776167][T13820] ? __sys_sendmsg+0x2b0/0x2b0 [ 425.780951][T13820] ? __lock_acquire+0x7d80/0x7d80 [ 425.786016][T13820] __se_sys_sendmsg+0x1d0/0x2c0 [ 425.790908][T13820] ? __x64_sys_sendmsg+0x80/0x80 [ 425.795874][T13820] ? lockdep_hardirqs_on+0x98/0x150 [ 425.801122][T13820] do_syscall_64+0x55/0xb0 [ 425.805571][T13820] ? clear_bhb_loop+0x40/0x90 [ 425.810256][T13820] ? clear_bhb_loop+0x40/0x90 [ 425.814936][T13820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.820834][T13820] RIP: 0033:0x7f23bc39de59 [ 425.825261][T13820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.844886][T13820] RSP: 002b:00007f23ba5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.853307][T13820] RAX: ffffffffffffffda RBX: 00007f23bc625fa0 RCX: 00007f23bc39de59 [ 425.861457][T13820] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 425.869435][T13820] RBP: 00007f23ba5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 425.877405][T13820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.885375][T13820] R13: 00007f23bc626038 R14: 00007f23bc625fa0 R15: 00007ffc72535298 [ 425.893362][T13820] [ 425.907220][T13821] netlink: 'syz.3.2896': attribute type 1 has an invalid length. [ 425.915054][T13821] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2896'. [ 425.996962][T13823] delete_channel: no stack [ 426.138672][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2900'. [ 426.279125][T13830] netlink: 'syz.3.2901': attribute type 3 has an invalid length. [ 426.298575][T13830] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2901'. [ 427.153168][T13856] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.2908'. [ 427.637375][T13858] netlink: 'syz.3.2913': attribute type 39 has an invalid length. [ 428.019805][T13867] netlink: 'syz.2.2916': attribute type 3 has an invalid length. [ 428.042422][T13867] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2916'. [ 428.124506][T13878] netlink: 'syz.3.2920': attribute type 10 has an invalid length. [ 428.132595][T13878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2920'. [ 428.538507][T13890] FAULT_INJECTION: forcing a failure. [ 428.538507][T13890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.562077][T13890] CPU: 1 PID: 13890 Comm: syz.3.2924 Not tainted syzkaller #0 [ 428.569601][T13890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 428.579686][T13890] Call Trace: [ 428.582964][T13890] [ 428.585903][T13890] dump_stack_lvl+0x18c/0x250 [ 428.590603][T13890] ? show_regs_print_info+0x20/0x20 [ 428.595828][T13890] ? load_image+0x420/0x420 [ 428.600354][T13890] ? __lock_acquire+0x7d80/0x7d80 [ 428.605383][T13890] ? snprintf+0xe9/0x140 [ 428.609624][T13890] should_fail_ex+0x394/0x4c0 [ 428.614306][T13890] _copy_to_user+0x2f/0xa0 [ 428.618818][T13890] simple_read_from_buffer+0xe7/0x150 [ 428.624221][T13890] proc_fail_nth_read+0x1e8/0x260 [ 428.629249][T13890] ? proc_fault_inject_write+0x360/0x360 [ 428.634895][T13890] ? fsnotify_perm+0x271/0x5e0 [ 428.639664][T13890] ? proc_fault_inject_write+0x360/0x360 [ 428.645388][T13890] vfs_read+0x298/0x990 [ 428.649557][T13890] ? kernel_read+0x1e0/0x1e0 [ 428.654174][T13890] ? __fget_files+0x28/0x460 [ 428.658762][T13890] ? __fget_files+0x3fc/0x460 [ 428.663482][T13890] ? __fdget_pos+0x2a3/0x330 [ 428.668072][T13890] ? ksys_read+0x74/0x260 [ 428.672429][T13890] ksys_read+0x151/0x260 [ 428.676705][T13890] ? vfs_write+0x9a0/0x9a0 [ 428.681152][T13890] ? lockdep_hardirqs_on+0x98/0x150 [ 428.686385][T13890] do_syscall_64+0x55/0xb0 [ 428.690833][T13890] ? clear_bhb_loop+0x40/0x90 [ 428.695602][T13890] ? clear_bhb_loop+0x40/0x90 [ 428.700275][T13890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.706166][T13890] RIP: 0033:0x7faab415e68e [ 428.710571][T13890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.730201][T13890] RSP: 002b:00007faab50aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 428.738610][T13890] RAX: ffffffffffffffda RBX: 00007faab50af6c0 RCX: 00007faab415e68e [ 428.746577][T13890] RDX: 000000000000000f RSI: 00007faab50af0a0 RDI: 000000000000000c [ 428.754541][T13890] RBP: 00007faab50af090 R08: 0000000000000000 R09: 0000000000000000 [ 428.762508][T13890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.770487][T13890] R13: 00007faab4426038 R14: 00007faab4425fa0 R15: 00007ffcdb83a608 [ 428.778477][T13890] [ 428.960972][T13903] FAULT_INJECTION: forcing a failure. [ 428.960972][T13903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.988130][T13903] CPU: 1 PID: 13903 Comm: syz.4.2929 Not tainted syzkaller #0 [ 428.995754][T13903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 429.005816][T13903] Call Trace: [ 429.009120][T13903] [ 429.012046][T13903] dump_stack_lvl+0x18c/0x250 [ 429.016730][T13903] ? show_regs_print_info+0x20/0x20 [ 429.021929][T13903] ? load_image+0x420/0x420 [ 429.026435][T13903] ? __might_fault+0xaa/0x120 [ 429.031113][T13903] ? __lock_acquire+0x7d80/0x7d80 [ 429.036134][T13903] ? __virt_addr_valid+0x10c/0x380 [ 429.041245][T13903] should_fail_ex+0x394/0x4c0 [ 429.045929][T13903] _copy_to_user+0x2f/0xa0 [ 429.050354][T13903] generic_map_lookup_batch+0x85d/0xc60 [ 429.055904][T13903] ? bpf_map_update_value+0x710/0x710 [ 429.061277][T13903] ? __fdget+0x180/0x210 [ 429.065526][T13903] ? bpf_map_update_value+0x710/0x710 [ 429.070895][T13903] bpf_map_do_batch+0x2e3/0x600 [ 429.075741][T13903] ? bpf_lsm_bpf+0x9/0x10 [ 429.080067][T13903] ? security_bpf+0x7e/0xa0 [ 429.084576][T13903] __sys_bpf+0x7d7/0x890 [ 429.088820][T13903] ? bpf_link_show_fdinfo+0x390/0x390 [ 429.094200][T13903] ? lock_chain_count+0x20/0x20 [ 429.099051][T13903] __x64_sys_bpf+0x7c/0x90 [ 429.103480][T13903] do_syscall_64+0x55/0xb0 [ 429.107904][T13903] ? clear_bhb_loop+0x40/0x90 [ 429.112575][T13903] ? clear_bhb_loop+0x40/0x90 [ 429.117247][T13903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.123136][T13903] RIP: 0033:0x7fd7d6f9de59 [ 429.127543][T13903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.147147][T13903] RSP: 002b:00007fd7d7e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.155557][T13903] RAX: ffffffffffffffda RBX: 00007fd7d7225fa0 RCX: 00007fd7d6f9de59 [ 429.163523][T13903] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 429.171491][T13903] RBP: 00007fd7d7e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 429.179561][T13903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.187540][T13903] R13: 00007fd7d7226038 R14: 00007fd7d7225fa0 R15: 00007fff5d43f738 [ 429.195524][T13903] [ 429.287106][T13905] netlink: 'syz.1.2930': attribute type 3 has an invalid length. [ 429.295285][T13905] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2930'. [ 430.003852][T13925] delete_channel: no stack [ 430.056916][T13936] syzkaller0: entered promiscuous mode [ 430.062618][T13936] syzkaller0: entered allmulticast mode [ 430.284915][T13948] netlink: 'syz.2.2945': attribute type 3 has an invalid length. [ 430.319659][T13948] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2945'. [ 432.419262][T13955] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2949'. [ 432.437575][T13955] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.2949'. [ 432.798755][T13979] netlink: 'syz.2.2958': attribute type 33 has an invalid length. [ 432.807347][T13979] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2958'. [ 432.818538][T13979] `: renamed from ip6tnl0 (while UP) [ 432.830827][T13979] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 432.915497][T13980] tap0: tun_chr_ioctl cmd 2148553947 [ 433.164975][T13995] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2963'. [ 433.174710][T13995] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2963'. [ 433.184645][T13995] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2963'. [ 433.224703][T13997] netlink: 'syz.2.2964': attribute type 3 has an invalid length. [ 433.233478][T13997] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2964'. [ 433.378319][T14001] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2966'. [ 433.594479][T14008] FAULT_INJECTION: forcing a failure. [ 433.594479][T14008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.616178][T14008] CPU: 0 PID: 14008 Comm: syz.3.2969 Not tainted syzkaller #0 [ 433.623695][T14008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 433.633784][T14008] Call Trace: [ 433.637077][T14008] [ 433.640019][T14008] dump_stack_lvl+0x18c/0x250 [ 433.644728][T14008] ? show_regs_print_info+0x20/0x20 [ 433.649950][T14008] ? load_image+0x420/0x420 [ 433.654473][T14008] ? __lock_acquire+0x7d80/0x7d80 [ 433.659518][T14008] ? snprintf+0xe9/0x140 [ 433.663785][T14008] should_fail_ex+0x394/0x4c0 [ 433.668492][T14008] _copy_to_user+0x2f/0xa0 [ 433.672929][T14008] simple_read_from_buffer+0xe7/0x150 [ 433.678330][T14008] proc_fail_nth_read+0x1e8/0x260 [ 433.683379][T14008] ? proc_fault_inject_write+0x360/0x360 [ 433.689037][T14008] ? fsnotify_perm+0x271/0x5e0 [ 433.693820][T14008] ? proc_fault_inject_write+0x360/0x360 [ 433.699486][T14008] vfs_read+0x298/0x990 [ 433.703677][T14008] ? kernel_read+0x1e0/0x1e0 [ 433.708304][T14008] ? __fget_files+0x28/0x460 [ 433.712930][T14008] ? __fget_files+0x3fc/0x460 [ 433.717636][T14008] ? __fdget_pos+0x2a3/0x330 [ 433.722250][T14008] ? ksys_read+0x74/0x260 [ 433.726609][T14008] ksys_read+0x151/0x260 [ 433.730875][T14008] ? vfs_write+0x9a0/0x9a0 [ 433.735317][T14008] ? lockdep_hardirqs_on+0x98/0x150 [ 433.740536][T14008] do_syscall_64+0x55/0xb0 [ 433.744976][T14008] ? clear_bhb_loop+0x40/0x90 [ 433.749667][T14008] ? clear_bhb_loop+0x40/0x90 [ 433.754372][T14008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.760291][T14008] RIP: 0033:0x7faab415e68e [ 433.764730][T14008] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 433.784361][T14008] RSP: 002b:00007faab50aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.792805][T14008] RAX: ffffffffffffffda RBX: 00007faab50af6c0 RCX: 00007faab415e68e [ 433.800802][T14008] RDX: 000000000000000f RSI: 00007faab50af0a0 RDI: 0000000000000005 [ 433.808968][T14008] RBP: 00007faab50af090 R08: 0000000000000000 R09: 0000000000000000 [ 433.816964][T14008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.824959][T14008] R13: 00007faab4426038 R14: 00007faab4425fa0 R15: 00007ffcdb83a608 [ 433.833233][T14008] [ 434.371385][T14024] netlink: 'syz.3.2973': attribute type 10 has an invalid length. [ 434.437216][T14022] netlink: 'syz.2.2974': attribute type 3 has an invalid length. [ 434.445210][T14022] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2974'. [ 435.395362][T14066] tap0: tun_chr_ioctl cmd 35111 [ 435.694486][T14073] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2992'. [ 436.253747][T14076] netlink: 'syz.3.2993': attribute type 9 has an invalid length. [ 436.313223][T14077] netlink: 'syz.3.2993': attribute type 10 has an invalid length. [ 437.655432][T14077] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 438.109361][T14094] __nla_validate_parse: 1 callbacks suppressed [ 438.109379][T14094] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2999'. [ 438.165946][T14094] tc_dump_action: action bad kind [ 438.429795][T14107] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3004'. [ 438.527518][T14109] netlink: 'syz.1.3003': attribute type 12 has an invalid length. [ 438.543963][T14109] netlink: 'syz.1.3003': attribute type 15 has an invalid length. [ 438.562049][T14111] FAULT_INJECTION: forcing a failure. [ 438.562049][T14111] name failslab, interval 1, probability 0, space 0, times 0 [ 438.574799][T14111] CPU: 0 PID: 14111 Comm: syz.4.3005 Not tainted syzkaller #0 [ 438.582298][T14111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 438.583772][T14105] netlink: 'syz.1.3003': attribute type 3 has an invalid length. [ 438.592438][T14111] Call Trace: [ 438.592453][T14111] [ 438.592463][T14111] dump_stack_lvl+0x18c/0x250 [ 438.592502][T14111] ? show_regs_print_info+0x20/0x20 [ 438.592525][T14111] ? load_image+0x420/0x420 [ 438.592550][T14111] ? netdev_core_pick_tx+0x370/0x370 [ 438.592577][T14111] should_fail_ex+0x394/0x4c0 [ 438.623770][T14105] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3003'. [ 438.626148][T14111] should_failslab+0x9/0x20 [ 438.626181][T14111] slab_pre_alloc_hook+0x59/0x300 [ 438.626210][T14111] kmem_cache_alloc+0x5a/0x2c0 [ 438.626231][T14111] ? skb_clone+0x1eb/0x370 [ 438.626253][T14111] skb_clone+0x1eb/0x370 [ 438.663168][T14111] bpf_clone_redirect+0x16d/0x4a0 [ 438.668250][T14111] ? bpf_test_run+0x174/0x870 [ 438.672953][T14111] bpf_prog_5e3b4e18def6d727+0x5e/0x63 [ 438.678438][T14111] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 438.684638][T14111] ? preempt_schedule+0xc0/0xd0 [ 438.689528][T14111] ? perf_trace_preemptirq_template+0xac/0x330 [ 438.695722][T14111] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 438.701736][T14111] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 438.707057][T14111] ? lock_chain_count+0x20/0x20 [ 438.711960][T14111] ? __local_bh_disable_ip+0x108/0x1a0 [ 438.717453][T14111] ? __cant_sleep+0x220/0x220 [ 438.722164][T14111] ? __local_bh_enable_ip+0x13a/0x1c0 [ 438.727569][T14111] ? _local_bh_enable+0xa0/0xa0 [ 438.732456][T14111] ? bpf_test_run+0x174/0x870 [ 438.737159][T14111] ? kvm_sched_clock_read+0x11/0x20 [ 438.742388][T14111] bpf_test_run+0x4fa/0x870 [ 438.746931][T14111] ? bpf_test_run+0x174/0x870 [ 438.751634][T14111] ? dst_hold+0x70/0x70 [ 438.755796][T14111] ? __skb_checksum+0x800/0x800 [ 438.760687][T14111] ? convert___skb_to_skb+0x1f9/0x590 [ 438.766069][T14111] ? __asan_memcpy+0x40/0x70 [ 438.770661][T14111] ? convert___skb_to_skb+0x2f6/0x590 [ 438.776030][T14111] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 438.781417][T14111] ? cpu_online+0x60/0x60 [ 438.785754][T14111] bpf_prog_test_run+0x31f/0x390 [ 438.790699][T14111] __sys_bpf+0x49d/0x890 [ 438.794948][T14111] ? bpf_link_show_fdinfo+0x390/0x390 [ 438.800414][T14111] ? lock_chain_count+0x20/0x20 [ 438.805266][T14111] __x64_sys_bpf+0x7c/0x90 [ 438.809683][T14111] do_syscall_64+0x55/0xb0 [ 438.814105][T14111] ? clear_bhb_loop+0x40/0x90 [ 438.818777][T14111] ? clear_bhb_loop+0x40/0x90 [ 438.823451][T14111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.829350][T14111] RIP: 0033:0x7fd7d6f9de59 [ 438.833766][T14111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.853381][T14111] RSP: 002b:00007fd7d7e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 438.861828][T14111] RAX: ffffffffffffffda RBX: 00007fd7d7225fa0 RCX: 00007fd7d6f9de59 [ 438.869805][T14111] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 438.877778][T14111] RBP: 00007fd7d7e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 438.885754][T14111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 438.893744][T14111] R13: 00007fd7d7226038 R14: 00007fd7d7225fa0 R15: 00007fff5d43f738 [ 438.901731][T14111] [ 439.424849][T14134] netlink: 'syz.2.3014': attribute type 10 has an invalid length. [ 439.439733][T14134] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3014'. [ 440.265385][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.274968][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.401377][T14141] netlink: 'syz.4.3015': attribute type 10 has an invalid length. [ 442.487260][T14141] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.534630][T14141] bridge_slave_1: left allmulticast mode [ 442.582053][T14141] bridge_slave_1: left promiscuous mode [ 442.606216][T14141] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.691961][T14141] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 443.700571][T14183] netlink: 'syz.1.3028': attribute type 21 has an invalid length. [ 443.722255][T14183] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3028'. [ 443.876767][T14183] netlink: 'syz.1.3028': attribute type 21 has an invalid length. [ 444.421228][T14193] netlink: 'syz.4.3030': attribute type 29 has an invalid length. [ 444.472104][T14193] netlink: 'syz.4.3030': attribute type 29 has an invalid length. [ 444.504228][T14197] netlink: 'syz.1.3031': attribute type 21 has an invalid length. [ 444.813820][T14206] netlink: 'syz.4.3036': attribute type 10 has an invalid length. [ 446.301815][T14215] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3039'. [ 446.317152][T14215] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3039'. [ 446.726388][T14251] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3053'. [ 446.873978][T14261] FAULT_INJECTION: forcing a failure. [ 446.873978][T14261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.893386][T14261] CPU: 1 PID: 14261 Comm: syz.2.3056 Not tainted syzkaller #0 [ 446.900908][T14261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 446.910968][T14261] Call Trace: [ 446.914246][T14261] [ 446.917183][T14261] dump_stack_lvl+0x18c/0x250 [ 446.921886][T14261] ? show_regs_print_info+0x20/0x20 [ 446.927087][T14261] ? load_image+0x420/0x420 [ 446.931593][T14261] ? __might_fault+0xaa/0x120 [ 446.936270][T14261] should_fail_ex+0x394/0x4c0 [ 446.940949][T14261] copyin+0x1a/0x90 [ 446.944759][T14261] _copy_from_iter+0x532/0x1290 [ 446.949628][T14261] ? copyout_mc+0x70/0x70 [ 446.953955][T14261] ? __virt_addr_valid+0x10c/0x380 [ 446.959069][T14261] ? __virt_addr_valid+0x10c/0x380 [ 446.964180][T14261] ? __virt_addr_valid+0x10c/0x380 [ 446.969292][T14261] ? __check_object_size+0x4fc/0xa40 [ 446.974577][T14261] netlink_sendmsg+0x76b/0xbf0 [ 446.979349][T14261] ? netlink_getsockopt+0x590/0x590 [ 446.984549][T14261] ? apparmor_socket_sendmsg+0x170/0x330 [ 446.990179][T14261] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 446.995459][T14261] ? security_socket_sendmsg+0x80/0xa0 [ 447.000922][T14261] ? netlink_getsockopt+0x590/0x590 [ 447.006125][T14261] ____sys_sendmsg+0x61b/0x980 [ 447.010896][T14261] ? __asan_memset+0x22/0x40 [ 447.015483][T14261] ? __sys_sendmsg_sock+0x30/0x30 [ 447.020507][T14261] ? __import_iovec+0x3fa/0x850 [ 447.025362][T14261] ? import_iovec+0x73/0xa0 [ 447.029958][T14261] ___sys_sendmsg+0x2a6/0x360 [ 447.034644][T14261] ? get_pid_task+0x20/0x1e0 [ 447.039237][T14261] ? __sys_sendmsg+0x2b0/0x2b0 [ 447.044016][T14261] ? __lock_acquire+0x7d80/0x7d80 [ 447.049054][T14261] __se_sys_sendmsg+0x1d0/0x2c0 [ 447.053910][T14261] ? __x64_sys_sendmsg+0x80/0x80 [ 447.058868][T14261] ? lockdep_hardirqs_on+0x98/0x150 [ 447.064064][T14261] do_syscall_64+0x55/0xb0 [ 447.068480][T14261] ? clear_bhb_loop+0x40/0x90 [ 447.073149][T14261] ? clear_bhb_loop+0x40/0x90 [ 447.077819][T14261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.083710][T14261] RIP: 0033:0x7f184ed9de59 [ 447.088120][T14261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.107725][T14261] RSP: 002b:00007f184fc14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.116136][T14261] RAX: ffffffffffffffda RBX: 00007f184f025fa0 RCX: 00007f184ed9de59 [ 447.124107][T14261] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 447.132076][T14261] RBP: 00007f184fc14090 R08: 0000000000000000 R09: 0000000000000000 [ 447.140043][T14261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.148013][T14261] R13: 00007f184f026038 R14: 00007f184f025fa0 R15: 00007ffd8340d2e8 [ 447.155998][T14261] [ 447.181698][T14264] netlink: 'syz.1.3058': attribute type 5 has an invalid length. [ 447.466857][T14273] netlink: 'syz.2.3060': attribute type 1 has an invalid length. [ 447.494878][T14273] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3060'. [ 447.582015][T14276] netlink: 'syz.4.3062': attribute type 3 has an invalid length. [ 447.619176][T14276] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3062'. [ 448.192831][T14292] FAULT_INJECTION: forcing a failure. [ 448.192831][T14292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.209975][T14292] CPU: 1 PID: 14292 Comm: syz.2.3069 Not tainted syzkaller #0 [ 448.217508][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 448.227606][T14292] Call Trace: [ 448.230914][T14292] [ 448.233871][T14292] dump_stack_lvl+0x18c/0x250 [ 448.235042][T14295] netlink: 'syz.1.3070': attribute type 9 has an invalid length. [ 448.238578][T14292] ? show_regs_print_info+0x20/0x20 [ 448.238613][T14292] ? load_image+0x420/0x420 [ 448.238642][T14292] ? __might_fault+0xaa/0x120 [ 448.246577][T14295] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3070'. [ 448.251552][T14292] ? __lock_acquire+0x7d80/0x7d80 [ 448.251584][T14292] ? __virt_addr_valid+0x10c/0x380 [ 448.251611][T14292] should_fail_ex+0x394/0x4c0 [ 448.251644][T14292] _copy_to_user+0x2f/0xa0 [ 448.251667][T14292] generic_map_lookup_batch+0x85d/0xc60 [ 448.251717][T14292] ? bpf_map_update_value+0x710/0x710 [ 448.251756][T14292] ? __fdget+0x180/0x210 [ 448.251785][T14292] ? bpf_map_update_value+0x710/0x710 [ 448.251803][T14292] bpf_map_do_batch+0x2e3/0x600 [ 448.251826][T14292] ? bpf_lsm_bpf+0x9/0x10 [ 448.251848][T14292] ? security_bpf+0x7e/0xa0 [ 448.251877][T14292] __sys_bpf+0x7d7/0x890 [ 448.251904][T14292] ? bpf_link_show_fdinfo+0x390/0x390 [ 448.251957][T14292] ? lock_chain_count+0x20/0x20 [ 448.251999][T14292] __x64_sys_bpf+0x7c/0x90 [ 448.252023][T14292] do_syscall_64+0x55/0xb0 [ 448.252049][T14292] ? clear_bhb_loop+0x40/0x90 [ 448.252068][T14292] ? clear_bhb_loop+0x40/0x90 [ 448.252091][T14292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.252117][T14292] RIP: 0033:0x7f184ed9de59 [ 448.252139][T14292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.252156][T14292] RSP: 002b:00007f184fc14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.252181][T14292] RAX: ffffffffffffffda RBX: 00007f184f025fa0 RCX: 00007f184ed9de59 [ 448.252197][T14292] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 448.252212][T14292] RBP: 00007f184fc14090 R08: 0000000000000000 R09: 0000000000000000 [ 448.252226][T14292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.252238][T14292] R13: 00007f184f026038 R14: 00007f184f025fa0 R15: 00007ffd8340d2e8 [ 448.252276][T14292] [ 448.973534][T14323] IPv6: Can't replace route, no match found [ 449.009499][T14322] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3080'. [ 449.041776][T14322] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3080'. [ 449.072736][T14328] netlink: 'syz.1.3079': attribute type 10 has an invalid length. [ 449.081482][T14328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3079'. [ 449.095101][T14328] batman_adv: batadv0: Adding interface: virt_wifi0 [ 449.102126][T14328] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.131142][T14328] batman_adv: batadv0: Interface activated: virt_wifi0 [ 449.446207][T14342] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3086'. [ 449.889891][T14356] FAULT_INJECTION: forcing a failure. [ 449.889891][T14356] name failslab, interval 1, probability 0, space 0, times 0 [ 449.890919][T14355] netlink: 'syz.1.3088': attribute type 33 has an invalid length. [ 449.912062][T14356] CPU: 0 PID: 14356 Comm: syz.2.3091 Not tainted syzkaller #0 [ 449.919588][T14356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.929679][T14356] Call Trace: [ 449.932981][T14356] [ 449.935917][T14355] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3088'. [ 449.935925][T14356] dump_stack_lvl+0x18c/0x250 [ 449.949655][T14356] ? show_regs_print_info+0x20/0x20 [ 449.954894][T14356] ? load_image+0x420/0x420 [ 449.959428][T14356] ? __might_sleep+0xe0/0xe0 [ 449.964051][T14356] ? __lock_acquire+0x7d80/0x7d80 [ 449.969115][T14356] should_fail_ex+0x394/0x4c0 [ 449.973832][T14356] should_failslab+0x9/0x20 [ 449.978367][T14356] slab_pre_alloc_hook+0x59/0x300 [ 449.983425][T14356] ? __get_vm_area_node+0x125/0x370 [ 449.988654][T14356] __kmem_cache_alloc_node+0x53/0x250 [ 449.994062][T14356] ? __get_vm_area_node+0x125/0x370 [ 449.999291][T14356] kmalloc_node_trace+0x26/0xe0 [ 450.004180][T14356] __get_vm_area_node+0x125/0x370 [ 450.009245][T14356] __vmalloc_node_range+0x36f/0x1320 [ 450.014570][T14356] ? netlink_sendmsg+0x602/0xbf0 [ 450.019568][T14356] ? netlink_insert+0x1094/0x1390 [ 450.024637][T14356] ? netlink_insert+0x2ba/0x1390 [ 450.029608][T14356] ? free_vm_area+0x50/0x50 [ 450.034148][T14356] ? netlink_sendmsg+0x602/0xbf0 [ 450.039113][T14356] vmalloc+0x79/0x90 [ 450.043041][T14356] ? netlink_sendmsg+0x602/0xbf0 [ 450.048012][T14356] netlink_sendmsg+0x602/0xbf0 [ 450.052814][T14356] ? netlink_getsockopt+0x590/0x590 [ 450.057672][T14360] netlink: 'syz.4.3092': attribute type 33 has an invalid length. [ 450.058024][T14356] ? apparmor_socket_sendmsg+0x8e/0x330 [ 450.071388][T14356] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 450.076706][T14356] ? security_socket_sendmsg+0x80/0xa0 [ 450.082205][T14356] sock_write_iter+0x2dc/0x420 [ 450.083909][T14360] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3092'. [ 450.086982][T14356] ? sock_read_iter+0x3f0/0x3f0 [ 450.087015][T14356] ? common_file_perm+0x198/0x1f0 [ 450.087041][T14356] vfs_write+0x474/0x9a0 [ 450.087069][T14356] ? file_end_write+0x250/0x250 [ 450.087093][T14356] ? __fget_files+0x3fc/0x460 [ 450.119765][T14356] ? __fdget_pos+0x1d8/0x330 [ 450.124387][T14356] ? ksys_write+0x74/0x260 [ 450.128846][T14356] ksys_write+0x151/0x260 [ 450.133211][T14356] ? __ia32_sys_read+0x90/0x90 [ 450.138012][T14356] ? trace_sys_enter+0x1f/0x80 [ 450.142814][T14356] do_syscall_64+0x55/0xb0 [ 450.147259][T14356] ? clear_bhb_loop+0x40/0x90 [ 450.151955][T14356] ? clear_bhb_loop+0x40/0x90 [ 450.156648][T14356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.162577][T14356] RIP: 0033:0x7f184ed9de59 [ 450.167029][T14356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.186669][T14356] RSP: 002b:00007f184fc14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.195126][T14356] RAX: ffffffffffffffda RBX: 00007f184f025fa0 RCX: 00007f184ed9de59 [ 450.203127][T14356] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 000000000000000a [ 450.211125][T14356] RBP: 00007f184fc14090 R08: 0000000000000000 R09: 0000000000000000 [ 450.219116][T14356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.227092][T14356] R13: 00007f184f026038 R14: 00007f184f025fa0 R15: 00007ffd8340d2e8 [ 450.235083][T14356] [ 450.246265][T14356] syz.2.3091: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 450.284871][T14356] CPU: 0 PID: 14356 Comm: syz.2.3091 Not tainted syzkaller #0 [ 450.292390][T14356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 450.302472][T14356] Call Trace: [ 450.305770][T14356] [ 450.308812][T14356] dump_stack_lvl+0x18c/0x250 [ 450.313521][T14356] ? show_regs_print_info+0x20/0x20 [ 450.318751][T14356] ? load_image+0x420/0x420 [ 450.323287][T14356] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 450.329740][T14356] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 450.331693][T14367] netlink: 'syz.3.3096': attribute type 29 has an invalid length. [ 450.336264][T14356] warn_alloc+0x246/0x340 [ 450.336297][T14356] ? __get_vm_area_node+0x125/0x370 [ 450.336321][T14356] ? zone_watermark_ok_safe+0x230/0x230 [ 450.336342][T14356] ? rcu_is_watching+0x15/0xb0 [ 450.336368][T14356] ? __get_vm_area_node+0x356/0x370 [ 450.336397][T14356] __vmalloc_node_range+0x394/0x1320 [ 450.336417][T14356] ? netlink_insert+0x1094/0x1390 [ 450.336451][T14356] ? netlink_insert+0x2ba/0x1390 [ 450.336481][T14356] ? free_vm_area+0x50/0x50 [ 450.336510][T14356] ? netlink_sendmsg+0x602/0xbf0 [ 450.336533][T14356] vmalloc+0x79/0x90 [ 450.336554][T14356] ? netlink_sendmsg+0x602/0xbf0 [ 450.336584][T14356] netlink_sendmsg+0x602/0xbf0 [ 450.336621][T14356] ? netlink_getsockopt+0x590/0x590 [ 450.336646][T14356] ? apparmor_socket_sendmsg+0x8e/0x330 [ 450.336667][T14356] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 450.336687][T14356] ? security_socket_sendmsg+0x80/0xa0 [ 450.428971][T14356] sock_write_iter+0x2dc/0x420 [ 450.433738][T14356] ? sock_read_iter+0x3f0/0x3f0 [ 450.438609][T14356] ? common_file_perm+0x198/0x1f0 [ 450.443637][T14356] vfs_write+0x474/0x9a0 [ 450.447880][T14356] ? file_end_write+0x250/0x250 [ 450.452725][T14356] ? __fget_files+0x3fc/0x460 [ 450.457396][T14356] ? __fdget_pos+0x1d8/0x330 [ 450.461982][T14356] ? ksys_write+0x74/0x260 [ 450.466395][T14356] ksys_write+0x151/0x260 [ 450.470740][T14356] ? __ia32_sys_read+0x90/0x90 [ 450.475495][T14356] ? trace_sys_enter+0x1f/0x80 [ 450.480357][T14356] do_syscall_64+0x55/0xb0 [ 450.484802][T14356] ? clear_bhb_loop+0x40/0x90 [ 450.489500][T14356] ? clear_bhb_loop+0x40/0x90 [ 450.494194][T14356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.500107][T14356] RIP: 0033:0x7f184ed9de59 [ 450.504543][T14356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.524162][T14356] RSP: 002b:00007f184fc14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.532582][T14356] RAX: ffffffffffffffda RBX: 00007f184f025fa0 RCX: 00007f184ed9de59 [ 450.540550][T14356] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 000000000000000a [ 450.548526][T14356] RBP: 00007f184fc14090 R08: 0000000000000000 R09: 0000000000000000 [ 450.556590][T14356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.564627][T14356] R13: 00007f184f026038 R14: 00007f184f025fa0 R15: 00007ffd8340d2e8 [ 450.572622][T14356] [ 450.614857][T14367] netlink: 'syz.3.3096': attribute type 29 has an invalid length. [ 450.629442][T14368] netlink: 'syz.3.3096': attribute type 29 has an invalid length. [ 450.646907][T14356] Mem-Info: [ 450.650094][T14356] active_anon:5856 inactive_anon:0 isolated_anon:0 [ 450.650094][T14356] active_file:18614 inactive_file:40104 isolated_file:0 [ 450.650094][T14356] unevictable:768 dirty:248 writeback:0 [ 450.650094][T14356] slab_reclaimable:10603 slab_unreclaimable:97006 [ 450.650094][T14356] mapped:30793 shmem:1361 pagetables:609 [ 450.650094][T14356] sec_pagetables:0 bounce:0 [ 450.650094][T14356] kernel_misc_reclaimable:0 [ 450.650094][T14356] free:1330128 free_pcp:10529 free_cma:0 [ 450.657711][T14369] netlink: 'syz.3.3096': attribute type 29 has an invalid length. [ 450.722501][T14356] Node 0 active_anon:23424kB inactive_anon:0kB active_file:74456kB inactive_file:160220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123172kB dirty:992kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11460kB pagetables:2436kB sec_pagetables:0kB all_unreclaimable? no [ 450.833641][T14356] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 450.916694][T14356] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 450.944943][T14372] netlink: 'syz.4.3097': attribute type 11 has an invalid length. [ 450.955410][T14372] netlink: 126292 bytes leftover after parsing attributes in process `syz.4.3097'. [ 450.981959][T14356] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 450.989441][T14356] Node 0 DMA32 free:1406740kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23188kB inactive_anon:0kB active_file:74456kB inactive_file:159388kB unevictable:1536kB writepending:992kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:28680kB local_pcp:15028kB free_cma:0kB [ 451.040504][T14374] netlink: 'syz.3.3098': attribute type 10 has an invalid length. [ 451.056082][T14374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3098'. [ 451.075577][T14356] lowmem_reserve[]: 0 0 0 0 0 [ 451.080468][T14356] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 451.087860][T14374] ipvlan1: entered promiscuous mode [ 451.107288][T14356] lowmem_reserve[]: 0 0 0 0 0 [ 451.107332][T14356] Node 1 Normal free:3898472kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12928kB local_pcp:9792kB free_cma:0kB [ 451.107391][T14356] lowmem_reserve[]: 0 0 0 0 0 [ 451.107437][T14356] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 451.107569][T14356] Node 0 DMA32: 99*4kB (UM) 797*8kB (UME) 996*16kB (ME) 761*32kB (UME) [ 451.156344][T14374] bridge0: port 3(ipvlan1) entered blocking state [ 451.164975][T14356] 405*64kB (UME) 160*128kB (UM) 81*256kB (UME) 34*512kB (UM) 11*1024kB (UM) 1*2048kB (U) 308*4096kB (M) = 1406484kB [ 451.192313][T14356] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 451.204298][T14356] Node 1 Normal: 222*4kB (UME) 50*8kB (UME) 36*16kB (UME) 163*32kB (UME) 27*64kB (UME) 4*128kB (UE) 0*256kB 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3898472kB [ 451.222715][T14356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.232367][T14356] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 451.241747][T14356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.251426][T14356] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 451.260773][T14356] 60079 total pagecache pages [ 451.265485][T14356] 0 pages in swap cache [ 451.265597][T14374] bridge0: port 3(ipvlan1) entered disabled state [ 451.269692][T14356] Free swap = 124996kB [ 451.269703][T14356] Total swap = 124996kB [ 451.269712][T14356] 2097051 pages RAM [ 451.269719][T14356] 0 pages HighMem/MovableOnly [ 451.269725][T14356] 416953 pages reserved [ 451.269732][T14356] 0 pages cma reserved [ 451.359113][T14374] ipvlan1: entered allmulticast mode [ 451.364815][T14374] veth0_vlan: entered allmulticast mode [ 451.397482][T14374] ipvlan1: left allmulticast mode [ 451.415993][T14374] veth0_vlan: left allmulticast mode [ 451.434461][T14374] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 451.802032][T14384] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3101'. [ 451.866795][T14384] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 451.884178][T14384] CPU: 1 PID: 14384 Comm: syz.1.3101 Not tainted syzkaller #0 [ 451.891716][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 451.901908][T14384] Call Trace: [ 451.905215][T14384] [ 451.908186][T14384] dump_stack_lvl+0x18c/0x250 [ 451.912918][T14384] ? show_regs_print_info+0x20/0x20 [ 451.918168][T14384] ? load_image+0x420/0x420 [ 451.922737][T14384] sysfs_warn_dup+0x8e/0xa0 [ 451.927266][T14384] sysfs_do_create_link_sd+0xc0/0x110 [ 451.932663][T14384] device_add_class_symlinks+0x1cf/0x240 [ 451.938328][T14384] device_add+0x4f9/0xc40 [ 451.942683][T14384] wiphy_register+0x1d99/0x2ac0 [ 451.947581][T14384] ? cfg80211_event_work+0x40/0x40 [ 451.952703][T14384] ? minstrel_ht_alloc+0x88a/0x990 [ 451.957879][T14384] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 451.964055][T14384] ieee80211_register_hw+0x2dd8/0x3b30 [ 451.969568][T14384] ? ieee80211_register_hw+0xef1/0x3b30 [ 451.975143][T14384] ? ieee80211_tasklet_handler+0x20/0x20 [ 451.980788][T14384] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 451.986714][T14384] ? __debug_object_init+0xec/0x450 [ 451.991943][T14384] ? __asan_memset+0x22/0x40 [ 451.996552][T14384] ? __hrtimer_init+0x189/0x270 [ 452.001436][T14384] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 452.007213][T14384] ? mac80211_hwsim_free+0x220/0x220 [ 452.012513][T14384] ? rcu_is_watching+0x15/0xb0 [ 452.017290][T14384] ? kstrndup+0xbd/0x140 [ 452.021567][T14384] hwsim_new_radio_nl+0xdad/0x1a70 [ 452.026709][T14384] ? __nla_validate+0x50/0x50 [ 452.031458][T14384] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 452.037835][T14384] ? __nla_parse+0x40/0x50 [ 452.042280][T14384] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 452.048637][T14384] genl_family_rcv_msg_doit+0x21a/0x310 [ 452.054220][T14384] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 452.060152][T14384] ? bpf_lsm_capable+0x9/0x10 [ 452.064872][T14384] ? security_capable+0x89/0xb0 [ 452.069750][T14384] genl_rcv_msg+0x611/0x7a0 [ 452.074287][T14384] ? genl_bind+0x360/0x360 [ 452.078723][T14384] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 452.085074][T14384] ? perf_trace_lock+0x303/0x3b0 [ 452.090039][T14384] ? __kasan_kmalloc_large+0x8b/0xa0 [ 452.095362][T14384] netlink_rcv_skb+0x235/0x4c0 [ 452.100152][T14384] ? genl_bind+0x360/0x360 [ 452.104590][T14384] ? netlink_ack+0x1160/0x1160 [ 452.109389][T14384] ? __lock_acquire+0x7d80/0x7d80 [ 452.114448][T14384] ? down_read+0x1ac/0x2e0 [ 452.118882][T14384] genl_rcv+0x28/0x40 [ 452.122893][T14384] netlink_unicast+0x7b1/0x930 [ 452.127694][T14384] netlink_sendmsg+0x8d0/0xbf0 [ 452.132490][T14384] ? netlink_getsockopt+0x590/0x590 [ 452.137710][T14384] ? apparmor_socket_sendmsg+0x8e/0x330 [ 452.143272][T14384] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 452.148582][T14384] ? security_socket_sendmsg+0x80/0xa0 [ 452.154089][T14384] ? netlink_getsockopt+0x590/0x590 [ 452.159341][T14384] ____sys_sendmsg+0x61b/0x980 [ 452.164153][T14384] ? __asan_memset+0x22/0x40 [ 452.168764][T14384] ? __sys_sendmsg_sock+0x30/0x30 [ 452.173836][T14384] ? __import_iovec+0x5f2/0x850 [ 452.178724][T14384] ? import_iovec+0x73/0xa0 [ 452.183247][T14384] ___sys_sendmsg+0x2a6/0x360 [ 452.187963][T14384] ? __sys_sendmsg+0x2b0/0x2b0 [ 452.192838][T14384] __se_sys_sendmsg+0x1d0/0x2c0 [ 452.197710][T14384] ? __x64_sys_sendmsg+0x80/0x80 [ 452.202696][T14384] ? lockdep_hardirqs_on+0x98/0x150 [ 452.207911][T14384] do_syscall_64+0x55/0xb0 [ 452.212344][T14384] ? clear_bhb_loop+0x40/0x90 [ 452.217030][T14384] ? clear_bhb_loop+0x40/0x90 [ 452.221725][T14384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.227637][T14384] RIP: 0033:0x7f23bc39de59 [ 452.232066][T14384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.251698][T14384] RSP: 002b:00007f23ba5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.260417][T14384] RAX: ffffffffffffffda RBX: 00007f23bc625fa0 RCX: 00007f23bc39de59 [ 452.268399][T14384] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 452.276379][T14384] RBP: 00007f23bc433e6f R08: 0000000000000000 R09: 0000000000000000 [ 452.284361][T14384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.292369][T14384] R13: 00007f23bc626038 R14: 00007f23bc625fa0 R15: 00007ffc72535298 [ 452.300381][T14384] [ 452.599292][T14397] FAULT_INJECTION: forcing a failure. [ 452.599292][T14397] name failslab, interval 1, probability 0, space 0, times 0 [ 452.619822][T14397] CPU: 0 PID: 14397 Comm: syz.1.3106 Not tainted syzkaller #0 [ 452.627340][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 452.637424][T14397] Call Trace: [ 452.640726][T14397] [ 452.643671][T14397] dump_stack_lvl+0x18c/0x250 [ 452.648384][T14397] ? show_regs_print_info+0x20/0x20 [ 452.653611][T14397] ? load_image+0x420/0x420 [ 452.658138][T14397] ? __might_sleep+0xe0/0xe0 [ 452.662746][T14397] ? __lock_acquire+0x7d80/0x7d80 [ 452.667788][T14397] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 452.673447][T14397] should_fail_ex+0x394/0x4c0 [ 452.678151][T14397] should_failslab+0x9/0x20 [ 452.682670][T14397] slab_pre_alloc_hook+0x59/0x300 [ 452.687719][T14397] kmem_cache_alloc_node+0x5e/0x310 [ 452.692943][T14397] ? __alloc_skb+0x103/0x2c0 [ 452.697561][T14397] __alloc_skb+0x103/0x2c0 [ 452.702010][T14397] __ip6_append_data+0x2be0/0x3d40 [ 452.707168][T14397] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 452.712051][T14397] ? ip6_mtu+0x7d/0x3f0 [ 452.716242][T14397] ? ip6_setup_cork+0xff0/0xff0 [ 452.721117][T14397] ? ip6_setup_cork+0xa4a/0xff0 [ 452.725987][T14397] ip6_make_skb+0x39c/0x520 [ 452.730511][T14397] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 452.735400][T14397] ? __ip6_flush_pending_frames+0x3a0/0x3a0 [ 452.741332][T14397] ? verify_lock_unused+0x140/0x140 [ 452.746555][T14397] ? udpv6_sendmsg+0x161b/0x2350 [ 452.751519][T14397] udpv6_sendmsg+0x1bc4/0x2350 [ 452.756387][T14397] ? release_sock+0x2f/0x1c0 [ 452.761019][T14397] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 452.765886][T14397] ? print_unlock_imbalance_bug+0x160/0x160 [ 452.771803][T14397] ? udp_v6_early_demux+0xf90/0xf90 [ 452.777054][T14397] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 452.783054][T14397] ? __local_bh_enable_ip+0x13a/0x1c0 [ 452.788433][T14397] ? _local_bh_enable+0xa0/0xa0 [ 452.793291][T14397] ? inet_send_prepare+0x1ae/0x250 [ 452.798398][T14397] ? inet_send_prepare+0x1ae/0x250 [ 452.803512][T14397] ? inet6_sendmsg+0x5f/0xd0 [ 452.808096][T14397] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 452.813293][T14397] ____sys_sendmsg+0x61b/0x980 [ 452.818061][T14397] ? __asan_memset+0x22/0x40 [ 452.822653][T14397] ? __sys_sendmsg_sock+0x30/0x30 [ 452.827676][T14397] ? __import_iovec+0x3fa/0x850 [ 452.832528][T14397] ? import_iovec+0x73/0xa0 [ 452.837032][T14397] ___sys_sendmsg+0x2a6/0x360 [ 452.841710][T14397] ? get_pid_task+0x20/0x1e0 [ 452.846304][T14397] ? __sys_sendmsg+0x2b0/0x2b0 [ 452.851081][T14397] ? __lock_acquire+0x7d80/0x7d80 [ 452.856120][T14397] __se_sys_sendmsg+0x1d0/0x2c0 [ 452.861066][T14397] ? __x64_sys_sendmsg+0x80/0x80 [ 452.866019][T14397] ? lockdep_hardirqs_on+0x98/0x150 [ 452.871218][T14397] do_syscall_64+0x55/0xb0 [ 452.875633][T14397] ? clear_bhb_loop+0x40/0x90 [ 452.880303][T14397] ? clear_bhb_loop+0x40/0x90 [ 452.884972][T14397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.890863][T14397] RIP: 0033:0x7f23bc39de59 [ 452.895273][T14397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.914877][T14397] RSP: 002b:00007f23ba5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.923310][T14397] RAX: ffffffffffffffda RBX: 00007f23bc625fa0 RCX: 00007f23bc39de59 [ 452.931380][T14397] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 452.939358][T14397] RBP: 00007f23ba5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 452.947329][T14397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.955296][T14397] R13: 00007f23bc626038 R14: 00007f23bc625fa0 R15: 00007ffc72535298 [ 452.963281][T14397] [ 453.289801][T14406] syzkaller0: entered promiscuous mode [ 453.364534][T14406] syzkaller0: entered allmulticast mode [ 453.375131][T14414] netlink: 'syz.3.3111': attribute type 1 has an invalid length. [ 453.407340][T14414] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3111'. [ 455.860511][T14423] vlan0: entered allmulticast mode [ 455.866878][T14423] veth0_vlan: entered allmulticast mode [ 455.910031][T14425] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 456.154902][T14443] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3118'. [ 456.821157][T14454] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3125'. [ 456.920829][T14454] netlink: 'syz.2.3125': attribute type 39 has an invalid length. [ 457.348646][T14456] delete_channel: no stack [ 457.474148][T14472] veth1_macvtap: left promiscuous mode [ 457.863894][T14482] netlink: 'syz.4.3134': attribute type 10 has an invalid length. [ 459.425142][T14506] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3142'. [ 459.691329][T14511] IPv6: NLM_F_CREATE should be specified when creating new route [ 459.717861][T14511] IPv6: Can't replace route, no match found [ 460.120931][T14525] netlink: 'syz.1.3151': attribute type 10 has an invalid length. [ 460.360611][T14525] team0: left promiscuous mode [ 460.365635][T14525] team_slave_1: left promiscuous mode [ 460.373566][T14525] team0: left allmulticast mode [ 460.379349][T14525] team_slave_1: left allmulticast mode [ 460.403638][T14532] C: renamed from team_slave_0 (while UP) [ 460.436880][T14532] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3150'. [ 461.164202][T14558] FAULT_INJECTION: forcing a failure. [ 461.164202][T14558] name failslab, interval 1, probability 0, space 0, times 0 [ 461.176974][T14558] CPU: 1 PID: 14558 Comm: syz.3.3160 Not tainted syzkaller #0 [ 461.184450][T14558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 461.194520][T14558] Call Trace: [ 461.197828][T14558] [ 461.200783][T14558] dump_stack_lvl+0x18c/0x250 [ 461.205487][T14558] ? show_regs_print_info+0x20/0x20 [ 461.210685][T14558] ? load_image+0x420/0x420 [ 461.215394][T14558] ? netdev_core_pick_tx+0x370/0x370 [ 461.220701][T14558] should_fail_ex+0x394/0x4c0 [ 461.225402][T14558] should_failslab+0x9/0x20 [ 461.229922][T14558] slab_pre_alloc_hook+0x59/0x300 [ 461.235026][T14558] kmem_cache_alloc+0x5a/0x2c0 [ 461.239806][T14558] ? skb_clone+0x1eb/0x370 [ 461.244233][T14558] skb_clone+0x1eb/0x370 [ 461.248482][T14558] bpf_clone_redirect+0x16d/0x4a0 [ 461.253526][T14558] bpf_prog_bfd3cab142e322d3+0x5e/0x63 [ 461.259004][T14558] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 461.264997][T14558] ? __lock_acquire+0x7d80/0x7d80 [ 461.270027][T14558] ? lock_chain_count+0x20/0x20 [ 461.274881][T14558] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 461.280860][T14558] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 461.286147][T14558] ? lock_chain_count+0x20/0x20 [ 461.291000][T14558] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 461.297336][T14558] ? __local_bh_disable_ip+0x108/0x1a0 [ 461.302795][T14558] ? __cant_sleep+0x220/0x220 [ 461.307476][T14558] ? __local_bh_enable_ip+0x13a/0x1c0 [ 461.312847][T14558] ? _local_bh_enable+0xa0/0xa0 [ 461.317705][T14558] ? bpf_test_timer_continue+0x135/0x380 [ 461.323337][T14558] ? bpf_test_run+0x174/0x870 [ 461.328018][T14558] bpf_test_run+0x2df/0x870 [ 461.332535][T14558] ? bpf_test_run+0x174/0x870 [ 461.337215][T14558] ? dst_hold+0x70/0x70 [ 461.341373][T14558] ? eth_get_headlen+0x210/0x210 [ 461.346351][T14558] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 461.351743][T14558] ? cpu_online+0x60/0x60 [ 461.356074][T14558] bpf_prog_test_run+0x31f/0x390 [ 461.361020][T14558] __sys_bpf+0x49d/0x890 [ 461.365265][T14558] ? bpf_link_show_fdinfo+0x390/0x390 [ 461.370648][T14558] ? lock_chain_count+0x20/0x20 [ 461.375505][T14558] __x64_sys_bpf+0x7c/0x90 [ 461.379921][T14558] do_syscall_64+0x55/0xb0 [ 461.384345][T14558] ? clear_bhb_loop+0x40/0x90 [ 461.389022][T14558] ? clear_bhb_loop+0x40/0x90 [ 461.393701][T14558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.399601][T14558] RIP: 0033:0x7faab419de59 [ 461.404016][T14558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.423628][T14558] RSP: 002b:00007faab50af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.432138][T14558] RAX: ffffffffffffffda RBX: 00007faab4425fa0 RCX: 00007faab419de59 [ 461.440108][T14558] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 461.448077][T14558] RBP: 00007faab50af090 R08: 0000000000000000 R09: 0000000000000000 [ 461.456047][T14558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.464017][T14558] R13: 00007faab4426038 R14: 00007faab4425fa0 R15: 00007ffcdb83a608 [ 461.472003][T14558] [ 462.029723][T14585] FAULT_INJECTION: forcing a failure. [ 462.029723][T14585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.053599][T14579] netlink: 'syz.3.3167': attribute type 10 has an invalid length. [ 462.078797][T14579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3167'. [ 462.092699][T14585] CPU: 1 PID: 14585 Comm: syz.2.3168 Not tainted syzkaller #0 [ 462.100259][T14585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.110372][T14585] Call Trace: [ 462.113693][T14585] [ 462.116670][T14585] dump_stack_lvl+0x18c/0x250 [ 462.121422][T14585] ? show_regs_print_info+0x20/0x20 [ 462.126694][T14585] ? load_image+0x420/0x420 [ 462.131262][T14585] ? __lock_acquire+0x7d80/0x7d80 [ 462.135106][T14579] batman_adv: batadv0: Adding interface: virt_wifi0 [ 462.136395][T14585] ? snprintf+0xe9/0x140 [ 462.136443][T14585] should_fail_ex+0x394/0x4c0 [ 462.136487][T14585] _copy_to_user+0x2f/0xa0 [ 462.136520][T14585] simple_read_from_buffer+0xe7/0x150 [ 462.136569][T14585] proc_fail_nth_read+0x1e8/0x260 [ 462.136608][T14585] ? proc_fault_inject_write+0x360/0x360 [ 462.136651][T14585] ? fsnotify_perm+0x271/0x5e0 [ 462.136680][T14585] ? proc_fault_inject_write+0x360/0x360 [ 462.136714][T14585] vfs_read+0x298/0x990 [ 462.136761][T14585] ? kernel_read+0x1e0/0x1e0 [ 462.136797][T14585] ? __fget_files+0x28/0x460 [ 462.136830][T14585] ? __fget_files+0x3fc/0x460 [ 462.136903][T14585] ? __fdget_pos+0x2a3/0x330 [ 462.136927][T14585] ? ksys_read+0x74/0x260 [ 462.136965][T14585] ksys_read+0x151/0x260 [ 462.137000][T14585] ? vfs_write+0x9a0/0x9a0 [ 462.137043][T14585] ? lockdep_hardirqs_on+0x98/0x150 [ 462.137085][T14585] do_syscall_64+0x55/0xb0 [ 462.137112][T14585] ? clear_bhb_loop+0x40/0x90 [ 462.137134][T14585] ? clear_bhb_loop+0x40/0x90 [ 462.137164][T14585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.137193][T14585] RIP: 0033:0x7f184ed5e68e [ 462.137221][T14585] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 462.137242][T14585] RSP: 002b:00007f184fc13fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 462.137278][T14585] RAX: ffffffffffffffda RBX: 00007f184fc146c0 RCX: 00007f184ed5e68e [ 462.137296][T14585] RDX: 000000000000000f RSI: 00007f184fc140a0 RDI: 0000000000000005 [ 462.137314][T14585] RBP: 00007f184fc14090 R08: 0000000000000000 R09: 0000000000000000 [ 462.137331][T14585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.137347][T14585] R13: 00007f184f026038 R14: 00007f184f025fa0 R15: 00007ffd8340d2e8 [ 462.137417][T14585] [ 462.406154][T14579] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.476923][T14579] batman_adv: batadv0: Interface activated: virt_wifi0 [ 462.755785][T14592] netlink: 'syz.3.3170': attribute type 21 has an invalid length. [ 462.770602][T14592] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3170'. [ 462.839019][T14592] netlink: 'syz.3.3170': attribute type 21 has an invalid length. [ 463.262891][T14606] netlink: 'syz.2.3176': attribute type 3 has an invalid length. [ 463.287789][T14606] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3176'. [ 463.340050][T14612] netlink: 'syz.1.3178': attribute type 3 has an invalid length. [ 463.355964][T14612] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3178'. [ 463.683546][T14627] netlink: 'syz.2.3180': attribute type 10 has an invalid length. [ 463.696060][T14627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3180'. [ 463.744258][T14627] batman_adv: batadv0: Adding interface: virt_wifi0 [ 463.753825][T14627] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.761343][T14628] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3182'. [ 463.780050][T14627] batman_adv: batadv0: Interface activated: virt_wifi0 [ 464.231472][T14634] netlink: 'syz.4.3184': attribute type 21 has an invalid length. [ 464.852790][T14644] netlink: 'syz.2.3189': attribute type 21 has an invalid length. [ 464.874701][T14642] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3195'. [ 464.890371][T14644] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3189'. [ 465.041367][T14649] netlink: 'syz.3.3190': attribute type 3 has an invalid length. [ 465.066099][T14649] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3190'. [ 465.706127][T14647] netlink: 'syz.2.3189': attribute type 21 has an invalid length. [ 466.161241][T14669] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3198'. [ 466.186563][T14669] FAULT_INJECTION: forcing a failure. [ 466.186563][T14669] name failslab, interval 1, probability 0, space 0, times 0 [ 466.239211][T14669] CPU: 1 PID: 14669 Comm: syz.4.3198 Not tainted syzkaller #0 [ 466.246761][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.256844][T14669] Call Trace: [ 466.260148][T14669] [ 466.263098][T14669] dump_stack_lvl+0x18c/0x250 [ 466.267811][T14669] ? show_regs_print_info+0x20/0x20 [ 466.273040][T14669] ? load_image+0x420/0x420 [ 466.277581][T14669] ? verify_lock_unused+0x140/0x140 [ 466.282822][T14669] should_fail_ex+0x394/0x4c0 [ 466.287539][T14669] should_failslab+0x9/0x20 [ 466.292069][T14669] slab_pre_alloc_hook+0x59/0x300 [ 466.297137][T14669] kmem_cache_alloc+0x5a/0x2c0 [ 466.301919][T14669] ? skb_clone+0x1eb/0x370 [ 466.306364][T14669] skb_clone+0x1eb/0x370 [ 466.310629][T14669] __netlink_deliver_tap+0x411/0x7f0 [ 466.315964][T14669] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.321193][T14669] netlink_deliver_tap+0x19c/0x1b0 [ 466.326333][T14669] netlink_sendskb+0x68/0x130 [ 466.331042][T14669] netlink_ack+0xcd5/0x1160 [ 466.335575][T14669] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 466.341712][T14669] ? netlink_dump+0xec0/0xec0 [ 466.346419][T14669] ? perf_trace_lock+0x303/0x3b0 [ 466.351428][T14669] netlink_rcv_skb+0x2b3/0x4c0 [ 466.356220][T14669] ? rtnetlink_bind+0x80/0x80 [ 466.360922][T14669] ? netlink_ack+0x1160/0x1160 [ 466.365740][T14669] ? __lock_acquire+0x7d80/0x7d80 [ 466.370802][T14669] ? __rcu_read_unlock+0x7c/0xd0 [ 466.375760][T14669] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.380995][T14669] netlink_unicast+0x7b1/0x930 [ 466.385810][T14669] netlink_sendmsg+0x8d0/0xbf0 [ 466.390630][T14669] ? netlink_getsockopt+0x590/0x590 [ 466.395884][T14669] ? apparmor_socket_sendmsg+0x8e/0x330 [ 466.401548][T14669] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 466.406856][T14669] ? security_socket_sendmsg+0x80/0xa0 [ 466.412331][T14669] ? netlink_getsockopt+0x590/0x590 [ 466.417566][T14669] ____sys_sendmsg+0x61b/0x980 [ 466.422371][T14669] ? __asan_memset+0x22/0x40 [ 466.426983][T14669] ? __sys_sendmsg_sock+0x30/0x30 [ 466.432024][T14669] ? __import_iovec+0x5f2/0x850 [ 466.436916][T14669] ? import_iovec+0x73/0xa0 [ 466.441448][T14669] ___sys_sendmsg+0x2a6/0x360 [ 466.446183][T14669] ? __sys_sendmsg+0x2b0/0x2b0 [ 466.451022][T14669] ? __lock_acquire+0x7d80/0x7d80 [ 466.456159][T14669] __se_sys_sendmsg+0x1d0/0x2c0 [ 466.461039][T14669] ? __x64_sys_sendmsg+0x80/0x80 [ 466.466041][T14669] ? lockdep_hardirqs_on+0x98/0x150 [ 466.471272][T14669] do_syscall_64+0x55/0xb0 [ 466.475719][T14669] ? clear_bhb_loop+0x40/0x90 [ 466.480459][T14669] ? clear_bhb_loop+0x40/0x90 [ 466.485247][T14669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.491170][T14669] RIP: 0033:0x7fd7d6f9de59 [ 466.495602][T14669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.515227][T14669] RSP: 002b:00007fd7d7e8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.523685][T14669] RAX: ffffffffffffffda RBX: 00007fd7d7225fa0 RCX: 00007fd7d6f9de59 [ 466.531674][T14669] RDX: 0000000004000800 RSI: 0000200000000940 RDI: 0000000000000006 [ 466.539682][T14669] RBP: 00007fd7d7e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 466.547700][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.555685][T14669] R13: 00007fd7d7226038 R14: 00007fd7d7225fa0 R15: 00007fff5d43f738 [ 466.563709][T14669] [ 466.779482][T14675] Q6`Ҙ: renamed from lo (while UP) [ 467.150992][T14675] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 467.370961][T14691] validate_nla: 2 callbacks suppressed [ 467.370999][T14691] netlink: 'syz.3.3203': attribute type 10 has an invalid length. [ 467.452087][T14687] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3204'. [ 467.503937][T14691] geneve0: entered promiscuous mode [ 467.654714][T14691] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 467.756541][T14697] netlink: 'syz.4.3207': attribute type 3 has an invalid length. [ 467.775172][T14697] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3207'. [ 467.810691][T14687] netlink: 8446 bytes leftover after parsing attributes in process `syz.2.3204'. [ 468.413145][T14707] netlink: 'syz.2.3217': attribute type 17 has an invalid length. [ 468.436440][T14707] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3217'. [ 468.461125][T14707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.514716][T14713] netlink: 'syz.2.3217': attribute type 2 has an invalid length. [ 468.531125][T14713] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3217'. [ 468.557090][T14717] netlink: 'syz.1.3214': attribute type 10 has an invalid length. [ 468.571035][T14717] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.578980][T14717] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.641897][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.649188][T14717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.656853][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.664063][T14717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.693095][T14717] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 469.341085][T14727] netlink: 'syz.1.3225': attribute type 17 has an invalid length. [ 469.381611][T14727] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3225'. [ 469.414027][T14727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.456902][T14730] netlink: 'syz.1.3225': attribute type 2 has an invalid length. [ 469.475558][T14730] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3225'. [ 469.590061][T14729] netlink: 'syz.2.3218': attribute type 9 has an invalid length. [ 469.607695][T14729] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3218'. [ 470.085148][T14731] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.3218'. [ 470.553021][T14750] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.3224'. [ 471.218853][T14767] netlink: 'syz.4.3230': attribute type 10 has an invalid length. [ 471.257200][T14767] geneve0: entered promiscuous mode [ 471.415624][T14767] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 471.753827][T14781] netlink: 'syz.4.3233': attribute type 9 has an invalid length. [ 472.456167][T14792] netlink: 'syz.1.3248': attribute type 21 has an invalid length. [ 472.740106][T14798] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 472.771294][T14798] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 472.788125][T14792] netlink: 'syz.1.3248': attribute type 11 has an invalid length. [ 472.802573][T14792] __nla_validate_parse: 3 callbacks suppressed [ 472.802618][T14792] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3248'. [ 473.641989][T14813] Q6`Ҙ: renamed from lo (while UP) [ 473.871970][T14816] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 474.062134][T14820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3249'. [ 474.374463][T14830] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3252'. [ 476.832233][T14867] netlink: 'syz.4.3266': attribute type 10 has an invalid length. [ 476.844847][T14867] netlink: 'syz.4.3266': attribute type 4 has an invalid length. [ 476.852935][T14867] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3266'. [ 477.230584][T14888] netlink: 'syz.2.3272': attribute type 21 has an invalid length. [ 477.311010][T14888] netlink: 'syz.2.3272': attribute type 6 has an invalid length. [ 478.183853][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 479.147074][T14928] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3287'. [ 479.305493][T14938] syz.2.3290 (14938) used greatest stack depth: 17320 bytes left [ 480.359099][T14967] netlink: 'syz.1.3303': attribute type 10 has an invalid length. [ 481.320853][T14986] syzkaller0: entered promiscuous mode [ 481.332180][T14986] syzkaller0: entered allmulticast mode [ 483.393701][T15005] netlink: 'syz.2.3316': attribute type 21 has an invalid length. [ 483.401768][T15005] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3316'. [ 483.420110][T15009] sit0: entered allmulticast mode [ 483.441431][T15010] sit0: entered promiscuous mode [ 483.543001][T15015] virt_wifi0: entered promiscuous mode [ 483.561386][T15015] virt_wifi0: entered allmulticast mode [ 484.291914][T15041] netlink: 'syz.1.3329': attribute type 1 has an invalid length. [ 484.338150][T15041] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3329'. [ 484.407305][T15030] syzkaller0: entered promiscuous mode [ 484.414199][T15030] syzkaller0: entered allmulticast mode [ 487.041737][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'. [ 487.055263][T15051] virt_wifi0: entered promiscuous mode [ 487.070255][T15051] virt_wifi0: entered allmulticast mode [ 487.176753][T15055] netlink: 'syz.1.3334': attribute type 25 has an invalid length. [ 487.184882][T15055] netlink: 'syz.1.3334': attribute type 9 has an invalid length. [ 487.692808][T15072] netlink: 'syz.4.3340': attribute type 29 has an invalid length. [ 487.735409][T15072] netlink: 'syz.4.3340': attribute type 29 has an invalid length. [ 487.751182][T15073] netlink: 'syz.4.3340': attribute type 29 has an invalid length. [ 488.420194][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 490.754249][T15081] netlink: 'syz.2.3344': attribute type 10 has an invalid length. [ 490.757149][T15078] netlink: 'syz.4.3343': attribute type 1 has an invalid length. [ 490.762374][T15081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3344'. [ 491.391008][T15088] virt_wifi0: entered promiscuous mode [ 491.410895][T15088] virt_wifi0: entered allmulticast mode [ 491.906957][T15104] netlink: 'syz.3.3353': attribute type 1 has an invalid length. [ 491.936188][T15104] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3353'. [ 495.166621][T15138] tap0: tun_chr_ioctl cmd 2148553947 [ 495.184141][T15140] netlink: 'syz.4.3364': attribute type 10 has an invalid length. [ 495.718021][T15158] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3370'. [ 495.747430][T15159] netlink: 'syz.1.3369': attribute type 3 has an invalid length. [ 495.755287][T15159] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.3369'. [ 496.310770][T15164] netlink: 'syz.4.3371': attribute type 10 has an invalid length. [ 496.316928][T15163] netlink: 'syz.4.3371': attribute type 9 has an invalid length. [ 496.334052][T15163] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3371'. [ 496.424189][T15164] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 496.891304][T15179] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 496.963131][T15179] hsr0: entered promiscuous mode [ 497.004707][T15179] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 497.028901][T15179] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 497.040595][T15179] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 497.053379][T15179] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 497.253491][T15192] netlink: 'syz.1.3382': attribute type 10 has an invalid length. [ 497.286090][T15192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3382'. [ 497.299692][T15192] bridge0: port 3(ipvlan1) entered blocking state [ 497.314892][T15192] bridge0: port 3(ipvlan1) entered disabled state [ 497.389310][T15192] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 497.493916][T15199] netlink: 'syz.4.3384': attribute type 10 has an invalid length. [ 497.512343][T15199] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.3384'. [ 497.899899][T15212] FAULT_INJECTION: forcing a failure. [ 497.899899][T15212] name failslab, interval 1, probability 0, space 0, times 0 [ 497.945999][T15212] CPU: 1 PID: 15212 Comm: syz.4.3389 Not tainted syzkaller #0 [ 497.953536][T15212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.963621][T15212] Call Trace: [ 497.966923][T15212] [ 497.969874][T15212] dump_stack_lvl+0x18c/0x250 [ 497.974579][T15212] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.980790][T15212] ? show_regs_print_info+0x20/0x20 [ 497.985999][T15212] ? load_image+0x420/0x420 [ 497.990517][T15212] should_fail_ex+0x394/0x4c0 [ 497.995200][T15212] should_failslab+0x9/0x20 [ 497.999708][T15212] slab_pre_alloc_hook+0x59/0x300 [ 498.004749][T15212] kmem_cache_alloc+0x5a/0x2c0 [ 498.009521][T15212] ? getname_flags+0xbb/0x500 [ 498.014223][T15212] getname_flags+0xbb/0x500 [ 498.018746][T15212] ? syscall_enter_from_user_mode+0x25/0x80 [ 498.024649][T15212] __x64_sys_unlink+0x3c/0x50 [ 498.029333][T15212] do_syscall_64+0x55/0xb0 [ 498.033764][T15212] ? clear_bhb_loop+0x40/0x90 [ 498.038444][T15212] ? clear_bhb_loop+0x40/0x90 [ 498.043126][T15212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.049030][T15212] RIP: 0033:0x7fd7d6f9de59 [ 498.053449][T15212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.073062][T15212] RSP: 002b:00007fd7d7e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 498.081501][T15212] RAX: ffffffffffffffda RBX: 00007fd7d7225fa0 RCX: 00007fd7d6f9de59 [ 498.089560][T15212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 498.097532][T15212] RBP: 00007fd7d7e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 498.105523][T15212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.113521][T15212] R13: 00007fd7d7226038 R14: 00007fd7d7225fa0 R15: 00007fff5d43f738 [ 498.121511][T15212] [ 498.658367][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 498.944312][T15241] netlink: 'syz.1.3398': attribute type 21 has an invalid length. [ 498.962342][T15241] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3398'. [ 499.017290][T15241] netlink: 'syz.1.3398': attribute type 21 has an invalid length. [ 499.732450][T15251] netlink: 'syz.4.3401': attribute type 29 has an invalid length. [ 499.919898][T15259] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3404'. [ 500.255213][T15270] FAULT_INJECTION: forcing a failure. [ 500.255213][T15270] name failslab, interval 1, probability 0, space 0, times 0 [ 500.280400][T15270] CPU: 1 PID: 15270 Comm: syz.2.3409 Not tainted syzkaller #0 [ 500.287934][T15270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.298083][T15270] Call Trace: [ 500.301391][T15270] [ 500.304346][T15270] dump_stack_lvl+0x18c/0x250 [ 500.309070][T15270] ? show_regs_print_info+0x20/0x20 [ 500.314309][T15270] ? load_image+0x420/0x420 [ 500.318940][T15270] ? verify_lock_unused+0x140/0x140 [ 500.324175][T15270] should_fail_ex+0x394/0x4c0 [ 500.328863][T15270] should_failslab+0x9/0x20 [ 500.333455][T15270] slab_pre_alloc_hook+0x59/0x300 [ 500.338500][T15270] kmem_cache_alloc+0x5a/0x2c0 [ 500.343371][T15270] ? skb_clone+0x1eb/0x370 [ 500.347782][T15270] skb_clone+0x1eb/0x370 [ 500.352022][T15270] __netlink_deliver_tap+0x411/0x7f0 [ 500.357334][T15270] ? netlink_deliver_tap+0x2e/0x1b0 [ 500.362563][T15270] netlink_deliver_tap+0x19c/0x1b0 [ 500.367677][T15270] netlink_unicast+0x77b/0x930 [ 500.372451][T15270] netlink_sendmsg+0x8d0/0xbf0 [ 500.377228][T15270] ? netlink_getsockopt+0x590/0x590 [ 500.382422][T15270] ? apparmor_socket_sendmsg+0x170/0x330 [ 500.388075][T15270] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 500.393620][T15270] ? security_socket_sendmsg+0x80/0xa0 [ 500.399103][T15270] ? netlink_getsockopt+0x590/0x590 [ 500.404303][T15270] ____sys_sendmsg+0x61b/0x980 [ 500.409088][T15270] ? __asan_memset+0x22/0x40 [ 500.413710][T15270] ? __sys_sendmsg_sock+0x30/0x30 [ 500.418789][T15270] ? __import_iovec+0x3fa/0x850 [ 500.423680][T15270] ? import_iovec+0x73/0xa0 [ 500.428212][T15270] ___sys_sendmsg+0x2a6/0x360 [ 500.433003][T15270] ? get_pid_task+0x20/0x1e0 [ 500.437622][T15270] ? __sys_sendmsg+0x2b0/0x2b0 [ 500.442437][T15270] ? __lock_acquire+0x7d80/0x7d80 [ 500.447507][T15270] __se_sys_sendmsg+0x1d0/0x2c0 [ 500.452390][T15270] ? __x64_sys_sendmsg+0x80/0x80 [ 500.457396][T15270] ? lockdep_hardirqs_on+0x98/0x150 [ 500.462624][T15270] do_syscall_64+0x55/0xb0 [ 500.467066][T15270] ? clear_bhb_loop+0x40/0x90 [ 500.471761][T15270] ? clear_bhb_loop+0x40/0x90 [ 500.476463][T15270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.482381][T15270] RIP: 0033:0x7f184ed9de59 [ 500.486837][T15270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.506566][T15270] RSP: 002b:00007f184fc14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.515031][T15270] RAX: ffffffffffffffda RBX: 00007f184f025fa0 RCX: 00007f184ed9de59 [ 500.523123][T15270] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 500.531119][T15270] RBP: 00007f184fc14090 R08: 0000000000000000 R09: 0000000000000000 [ 500.539131][T15270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.547230][T15270] R13: 00007f184f026038 R14: 00007f184f025fa0 R15: 00007ffd8340d2e8 [ 500.555252][T15270] [ 500.561806][T15270] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3409'. [ 500.571505][T15270] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3409'. [ 501.167321][T15293] FAULT_INJECTION: forcing a failure. [ 501.167321][T15293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.207860][T15293] CPU: 1 PID: 15293 Comm: syz.1.3417 Not tainted syzkaller #0 [ 501.215411][T15293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 501.225519][T15293] Call Trace: [ 501.228829][T15293] [ 501.231792][T15293] dump_stack_lvl+0x18c/0x250 [ 501.236514][T15293] ? show_regs_print_info+0x20/0x20 [ 501.241749][T15293] ? load_image+0x420/0x420 [ 501.246300][T15293] ? __might_fault+0xaa/0x120 [ 501.251025][T15293] ? __lock_acquire+0x7d80/0x7d80 [ 501.256091][T15293] ? __virt_addr_valid+0x10c/0x380 [ 501.261242][T15293] should_fail_ex+0x394/0x4c0 [ 501.265968][T15293] _copy_to_user+0x2f/0xa0 [ 501.270420][T15293] generic_map_lookup_batch+0x8ba/0xc60 [ 501.276032][T15293] ? bpf_map_update_value+0x710/0x710 [ 501.281453][T15293] ? __fdget+0x180/0x210 [ 501.285732][T15293] ? bpf_map_update_value+0x710/0x710 [ 501.291143][T15293] bpf_map_do_batch+0x2e3/0x600 [ 501.296038][T15293] ? bpf_lsm_bpf+0x9/0x10 [ 501.300397][T15293] ? security_bpf+0x7e/0xa0 [ 501.304939][T15293] __sys_bpf+0x7d7/0x890 [ 501.309211][T15293] ? bpf_link_show_fdinfo+0x390/0x390 [ 501.314652][T15293] ? lock_chain_count+0x20/0x20 [ 501.319557][T15293] __x64_sys_bpf+0x7c/0x90 [ 501.324008][T15293] do_syscall_64+0x55/0xb0 [ 501.328458][T15293] ? clear_bhb_loop+0x40/0x90 [ 501.333160][T15293] ? clear_bhb_loop+0x40/0x90 [ 501.337868][T15293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.343808][T15293] RIP: 0033:0x7f23bc39de59 [ 501.348290][T15293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.368034][T15293] RSP: 002b:00007f23ba5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 501.376505][T15293] RAX: ffffffffffffffda RBX: 00007f23bc625fa0 RCX: 00007f23bc39de59 [ 501.384685][T15293] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 501.392775][T15293] RBP: 00007f23ba5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 501.400779][T15293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.408779][T15293] R13: 00007f23bc626038 R14: 00007f23bc625fa0 R15: 00007ffc72535298 [ 501.416811][T15293] [ 501.602172][T15299] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3420'. [ 501.621723][T15299] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3420'. [ 501.980770][T15306] validate_nla: 3 callbacks suppressed [ 501.980789][T15306] netlink: 'syz.4.3423': attribute type 33 has an invalid length. [ 501.996424][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.005530][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.023569][T15306] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3423'. [ 502.516359][T15322] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3428'. [ 502.531953][T15322] debugfs: Directory '!' with parent 'ieee80211' already present! [ 503.045259][T15341] FAULT_INJECTION: forcing a failure. [ 503.045259][T15341] name failslab, interval 1, probability 0, space 0, times 0 [ 503.075966][T15341] CPU: 1 PID: 15341 Comm: syz.4.3437 Not tainted syzkaller #0 [ 503.083497][T15341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.093618][T15341] Call Trace: [ 503.096910][T15341] [ 503.099842][T15341] dump_stack_lvl+0x18c/0x250 [ 503.104536][T15341] ? show_regs_print_info+0x20/0x20 [ 503.109739][T15341] ? load_image+0x420/0x420 [ 503.114249][T15341] ? __might_sleep+0xe0/0xe0 [ 503.118843][T15341] ? __lock_acquire+0x7d80/0x7d80 [ 503.123873][T15341] should_fail_ex+0x394/0x4c0 [ 503.128558][T15341] should_failslab+0x9/0x20 [ 503.133069][T15341] slab_pre_alloc_hook+0x59/0x300 [ 503.138107][T15341] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 503.143838][T15341] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 503.149561][T15341] __kmem_cache_alloc_node+0x53/0x250 [ 503.154971][T15341] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 503.160713][T15341] __kmalloc+0xa7/0x240 [ 503.164886][T15341] tomoyo_realpath_from_path+0xe6/0x5c0 [ 503.170613][T15341] ? tomoyo_domain+0xd6/0x120 [ 503.175300][T15341] tomoyo_path_number_perm+0x248/0x5e0 [ 503.180766][T15341] ? tomoyo_path_number_perm+0x217/0x5e0 [ 503.186404][T15341] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 503.191871][T15341] ? ksys_write+0x1d2/0x260 [ 503.196405][T15341] ? __fget_files+0x28/0x460 [ 503.201004][T15341] security_file_ioctl+0x70/0xa0 [ 503.205946][T15341] __se_sys_ioctl+0x48/0x170 [ 503.210541][T15341] do_syscall_64+0x55/0xb0 [ 503.214962][T15341] ? clear_bhb_loop+0x40/0x90 [ 503.219644][T15341] ? clear_bhb_loop+0x40/0x90 [ 503.224329][T15341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.230258][T15341] RIP: 0033:0x7fd7d6f9de59 [ 503.234673][T15341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.254375][T15341] RSP: 002b:00007fd7d7e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.262878][T15341] RAX: ffffffffffffffda RBX: 00007fd7d7225fa0 RCX: 00007fd7d6f9de59 [ 503.270852][T15341] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 503.278828][T15341] RBP: 00007fd7d7e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 503.286800][T15341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.294769][T15341] R13: 00007fd7d7226038 R14: 00007fd7d7225fa0 R15: 00007fff5d43f738 [ 503.302753][T15341] [ 503.340049][T15341] ERROR: Out of memory at tomoyo_realpath_from_path. [ 503.960481][T15353] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3441'. [ 504.357221][T15376] netlink: 'syz.1.3451': attribute type 10 has an invalid length. [ 504.639122][T15382] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3453'. [ 504.659624][T15382] bridge_slave_1: default FDB implementation only supports local addresses [ 505.186589][T15391] IPv6: NLM_F_CREATE should be specified when creating new route [ 505.194519][T15391] IPv6: Can't replace route, no match found [ 505.540816][T15404] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.3460'. [ 505.576340][T15404] smc: net device  applied user defined pnetid CONFIG [ 505.650342][T15408] netlink: 'syz.1.3464': attribute type 10 has an invalid length. [ 505.993313][T15427] FAULT_INJECTION: forcing a failure. [ 505.993313][T15427] name failslab, interval 1, probability 0, space 0, times 0 [ 506.006045][T15427] CPU: 1 PID: 15427 Comm: syz.1.3471 Not tainted syzkaller #0 [ 506.013544][T15427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 506.023634][T15427] Call Trace: [ 506.026939][T15427] [ 506.029886][T15427] dump_stack_lvl+0x18c/0x250 [ 506.034606][T15427] ? show_regs_print_info+0x20/0x20 [ 506.039934][T15427] ? load_image+0x420/0x420 [ 506.044475][T15427] ? netdev_core_pick_tx+0x370/0x370 [ 506.049798][T15427] should_fail_ex+0x394/0x4c0 [ 506.054614][T15427] should_failslab+0x9/0x20 [ 506.059255][T15427] slab_pre_alloc_hook+0x59/0x300 [ 506.064326][T15427] kmem_cache_alloc+0x5a/0x2c0 [ 506.069123][T15427] ? skb_clone+0x1eb/0x370 [ 506.073562][T15427] skb_clone+0x1eb/0x370 [ 506.077809][T15427] bpf_clone_redirect+0x16d/0x4a0 [ 506.082843][T15427] ? bpf_test_run+0x174/0x870 [ 506.087572][T15427] bpf_prog_bfd3cab142e322d3+0x5e/0x63 [ 506.093039][T15427] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 506.099024][T15427] ? perf_trace_preemptirq_template+0xac/0x330 [ 506.105186][T15427] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 506.111172][T15427] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 506.116464][T15427] ? lock_chain_count+0x20/0x20 [ 506.121325][T15427] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 506.127585][T15427] ? __local_bh_disable_ip+0x108/0x1a0 [ 506.133067][T15427] ? __cant_sleep+0x220/0x220 [ 506.137755][T15427] ? __local_bh_enable_ip+0x13a/0x1c0 [ 506.143123][T15427] ? _local_bh_enable+0xa0/0xa0 [ 506.147977][T15427] ? bpf_test_run+0x174/0x870 [ 506.152660][T15427] ? kvm_sched_clock_read+0x11/0x20 [ 506.157864][T15427] bpf_test_run+0x4fa/0x870 [ 506.162610][T15427] ? bpf_test_run+0x174/0x870 [ 506.167497][T15427] ? dst_hold+0x70/0x70 [ 506.171674][T15427] ? eth_get_headlen+0x210/0x210 [ 506.176680][T15427] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 506.182073][T15427] ? cpu_online+0x60/0x60 [ 506.186402][T15427] bpf_prog_test_run+0x31f/0x390 [ 506.191344][T15427] __sys_bpf+0x49d/0x890 [ 506.195600][T15427] ? bpf_link_show_fdinfo+0x390/0x390 [ 506.200996][T15427] ? lock_chain_count+0x20/0x20 [ 506.205874][T15427] __x64_sys_bpf+0x7c/0x90 [ 506.210383][T15427] do_syscall_64+0x55/0xb0 [ 506.214820][T15427] ? clear_bhb_loop+0x40/0x90 [ 506.219564][T15427] ? clear_bhb_loop+0x40/0x90 [ 506.224374][T15427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.230286][T15427] RIP: 0033:0x7f23bc39de59 [ 506.234704][T15427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.254327][T15427] RSP: 002b:00007f23ba5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.262754][T15427] RAX: ffffffffffffffda RBX: 00007f23bc625fa0 RCX: 00007f23bc39de59 [ 506.270733][T15427] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 506.278792][T15427] RBP: 00007f23ba5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 506.286784][T15427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.294765][T15427] R13: 00007f23bc626038 R14: 00007f23bc625fa0 R15: 00007ffc72535298 [ 506.302751][T15427] [ 506.714408][T15433] syzkaller0: entered promiscuous mode [ 506.723091][T15433] syzkaller0: entered allmulticast mode [ 506.802737][T15450] netlink: 'syz.3.3479': attribute type 21 has an invalid length. [ 506.891905][T15453] netlink: 'syz.1.3481': attribute type 58 has an invalid length. [ 506.901175][T15453] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3481'. [ 506.931968][T15453] FAULT_INJECTION: forcing a failure. [ 506.931968][T15453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.987733][T15453] CPU: 1 PID: 15453 Comm: syz.1.3481 Not tainted syzkaller #0 [ 506.995301][T15453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 507.005427][T15453] Call Trace: [ 507.008778][T15453] [ 507.011749][T15453] dump_stack_lvl+0x18c/0x250 [ 507.016497][T15453] ? show_regs_print_info+0x20/0x20 [ 507.021756][T15453] ? load_image+0x420/0x420 [ 507.026354][T15453] ? __lock_acquire+0x7d80/0x7d80 [ 507.031440][T15453] ? snprintf+0xe9/0x140 [ 507.035747][T15453] should_fail_ex+0x394/0x4c0 [ 507.040517][T15453] _copy_to_user+0x2f/0xa0 [ 507.045007][T15453] simple_read_from_buffer+0xe7/0x150 [ 507.050536][T15453] proc_fail_nth_read+0x1e8/0x260 [ 507.055604][T15453] ? proc_fault_inject_write+0x360/0x360 [ 507.061285][T15453] ? fsnotify_perm+0x271/0x5e0 [ 507.066087][T15453] ? proc_fault_inject_write+0x360/0x360 [ 507.071859][T15453] vfs_read+0x298/0x990 [ 507.076114][T15453] ? kernel_read+0x1e0/0x1e0 [ 507.080747][T15453] ? __fget_files+0x28/0x460 [ 507.085361][T15453] ? __fget_files+0x3fc/0x460 [ 507.090086][T15453] ? __fdget_pos+0x2a3/0x330 [ 507.094690][T15453] ? ksys_read+0x74/0x260 [ 507.099055][T15453] ksys_read+0x151/0x260 [ 507.103332][T15453] ? vfs_write+0x9a0/0x9a0 [ 507.107778][T15453] ? lockdep_hardirqs_on+0x98/0x150 [ 507.113005][T15453] do_syscall_64+0x55/0xb0 [ 507.117441][T15453] ? clear_bhb_loop+0x40/0x90 [ 507.122163][T15453] ? clear_bhb_loop+0x40/0x90 [ 507.126883][T15453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.132818][T15453] RIP: 0033:0x7f23bc35e68e [ 507.137365][T15453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 507.156997][T15453] RSP: 002b:00007f23ba5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.165436][T15453] RAX: ffffffffffffffda RBX: 00007f23ba5f66c0 RCX: 00007f23bc35e68e [ 507.173441][T15453] RDX: 000000000000000f RSI: 00007f23ba5f60a0 RDI: 0000000000000007 [ 507.181607][T15453] RBP: 00007f23ba5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 507.189679][T15453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.197755][T15453] R13: 00007f23bc626038 R14: 00007f23bc625fa0 R15: 00007ffc72535298 [ 507.205799][T15453] [ 508.234745][T15475] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3488'. [ 509.409925][T15456] netlink: 'syz.3.3482': attribute type 21 has an invalid length. [ 509.420220][T15457] mac80211_hwsim hwsim48 wlan0: left allmulticast mode [ 509.432550][T15460] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 509.442055][T15460] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 509.450846][T15463] netlink: 'syz.3.3482': attribute type 11 has an invalid length. [ 509.459255][T15463] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3482'. [ 509.668441][T15484] netlink: 'syz.3.3492': attribute type 10 has an invalid length. [ 509.685951][T15484] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 509.853343][T15497] netlink: 'syz.4.3497': attribute type 9 has an invalid length. [ 509.882595][T15497] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3497'. [ 510.142387][T15495] netlink: 'syz.3.3496': attribute type 9 has an invalid length. [ 510.153046][T15495] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3496'. [ 510.240521][T15498] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.3497'. [ 510.253805][T15500] netlink: 'syz.4.3497': attribute type 9 has an invalid length. [ 510.268263][T15500] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3497'. [ 510.288612][T15499] netlink: 'syz.3.3496': attribute type 9 has an invalid length. [ 510.334408][T15499] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3496'. [ 510.771481][T15505] syzkaller0: entered promiscuous mode [ 510.777410][T15505] syzkaller0: entered allmulticast mode [ 510.972306][T15514] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3508'. [ 510.988773][T15514] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 511.029229][T15512] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3500'. [ 514.694729][T15529] __nla_validate_parse: 1 callbacks suppressed [ 514.694752][T15529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3505'. [ 515.300885][T15558] netlink: 12927 bytes leftover after parsing attributes in process `syz.4.3516'. [ 515.324441][T15556] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3515'. [ 515.350257][T15556] bridge_slave_1: default FDB implementation only supports local addresses [ 516.076163][T15583] netlink: 'syz.4.3525': attribute type 10 has an invalid length. [ 516.093542][T15586] FAULT_INJECTION: forcing a failure. [ 516.093542][T15586] name failslab, interval 1, probability 0, space 0, times 0 [ 516.121781][T15586] CPU: 0 PID: 15586 Comm: syz.1.3527 Not tainted syzkaller #0 [ 516.129317][T15586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.139381][T15586] Call Trace: [ 516.142768][T15586] [ 516.145761][T15586] dump_stack_lvl+0x18c/0x250 [ 516.150471][T15586] ? show_regs_print_info+0x20/0x20 [ 516.155688][T15586] ? load_image+0x420/0x420 [ 516.160512][T15586] ? __might_sleep+0xe0/0xe0 [ 516.165105][T15586] ? __lock_acquire+0x7d80/0x7d80 [ 516.170226][T15586] should_fail_ex+0x394/0x4c0 [ 516.174928][T15586] should_failslab+0x9/0x20 [ 516.179440][T15586] slab_pre_alloc_hook+0x59/0x300 [ 516.184714][T15586] kmem_cache_alloc_lru+0x4d/0x2b0 [ 516.189936][T15586] ? sock_alloc_inode+0x28/0xc0 [ 516.194797][T15586] sock_alloc_inode+0x28/0xc0 [ 516.199471][T15586] ? sockfs_init_fs_context+0xb0/0xb0 [ 516.204951][T15586] new_inode_pseudo+0x63/0x1d0 [ 516.209722][T15586] __sock_create+0x12d/0x940 [ 516.214318][T15586] ? print_unlock_imbalance_bug+0x160/0x160 [ 516.220218][T15586] mptcp_subflow_create_socket+0x10c/0xad0 [ 516.226038][T15586] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 516.232023][T15586] ? lock_chain_count+0x20/0x20 [ 516.236888][T15586] __mptcp_nmpc_sk+0x157/0x720 [ 516.241934][T15586] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 516.248934][T15586] mptcp_setsockopt+0xf79/0x3370 [ 516.253903][T15586] ? __fget_files+0x28/0x460 [ 516.258556][T15586] ? pm_nl_exit_net+0x230/0x230 [ 516.263417][T15586] ? aa_af_perm+0x330/0x330 [ 516.267956][T15586] ? __fget_files+0x28/0x460 [ 516.272568][T15586] ? aa_sock_opt_perm+0x74/0x100 [ 516.277523][T15586] ? sock_common_setsockopt+0x36/0xc0 [ 516.282919][T15586] ? sock_common_recvmsg+0x190/0x190 [ 516.288213][T15586] do_sock_setsockopt+0x175/0x1a0 [ 516.293246][T15586] ? __fdget+0x180/0x210 [ 516.297504][T15586] __x64_sys_setsockopt+0x182/0x200 [ 516.302715][T15586] do_syscall_64+0x55/0xb0 [ 516.307137][T15586] ? clear_bhb_loop+0x40/0x90 [ 516.311817][T15586] ? clear_bhb_loop+0x40/0x90 [ 516.316514][T15586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.322450][T15586] RIP: 0033:0x7f23bc39de59 [ 516.326924][T15586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.346548][T15586] RSP: 002b:00007f23ba5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 516.354969][T15586] RAX: ffffffffffffffda RBX: 00007f23bc625fa0 RCX: 00007f23bc39de59 [ 516.363120][T15586] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000003 [ 516.371104][T15586] RBP: 00007f23ba5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 516.379090][T15586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.387078][T15586] R13: 00007f23bc626038 R14: 00007f23bc625fa0 R15: 00007ffc72535298 [ 516.395157][T15586] [ 516.411221][T15586] socket: no more sockets [ 516.808597][T15603] syzkaller0: entered promiscuous mode [ 516.814780][T15603] syzkaller0: entered allmulticast mode [ 516.822964][T15598] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3531'. [ 516.834376][T15598] bridge_slave_1: default FDB implementation only supports local addresses [ 519.094650][T15607] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3534'. [ 519.866779][T15650] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3549'. [ 519.880696][T15650] netlink: 'syz.1.3549': attribute type 3 has an invalid length. [ 520.131803][T15658] netlink: 'syz.2.3552': attribute type 1 has an invalid length. [ 520.163795][T15658] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3552'. [ 523.681478][T15679] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3561'. [ 523.752437][T15679] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3561'. [ 524.076122][T15695] netlink: 'syz.1.3567': attribute type 10 has an invalid length. [ 524.131964][T15697] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 524.134730][T15695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3567'. [ 524.188892][T15697] netlink: 'syz.4.3568': attribute type 27 has an invalid length. [ 524.678554][T15711] netlink: 'syz.1.3574': attribute type 1 has an invalid length. [ 524.687049][T15711] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3574'. [ 525.139025][T15719] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3578'. [ 525.185065][T15719] netlink: 'syz.2.3578': attribute type 4 has an invalid length. [ 525.212039][T15719] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3578'. [ 525.552821][T15730] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3579'. [ 525.624084][T15728] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3579'. [ 526.456010][T15750] netlink: 'syz.3.3587': attribute type 10 has an invalid length. [ 526.829641][T15759] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3591'. [ 526.858591][T15759] netlink: 'syz.1.3591': attribute type 4 has an invalid length. [ 526.882288][T15759] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3591'. [ 527.006513][T15765] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3592'. [ 527.066147][T15766] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3592'. [ 527.617161][T15784] netlink: 'syz.3.3598': attribute type 153 has an invalid length. [ 527.648586][T15784] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3598'. [ 527.822944][T15787] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3599'. [ 527.965349][T15791] tap1: tun_chr_ioctl cmd 2148553947 [ 528.148810][T15795] netlink: 'syz.4.3602': attribute type 9 has an invalid length. [ 528.196383][T15797] netlink: 'syz.4.3602': attribute type 10 has an invalid length. [ 529.378787][T15777] Bluetooth: hci3: command 0x0406 tx timeout [ 529.386314][T15776] Bluetooth: hci4: command 0x0406 tx timeout [ 529.396262][T12781] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 529.421934][T12781] ref_tracker: syz_tun@ffff88805e7fc5b8 has 1/2 users at [ 529.421934][T12781] dst_init+0xc0/0x470 [ 529.421934][T12781] dst_alloc+0x12e/0x170 [ 529.421934][T12781] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 529.421934][T12781] ip_route_output_key_hash+0x1f3/0x330 [ 529.421934][T12781] ip_route_output_flow+0x2a/0x150 [ 529.421934][T12781] geneve_link_config+0x1a6/0x670 [ 529.421934][T12781] geneve_newlink+0x151/0x1c0 [ 529.421934][T12781] rtnl_newlink+0x15a0/0x2170 [ 529.421934][T12781] rtnetlink_rcv_msg+0x843/0xf90 [ 529.421934][T12781] netlink_rcv_skb+0x235/0x4c0 [ 529.421934][T12781] netlink_unicast+0x7b1/0x930 [ 529.421934][T12781] netlink_sendmsg+0x8d0/0xbf0 [ 529.421934][T12781] __sys_sendto+0x4a9/0x6b0 [ 529.421934][T12781] __x64_sys_sendto+0xde/0xf0 [ 529.421934][T12781] do_syscall_64+0x55/0xb0 [ 529.421934][T12781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.421934][T12781] [ 529.512968][T12781] ref_tracker: syz_tun@ffff88805e7fc5b8 has 1/2 users at [ 529.512968][T12781] fib_check_nh+0xd19/0x1a60 [ 529.512968][T12781] fib_create_info+0x135b/0x2390 [ 529.512968][T12781] fib_table_insert+0xc6/0x1af0 [ 529.512968][T12781] fib_magic+0x2ce/0x3b0 [ 529.512968][T12781] fib_add_ifaddr+0x376/0x5d0 [ 529.512968][T12781] fib_netdev_event+0x389/0x490 [ 529.512968][T12781] notifier_call_chain+0x18f/0x380 [ 529.512968][T12781] __dev_notify_flags+0x1ab/0x310 [ 529.512968][T12781] dev_change_flags+0xde/0x1a0 [ 529.512968][T12781] do_setlink+0xb69/0x3f40 [ 529.512968][T12781] rtnl_newlink+0x1848/0x2170 [ 529.512968][T12781] rtnetlink_rcv_msg+0x843/0xf90 [ 529.512968][T12781] netlink_rcv_skb+0x235/0x4c0 [ 529.512968][T12781] netlink_unicast+0x7b1/0x930 [ 529.512968][T12781] netlink_sendmsg+0x8d0/0xbf0 [ 529.512968][T12781] __sys_sendto+0x4a9/0x6b0 [ 529.512968][T12781] [ 529.665341][T15829] FAULT_INJECTION: forcing a failure. [ 529.665341][T15829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.684244][T15829] CPU: 0 PID: 15829 Comm: syz.2.3614 Not tainted syzkaller #0 [ 529.691777][T15829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.701856][T15829] Call Trace: [ 529.705155][T15829] [ 529.708096][T15829] dump_stack_lvl+0x18c/0x250 [ 529.712894][T15829] ? show_regs_print_info+0x20/0x20 [ 529.718104][T15829] ? load_image+0x420/0x420 [ 529.722610][T15829] ? __lock_acquire+0x7d80/0x7d80 [ 529.727630][T15829] ? __kasan_slab_alloc+0x6c/0x80 [ 529.732687][T15829] should_fail_ex+0x394/0x4c0 [ 529.737388][T15829] strncpy_from_user+0x36/0x2f0 [ 529.742246][T15829] getname_flags+0xf6/0x500 [ 529.746753][T15829] ? syscall_enter_from_user_mode+0x25/0x80 [ 529.752734][T15829] __x64_sys_unlink+0x3c/0x50 [ 529.757408][T15829] do_syscall_64+0x55/0xb0 [ 529.761824][T15829] ? clear_bhb_loop+0x40/0x90 [ 529.766502][T15829] ? clear_bhb_loop+0x40/0x90 [ 529.771180][T15829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.777077][T15829] RIP: 0033:0x7f184ed9de59 [ 529.781494][T15829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.801129][T15829] RSP: 002b:00007f184fc14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 529.809543][T15829] RAX: ffffffffffffffda RBX: 00007f184f025fa0 RCX: 00007f184ed9de59 [ 529.817517][T15829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 529.825559][T15829] RBP: 00007f184fc14090 R08: 0000000000000000 R09: 0000000000000000 [ 529.833541][T15829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.841513][T15829] R13: 00007f184f026038 R14: 00007f184f025fa0 R15: 00007ffd8340d2e8 [ 529.849514][T15829]