last executing test programs: 5.66429584s ago: executing program 2 (id=3291): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001b80)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='syzkaller\x00', 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) close(r0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a05010000001600120002000000000000003b61c1d67f6f94007134cf01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500"/216, 0xd8}], 0x1}, 0x40080) 5.618947942s ago: executing program 0 (id=3292): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x27, &(0x7f0000000280)=r1, 0xfffffffffffffdd5) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40012000) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x30}, 0x7e8166965e22236a) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd0, 0xff9}, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0xfffffffd, 0x4, 0x0, 0x4000000}, 0x0, 0xb, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000c80)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4}, 0x48) 5.299217581s ago: executing program 3 (id=3294): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fc", 0x21}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000815) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 5.206045606s ago: executing program 0 (id=3296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="00000000030000000300"/21], 0x50) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000140)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="10edf4f79f171d552f4d4f9d949ba1f363d7565e4a2da9da6f30c1922125ea6d0f31cb78253bbca58fff75b0b8652eaa1f2c94b40a76ed435a1393d7e4b4880b6f570cf915002aa31fe83c27c391e8302cce59447d808e176711f9b27ca7221ab0a7e4443014fa5f7829", 0x6a}, {&(0x7f00000000c0)="d77c0f", 0x3}], 0x2, &(0x7f00000002c0)=[{0xf0, 0x11, 0x3, "c3539985766572b6bddfa1cb04c5c804993e0e95979fc9868e9bd6d479539f1ce76f73be469b774febe908bef4847ee3ea6a7e6269b60d6b09de886a9509b307855640e3c9289cce89529143f6516ab54ca31121c1f49c1aa6c2f2d6b278e65369a65e0d531969879915e5ac553864d58fad8627918bd5879da07f14e83af1a7b47642da2d01535188d416f151f871fba465f0899678690a3cc6b336e74786362d3b884496d55c4a1b252f83a924c026b20d2c8c04081ef8c16010a598d8dea1247d419d1a5074f89e7bafc265f118fca42cb0b5c8b532cdf495a620d21cc4"}, {0xf8, 0x113, 0x1000, "84ba772ac78edb0fce59de3516a9498e7161454709d6f8bef4762c991bd28c94a6ed602f0e0b93f38527f202ce8ad29085a205ce960c83dd6a4766aa989b794b017ebf76652bd37f05fd7a581979cccdfb4030bc65f5e4bda719b9f7391db1efe8515a1c8e2ea62e3a61efc9f16c3d77d71878ec1748ba69029ce318a8b53fd414c2b9521cf8d22e777970eec9c8e6612e58a2316cfbf9a9c236935a7e43e222dd67509dbf7e9075f3911fea5be56d961b5e2bf2b5a20a98738908f8b5b064da473d8f29cc38f38133696b958a68debedcfcd1d8ec88837989f000d39510f27e80"}, {0x88, 0x117, 0x1, "c97ce33c475b1882598b9f0e3c9eaac05449ea4ac5f47070b05fb0ecbad762bb9d0fe9a51812464c984fb1fceb409ad20371d34ed88ee711feac388018ea882a36100915e7a739c445e49617034a91210703f82ef179c2cac9607f3dafabc48be32b26b2e15cfa303b1d88458326ea42aa6d"}, {0x30, 0x108, 0xffffffff, "721517adaf7f63dbf0443ae0e2c72ca5a0d3a586d00e087b9ce17c86555650"}, {0x78, 0x84, 0x5, "61d53a8b6c917412f1c0d9b2d0a555b2d7861cd6795b127943fe645dcc4db7e61b572215be743e1b2dee73ad76b08d6cc9e03e59b32c596726229e77a33b8cc024e292729600d44cd3f32f9f4d8a141461a767990eab0b14c68870368f0766bac9e8b937b7eb12"}], 0x318}, 0x40000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) syz_clone(0x20030000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) (async, rerun: 32) sendmsg(r1, &(0x7f0000000b40)={&(0x7f0000000740)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000e40)=[{&(0x7f00000007c0)="4b5ddd89ef49b8cbc5d1e4f47066c5b2222a791e333afd23d48bb8d74d9952c1e91047cccbffc4eefc999f4fc49687d9c2b77f490cfea6cbaed408379bd425f7caf99713dd05205954b6a14aa63c0d3c0a8c9ffa644b0b31ea3a4325513c1f524573d54d5497a3a130586194ab816b788909", 0x72}, {&(0x7f0000000840)="674cfd06208e8d920edec7010d0a718eef6b0a3aa67fcbe5856f3c7b00932074cb707c1c154db49e1203aa86c944f9d52de41e5bb1244dc90659e028f9c3b5c83d80ced8de4cb7fd451241da65a10e7a453a9cbb15017be3b745cda26043d1e19e6f45cb53586c6eb75888664aadaa7c325146a9bfe7158bc4473f2008890321da0fc97cf5ebe5bf3c65c3dfd21c6b9abb42496e97f4f4", 0x97}, {&(0x7f0000000900)="f2faced76679ef1c4edbb75064ccb1", 0xf}, {&(0x7f0000000940)="320fdeb6a504790611d314f0cff2dd61f84ce6768c540ed9475e94bf3446e789ae7256acc89bb6", 0x27}, {&(0x7f0000000980)="1b7de86d75a8c6e5d8aeb008912ca38f3031b83bba748ba58a828e821b3a0022ea5f168204e95d7620df759fa79a5e4adb57754acbf8c7b9df85234a7723b902eb88c24afb504690315cd09ad81d12ec779218b9031e81eeb3938ae31e2c9b7929a5e34ce38c4df5e999a9d36aef69baa0eaaa82df367f49c4572da7271264f29b1e5f1b4ccc46f615206b05144e8bbb562ebb3d61a31cbc564a259dd3a297a010538a0f7a9d25bfebc6a920c5f41f6f748255a48699d434e26b48fdae401f3077a5e31ef83676d3f0b86daf71e9bc220808873b778c0979e27b40788d846bbfb71e959a26bfde1d2245a26956", 0xed}, {&(0x7f0000000a80)="6b697a4df0cdf1911ffd8957e51f77c90cd0b6db2582c2dfc2036bcf54eccd7caf52845ab8d38650d521677bcd631097ff96f76a5de4eea9d8c580b157a7", 0x3e}, {&(0x7f0000000ac0)="83b1d76b143129421fa3649c403aae0e71de4e0d837711c6dd2ceff84c2bf09ebfadba14f5e85a6e367c29ee8fbf5d93b3a055c490be7b52fe9fbbce586fc0ca66c4359256629b4a803d4a03c351fe652255220ce86a41e12ba32aae48a1f284aafc271c59d7b884048c7540bbce57", 0x6f}, {&(0x7f0000000c00)="f8b962373d3022bba2b9e9f04c3e2256349544e21e9419aac87b76196d387adb35cd7f5c89fd20eb17d58c8dd62ebdb725f95dd7844d36f20a6a87ea3806c04e54ded8d0da5b80ea8543e0ddd82d6e771d01706c899a5497e91215b117ca30b0ba6df856f4b2fa0d52d4da0a5d8848367abaf79e2e797e46b53dece0c2a24362775586aaedcac53eb55785b37464b1037e9290f4cd607ec9fab8687a07", 0x9d}, {&(0x7f0000000cc0)="8e39646118a0ce74b23ee39fce6d4ab8c6d8bcf5cdbe8e79e3a44c39466e862c2363dbdbc0081e3f0e56911eef8f4bef5aca4f3548fee181bbf6ce7a5a1fe0e8c81ff0cd827ac020e4e5620d2c55db6d211ad4a149c604761a4e674a8d7a47f4f87763ea0915549e659253a745e9b996a0163a50ead0", 0x76}, {&(0x7f0000000d40)="ce546219f1216f39c1e33acbb73eed15b8e530b957e3fdbb6c4cc820e12ac812293a7f29f58ed904f14053eda5b83c0758f5424166c1fdb0f8fa942624811ebd28da81ed2bb87df1bb2630584f44755cdd328426991fd43653422d395ffaf7bb93f30b82026c662eb031ca8fe6e72db89ffa0ee9cb297fda035e008c690a3dcc3ac3446a93f94b293d70ae161303e71fc4baa7e671428d665c2af580152a2659d1b5acab9e241ddd489b9bb7d12a5dcdcf72c8e999f3e0e5f6e92bb0e2709a0c7167291e8686b64c3fb8f90d0d7e93d862e9a6eaded1b853dd", 0xd9}], 0xa, &(0x7f0000000f00)=[{0xb8, 0x10d, 0x9, "92e56727f3f36f667a57e84c280108ee60bd583f917e8df452b03af9890e5b30d4b5a3e96f76d4323e152d7fb657028f237e844cf589f1d809e496dbad060aa3d78da94c8455765acb2c03d3f2b6f55ec9f8d8f2312d7cc2264de31e03b9b6122f38c448e024d7a61826c01081ec13369e44c572f90cf1d3f69fbda17555a2b5afcb2b5a4b11cd4721ca3a3fba91608c88b517c5d9f1973f8a3214a9197d5db2d4385c0d"}, {0x10, 0x1, 0x2}, {0x28, 0x12e, 0x5, "35f4d59ed8d4e7c9153617df9bb9b0346a2d"}, {0xa8, 0x10f, 0x80000000, "24dc8ecf890548dd33865a8cd7784c41ddf16f29545ff1b83e68bade16d063a0c5ee7f5d56fa03369a5fa3f6a0d698bba0c1c66f794b64e4c920c6777e9fd51f13413f85e8e4d8aa661db4846a2b6ca3ac98350e677f77f25da6f8446cd96e54e536397248ce21de452154aec39fa4dda558a74ac7eb2d5948d20d2d9096c0cf6a6b369db5a4cff0621a087f4fb9f32c0931"}, {0x18, 0x103, 0x3, "5f0fc4"}], 0x1b0}, 0x40804) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="110000", @ANYRES32], 0x20) (async) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) (async) r4 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x10000, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) r8 = socket$kcm(0x2b, 0x1, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) sendmsg$kcm(r8, 0x0, 0x40) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004"], 0x50) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000)=r9, 0x8) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="d1", 0xfffd}], 0x1}, 0xc54) 3.102892599s ago: executing program 3 (id=3298): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f930461b60040f12", 0x17}, {&(0x7f0000000080)="0015f49dcc099123552d073b629cae47e8815d3e53b53996aceef6e2b898167396", 0x21}], 0x2}, 0x4010) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008ca94ff480152ad3200000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000), 0x8) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, 0x0}, 0xc54) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000080)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed6001280190012", 0x2d}], 0x1}, 0x0) 3.028477624s ago: executing program 2 (id=3299): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, 0x0, 0x400c015) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89ef, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200), 0xc) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.983409286s ago: executing program 0 (id=3300): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, 0x0, 0x40012100) 2.75044332s ago: executing program 1 (id=3302): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x20029, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x80000000, 0x0, 0xd}, 0x0, 0xfffffffffff7ffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0x96}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x802b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x9, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)={0x2, 0x0, [0x0, 0x0]}) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000004112bfb50ce567bd900000080000000c6d5c9fe60eb59771f46155c72a446c8e85119e80ddb2203dd42d45fc2ca9e272c66e65a6e56e60f9f03ee672a4cb9802486eee350e43bfc0696c34e442847f4678f86ef6eeb4896b924059b91a1725cdfa0f22e2cc08ad551", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8f}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002000000200a0000000000009500007b0000000085000000130000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x92, &(0x7f0000000240)=""/146}, 0x80) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8000}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x8, 0x1, 0x12}, 0x50) r11 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r7, 0xc, 0x0, 0xffffffff, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@map=r10, r12, 0x27, 0x0, r6, @void, @value=r6, @void, @void, r13}, 0x20) ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0x9) 2.74975454s ago: executing program 0 (id=3303): socket$kcm(0x10, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000000000000000000000000000008fed9a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={r2, &(0x7f0000000700), &(0x7f0000001980)=""/210}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r5 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0xb, 0x5, 0x3, 0xa8, 0x0, 0xa07b, 0x3c402, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x4, @perf_config_ext={0x8507, 0x6}, 0x20, 0x5, 0x2000, 0x2, 0x3ff, 0x436, 0x5, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r1, 0x8) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x84, 0x36, 0xfb, 0x0, 0xefde, 0x4, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x40000000, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0xa09, 0xffffffffffffffff, 0x8, 0x7, 0xffffffffffffffff, 0xd, 0xf, 0x0, 0xc}, r4, 0xd, r5, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a80016000a00014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611034000000000063014000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (fail_nth: 2) socket$kcm(0x10, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) 1.520422361s ago: executing program 3 (id=3304): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffb}, 0x828, 0xa, 0x0, 0x2, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000680), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', r7, 0x4000, r7}, 0x18) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.416663757s ago: executing program 2 (id=3305): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x86, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59a5a4d33f921921320000005e140602ffffffff0d00130001", 0x25}], 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848390000005e140602000000000e0027", 0x23}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) 1.20113029s ago: executing program 1 (id=3306): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000000)={0x4, 0xcd, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x9d35, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x2000007fff, 0x0, 0x6, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0xf, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) 1.000619642s ago: executing program 2 (id=3307): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fc", 0x21}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x4000815) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 943.807705ms ago: executing program 3 (id=3308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="00ffffff7f000000000000000000000445"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x8905, &(0x7f0000000100)) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x62, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000380)=""/76}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x7, 0xffffffff, 0x8, 0x5, 0x4, 0xffffffffffffffff, 0x3, '\x00', r7, r6, 0x2, 0x5, 0x4}, 0x50) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xf, 0xb, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0xa, 0x9, 0x1, 0x0, 0xfffffffffffffff0}], &(0x7f00000001c0)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41100, 0x40, '\x00', r4, @cgroup_device, r6, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x7, 0x982, 0xffffffff}, 0x10, r8, r9, 0x7, &(0x7f0000000900)=[r10, r11], &(0x7f0000000940)=[{0x2, 0x2, 0xb, 0x7}, {0x0, 0x1, 0x3, 0x1}, {0x5, 0x5, 0x3, 0x4}, {0x5, 0x2, 0xc, 0x1}, {0x0, 0x1, 0xb, 0xc}, {0x5, 0x2, 0x8, 0x3}, {0x5, 0x3, 0x1, 0xa}]}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000a80), 0x4) 823.153492ms ago: executing program 1 (id=3309): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}], 0x1}, 0x0) 712.099719ms ago: executing program 3 (id=3310): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xfd, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$inet(r0, 0x0, 0x80) r1 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000580)={&(0x7f00000006c0)="37b8da957da3e67eb1e285cb5f5e25ddfc27ca4532bb9cfe5b8d1f139b4597ba1d224bf41d35c8fd0e2404a531f54c064c5f8c69c97db5df3334c40988dd68f15ba167e50f5e8c6569298889259f55cea881e2d7f73618f075312cdcaf95b7aed39f28d09e51741c107f6843ff8ad75ceb731899dc966ff3ae8184188632927db4fe948377fe28492bb166d4415cbe", &(0x7f0000000780)=""/203, &(0x7f00000001c0)="76212eb31ad5eaf1f11a7c7a7d35415bb3372a92d2881e1d29fd8160d616447f45c5", &(0x7f0000000300)="f171cb7ce1d8fa93bedddc5daab84f3b1a2a980f8b4416899cc4a7d3", 0x4, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000000) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000640)={r0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_clone(0x10c000, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x3fffc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r8, &(0x7f0000000100)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x18, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000400)={0x4, 0x80, 0x0, 0xff, 0xfc, 0x5, 0x0, 0x6, 0x2080, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x4000, 0x6, 0x8, 0x6, 0xcfb, 0xe, 0x7a7, 0x0, 0x80000000, 0x0, 0x4}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) r11 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c0000009500000016000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 710.706309ms ago: executing program 2 (id=3318): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000000)={0x4, 0xcd, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x9d35, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x2000007fff, 0x0, 0x6, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0xf, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) 672.570641ms ago: executing program 1 (id=3311): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, 0x0, 0x40012100) 635.590374ms ago: executing program 0 (id=3312): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f930461b60040f12", 0x17}, {&(0x7f0000000080)="0015f49dcc099123552d073b629cae47e8815d3e53b53996aceef6e2b898167396", 0x21}], 0x2}, 0x4010) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008ca94ff480152ad3200000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000), 0x8) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, 0x0}, 0xc54) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000080)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed6001280190012", 0x2d}], 0x1}, 0x0) 448.522714ms ago: executing program 1 (id=3313): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x102341, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1408, 0x5, @perf_bp={0x0, 0x9}, 0x1000, 0x4, 0x0, 0x8, 0xfffffffffffffff3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) 225.830717ms ago: executing program 0 (id=3314): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, 0x0, 0x400c015) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89ef, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200), 0xc) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 200.606519ms ago: executing program 2 (id=3315): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x400c015) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0xe3}, @rr={0x7, 0x3, 0xa9}]}}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89ef, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 140.565852ms ago: executing program 1 (id=3316): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x7ff}}], 0x18}, 0x0) 0s ago: executing program 3 (id=3317): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r3}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x40049409, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2445, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x95, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback=r11, 0xffffffffffffffff, 0x1, 0x4}, 0x20) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x9, &(0x7f0000000140)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xf2, &(0x7f0000000200)=""/242, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r10, 0xffffffffffffffff, 0x2f, 0x4, 0x0, @void, @value=r12}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r8, r8, 0x32, 0x4, 0x0, @void, @value=r9}, 0x20) write$cgroup_pid(r9, &(0x7f0000000000), 0x2a979d) kernel console output (not intermixed with test programs): rps_record_flow+0x19/0x3f0 [ 600.626556][T13831] ? inet_sendmsg+0x7c/0x2f0 [ 600.631164][T13831] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 600.636492][T13831] ? security_socket_sendmsg+0x80/0xa0 [ 600.642061][T13831] ? inet_send_prepare+0x260/0x260 [ 600.647207][T13831] ____sys_sendmsg+0x5ba/0x960 [ 600.652008][T13831] ? __lock_acquire+0x7d40/0x7d40 [ 600.657085][T13831] ? __asan_memset+0x22/0x40 [ 600.661707][T13831] ? __sys_sendmsg_sock+0x30/0x30 [ 600.666764][T13831] ? __import_iovec+0x5f2/0x850 [ 600.671658][T13831] ? import_iovec+0x73/0xa0 [ 600.676221][T13831] ___sys_sendmsg+0x2a6/0x360 [ 600.680934][T13831] ? get_pid_task+0x20/0x1e0 [ 600.685605][T13831] ? __sys_sendmsg+0x2a0/0x2a0 [ 600.690435][T13831] ? __lock_acquire+0x7d40/0x7d40 [ 600.695533][T13831] __se_sys_sendmsg+0x1c2/0x2b0 [ 600.700435][T13831] ? __x64_sys_sendmsg+0x80/0x80 [ 600.705433][T13831] ? lockdep_hardirqs_on+0x98/0x150 [ 600.710676][T13831] do_syscall_64+0x55/0xa0 [ 600.715148][T13831] ? clear_bhb_loop+0x40/0x90 [ 600.719865][T13831] ? clear_bhb_loop+0x40/0x90 [ 600.724606][T13831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.730527][T13831] RIP: 0033:0x7fd74019acb9 [ 600.734973][T13831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.754606][T13831] RSP: 002b:00007fd7410b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.763065][T13831] RAX: ffffffffffffffda RBX: 00007fd740415fa0 RCX: 00007fd74019acb9 [ 600.771068][T13831] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000003 [ 600.779093][T13831] RBP: 00007fd7410b3090 R08: 0000000000000000 R09: 0000000000000000 [ 600.787101][T13831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.795114][T13831] R13: 00007fd740416038 R14: 00007fd740415fa0 R15: 00007ffde638eff8 [ 600.803132][T13831] [ 601.357250][ T2108] hsr_slave_0: left promiscuous mode [ 601.373278][ T2108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.410638][ T2108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.497775][ T2108] ` (unregistering): Port device macvlan0 removed [ 603.752495][ T2108] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 603.761815][ T2108] batadv_slave_0 (unregistering): left promiscuous mode [ 603.819160][ T2108] ` (unregistering): Port device team_slave_1 removed [ 603.865491][ T2108] ` (unregistering): Port device team_slave_0 removed [ 603.914951][ T2108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.930268][ T2108] bond_slave_1 (unregistering): left promiscuous mode [ 603.975611][ T2108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.986996][ T2108] bond_slave_0 (unregistering): left promiscuous mode [ 604.285905][ T2108] bond0 (unregistering): Released all slaves [ 604.325388][T13855] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2539'. [ 604.334990][T13854] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2546'. [ 604.589790][T13671] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 604.612145][T13671] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 604.629585][T13671] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 604.667002][T13671] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 604.840680][T13671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.870997][T13671] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.897534][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.904748][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.922728][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.930064][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.248887][T13671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.338122][T13671] veth0_vlan: entered promiscuous mode [ 605.362505][T13671] veth1_vlan: entered promiscuous mode [ 605.424216][T13671] veth0_macvtap: entered promiscuous mode [ 605.439347][T13671] veth1_macvtap: entered promiscuous mode [ 605.473260][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.485700][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.504336][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.515365][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.533024][T13671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.557923][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.573157][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.590449][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.601860][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.612582][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.626300][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.639184][T13671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.656027][T13671] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.669660][T13671] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.680278][T13671] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.694815][T13671] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.805409][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.821734][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.866907][ T2188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.874881][ T2188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.042027][T13897] FAULT_INJECTION: forcing a failure. [ 606.042027][T13897] name failslab, interval 1, probability 0, space 0, times 0 [ 606.071905][T13897] CPU: 0 PID: 13897 Comm: syz.1.2549 Not tainted syzkaller #0 [ 606.079486][T13897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.089575][T13897] Call Trace: [ 606.092880][T13897] [ 606.095879][T13897] dump_stack_lvl+0x18c/0x250 [ 606.100598][T13897] ? sctp_sendmsg+0x1575/0x28c0 [ 606.105493][T13897] ? ___sys_sendmsg+0x2a6/0x360 [ 606.110378][T13897] ? show_regs_print_info+0x20/0x20 [ 606.115614][T13897] ? load_image+0x400/0x400 [ 606.120163][T13897] should_fail_ex+0x39d/0x4d0 [ 606.124900][T13897] should_failslab+0x9/0x20 [ 606.129528][T13897] slab_pre_alloc_hook+0x59/0x310 [ 606.134592][T13897] ? sctp_add_bind_addr+0x8c/0x360 [ 606.139739][T13897] __kmem_cache_alloc_node+0x53/0x250 [ 606.145157][T13897] ? sctp_add_bind_addr+0x8c/0x360 [ 606.150307][T13897] kmalloc_trace+0x2a/0xe0 [ 606.154782][T13897] sctp_add_bind_addr+0x8c/0x360 [ 606.159755][T13897] sctp_copy_local_addr_list+0x315/0x4f0 [ 606.165426][T13897] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 606.171184][T13897] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 606.177293][T13897] ? sctp_v4_is_any+0x35/0x60 [ 606.182021][T13897] ? sctp_copy_one_addr+0x8c/0x350 [ 606.187170][T13897] sctp_bind_addr_copy+0xb3/0x3c0 [ 606.192262][T13897] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 606.198624][T13897] sctp_connect_new_asoc+0x2f9/0x6a0 [ 606.203938][T13897] ? __sctp_connect+0xd80/0xd80 [ 606.208811][T13897] ? __local_bh_enable_ip+0x13a/0x1c0 [ 606.214213][T13897] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 606.219787][T13897] ? security_sctp_bind_connect+0x89/0xb0 [ 606.225534][T13897] sctp_sendmsg+0x1575/0x28c0 [ 606.230253][T13897] ? sctp_getsockopt+0xb60/0xb60 [ 606.235217][T13897] ? aa_sk_perm+0x83c/0x970 [ 606.239759][T13897] ? aa_af_perm+0x330/0x330 [ 606.244298][T13897] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 606.250742][T13897] ? sock_rps_record_flow+0x19/0x3f0 [ 606.256071][T13897] ? inet_sendmsg+0xe9/0x2f0 [ 606.260691][T13897] ? inet_send_prepare+0x260/0x260 [ 606.265844][T13897] ____sys_sendmsg+0x5ba/0x960 [ 606.270657][T13897] ? __lock_acquire+0x7d40/0x7d40 [ 606.275717][T13897] ? __asan_memset+0x22/0x40 [ 606.280346][T13897] ? __sys_sendmsg_sock+0x30/0x30 [ 606.285402][T13897] ? __import_iovec+0x5f2/0x850 [ 606.290303][T13897] ? import_iovec+0x73/0xa0 [ 606.294861][T13897] ___sys_sendmsg+0x2a6/0x360 [ 606.299579][T13897] ? get_pid_task+0x20/0x1e0 [ 606.304203][T13897] ? __sys_sendmsg+0x2a0/0x2a0 [ 606.309023][T13897] ? __lock_acquire+0x7d40/0x7d40 [ 606.314162][T13897] __se_sys_sendmsg+0x1c2/0x2b0 [ 606.319054][T13897] ? __x64_sys_sendmsg+0x80/0x80 [ 606.324051][T13897] ? lockdep_hardirqs_on+0x98/0x150 [ 606.329276][T13897] do_syscall_64+0x55/0xa0 [ 606.333725][T13897] ? clear_bhb_loop+0x40/0x90 [ 606.338427][T13897] ? clear_bhb_loop+0x40/0x90 [ 606.343150][T13897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.349083][T13897] RIP: 0033:0x7fc5ea99acb9 [ 606.353523][T13897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.373246][T13897] RSP: 002b:00007fc5eb92a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.381690][T13897] RAX: ffffffffffffffda RBX: 00007fc5eac15fa0 RCX: 00007fc5ea99acb9 [ 606.389684][T13897] RDX: 00000000000000fc RSI: 0000200000000600 RDI: 0000000000000003 [ 606.397687][T13897] RBP: 00007fc5eb92a090 R08: 0000000000000000 R09: 0000000000000000 [ 606.405682][T13897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.413675][T13897] R13: 00007fc5eac16038 R14: 00007fc5eac15fa0 R15: 00007ffea5c8d028 [ 606.421688][T13897] [ 606.758307][T13898] netlink: 'syz.0.2548': attribute type 16 has an invalid length. [ 606.767657][T13898] netlink: 'syz.0.2548': attribute type 3 has an invalid length. [ 606.783108][T13898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2548'. [ 606.998536][T13911] netlink: 'syz.1.2552': attribute type 3 has an invalid length. [ 607.046666][T13911] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2552'. [ 607.167741][T13923] bridge_slave_1: left allmulticast mode [ 607.173484][T13923] bridge_slave_1: left promiscuous mode [ 607.186421][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.254427][T13923] bridge_slave_0: left allmulticast mode [ 607.263561][T13923] bridge_slave_0: left promiscuous mode [ 607.281752][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.301953][T13929] netlink: 'syz.0.2543': attribute type 29 has an invalid length. [ 607.385292][T13933] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2543'. [ 607.422872][T13933] netlink: zone id is out of range [ 607.456739][T13933] netlink: del zone limit has 8 unknown bytes [ 607.480773][T13936] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 607.514260][T13926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2540'. [ 607.527890][T13936] netlink: 'syz.1.2544': attribute type 27 has an invalid length. [ 607.536972][T13936] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2544'. [ 607.560056][T13929] netlink: 'syz.0.2543': attribute type 29 has an invalid length. [ 608.263315][T13956] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.2554'. [ 608.334170][T13956] netlink: 'syz.0.2554': attribute type 10 has an invalid length. [ 608.365436][T13956] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2554'. [ 608.992885][T13967] netlink: 'syz.1.2555': attribute type 16 has an invalid length. [ 609.019507][T13967] netlink: 'syz.1.2555': attribute type 3 has an invalid length. [ 609.050464][T13967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2555'. [ 609.650395][T13974] FAULT_INJECTION: forcing a failure. [ 609.650395][T13974] name failslab, interval 1, probability 0, space 0, times 0 [ 609.679368][T13974] CPU: 0 PID: 13974 Comm: syz.0.2556 Not tainted syzkaller #0 [ 609.686940][T13974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.697023][T13974] Call Trace: [ 609.700335][T13974] [ 609.703286][T13974] dump_stack_lvl+0x18c/0x250 [ 609.708020][T13974] ? show_regs_print_info+0x20/0x20 [ 609.713266][T13974] ? load_image+0x400/0x400 [ 609.717821][T13974] ? __might_sleep+0xe0/0xe0 [ 609.722448][T13974] ? __lock_acquire+0x7d40/0x7d40 [ 609.727507][T13974] should_fail_ex+0x39d/0x4d0 [ 609.732221][T13974] should_failslab+0x9/0x20 [ 609.736755][T13974] slab_pre_alloc_hook+0x59/0x310 [ 609.741812][T13974] kmem_cache_alloc_node+0x60/0x320 [ 609.747052][T13974] ? __alloc_skb+0x103/0x2c0 [ 609.751695][T13974] __alloc_skb+0x103/0x2c0 [ 609.756160][T13974] pfkey_sendmsg+0x1a8/0x10e0 [ 609.760859][T13974] ? __might_sleep+0xe0/0xe0 [ 609.765472][T13974] ? mark_lock+0x94/0x320 [ 609.769832][T13974] ? __lock_acquire+0x1273/0x7d40 [ 609.774887][T13974] ? pfkey_release+0x320/0x320 [ 609.779695][T13974] ? aa_sk_perm+0x83c/0x970 [ 609.784236][T13974] ? aa_af_perm+0x330/0x330 [ 609.788793][T13974] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 609.795238][T13974] ? aa_sock_msg_perm+0x94/0x150 [ 609.800209][T13974] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 609.805537][T13974] ? security_socket_sendmsg+0x80/0xa0 [ 609.811018][T13974] ? pfkey_release+0x320/0x320 [ 609.815816][T13974] ____sys_sendmsg+0x5ba/0x960 [ 609.820626][T13974] ? __asan_memset+0x22/0x40 [ 609.825253][T13974] ? __sys_sendmsg_sock+0x30/0x30 [ 609.830303][T13974] ? __import_iovec+0x5f2/0x850 [ 609.835192][T13974] ? import_iovec+0x73/0xa0 [ 609.839762][T13974] ___sys_sendmsg+0x2a6/0x360 [ 609.844491][T13974] ? get_pid_task+0x20/0x1e0 [ 609.849122][T13974] ? __sys_sendmsg+0x2a0/0x2a0 [ 609.853941][T13974] ? __lock_acquire+0x7d40/0x7d40 [ 609.859007][T13974] __se_sys_sendmsg+0x1c2/0x2b0 [ 609.863903][T13974] ? __x64_sys_sendmsg+0x80/0x80 [ 609.868901][T13974] ? lockdep_hardirqs_on+0x98/0x150 [ 609.874172][T13974] do_syscall_64+0x55/0xa0 [ 609.878624][T13974] ? clear_bhb_loop+0x40/0x90 [ 609.883339][T13974] ? clear_bhb_loop+0x40/0x90 [ 609.888093][T13974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.894034][T13974] RIP: 0033:0x7fd74019acb9 [ 609.898522][T13974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.918172][T13974] RSP: 002b:00007fd7410b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.926637][T13974] RAX: ffffffffffffffda RBX: 00007fd740415fa0 RCX: 00007fd74019acb9 [ 609.934639][T13974] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004 [ 609.942641][T13974] RBP: 00007fd7410b3090 R08: 0000000000000000 R09: 0000000000000000 [ 609.950640][T13974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.958641][T13974] R13: 00007fd740416038 R14: 00007fd740415fa0 R15: 00007ffde638eff8 [ 609.966663][T13974] [ 610.223037][T13984] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2558'. [ 610.235739][T13983] netlink: 'syz.2.2560': attribute type 29 has an invalid length. [ 610.295003][T13983] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2560'. [ 610.322036][T13983] netlink: zone id is out of range [ 610.332243][T13983] netlink: del zone limit has 8 unknown bytes [ 610.608445][T13989] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 610.633489][T13989] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2561'. [ 611.979955][T13997] netlink: 142528 bytes leftover after parsing attributes in process `syz.0.2564'. [ 612.016285][T13997] validate_nla: 2 callbacks suppressed [ 612.016302][T13997] netlink: 'syz.0.2564': attribute type 1 has an invalid length. [ 612.155291][T14000] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2563'. [ 612.282272][T14006] netlink: 'syz.3.2565': attribute type 29 has an invalid length. [ 612.318635][T14006] netlink: 'syz.3.2565': attribute type 29 has an invalid length. [ 612.396012][T14006] netlink: 'syz.3.2565': attribute type 29 has an invalid length. [ 612.778760][T14011] netlink: 'syz.2.2567': attribute type 16 has an invalid length. [ 612.800988][T14011] netlink: 'syz.2.2567': attribute type 3 has an invalid length. [ 612.813900][T14011] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2567'. [ 614.820131][T14014] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2577'. [ 614.881105][T14016] netlink: 'syz.1.2568': attribute type 9 has an invalid length. [ 614.929805][T14016] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2568'. [ 614.966674][T14014] netlink: 'syz.2.2577': attribute type 13 has an invalid length. [ 614.988430][T14014] macvtap0: refused to change device tx_queue_len [ 615.273175][T14021] netlink: 'syz.1.2568': attribute type 9 has an invalid length. [ 615.321250][T14021] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2568'. [ 615.890466][T14027] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 615.892885][T14028] netlink: 'syz.2.2581': attribute type 7 has an invalid length. [ 615.913512][T14028] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2581'. [ 615.945403][T14027] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2572'. [ 616.113185][T14032] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2574'. [ 616.305236][T14037] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2573'. [ 616.962777][T14040] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2576'. [ 617.081815][T14044] validate_nla: 4 callbacks suppressed [ 617.081837][T14044] netlink: 'syz.1.2578': attribute type 9 has an invalid length. [ 617.102505][T14044] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2578'. [ 617.957731][T14050] netlink: 'syz.1.2578': attribute type 9 has an invalid length. [ 617.967476][T14050] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2578'. [ 618.212458][T14061] netlink: 'syz.2.2583': attribute type 2 has an invalid length. [ 618.245720][T14061] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2583'. [ 618.259962][T14065] FAULT_INJECTION: forcing a failure. [ 618.259962][T14065] name failslab, interval 1, probability 0, space 0, times 0 [ 618.277291][T14066] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2583'. [ 618.286674][T14065] CPU: 0 PID: 14065 Comm: syz.1.2584 Not tainted syzkaller #0 [ 618.286762][T14065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.304458][T14065] Call Trace: [ 618.307809][T14065] [ 618.310830][T14065] dump_stack_lvl+0x18c/0x250 [ 618.315583][T14065] ? sctp_sendmsg+0x1575/0x28c0 [ 618.320514][T14065] ? ___sys_sendmsg+0x2a6/0x360 [ 618.325493][T14065] ? show_regs_print_info+0x20/0x20 [ 618.330768][T14065] ? load_image+0x400/0x400 [ 618.335378][T14065] should_fail_ex+0x39d/0x4d0 [ 618.340169][T14065] should_failslab+0x9/0x20 [ 618.344761][T14065] slab_pre_alloc_hook+0x59/0x310 [ 618.349900][T14065] ? sctp_add_bind_addr+0x8c/0x360 [ 618.355109][T14065] __kmem_cache_alloc_node+0x53/0x250 [ 618.360588][T14065] ? sctp_add_bind_addr+0x8c/0x360 [ 618.365792][T14065] kmalloc_trace+0x2a/0xe0 [ 618.370291][T14065] sctp_add_bind_addr+0x8c/0x360 [ 618.375413][T14065] sctp_copy_local_addr_list+0x315/0x4f0 [ 618.381168][T14065] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 618.387008][T14065] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 618.393203][T14065] ? sctp_v4_is_any+0x35/0x60 [ 618.397962][T14065] ? sctp_copy_one_addr+0x8c/0x350 [ 618.403168][T14065] sctp_bind_addr_copy+0xb3/0x3c0 [ 618.408271][T14065] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 618.414716][T14065] sctp_connect_new_asoc+0x2f9/0x6a0 [ 618.420116][T14065] ? __sctp_connect+0xd80/0xd80 [ 618.425142][T14065] ? __local_bh_enable_ip+0x13a/0x1c0 [ 618.430569][T14065] ? _local_bh_enable+0xa0/0xa0 [ 618.435469][T14065] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 618.441361][T14065] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 618.447254][T14065] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 618.452894][T14065] ? security_sctp_bind_connect+0x89/0xb0 [ 618.458695][T14065] sctp_sendmsg+0x1575/0x28c0 [ 618.463477][T14065] ? sctp_getsockopt+0xb60/0xb60 [ 618.468472][T14065] ? aa_sk_perm+0x83c/0x970 [ 618.473061][T14065] ? aa_af_perm+0x330/0x330 [ 618.477648][T14065] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 618.484144][T14065] ? sock_rps_record_flow+0x19/0x3f0 [ 618.489520][T14065] ? inet_sendmsg+0x7c/0x2f0 [ 618.494168][T14065] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 618.499502][T14065] ? security_socket_sendmsg+0x80/0xa0 [ 618.505004][T14065] ? inet_send_prepare+0x260/0x260 [ 618.510174][T14065] ____sys_sendmsg+0x5ba/0x960 [ 618.515003][T14065] ? __lock_acquire+0x7d40/0x7d40 [ 618.520093][T14065] ? __asan_memset+0x22/0x40 [ 618.524743][T14065] ? __sys_sendmsg_sock+0x30/0x30 [ 618.529912][T14065] ? __import_iovec+0x5f2/0x850 [ 618.534852][T14065] ? import_iovec+0x73/0xa0 [ 618.539481][T14065] ___sys_sendmsg+0x2a6/0x360 [ 618.544258][T14065] ? __sys_sendmsg+0x2a0/0x2a0 [ 618.549166][T14065] ? trace_call_bpf+0xc3/0x6c0 [ 618.554099][T14065] __se_sys_sendmsg+0x1c2/0x2b0 [ 618.559040][T14065] ? __x64_sys_sendmsg+0x80/0x80 [ 618.564108][T14065] ? lockdep_hardirqs_on+0x98/0x150 [ 618.569383][T14065] do_syscall_64+0x55/0xa0 [ 618.573927][T14065] ? clear_bhb_loop+0x40/0x90 [ 618.578665][T14065] ? clear_bhb_loop+0x40/0x90 [ 618.583411][T14065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.589353][T14065] RIP: 0033:0x7fc5ea99acb9 [ 618.593814][T14065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.613468][T14065] RSP: 002b:00007fc5eb92a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.621941][T14065] RAX: ffffffffffffffda RBX: 00007fc5eac15fa0 RCX: 00007fc5ea99acb9 [ 618.629955][T14065] RDX: 0000000004000040 RSI: 00002000000010c0 RDI: 0000000000000004 [ 618.637972][T14065] RBP: 00007fc5eb92a090 R08: 0000000000000000 R09: 0000000000000000 [ 618.646001][T14065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 618.654020][T14065] R13: 00007fc5eac16038 R14: 00007fc5eac15fa0 R15: 00007ffea5c8d028 [ 618.662090][T14065] [ 618.745529][T14070] netlink: 'syz.0.2585': attribute type 7 has an invalid length. [ 618.754418][T14070] netlink: 'syz.0.2585': attribute type 1 has an invalid length. [ 619.112350][T14078] netlink: 'syz.0.2586': attribute type 27 has an invalid length. [ 619.281536][T14074] netlink: 'syz.3.2589': attribute type 13 has an invalid length. [ 619.293118][T14074] macvtap0: entered promiscuous mode [ 620.039990][T14074] macvtap0: refused to change device tx_queue_len [ 620.405764][T14095] __nla_validate_parse: 5 callbacks suppressed [ 620.405785][T14095] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2590'. [ 620.814545][T14101] netlink: 'syz.1.2595': attribute type 2 has an invalid length. [ 620.842848][T14101] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2595'. [ 620.873579][T14101] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2595'. [ 621.265609][T14103] netlink: 'syz.1.2596': attribute type 7 has an invalid length. [ 621.287875][T14103] netlink: 'syz.1.2596': attribute type 1 has an invalid length. [ 621.305981][T14103] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2596'. [ 623.508110][T14121] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2601'. [ 623.629123][T14127] netlink: 'syz.1.2602': attribute type 2 has an invalid length. [ 623.651263][T14127] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2602'. [ 624.670942][T14133] FAULT_INJECTION: forcing a failure. [ 624.670942][T14133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.708592][T14133] CPU: 0 PID: 14133 Comm: syz.0.2605 Not tainted syzkaller #0 [ 624.716166][T14133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.726266][T14133] Call Trace: [ 624.729604][T14133] [ 624.732584][T14133] dump_stack_lvl+0x18c/0x250 [ 624.737321][T14133] ? show_regs_print_info+0x20/0x20 [ 624.742582][T14133] ? load_image+0x400/0x400 [ 624.747135][T14133] ? __lock_acquire+0x7d40/0x7d40 [ 624.752213][T14133] ? __virt_addr_valid+0x18c/0x540 [ 624.757386][T14133] should_fail_ex+0x39d/0x4d0 [ 624.762130][T14133] _copy_from_user+0x2f/0xe0 [ 624.766780][T14133] bpf_test_init+0xde/0x140 [ 624.771430][T14133] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 624.776865][T14133] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 624.783070][T14133] ? lockdep_hardirqs_on+0x98/0x150 [ 624.788317][T14133] ? dev_put+0x80/0x80 [ 624.792439][T14133] ? dev_put+0x80/0x80 [ 624.796554][T14133] bpf_prog_test_run+0x321/0x390 [ 624.801553][T14133] __sys_bpf+0x49d/0x890 [ 624.805847][T14133] ? bpf_link_show_fdinfo+0x390/0x390 [ 624.811276][T14133] ? lock_chain_count+0x20/0x20 [ 624.816169][T14133] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 624.822205][T14133] __x64_sys_bpf+0x7c/0x90 [ 624.826693][T14133] do_syscall_64+0x55/0xa0 [ 624.831217][T14133] ? clear_bhb_loop+0x40/0x90 [ 624.835979][T14133] ? clear_bhb_loop+0x40/0x90 [ 624.840696][T14133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.846614][T14133] RIP: 0033:0x7fd74019acb9 [ 624.851053][T14133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.870775][T14133] RSP: 002b:00007fd7410b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 624.879214][T14133] RAX: ffffffffffffffda RBX: 00007fd740415fa0 RCX: 00007fd74019acb9 [ 624.887209][T14133] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 624.895227][T14133] RBP: 00007fd7410b3090 R08: 0000000000000000 R09: 0000000000000000 [ 624.903220][T14133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.911237][T14133] R13: 00007fd740416038 R14: 00007fd740415fa0 R15: 00007ffde638eff8 [ 624.919254][T14133] [ 625.029734][T14147] FAULT_INJECTION: forcing a failure. [ 625.029734][T14147] name failslab, interval 1, probability 0, space 0, times 0 [ 625.082708][T14147] CPU: 1 PID: 14147 Comm: syz.2.2608 Not tainted syzkaller #0 [ 625.090353][T14147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.100454][T14147] Call Trace: [ 625.103780][T14147] [ 625.106752][T14147] dump_stack_lvl+0x18c/0x250 [ 625.111487][T14147] ? show_regs_print_info+0x20/0x20 [ 625.116741][T14147] ? load_image+0x400/0x400 [ 625.121295][T14147] ? __lock_acquire+0x1273/0x7d40 [ 625.126450][T14147] should_fail_ex+0x39d/0x4d0 [ 625.131188][T14147] should_failslab+0x9/0x20 [ 625.135748][T14147] slab_pre_alloc_hook+0x59/0x310 [ 625.140823][T14147] ? __lock_acquire+0x1273/0x7d40 [ 625.145917][T14147] kmem_cache_alloc+0x5a/0x2d0 [ 625.150742][T14147] ? dst_alloc+0x105/0x170 [ 625.155232][T14147] dst_alloc+0x105/0x170 [ 625.159529][T14147] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 625.165663][T14147] ? ip_route_output_key_hash+0x13d/0x330 [ 625.171433][T14147] ip_route_output_key_hash+0x1f3/0x330 [ 625.177028][T14147] ? ip_route_input_rcu+0x30e0/0x30e0 [ 625.182458][T14147] ? __lock_acquire+0x7d40/0x7d40 [ 625.187537][T14147] ip_route_output_flow+0x2a/0x150 [ 625.192697][T14147] ? security_sk_classify_flow+0x7b/0x90 [ 625.198395][T14147] raw_sendmsg+0x129a/0x1c00 [ 625.203048][T14147] ? compat_raw_ioctl+0x70/0x70 [ 625.207947][T14147] ? mark_lock+0x94/0x320 [ 625.212321][T14147] ? __lock_acquire+0x1273/0x7d40 [ 625.217424][T14147] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 625.223884][T14147] ? sock_rps_record_flow+0x19/0x3f0 [ 625.229209][T14147] ? inet_sendmsg+0x7c/0x2f0 [ 625.233838][T14147] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 625.239173][T14147] ? security_socket_sendmsg+0x80/0xa0 [ 625.244672][T14147] ? inet_send_prepare+0x260/0x260 [ 625.249837][T14147] ____sys_sendmsg+0x5ba/0x960 [ 625.254665][T14147] ? __lock_acquire+0x7d40/0x7d40 [ 625.259742][T14147] ? __asan_memset+0x22/0x40 [ 625.264408][T14147] ? __sys_sendmsg_sock+0x30/0x30 [ 625.269506][T14147] ? __import_iovec+0x5f2/0x850 [ 625.274445][T14147] ? import_iovec+0x73/0xa0 [ 625.279006][T14147] ___sys_sendmsg+0x2a6/0x360 [ 625.283758][T14147] ? get_pid_task+0x20/0x1e0 [ 625.288420][T14147] ? __sys_sendmsg+0x2a0/0x2a0 [ 625.293279][T14147] ? __lock_acquire+0x7d40/0x7d40 [ 625.298422][T14147] __se_sys_sendmsg+0x1c2/0x2b0 [ 625.303423][T14147] ? __x64_sys_sendmsg+0x80/0x80 [ 625.308437][T14147] ? lockdep_hardirqs_on+0x98/0x150 [ 625.313683][T14147] do_syscall_64+0x55/0xa0 [ 625.318194][T14147] ? clear_bhb_loop+0x40/0x90 [ 625.322932][T14147] ? clear_bhb_loop+0x40/0x90 [ 625.327662][T14147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.333617][T14147] RIP: 0033:0x7f12b379acb9 [ 625.338078][T14147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.357730][T14147] RSP: 002b:00007f12b45e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.366191][T14147] RAX: ffffffffffffffda RBX: 00007f12b3a15fa0 RCX: 00007f12b379acb9 [ 625.374202][T14147] RDX: 0000000000020814 RSI: 0000200000001600 RDI: 0000000000000003 [ 625.382211][T14147] RBP: 00007f12b45e6090 R08: 0000000000000000 R09: 0000000000000000 [ 625.390229][T14147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.398242][T14147] R13: 00007f12b3a16038 R14: 00007f12b3a15fa0 R15: 00007ffff8dab4b8 [ 625.406278][T14147] [ 626.187311][T14159] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2613'. [ 626.401766][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.419227][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.427990][T14163] FAULT_INJECTION: forcing a failure. [ 626.427990][T14163] name failslab, interval 1, probability 0, space 0, times 0 [ 626.532002][T14163] CPU: 1 PID: 14163 Comm: syz.1.2614 Not tainted syzkaller #0 [ 626.539592][T14163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.549722][T14163] Call Trace: [ 626.553061][T14163] [ 626.556051][T14163] dump_stack_lvl+0x18c/0x250 [ 626.560839][T14163] ? show_regs_print_info+0x20/0x20 [ 626.566136][T14163] ? load_image+0x400/0x400 [ 626.570736][T14163] ? __might_sleep+0xe0/0xe0 [ 626.575421][T14163] ? __lock_acquire+0x7d40/0x7d40 [ 626.580548][T14163] ? prepend_path+0x4b/0x960 [ 626.585240][T14163] should_fail_ex+0x39d/0x4d0 [ 626.590026][T14163] should_failslab+0x9/0x20 [ 626.594607][T14163] slab_pre_alloc_hook+0x59/0x310 [ 626.599720][T14163] ? __asan_memcpy+0x40/0x70 [ 626.604393][T14163] ? tomoyo_encode+0x28b/0x540 [ 626.609231][T14163] ? tomoyo_encode+0x28b/0x540 [ 626.614071][T14163] __kmem_cache_alloc_node+0x53/0x250 [ 626.619548][T14163] ? prepend_path+0x4b/0x960 [ 626.624256][T14163] ? tomoyo_encode+0x28b/0x540 [ 626.629102][T14163] __kmalloc+0xa4/0x230 [ 626.633364][T14163] tomoyo_encode+0x28b/0x540 [ 626.638065][T14163] tomoyo_realpath_from_path+0x592/0x5d0 [ 626.643827][T14163] tomoyo_path_number_perm+0x248/0x620 [ 626.649391][T14163] ? tomoyo_path_number_perm+0x217/0x620 [ 626.655122][T14163] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 626.660687][T14163] ? ksys_write+0x1c4/0x260 [ 626.665424][T14163] ? __fget_files+0x28/0x4b0 [ 626.670108][T14163] ? __fget_files+0x28/0x4b0 [ 626.674862][T14163] security_file_ioctl+0x70/0xa0 [ 626.679913][T14163] __se_sys_ioctl+0x48/0x170 [ 626.684604][T14163] do_syscall_64+0x55/0xa0 [ 626.689115][T14163] ? clear_bhb_loop+0x40/0x90 [ 626.693875][T14163] ? clear_bhb_loop+0x40/0x90 [ 626.698641][T14163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.704614][T14163] RIP: 0033:0x7fc5ea99acb9 [ 626.709103][T14163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.728802][T14163] RSP: 002b:00007fc5eb909028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.737304][T14163] RAX: ffffffffffffffda RBX: 00007fc5eac16090 RCX: 00007fc5ea99acb9 [ 626.745367][T14163] RDX: 0000200000000140 RSI: 00000000400454d9 RDI: 000000000000000c [ 626.753410][T14163] RBP: 00007fc5eb909090 R08: 0000000000000000 R09: 0000000000000000 [ 626.761479][T14163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.769533][T14163] R13: 00007fc5eac16128 R14: 00007fc5eac16090 R15: 00007ffea5c8d028 [ 626.777640][T14163] [ 626.800569][T14163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 627.213853][T14178] FAULT_INJECTION: forcing a failure. [ 627.213853][T14178] name failslab, interval 1, probability 0, space 0, times 0 [ 627.246685][T14178] CPU: 1 PID: 14178 Comm: syz.2.2618 Not tainted syzkaller #0 [ 627.254244][T14178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.264346][T14178] Call Trace: [ 627.267670][T14178] [ 627.270645][T14178] dump_stack_lvl+0x18c/0x250 [ 627.275399][T14178] ? show_regs_print_info+0x20/0x20 [ 627.280679][T14178] ? load_image+0x400/0x400 [ 627.285244][T14178] should_fail_ex+0x39d/0x4d0 [ 627.289963][T14178] should_failslab+0x9/0x20 [ 627.294503][T14178] slab_pre_alloc_hook+0x59/0x310 [ 627.299562][T14178] ? perf_trace_preemptirq_template+0xac/0x330 [ 627.305750][T14178] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 627.311319][T14178] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 627.316884][T14178] __kmem_cache_alloc_node+0x53/0x250 [ 627.322295][T14178] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 627.327860][T14178] __kmalloc+0xa4/0x230 [ 627.332053][T14178] bpf_prog_test_run_skb+0x238/0x12b0 [ 627.337459][T14178] ? lockdep_hardirqs_on+0x98/0x150 [ 627.342691][T14178] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 627.348891][T14178] ? cpu_online+0x60/0x60 [ 627.353243][T14178] bpf_prog_test_run+0x321/0x390 [ 627.358206][T14178] __sys_bpf+0x49d/0x890 [ 627.362473][T14178] ? bpf_link_show_fdinfo+0x390/0x390 [ 627.367877][T14178] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 627.374063][T14178] __x64_sys_bpf+0x7c/0x90 [ 627.378503][T14178] do_syscall_64+0x55/0xa0 [ 627.382942][T14178] ? clear_bhb_loop+0x40/0x90 [ 627.387640][T14178] ? clear_bhb_loop+0x40/0x90 [ 627.392347][T14178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 627.398262][T14178] RIP: 0033:0x7f12b379acb9 [ 627.402699][T14178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.422331][T14178] RSP: 002b:00007f12b45e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 627.430780][T14178] RAX: ffffffffffffffda RBX: 00007f12b3a15fa0 RCX: 00007f12b379acb9 [ 627.438773][T14178] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 627.446780][T14178] RBP: 00007f12b45e6090 R08: 0000000000000000 R09: 0000000000000000 [ 627.454768][T14178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.462765][T14178] R13: 00007f12b3a16038 R14: 00007f12b3a15fa0 R15: 00007ffff8dab4b8 [ 627.470798][T14178] [ 628.075407][T14185] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2620'. [ 628.743887][T14205] netlink: 'syz.3.2627': attribute type 21 has an invalid length. [ 628.787406][T14207] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2628'. [ 628.997000][T14207] netlink: 'syz.0.2628': attribute type 13 has an invalid length. [ 629.005422][T14207] macvtap0: entered promiscuous mode [ 629.311184][T14207] macvtap0: refused to change device tx_queue_len [ 630.723264][T14238] netlink: 'syz.1.2635': attribute type 10 has an invalid length. [ 630.738722][T14238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2635'. [ 631.522073][T14238] team0: Port device geneve0 added [ 631.688309][T14251] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2638'. [ 631.797905][T14254] FAULT_INJECTION: forcing a failure. [ 631.797905][T14254] name failslab, interval 1, probability 0, space 0, times 0 [ 631.841562][T14254] CPU: 0 PID: 14254 Comm: syz.1.2639 Not tainted syzkaller #0 [ 631.849138][T14254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 631.859262][T14254] Call Trace: [ 631.862597][T14254] [ 631.865588][T14254] dump_stack_lvl+0x18c/0x250 [ 631.870371][T14254] ? show_regs_print_info+0x20/0x20 [ 631.875639][T14254] ? load_image+0x400/0x400 [ 631.880222][T14254] ? __might_sleep+0xe0/0xe0 [ 631.884881][T14254] ? __lock_acquire+0x7d40/0x7d40 [ 631.889989][T14254] should_fail_ex+0x39d/0x4d0 [ 631.894756][T14254] should_failslab+0x9/0x20 [ 631.899334][T14254] slab_pre_alloc_hook+0x59/0x310 [ 631.904436][T14254] ? tomoyo_encode+0x28b/0x540 [ 631.909266][T14254] ? tomoyo_encode+0x28b/0x540 [ 631.914091][T14254] __kmem_cache_alloc_node+0x53/0x250 [ 631.919558][T14254] ? tomoyo_encode+0x28b/0x540 [ 631.924387][T14254] __kmalloc+0xa4/0x230 [ 631.928619][T14254] tomoyo_encode+0x28b/0x540 [ 631.931807][T14251] netlink: 'syz.3.2638': attribute type 13 has an invalid length. [ 631.933252][T14254] tomoyo_realpath_from_path+0x592/0x5d0 [ 631.933339][T14254] tomoyo_path_number_perm+0x248/0x620 [ 631.952397][T14254] ? tomoyo_path_number_perm+0x217/0x620 [ 631.958107][T14254] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 631.963647][T14254] ? ksys_write+0x1c4/0x260 [ 631.968322][T14254] ? __fget_files+0x28/0x4b0 [ 631.972983][T14254] ? __fget_files+0x28/0x4b0 [ 631.977664][T14254] security_file_ioctl+0x70/0xa0 [ 631.982696][T14254] __se_sys_ioctl+0x48/0x170 [ 631.987362][T14254] do_syscall_64+0x55/0xa0 [ 631.991842][T14254] ? clear_bhb_loop+0x40/0x90 [ 631.996581][T14254] ? clear_bhb_loop+0x40/0x90 [ 632.001332][T14254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.007288][T14254] RIP: 0033:0x7fc5ea99acb9 [ 632.011765][T14254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.031442][T14254] RSP: 002b:00007fc5eb92a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.039947][T14254] RAX: ffffffffffffffda RBX: 00007fc5eac15fa0 RCX: 00007fc5ea99acb9 [ 632.047987][T14254] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 000000000000000b [ 632.056029][T14254] RBP: 00007fc5eb92a090 R08: 0000000000000000 R09: 0000000000000000 [ 632.064067][T14254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.072111][T14254] R13: 00007fc5eac16038 R14: 00007fc5eac15fa0 R15: 00007ffea5c8d028 [ 632.080197][T14254] [ 632.090703][T14251] macvtap0: refused to change device tx_queue_len [ 632.106409][T14254] ERROR: Out of memory at tomoyo_realpath_from_path. [ 632.138767][T14254] À: port 1(vlan0) entered blocking state [ 632.149278][T14254] À: port 1(vlan0) entered disabled state [ 632.155319][T14254] vlan0: entered allmulticast mode [ 632.172677][T14254] veth0_vlan: entered allmulticast mode [ 632.180865][T14254] vlan0: entered promiscuous mode [ 632.392531][T14260] À: port 1(vlan0) entered blocking state [ 632.424071][T14260] À: port 1(vlan0) entered disabled state [ 632.439144][T14260] vlan0: entered allmulticast mode [ 632.445897][T14260] veth0_vlan: entered allmulticast mode [ 632.453735][T14260] vlan0: entered promiscuous mode [ 633.445092][T14283] netlink: 'syz.3.2647': attribute type 4 has an invalid length. [ 633.502359][T14283] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2647'. [ 633.761063][T14284] À: port 1(vlan0) entered blocking state [ 633.786666][T14284] À: port 1(vlan0) entered disabled state [ 633.833833][T14284] vlan0: entered allmulticast mode [ 633.906380][T14284] veth0_vlan: entered allmulticast mode [ 633.949187][T14284] vlan0: entered promiscuous mode [ 634.458219][T14290] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2648'. [ 637.112251][T14303] netlink: 'syz.1.2652': attribute type 29 has an invalid length. [ 637.246515][T14303] netlink: 'syz.1.2652': attribute type 29 has an invalid length. [ 637.295505][T14308] netlink: 'syz.1.2652': attribute type 29 has an invalid length. [ 638.404104][T14324] netlink: 'syz.0.2660': attribute type 2 has an invalid length. [ 638.476169][T14324] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2660'. [ 638.547952][T14333] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2659'. [ 638.735983][T14332] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2661'. [ 639.951782][T14342] netlink: 'syz.3.2663': attribute type 21 has an invalid length. [ 640.238562][T14345] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2664'. [ 640.262141][T14347] netlink: 'syz.2.2664': attribute type 13 has an invalid length. [ 640.287129][T14349] netlink: 'syz.1.2665': attribute type 2 has an invalid length. [ 640.326368][T14347] macvtap0: refused to change device tx_queue_len [ 640.371124][T14349] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2665'. [ 641.192431][T14366] netlink: 'syz.2.2672': attribute type 2 has an invalid length. [ 641.225988][T14366] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2672'. [ 643.458057][T14401] netlink: 'syz.0.2679': attribute type 29 has an invalid length. [ 643.546538][T14401] netlink: 'syz.0.2679': attribute type 29 has an invalid length. [ 643.599197][T14405] netlink: 'syz.0.2679': attribute type 29 has an invalid length. [ 643.707806][T14406] netlink: 'syz.1.2681': attribute type 2 has an invalid length. [ 643.805731][T14406] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2681'. [ 644.077149][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 644.227118][T14411] FAULT_INJECTION: forcing a failure. [ 644.227118][T14411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.276314][T14411] CPU: 0 PID: 14411 Comm: syz.2.2682 Not tainted syzkaller #0 [ 644.283881][T14411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 644.293988][T14411] Call Trace: [ 644.297313][T14411] [ 644.300287][T14411] dump_stack_lvl+0x18c/0x250 [ 644.305028][T14411] ? show_regs_print_info+0x20/0x20 [ 644.310289][T14411] ? load_image+0x400/0x400 [ 644.314853][T14411] ? __might_fault+0xaa/0x120 [ 644.319591][T14411] ? __lock_acquire+0x7d40/0x7d40 [ 644.324679][T14411] should_fail_ex+0x39d/0x4d0 [ 644.329423][T14411] _copy_from_iter+0x1d9/0x12e0 [ 644.334364][T14411] ? slab_post_alloc_hook+0x8a/0x4b0 [ 644.339714][T14411] ? __virt_addr_valid+0x18c/0x540 [ 644.344893][T14411] ? __lock_acquire+0x7d40/0x7d40 [ 644.349972][T14411] ? rcu_is_watching+0x15/0xb0 [ 644.354817][T14411] ? copyout_mc+0x70/0x70 [ 644.359215][T14411] ? __virt_addr_valid+0x18c/0x540 [ 644.364381][T14411] ? __virt_addr_valid+0x18c/0x540 [ 644.369548][T14411] ? __virt_addr_valid+0x469/0x540 [ 644.374731][T14411] ? __check_object_size+0x506/0xa20 [ 644.380097][T14411] netlink_sendmsg+0x76b/0xbf0 [ 644.384939][T14411] ? netlink_getsockopt+0x590/0x590 [ 644.390208][T14411] ? aa_sock_msg_perm+0x94/0x150 [ 644.395198][T14411] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 644.400535][T14411] ? security_socket_sendmsg+0x80/0xa0 [ 644.406036][T14411] ? netlink_getsockopt+0x590/0x590 [ 644.411270][T14411] ____sys_sendmsg+0x5ba/0x960 [ 644.416108][T14411] ? __asan_memset+0x22/0x40 [ 644.420738][T14411] ? __sys_sendmsg_sock+0x30/0x30 [ 644.425797][T14411] ? __import_iovec+0x5f2/0x850 [ 644.430693][T14411] ? import_iovec+0x73/0xa0 [ 644.435235][T14411] ___sys_sendmsg+0x2a6/0x360 [ 644.439952][T14411] ? __sys_sendmsg+0x2a0/0x2a0 [ 644.444793][T14411] ? __lock_acquire+0x7d40/0x7d40 [ 644.449870][T14411] __se_sys_sendmsg+0x1c2/0x2b0 [ 644.454781][T14411] ? __x64_sys_sendmsg+0x80/0x80 [ 644.459767][T14411] ? lockdep_hardirqs_on+0x98/0x150 [ 644.465002][T14411] do_syscall_64+0x55/0xa0 [ 644.469448][T14411] ? clear_bhb_loop+0x40/0x90 [ 644.474173][T14411] ? clear_bhb_loop+0x40/0x90 [ 644.478884][T14411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 644.484806][T14411] RIP: 0033:0x7f12b379acb9 [ 644.489254][T14411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.508888][T14411] RSP: 002b:00007f12b45e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.517334][T14411] RAX: ffffffffffffffda RBX: 00007f12b3a15fa0 RCX: 00007f12b379acb9 [ 644.525326][T14411] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 644.533330][T14411] RBP: 00007f12b45e6090 R08: 0000000000000000 R09: 0000000000000000 [ 644.541323][T14411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.549316][T14411] R13: 00007f12b3a16038 R14: 00007f12b3a15fa0 R15: 00007ffff8dab4b8 [ 644.557330][T14411] [ 645.419166][T14428] netlink: 'syz.3.2688': attribute type 2 has an invalid length. [ 645.450712][T14428] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2688'. [ 645.646510][T14426] netlink: 'syz.1.2696': attribute type 21 has an invalid length. [ 645.727105][T14426] netlink: 'syz.1.2696': attribute type 4 has an invalid length. [ 646.798487][T14452] netlink: 'syz.3.2694': attribute type 29 has an invalid length. [ 646.823810][T14452] netlink: 'syz.3.2694': attribute type 29 has an invalid length. [ 646.891757][T14454] netlink: 'syz.3.2694': attribute type 29 has an invalid length. [ 647.894649][T14479] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2703'. [ 648.770038][T14484] netlink: 'syz.3.2705': attribute type 2 has an invalid length. [ 648.800498][T14484] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2705'. [ 650.004519][T14496] FAULT_INJECTION: forcing a failure. [ 650.004519][T14496] name failslab, interval 1, probability 0, space 0, times 0 [ 650.043497][T14496] CPU: 0 PID: 14496 Comm: syz.1.2710 Not tainted syzkaller #0 [ 650.051062][T14496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.061158][T14496] Call Trace: [ 650.064473][T14496] [ 650.067445][T14496] dump_stack_lvl+0x18c/0x250 [ 650.072200][T14496] ? show_regs_print_info+0x20/0x20 [ 650.077478][T14496] ? load_image+0x400/0x400 [ 650.082041][T14496] ? __might_sleep+0xe0/0xe0 [ 650.086684][T14496] ? __lock_acquire+0x7d40/0x7d40 [ 650.091760][T14496] should_fail_ex+0x39d/0x4d0 [ 650.096491][T14496] should_failslab+0x9/0x20 [ 650.101049][T14496] slab_pre_alloc_hook+0x59/0x310 [ 650.106128][T14496] ? subflow_ulp_init+0x95/0x530 [ 650.111113][T14496] __kmem_cache_alloc_node+0x53/0x250 [ 650.116542][T14496] ? tcp_set_ulp+0xb1/0x5f0 [ 650.121090][T14496] ? subflow_ulp_init+0x95/0x530 [ 650.126069][T14496] kmalloc_trace+0x2a/0xe0 [ 650.130542][T14496] subflow_ulp_init+0x95/0x530 [ 650.135369][T14496] ? tcp_set_ulp+0xb1/0x5f0 [ 650.139923][T14496] tcp_set_ulp+0x536/0x5f0 [ 650.144388][T14496] mptcp_subflow_create_socket+0x60e/0xac0 [ 650.150258][T14496] ? __mptcp_subflow_connect+0x1450/0x1450 [ 650.156108][T14496] ? mark_lock+0x94/0x320 [ 650.160488][T14496] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 650.166519][T14496] __mptcp_nmpc_sk+0x157/0x740 [ 650.171339][T14496] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 650.178150][T14496] ? __local_bh_enable_ip+0x13a/0x1c0 [ 650.183565][T14496] ? lockdep_hardirqs_on+0x98/0x150 [ 650.188803][T14496] ? __local_bh_enable_ip+0x13a/0x1c0 [ 650.194214][T14496] mptcp_sendmsg_fastopen+0x7f/0x4d0 [ 650.199550][T14496] mptcp_sendmsg+0x14b2/0x16d0 [ 650.204357][T14496] ? __lock_acquire+0x1273/0x7d40 [ 650.209427][T14496] ? verify_lock_unused+0x140/0x140 [ 650.214694][T14496] ? aa_sk_perm+0x83c/0x970 [ 650.219258][T14496] ? aa_af_perm+0x330/0x330 [ 650.223812][T14496] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 650.230274][T14496] ? mptcp_shutdown+0x80/0x80 [ 650.235002][T14496] ? inet6_sendmsg+0x5f/0xd0 [ 650.239635][T14496] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 650.244872][T14496] ____sys_sendmsg+0x5ba/0x960 [ 650.249686][T14496] ? __lock_acquire+0x7d40/0x7d40 [ 650.254762][T14496] ? __asan_memset+0x22/0x40 [ 650.259408][T14496] ? __sys_sendmsg_sock+0x30/0x30 [ 650.264510][T14496] ? __import_iovec+0x3fa/0x850 [ 650.269418][T14496] ? import_iovec+0x73/0xa0 [ 650.273996][T14496] ___sys_sendmsg+0x2a6/0x360 [ 650.278734][T14496] ? __sys_sendmsg+0x2a0/0x2a0 [ 650.283571][T14496] ? trace_call_bpf+0xc3/0x6c0 [ 650.288410][T14496] __se_sys_sendmsg+0x1c2/0x2b0 [ 650.293314][T14496] ? __x64_sys_sendmsg+0x80/0x80 [ 650.298345][T14496] ? lockdep_hardirqs_on+0x98/0x150 [ 650.303589][T14496] do_syscall_64+0x55/0xa0 [ 650.308057][T14496] ? clear_bhb_loop+0x40/0x90 [ 650.312776][T14496] ? clear_bhb_loop+0x40/0x90 [ 650.317494][T14496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.323428][T14496] RIP: 0033:0x7fc5ea99acb9 [ 650.327923][T14496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.347626][T14496] RSP: 002b:00007fc5eb92a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.356085][T14496] RAX: ffffffffffffffda RBX: 00007fc5eac15fa0 RCX: 00007fc5ea99acb9 [ 650.364089][T14496] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000003 [ 650.372102][T14496] RBP: 00007fc5eb92a090 R08: 0000000000000000 R09: 0000000000000000 [ 650.380114][T14496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.388130][T14496] R13: 00007fc5eac16038 R14: 00007fc5eac15fa0 R15: 00007ffea5c8d028 [ 650.396154][T14496] [ 650.762618][T14502] netlink: 'syz.1.2712': attribute type 21 has an invalid length. [ 652.797452][T14507] netlink: 'syz.2.2714': attribute type 2 has an invalid length. [ 652.806976][T14506] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2713'. [ 652.817453][T14507] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2714'. [ 652.942704][T14506] netlink: 'syz.0.2713': attribute type 13 has an invalid length. [ 654.471023][T14506] macvtap0: refused to change device tx_queue_len [ 654.499452][T14513] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2716'. [ 654.790456][T14537] netlink: 'syz.2.2725': attribute type 2 has an invalid length. [ 654.821997][T14537] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2725'. [ 654.967168][T14542] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2729'. [ 655.038152][T14542] netlink: 'syz.2.2729': attribute type 13 has an invalid length. [ 655.049282][T14542] macvtap0: refused to change device tx_queue_len [ 655.090166][T14549] netlink: 'syz.3.2730': attribute type 3 has an invalid length. [ 655.098862][T14549] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2730'. [ 655.177274][T14552] FAULT_INJECTION: forcing a failure. [ 655.177274][T14552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.191025][T14552] CPU: 0 PID: 14552 Comm: syz.0.2731 Not tainted syzkaller #0 [ 655.198632][T14552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.208731][T14552] Call Trace: [ 655.212051][T14552] [ 655.215023][T14552] dump_stack_lvl+0x18c/0x250 [ 655.219791][T14552] ? show_regs_print_info+0x20/0x20 [ 655.225043][T14552] ? load_image+0x400/0x400 [ 655.229615][T14552] ? __might_fault+0xaa/0x120 [ 655.234338][T14552] ? __lock_acquire+0x7d40/0x7d40 [ 655.239411][T14552] should_fail_ex+0x39d/0x4d0 [ 655.244173][T14552] _copy_from_user+0x2f/0xe0 [ 655.248828][T14552] __sys_bpf+0x23e/0x890 [ 655.253133][T14552] ? bpf_link_show_fdinfo+0x390/0x390 [ 655.258567][T14552] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 655.264785][T14552] __x64_sys_bpf+0x7c/0x90 [ 655.269251][T14552] do_syscall_64+0x55/0xa0 [ 655.273718][T14552] ? clear_bhb_loop+0x40/0x90 [ 655.278435][T14552] ? clear_bhb_loop+0x40/0x90 [ 655.283166][T14552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.289103][T14552] RIP: 0033:0x7fd74019acb9 [ 655.293566][T14552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.313227][T14552] RSP: 002b:00007fd7410b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 655.321700][T14552] RAX: ffffffffffffffda RBX: 00007fd740415fa0 RCX: 00007fd74019acb9 [ 655.329730][T14552] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 655.337759][T14552] RBP: 00007fd7410b3090 R08: 0000000000000000 R09: 0000000000000000 [ 655.345879][T14552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.353921][T14552] R13: 00007fd740416038 R14: 00007fd740415fa0 R15: 00007ffde638eff8 [ 655.361975][T14552] [ 655.541408][T14552] netlink: 'syz.0.2731': attribute type 13 has an invalid length. [ 656.492326][T14552] macvtap0: refused to change device tx_queue_len [ 656.499092][T14560] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2732'. [ 656.516012][T14563] netlink: 'syz.1.2735': attribute type 39 has an invalid length. [ 656.712388][T14569] netlink: 'syz.2.2737': attribute type 2 has an invalid length. [ 656.721438][T14569] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2737'. [ 656.899096][T14575] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2740'. [ 656.957453][T14575] netlink: 'syz.2.2740': attribute type 13 has an invalid length. [ 657.002895][T14575] macvtap0: refused to change device tx_queue_len [ 657.363281][T14593] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2744'. [ 657.407675][T14595] netlink: 'syz.3.2748': attribute type 2 has an invalid length. [ 660.382932][T14610] netlink: 'syz.0.2753': attribute type 21 has an invalid length. [ 660.391591][T14610] netlink: 'syz.0.2753': attribute type 10 has an invalid length. [ 660.399765][T14610] netlink: 'syz.0.2753': attribute type 12 has an invalid length. [ 660.407951][T14610] netlink: 'syz.0.2753': attribute type 13 has an invalid length. [ 660.415967][T14610] netlink: 'syz.0.2753': attribute type 14 has an invalid length. [ 660.424218][T14610] netlink: 'syz.0.2753': attribute type 15 has an invalid length. [ 660.434174][T14610] netlink: 'syz.0.2753': attribute type 16 has an invalid length. [ 660.442619][T14610] netlink: 'syz.0.2753': attribute type 19 has an invalid length. [ 660.452218][T14610] netlink: 'syz.0.2753': attribute type 21 has an invalid length. [ 660.461643][T14610] netlink: 'syz.0.2753': attribute type 22 has an invalid length. [ 660.470002][T14610] __nla_validate_parse: 1 callbacks suppressed [ 660.470017][T14610] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.2753'. [ 660.523997][T14611] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2751'. [ 660.685841][T14615] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2754'. [ 660.868639][T14620] FAULT_INJECTION: forcing a failure. [ 660.868639][T14620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.904873][T14616] macvtap0: refused to change device tx_queue_len [ 660.928762][T14620] CPU: 1 PID: 14620 Comm: syz.1.2756 Not tainted syzkaller #0 [ 660.936339][T14620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.946451][T14620] Call Trace: [ 660.949784][T14620] [ 660.952754][T14620] dump_stack_lvl+0x18c/0x250 [ 660.957544][T14620] ? show_regs_print_info+0x20/0x20 [ 660.962810][T14620] ? load_image+0x400/0x400 [ 660.967364][T14620] ? __might_fault+0xaa/0x120 [ 660.972108][T14620] ? __lock_acquire+0x7d40/0x7d40 [ 660.977191][T14620] should_fail_ex+0x39d/0x4d0 [ 660.981928][T14620] _copy_from_user+0x2f/0xe0 [ 660.986564][T14620] xfrm_user_policy+0x2d7/0x930 [ 660.991481][T14620] ? xfrm_unregister_translator+0x70/0x70 [ 660.997259][T14620] ? bpf_lsm_capable+0x9/0x10 [ 661.001999][T14620] ? security_capable+0x89/0xb0 [ 661.006912][T14620] do_ipv6_setsockopt+0xfa7/0x3e20 [ 661.012097][T14620] ? sk_dst_reset+0xa0/0xa0 [ 661.016667][T14620] ? verify_lock_unused+0x140/0x140 [ 661.021933][T14620] ? mark_lock+0x94/0x320 [ 661.026317][T14620] ? __lock_acquire+0x1273/0x7d40 [ 661.031412][T14620] ? aa_label_sk_perm+0x463/0x5c0 [ 661.036498][T14620] ? aa_sk_perm+0x970/0x970 [ 661.041081][T14620] ? __might_sleep+0xe0/0xe0 [ 661.045727][T14620] ? ksys_write+0x1c4/0x260 [ 661.050322][T14620] ? aa_sk_perm+0x83c/0x970 [ 661.054979][T14620] ? __fget_files+0x28/0x4b0 [ 661.059631][T14620] ? aa_af_perm+0x330/0x330 [ 661.064176][T14620] ? __fget_files+0x28/0x4b0 [ 661.068800][T14620] ? __fget_files+0x28/0x4b0 [ 661.073415][T14620] ? aa_sock_opt_perm+0x74/0x100 [ 661.078384][T14620] ipv6_setsockopt+0x59/0x190 [ 661.083105][T14620] ? sock_common_recvmsg+0x190/0x190 [ 661.088432][T14620] do_sock_setsockopt+0x175/0x1a0 [ 661.093489][T14620] ? __fdget+0x180/0x210 [ 661.097776][T14620] __x64_sys_setsockopt+0x182/0x200 [ 661.103024][T14620] do_syscall_64+0x55/0xa0 [ 661.107478][T14620] ? clear_bhb_loop+0x40/0x90 [ 661.112183][T14620] ? clear_bhb_loop+0x40/0x90 [ 661.116887][T14620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.122802][T14620] RIP: 0033:0x7fc5ea99acb9 [ 661.127237][T14620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.146872][T14620] RSP: 002b:00007fc5eb92a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 661.155312][T14620] RAX: ffffffffffffffda RBX: 00007fc5eac15fa0 RCX: 00007fc5ea99acb9 [ 661.163306][T14620] RDX: 0000000000000023 RSI: 0000000000000029 RDI: 0000000000000003 [ 661.171306][T14620] RBP: 00007fc5eb92a090 R08: 00000000000000cf R09: 0000000000000000 [ 661.179339][T14620] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 661.187341][T14620] R13: 00007fc5eac16038 R14: 00007fc5eac15fa0 R15: 00007ffea5c8d028 [ 661.195358][T14620] [ 664.459985][T14632] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2760'. [ 664.477136][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 664.814604][T14648] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2767'. [ 664.926422][T14653] macvtap0: refused to change device tx_queue_len [ 665.270144][T14663] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2771'. [ 665.284744][T14663] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2771'. [ 665.525596][T14663] team0: Device veth0_vlan failed to register rx_handler [ 668.469609][T14675] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2774'. [ 668.690513][T14684] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2778'. [ 669.023067][T14691] validate_nla: 5 callbacks suppressed [ 669.023088][T14691] netlink: 'syz.0.2778': attribute type 13 has an invalid length. [ 669.049695][T14691] macvtap0: refused to change device tx_queue_len [ 669.329248][T14703] netlink: 'syz.2.2783': attribute type 10 has an invalid length. [ 669.337966][T14703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2783'. [ 669.347804][T14703] team0: entered promiscuous mode [ 669.353177][T14703] team_slave_0: entered promiscuous mode [ 669.365709][T14703] team_slave_1: entered promiscuous mode [ 669.377460][T14703] team0: entered allmulticast mode [ 669.382896][T14703] team_slave_0: entered allmulticast mode [ 669.393083][T14703] team_slave_1: entered allmulticast mode [ 669.414906][T14703] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 669.647923][T14704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2783'. [ 669.730410][T14701] netlink: 'syz.0.2784': attribute type 39 has an invalid length. [ 670.312758][T14716] netlink: 'syz.2.2788': attribute type 10 has an invalid length. [ 670.352471][T14716] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 670.505694][T14718] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2789'. [ 670.597060][T14716] syzkaller0: entered promiscuous mode [ 670.626479][T14716] syzkaller0: entered allmulticast mode [ 670.666403][T14718] netlink: 'syz.3.2789': attribute type 13 has an invalid length. [ 670.694615][T14718] macvtap0: refused to change device tx_queue_len [ 671.063167][T14737] netlink: 'syz.1.2796': attribute type 10 has an invalid length. [ 671.076405][T14737] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2796'. [ 671.085549][T14737] team0: entered promiscuous mode [ 671.096697][T14737] team_slave_0: entered promiscuous mode [ 671.112055][T14737] team_slave_1: entered promiscuous mode [ 671.120321][T14737] geneve0: entered promiscuous mode [ 671.125962][T14737] team0: entered allmulticast mode [ 671.142769][T14737] team_slave_0: entered allmulticast mode [ 671.154742][T14737] team_slave_1: entered allmulticast mode [ 671.172874][T14737] geneve0: entered allmulticast mode [ 671.194937][T14737] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 671.268213][T14737] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2796'. [ 671.411966][T14748] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.2798'. [ 671.758360][T14755] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2801'. [ 671.859098][T14755] netlink: 'syz.0.2801': attribute type 13 has an invalid length. [ 671.872548][T14755] macvtap0: refused to change device tx_queue_len [ 671.963989][T14760] netlink: 'syz.0.2803': attribute type 10 has an invalid length. [ 672.010318][T14760] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 672.082452][T14760] syzkaller0: entered promiscuous mode [ 672.094495][T14760] syzkaller0: entered allmulticast mode [ 672.189089][T14765] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2805'. [ 672.335600][T14765] netlink: 'syz.2.2805': attribute type 13 has an invalid length. [ 672.361482][T14765] macvtap0: refused to change device tx_queue_len [ 672.895190][T14787] netlink: 'syz.0.2813': attribute type 10 has an invalid length. [ 672.910506][T14787] team0: entered promiscuous mode [ 672.925208][T14787] team_slave_0: entered promiscuous mode [ 672.939625][T14787] team_slave_1: entered promiscuous mode [ 672.945816][T14787] team0: entered allmulticast mode [ 672.955010][T14787] team_slave_0: entered allmulticast mode [ 672.968803][T14787] team_slave_1: entered allmulticast mode [ 672.993613][T14787] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 673.026803][T14783] macvtap0: refused to change device tx_queue_len [ 673.179184][T14793] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 673.533773][T14794] __nla_validate_parse: 2 callbacks suppressed [ 673.533796][T14794] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2814'. [ 676.059218][T14796] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 676.092137][T14796] syzkaller0: entered promiscuous mode [ 676.124828][T14796] syzkaller0: entered allmulticast mode [ 676.142266][T14801] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2816'. [ 676.154558][T14802] validate_nla: 2 callbacks suppressed [ 676.154578][T14802] netlink: 'syz.1.2816': attribute type 13 has an invalid length. [ 676.174490][T14802] macvtap0: refused to change device tx_queue_len [ 676.461173][T14816] FAULT_INJECTION: forcing a failure. [ 676.461173][T14816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.497110][T14816] CPU: 1 PID: 14816 Comm: syz.3.2822 Not tainted syzkaller #0 [ 676.504681][T14816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 676.514785][T14816] Call Trace: [ 676.518119][T14816] [ 676.521094][T14816] dump_stack_lvl+0x18c/0x250 [ 676.525841][T14816] ? show_regs_print_info+0x20/0x20 [ 676.531105][T14816] ? load_image+0x400/0x400 [ 676.535724][T14816] ? __might_fault+0xaa/0x120 [ 676.540453][T14816] ? __lock_acquire+0x7d40/0x7d40 [ 676.545528][T14816] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 676.551826][T14816] should_fail_ex+0x39d/0x4d0 [ 676.556583][T14816] _copy_from_user+0x2f/0xe0 [ 676.561236][T14816] __sys_bpf+0x23e/0x890 [ 676.565521][T14816] ? bpf_link_show_fdinfo+0x390/0x390 [ 676.570965][T14816] ? lock_chain_count+0x20/0x20 [ 676.575864][T14816] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 676.581912][T14816] __x64_sys_bpf+0x7c/0x90 [ 676.586368][T14816] do_syscall_64+0x55/0xa0 [ 676.590835][T14816] ? clear_bhb_loop+0x40/0x90 [ 676.595555][T14816] ? clear_bhb_loop+0x40/0x90 [ 676.600280][T14816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.606224][T14816] RIP: 0033:0x7f22dfd9acb9 [ 676.610698][T14816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.630365][T14816] RSP: 002b:00007f22e0bc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 676.638850][T14816] RAX: ffffffffffffffda RBX: 00007f22e0015fa0 RCX: 00007f22dfd9acb9 [ 676.646887][T14816] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 676.654911][T14816] RBP: 00007f22e0bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 676.662931][T14816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.670948][T14816] R13: 00007f22e0016038 R14: 00007f22e0015fa0 R15: 00007fff0dcb3858 [ 676.678979][T14816] [ 677.437724][T14833] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2828'. [ 677.802341][T14844] FAULT_INJECTION: forcing a failure. [ 677.802341][T14844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.836253][T14844] CPU: 1 PID: 14844 Comm: syz.0.2831 Not tainted syzkaller #0 [ 677.843817][T14844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.853920][T14844] Call Trace: [ 677.857252][T14844] [ 677.860233][T14844] dump_stack_lvl+0x18c/0x250 [ 677.864965][T14844] ? show_regs_print_info+0x20/0x20 [ 677.870224][T14844] ? load_image+0x400/0x400 [ 677.874777][T14844] ? __might_fault+0xaa/0x120 [ 677.879538][T14844] ? __lock_acquire+0x7d40/0x7d40 [ 677.884600][T14844] should_fail_ex+0x39d/0x4d0 [ 677.889318][T14844] _copy_from_user+0x2f/0xe0 [ 677.893934][T14844] __sys_bpf+0x23e/0x890 [ 677.898213][T14844] ? bpf_link_show_fdinfo+0x390/0x390 [ 677.903625][T14844] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 677.909825][T14844] __x64_sys_bpf+0x7c/0x90 [ 677.914284][T14844] do_syscall_64+0x55/0xa0 [ 677.918737][T14844] ? clear_bhb_loop+0x40/0x90 [ 677.923463][T14844] ? clear_bhb_loop+0x40/0x90 [ 677.928198][T14844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.934145][T14844] RIP: 0033:0x7fd74019acb9 [ 677.938597][T14844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.958237][T14844] RSP: 002b:00007fd741092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 677.966698][T14844] RAX: ffffffffffffffda RBX: 00007fd740416090 RCX: 00007fd74019acb9 [ 677.974716][T14844] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000004 [ 677.982716][T14844] RBP: 00007fd741092090 R08: 0000000000000000 R09: 0000000000000000 [ 677.990767][T14844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.998784][T14844] R13: 00007fd740416128 R14: 00007fd740416090 R15: 00007ffde638eff8 [ 678.006805][T14844] [ 680.218439][T14852] netlink: 'syz.0.2834': attribute type 3 has an invalid length. [ 680.237962][T14852] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2834'. [ 680.314105][T14859] netlink: 'syz.3.2837': attribute type 10 has an invalid length. [ 680.335562][T14859] FAULT_INJECTION: forcing a failure. [ 680.335562][T14859] name failslab, interval 1, probability 0, space 0, times 0 [ 680.348630][T14859] CPU: 1 PID: 14859 Comm: syz.3.2837 Not tainted syzkaller #0 [ 680.356138][T14859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 680.366246][T14859] Call Trace: [ 680.369558][T14859] [ 680.372512][T14859] dump_stack_lvl+0x18c/0x250 [ 680.377234][T14859] ? show_regs_print_info+0x20/0x20 [ 680.382494][T14859] ? load_image+0x400/0x400 [ 680.387030][T14859] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 680.393042][T14859] ? verify_lock_unused+0x140/0x140 [ 680.398277][T14859] should_fail_ex+0x39d/0x4d0 [ 680.403002][T14859] should_failslab+0x9/0x20 [ 680.407537][T14859] slab_pre_alloc_hook+0x59/0x310 [ 680.412594][T14859] ? nsim_fib_event_nb+0x187/0x1080 [ 680.417935][T14859] __kmem_cache_alloc_node+0x53/0x250 [ 680.423346][T14859] ? nsim_fib_event_nb+0x187/0x1080 [ 680.428576][T14859] kmalloc_trace+0x2a/0xe0 [ 680.433044][T14859] nsim_fib_event_nb+0x187/0x1080 [ 680.438101][T14859] ? read_lock_is_recursive+0x20/0x20 [ 680.443505][T14859] notifier_call_chain+0x197/0x380 [ 680.448647][T14859] ? atomic_notifier_call_chain+0x26/0x180 [ 680.454487][T14859] atomic_notifier_call_chain+0xda/0x180 [ 680.460156][T14859] call_fib_notifiers+0x31/0x60 [ 680.465035][T14859] fib6_del+0xfa4/0x1580 [ 680.469319][T14859] ? fib6_del+0x661/0x1580 [ 680.473775][T14859] ? fib6_locate_1+0x6c0/0x6c0 [ 680.478572][T14859] ? verify_lock_unused+0x140/0x140 [ 680.483811][T14859] fib6_clean_node+0x297/0x540 [ 680.488634][T14859] ? node_free_rcu+0x30/0x30 [ 680.493282][T14859] ? __local_bh_enable_ip+0x13a/0x1c0 [ 680.498693][T14859] fib6_walk_continue+0x672/0x900 [ 680.503771][T14859] fib6_walk+0x149/0x290 [ 680.508052][T14859] __fib6_clean_all+0x283/0x3e0 [ 680.512944][T14859] ? __fib6_clean_all+0xb2/0x3e0 [ 680.517913][T14859] ? rt6_sync_down_dev+0x160/0x160 [ 680.523052][T14859] ? fib6_clean_all+0x30/0x30 [ 680.527773][T14859] ? node_free_rcu+0x30/0x30 [ 680.532416][T14859] ? rt6_sync_down_dev+0x160/0x160 [ 680.537574][T14859] rt6_disable_ip+0x12d/0x7b0 [ 680.542294][T14859] ? fib6_ifdown+0x4b0/0x4b0 [ 680.546908][T14859] ? __lock_acquire+0x7d40/0x7d40 [ 680.551960][T14859] ? rcu_is_watching+0x15/0xb0 [ 680.556763][T14859] addrconf_ifdown+0x16c/0x18c0 [ 680.561656][T14859] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 680.567353][T14859] ? tls_dev_event+0x74d/0xf40 [ 680.572152][T14859] ? addrconf_cleanup+0x1e0/0x1e0 [ 680.577221][T14859] addrconf_notify+0x6c6/0x1010 [ 680.582111][T14859] notifier_call_chain+0x197/0x380 [ 680.587254][T14859] __dev_notify_flags+0x16e/0x310 [ 680.592343][T14859] ? __dev_change_flags+0x6a0/0x6a0 [ 680.597571][T14859] ? __dev_change_flags+0x4d4/0x6a0 [ 680.602798][T14859] ? vprintk_emit+0x53d/0x610 [ 680.607498][T14859] ? dev_get_flags+0x1c0/0x1c0 [ 680.612336][T14859] ? printk_sprint+0x460/0x460 [ 680.617128][T14859] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 680.623048][T14859] ? _raw_spin_unlock+0x40/0x40 [ 680.627924][T14859] dev_change_flags+0xe8/0x1a0 [ 680.632730][T14859] do_setlink+0xc58/0x4130 [ 680.637179][T14859] ? arch_stack_walk+0x160/0x190 [ 680.642166][T14859] ? load_image+0x400/0x400 [ 680.646709][T14859] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 680.652886][T14859] ? stack_trace_save+0xaa/0x100 [ 680.657855][T14859] ? __nla_validate_parse+0x2522/0x2ea0 [ 680.663450][T14859] ? __nla_validate+0x50/0x50 [ 680.668208][T14859] ? validate_linkmsg+0x719/0x910 [ 680.673296][T14859] rtnl_newlink+0x17da/0x20a0 [ 680.678055][T14859] ? rtnl_newlink+0x431/0x20a0 [ 680.682885][T14859] ? rtnl_setlink+0x4e0/0x4e0 [ 680.687618][T14859] ? trace_raw_output_contention_end+0xd0/0xd0 [ 680.693811][T14859] ? rcu_is_watching+0x15/0xb0 [ 680.698611][T14859] ? trace_contention_end+0x39/0xe0 [ 680.703834][T14859] ? __mutex_lock+0x315/0xcc0 [ 680.708566][T14859] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 680.713700][T14859] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 680.718831][T14859] ? rtnl_setlink+0x4e0/0x4e0 [ 680.723539][T14859] rtnetlink_rcv_msg+0x869/0xfa0 [ 680.728504][T14859] ? lockdep_hardirqs_on+0x98/0x150 [ 680.733729][T14859] ? rtnetlink_bind+0x80/0x80 [ 680.738441][T14859] ? perf_trace_preemptirq_template+0xac/0x330 [ 680.744634][T14859] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 680.750640][T14859] ? lock_chain_count+0x20/0x20 [ 680.755531][T14859] ? __local_bh_enable_ip+0x13a/0x1c0 [ 680.760937][T14859] ? lockdep_hardirqs_on+0x98/0x150 [ 680.766167][T14859] ? __local_bh_enable_ip+0x13a/0x1c0 [ 680.771570][T14859] ? _local_bh_enable+0xa0/0xa0 [ 680.776448][T14859] ? __dev_queue_xmit+0x26b/0x36b0 [ 680.781587][T14859] ? __dev_queue_xmit+0x26b/0x36b0 [ 680.786723][T14859] ? __dev_queue_xmit+0x124f/0x36b0 [ 680.791955][T14859] ? __dev_queue_xmit+0x26b/0x36b0 [ 680.797121][T14859] ? ref_tracker_free+0x690/0x840 [ 680.802174][T14859] netlink_rcv_skb+0x241/0x4d0 [ 680.806974][T14859] ? rtnetlink_bind+0x80/0x80 [ 680.811670][T14859] ? netlink_ack+0x1180/0x1180 [ 680.816473][T14859] ? __lock_acquire+0x7d40/0x7d40 [ 680.821528][T14859] ? netlink_deliver_tap+0x2e/0x1b0 [ 680.826766][T14859] netlink_unicast+0x751/0x8d0 [ 680.831585][T14859] netlink_sendmsg+0x8d0/0xbf0 [ 680.836381][T14859] ? netlink_getsockopt+0x590/0x590 [ 680.841614][T14859] ? aa_sock_msg_perm+0x94/0x150 [ 680.846591][T14859] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 680.851916][T14859] ? security_socket_sendmsg+0x80/0xa0 [ 680.857412][T14859] ? netlink_getsockopt+0x590/0x590 [ 680.862679][T14859] ____sys_sendmsg+0x5ba/0x960 [ 680.867662][T14859] ? __asan_memset+0x22/0x40 [ 680.872282][T14859] ? __sys_sendmsg_sock+0x30/0x30 [ 680.877365][T14859] ? __import_iovec+0x5f2/0x850 [ 680.882269][T14859] ? import_iovec+0x73/0xa0 [ 680.886832][T14859] ___sys_sendmsg+0x2a6/0x360 [ 680.891558][T14859] ? get_pid_task+0x20/0x1e0 [ 680.896185][T14859] ? __sys_sendmsg+0x2a0/0x2a0 [ 680.901012][T14859] ? __lock_acquire+0x7d40/0x7d40 [ 680.906097][T14859] __se_sys_sendmsg+0x1c2/0x2b0 [ 680.910989][T14859] ? __x64_sys_sendmsg+0x80/0x80 [ 680.915978][T14859] ? lockdep_hardirqs_on+0x98/0x150 [ 680.921203][T14859] do_syscall_64+0x55/0xa0 [ 680.925650][T14859] ? clear_bhb_loop+0x40/0x90 [ 680.930357][T14859] ? clear_bhb_loop+0x40/0x90 [ 680.935061][T14859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.940990][T14859] RIP: 0033:0x7f22dfd9acb9 [ 680.945445][T14859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.965093][T14859] RSP: 002b:00007f22e0bc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.973563][T14859] RAX: ffffffffffffffda RBX: 00007f22e0015fa0 RCX: 00007f22dfd9acb9 [ 680.981566][T14859] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 680.989564][T14859] RBP: 00007f22e0bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 680.997565][T14859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 681.005561][T14859] R13: 00007f22e0016038 R14: 00007f22e0015fa0 R15: 00007fff0dcb3858 [ 681.013589][T14859] [ 681.079678][T14859] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 682.371799][T14874] Ÿë: port 1(veth0_to_team) entered blocking state [ 682.439839][T14874] Ÿë: port 1(veth0_to_team) entered disabled state [ 682.494376][T14874] veth0_to_team: entered allmulticast mode [ 682.551304][T14874] veth0_to_team: entered promiscuous mode [ 682.614302][T14879] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2843'. [ 683.032965][T14891] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2847'. [ 683.066508][T14891] openvswitch: netlink: Duplicate key (type 0). [ 684.797598][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 685.845446][T14912] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2855'. [ 685.882731][T14912] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.2855'. [ 685.901109][T14912] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2855'. [ 686.172826][T14919] Ÿë: port 1(gretap0) entered blocking state [ 686.210430][T14919] Ÿë: port 1(gretap0) entered disabled state [ 686.221419][T14919] gretap0: entered allmulticast mode [ 686.233414][T14919] gretap0: entered promiscuous mode [ 686.284422][T14918] Ÿë: port 2(veth0_to_team) entered blocking state [ 686.295524][T14918] Ÿë: port 2(veth0_to_team) entered disabled state [ 686.305354][T14918] veth0_to_team: entered allmulticast mode [ 686.332772][T14918] veth0_to_team: entered promiscuous mode [ 686.619129][T14928] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2860'. [ 686.749315][T14928] netlink: 'syz.0.2860': attribute type 13 has an invalid length. [ 686.763838][T14928] macvtap0: refused to change device tx_queue_len [ 686.981608][T14937] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2871'. [ 687.090876][T14937] netlink: 'syz.0.2871': attribute type 13 has an invalid length. [ 687.362925][T14937] macvtap0: refused to change device tx_queue_len [ 687.515558][T14942] FAULT_INJECTION: forcing a failure. [ 687.515558][T14942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.547259][T14942] CPU: 1 PID: 14942 Comm: syz.1.2864 Not tainted syzkaller #0 [ 687.554821][T14942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 687.564918][T14942] Call Trace: [ 687.568238][T14942] [ 687.571208][T14942] dump_stack_lvl+0x18c/0x250 [ 687.575950][T14942] ? show_regs_print_info+0x20/0x20 [ 687.581196][T14942] ? load_image+0x400/0x400 [ 687.585744][T14942] ? __might_fault+0xaa/0x120 [ 687.590475][T14942] ? __lock_acquire+0x7d40/0x7d40 [ 687.595554][T14942] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 687.601851][T14942] should_fail_ex+0x39d/0x4d0 [ 687.606586][T14942] _copy_from_user+0x2f/0xe0 [ 687.611241][T14942] __sys_bpf+0x23e/0x890 [ 687.615532][T14942] ? bpf_link_show_fdinfo+0x390/0x390 [ 687.620962][T14942] ? lock_chain_count+0x20/0x20 [ 687.625860][T14942] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 687.631891][T14942] __x64_sys_bpf+0x7c/0x90 [ 687.636390][T14942] do_syscall_64+0x55/0xa0 [ 687.640855][T14942] ? clear_bhb_loop+0x40/0x90 [ 687.645572][T14942] ? clear_bhb_loop+0x40/0x90 [ 687.650299][T14942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 687.656247][T14942] RIP: 0033:0x7fc5ea99acb9 [ 687.660720][T14942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.680378][T14942] RSP: 002b:00007fc5eb92a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 687.688855][T14942] RAX: ffffffffffffffda RBX: 00007fc5eac15fa0 RCX: 00007fc5ea99acb9 [ 687.696877][T14942] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000004 [ 687.704894][T14942] RBP: 00007fc5eb92a090 R08: 0000000000000000 R09: 0000000000000000 [ 687.712915][T14942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.720947][T14942] R13: 00007fc5eac16038 R14: 00007fc5eac15fa0 R15: 00007ffea5c8d028 [ 687.729020][T14942] [ 687.846926][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.853711][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.061267][T14952] Ÿë: port 1(gretap0) entered blocking state [ 688.069146][T14954] netlink: 'syz.1.2869': attribute type 2 has an invalid length. [ 688.078359][T14952] Ÿë: port 1(gretap0) entered disabled state [ 688.084682][T14954] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2869'. [ 688.113532][T14952] gretap0: entered allmulticast mode [ 688.133193][T14952] gretap0: entered promiscuous mode [ 688.163390][T14951] Ÿë: port 2(veth0_to_team) entered blocking state [ 688.171164][T14951] Ÿë: port 2(veth0_to_team) entered disabled state [ 688.185432][T14951] veth0_to_team: entered allmulticast mode [ 688.224703][T14951] veth0_to_team: entered promiscuous mode [ 688.642193][T14966] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2875'. [ 688.716184][T14968] netlink: 'syz.3.2876': attribute type 10 has an invalid length. [ 688.734903][T14966] netlink: 'syz.1.2875': attribute type 13 has an invalid length. [ 688.751831][T14966] macvtap0: refused to change device tx_queue_len [ 689.361334][T14980] netlink: 'syz.3.2879': attribute type 10 has an invalid length. [ 689.393249][T14980] team0: Port device macvlan0 added [ 690.095531][T15006] netlink: 'syz.2.2888': attribute type 2 has an invalid length. [ 690.137381][T15006] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2888'. [ 691.089206][T15020] netlink: 'syz.0.2895': attribute type 12 has an invalid length. [ 691.126947][T15020] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2895'. [ 691.187119][T15022] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2896'. [ 691.323754][T15022] netlink: 'syz.1.2896': attribute type 13 has an invalid length. [ 691.340914][T15022] macvtap0: refused to change device tx_queue_len [ 691.507130][T15028] Dead loop on virtual device ip6_vti0, fix it urgently! [ 691.515257][T15030] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2900'. [ 692.601992][T15044] netlink: 822 bytes leftover after parsing attributes in process `syz.1.2906'. [ 692.623510][T15044] veth0_to_bond: invalid flags given to default FDB implementation [ 692.753902][T15049] netlink: 'syz.2.2908': attribute type 27 has an invalid length. [ 692.787001][T15049] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2908'. [ 692.847305][T15049] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 693.019083][T15046] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2907'. [ 694.492314][T15059] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2911'. [ 696.259029][T15084] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2919'. [ 696.401450][T15087] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2921'. [ 697.391351][T15100] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2925'. [ 697.475266][T15100] netlink: 'syz.1.2925': attribute type 13 has an invalid length. [ 697.499507][T15100] macvtap0: refused to change device tx_queue_len [ 698.049464][T15111] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2931'. [ 698.609478][T15126] FAULT_INJECTION: forcing a failure. [ 698.609478][T15126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.641506][T15126] CPU: 0 PID: 15126 Comm: syz.1.2936 Not tainted syzkaller #0 [ 698.649148][T15126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 698.659251][T15126] Call Trace: [ 698.662569][T15126] [ 698.665531][T15126] dump_stack_lvl+0x18c/0x250 [ 698.670271][T15126] ? show_regs_print_info+0x20/0x20 [ 698.675515][T15126] ? load_image+0x400/0x400 [ 698.680061][T15126] ? __might_fault+0xaa/0x120 [ 698.684778][T15126] ? __lock_acquire+0x7d40/0x7d40 [ 698.689855][T15126] should_fail_ex+0x39d/0x4d0 [ 698.694592][T15126] _copy_from_user+0x2f/0xe0 [ 698.699237][T15126] generic_map_update_batch+0x54b/0x810 [ 698.704840][T15126] ? rcu_read_unlock+0xa0/0xa0 [ 698.709654][T15126] ? __fdget+0x180/0x210 [ 698.713950][T15126] ? rcu_read_unlock+0xa0/0xa0 [ 698.718753][T15126] bpf_map_do_batch+0x3d7/0x610 [ 698.723651][T15126] __sys_bpf+0x381/0x890 [ 698.727950][T15126] ? bpf_link_show_fdinfo+0x390/0x390 [ 698.733384][T15126] ? lock_chain_count+0x20/0x20 [ 698.738277][T15126] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 698.744318][T15126] __x64_sys_bpf+0x7c/0x90 [ 698.748791][T15126] do_syscall_64+0x55/0xa0 [ 698.753259][T15126] ? clear_bhb_loop+0x40/0x90 [ 698.757986][T15126] ? clear_bhb_loop+0x40/0x90 [ 698.762721][T15126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.768666][T15126] RIP: 0033:0x7fc5ea99acb9 [ 698.773136][T15126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.792804][T15126] RSP: 002b:00007fc5eb92a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 698.801281][T15126] RAX: ffffffffffffffda RBX: 00007fc5eac15fa0 RCX: 00007fc5ea99acb9 [ 698.809307][T15126] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 698.817325][T15126] RBP: 00007fc5eb92a090 R08: 0000000000000000 R09: 0000000000000000 [ 698.825351][T15126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 698.833366][T15126] R13: 00007fc5eac16038 R14: 00007fc5eac15fa0 R15: 00007ffea5c8d028 [ 698.841399][T15126] [ 698.892697][T15129] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2937'. [ 699.004842][T15129] netlink: 'syz.0.2937': attribute type 13 has an invalid length. [ 699.026007][T15129] macvtap0: refused to change device tx_queue_len [ 699.165568][T15136] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2941'. [ 699.636359][T15153] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2949'. [ 699.725443][T15153] netlink: 'syz.1.2949': attribute type 13 has an invalid length. [ 699.763997][T15153] macvtap0: refused to change device tx_queue_len [ 699.921933][T15160] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2952'. [ 700.199583][T15169] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2955'. [ 700.728446][T15179] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2960'. [ 700.748891][T15183] netlink: 'syz.1.2960': attribute type 13 has an invalid length. [ 700.788262][T15183] macvtap0: refused to change device tx_queue_len [ 701.590854][T15206] netlink: 'syz.2.2970': attribute type 10 has an invalid length. [ 701.622817][T15206] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 701.693901][T15209] -: renamed from syzkaller0 [ 701.774199][T15212] __nla_validate_parse: 1 callbacks suppressed [ 701.774241][T15212] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2973'. [ 701.843123][T15212] netlink: 'syz.2.2973': attribute type 13 has an invalid length. [ 701.877106][T15212] macvtap0: refused to change device tx_queue_len [ 701.948875][T15217] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2975'. [ 702.248557][T15230] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2977'. [ 702.810686][T15237] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2982'. [ 702.856447][T15238] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2981'. [ 703.119409][T15247] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2984'. [ 703.461623][T15249] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2985'. [ 703.591577][T15249] netlink: 'syz.0.2985': attribute type 13 has an invalid length. [ 705.362984][T15249] macvtap0: refused to change device tx_queue_len [ 705.565118][T15256] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2987'. [ 705.649943][T15260] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2988'. [ 705.720780][T15260] netlink: 'syz.0.2988': attribute type 13 has an invalid length. [ 705.753331][T15260] macvtap0: refused to change device tx_queue_len [ 705.806845][T15265] FAULT_INJECTION: forcing a failure. [ 705.806845][T15265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.835057][T15265] CPU: 0 PID: 15265 Comm: syz.2.2990 Not tainted syzkaller #0 [ 705.842704][T15265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.852811][T15265] Call Trace: [ 705.856143][T15265] [ 705.859123][T15265] dump_stack_lvl+0x18c/0x250 [ 705.863877][T15265] ? show_regs_print_info+0x20/0x20 [ 705.869145][T15265] ? load_image+0x400/0x400 [ 705.873712][T15265] ? __might_fault+0xaa/0x120 [ 705.878442][T15265] ? __lock_acquire+0x7d40/0x7d40 [ 705.883528][T15265] should_fail_ex+0x39d/0x4d0 [ 705.888279][T15265] _copy_from_iter+0x1d9/0x12e0 [ 705.893186][T15265] ? slab_post_alloc_hook+0x8a/0x4b0 [ 705.898530][T15265] ? __virt_addr_valid+0x18c/0x540 [ 705.903705][T15265] ? __lock_acquire+0x7d40/0x7d40 [ 705.908781][T15265] ? rcu_is_watching+0x15/0xb0 [ 705.913612][T15265] ? copyout_mc+0x70/0x70 [ 705.918009][T15265] ? __virt_addr_valid+0x18c/0x540 [ 705.923188][T15265] ? __virt_addr_valid+0x18c/0x540 [ 705.928352][T15265] ? __virt_addr_valid+0x469/0x540 [ 705.933529][T15265] ? __check_object_size+0x506/0xa20 [ 705.938894][T15265] netlink_sendmsg+0x76b/0xbf0 [ 705.943725][T15265] ? perf_trace_lock+0x304/0x3b0 [ 705.948750][T15265] ? netlink_getsockopt+0x590/0x590 [ 705.954024][T15265] ? aa_sock_msg_perm+0x94/0x150 [ 705.959056][T15265] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 705.964403][T15265] ? security_socket_sendmsg+0x80/0xa0 [ 705.969916][T15265] ? netlink_getsockopt+0x590/0x590 [ 705.975184][T15265] ____sys_sendmsg+0x5ba/0x960 [ 705.980043][T15265] ? __asan_memset+0x22/0x40 [ 705.984698][T15265] ? __sys_sendmsg_sock+0x30/0x30 [ 705.989793][T15265] ? __import_iovec+0x5f2/0x850 [ 705.994730][T15265] ? import_iovec+0x73/0xa0 [ 705.999306][T15265] ___sys_sendmsg+0x2a6/0x360 [ 706.004099][T15265] ? __sys_sendmsg+0x2a0/0x2a0 [ 706.008972][T15265] ? __lock_acquire+0x7d40/0x7d40 [ 706.014112][T15265] __se_sys_sendmsg+0x1c2/0x2b0 [ 706.019045][T15265] ? __x64_sys_sendmsg+0x80/0x80 [ 706.024092][T15265] ? lockdep_hardirqs_on+0x98/0x150 [ 706.029363][T15265] do_syscall_64+0x55/0xa0 [ 706.033842][T15265] ? clear_bhb_loop+0x40/0x90 [ 706.038575][T15265] ? clear_bhb_loop+0x40/0x90 [ 706.043308][T15265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.049253][T15265] RIP: 0033:0x7f12b379acb9 [ 706.053755][T15265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.073421][T15265] RSP: 002b:00007f12b45e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.081906][T15265] RAX: ffffffffffffffda RBX: 00007f12b3a15fa0 RCX: 00007f12b379acb9 [ 706.089943][T15265] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 706.097972][T15265] RBP: 00007f12b45e6090 R08: 0000000000000000 R09: 0000000000000000 [ 706.105991][T15265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.114030][T15265] R13: 00007f12b3a16038 R14: 00007f12b3a15fa0 R15: 00007ffff8dab4b8 [ 706.122084][T15265] [ 706.545112][T15279] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2997'. [ 706.718860][T15280] netlink: 'syz.2.2996': attribute type 13 has an invalid length. [ 707.013780][T15280] macvtap0: refused to change device tx_queue_len [ 710.398816][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 710.548426][T15313] __nla_validate_parse: 2 callbacks suppressed [ 710.548447][T15313] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3009'. [ 710.623646][T15315] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3010'. [ 711.020584][T15323] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3012'. [ 711.210462][T15327] netlink: 'syz.0.3014': attribute type 19 has an invalid length. [ 711.232441][T15327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3014'. [ 711.530432][T15336] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3019'. [ 711.767557][T15340] netlink: 'syz.3.3020': attribute type 10 has an invalid length. [ 714.034578][T15344] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.3021'. [ 714.316780][T15361] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3028'. [ 714.530878][T15369] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3031'. [ 714.548914][T15363] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3029'. [ 714.847517][T15377] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3034'. [ 715.894527][T15396] Ÿë: port 1(gretap0) entered blocking state [ 715.922026][T15396] Ÿë: port 1(gretap0) entered disabled state [ 715.942352][T15396] gretap0: entered allmulticast mode [ 715.974476][T15396] gretap0: entered promiscuous mode [ 716.027343][T15399] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3041'. [ 716.148430][T15401] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3042'. [ 716.301213][T15407] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3044'. [ 716.501720][T15408] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3045'. [ 717.236310][T15431] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3053'. [ 717.409882][T15433] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3055'. [ 717.461907][T15435] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3056'. [ 718.172715][T15455] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3064'. [ 718.363394][T15458] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3065'. [ 718.618450][T15465] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3067'. [ 719.471655][T15488] FAULT_INJECTION: forcing a failure. [ 719.471655][T15488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.517189][T15488] CPU: 1 PID: 15488 Comm: syz.1.3074 Not tainted syzkaller #0 [ 719.524793][T15488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 719.534943][T15488] Call Trace: [ 719.538307][T15488] [ 719.541317][T15488] dump_stack_lvl+0x18c/0x250 [ 719.546190][T15488] ? show_regs_print_info+0x20/0x20 [ 719.551483][T15488] ? load_image+0x400/0x400 [ 719.556075][T15488] ? __might_fault+0xaa/0x120 [ 719.560848][T15488] ? __lock_acquire+0x7d40/0x7d40 [ 719.565976][T15488] should_fail_ex+0x39d/0x4d0 [ 719.570760][T15488] _copy_from_user+0x2f/0xe0 [ 719.575452][T15488] sock_do_ioctl+0x190/0x310 [ 719.580166][T15488] ? sock_show_fdinfo+0xb0/0xb0 [ 719.585171][T15488] sock_ioctl+0x5ba/0x7e0 [ 719.589581][T15488] ? sock_poll+0x3e0/0x3e0 [ 719.594093][T15488] ? bpf_lsm_file_ioctl+0x9/0x10 [ 719.599090][T15488] ? security_file_ioctl+0x80/0xa0 [ 719.604264][T15488] ? sock_poll+0x3e0/0x3e0 [ 719.608735][T15488] __se_sys_ioctl+0xfd/0x170 [ 719.613382][T15488] do_syscall_64+0x55/0xa0 [ 719.617854][T15488] ? clear_bhb_loop+0x40/0x90 [ 719.622578][T15488] ? clear_bhb_loop+0x40/0x90 [ 719.627307][T15488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.633242][T15488] RIP: 0033:0x7fc5ea99acb9 [ 719.637709][T15488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.657382][T15488] RSP: 002b:00007fc5eb92a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.665856][T15488] RAX: ffffffffffffffda RBX: 00007fc5eac15fa0 RCX: 00007fc5ea99acb9 [ 719.673874][T15488] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000007 [ 719.681896][T15488] RBP: 00007fc5eb92a090 R08: 0000000000000000 R09: 0000000000000000 [ 719.689925][T15488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.697939][T15488] R13: 00007fc5eac16038 R14: 00007fc5eac15fa0 R15: 00007ffea5c8d028 [ 719.705999][T15488] [ 719.808526][T15492] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 720.582513][T15507] netlink: 'syz.1.3083': attribute type 3 has an invalid length. [ 720.601375][T15507] C: renamed from team_slave_0 (while UP) [ 720.625675][T15507] netlink: 'syz.1.3083': attribute type 8 has an invalid length. [ 720.634249][T15507] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 721.131118][T15518] __nla_validate_parse: 9 callbacks suppressed [ 721.131138][T15518] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3087'. [ 721.586440][T15525] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3091'. [ 721.914390][T15528] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3092'. [ 722.071382][T15537] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3096'. [ 722.332091][T15547] Dead loop on virtual device ip6_vti0, fix it urgently! [ 722.482128][T15550] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3102'. [ 722.867410][T15559] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.3105'. [ 723.132625][T15563] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3107'. [ 723.331398][T15567] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3109'. [ 723.375210][T15567] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 723.656026][T15573] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3111'. [ 723.923995][T15587] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3117'. [ 725.046314][T15626] FAULT_INJECTION: forcing a failure. [ 725.046314][T15626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.098981][T15626] CPU: 1 PID: 15626 Comm: syz.3.3134 Not tainted syzkaller #0 [ 725.106661][T15626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 725.116766][T15626] Call Trace: [ 725.120095][T15626] [ 725.123079][T15626] dump_stack_lvl+0x18c/0x250 [ 725.127828][T15626] ? show_regs_print_info+0x20/0x20 [ 725.133094][T15626] ? load_image+0x400/0x400 [ 725.137670][T15626] ? __lock_acquire+0x7d40/0x7d40 [ 725.142756][T15626] should_fail_ex+0x39d/0x4d0 [ 725.147504][T15626] _copy_from_user+0x2f/0xe0 [ 725.152161][T15626] __copy_msghdr+0x3bb/0x580 [ 725.156833][T15626] ___sys_sendmsg+0x214/0x360 [ 725.157234][T15630] netlink: 'syz.1.3135': attribute type 39 has an invalid length. [ 725.161552][T15626] ? get_pid_task+0x20/0x1e0 [ 725.161588][T15626] ? __sys_sendmsg+0x2a0/0x2a0 [ 725.178894][T15626] ? __lock_acquire+0x7d40/0x7d40 [ 725.184000][T15626] __se_sys_sendmsg+0x1c2/0x2b0 [ 725.188912][T15626] ? __x64_sys_sendmsg+0x80/0x80 [ 725.193904][T15626] ? lockdep_hardirqs_on+0x98/0x150 [ 725.199138][T15626] do_syscall_64+0x55/0xa0 [ 725.203592][T15626] ? clear_bhb_loop+0x40/0x90 [ 725.208299][T15626] ? clear_bhb_loop+0x40/0x90 [ 725.213008][T15626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.218929][T15626] RIP: 0033:0x7f22dfd9acb9 [ 725.223483][T15626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.243122][T15626] RSP: 002b:00007f22e0bc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.251571][T15626] RAX: ffffffffffffffda RBX: 00007f22e0015fa0 RCX: 00007f22dfd9acb9 [ 725.259571][T15626] RDX: 0000000000000004 RSI: 0000200000001000 RDI: 0000000000000003 [ 725.267570][T15626] RBP: 00007f22e0bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 725.275574][T15626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.283574][T15626] R13: 00007f22e0016038 R14: 00007f22e0015fa0 R15: 00007fff0dcb3858 [ 725.291588][T15626] [ 726.108382][T15653] FAULT_INJECTION: forcing a failure. [ 726.108382][T15653] name failslab, interval 1, probability 0, space 0, times 0 [ 726.121644][T15653] CPU: 1 PID: 15653 Comm: syz.2.3144 Not tainted syzkaller #0 [ 726.129185][T15653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 726.139299][T15653] Call Trace: [ 726.142628][T15653] [ 726.145596][T15653] dump_stack_lvl+0x18c/0x250 [ 726.150341][T15653] ? show_regs_print_info+0x20/0x20 [ 726.155605][T15653] ? load_image+0x400/0x400 [ 726.160172][T15653] ? verify_lock_unused+0x140/0x140 [ 726.165432][T15653] should_fail_ex+0x39d/0x4d0 [ 726.170183][T15653] should_failslab+0x9/0x20 [ 726.174748][T15653] slab_pre_alloc_hook+0x59/0x310 [ 726.179831][T15653] kmem_cache_alloc+0x5a/0x2d0 [ 726.184721][T15653] ? skb_clone+0x1eb/0x370 [ 726.189180][T15653] skb_clone+0x1eb/0x370 [ 726.193458][T15653] __netlink_deliver_tap+0x41c/0x830 [ 726.198790][T15653] ? netlink_deliver_tap+0x2e/0x1b0 [ 726.204044][T15653] netlink_deliver_tap+0x19c/0x1b0 [ 726.209195][T15653] netlink_unicast+0x72c/0x8d0 [ 726.214012][T15653] netlink_sendmsg+0x8d0/0xbf0 [ 726.218822][T15653] ? netlink_getsockopt+0x590/0x590 [ 726.224066][T15653] ? aa_sock_msg_perm+0x94/0x150 [ 726.229046][T15653] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 726.234362][T15653] ? security_socket_sendmsg+0x80/0xa0 [ 726.239856][T15653] ? netlink_getsockopt+0x590/0x590 [ 726.245098][T15653] ____sys_sendmsg+0x5ba/0x960 [ 726.249908][T15653] ? __asan_memset+0x22/0x40 [ 726.254533][T15653] ? __sys_sendmsg_sock+0x30/0x30 [ 726.259692][T15653] ? __import_iovec+0x5f2/0x850 [ 726.264603][T15653] ? import_iovec+0x73/0xa0 [ 726.269168][T15653] ___sys_sendmsg+0x2a6/0x360 [ 726.273887][T15653] ? get_pid_task+0x20/0x1e0 [ 726.278516][T15653] ? __sys_sendmsg+0x2a0/0x2a0 [ 726.283429][T15653] ? __lock_acquire+0x7d40/0x7d40 [ 726.288527][T15653] __se_sys_sendmsg+0x1c2/0x2b0 [ 726.293438][T15653] ? __x64_sys_sendmsg+0x80/0x80 [ 726.298433][T15653] ? lockdep_hardirqs_on+0x98/0x150 [ 726.303670][T15653] do_syscall_64+0x55/0xa0 [ 726.308130][T15653] ? clear_bhb_loop+0x40/0x90 [ 726.312839][T15653] ? clear_bhb_loop+0x40/0x90 [ 726.317546][T15653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 726.323477][T15653] RIP: 0033:0x7f12b379acb9 [ 726.327920][T15653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.347558][T15653] RSP: 002b:00007f12b45e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.355999][T15653] RAX: ffffffffffffffda RBX: 00007f12b3a15fa0 RCX: 00007f12b379acb9 [ 726.364006][T15653] RDX: 0000000020000800 RSI: 0000200000000600 RDI: 0000000000000004 [ 726.372004][T15653] RBP: 00007f12b45e6090 R08: 0000000000000000 R09: 0000000000000000 [ 726.380001][T15653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.388004][T15653] R13: 00007f12b3a16038 R14: 00007f12b3a15fa0 R15: 00007ffff8dab4b8 [ 726.396018][T15653] [ 726.441615][T15653] netlink: 'syz.2.3144': attribute type 10 has an invalid length. [ 726.453881][T15653] macvlan0: entered allmulticast mode [ 726.473001][T15653] veth1_vlan: entered allmulticast mode [ 726.538012][T15653] macvlan0: entered promiscuous mode [ 726.544212][T15653] team0: Port device macvlan0 added [ 726.808485][T15672] __nla_validate_parse: 8 callbacks suppressed [ 726.808524][T15672] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3150'. [ 726.959521][T15675] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3152'. [ 727.128519][T15680] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3154'. [ 727.447896][T15690] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3160'. [ 728.201846][T15705] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3162'. [ 728.403223][T15707] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3163'. [ 728.461372][T15710] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3164'. [ 729.124940][T15730] netlink: 'syz.0.3171': attribute type 25 has an invalid length. [ 729.161282][T15730] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.3171'. [ 729.272621][T15735] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3174'. [ 729.479256][T15740] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3175'. [ 729.752008][T15747] netlink: 'syz.0.3178': attribute type 1 has an invalid length. [ 730.145649][T15761] netlink: 'syz.1.3182': attribute type 10 has an invalid length. [ 730.195569][T15761] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 730.236317][T15761] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 730.244902][T15761] team0: Port device netdevsim0 added [ 730.408257][T15764] netlink: 'syz.1.3182': attribute type 10 has an invalid length. [ 730.432104][T15764] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 730.454156][T15764] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 730.482811][T15764] team0: Port device netdevsim0 removed [ 730.497113][T15764] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 731.002333][T15782] netlink: 'syz.2.3190': attribute type 1 has an invalid length. [ 731.762111][T15799] netlink: 'syz.3.3193': attribute type 11 has an invalid length. [ 732.126780][T15796] netlink: 'syz.1.3192': attribute type 10 has an invalid length. [ 732.145379][T15796] __nla_validate_parse: 6 callbacks suppressed [ 732.145402][T15796] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3192'. [ 732.195030][T15803] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3195'. [ 732.209779][T15801] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3194'. [ 732.360528][T15807] netlink: 'syz.0.3197': attribute type 10 has an invalid length. [ 732.409380][T15807] bond0: (slave netdevsim0): Releasing backup interface [ 732.453007][T15807] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 732.473886][T15807] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 732.483392][T15807] team0: Port device netdevsim0 added [ 732.492463][T15810] netlink: 'syz.0.3197': attribute type 10 has an invalid length. [ 732.512132][T15810] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 732.539593][T15810] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 732.568396][T15810] team0: Port device netdevsim0 removed [ 732.584334][T15810] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 733.321278][T15831] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3206'. [ 734.607925][T15847] netlink: 131332 bytes leftover after parsing attributes in process `syz.2.3210'. [ 734.620945][T15847] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.3210'. [ 735.152200][T15857] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3214'. [ 735.169346][T15862] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3215'. [ 736.622888][T15881] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3224'. [ 738.049550][T15908] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3235'. [ 739.540377][T15931] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3245'. [ 740.785988][T15966] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3256'. [ 740.810616][T15960] FAULT_INJECTION: forcing a failure. [ 740.810616][T15960] name failslab, interval 1, probability 0, space 0, times 0 [ 740.856587][T15960] CPU: 0 PID: 15960 Comm: syz.3.3254 Not tainted syzkaller #0 [ 740.864154][T15960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 740.874265][T15960] Call Trace: [ 740.877602][T15960] [ 740.880582][T15960] dump_stack_lvl+0x18c/0x250 [ 740.885342][T15960] ? show_regs_print_info+0x20/0x20 [ 740.890611][T15960] ? load_image+0x400/0x400 [ 740.895193][T15960] ? __might_sleep+0xe0/0xe0 [ 740.899853][T15960] ? __lock_acquire+0x7d40/0x7d40 [ 740.904944][T15960] ? prepend_path+0x4b/0x960 [ 740.909588][T15960] should_fail_ex+0x39d/0x4d0 [ 740.914333][T15960] should_failslab+0x9/0x20 [ 740.918921][T15960] slab_pre_alloc_hook+0x59/0x310 [ 740.924012][T15960] ? __asan_memcpy+0x40/0x70 [ 740.928682][T15960] ? tomoyo_encode+0x28b/0x540 [ 740.933481][T15960] ? tomoyo_encode+0x28b/0x540 [ 740.938288][T15960] __kmem_cache_alloc_node+0x53/0x250 [ 740.943717][T15960] ? prepend_path+0x4b/0x960 [ 740.948366][T15960] ? tomoyo_encode+0x28b/0x540 [ 740.953174][T15960] __kmalloc+0xa4/0x230 [ 740.957393][T15960] tomoyo_encode+0x28b/0x540 [ 740.962042][T15960] tomoyo_realpath_from_path+0x592/0x5d0 [ 740.967757][T15960] tomoyo_path_number_perm+0x248/0x620 [ 740.973266][T15960] ? tomoyo_path_number_perm+0x217/0x620 [ 740.978954][T15960] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 740.984465][T15960] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 740.990275][T15960] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 740.996486][T15960] security_file_ioctl+0x70/0xa0 [ 741.001480][T15960] __se_sys_ioctl+0x48/0x170 [ 741.006127][T15960] do_syscall_64+0x55/0xa0 [ 741.010587][T15960] ? clear_bhb_loop+0x40/0x90 [ 741.015305][T15960] ? clear_bhb_loop+0x40/0x90 [ 741.020047][T15960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.025989][T15960] RIP: 0033:0x7f22dfd9acb9 [ 741.030447][T15960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.050091][T15960] RSP: 002b:00007f22e0bc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.058544][T15960] RAX: ffffffffffffffda RBX: 00007f22e0015fa0 RCX: 00007f22dfd9acb9 [ 741.066546][T15960] RDX: 00002000000000c0 RSI: 00000000400454d9 RDI: 000000000000000c [ 741.074549][T15960] RBP: 00007f22e0bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 741.082546][T15960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.090549][T15960] R13: 00007f22e0016038 R14: 00007f22e0015fa0 R15: 00007fff0dcb3858 [ 741.098582][T15960] [ 741.119166][T15960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 741.221597][T15973] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3258'. [ 741.436291][T15980] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3261'. [ 741.938751][T15990] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3263'. [ 742.034391][T15992] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3266'. [ 742.066407][T15990] netlink: 'syz.1.3263': attribute type 10 has an invalid length. [ 742.074770][T15990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3263'. [ 742.084938][T15990] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 742.322328][T15996] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3267'. [ 742.553473][T16005] netlink: 'syz.0.3271': attribute type 10 has an invalid length. [ 742.774800][T16009] netlink: 'syz.0.3273': attribute type 2 has an invalid length. [ 742.798037][T16009] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3273'. [ 743.215187][T16014] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3275'. [ 743.757207][T16023] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3278'. [ 744.059203][T16027] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3280'. [ 744.102751][T16035] netlink: 'syz.3.3284': attribute type 2 has an invalid length. [ 744.111917][T16035] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3284'. [ 744.253328][T16040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3285'. [ 744.291481][T16041] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3286'. [ 744.475351][T16046] netlink: 'syz.2.3285': attribute type 10 has an invalid length. [ 744.572099][T16046] team0: Device hsr_slave_0 failed to register rx_handler [ 744.609520][T16048] netlink: 'syz.1.3289': attribute type 21 has an invalid length. [ 744.646203][T16048] IPv6: NLM_F_CREATE should be specified when creating new route [ 744.656626][T16048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 744.664011][T16048] IPv6: NLM_F_CREATE should be set when creating new route [ 744.671798][T16048] IPv6: NLM_F_CREATE should be set when creating new route [ 744.698754][T16051] netlink: 'syz.3.3290': attribute type 29 has an invalid length. [ 744.715235][T16051] netlink: 'syz.3.3290': attribute type 29 has an invalid length. [ 744.725171][T16051] netlink: 'syz.3.3290': attribute type 29 has an invalid length. [ 745.000425][T16056] syzkaller0: entered promiscuous mode [ 745.011492][T16056] syzkaller0: entered allmulticast mode [ 745.070730][T16061] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3293'. [ 745.086226][T16062] netlink: 'syz.0.3292': attribute type 21 has an invalid length. [ 747.271853][T16066] validate_nla: 1 callbacks suppressed [ 747.271874][T16066] netlink: 'syz.3.3294': attribute type 2 has an invalid length. [ 747.286245][T16066] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3294'. [ 747.512027][T16080] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3298'. [ 747.558187][T16082] netlink: 'syz.0.3300': attribute type 29 has an invalid length. [ 747.575354][T16085] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3301'. [ 747.585345][T16082] netlink: 'syz.0.3300': attribute type 29 has an invalid length. [ 747.900254][T16089] FAULT_INJECTION: forcing a failure. [ 747.900254][T16089] name failslab, interval 1, probability 0, space 0, times 0 [ 747.942952][T16090] netlink: 'syz.1.3302': attribute type 2 has an invalid length. [ 747.956529][T16089] CPU: 0 PID: 16089 Comm: syz.0.3303 Not tainted syzkaller #0 [ 747.964172][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.974295][T16089] Call Trace: [ 747.977642][T16089] [ 747.980639][T16089] dump_stack_lvl+0x18c/0x250 [ 747.985423][T16089] ? show_regs_print_info+0x20/0x20 [ 747.990714][T16089] ? load_image+0x400/0x400 [ 747.995325][T16089] should_fail_ex+0x39d/0x4d0 [ 748.000080][T16089] should_failslab+0x9/0x20 [ 748.004640][T16089] slab_pre_alloc_hook+0x59/0x310 [ 748.009722][T16089] ? lock_chain_count+0x20/0x20 [ 748.014632][T16089] ? __get_vm_area_node+0x125/0x370 [ 748.019905][T16089] __kmem_cache_alloc_node+0x53/0x250 [ 748.025342][T16089] ? __get_vm_area_node+0x125/0x370 [ 748.030592][T16089] kmalloc_node_trace+0x26/0xe0 [ 748.035512][T16089] __get_vm_area_node+0x125/0x370 [ 748.040609][T16089] __vmalloc_node_range+0x36e/0x1330 [ 748.045957][T16089] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 748.051595][T16089] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 748.057658][T16089] ? free_vm_area+0x50/0x50 [ 748.062212][T16089] ? end_current_label_crit_section+0x170/0x170 [ 748.068528][T16089] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 748.074120][T16089] __vmalloc+0x7a/0x90 [ 748.078240][T16089] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 748.083839][T16089] bpf_prog_alloc_no_stats+0x47/0x440 [ 748.089258][T16089] ? bpf_prog_alloc+0x2b/0x1a0 [ 748.094081][T16089] bpf_prog_alloc+0x3d/0x1a0 [ 748.098724][T16089] bpf_prog_load+0x6eb/0x1670 [ 748.103480][T16089] ? map_freeze+0x420/0x420 [ 748.108030][T16089] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 748.114233][T16089] ? lockdep_hardirqs_on+0x98/0x150 [ 748.119495][T16089] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 748.125742][T16089] ? security_bpf+0x59/0xa0 [ 748.130301][T16089] ? bpf_lsm_bpf+0x9/0x10 [ 748.134683][T16089] ? security_bpf+0x7e/0xa0 [ 748.139240][T16089] __sys_bpf+0x5ba/0x890 [ 748.143542][T16089] ? bpf_link_show_fdinfo+0x390/0x390 [ 748.148990][T16089] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 748.155222][T16089] __x64_sys_bpf+0x7c/0x90 [ 748.159692][T16089] do_syscall_64+0x55/0xa0 [ 748.164158][T16089] ? clear_bhb_loop+0x40/0x90 [ 748.168877][T16089] ? clear_bhb_loop+0x40/0x90 [ 748.173607][T16089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.179548][T16089] RIP: 0033:0x7fd74019acb9 [ 748.184017][T16089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.203667][T16089] RSP: 002b:00007fd7410b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.212134][T16089] RAX: ffffffffffffffda RBX: 00007fd740415fa0 RCX: 00007fd74019acb9 [ 748.220152][T16089] RDX: 0000000000000052 RSI: 000020000000e000 RDI: 0000000000000005 [ 748.228177][T16089] RBP: 00007fd7410b3090 R08: 0000000000000000 R09: 0000000000000000 [ 748.236201][T16089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.244240][T16089] R13: 00007fd740416038 R14: 00007fd740415fa0 R15: 00007ffde638eff8 [ 748.252307][T16089] [ 748.294325][T16090] __nla_validate_parse: 1 callbacks suppressed [ 748.294348][T16090] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3302'. [ 748.377661][T16089] syz.0.3303: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 748.426647][T16089] CPU: 1 PID: 16089 Comm: syz.0.3303 Not tainted syzkaller #0 [ 748.434213][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.444326][T16089] Call Trace: [ 748.447666][T16089] [ 748.450645][T16089] dump_stack_lvl+0x18c/0x250 [ 748.455400][T16089] ? show_regs_print_info+0x20/0x20 [ 748.460653][T16089] ? load_image+0x400/0x400 [ 748.465225][T16089] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 748.471718][T16089] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 748.478275][T16089] warn_alloc+0x246/0x340 [ 748.482661][T16089] ? __get_vm_area_node+0x125/0x370 [ 748.487919][T16089] ? zone_watermark_ok_safe+0x230/0x230 [ 748.493519][T16089] ? rcu_is_watching+0x15/0xb0 [ 748.498351][T16089] ? __get_vm_area_node+0x356/0x370 [ 748.503649][T16089] __vmalloc_node_range+0x393/0x1330 [ 748.509037][T16089] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 748.515148][T16089] ? free_vm_area+0x50/0x50 [ 748.519720][T16089] ? end_current_label_crit_section+0x170/0x170 [ 748.526046][T16089] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 748.531655][T16089] __vmalloc+0x7a/0x90 [ 748.535782][T16089] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 748.541377][T16089] bpf_prog_alloc_no_stats+0x47/0x440 [ 748.546794][T16089] ? bpf_prog_alloc+0x2b/0x1a0 [ 748.551610][T16089] bpf_prog_alloc+0x3d/0x1a0 [ 748.556255][T16089] bpf_prog_load+0x6eb/0x1670 [ 748.561001][T16089] ? map_freeze+0x420/0x420 [ 748.565549][T16089] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 748.571747][T16089] ? lockdep_hardirqs_on+0x98/0x150 [ 748.576994][T16089] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 748.583225][T16089] ? security_bpf+0x59/0xa0 [ 748.587783][T16089] ? bpf_lsm_bpf+0x9/0x10 [ 748.592159][T16089] ? security_bpf+0x7e/0xa0 [ 748.596712][T16089] __sys_bpf+0x5ba/0x890 [ 748.601004][T16089] ? bpf_link_show_fdinfo+0x390/0x390 [ 748.606453][T16089] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 748.612686][T16089] __x64_sys_bpf+0x7c/0x90 [ 748.617148][T16089] do_syscall_64+0x55/0xa0 [ 748.621609][T16089] ? clear_bhb_loop+0x40/0x90 [ 748.626338][T16089] ? clear_bhb_loop+0x40/0x90 [ 748.631067][T16089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.637011][T16089] RIP: 0033:0x7fd74019acb9 [ 748.641607][T16089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.661279][T16089] RSP: 002b:00007fd7410b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.669746][T16089] RAX: ffffffffffffffda RBX: 00007fd740415fa0 RCX: 00007fd74019acb9 [ 748.677767][T16089] RDX: 0000000000000052 RSI: 000020000000e000 RDI: 0000000000000005 [ 748.685792][T16089] RBP: 00007fd7410b3090 R08: 0000000000000000 R09: 0000000000000000 [ 748.693798][T16089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.701810][T16089] R13: 00007fd740416038 R14: 00007fd740415fa0 R15: 00007ffde638eff8 [ 748.709885][T16089] [ 748.738448][T16089] Mem-Info: [ 748.741910][T16089] active_anon:5457 inactive_anon:0 isolated_anon:0 [ 748.741910][T16089] active_file:19925 inactive_file:40186 isolated_file:0 [ 748.741910][T16089] unevictable:768 dirty:143 writeback:0 [ 748.741910][T16089] slab_reclaimable:10583 slab_unreclaimable:93374 [ 748.741910][T16089] mapped:25477 shmem:1361 pagetables:607 [ 748.741910][T16089] sec_pagetables:0 bounce:0 [ 748.741910][T16089] kernel_misc_reclaimable:0 [ 748.741910][T16089] free:1344292 free_pcp:7223 free_cma:0 [ 748.870253][T16089] Node 0 active_anon:21828kB inactive_anon:0kB active_file:79700kB inactive_file:160540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101808kB dirty:568kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10752kB pagetables:2428kB sec_pagetables:0kB all_unreclaimable? no [ 748.967785][T16089] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 749.064212][T16089] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 749.100375][T16099] netlink: 'syz.2.3305': attribute type 39 has an invalid length. [ 749.108711][T16089] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 749.115616][T16089] Node 0 DMA32 free:1458436kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21524kB inactive_anon:0kB active_file:79700kB inactive_file:159728kB unevictable:1536kB writepending:568kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:17468kB local_pcp:15348kB free_cma:0kB [ 749.150699][T16099] veth1_vlan: left allmulticast mode [ 749.160719][T16089] lowmem_reserve[]: 0 0 0 0 0 [ 749.166326][T16089] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:812kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 749.201339][T16089] lowmem_reserve[]: 0 0 0 0 0 [ 749.264677][T16089] Node 1 Normal free:3903236kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12736kB local_pcp:6912kB free_cma:0kB [ 749.313569][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.313640][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.331415][T16101] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3304'. [ 749.378533][T16089] lowmem_reserve[]: 0 0 0 0 0 [ 749.389889][T16089] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 749.420823][T16089] Node 0 DMA32: 743*4kB (UME) 909*8kB (UME) 972*16kB (UME) 778*32kB (UME) 398*64kB (UME) 357*128kB (UME) 171*256kB (UME) 101*512kB (UME) 46*1024kB (UME) 11*2048kB (UM) 286*4096kB (UM) = 1458436kB [ 749.458230][T16089] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 749.474790][T16089] Node 1 Normal: 233*4kB (UME) 64*8kB (UME) 30*16kB (UME) 184*32kB (UME) 54*64kB (UE) 8*128kB (UME) 1*256kB (U) 3*512kB (UME) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3903236kB [ 749.526196][T16089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 749.540418][T16105] netlink: 'syz.2.3307': attribute type 2 has an invalid length. [ 749.546699][T16089] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 749.569723][T16105] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3307'. [ 749.576497][T16089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 749.602476][T16089] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 749.640423][T16089] 61472 total pagecache pages [ 749.668654][T16089] 0 pages in swap cache [ 749.682670][T16089] Free swap = 124996kB [ 749.692690][T16089] Total swap = 124996kB [ 749.697412][T16089] 2097051 pages RAM [ 749.701520][T16089] 0 pages HighMem/MovableOnly [ 749.710986][T16089] 416922 pages reserved [ 749.715519][T16089] 0 pages cma reserved [ 749.795162][T16111] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3310'. [ 749.877427][T16115] netlink: 'syz.1.3311': attribute type 29 has an invalid length. [ 749.891887][T16115] netlink: 'syz.1.3311': attribute type 29 has an invalid length. [ 750.010600][T16117] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3312'. [ 750.087701][T16121] netlink: 'syz.3.3310': attribute type 10 has an invalid length. [ 750.167083][T16121] team0: Device hsr_slave_0 failed to register rx_handler [ 750.347645][T16128] netlink: 'syz.1.3316': attribute type 2 has an invalid length. [ 750.355629][T16128] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.3316'. [ 750.372975][T16128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.394261][T16128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.612955][ C0] [ 750.612990][ C0] ================================ [ 750.613001][ C0] WARNING: inconsistent lock state [ 750.613016][ C0] syzkaller #0 Not tainted [ 750.613028][ C0] -------------------------------- [ 750.613034][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 750.613049][ C0] syz.3.3317/16133 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 750.613073][ C0] ffff88802d6134a0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 750.613133][ C0] {INITIAL USE} state was registered at: [ 750.613141][ C0] lock_acquire+0x19e/0x420 [ 750.613164][ C0] _raw_spin_lock+0x2e/0x40 [ 750.613185][ C0] htab_lock_bucket+0x17d/0x300 [ 750.613206][ C0] htab_lru_map_update_elem+0x2c6/0x990 [ 750.613226][ C0] bpf_map_update_value+0x660/0x720 [ 750.613243][ C0] map_update_elem+0x57b/0x700 [ 750.613262][ C0] __sys_bpf+0x6b5/0x890 [ 750.613281][ C0] __x64_sys_bpf+0x7c/0x90 [ 750.613298][ C0] do_syscall_64+0x55/0xa0 [ 750.613324][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.613345][ C0] irq event stamp: 4038 [ 750.613351][ C0] hardirqs last enabled at (4037): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 750.613381][ C0] hardirqs last disabled at (4038): [] exc_debug+0x73/0x140 [ 750.613414][ C0] softirqs last enabled at (3168): [] bpf_prog_load+0x1266/0x1670 [ 750.613438][ C0] softirqs last disabled at (3164): [] bpf_ksym_add+0x2d/0x340 [ 750.613465][ C0] [ 750.613465][ C0] other info that might help us debug this: [ 750.613472][ C0] Possible unsafe locking scenario: [ 750.613472][ C0] [ 750.613478][ C0] CPU0 [ 750.613482][ C0] ---- [ 750.613486][ C0] lock(&htab->lockdep_key); [ 750.613500][ C0] [ 750.613504][ C0] lock(&htab->lockdep_key); [ 750.613516][ C0] [ 750.613516][ C0] *** DEADLOCK *** [ 750.613516][ C0] [ 750.613521][ C0] 3 locks held by syz.3.3317/16133: [ 750.613534][ C0] #0: ffff88802f3d39c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 750.613589][ C0] #1: ffff8880290e4418 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 750.613647][ C0] #2: ffff888019ef8308 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: shmem_file_write_iter+0x82/0x120 [ 750.613702][ C0] [ 750.613702][ C0] stack backtrace: [ 750.613709][ C0] CPU: 0 PID: 16133 Comm: syz.3.3317 Not tainted syzkaller #0 [ 750.613730][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 750.613742][ C0] Call Trace: [ 750.613751][ C0] <#DB> [ 750.613766][ C0] dump_stack_lvl+0x18c/0x250 [ 750.613798][ C0] ? show_regs_print_info+0x20/0x20 [ 750.613832][ C0] ? print_usage_bug+0x475/0x690 [ 750.613856][ C0] ? verify_lock_unused+0x18/0x140 [ 750.613883][ C0] lock_acquire+0x2c2/0x420 [ 750.613909][ C0] ? htab_lock_bucket+0x17d/0x300 [ 750.613932][ C0] ? read_lock_is_recursive+0x20/0x20 [ 750.613964][ C0] _raw_spin_lock+0x2e/0x40 [ 750.613985][ C0] ? htab_lock_bucket+0x17d/0x300 [ 750.614006][ C0] htab_lock_bucket+0x17d/0x300 [ 750.614031][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 750.614063][ C0] ? verify_lock_unused+0x18/0x140 [ 750.614087][ C0] ? jhash+0x34e/0x740 [ 750.614109][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 750.614136][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 750.614157][ C0] ? perf_callchain+0x1f0/0x1f0 [ 750.614183][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 750.614205][ C0] bpf_overflow_handler+0x1fc/0x510 [ 750.614237][ C0] ? bpf_overflow_handler+0xde/0x510 [ 750.614266][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 750.614299][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 750.614324][ C0] __perf_event_overflow+0x447/0x630 [ 750.614352][ C0] perf_swevent_event+0x324/0x630 [ 750.614379][ C0] ? perf_tp_event+0x1450/0x1450 [ 750.614408][ C0] perf_bp_event+0x2a7/0x380 [ 750.614434][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 750.614476][ C0] ? lock_acquire+0x2c2/0x420 [ 750.614503][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 750.614533][ C0] notifier_call_chain+0x197/0x380 [ 750.614562][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 750.614589][ C0] atomic_notifier_call_chain+0xda/0x180 [ 750.614617][ C0] notify_die+0x145/0x1a0 [ 750.614643][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 750.614674][ C0] ? rcu_is_watching+0x15/0xb0 [ 750.614703][ C0] notify_debug+0x2e/0x50 [ 750.614722][ C0] exc_debug+0xde/0x140 [ 750.614753][ C0] asm_exc_debug+0x1e/0x40 [ 750.614773][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 750.614805][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 750.614822][ C0] RSP: 0018:ffffc90011cd79b8 EFLAGS: 00050206 [ 750.614840][ C0] RAX: ffffffff84277401 RBX: 1ffff9200239afb7 RCX: 0000000000000cc0 [ 750.614855][ C0] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffff8880554ec340 [ 750.614870][ C0] RBP: ffffc90011cd7b50 R08: ffff8880554ecfff R09: 1ffff1100aa9d9ff [ 750.614885][ C0] R10: dffffc0000000000 R11: ffffed100aa9da00 R12: ffff8880554ec000 [ 750.614901][ C0] R13: 0000200000000000 R14: 0000200000001000 R15: 0000000000001000 [ 750.614920][ C0] ? copy_page_from_iter_atomic+0x261/0x1580 [ 750.614959][ C0] [ 750.614965][ C0] [ 750.614971][ C0] copy_page_from_iter_atomic+0x30a/0x1580 [ 750.615003][ C0] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 750.615034][ C0] ? iov_iter_zero+0x1170/0x1170 [ 750.615074][ C0] ? shmem_write_begin+0x1cf/0x420 [ 750.615099][ C0] generic_perform_write+0x353/0x5c0 [ 750.615133][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 750.615161][ C0] ? file_update_time+0x192/0x1a0 [ 750.615186][ C0] shmem_file_write_iter+0xfb/0x120 [ 750.615212][ C0] vfs_write+0x46c/0x990 [ 750.615243][ C0] ? file_end_write+0x250/0x250 [ 750.615273][ C0] ? __fget_files+0x43d/0x4b0 [ 750.615305][ C0] ? __fdget_pos+0x2a3/0x330 [ 750.615331][ C0] ? ksys_write+0x75/0x260 [ 750.615359][ C0] ksys_write+0x150/0x260 [ 750.615388][ C0] ? __ia32_sys_read+0x90/0x90 [ 750.615418][ C0] ? syscall_enter_from_user_mode+0x2e/0x80 [ 750.615442][ C0] do_syscall_64+0x55/0xa0 [ 750.615470][ C0] ? clear_bhb_loop+0x40/0x90 [ 750.615491][ C0] ? clear_bhb_loop+0x40/0x90 [ 750.615514][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.615535][ C0] RIP: 0033:0x7f22dfd9acb9 [ 750.615552][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.615569][ C0] RSP: 002b:00007f22e0bc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 750.615589][ C0] RAX: ffffffffffffffda RBX: 00007f22e0015fa0 RCX: 00007f22dfd9acb9 [ 750.615605][ C0] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 000000000000000d [ 750.615618][ C0] RBP: 00007f22dfe08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 750.615631][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.615644][ C0] R13: 00007f22e0016038 R14: 00007f22e0015fa0 R15: 00007fff0dcb3858 [ 750.615668][ C0] [ 751.327863][T16128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.335331][T16128] batman_adv: batadv0: Removing interface: batadv_slave_1