last executing test programs: 4.379510675s ago: executing program 0 (id=2444): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x4, 0xc}, 0x50) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x8, &(0x7f0000000100)='^:{*-\'(\x00'}, 0x30) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x0) close(0xffffffffffffffff) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500001208000000000000000000000300000000040000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20) r3 = socket$kcm(0x23, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 3.760745896s ago: executing program 2 (id=2448): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) setsockopt$sock_attach_bpf(r2, 0x84, 0x18, &(0x7f0000000000)=r5, 0x8) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x31) r6 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r7 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x3, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) 3.473253035s ago: executing program 0 (id=2449): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x801946}, 0x400, 0x0, 0x0, 0x8, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x7, 0x1, 0xff, 0x9, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x46, 0x8}, 0x80, 0x7, 0x1, 0x5, 0x6, 0x18, 0x4, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)=r0}, 0x20) r2 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000000}, 0x0, 0x9, 0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, 0x5ff, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)}, 0x2) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0xf5, 0xd, 0xa3, 0xfd, 0x0, 0xfffffffffffffffb, 0x420, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x72, 0x4, @perf_config_ext={0x55166d7a, 0x1}, 0x505, 0x1, 0x1aba, 0x4, 0x6, 0x7fffffff, 0x74e, 0x0, 0x100, 0x0, 0x8}, 0x0, 0xc, r2, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 2.816105077s ago: executing program 2 (id=2452): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) setsockopt$sock_attach_bpf(r2, 0x84, 0x18, &(0x7f0000000000)=r5, 0x8) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x31) r6 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r7 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x3, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) 2.815638727s ago: executing program 3 (id=2453): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1a108, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x9, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1a108, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x7}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x7}, 0x94) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @dev={0xac, 0x14, 0x14, 0xb1}}, 0x10, &(0x7f0000000980), 0x0, 0x0, 0x0, 0xa6820000}, 0x20c0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000000060020000000000000008400000002"], 0x38}, 0x0) close(r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x48, 0x1}, 0x4, 0x200000000000008, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x48, 0x1}, 0x4, 0x200000000000008, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, &(0x7f0000000100), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002900)={0xffffffffffffffff, 0xe0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000002c0)=[0x0], &(0x7f00000026c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000002700)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, 0x0, 0x0, 0xfa, 0x8, 0x8, &(0x7f00000027c0)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)=r3}, 0x20) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f00000025c0)=[{&(0x7f0000000180)="a4010e13011c1645777805ac7a014b07624db58b782bc3a0c11eb444f4ad803ea21df4a9e05d5ec56106e31e6f2b8eef23558bab71a2403bc22de304a212079c3f5cdd9c6391e44ada8ad913acac98f567844485298c72279a5b88a8a6b8c47119a2d78d0eae52c1a57775b4a4f6397658cc7280c8a626782ed252dec1a874ae0d27120b0d6e13c2985a230df474be29fd237a1eb2678197734789f8e7098d972059659f", 0xa4}, {&(0x7f0000000240)="0151f755f7fbbb994c3c213ac387", 0xe}, {&(0x7f00000014c0)="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", 0xf00}, {&(0x7f00000024c0)="5605a311a342c383898ba32372cfed352491", 0x12}, {&(0x7f0000002580)="ceb616908c339769725d22", 0xb}], 0x5, &(0x7f0000002940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x35}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @broadcast}}}], 0x38}, 0x8040) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x38}, 0x22) (async) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x38}, 0x22) r6 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x10e, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$cgroup_devices(r7, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async) r8 = openat$cgroup_devices(r7, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000300)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x83, 0x0, 0x0) 2.784018429s ago: executing program 0 (id=2455): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000fd00000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000018000000020000000000000001d85900000a00f0bf3f5da99846ba619ef008a805a8049e12c397524383df678ad285abcadc196000000000000000"], &(0x7f0000002600)=""/4093, 0x32, 0xffd, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) 2.577291065s ago: executing program 4 (id=2457): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x401, 0x6}, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x349b, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000ea6b008500000086", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c0000001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x800) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x5000}, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 2.499577978s ago: executing program 0 (id=2458): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x4, 0xc}, 0x50) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x8, &(0x7f0000000100)='^:{*-\'(\x00'}, 0x30) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x0) close(0xffffffffffffffff) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500001208000000000000000000000300000000040000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20) r3 = socket$kcm(0x23, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 2.368212892s ago: executing program 3 (id=2459): socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.307491894s ago: executing program 4 (id=2460): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xb, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.270981415s ago: executing program 2 (id=2461): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x4, 0xc}, 0x50) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x8, &(0x7f0000000100)='^:{*-\'(\x00'}, 0x30) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x0) close(0xffffffffffffffff) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500001208000000000000000000000300000000040000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20) r3 = socket$kcm(0x23, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 1.891147188s ago: executing program 4 (id=2463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec8}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/4085, 0xff5}], 0x1, 0x0, 0x0, 0x8000000}, 0x20) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91324fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800"/11, @ANYBLOB], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x9, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) r8 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r8, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x80000fb, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[], 0xf}, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xbc}], 0x1}, 0x80d1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000001c00000007000000000000000200000d000000000400000000000000feffffff0400000000022e2e300e00bc2d9f84b4e149060cbeca349008eb258bff7f096db4e73bcd36908ff7ffffff450852dc659e58"], &(0x7f0000000340)=""/142, 0x3b, 0x8e, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, 0xfffffffffffffffd, 0xf0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) 1.889869818s ago: executing program 1 (id=2464): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x80000, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x51b000, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000006c0)) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000700)=[{}, {0x0}, {&(0x7f0000000380)="6549d5aefebc0334f8e1f1259c12a766cdb361acbb4e535ca605ea49491bfcdd6d085a8b1f21c2d049337a219d759ef0a9c9a8ccd30f9fd271100b2bec33d521b663e9a69c6a76c3fe575ce944c2e451e1731b938a04c842581477298d2eddc037aa980bfa2f11204f4eb79b8e126c8622f80ef08a9ee216c28635bd447349d860aa0343f51093a3b34339037264a538f6591737da2511dc36df1e85935f4bb15632c8a95a9864756283ed02c19b5a92d08e4b7f7db4f7eeb3bba6794aecb1462a9bfecb5b3a4a4df62de532e67514", 0xcf}, {&(0x7f0000000500)}, {0x0}, {0x0}], 0x6, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0xd7, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102, @local]}, @cipso={0x86, 0x52, 0x1, [{0x1, 0x2}, {0x1, 0x10, "82edab26fcba9068c5e9b71542b8"}, {0x1, 0xf, "329f0f6eb083e6be65375ac15f"}, {0x1, 0x8, "e930f0a12ad9"}, {0x2, 0x9, "32805b76c42b9a"}, {0x2, 0xc, "81778da335264d407412"}, {0x2, 0xe, "40607763dcd127f3ae8db438"}]}, @ssrr={0x89, 0x17, 0x88, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, @remote, @empty]}, @timestamp={0x44, 0x4, 0x86, 0x0, 0x5}, @ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x1f, 0xee, [@multicast1, @local, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}]}, @ssrr={0x89, 0x7, 0xf3, [@empty]}]}}}], 0xe0}, 0x4004040) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, &(0x7f0000000800)=""/244, 0x4a, 0xf4, 0x1}, 0x28) r3 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000700)) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc602f000e", 0x17}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) 1.889581778s ago: executing program 3 (id=2465): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x801946}, 0x400, 0x0, 0x0, 0x8, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x7, 0x1, 0xff, 0x9, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x46, 0x8}, 0x80, 0x7, 0x1, 0x5, 0x6, 0x18, 0x4, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)=r0}, 0x20) r2 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000000}, 0x0, 0x9, 0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, 0x5ff, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)}, 0x2) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0xf5, 0xd, 0xa3, 0xfd, 0x0, 0xfffffffffffffffb, 0x420, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x72, 0x4, @perf_config_ext={0x55166d7a, 0x1}, 0x505, 0x1, 0x1aba, 0x4, 0x6, 0x7fffffff, 0x74e, 0x0, 0x100, 0x0, 0x8}, 0x0, 0xc, r2, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 1.848802829s ago: executing program 0 (id=2466): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, @perf_bp={0x0, 0x4}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x4, 0x0, 0x0, 0x80, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x8000000000005}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x100, 0x7}, 0x1c812, 0xfffffffffffd, 0x0, 0x2, 0x10000000000000, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x8eea}, 0x0, 0x0, r1, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9", 0x10}], 0x1}, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x31a) r9 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x2002, 0x400000000000000, 0x0, 0x4, 0x2000000000000, 0x0, 0x4, 0x0, 0x9, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, r9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYRES16=r0], 0x10b8}, 0x40001) 1.695714884s ago: executing program 3 (id=2467): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x40000000, 0x10005}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.683426665s ago: executing program 1 (id=2468): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000fd00000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000018000000020000000000000001d85900000a00f0bf3f5da99846ba619ef008a805a8049e12c397524383df678ad285abcadc196000000000000000"], &(0x7f0000002600)=""/4093, 0x32, 0xffd, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) 1.192886531s ago: executing program 0 (id=2469): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000050000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x6}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0xf, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(r1, 0x0, 0x800) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={0xffffffffffffffff, r1}) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0xf}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8983, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaa}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 1.192360091s ago: executing program 3 (id=2470): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x401, 0x6}, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x349b, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000ea6b008500000086", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c0000001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x800) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x5000}, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 1.190751581s ago: executing program 4 (id=2471): socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (fail_nth: 3) 1.004898637s ago: executing program 1 (id=2472): socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803", 0x3}], 0x1}, 0x0) r6 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x114, 0x6, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x13}, 0x0, 0xc8, 0x9, 0x8, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 689.676917ms ago: executing program 2 (id=2473): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xb, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 556.313542ms ago: executing program 4 (id=2474): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0xf}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaa}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) 554.878022ms ago: executing program 3 (id=2484): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x4, 0xc}, 0x50) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x8, &(0x7f0000000100)='^:{*-\'(\x00'}, 0x30) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x0) close(0xffffffffffffffff) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500001208000000000000000000000300000000040000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20) r3 = socket$kcm(0x23, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 475.499714ms ago: executing program 1 (id=2475): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) setsockopt$sock_attach_bpf(r2, 0x84, 0x18, &(0x7f0000000000)=r5, 0x8) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x31) r6 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r7 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x3, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) 370.470888ms ago: executing program 2 (id=2476): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) setsockopt$sock_attach_bpf(r2, 0x84, 0x18, &(0x7f0000000000)=r3, 0x8) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x31) r4 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r5 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x3, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) 210.011314ms ago: executing program 1 (id=2477): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x801946}, 0x400, 0x0, 0x0, 0x8, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x7, 0x1, 0xff, 0x9, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x46, 0x8}, 0x80, 0x7, 0x1, 0x5, 0x6, 0x18, 0x4, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)=r0}, 0x20) r2 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000000}, 0x0, 0x9, 0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, 0x5ff, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)}, 0x2) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0xf5, 0xd, 0xa3, 0xfd, 0x0, 0xfffffffffffffffb, 0x420, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x72, 0x4, @perf_config_ext={0x55166d7a, 0x1}, 0x505, 0x1, 0x1aba, 0x4, 0x6, 0x7fffffff, 0x74e, 0x0, 0x100, 0x0, 0x8}, 0x0, 0xc, r2, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 185.627444ms ago: executing program 4 (id=2478): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x80000, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x51b000, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000006c0)) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000700)=[{}, {0x0}, {&(0x7f0000000380)="6549d5aefebc0334f8e1f1259c12a766cdb361acbb4e535ca605ea49491bfcdd6d085a8b1f21c2d049337a219d759ef0a9c9a8ccd30f9fd271100b2bec33d521b663e9a69c6a76c3fe575ce944c2e451e1731b938a04c842581477298d2eddc037aa980bfa2f11204f4eb79b8e126c8622f80ef08a9ee216c28635bd447349d860aa0343f51093a3b34339037264a538f6591737da2511dc36df1e85935f4bb15632c8a95a9864756283ed02c19b5a92d08e4b7f7db4f7eeb3bba6794aecb1462a9bfecb5b3a4a4df62de532e67514", 0xcf}, {&(0x7f0000000500)}, {0x0}, {0x0}], 0x6}, 0x4004040) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, &(0x7f0000000800)=""/244, 0x4a, 0xf4, 0x1}, 0x28) r3 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000700)) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc602f000e", 0x17}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) 73.323408ms ago: executing program 2 (id=2479): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000fd00000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) 0s ago: executing program 1 (id=2480): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x693, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f0000000a40)=[{}, {}], 0x10, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) (rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000023c0)={0xffffffffffffffff, 0x20, &(0x7f0000002380)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, &(0x7f0000002340)=""/6, 0x6}}, 0x10) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) (async) sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x7b, &(0x7f0000000000)=r10, 0x8) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0xc, 0x42, 0x40}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r11}, 0x38) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002480)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='syzkaller\x00', 0xc00000, 0x0, 0x0, 0x40f00, 0x1, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x1, 0xd, 0x2, 0x17}, 0x10, r7, 0x0, 0x3, &(0x7f0000002400)=[r10, r11], &(0x7f0000002440)=[{0x3, 0x5, 0xf, 0x5}, {0x2, 0x3, 0x2, 0xa}, {0xc, 0x4, 0x0, 0x1}], 0x10, 0xa}, 0x94) (async, rerun: 32) close(r3) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r14}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async) recvmsg$unix(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) sendmsg$inet(r13, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): 32][ T5847] netlink: 'syz.4.552': attribute type 7 has an invalid length. [ 148.827246][ T5847] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.552'. [ 149.394674][ T5855] netlink: 'syz.1.566': attribute type 19 has an invalid length. [ 149.451909][ T5855] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.566'. [ 152.278282][ T5865] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 152.315749][ T5861] netlink: 'syz.0.557': attribute type 21 has an invalid length. [ 152.432501][ T5868] delete_channel: no stack [ 152.546261][ T5878] netlink: 'syz.3.565': attribute type 2 has an invalid length. [ 152.604741][ T5878] netlink: 'syz.3.565': attribute type 8 has an invalid length. [ 152.677639][ T5878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.565'. [ 152.696664][ T5882] netlink: 'syz.0.567': attribute type 21 has an invalid length. [ 152.729137][ T5882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.763421][ T5889] netlink: 'syz.3.565': attribute type 2 has an invalid length. [ 152.802682][ T5889] netlink: 'syz.3.565': attribute type 8 has an invalid length. [ 152.836315][ T5889] netlink: 132 bytes leftover after parsing attributes in process `syz.3.565'. [ 152.895676][ T5885] netlink: 'syz.3.565': attribute type 10 has an invalid length. [ 152.924215][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.931659][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.988386][ T5915] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 159.333995][ T5930] netlink: 'syz.1.580': attribute type 21 has an invalid length. [ 159.382292][ T5930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.465535][ T5934] netlink: 'syz.4.583': attribute type 2 has an invalid length. [ 159.482098][ T5934] netlink: 'syz.4.583': attribute type 8 has an invalid length. [ 159.493121][ T5934] netlink: 132 bytes leftover after parsing attributes in process `syz.4.583'. [ 159.526549][ T5924] delete_channel: no stack [ 159.539424][ T5936] netlink: 'syz.4.583': attribute type 2 has an invalid length. [ 159.593963][ T5936] netlink: 'syz.4.583': attribute type 8 has an invalid length. [ 159.632308][ T5936] netlink: 132 bytes leftover after parsing attributes in process `syz.4.583'. [ 159.797529][ T5934] netlink: 'syz.4.583': attribute type 10 has an invalid length. [ 159.855961][ T5934] bridge0: port 3(hsr0) entered disabled state [ 159.862906][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.871070][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.579080][ T5960] FAULT_INJECTION: forcing a failure. [ 160.579080][ T5960] name failslab, interval 1, probability 0, space 0, times 0 [ 160.596062][ T5960] CPU: 0 PID: 5960 Comm: syz.2.590 Not tainted syzkaller #0 [ 160.603381][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.613439][ T5960] Call Trace: [ 160.616719][ T5960] [ 160.619647][ T5960] dump_stack_lvl+0x188/0x250 [ 160.624336][ T5960] ? show_regs_print_info+0x20/0x20 [ 160.629550][ T5960] ? load_image+0x400/0x400 [ 160.634059][ T5960] ? __lock_acquire+0x7d10/0x7d10 [ 160.639100][ T5960] should_fail+0x38c/0x4c0 [ 160.643527][ T5960] should_failslab+0x5/0x20 [ 160.648030][ T5960] slab_pre_alloc_hook+0x51/0xc0 [ 160.652966][ T5960] ? cpuset_write_resmask+0x15f/0x1390 [ 160.658435][ T5960] __kmalloc_track_caller+0x69/0x330 [ 160.663720][ T5960] ? cpuset_write_resmask+0x15f/0x1390 [ 160.669178][ T5960] ? css_get+0x111/0x200 [ 160.673431][ T5960] kmemdup+0x22/0x50 [ 160.677333][ T5960] cpuset_write_resmask+0x15f/0x1390 [ 160.682637][ T5960] ? cpuset_common_seq_show+0x230/0x230 [ 160.688188][ T5960] cgroup_file_write+0x2c3/0x660 [ 160.693131][ T5960] ? read_lock_is_recursive+0x10/0x10 [ 160.698515][ T5960] ? cgroup_seqfile_stop+0xd0/0xd0 [ 160.703642][ T5960] ? cgroup_seqfile_stop+0xd0/0xd0 [ 160.708755][ T5960] kernfs_fop_write_iter+0x379/0x4c0 [ 160.714050][ T5960] vfs_write+0x745/0xd60 [ 160.718301][ T5960] ? file_end_write+0x250/0x250 [ 160.723158][ T5960] ? __fget_files+0x40f/0x480 [ 160.727846][ T5960] ? mutex_lock_nested+0x17/0x20 [ 160.732787][ T5960] ? __fdget_pos+0x2bf/0x370 [ 160.737376][ T5960] ? ksys_write+0x71/0x260 [ 160.741797][ T5960] ksys_write+0x152/0x260 [ 160.746131][ T5960] ? __ia32_sys_read+0x80/0x80 [ 160.750899][ T5960] ? lockdep_hardirqs_on+0x94/0x140 [ 160.756110][ T5960] do_syscall_64+0x4c/0xa0 [ 160.760528][ T5960] ? clear_bhb_loop+0x30/0x80 [ 160.765206][ T5960] ? clear_bhb_loop+0x30/0x80 [ 160.769886][ T5960] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.775781][ T5960] RIP: 0033:0x7f56313b7e59 [ 160.780197][ T5960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.799805][ T5960] RSP: 002b:00007f562f611028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.808237][ T5960] RAX: ffffffffffffffda RBX: 00007f5631630fa0 RCX: 00007f56313b7e59 [ 160.816213][ T5960] RDX: 0000000000000031 RSI: 0000200000000240 RDI: 0000000000000005 [ 160.824185][ T5960] RBP: 00007f562f611090 R08: 0000000000000000 R09: 0000000000000000 [ 160.832165][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.840138][ T5960] R13: 00007f5631631038 R14: 00007f5631630fa0 R15: 00007fff2f044b18 [ 160.848128][ T5960] [ 162.715889][ T5944] netlink: 'syz.0.588': attribute type 21 has an invalid length. [ 162.738546][ T5944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.746180][ T5934] syz.4.583 (5934) used greatest stack depth: 19608 bytes left [ 162.774550][ T5948] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 163.026663][ T5972] netlink: 'syz.2.595': attribute type 21 has an invalid length. [ 163.078425][ T5972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.112786][ T5978] FAULT_INJECTION: forcing a failure. [ 163.112786][ T5978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.146547][ T5978] CPU: 0 PID: 5978 Comm: syz.4.596 Not tainted syzkaller #0 [ 163.153872][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.163929][ T5978] Call Trace: [ 163.167206][ T5978] [ 163.170137][ T5978] dump_stack_lvl+0x188/0x250 [ 163.174818][ T5978] ? show_regs_print_info+0x20/0x20 [ 163.180021][ T5978] ? load_image+0x400/0x400 [ 163.184528][ T5978] ? __lock_acquire+0x7d10/0x7d10 [ 163.189555][ T5978] ? perf_trace_lock_acquire+0xed/0x3e0 [ 163.195109][ T5978] should_fail+0x38c/0x4c0 [ 163.199541][ T5978] _copy_from_user+0x2e/0x170 [ 163.204227][ T5978] iovec_from_user+0x142/0x370 [ 163.208996][ T5978] __import_iovec+0x70/0x490 [ 163.213597][ T5978] import_iovec+0x6f/0xa0 [ 163.217940][ T5978] ___sys_sendmsg+0x1fd/0x2e0 [ 163.222641][ T5978] ? __sys_sendmsg+0x2a0/0x2a0 [ 163.227457][ T5978] __se_sys_sendmsg+0x1af/0x290 [ 163.232316][ T5978] ? __x64_sys_sendmsg+0x80/0x80 [ 163.237259][ T5978] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 163.243264][ T5978] ? lockdep_hardirqs_on+0x94/0x140 [ 163.248481][ T5978] do_syscall_64+0x4c/0xa0 [ 163.252900][ T5978] ? clear_bhb_loop+0x30/0x80 [ 163.257582][ T5978] ? clear_bhb_loop+0x30/0x80 [ 163.262261][ T5978] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.268161][ T5978] RIP: 0033:0x7f815915fe59 [ 163.272586][ T5978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.292195][ T5978] RSP: 002b:00007f81573b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.300620][ T5978] RAX: ffffffffffffffda RBX: 00007f81593d8fa0 RCX: 00007f815915fe59 [ 163.308599][ T5978] RDX: 0000000004008054 RSI: 0000200000000280 RDI: 0000000000000003 [ 163.316577][ T5978] RBP: 00007f81573b9090 R08: 0000000000000000 R09: 0000000000000000 [ 163.324548][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.332517][ T5978] R13: 00007f81593d9038 R14: 00007f81593d8fa0 R15: 00007ffc63be88e8 [ 163.340504][ T5978] [ 163.818789][ T5982] netlink: 'syz.0.608': attribute type 21 has an invalid length. [ 163.847192][ T5982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.863502][ T5987] netlink: 'syz.2.598': attribute type 2 has an invalid length. [ 163.872261][ T5987] netlink: 132 bytes leftover after parsing attributes in process `syz.2.598'. [ 163.891801][ T5990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.598'. [ 163.929217][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.936858][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.994991][ T5975] delete_channel: no stack [ 164.186583][ T6001] netlink: 132 bytes leftover after parsing attributes in process `syz.2.602'. [ 164.243633][ T6003] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 164.289535][ T6001] netlink: 132 bytes leftover after parsing attributes in process `syz.2.602'. [ 164.353360][ T6007] validate_nla: 8 callbacks suppressed [ 164.353404][ T6007] netlink: 'syz.1.605': attribute type 21 has an invalid length. [ 164.421932][ T6007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.444720][ T6001] netlink: 'syz.2.602': attribute type 10 has an invalid length. [ 167.171305][ T6015] netlink: 'syz.3.610': attribute type 2 has an invalid length. [ 167.186545][ T6015] netlink: 'syz.3.610': attribute type 4 has an invalid length. [ 167.258281][ T6023] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.613'. [ 167.472590][ T6029] netlink: 'syz.2.614': attribute type 21 has an invalid length. [ 167.523263][ T6029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.260853][ T6030] delete_channel: no stack [ 170.283952][ T6040] netlink: 'syz.2.617': attribute type 8 has an invalid length. [ 170.309442][ T6040] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.617'. [ 170.517863][ T6047] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 173.718539][ T6055] netlink: 'syz.2.622': attribute type 2 has an invalid length. [ 173.819475][ T6055] netlink: 'syz.2.622': attribute type 8 has an invalid length. [ 173.846473][ T6055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.622'. [ 173.875434][ T6057] netlink: 'syz.2.622': attribute type 2 has an invalid length. [ 173.933120][ T6057] netlink: 'syz.2.622': attribute type 8 has an invalid length. [ 173.993298][ T6057] netlink: 132 bytes leftover after parsing attributes in process `syz.2.622'. [ 174.007346][ T6062] netlink: 'syz.2.622': attribute type 10 has an invalid length. [ 174.045126][ T6065] netlink: 'syz.3.626': attribute type 21 has an invalid length. [ 174.065917][ T6067] netlink: 'syz.4.625': attribute type 21 has an invalid length. [ 174.127078][ T6067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.256839][ T6072] netlink: 'syz.2.627': attribute type 19 has an invalid length. [ 174.276891][ T6072] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.627'. [ 174.330311][ T6079] netlink: 'syz.0.630': attribute type 21 has an invalid length. [ 174.350632][ T6079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.372699][ T6074] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.628'. [ 174.480012][ T6086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.632'. [ 174.507491][ T6086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.632'. [ 174.541394][ T6081] delete_channel: no stack [ 175.640440][ T4703] Bluetooth: hci2: command 0x0406 tx timeout [ 175.640584][ T4233] Bluetooth: hci0: command 0x0406 tx timeout [ 175.646689][ T4703] Bluetooth: hci3: command 0x0406 tx timeout [ 175.664040][ T4703] Bluetooth: hci1: command 0x0406 tx timeout [ 175.671448][ T4703] Bluetooth: hci4: command 0x0406 tx timeout [ 177.636927][ T6095] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 177.658294][ T6103] validate_nla: 6 callbacks suppressed [ 177.658339][ T6103] netlink: 'syz.1.637': attribute type 2 has an invalid length. [ 177.705503][ T6103] netlink: 'syz.1.637': attribute type 8 has an invalid length. [ 177.750950][ T6103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.637'. [ 177.763450][ T6104] netlink: 'syz.1.637': attribute type 2 has an invalid length. [ 177.777361][ T6104] netlink: 'syz.1.637': attribute type 8 has an invalid length. [ 177.786128][ T6104] netlink: 132 bytes leftover after parsing attributes in process `syz.1.637'. [ 177.798187][ T6112] FAULT_INJECTION: forcing a failure. [ 177.798187][ T6112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.833738][ T6110] netlink: 'syz.2.638': attribute type 21 has an invalid length. [ 177.942749][ T6112] CPU: 0 PID: 6112 Comm: syz.4.640 Not tainted syzkaller #0 [ 177.950085][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.960169][ T6112] Call Trace: [ 177.963464][ T6112] [ 177.966406][ T6112] dump_stack_lvl+0x188/0x250 [ 177.971108][ T6112] ? show_regs_print_info+0x20/0x20 [ 177.976972][ T6112] ? load_image+0x400/0x400 [ 177.981495][ T6112] ? __lock_acquire+0x7d10/0x7d10 [ 177.986540][ T6112] should_fail+0x38c/0x4c0 [ 177.990971][ T6112] _copy_from_user+0x2e/0x170 [ 177.995654][ T6112] iovec_from_user+0x142/0x370 [ 178.000432][ T6112] __import_iovec+0x70/0x490 [ 178.005048][ T6112] import_iovec+0x6f/0xa0 [ 178.009387][ T6112] ___sys_sendmsg+0x1fd/0x2e0 [ 178.014075][ T6112] ? __sys_sendmsg+0x2a0/0x2a0 [ 178.018854][ T6112] ? trace_event_raw_event_lock+0x270/0x270 [ 178.024743][ T6112] ? vfs_write+0x8b2/0xd60 [ 178.029184][ T6112] __se_sys_sendmsg+0x1af/0x290 [ 178.034032][ T6112] ? __x64_sys_sendmsg+0x80/0x80 [ 178.038961][ T6112] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 178.044950][ T6112] ? lockdep_hardirqs_on+0x94/0x140 [ 178.050151][ T6112] do_syscall_64+0x4c/0xa0 [ 178.054556][ T6112] ? clear_bhb_loop+0x30/0x80 [ 178.059223][ T6112] ? clear_bhb_loop+0x30/0x80 [ 178.063892][ T6112] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.069779][ T6112] RIP: 0033:0x7f815915fe59 [ 178.074187][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.093796][ T6112] RSP: 002b:00007f81573b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.102206][ T6112] RAX: ffffffffffffffda RBX: 00007f81593d8fa0 RCX: 00007f815915fe59 [ 178.110167][ T6112] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 178.118127][ T6112] RBP: 00007f81573b9090 R08: 0000000000000000 R09: 0000000000000000 [ 178.126090][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.134047][ T6112] R13: 00007f81593d9038 R14: 00007f81593d8fa0 R15: 00007ffc63be88e8 [ 178.142029][ T6112] [ 178.322955][ T6120] netlink: 'syz.1.643': attribute type 21 has an invalid length. [ 178.352799][ T6120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.375453][ T6123] netlink: 'syz.3.644': attribute type 19 has an invalid length. [ 178.388373][ T6123] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.644'. [ 178.416949][ T6124] delete_channel: no stack [ 178.575896][ T6138] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.648'. [ 178.734544][ T6142] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 179.352599][ T6146] FAULT_INJECTION: forcing a failure. [ 179.352599][ T6146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.409002][ T6146] CPU: 1 PID: 6146 Comm: syz.4.651 Not tainted syzkaller #0 [ 179.416336][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.426400][ T6146] Call Trace: [ 179.429690][ T6146] [ 179.432624][ T6146] dump_stack_lvl+0x188/0x250 [ 179.437315][ T6146] ? show_regs_print_info+0x20/0x20 [ 179.442521][ T6146] ? load_image+0x400/0x400 [ 179.447032][ T6146] ? __lock_acquire+0x7d10/0x7d10 [ 179.452069][ T6146] should_fail+0x38c/0x4c0 [ 179.456500][ T6146] _copy_from_user+0x2e/0x170 [ 179.461188][ T6146] iovec_from_user+0x142/0x370 [ 179.465966][ T6146] __import_iovec+0x70/0x490 [ 179.470574][ T6146] import_iovec+0x6f/0xa0 [ 179.474912][ T6146] ___sys_sendmsg+0x1fd/0x2e0 [ 179.479607][ T6146] ? __sys_sendmsg+0x2a0/0x2a0 [ 179.484391][ T6146] ? trace_event_raw_event_lock+0x270/0x270 [ 179.490290][ T6146] ? vfs_write+0x8b2/0xd60 [ 179.494737][ T6146] __se_sys_sendmsg+0x1af/0x290 [ 179.499598][ T6146] ? __x64_sys_sendmsg+0x80/0x80 [ 179.504539][ T6146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 179.510540][ T6146] ? lockdep_hardirqs_on+0x94/0x140 [ 179.515755][ T6146] do_syscall_64+0x4c/0xa0 [ 179.520179][ T6146] ? clear_bhb_loop+0x30/0x80 [ 179.524866][ T6146] ? clear_bhb_loop+0x30/0x80 [ 179.529547][ T6146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.535444][ T6146] RIP: 0033:0x7f815915fe59 [ 179.539867][ T6146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.559479][ T6146] RSP: 002b:00007f81573b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.567903][ T6146] RAX: ffffffffffffffda RBX: 00007f81593d8fa0 RCX: 00007f815915fe59 [ 179.575886][ T6146] RDX: 0000000020000890 RSI: 00002000000001c0 RDI: 0000000000000003 [ 179.583865][ T6146] RBP: 00007f81573b9090 R08: 0000000000000000 R09: 0000000000000000 [ 179.591843][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.599823][ T6146] R13: 00007f81593d9038 R14: 00007f81593d8fa0 R15: 00007ffc63be88e8 [ 179.607824][ T6146] [ 181.625640][ T6153] netlink: 'syz.1.653': attribute type 2 has an invalid length. [ 181.645429][ T6153] netlink: 'syz.1.653': attribute type 8 has an invalid length. [ 181.655626][ T6153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.653'. [ 181.683742][ T6153] netlink: 'syz.1.653': attribute type 2 has an invalid length. [ 181.695397][ T6153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.653'. [ 181.777671][ T6158] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.855769][ T6163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.094281][ T6173] FAULT_INJECTION: forcing a failure. [ 182.094281][ T6173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.125250][ T6173] CPU: 1 PID: 6173 Comm: syz.3.660 Not tainted syzkaller #0 [ 182.132578][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.142642][ T6173] Call Trace: [ 182.145928][ T6173] [ 182.148864][ T6173] dump_stack_lvl+0x188/0x250 [ 182.153553][ T6173] ? show_regs_print_info+0x20/0x20 [ 182.158763][ T6173] ? load_image+0x400/0x400 [ 182.163276][ T6173] ? __lock_acquire+0x7d10/0x7d10 [ 182.168305][ T6173] should_fail+0x38c/0x4c0 [ 182.172726][ T6173] _copy_to_user+0x2e/0x130 [ 182.177226][ T6173] simple_read_from_buffer+0xe3/0x150 [ 182.182594][ T6173] proc_fail_nth_read+0x1a6/0x220 [ 182.187615][ T6173] ? proc_fault_inject_write+0x310/0x310 [ 182.193240][ T6173] ? fsnotify_perm+0x254/0x560 [ 182.197991][ T6173] ? proc_fault_inject_write+0x310/0x310 [ 182.203615][ T6173] vfs_read+0x301/0xd60 [ 182.207770][ T6173] ? kernel_read+0x1e0/0x1e0 [ 182.212372][ T6173] ? __fget_files+0x40f/0x480 [ 182.217039][ T6173] ? mutex_lock_nested+0x17/0x20 [ 182.221969][ T6173] ? __fdget_pos+0x2bf/0x370 [ 182.226555][ T6173] ? ksys_read+0x71/0x260 [ 182.230887][ T6173] ksys_read+0x152/0x260 [ 182.235138][ T6173] ? vfs_write+0xd60/0xd60 [ 182.239553][ T6173] ? lockdep_hardirqs_on+0x94/0x140 [ 182.244743][ T6173] do_syscall_64+0x4c/0xa0 [ 182.249145][ T6173] ? clear_bhb_loop+0x30/0x80 [ 182.253810][ T6173] ? clear_bhb_loop+0x30/0x80 [ 182.258481][ T6173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.264372][ T6173] RIP: 0033:0x7fb4dd94268e [ 182.268779][ T6173] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.288372][ T6173] RSP: 002b:00007fb4dbbdafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.296774][ T6173] RAX: ffffffffffffffda RBX: 00007fb4dbbdb6c0 RCX: 00007fb4dd94268e [ 182.304732][ T6173] RDX: 000000000000000f RSI: 00007fb4dbbdb0a0 RDI: 0000000000000005 [ 182.312691][ T6173] RBP: 00007fb4dbbdb090 R08: 0000000000000000 R09: 0000000000000000 [ 182.320646][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.328601][ T6173] R13: 00007fb4ddbfb038 R14: 00007fb4ddbfafa0 R15: 00007fffae363d08 [ 182.336570][ T6173] [ 182.460061][ T6167] delete_channel: no stack [ 182.666982][ T6178] validate_nla: 4 callbacks suppressed [ 182.667028][ T6178] netlink: 'syz.1.662': attribute type 19 has an invalid length. [ 182.682700][ T6178] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.662'. [ 182.692821][ T6188] netlink: 'syz.0.664': attribute type 21 has an invalid length. [ 182.778472][ T6191] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.086076][ T6200] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.670'. [ 183.219580][ T6205] netlink: 'syz.1.668': attribute type 9 has an invalid length. [ 183.268455][ T6205] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.668'. [ 183.862828][ T6201] netlink: 'syz.4.669': attribute type 2 has an invalid length. [ 183.881291][ T6201] netlink: 'syz.4.669': attribute type 8 has an invalid length. [ 183.900620][ T6201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.669'. [ 183.927392][ T6203] netlink: 'syz.4.669': attribute type 2 has an invalid length. [ 183.945717][ T6203] netlink: 'syz.4.669': attribute type 8 has an invalid length. [ 183.953781][ T6203] netlink: 132 bytes leftover after parsing attributes in process `syz.4.669'. [ 183.966498][ T6206] netlink: 'syz.4.669': attribute type 10 has an invalid length. [ 183.992731][ T6209] netlink: 'syz.0.671': attribute type 21 has an invalid length. [ 184.015429][ T6209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.223780][ T6223] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 184.236844][ T6222] netlink: 'syz.3.676': attribute type 21 has an invalid length. [ 184.406176][ T6217] delete_channel: no stack [ 184.677806][ T6229] device syzkaller0 entered promiscuous mode [ 185.389470][ T6245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.684'. [ 185.466578][ T6245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.684'. [ 186.073590][ T6257] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.686'. [ 186.188446][ T6254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.387494][ T6263] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 186.791781][ T6260] delete_channel: no stack [ 187.416544][ T6287] netlink: 132 bytes leftover after parsing attributes in process `syz.0.698'. [ 187.473689][ T6288] netlink: 132 bytes leftover after parsing attributes in process `syz.0.698'. [ 188.292065][ T6291] device syzkaller0 entered promiscuous mode [ 188.299175][ T6296] validate_nla: 13 callbacks suppressed [ 188.299192][ T6296] netlink: 'syz.0.701': attribute type 16 has an invalid length. [ 188.343594][ T6296] netlink: 48 bytes leftover after parsing attributes in process `syz.0.701'. [ 188.389705][ T6295] netlink: 'syz.3.700': attribute type 21 has an invalid length. [ 188.411942][ T6295] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.194457][ T6308] FAULT_INJECTION: forcing a failure. [ 191.194457][ T6308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.223965][ T6308] CPU: 1 PID: 6308 Comm: syz.1.704 Not tainted syzkaller #0 [ 191.231288][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.241347][ T6308] Call Trace: [ 191.244625][ T6308] [ 191.247559][ T6308] dump_stack_lvl+0x188/0x250 [ 191.252251][ T6308] ? show_regs_print_info+0x20/0x20 [ 191.257463][ T6308] ? load_image+0x400/0x400 [ 191.261971][ T6308] ? __lock_acquire+0x7d10/0x7d10 [ 191.267008][ T6308] should_fail+0x38c/0x4c0 [ 191.271441][ T6308] _copy_from_user+0x2e/0x170 [ 191.276131][ T6308] iovec_from_user+0x142/0x370 [ 191.280914][ T6308] __import_iovec+0x70/0x490 [ 191.285525][ T6308] import_iovec+0x6f/0xa0 [ 191.289858][ T6308] ___sys_sendmsg+0x1fd/0x2e0 [ 191.294544][ T6308] ? __sys_sendmsg+0x2a0/0x2a0 [ 191.299318][ T6308] ? trace_event_raw_event_lock+0x270/0x270 [ 191.305212][ T6308] ? vfs_write+0x8b2/0xd60 [ 191.309657][ T6308] __se_sys_sendmsg+0x1af/0x290 [ 191.314512][ T6308] ? __x64_sys_sendmsg+0x80/0x80 [ 191.319452][ T6308] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 191.325451][ T6308] ? lockdep_hardirqs_on+0x94/0x140 [ 191.330660][ T6308] do_syscall_64+0x4c/0xa0 [ 191.335077][ T6308] ? clear_bhb_loop+0x30/0x80 [ 191.339751][ T6308] ? clear_bhb_loop+0x30/0x80 [ 191.344433][ T6308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.350327][ T6308] RIP: 0033:0x7fd863b5fe59 [ 191.354741][ T6308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.374344][ T6308] RSP: 002b:00007fd861db9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.382760][ T6308] RAX: ffffffffffffffda RBX: 00007fd863dd8fa0 RCX: 00007fd863b5fe59 [ 191.390732][ T6308] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 191.398702][ T6308] RBP: 00007fd861db9090 R08: 0000000000000000 R09: 0000000000000000 [ 191.406669][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.414638][ T6308] R13: 00007fd863dd9038 R14: 00007fd863dd8fa0 R15: 00007fff0238fb18 [ 191.422627][ T6308] [ 191.430661][ T6303] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.731321][ T6309] delete_channel: no stack [ 191.966189][ T6325] netlink: 'syz.4.712': attribute type 2 has an invalid length. [ 191.975848][ T6325] netlink: 'syz.4.712': attribute type 8 has an invalid length. [ 191.985264][ T6325] netlink: 132 bytes leftover after parsing attributes in process `syz.4.712'. [ 192.019403][ T6325] netlink: 'syz.4.712': attribute type 2 has an invalid length. [ 192.062161][ T6325] netlink: 'syz.4.712': attribute type 8 has an invalid length. [ 192.094832][ T6325] netlink: 132 bytes leftover after parsing attributes in process `syz.4.712'. [ 192.137072][ T6327] netlink: 'syz.4.712': attribute type 10 has an invalid length. [ 192.328823][ T6331] netlink: 'syz.0.714': attribute type 10 has an invalid length. [ 192.557708][ T6336] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 192.587261][ T6337] netlink: 'syz.4.715': attribute type 21 has an invalid length. [ 192.823877][ T6343] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 193.310980][ T6347] delete_channel: no stack [ 193.513860][ T6364] FAULT_INJECTION: forcing a failure. [ 193.513860][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 193.533851][ T6360] netlink: 'syz.0.725': attribute type 2 has an invalid length. [ 193.582489][ T6360] netlink: 'syz.0.725': attribute type 8 has an invalid length. [ 193.624507][ T6364] CPU: 1 PID: 6364 Comm: syz.1.726 Not tainted syzkaller #0 [ 193.631847][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.640731][ T6360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.725'. [ 193.641912][ T6364] Call Trace: [ 193.641926][ T6364] [ 193.641939][ T6364] dump_stack_lvl+0x188/0x250 [ 193.641980][ T6364] ? show_regs_print_info+0x20/0x20 [ 193.642006][ T6364] ? load_image+0x400/0x400 [ 193.642041][ T6364] ? __might_sleep+0xf0/0xf0 [ 193.676044][ T6364] ? __lock_acquire+0x7d10/0x7d10 [ 193.681072][ T6364] ? lockdep_unlock+0x143/0x2e0 [ 193.685919][ T6364] ? lockdep_lock+0x1f0/0x1f0 [ 193.690596][ T6364] should_fail+0x38c/0x4c0 [ 193.695022][ T6364] should_failslab+0x5/0x20 [ 193.699516][ T6364] slab_pre_alloc_hook+0x51/0xc0 [ 193.704455][ T6364] __kmalloc_node+0x6e/0x3b0 [ 193.709037][ T6364] ? bpf_map_area_alloc+0x47/0xe0 [ 193.714067][ T6364] bpf_map_area_alloc+0x47/0xe0 [ 193.718912][ T6364] htab_map_alloc+0x3c3/0x15a0 [ 193.723689][ T6364] ? capable+0x84/0xe0 [ 193.727773][ T6364] ? htab_map_alloc_check+0x3e0/0x4d0 [ 193.733166][ T6364] map_create+0x485/0x2350 [ 193.737602][ T6364] __sys_bpf+0x30a/0x6f0 [ 193.741851][ T6364] ? bpf_link_show_fdinfo+0x380/0x380 [ 193.747236][ T6364] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 193.753509][ T6364] ? vtime_user_exit+0x2c8/0x3e0 [ 193.758462][ T6364] __x64_sys_bpf+0x78/0x90 [ 193.762879][ T6364] do_syscall_64+0x4c/0xa0 [ 193.767293][ T6364] ? clear_bhb_loop+0x30/0x80 [ 193.771965][ T6364] ? clear_bhb_loop+0x30/0x80 [ 193.776644][ T6364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.782538][ T6364] RIP: 0033:0x7fd863b5fe59 [ 193.786983][ T6364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.806590][ T6364] RSP: 002b:00007fd861db9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.815003][ T6364] RAX: ffffffffffffffda RBX: 00007fd863dd8fa0 RCX: 00007fd863b5fe59 [ 193.822969][ T6364] RDX: 0000000000000050 RSI: 0000200000002d00 RDI: 0000000000000000 [ 193.830944][ T6364] RBP: 00007fd861db9090 R08: 0000000000000000 R09: 0000000000000000 [ 193.838906][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.846869][ T6364] R13: 00007fd863dd9038 R14: 00007fd863dd8fa0 R15: 00007fff0238fb18 [ 193.854865][ T6364] [ 193.911136][ T6360] netlink: 'syz.0.725': attribute type 10 has an invalid length. [ 193.947176][ T6368] netlink: 'syz.0.725': attribute type 2 has an invalid length. [ 193.955806][ T6368] netlink: 'syz.0.725': attribute type 8 has an invalid length. [ 193.964386][ T6368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.725'. [ 194.052400][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.058746][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.143067][ T6375] netlink: 'syz.0.730': attribute type 27 has an invalid length. [ 194.225922][ T6375] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 194.240702][ T6375] netlink: 120 bytes leftover after parsing attributes in process `syz.0.730'. [ 194.301993][ T6373] netlink: 'syz.4.729': attribute type 21 has an invalid length. [ 194.528983][ T6385] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 195.281919][ T6400] netlink: 'syz.3.740': attribute type 2 has an invalid length. [ 195.307512][ T6400] netlink: 'syz.3.740': attribute type 8 has an invalid length. [ 195.327436][ T6400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.740'. [ 195.359345][ T6389] delete_channel: no stack [ 195.366096][ T6401] netlink: 132 bytes leftover after parsing attributes in process `syz.3.740'. [ 195.629737][ T6405] netlink: 132 bytes leftover after parsing attributes in process `syz.0.751'. [ 195.649812][ T6405] netlink: 132 bytes leftover after parsing attributes in process `syz.0.751'. [ 196.154045][ T6426] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 196.247252][ T6429] FAULT_INJECTION: forcing a failure. [ 196.247252][ T6429] name failslab, interval 1, probability 0, space 0, times 0 [ 196.309534][ T6429] CPU: 0 PID: 6429 Comm: syz.4.749 Not tainted syzkaller #0 [ 196.316876][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.326951][ T6429] Call Trace: [ 196.330248][ T6429] [ 196.333201][ T6429] dump_stack_lvl+0x188/0x250 [ 196.337911][ T6429] ? show_regs_print_info+0x20/0x20 [ 196.343134][ T6429] ? load_image+0x400/0x400 [ 196.347674][ T6429] ? __might_sleep+0xf0/0xf0 [ 196.352284][ T6429] ? __lock_acquire+0x7d10/0x7d10 [ 196.357347][ T6429] should_fail+0x38c/0x4c0 [ 196.361798][ T6429] should_failslab+0x5/0x20 [ 196.366317][ T6429] slab_pre_alloc_hook+0x51/0xc0 [ 196.371272][ T6429] kmem_cache_alloc_node+0x47/0x2d0 [ 196.376481][ T6429] ? __alloc_skb+0xf4/0x750 [ 196.381018][ T6429] __alloc_skb+0xf4/0x750 [ 196.385391][ T6429] sk_stream_alloc_skb+0x1fa/0xa60 [ 196.390524][ T6429] tcp_sendmsg_locked+0xc31/0x3320 [ 196.395779][ T6429] ? tcp_free_fastopen_req+0x70/0x70 [ 196.401127][ T6429] tcp_sendmsg+0x2b/0x40 [ 196.405383][ T6429] ? inet_send_prepare+0x260/0x260 [ 196.410500][ T6429] ____sys_sendmsg+0x5b7/0x8f0 [ 196.415314][ T6429] ? __sys_sendmsg_sock+0x30/0x30 [ 196.420380][ T6429] ? import_iovec+0x6f/0xa0 [ 196.424903][ T6429] ___sys_sendmsg+0x236/0x2e0 [ 196.429623][ T6429] ? __sys_sendmsg+0x2a0/0x2a0 [ 196.434437][ T6429] ? vfs_write+0x8b2/0xd60 [ 196.438943][ T6429] __se_sys_sendmsg+0x1af/0x290 [ 196.443816][ T6429] ? __x64_sys_sendmsg+0x80/0x80 [ 196.448767][ T6429] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 196.454803][ T6429] ? trace_sys_enter+0x1f/0x80 [ 196.459589][ T6429] do_syscall_64+0x4c/0xa0 [ 196.464016][ T6429] ? clear_bhb_loop+0x30/0x80 [ 196.468708][ T6429] ? clear_bhb_loop+0x30/0x80 [ 196.473402][ T6429] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.479309][ T6429] RIP: 0033:0x7f815915fe59 [ 196.483738][ T6429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.503350][ T6429] RSP: 002b:00007f81573b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.511784][ T6429] RAX: ffffffffffffffda RBX: 00007f81593d8fa0 RCX: 00007f815915fe59 [ 196.519767][ T6429] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000004 [ 196.527761][ T6429] RBP: 00007f81573b9090 R08: 0000000000000000 R09: 0000000000000000 [ 196.535745][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.543726][ T6429] R13: 00007f81593d9038 R14: 00007f81593d8fa0 R15: 00007ffc63be88e8 [ 196.551756][ T6429] [ 199.648919][ T6442] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.829900][ T6456] validate_nla: 9 callbacks suppressed [ 199.829965][ T6456] netlink: 'syz.0.758': attribute type 2 has an invalid length. [ 199.889511][ T6456] netlink: 'syz.0.758': attribute type 8 has an invalid length. [ 199.898194][ T6456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.758'. [ 199.931187][ T6463] netlink: 'syz.0.758': attribute type 2 has an invalid length. [ 199.975122][ T6463] netlink: 'syz.0.758': attribute type 8 has an invalid length. [ 200.004770][ T6463] netlink: 132 bytes leftover after parsing attributes in process `syz.0.758'. [ 200.024562][ T6462] netlink: 'syz.3.761': attribute type 21 has an invalid length. [ 200.059067][ T6456] netlink: 'syz.0.758': attribute type 10 has an invalid length. [ 200.078788][ T6465] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 203.039629][ T6479] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.767'. [ 203.102129][ T6482] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.766'. [ 203.136944][ T6479] netlink: del zone limit has 8 unknown bytes [ 203.246296][ T6479] netlink: 'syz.4.767': attribute type 10 has an invalid length. [ 203.279582][ T6479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.767'. [ 203.337919][ T6479] device team0 entered promiscuous mode [ 203.363908][ T6479] device team_slave_0 entered promiscuous mode [ 203.386951][ T6479] device team_slave_1 entered promiscuous mode [ 203.416220][ T6479] bridge0: port 4(team0) entered blocking state [ 203.456053][ T6479] bridge0: port 4(team0) entered disabled state [ 206.118981][ T6505] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 206.146037][ T6504] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 206.172783][ T6501] netlink: 'syz.3.776': attribute type 21 has an invalid length. [ 206.189699][ T6507] netlink: 'syz.1.778': attribute type 2 has an invalid length. [ 206.232964][ T6507] netlink: 'syz.1.778': attribute type 8 has an invalid length. [ 206.258596][ T6507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.778'. [ 206.305703][ T6511] netlink: 'syz.1.778': attribute type 2 has an invalid length. [ 206.361233][ T6511] netlink: 'syz.1.778': attribute type 8 has an invalid length. [ 206.404924][ T6511] netlink: 132 bytes leftover after parsing attributes in process `syz.1.778'. [ 206.481463][ T6507] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 209.623332][ T6548] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 212.622071][ T6553] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 212.677651][ T6555] netlink: 'syz.0.791': attribute type 21 has an invalid length. [ 212.783948][ T6565] netlink: 'syz.2.797': attribute type 2 has an invalid length. [ 212.811831][ T6565] netlink: 'syz.2.797': attribute type 8 has an invalid length. [ 212.848348][ T6565] netlink: 132 bytes leftover after parsing attributes in process `syz.2.797'. [ 212.886433][ T6568] netlink: 'syz.2.797': attribute type 2 has an invalid length. [ 212.902462][ T6568] netlink: 'syz.2.797': attribute type 8 has an invalid length. [ 212.932465][ T6568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.797'. [ 212.996035][ T6565] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 213.409964][ T6581] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 216.211827][ T6599] netlink: 'syz.1.803': attribute type 19 has an invalid length. [ 216.234432][ T6599] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.803'. [ 216.399903][ T6605] netlink: 'syz.0.809': attribute type 21 has an invalid length. [ 219.076072][ T6618] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 219.278138][ T6622] netlink: 'syz.4.815': attribute type 2 has an invalid length. [ 219.297751][ T6622] netlink: 'syz.4.815': attribute type 8 has an invalid length. [ 219.327237][ T6622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.815'. [ 219.355677][ T6622] netlink: 'syz.4.815': attribute type 2 has an invalid length. [ 219.385164][ T6622] netlink: 'syz.4.815': attribute type 8 has an invalid length. [ 219.457893][ T6622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.815'. [ 219.489417][ T6630] netlink: 'syz.4.815': attribute type 10 has an invalid length. [ 219.847657][ T6650] netlink: 'syz.1.824': attribute type 21 has an invalid length. [ 222.813714][ T6658] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 223.209073][ T6672] netlink: 'syz.0.831': attribute type 19 has an invalid length. [ 223.226153][ T6672] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.831'. [ 223.291711][ T6677] netlink: 'syz.4.832': attribute type 2 has an invalid length. [ 223.325635][ T6677] netlink: 'syz.4.832': attribute type 8 has an invalid length. [ 223.336849][ T6677] netlink: 132 bytes leftover after parsing attributes in process `syz.4.832'. [ 223.352776][ T6683] netlink: 'syz.4.832': attribute type 2 has an invalid length. [ 223.375383][ T6683] netlink: 132 bytes leftover after parsing attributes in process `syz.4.832'. [ 223.389125][ T6682] FAULT_INJECTION: forcing a failure. [ 223.389125][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 223.413419][ T6682] CPU: 0 PID: 6682 Comm: syz.1.834 Not tainted syzkaller #0 [ 223.420767][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.430826][ T6682] Call Trace: [ 223.434107][ T6682] [ 223.437033][ T6682] dump_stack_lvl+0x188/0x250 [ 223.441716][ T6682] ? show_regs_print_info+0x20/0x20 [ 223.446915][ T6682] ? load_image+0x400/0x400 [ 223.451423][ T6682] ? __might_sleep+0xf0/0xf0 [ 223.456017][ T6682] ? __lock_acquire+0x7d10/0x7d10 [ 223.461060][ T6682] should_fail+0x38c/0x4c0 [ 223.465525][ T6682] should_failslab+0x5/0x20 [ 223.470029][ T6682] slab_pre_alloc_hook+0x51/0xc0 [ 223.474973][ T6682] kmem_cache_alloc_node+0x47/0x2d0 [ 223.480176][ T6682] ? __alloc_skb+0xf4/0x750 [ 223.484695][ T6682] __alloc_skb+0xf4/0x750 [ 223.489033][ T6682] sk_stream_alloc_skb+0x1fa/0xa60 [ 223.494156][ T6682] tcp_sendmsg_locked+0xc31/0x3320 [ 223.499320][ T6682] ? tcp_free_fastopen_req+0x70/0x70 [ 223.504624][ T6682] tcp_sendmsg+0x2b/0x40 [ 223.508868][ T6682] ? inet_send_prepare+0x260/0x260 [ 223.513989][ T6682] ____sys_sendmsg+0x5b7/0x8f0 [ 223.518767][ T6682] ? __sys_sendmsg_sock+0x30/0x30 [ 223.523809][ T6682] ? import_iovec+0x6f/0xa0 [ 223.528327][ T6682] ___sys_sendmsg+0x236/0x2e0 [ 223.533022][ T6682] ? __sys_sendmsg+0x2a0/0x2a0 [ 223.537832][ T6682] __se_sys_sendmsg+0x1af/0x290 [ 223.542693][ T6682] ? __x64_sys_sendmsg+0x80/0x80 [ 223.547633][ T6682] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 223.553642][ T6682] ? lockdep_hardirqs_on+0x94/0x140 [ 223.558848][ T6682] do_syscall_64+0x4c/0xa0 [ 223.563269][ T6682] ? clear_bhb_loop+0x30/0x80 [ 223.567948][ T6682] ? clear_bhb_loop+0x30/0x80 [ 223.572630][ T6682] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.578526][ T6682] RIP: 0033:0x7fd863b5fe59 [ 223.582945][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.602556][ T6682] RSP: 002b:00007fd861db9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.610978][ T6682] RAX: ffffffffffffffda RBX: 00007fd863dd8fa0 RCX: 00007fd863b5fe59 [ 223.618958][ T6682] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000007 [ 223.626926][ T6682] RBP: 00007fd861db9090 R08: 0000000000000000 R09: 0000000000000000 [ 223.634891][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.642853][ T6682] R13: 00007fd863dd9038 R14: 00007fd863dd8fa0 R15: 00007fff0238fb18 [ 223.650824][ T6682] [ 223.987472][ T6699] FAULT_INJECTION: forcing a failure. [ 223.987472][ T6699] name failslab, interval 1, probability 0, space 0, times 0 [ 224.059362][ T6699] CPU: 0 PID: 6699 Comm: syz.1.838 Not tainted syzkaller #0 [ 224.066693][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.076758][ T6699] Call Trace: [ 224.080046][ T6699] [ 224.082981][ T6699] dump_stack_lvl+0x188/0x250 [ 224.087672][ T6699] ? show_regs_print_info+0x20/0x20 [ 224.092880][ T6699] ? load_image+0x400/0x400 [ 224.097393][ T6699] ? __might_sleep+0xf0/0xf0 [ 224.101990][ T6699] ? __lock_acquire+0x7d10/0x7d10 [ 224.107020][ T6699] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 224.113009][ T6699] should_fail+0x38c/0x4c0 [ 224.117444][ T6699] should_failslab+0x5/0x20 [ 224.121951][ T6699] slab_pre_alloc_hook+0x51/0xc0 [ 224.126895][ T6699] kmem_cache_alloc_node+0x47/0x2d0 [ 224.132095][ T6699] ? __alloc_skb+0xf4/0x750 [ 224.136616][ T6699] __alloc_skb+0xf4/0x750 [ 224.140956][ T6699] sk_stream_alloc_skb+0x1fa/0xa60 [ 224.146073][ T6699] tcp_sendmsg_locked+0xc31/0x3320 [ 224.151242][ T6699] ? tcp_free_fastopen_req+0x70/0x70 [ 224.156568][ T6699] tcp_sendmsg+0x2b/0x40 [ 224.160814][ T6699] ? inet_send_prepare+0x260/0x260 [ 224.165930][ T6699] ____sys_sendmsg+0x5b7/0x8f0 [ 224.170714][ T6699] ? __sys_sendmsg_sock+0x30/0x30 [ 224.175760][ T6699] ? import_iovec+0x6f/0xa0 [ 224.180307][ T6699] ___sys_sendmsg+0x236/0x2e0 [ 224.185010][ T6699] ? __sys_sendmsg+0x2a0/0x2a0 [ 224.189827][ T6699] __se_sys_sendmsg+0x1af/0x290 [ 224.194685][ T6699] ? __x64_sys_sendmsg+0x80/0x80 [ 224.199625][ T6699] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 224.205626][ T6699] ? lockdep_hardirqs_on+0x94/0x140 [ 224.210837][ T6699] do_syscall_64+0x4c/0xa0 [ 224.215254][ T6699] ? clear_bhb_loop+0x30/0x80 [ 224.219934][ T6699] ? clear_bhb_loop+0x30/0x80 [ 224.224622][ T6699] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.230519][ T6699] RIP: 0033:0x7fd863b5fe59 [ 224.234940][ T6699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.254549][ T6699] RSP: 002b:00007fd861d98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.262973][ T6699] RAX: ffffffffffffffda RBX: 00007fd863dd9090 RCX: 00007fd863b5fe59 [ 224.271072][ T6699] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 224.279057][ T6699] RBP: 00007fd861d98090 R08: 0000000000000000 R09: 0000000000000000 [ 224.287038][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.295019][ T6699] R13: 00007fd863dd9128 R14: 00007fd863dd9090 R15: 00007fff0238fb18 [ 224.303013][ T6699] [ 227.011423][ T6707] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 227.077025][ T6711] validate_nla: 3 callbacks suppressed [ 227.077067][ T6711] netlink: 'syz.2.852': attribute type 2 has an invalid length. [ 227.131742][ T6711] netlink: 'syz.2.852': attribute type 8 has an invalid length. [ 227.139527][ T6711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.852'. [ 227.169886][ T6718] netlink: 'syz.2.852': attribute type 2 has an invalid length. [ 227.203403][ T6718] netlink: 'syz.2.852': attribute type 8 has an invalid length. [ 227.236255][ T6718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.852'. [ 227.312038][ T6711] netlink: 'syz.2.852': attribute type 10 has an invalid length. [ 227.387481][ T6728] netlink: 'syz.1.848': attribute type 21 has an invalid length. [ 227.601374][ T6738] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.851'. [ 228.259742][ T6758] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 228.595740][ T6763] netlink: 'syz.3.859': attribute type 9 has an invalid length. [ 228.644571][ T6763] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.859'. [ 230.712711][ T6766] FAULT_INJECTION: forcing a failure. [ 230.712711][ T6766] name failslab, interval 1, probability 0, space 0, times 0 [ 230.731527][ T6766] CPU: 0 PID: 6766 Comm: syz.2.860 Not tainted syzkaller #0 [ 230.738837][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.748890][ T6766] Call Trace: [ 230.752168][ T6766] [ 230.755098][ T6766] dump_stack_lvl+0x188/0x250 [ 230.759789][ T6766] ? show_regs_print_info+0x20/0x20 [ 230.764990][ T6766] ? load_image+0x400/0x400 [ 230.769500][ T6766] ? __might_sleep+0xf0/0xf0 [ 230.774096][ T6766] ? __lock_acquire+0x7d10/0x7d10 [ 230.779130][ T6766] should_fail+0x38c/0x4c0 [ 230.783558][ T6766] should_failslab+0x5/0x20 [ 230.788065][ T6766] slab_pre_alloc_hook+0x51/0xc0 [ 230.788183][ T6768] netlink: 'syz.0.861': attribute type 2 has an invalid length. [ 230.793007][ T6766] kmem_cache_alloc_trace+0x47/0x2a0 [ 230.793027][ T6766] ? __request_module+0x300/0x980 [ 230.793048][ T6766] __request_module+0x300/0x980 [ 230.793070][ T6766] ? umd_cleanup+0x110/0x110 [ 230.793098][ T6766] ? __lock_acquire+0x7d10/0x7d10 [ 230.793121][ T6766] ? rcu_lock_release+0x5/0x20 [ 230.793145][ T6766] inet6_create+0x425/0x1170 [ 230.793172][ T6766] __sock_create+0x47b/0x900 [ 230.806069][ T6768] netlink: 'syz.0.861': attribute type 8 has an invalid length. [ 230.811073][ T6766] __sys_socket+0xe2/0x170 [ 230.811098][ T6766] __x64_sys_socket+0x76/0x80 [ 230.811118][ T6766] do_syscall_64+0x4c/0xa0 [ 230.811137][ T6766] ? clear_bhb_loop+0x30/0x80 [ 230.811155][ T6766] ? clear_bhb_loop+0x30/0x80 [ 230.811173][ T6766] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.811192][ T6766] RIP: 0033:0x7f56313b7e59 [ 230.811209][ T6766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.811225][ T6766] RSP: 002b:00007f562f611028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 230.811245][ T6766] RAX: ffffffffffffffda RBX: 00007f5631630fa0 RCX: 00007f56313b7e59 [ 230.811259][ T6766] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000000a [ 230.818741][ T6768] netlink: 132 bytes leftover after parsing attributes in process `syz.0.861'. [ 230.820661][ T6766] RBP: 00007f562f611090 R08: 0000000000000000 R09: 0000000000000000 [ 230.820676][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.820687][ T6766] R13: 00007f5631631038 R14: 00007f5631630fa0 R15: 00007fff2f044b18 [ 230.820712][ T6766] [ 230.981286][ T6770] netlink: 'syz.0.861': attribute type 2 has an invalid length. [ 230.989523][ T6770] netlink: 132 bytes leftover after parsing attributes in process `syz.0.861'. [ 231.211554][ T6779] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.865'. [ 231.300134][ T6785] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.867'. [ 231.353845][ T6787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.376457][ T6793] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.602431][ T6802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.877'. [ 231.651460][ T6802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.877'. [ 232.295846][ T6819] validate_nla: 9 callbacks suppressed [ 232.295875][ T6819] netlink: 'syz.2.878': attribute type 21 has an invalid length. [ 234.637190][ T6823] netlink: 'syz.3.880': attribute type 21 has an invalid length. [ 234.726580][ T6835] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.885'. [ 234.741768][ T6833] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 234.784783][ T6832] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.884'. [ 234.919548][ T6842] netlink: 'syz.0.889': attribute type 2 has an invalid length. [ 234.956057][ T6842] netlink: 'syz.0.889': attribute type 8 has an invalid length. [ 235.017481][ T6842] netlink: 132 bytes leftover after parsing attributes in process `syz.0.889'. [ 235.036669][ T6847] netlink: 'syz.0.889': attribute type 2 has an invalid length. [ 235.068200][ T6847] netlink: 'syz.0.889': attribute type 8 has an invalid length. [ 235.101789][ T6847] netlink: 132 bytes leftover after parsing attributes in process `syz.0.889'. [ 235.141134][ T6846] netlink: 'syz.3.891': attribute type 21 has an invalid length. [ 235.198499][ T6842] netlink: 'syz.0.889': attribute type 10 has an invalid length. [ 235.218005][ T6853] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 235.255525][ T6853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.236869][ T6868] netlink: 'syz.0.897': attribute type 21 has an invalid length. [ 238.339538][ T6873] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.899'. [ 238.406530][ T6876] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 238.446381][ T6880] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.903'. [ 238.602725][ T6886] netlink: 'syz.2.905': attribute type 21 has an invalid length. [ 238.633867][ T6886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.816253][ T6893] netlink: 'syz.0.907': attribute type 2 has an invalid length. [ 238.922854][ T6893] netlink: 'syz.0.907': attribute type 8 has an invalid length. [ 238.960616][ T6893] netlink: 132 bytes leftover after parsing attributes in process `syz.0.907'. [ 239.081641][ T6894] netlink: 'syz.0.907': attribute type 2 has an invalid length. [ 239.104085][ T6894] netlink: 'syz.0.907': attribute type 8 has an invalid length. [ 239.124889][ T6894] netlink: 132 bytes leftover after parsing attributes in process `syz.0.907'. [ 239.186165][ T6901] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 239.199045][ T6905] netlink: 'syz.4.910': attribute type 21 has an invalid length. [ 241.701649][ T6917] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.915'. [ 241.853576][ T6921] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 241.923793][ T6931] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.917'. [ 242.182185][ T6937] netlink: 'syz.4.924': attribute type 21 has an invalid length. [ 242.219804][ T6937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.405390][ T6950] netlink: 'syz.2.928': attribute type 2 has an invalid length. [ 242.435303][ T6950] netlink: 132 bytes leftover after parsing attributes in process `syz.2.928'. [ 242.456588][ T6953] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.929'. [ 242.466137][ T6954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.928'. [ 242.817647][ T6960] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 245.758335][ T6981] validate_nla: 5 callbacks suppressed [ 245.758377][ T6981] netlink: 'syz.4.949': attribute type 2 has an invalid length. [ 245.787840][ T6981] netlink: 'syz.4.949': attribute type 8 has an invalid length. [ 245.796040][ T6981] netlink: 132 bytes leftover after parsing attributes in process `syz.4.949'. [ 245.819368][ T6981] netlink: 'syz.4.949': attribute type 2 has an invalid length. [ 245.831684][ T6981] netlink: 'syz.4.949': attribute type 8 has an invalid length. [ 245.839575][ T6981] netlink: 132 bytes leftover after parsing attributes in process `syz.4.949'. [ 245.920649][ T6983] netlink: 'syz.4.949': attribute type 10 has an invalid length. [ 246.038050][ T6994] FAULT_INJECTION: forcing a failure. [ 246.038050][ T6994] name failslab, interval 1, probability 0, space 0, times 0 [ 246.056258][ T6994] CPU: 1 PID: 6994 Comm: syz.2.941 Not tainted syzkaller #0 [ 246.063561][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.073611][ T6994] Call Trace: [ 246.076882][ T6994] [ 246.079803][ T6994] dump_stack_lvl+0x188/0x250 [ 246.084477][ T6994] ? show_regs_print_info+0x20/0x20 [ 246.089669][ T6994] ? load_image+0x400/0x400 [ 246.094167][ T6994] ? __might_sleep+0xf0/0xf0 [ 246.098750][ T6994] ? __lock_acquire+0x7d10/0x7d10 [ 246.103775][ T6994] should_fail+0x38c/0x4c0 [ 246.108192][ T6994] should_failslab+0x5/0x20 [ 246.112688][ T6994] slab_pre_alloc_hook+0x51/0xc0 [ 246.117622][ T6994] kmem_cache_alloc_node+0x47/0x2d0 [ 246.122815][ T6994] ? __alloc_skb+0xf4/0x750 [ 246.127317][ T6994] __alloc_skb+0xf4/0x750 [ 246.131644][ T6994] sk_stream_alloc_skb+0x1fa/0xa60 [ 246.136751][ T6994] tcp_sendmsg_locked+0xc31/0x3320 [ 246.141867][ T6994] ? __lock_acquire+0x12e8/0x7d10 [ 246.146911][ T6994] ? tcp_free_fastopen_req+0x70/0x70 [ 246.152207][ T6994] tcp_sendmsg+0x2b/0x40 [ 246.156453][ T6994] ? inet_send_prepare+0x260/0x260 [ 246.161560][ T6994] ____sys_sendmsg+0x5b7/0x8f0 [ 246.166341][ T6994] ? __sys_sendmsg_sock+0x30/0x30 [ 246.171371][ T6994] ? import_iovec+0x6f/0xa0 [ 246.175871][ T6994] ___sys_sendmsg+0x236/0x2e0 [ 246.180552][ T6994] ? __sys_sendmsg+0x2a0/0x2a0 [ 246.185362][ T6994] __se_sys_sendmsg+0x1af/0x290 [ 246.190209][ T6994] ? __x64_sys_sendmsg+0x80/0x80 [ 246.195139][ T6994] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 246.201128][ T6994] ? lockdep_hardirqs_on+0x94/0x140 [ 246.206327][ T6994] do_syscall_64+0x4c/0xa0 [ 246.210733][ T6994] ? clear_bhb_loop+0x30/0x80 [ 246.215411][ T6994] ? clear_bhb_loop+0x30/0x80 [ 246.220097][ T6994] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.225987][ T6994] RIP: 0033:0x7f56313b7e59 [ 246.230403][ T6994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.250003][ T6994] RSP: 002b:00007f562f5f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.258420][ T6994] RAX: ffffffffffffffda RBX: 00007f5631631090 RCX: 00007f56313b7e59 [ 246.266388][ T6994] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000007 [ 246.274353][ T6994] RBP: 00007f562f5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 246.282317][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.290277][ T6994] R13: 00007f5631631128 R14: 00007f5631631090 R15: 00007fff2f044b18 [ 246.298258][ T6994] [ 248.539896][ T7007] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 248.575552][ T7005] netlink: 'syz.4.944': attribute type 21 has an invalid length. [ 248.602623][ T7004] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.943'. [ 248.912798][ T7016] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.952'. [ 251.685235][ T7032] FAULT_INJECTION: forcing a failure. [ 251.685235][ T7032] name failslab, interval 1, probability 0, space 0, times 0 [ 251.754203][ T7032] CPU: 1 PID: 7032 Comm: syz.2.957 Not tainted syzkaller #0 [ 251.761526][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.771580][ T7032] Call Trace: [ 251.774852][ T7032] [ 251.777772][ T7032] dump_stack_lvl+0x188/0x250 [ 251.782450][ T7032] ? show_regs_print_info+0x20/0x20 [ 251.787645][ T7032] ? load_image+0x400/0x400 [ 251.792141][ T7032] ? __might_sleep+0xf0/0xf0 [ 251.796719][ T7032] ? __lock_acquire+0x7d10/0x7d10 [ 251.801740][ T7032] should_fail+0x38c/0x4c0 [ 251.806150][ T7032] should_failslab+0x5/0x20 [ 251.810660][ T7032] slab_pre_alloc_hook+0x51/0xc0 [ 251.815586][ T7032] kmem_cache_alloc_trace+0x47/0x2a0 [ 251.820856][ T7032] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 251.826211][ T7032] ? mark_lock+0x94/0x320 [ 251.830527][ T7032] tcp_sendmsg_fastopen+0x1d5/0x600 [ 251.835714][ T7032] tcp_sendmsg_locked+0x2efa/0x3320 [ 251.840897][ T7032] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 251.847037][ T7032] ? lockdep_hardirqs_on+0x94/0x140 [ 251.852220][ T7032] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 251.858364][ T7032] ? mark_lock+0x94/0x320 [ 251.862679][ T7032] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 251.868649][ T7032] ? lock_chain_count+0x20/0x20 [ 251.873485][ T7032] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 251.879456][ T7032] ? tcp_free_fastopen_req+0x70/0x70 [ 251.884735][ T7032] tcp_sendmsg+0x2b/0x40 [ 251.888961][ T7032] ? inet_send_prepare+0x260/0x260 [ 251.894062][ T7032] ____sys_sendmsg+0x5b7/0x8f0 [ 251.898819][ T7032] ? __sys_sendmsg_sock+0x30/0x30 [ 251.903835][ T7032] ? import_iovec+0x6f/0xa0 [ 251.908333][ T7032] ___sys_sendmsg+0x236/0x2e0 [ 251.913001][ T7032] ? __sys_sendmsg+0x2a0/0x2a0 [ 251.917782][ T7032] __se_sys_sendmsg+0x1af/0x290 [ 251.922621][ T7032] ? __x64_sys_sendmsg+0x80/0x80 [ 251.927540][ T7032] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 251.933517][ T7032] ? lockdep_hardirqs_on+0x94/0x140 [ 251.938708][ T7032] do_syscall_64+0x4c/0xa0 [ 251.943104][ T7032] ? clear_bhb_loop+0x30/0x80 [ 251.947765][ T7032] ? clear_bhb_loop+0x30/0x80 [ 251.952429][ T7032] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.958310][ T7032] RIP: 0033:0x7f56313b7e59 [ 251.962715][ T7032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.982305][ T7032] RSP: 002b:00007f562f5f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.990705][ T7032] RAX: ffffffffffffffda RBX: 00007f5631631090 RCX: 00007f56313b7e59 [ 251.998662][ T7032] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 000000000000000c [ 252.006624][ T7032] RBP: 00007f562f5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 252.014578][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.022532][ T7032] R13: 00007f5631631128 R14: 00007f5631631090 R15: 00007fff2f044b18 [ 252.030501][ T7032] [ 252.064614][ T7035] netlink: 'syz.3.958': attribute type 2 has an invalid length. [ 252.075589][ T7035] netlink: 'syz.3.958': attribute type 8 has an invalid length. [ 252.092734][ T7035] netlink: 132 bytes leftover after parsing attributes in process `syz.3.958'. [ 252.115885][ T7035] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 252.362689][ T7054] netlink: 'syz.0.961': attribute type 21 has an invalid length. [ 252.530374][ T7061] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 252.704305][ T7069] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.969'. [ 255.491949][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.498307][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.761912][ T7076] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.971'. [ 255.766855][ T7080] netlink: 'syz.3.973': attribute type 2 has an invalid length. [ 255.831449][ T7080] netlink: 'syz.3.973': attribute type 8 has an invalid length. [ 255.867505][ T7080] netlink: 132 bytes leftover after parsing attributes in process `syz.3.973'. [ 255.918851][ T7088] netlink: 'syz.3.973': attribute type 10 has an invalid length. [ 258.817544][ T7102] netlink: 'syz.1.977': attribute type 21 has an invalid length. [ 258.856616][ T7110] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 259.165634][ T7127] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.986'. [ 259.481923][ T7137] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.988'. [ 259.598560][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.029366][ T7140] netlink: 'syz.2.989': attribute type 2 has an invalid length. [ 262.072476][ T7140] netlink: 'syz.2.989': attribute type 8 has an invalid length. [ 262.097109][ T7146] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.992'. [ 262.104710][ T7140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.989'. [ 262.226147][ T7140] netlink: 'syz.2.989': attribute type 10 has an invalid length. [ 262.253539][ T7155] netlink: 'syz.1.994': attribute type 21 has an invalid length. [ 264.285731][ T7159] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 264.431716][ T7174] netlink: 144 bytes leftover after parsing attributes in process `syz.3.999'. [ 264.529069][ T7174] team0: Port device team_slave_0 removed [ 264.566077][ T7179] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1001'. [ 264.631228][ T7174] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 267.704155][ T7220] netlink: 'syz.1.1010': attribute type 2 has an invalid length. [ 267.712936][ T7220] netlink: 'syz.1.1010': attribute type 8 has an invalid length. [ 267.721831][ T7220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1010'. [ 267.736687][ T7220] netlink: 'syz.1.1010': attribute type 10 has an invalid length. [ 267.780065][ T7223] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 267.863233][ T7227] netlink: 'syz.4.1012': attribute type 21 has an invalid length. [ 267.965777][ T7235] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1016'. [ 268.046723][ T7239] netlink: 'syz.1.1028': attribute type 2 has an invalid length. [ 268.068923][ T7239] netlink: 'syz.1.1028': attribute type 8 has an invalid length. [ 268.126860][ T7239] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1028'. [ 268.145304][ T7245] netlink: 'syz.1.1028': attribute type 10 has an invalid length. [ 273.179014][ T7278] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 273.356117][ T7286] netlink: 'syz.3.1030': attribute type 21 has an invalid length. [ 273.384585][ T7289] netlink: 'syz.1.1032': attribute type 2 has an invalid length. [ 273.403335][ T7289] netlink: 'syz.1.1032': attribute type 8 has an invalid length. [ 273.406965][ T7290] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1031'. [ 273.441314][ T7289] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1032'. [ 273.509624][ T7289] netlink: 'syz.1.1032': attribute type 10 has an invalid length. [ 273.609012][ T7300] netlink: 'syz.3.1036': attribute type 21 has an invalid length. [ 273.655771][ T7300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.702675][ T7302] netlink: 'syz.2.1035': attribute type 19 has an invalid length. [ 273.718886][ T7302] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.1035'. [ 277.061118][ T7324] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 277.238740][ T7329] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1045'. [ 277.276623][ T7329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.322446][ T7335] netlink: 'syz.2.1047': attribute type 21 has an invalid length. [ 277.473090][ T7341] netlink: 'syz.0.1049': attribute type 2 has an invalid length. [ 277.493290][ T7341] netlink: 'syz.0.1049': attribute type 8 has an invalid length. [ 277.513346][ T7341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1049'. [ 277.538925][ T7339] netlink: 'syz.1.1048': attribute type 21 has an invalid length. [ 277.567727][ T7339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.616222][ T7343] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1050'. [ 277.628891][ T7343] netlink: 6320 bytes leftover after parsing attributes in process `syz.4.1050'. [ 280.680816][ T7362] validate_nla: 1 callbacks suppressed [ 280.680854][ T7362] netlink: 'syz.0.1065': attribute type 2 has an invalid length. [ 280.718417][ T7362] netlink: 'syz.0.1065': attribute type 8 has an invalid length. [ 280.727760][ T7362] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1065'. [ 280.779054][ T7362] netlink: 'syz.0.1065': attribute type 10 has an invalid length. [ 280.856543][ T7356] netlink: 'syz.1.1053': attribute type 19 has an invalid length. [ 280.866106][ T7356] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.1053'. [ 280.877386][ T7371] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 281.034676][ T7379] netlink: 'syz.4.1061': attribute type 21 has an invalid length. [ 281.118298][ T7384] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1063'. [ 284.212758][ T7403] netlink: 'syz.0.1071': attribute type 2 has an invalid length. [ 284.271115][ T7403] netlink: 'syz.0.1071': attribute type 8 has an invalid length. [ 284.278997][ T7403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1071'. [ 284.368984][ T7411] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 284.420720][ T7412] netlink: 'syz.0.1071': attribute type 10 has an invalid length. [ 284.428747][ T7419] netlink: 'syz.3.1075': attribute type 19 has an invalid length. [ 284.441221][ T7419] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.1075'. [ 284.649229][ T7425] netlink: 'syz.1.1076': attribute type 21 has an invalid length. [ 284.933941][ T7438] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1081'. [ 284.957848][ T7436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.772778][ T7447] FAULT_INJECTION: forcing a failure. [ 287.772778][ T7447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.805993][ T7447] CPU: 0 PID: 7447 Comm: syz.3.1084 Not tainted syzkaller #0 [ 287.813399][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.823452][ T7447] Call Trace: [ 287.826734][ T7447] [ 287.829672][ T7447] dump_stack_lvl+0x188/0x250 [ 287.834360][ T7447] ? show_regs_print_info+0x20/0x20 [ 287.839565][ T7447] ? load_image+0x400/0x400 [ 287.839739][ T7453] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 287.844072][ T7447] ? __lock_acquire+0x7d10/0x7d10 [ 287.844101][ T7447] should_fail+0x38c/0x4c0 [ 287.844126][ T7447] _copy_from_user+0x2e/0x170 [ 287.844146][ T7447] bpf_test_init+0x136/0x1b0 [ 287.844168][ T7447] bpf_prog_test_run_skb+0x181/0x10b0 [ 287.844187][ T7447] ? __fget_files+0x40f/0x480 [ 287.844214][ T7447] ? cpu_online+0x60/0x60 [ 287.844232][ T7447] bpf_prog_test_run+0x31e/0x390 [ 287.844254][ T7447] __sys_bpf+0x5a5/0x6f0 [ 287.844275][ T7447] ? bpf_link_show_fdinfo+0x380/0x380 [ 287.844304][ T7447] ? vtime_user_exit+0x2c8/0x3e0 [ 287.844330][ T7447] __x64_sys_bpf+0x78/0x90 [ 287.844350][ T7447] do_syscall_64+0x4c/0xa0 [ 287.844368][ T7447] ? clear_bhb_loop+0x30/0x80 [ 287.919161][ T7447] ? clear_bhb_loop+0x30/0x80 [ 287.923856][ T7447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.929760][ T7447] RIP: 0033:0x7fb4dd981e59 [ 287.934179][ T7447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.953794][ T7447] RSP: 002b:00007fb4dbbdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.962226][ T7447] RAX: ffffffffffffffda RBX: 00007fb4ddbfafa0 RCX: 00007fb4dd981e59 [ 287.970201][ T7447] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 287.978179][ T7447] RBP: 00007fb4dbbdb090 R08: 0000000000000000 R09: 0000000000000000 [ 287.986150][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.994122][ T7447] R13: 00007fb4ddbfb038 R14: 00007fb4ddbfafa0 R15: 00007fffae363d08 [ 288.002105][ T7447] [ 288.057913][ T7457] validate_nla: 1 callbacks suppressed [ 288.057958][ T7457] netlink: 'syz.4.1088': attribute type 2 has an invalid length. [ 288.106413][ T7457] netlink: 'syz.4.1088': attribute type 8 has an invalid length. [ 288.116599][ T7457] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1088'. [ 288.172175][ T7460] netlink: 'syz.0.1089': attribute type 19 has an invalid length. [ 288.191860][ T7460] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1089'. [ 288.213342][ T7464] netlink: 'syz.4.1088': attribute type 10 has an invalid length. [ 288.244946][ T7466] netlink: 'syz.2.1091': attribute type 21 has an invalid length. [ 288.391014][ T7474] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1093'. [ 288.429216][ T7474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.496795][ T7480] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 288.537022][ T7479] netlink: 'syz.4.1094': attribute type 21 has an invalid length. [ 288.579421][ T7479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.370537][ T7504] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 291.438215][ T7508] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1102'. [ 291.484071][ T7513] netlink: 'syz.1.1104': attribute type 2 has an invalid length. [ 291.515141][ T7513] netlink: 'syz.1.1104': attribute type 8 has an invalid length. [ 291.545196][ T7513] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1104'. [ 291.606414][ T7521] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 291.736402][ T7526] netlink: 'syz.2.1107': attribute type 21 has an invalid length. [ 291.860748][ T7525] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.1106'. [ 293.146496][ T7536] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1112'. [ 293.209835][ T7543] validate_nla: 1 callbacks suppressed [ 293.209868][ T7543] netlink: 'syz.2.1115': attribute type 21 has an invalid length. [ 293.263809][ T7543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.289515][ T7545] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 296.222058][ T7567] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 296.238851][ T7568] netlink: 'syz.3.1122': attribute type 2 has an invalid length. [ 296.255090][ T7567] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1121'. [ 296.277633][ T7568] netlink: 'syz.3.1122': attribute type 8 has an invalid length. [ 296.291233][ T7568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1122'. [ 296.307717][ T7570] netlink: 'syz.4.1123': attribute type 21 has an invalid length. [ 296.334193][ T7568] netlink: 'syz.3.1122': attribute type 10 has an invalid length. [ 296.462244][ T7581] netlink: 'syz.2.1124': attribute type 19 has an invalid length. [ 296.470105][ T7581] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.1124'. [ 296.776979][ T7596] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 296.809354][ T7594] netlink: 'syz.2.1132': attribute type 21 has an invalid length. [ 296.832567][ T7594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.782137][ T7609] netlink: 'syz.1.1136': attribute type 21 has an invalid length. [ 299.915887][ T7617] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1139'. [ 299.984441][ T7623] netlink: 'syz.0.1141': attribute type 2 has an invalid length. [ 300.020609][ T7623] netlink: 'syz.0.1141': attribute type 8 has an invalid length. [ 300.038030][ T7623] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1141'. [ 300.049340][ T7624] netlink: 'syz.1.1142': attribute type 19 has an invalid length. [ 300.059356][ T7624] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.1142'. [ 300.069657][ T7628] netlink: 'syz.0.1141': attribute type 10 has an invalid length. [ 300.376755][ T7637] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 303.453707][ T7655] netlink: 'syz.1.1153': attribute type 21 has an invalid length. [ 303.474688][ T7656] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1154'. [ 303.538662][ T7659] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1155'. [ 303.615809][ T7663] netlink: 'syz.2.1156': attribute type 19 has an invalid length. [ 303.641032][ T7663] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.1156'. [ 303.768866][ T7667] netlink: 'syz.1.1157': attribute type 2 has an invalid length. [ 303.848849][ T7667] netlink: 'syz.1.1157': attribute type 8 has an invalid length. [ 303.888905][ T7667] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1157'. [ 306.789421][ T7673] netlink: 'syz.1.1157': attribute type 10 has an invalid length. [ 306.799594][ T7678] netlink: 'syz.4.1160': attribute type 21 has an invalid length. [ 309.966935][ T7706] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1168'. [ 309.983317][ T7704] netlink: 'syz.3.1167': attribute type 21 has an invalid length. [ 310.169138][ T7714] netlink: 'syz.4.1182': attribute type 21 has an invalid length. [ 310.327769][ T7723] netlink: 'syz.0.1174': attribute type 2 has an invalid length. [ 310.374634][ T7723] netlink: 'syz.0.1174': attribute type 8 has an invalid length. [ 310.419507][ T7723] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1174'. [ 310.486909][ T7733] netlink: 'syz.0.1174': attribute type 10 has an invalid length. [ 310.545933][ T7732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1176'. [ 313.615878][ T7752] netlink: 'syz.0.1181': attribute type 21 has an invalid length. [ 313.699332][ T7759] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1184'. [ 313.782594][ T7764] netlink: 'syz.2.1187': attribute type 19 has an invalid length. [ 313.814496][ T7764] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1187'. [ 313.856544][ T7765] netlink: 'syz.0.1186': attribute type 21 has an invalid length. [ 313.947529][ T7770] netlink: 'syz.1.1189': attribute type 2 has an invalid length. [ 313.988958][ T7770] netlink: 'syz.1.1189': attribute type 8 has an invalid length. [ 314.016334][ T7770] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1189'. [ 314.047996][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.088137][ T7774] device bridge_slave_0 left promiscuous mode [ 314.105846][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.924589][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.930974][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.095293][ T7770] netlink: 'syz.1.1189': attribute type 10 has an invalid length. [ 317.354188][ T7801] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1199'. [ 317.479706][ T7805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1200'. [ 317.657445][ T7815] netlink: 'syz.3.1202': attribute type 21 has an invalid length. [ 317.777928][ T7821] netlink: 'syz.1.1205': attribute type 21 has an invalid length. [ 317.847096][ T7821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.854493][ T7821] IPv6: NLM_F_CREATE should be set when creating new route [ 317.861982][ T7821] IPv6: NLM_F_CREATE should be set when creating new route [ 317.869402][ T7821] IPv6: NLM_F_CREATE should be set when creating new route [ 317.909584][ T7826] netlink: 'syz.0.1206': attribute type 2 has an invalid length. [ 317.932078][ T7826] netlink: 'syz.0.1206': attribute type 8 has an invalid length. [ 317.939941][ T7826] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1206'. [ 321.043937][ T7853] FAULT_INJECTION: forcing a failure. [ 321.043937][ T7853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.061142][ T7849] device bridge_slave_1 left promiscuous mode [ 321.067685][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.093122][ T7853] CPU: 0 PID: 7853 Comm: syz.3.1216 Not tainted syzkaller #0 [ 321.096370][ T7851] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1215'. [ 321.100522][ T7853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.100535][ T7853] Call Trace: [ 321.100543][ T7853] [ 321.100550][ T7853] dump_stack_lvl+0x188/0x250 [ 321.100588][ T7853] ? show_regs_print_info+0x20/0x20 [ 321.100606][ T7853] ? load_image+0x400/0x400 [ 321.100637][ T7853] ? __lock_acquire+0x7d10/0x7d10 [ 321.100659][ T7853] ? lockdep_hardirqs_on+0x94/0x140 [ 321.100684][ T7853] should_fail+0x38c/0x4c0 [ 321.155046][ T7853] _copy_from_user+0x2e/0x170 [ 321.159715][ T7853] iovec_from_user+0x142/0x370 [ 321.164467][ T7853] __import_iovec+0x70/0x490 [ 321.169047][ T7853] import_iovec+0x6f/0xa0 [ 321.173359][ T7853] ___sys_sendmsg+0x1fd/0x2e0 [ 321.178031][ T7853] ? __sys_sendmsg+0x2a0/0x2a0 [ 321.182781][ T7853] ? ktime_get_real_ts64+0x440/0x440 [ 321.188059][ T7853] __se_sys_sendmsg+0x1af/0x290 [ 321.192901][ T7853] ? __x64_sys_sendmsg+0x80/0x80 [ 321.197831][ T7853] ? syscall_enter_from_user_mode+0x2a/0x70 [ 321.203709][ T7853] do_syscall_64+0x4c/0xa0 [ 321.208117][ T7853] ? clear_bhb_loop+0x30/0x80 [ 321.212773][ T7853] ? clear_bhb_loop+0x30/0x80 [ 321.217565][ T7853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.223443][ T7853] RIP: 0033:0x7fb4dd981e59 [ 321.227844][ T7853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.247435][ T7853] RSP: 002b:00007fb4dbbdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.255844][ T7853] RAX: ffffffffffffffda RBX: 00007fb4ddbfafa0 RCX: 00007fb4dd981e59 [ 321.263805][ T7853] RDX: 0000000000004880 RSI: 0000200000000000 RDI: 0000000000000006 [ 321.271762][ T7853] RBP: 00007fb4dbbdb090 R08: 0000000000000000 R09: 0000000000000000 [ 321.279719][ T7853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.287676][ T7853] R13: 00007fb4ddbfb038 R14: 00007fb4ddbfafa0 R15: 00007fffae363d08 [ 321.295646][ T7853] [ 321.306333][ T7849] device bridge_slave_0 left promiscuous mode [ 321.331924][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.383555][ T7849] bond0: (slave bridge0): Releasing backup interface [ 321.468935][ T7864] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1228'. [ 321.482333][ T7861] validate_nla: 2 callbacks suppressed [ 321.482364][ T7861] netlink: 'syz.0.1217': attribute type 21 has an invalid length. [ 321.505940][ T7867] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1218'. [ 321.596542][ T7871] netlink: 'syz.0.1219': attribute type 2 has an invalid length. [ 321.611691][ T7871] netlink: 'syz.0.1219': attribute type 8 has an invalid length. [ 321.659218][ T7871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1219'. [ 321.691948][ T7875] netlink: 'syz.0.1219': attribute type 10 has an invalid length. [ 321.956556][ T7891] netlink: 'syz.2.1224': attribute type 10 has an invalid length. [ 321.997898][ T7891] netlink: 209860 bytes leftover after parsing attributes in process `syz.2.1224'. [ 322.066698][ T7891] openvswitch: netlink: Message has 4 unknown bytes. [ 322.171463][ T7891] netlink: 'syz.2.1224': attribute type 1 has an invalid length. [ 322.199163][ T7891] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1224'. [ 322.237019][ T7893] netlink: 'syz.2.1224': attribute type 21 has an invalid length. [ 324.897053][ T7902] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1229'. [ 325.063457][ T7909] netlink: 'syz.0.1230': attribute type 21 has an invalid length. [ 325.260076][ T7916] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1234'. [ 325.289135][ T7918] bridge0: port 4(team0) entered disabled state [ 328.001728][ T7918] bridge0: port 3(hsr0) entered disabled state [ 328.018869][ T7918] device bridge_slave_1 left promiscuous mode [ 328.026916][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.038532][ T7918] device bridge_slave_0 left promiscuous mode [ 328.045330][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.076086][ T7918] bond0: (slave bridge0): Releasing backup interface [ 328.098695][ T7918] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 328.108932][ T7918] device bridge0 left promiscuous mode [ 328.178299][ T7930] netlink: 'syz.0.1237': attribute type 2 has an invalid length. [ 328.219562][ T7930] netlink: 'syz.0.1237': attribute type 8 has an invalid length. [ 328.248324][ T7930] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1237'. [ 328.279449][ T7934] netlink: 'syz.0.1237': attribute type 10 has an invalid length. [ 331.374376][ T7955] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 331.430033][ T7956] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1245'. [ 331.567674][ T7965] netlink: 'syz.3.1247': attribute type 21 has an invalid length. [ 331.757650][ T7977] netlink: 'syz.3.1252': attribute type 2 has an invalid length. [ 331.821047][ T7977] netlink: 'syz.3.1252': attribute type 8 has an invalid length. [ 331.869572][ T7977] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1252'. [ 331.892254][ T7986] netlink: 'syz.3.1252': attribute type 10 has an invalid length. [ 335.212173][ T8013] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1261'. [ 335.272294][ T8016] netlink: 'syz.2.1262': attribute type 21 has an invalid length. [ 335.577298][ T8022] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 335.698901][ T8027] netlink: 'syz.4.1265': attribute type 4 has an invalid length. [ 335.791250][ T8027] netlink: 'syz.4.1265': attribute type 3 has an invalid length. [ 335.861306][ T8027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1265'. [ 336.207489][ T8039] netlink: 'syz.3.1269': attribute type 2 has an invalid length. [ 336.267882][ T8039] netlink: 'syz.3.1269': attribute type 8 has an invalid length. [ 336.286146][ T8039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1269'. [ 336.380206][ T8039] netlink: 'syz.3.1269': attribute type 10 has an invalid length. [ 337.539032][ T8050] netlink: 'syz.1.1273': attribute type 21 has an invalid length. [ 338.977262][ T8052] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1274'. [ 339.101442][ T8056] netlink: 'syz.1.1276': attribute type 19 has an invalid length. [ 339.160534][ T8056] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.1276'. [ 339.823186][ T8089] netlink: 'syz.4.1287': attribute type 21 has an invalid length. [ 339.873523][ T8094] netlink: 'syz.3.1288': attribute type 2 has an invalid length. [ 339.889696][ T8094] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1288'. [ 342.664641][ T8099] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1290'. [ 342.738006][ T8100] bond0: (slave bridge0): Error: Slave device does not support XDP [ 342.871474][ T8106] validate_nla: 2 callbacks suppressed [ 342.871517][ T8106] netlink: 'syz.0.1293': attribute type 19 has an invalid length. [ 342.887046][ T8100] syz.1.1291 uses obsolete (PF_INET,SOCK_PACKET) [ 342.916904][ T8106] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1293'. [ 343.177411][ T8132] netlink: 'syz.0.1300': attribute type 21 has an invalid length. [ 346.224154][ T8148] netlink: 'syz.4.1305': attribute type 2 has an invalid length. [ 346.266125][ T8148] netlink: 'syz.4.1305': attribute type 8 has an invalid length. [ 346.292700][ T8148] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1305'. [ 346.358595][ T8156] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1309'. [ 346.394739][ T8148] netlink: 'syz.4.1305': attribute type 10 has an invalid length. [ 346.568478][ T8159] netlink: 'syz.2.1310': attribute type 19 has an invalid length. [ 346.579282][ T8165] netlink: 144300 bytes leftover after parsing attributes in process `syz.0.1313'. [ 346.599677][ T8159] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.1310'. [ 346.609629][ T8165] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1313'. [ 346.789873][ T8178] netlink: 'syz.1.1316': attribute type 21 has an invalid length. [ 349.835075][ T8193] netlink: 'syz.0.1321': attribute type 3 has an invalid length. [ 349.880876][ T8193] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1321'. [ 352.777941][ T8208] netlink: 'syz.4.1324': attribute type 2 has an invalid length. [ 352.798638][ T8208] netlink: 'syz.4.1324': attribute type 8 has an invalid length. [ 352.808832][ T8208] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1324'. [ 352.838863][ T8209] netlink: 'syz.4.1324': attribute type 10 has an invalid length. [ 352.889547][ T8211] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1325'. [ 352.994216][ T8217] netlink: 'syz.1.1326': attribute type 21 has an invalid length. [ 353.025658][ T8217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.240179][ T8232] netlink: 'syz.2.1330': attribute type 21 has an invalid length. [ 356.218961][ T8249] netlink: 'syz.4.1335': attribute type 21 has an invalid length. [ 356.385671][ T8255] netlink: 'syz.1.1348': attribute type 19 has an invalid length. [ 356.404783][ T8255] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.1348'. [ 356.539597][ T8264] netlink: 'syz.4.1339': attribute type 3 has an invalid length. [ 356.575803][ T8264] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1339'. [ 356.604100][ T8268] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1340'. [ 359.746663][ T8282] netlink: 'syz.2.1344': attribute type 21 has an invalid length. [ 362.787914][ T8300] netlink: 'syz.2.1352': attribute type 21 has an invalid length. [ 362.823154][ T8300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.836085][ T8313] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1357'. [ 362.926175][ T8311] netlink: 'syz.0.1356': attribute type 19 has an invalid length. [ 362.937152][ T8311] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1356'. [ 363.066877][ T8320] netlink: 'syz.1.1359': attribute type 3 has an invalid length. [ 363.090162][ T8320] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1359'. [ 363.199814][ T8327] netlink: 'syz.0.1362': attribute type 21 has an invalid length. [ 363.235242][ T8327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.242633][ T8327] IPv6: NLM_F_CREATE should be set when creating new route [ 363.250080][ T8327] IPv6: NLM_F_CREATE should be set when creating new route [ 363.257501][ T8327] IPv6: NLM_F_CREATE should be set when creating new route [ 363.939502][ T8358] netlink: 'syz.1.1369': attribute type 2 has an invalid length. [ 363.979959][ T8355] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1370'. [ 364.046367][ T8358] netlink: 'syz.1.1369': attribute type 8 has an invalid length. [ 364.126151][ T8358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1369'. [ 364.260914][ T8362] netlink: 'syz.1.1369': attribute type 10 has an invalid length. [ 364.498300][ T8372] netlink: 'syz.1.1375': attribute type 10 has an invalid length. [ 364.534217][ T8372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1375'. [ 364.598448][ T8372] batman_adv: batadv0: Adding interface: virt_wifi0 [ 364.617581][ T8372] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.656229][ T8372] batman_adv: batadv0: Interface activated: virt_wifi0 [ 364.671601][ T8369] netlink: 'syz.3.1372': attribute type 19 has an invalid length. [ 364.697467][ T8369] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.1372'. [ 367.825927][ T8396] netlink: 'syz.3.1381': attribute type 3 has an invalid length. [ 367.835728][ T8396] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1381'. [ 367.900687][ T8399] netlink: 'syz.1.1383': attribute type 2 has an invalid length. [ 367.922458][ T8397] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1382'. [ 367.935454][ T8399] netlink: 'syz.1.1383': attribute type 8 has an invalid length. [ 367.955921][ T8399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1383'. [ 367.999764][ T8395] netlink: 'syz.0.1391': attribute type 19 has an invalid length. [ 368.008335][ T8395] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1391'. [ 368.047738][ T8402] netlink: 'syz.2.1384': attribute type 21 has an invalid length. [ 368.074880][ T8399] netlink: 'syz.1.1383': attribute type 10 has an invalid length. [ 368.299859][ T8416] netlink: 'syz.1.1399': attribute type 2 has an invalid length. [ 368.418338][ T8416] netlink: 'syz.1.1399': attribute type 8 has an invalid length. [ 368.465592][ T8416] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1399'. [ 368.548325][ T8422] netlink: 'syz.3.1388': attribute type 10 has an invalid length. [ 368.567221][ T8422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1388'. [ 368.598147][ T8422] batman_adv: batadv0: Adding interface: virt_wifi0 [ 368.634224][ T8422] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.693158][ T8422] batman_adv: batadv0: Interface activated: virt_wifi0 [ 368.714554][ T8425] netlink: 'syz.1.1399': attribute type 10 has an invalid length. [ 369.267515][ T8446] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1396'. [ 372.106298][ T8463] netlink: 14524 bytes leftover after parsing attributes in process `syz.4.1401'. [ 372.144189][ T8470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1405'. [ 372.905268][ T8495] validate_nla: 6 callbacks suppressed [ 372.905383][ T8495] netlink: 'syz.4.1412': attribute type 21 has an invalid length. [ 373.354219][ T8502] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1414'. [ 375.870131][ T8514] netlink: 'syz.4.1418': attribute type 2 has an invalid length. [ 375.882242][ T8514] netlink: 'syz.4.1418': attribute type 8 has an invalid length. [ 375.908839][ T8514] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1418'. [ 375.923858][ T8515] netlink: 'syz.1.1416': attribute type 10 has an invalid length. [ 375.943810][ T8515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1416'. [ 375.961195][ T8514] netlink: 'syz.4.1418': attribute type 10 has an invalid length. [ 376.030946][ T8511] netlink: 'syz.2.1417': attribute type 19 has an invalid length. [ 376.038985][ T8511] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.1417'. [ 376.324471][ T8531] netlink: 'syz.1.1423': attribute type 21 has an invalid length. [ 378.372033][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.378409][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.647313][ T8559] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1430'. [ 379.660517][ T8564] netlink: 'syz.2.1433': attribute type 10 has an invalid length. [ 379.668430][ T8564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1433'. [ 379.681896][ T8564] batman_adv: batadv0: Adding interface: virt_wifi0 [ 379.688889][ T8564] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.716871][ T8564] batman_adv: batadv0: Interface activated: virt_wifi0 [ 379.862713][ T8576] netlink: 'syz.3.1438': attribute type 2 has an invalid length. [ 379.907358][ T8576] netlink: 'syz.3.1438': attribute type 8 has an invalid length. [ 379.916178][ T8576] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1438'. [ 379.929884][ T8571] netlink: 'syz.0.1436': attribute type 19 has an invalid length. [ 379.954476][ T8571] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1436'. [ 379.976321][ T8576] netlink: 'syz.3.1438': attribute type 10 has an invalid length. [ 380.003081][ T8579] netlink: 'syz.1.1440': attribute type 21 has an invalid length. [ 380.027220][ T8579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 383.145287][ T8613] netlink: 'syz.1.1449': attribute type 10 has an invalid length. [ 383.194551][ T8613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1449'. [ 383.259224][ T8615] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1450'. [ 383.299348][ T8617] netlink: 'syz.0.1451': attribute type 21 has an invalid length. [ 383.326314][ T8617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 383.355271][ T8621] netlink: 'syz.4.1453': attribute type 2 has an invalid length. [ 383.366205][ T8621] netlink: 'syz.4.1453': attribute type 8 has an invalid length. [ 383.382122][ T8621] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1453'. [ 383.452045][ T8625] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.1454'. [ 386.722771][ T8656] validate_nla: 3 callbacks suppressed [ 386.722813][ T8656] netlink: 'syz.0.1466': attribute type 21 has an invalid length. [ 386.747206][ T8656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.926691][ T8668] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1468'. [ 387.030770][ T8672] netlink: 'syz.0.1470': attribute type 2 has an invalid length. [ 387.069384][ T8672] netlink: 'syz.0.1470': attribute type 8 has an invalid length. [ 387.085532][ T8672] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1470'. [ 387.117122][ T8669] netlink: 'syz.3.1469': attribute type 19 has an invalid length. [ 387.130734][ T8669] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.1469'. [ 387.157223][ T8674] netlink: 'syz.4.1471': attribute type 21 has an invalid length. [ 387.191315][ T8678] netlink: 'syz.0.1470': attribute type 10 has an invalid length. [ 387.430052][ T8692] netlink: 'syz.0.1477': attribute type 21 has an invalid length. [ 390.387616][ T8702] netlink: 'syz.0.1480': attribute type 21 has an invalid length. [ 390.408270][ T8702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.446605][ T8707] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1482'. [ 390.478599][ T8709] netlink: 'syz.4.1483': attribute type 21 has an invalid length. [ 390.539753][ T8712] netlink: 'syz.1.1484': attribute type 19 has an invalid length. [ 390.584198][ T8712] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.1484'. [ 390.672039][ T8724] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1487'. [ 393.319249][ T8759] validate_nla: 4 callbacks suppressed [ 393.319282][ T8759] netlink: 'syz.2.1498': attribute type 21 has an invalid length. [ 393.365049][ T8754] netlink: 'syz.3.1497': attribute type 21 has an invalid length. [ 393.379693][ T8754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.465630][ T8763] netlink: 'syz.0.1500': attribute type 19 has an invalid length. [ 393.499030][ T8768] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1502'. [ 393.510864][ T8763] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1500'. [ 393.549042][ T8771] netlink: 'syz.2.1503': attribute type 2 has an invalid length. [ 393.577071][ T8771] netlink: 'syz.2.1503': attribute type 8 has an invalid length. [ 393.589068][ T8771] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1503'. [ 393.607040][ T8773] netlink: 'syz.2.1503': attribute type 2 has an invalid length. [ 393.651267][ T8773] netlink: 'syz.2.1503': attribute type 8 has an invalid length. [ 393.671075][ T8773] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1503'. [ 393.710406][ T8775] netlink: 'syz.3.1505': attribute type 10 has an invalid length. [ 393.727818][ T8775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1505'. [ 393.748375][ T8773] netlink: 'syz.2.1503': attribute type 10 has an invalid length. [ 393.787800][ T8780] netlink: 'syz.4.1506': attribute type 21 has an invalid length. [ 393.985563][ T8793] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1511'. [ 394.752500][ T8814] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.1517'. [ 394.811866][ T8818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1519'. [ 394.878250][ T8822] device geneve1 entered promiscuous mode [ 394.926734][ T8822] team0: Port device geneve1 added [ 395.002706][ T8827] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1522'. [ 395.039898][ T8827] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1522'. [ 395.259574][ T8835] team0: Port device geneve1 added [ 396.427320][ T8881] FAULT_INJECTION: forcing a failure. [ 396.427320][ T8881] name failslab, interval 1, probability 0, space 0, times 0 [ 396.467246][ T8881] CPU: 1 PID: 8881 Comm: syz.2.1541 Not tainted syzkaller #0 [ 396.474651][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.484698][ T8881] Call Trace: [ 396.488075][ T8881] [ 396.491039][ T8881] dump_stack_lvl+0x188/0x250 [ 396.495798][ T8881] ? show_regs_print_info+0x20/0x20 [ 396.501017][ T8881] ? load_image+0x400/0x400 [ 396.505527][ T8881] ? __might_sleep+0xf0/0xf0 [ 396.510151][ T8881] ? __lock_acquire+0x7d10/0x7d10 [ 396.515205][ T8881] ? __lock_acquire+0x12e8/0x7d10 [ 396.520224][ T8881] should_fail+0x38c/0x4c0 [ 396.524761][ T8881] should_failslab+0x5/0x20 [ 396.529288][ T8881] slab_pre_alloc_hook+0x51/0xc0 [ 396.534244][ T8881] kmem_cache_alloc_trace+0x47/0x2a0 [ 396.539522][ T8881] ? rtnl_newlink+0x183/0x1a50 [ 396.544328][ T8881] rtnl_newlink+0x183/0x1a50 [ 396.548909][ T8881] ? perf_trace_lock_acquire+0xed/0x3e0 [ 396.554444][ T8881] ? unwind_get_return_address+0x49/0x80 [ 396.560135][ T8881] ? rtnl_setlink+0x500/0x500 [ 396.564805][ T8881] ? mark_lock+0x94/0x320 [ 396.569123][ T8881] ? __lock_acquire+0x13bc/0x7d10 [ 396.574156][ T8881] ? __lock_acquire+0x12e8/0x7d10 [ 396.579173][ T8881] ? mark_lock+0x94/0x320 [ 396.583486][ T8881] ? verify_lock_unused+0x140/0x140 [ 396.588678][ T8881] ? perf_trace_lock_acquire+0xed/0x3e0 [ 396.594217][ T8881] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 396.600795][ T8881] ? mark_lock+0x94/0x320 [ 396.605132][ T8881] ? __mutex_trylock_common+0x155/0x260 [ 396.610669][ T8881] ? rcu_lock_release+0x20/0x20 [ 396.615515][ T8881] ? rtnetlink_rcv_msg+0x7ee/0xf30 [ 396.620620][ T8881] ? __mutex_lock_common+0x465/0x2400 [ 396.626064][ T8881] ? mutex_lock_io_nested+0x60/0x60 [ 396.631268][ T8881] ? rtnl_setlink+0x500/0x500 [ 396.635932][ T8881] rtnetlink_rcv_msg+0x844/0xf30 [ 396.640863][ T8881] ? rtnetlink_bind+0x80/0x80 [ 396.645524][ T8881] ? __lock_acquire+0x12e8/0x7d10 [ 396.650556][ T8881] ? perf_trace_lock_acquire+0xed/0x3e0 [ 396.656093][ T8881] ? verify_lock_unused+0x140/0x140 [ 396.661278][ T8881] ? verify_lock_unused+0x140/0x140 [ 396.666466][ T8881] ? perf_trace_lock_acquire+0xed/0x3e0 [ 396.672010][ T8881] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 396.678612][ T8881] netlink_rcv_skb+0x1f5/0x440 [ 396.683432][ T8881] ? rtnetlink_bind+0x80/0x80 [ 396.688100][ T8881] ? netlink_ack+0xb50/0xb50 [ 396.692694][ T8881] netlink_unicast+0x774/0x920 [ 396.697457][ T8881] netlink_sendmsg+0x8ba/0xbe0 [ 396.702235][ T8881] ? netlink_getsockopt+0x570/0x570 [ 396.707437][ T8881] ? aa_sock_msg_perm+0x94/0x150 [ 396.712452][ T8881] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 396.717774][ T8881] ? security_socket_sendmsg+0x7c/0xa0 [ 396.723263][ T8881] ? netlink_getsockopt+0x570/0x570 [ 396.728450][ T8881] ____sys_sendmsg+0x5b7/0x8f0 [ 396.733287][ T8881] ? __sys_sendmsg_sock+0x30/0x30 [ 396.738308][ T8881] ? import_iovec+0x6f/0xa0 [ 396.742872][ T8881] ___sys_sendmsg+0x236/0x2e0 [ 396.747547][ T8881] ? __sys_sendmsg+0x2a0/0x2a0 [ 396.752310][ T8881] ? vfs_write+0x8b2/0xd60 [ 396.756782][ T8881] __se_sys_sendmsg+0x1af/0x290 [ 396.761627][ T8881] ? __x64_sys_sendmsg+0x80/0x80 [ 396.766552][ T8881] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 396.772542][ T8881] ? lockdep_hardirqs_on+0x94/0x140 [ 396.777799][ T8881] do_syscall_64+0x4c/0xa0 [ 396.782201][ T8881] ? clear_bhb_loop+0x30/0x80 [ 396.786897][ T8881] ? clear_bhb_loop+0x30/0x80 [ 396.791563][ T8881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.797442][ T8881] RIP: 0033:0x7f56313b7e59 [ 396.801894][ T8881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.821521][ T8881] RSP: 002b:00007f562f611028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.829922][ T8881] RAX: ffffffffffffffda RBX: 00007f5631630fa0 RCX: 00007f56313b7e59 [ 396.837879][ T8881] RDX: 0000000000040400 RSI: 00002000000003c0 RDI: 0000000000000004 [ 396.845834][ T8881] RBP: 00007f562f611090 R08: 0000000000000000 R09: 0000000000000000 [ 396.853789][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.861746][ T8881] R13: 00007f5631631038 R14: 00007f5631630fa0 R15: 00007fff2f044b18 [ 396.869720][ T8881] [ 400.263932][ T8920] validate_nla: 26 callbacks suppressed [ 400.263948][ T8920] netlink: 'syz.4.1552': attribute type 10 has an invalid length. [ 400.283442][ T8920] __nla_validate_parse: 9 callbacks suppressed [ 400.283484][ T8920] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1552'. [ 400.301386][ T8920] batman_adv: batadv0: Adding interface: virt_wifi0 [ 400.308063][ T8920] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.393922][ T8920] batman_adv: batadv0: Interface activated: virt_wifi0 [ 400.418629][ T8919] netlink: 'syz.1.1554': attribute type 2 has an invalid length. [ 400.442384][ T8919] netlink: 'syz.1.1554': attribute type 8 has an invalid length. [ 400.451244][ T8919] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1554'. [ 400.461413][ T8922] netlink: 'syz.1.1554': attribute type 10 has an invalid length. [ 400.514580][ T8925] netlink: 'syz.3.1556': attribute type 10 has an invalid length. [ 400.696169][ T8925] team0: Port device geneve1 added [ 400.759214][ T8929] netlink: 'syz.4.1557': attribute type 10 has an invalid length. [ 400.868238][ T8941] netlink: 'syz.0.1561': attribute type 21 has an invalid length. [ 400.942514][ T8941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.060657][ T8954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1566'. [ 401.367734][ T8962] netlink: 'syz.0.1567': attribute type 21 has an invalid length. [ 401.399270][ T8962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.126216][ T8970] netlink: 'syz.1.1570': attribute type 10 has an invalid length. [ 404.139554][ T8970] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1570'. [ 404.169522][ T8973] netlink: 'syz.4.1571': attribute type 2 has an invalid length. [ 404.186165][ T8973] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1571'. [ 404.460659][ T8986] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1575'. [ 404.520619][ T8980] team0: Port device geneve1 added [ 404.586424][ T8980] syz.1.1574 (8980) used greatest stack depth: 18800 bytes left [ 404.737559][ T8999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1584'. [ 404.877011][ T8996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.060884][ T9011] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1587'. [ 405.172336][ T9018] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1590'. [ 405.302273][ T9025] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1592'. [ 405.353099][ T9028] validate_nla: 8 callbacks suppressed [ 405.353116][ T9028] netlink: 'syz.2.1593': attribute type 10 has an invalid length. [ 405.384982][ T9028] team0: Device nlmon0 is of different type [ 405.545777][ T9034] netlink: 'syz.4.1596': attribute type 21 has an invalid length. [ 405.576913][ T9037] netlink: 'syz.0.1597': attribute type 21 has an invalid length. [ 405.592675][ T9037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.778590][ T9046] netlink: 'syz.3.1600': attribute type 21 has an invalid length. [ 405.863863][ T9052] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1603'. [ 406.004990][ T9061] netlink: 'syz.0.1607': attribute type 10 has an invalid length. [ 406.104273][ T9065] netlink: 'syz.2.1608': attribute type 21 has an invalid length. [ 406.133645][ T9065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.162658][ T9069] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1609'. [ 406.172460][ T9068] netlink: 'syz.4.1611': attribute type 21 has an invalid length. [ 406.184303][ T9072] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1610'. [ 406.204422][ T9073] netlink: 'syz.1.1612': attribute type 21 has an invalid length. [ 406.228777][ T9073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.446651][ T9085] netlink: 'syz.1.1616': attribute type 21 has an invalid length. [ 406.748867][ T9107] FAULT_INJECTION: forcing a failure. [ 406.748867][ T9107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.767654][ T9105] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1622'. [ 406.773556][ T9108] netlink: 'syz.3.1623': attribute type 21 has an invalid length. [ 406.816937][ T9107] CPU: 1 PID: 9107 Comm: syz.2.1624 Not tainted syzkaller #0 [ 406.824347][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.834416][ T9107] Call Trace: [ 406.837739][ T9107] [ 406.840687][ T9107] dump_stack_lvl+0x188/0x250 [ 406.845427][ T9107] ? lockdep_hardirqs_on+0x94/0x140 [ 406.850653][ T9107] ? show_regs_print_info+0x20/0x20 [ 406.855872][ T9107] ? audit_tree_destroy_watch+0x20/0x20 [ 406.861462][ T9107] should_fail+0x38c/0x4c0 [ 406.865891][ T9107] _copy_from_user+0x2e/0x170 [ 406.870576][ T9107] __sys_bpf+0x26d/0x6f0 [ 406.874918][ T9107] ? bpf_link_show_fdinfo+0x380/0x380 [ 406.880307][ T9107] ? vtime_user_exit+0x2c8/0x3e0 [ 406.885329][ T9107] __x64_sys_bpf+0x78/0x90 [ 406.889751][ T9107] do_syscall_64+0x4c/0xa0 [ 406.894189][ T9107] ? clear_bhb_loop+0x30/0x80 [ 406.898868][ T9107] ? clear_bhb_loop+0x30/0x80 [ 406.903546][ T9107] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 406.909443][ T9107] RIP: 0033:0x7f56313b7e59 [ 406.913857][ T9107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.933465][ T9107] RSP: 002b:00007f562f611028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 406.941881][ T9107] RAX: ffffffffffffffda RBX: 00007f5631630fa0 RCX: 00007f56313b7e59 [ 406.949848][ T9107] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 406.957817][ T9107] RBP: 00007f562f611090 R08: 0000000000000000 R09: 0000000000000000 [ 406.965787][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.973766][ T9107] R13: 00007f5631631038 R14: 00007f5631630fa0 R15: 00007fff2f044b18 [ 406.981754][ T9107] [ 407.457500][ T9120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.549139][ T9127] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1630'. [ 407.597308][ T9128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.923421][ T9142] device veth0_macvtap left promiscuous mode [ 408.250431][ T9147] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1636'. [ 408.301505][ T9154] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1638'. [ 408.637972][ T9169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.902616][ T9182] FAULT_INJECTION: forcing a failure. [ 408.902616][ T9182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.931690][ T9182] CPU: 0 PID: 9182 Comm: syz.2.1652 Not tainted syzkaller #0 [ 408.939108][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 408.949167][ T9182] Call Trace: [ 408.952456][ T9182] [ 408.955390][ T9182] dump_stack_lvl+0x188/0x250 [ 408.960084][ T9182] ? show_regs_print_info+0x20/0x20 [ 408.965289][ T9182] ? load_image+0x400/0x400 [ 408.969801][ T9182] ? __lock_acquire+0x7d10/0x7d10 [ 408.974838][ T9182] ? __rwlock_init+0x140/0x140 [ 408.979611][ T9182] should_fail+0x38c/0x4c0 [ 408.984042][ T9182] _copy_from_user+0x2e/0x170 [ 408.988724][ T9182] dev_ethtool+0xd7/0xfe0 [ 408.993145][ T9182] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 408.999396][ T9182] ? mutex_lock_io_nested+0x60/0x60 [ 409.004607][ T9182] ? __lock_acquire+0x7d10/0x7d10 [ 409.009642][ T9182] ? full_name_hash+0x8e/0xe0 [ 409.014410][ T9182] dev_ioctl+0x457/0xe30 [ 409.018730][ T9182] ? _copy_from_user+0x111/0x170 [ 409.023659][ T9182] sock_do_ioctl+0x245/0x320 [ 409.028239][ T9182] ? sock_show_fdinfo+0xb0/0xb0 [ 409.033083][ T9182] sock_ioctl+0x4d2/0x710 [ 409.037400][ T9182] ? sock_poll+0x410/0x410 [ 409.041803][ T9182] ? bpf_lsm_file_ioctl+0x5/0x10 [ 409.046724][ T9182] ? security_file_ioctl+0x7c/0xa0 [ 409.051894][ T9182] ? sock_poll+0x410/0x410 [ 409.056306][ T9182] __se_sys_ioctl+0xfa/0x170 [ 409.060895][ T9182] do_syscall_64+0x4c/0xa0 [ 409.065297][ T9182] ? clear_bhb_loop+0x30/0x80 [ 409.069955][ T9182] ? clear_bhb_loop+0x30/0x80 [ 409.074614][ T9182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 409.080489][ T9182] RIP: 0033:0x7f56313b7e59 [ 409.084889][ T9182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.104477][ T9182] RSP: 002b:00007f562f611028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.112873][ T9182] RAX: ffffffffffffffda RBX: 00007f5631630fa0 RCX: 00007f56313b7e59 [ 409.120831][ T9182] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000025 [ 409.128784][ T9182] RBP: 00007f562f611090 R08: 0000000000000000 R09: 0000000000000000 [ 409.136738][ T9182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.144689][ T9182] R13: 00007f5631631038 R14: 00007f5631630fa0 R15: 00007fff2f044b18 [ 409.152742][ T9182] [ 411.881348][ T9192] validate_nla: 9 callbacks suppressed [ 411.881378][ T9192] netlink: 'syz.0.1655': attribute type 10 has an invalid length. [ 412.000995][ T9200] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1659'. [ 412.152574][ T9201] netlink: 'syz.4.1657': attribute type 19 has an invalid length. [ 412.256193][ T9201] netlink: 14524 bytes leftover after parsing attributes in process `syz.4.1657'. [ 412.280401][ T9208] netlink: 'syz.1.1662': attribute type 21 has an invalid length. [ 412.330817][ T9208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 412.339285][ T9207] netlink: 'syz.2.1661': attribute type 10 has an invalid length. [ 412.369033][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1661'. [ 412.548914][ T9213] netlink: 'syz.2.1664': attribute type 2 has an invalid length. [ 412.567543][ T9213] netlink: 'syz.2.1664': attribute type 8 has an invalid length. [ 412.631651][ T9213] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1664'. [ 412.916505][ T9213] netlink: 'syz.2.1664': attribute type 10 has an invalid length. [ 413.001673][ T9227] netlink: 'syz.4.1668': attribute type 21 has an invalid length. [ 413.286384][ T9240] netlink: 'syz.4.1673': attribute type 10 has an invalid length. [ 413.341867][ T9245] netlink: 'syz.0.1674': attribute type 10 has an invalid length. [ 413.389159][ T9245] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1674'. [ 413.418952][ T9245] batman_adv: batadv0: Adding interface: virt_wifi0 [ 413.435891][ T9245] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.536494][ T9245] batman_adv: batadv0: Interface activated: virt_wifi0 [ 413.570927][ T9247] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.1675'. [ 417.015228][ T9284] validate_nla: 2 callbacks suppressed [ 417.015244][ T9284] netlink: 'syz.1.1688': attribute type 10 has an invalid length. [ 417.065256][ T9284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1688'. [ 417.256217][ T9297] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1692'. [ 417.455397][ T9295] netlink: 'syz.4.1691': attribute type 19 has an invalid length. [ 417.490448][ T9295] netlink: 14524 bytes leftover after parsing attributes in process `syz.4.1691'. [ 417.755248][ T9313] netlink: 'syz.4.1696': attribute type 21 has an invalid length. [ 421.062484][ T9328] netlink: 'syz.4.1703': attribute type 10 has an invalid length. [ 421.145045][ T9328] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1703'. [ 421.556760][ T9343] netlink: 'syz.0.1706': attribute type 19 has an invalid length. [ 421.610419][ T9343] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1706'. [ 421.619854][ T9347] netlink: 'syz.1.1710': attribute type 21 has an invalid length. [ 424.894236][ T9373] netlink: 'syz.3.1720': attribute type 11 has an invalid length. [ 424.947953][ T9373] netlink: 204636 bytes leftover after parsing attributes in process `syz.3.1720'. [ 425.056055][ T9377] netlink: 'syz.2.1721': attribute type 21 has an invalid length. [ 425.085860][ T9377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 425.134156][ T9378] netlink: 'syz.4.1722': attribute type 19 has an invalid length. [ 425.148102][ T9378] netlink: 14524 bytes leftover after parsing attributes in process `syz.4.1722'. [ 425.444453][ T9391] netlink: 'syz.4.1724': attribute type 21 has an invalid length. [ 427.500054][ T9395] netlink: 'syz.3.1727': attribute type 21 has an invalid length. [ 427.509710][ T9395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.752960][ T9418] netlink: 'syz.3.1734': attribute type 19 has an invalid length. [ 430.762727][ T9418] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.1734'. [ 430.826245][ T9430] netlink: 'syz.1.1738': attribute type 21 has an invalid length. [ 430.837111][ T9430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.856122][ T9433] netlink: 'syz.0.1739': attribute type 21 has an invalid length. [ 431.368791][ T9452] netlink: 'syz.0.1745': attribute type 21 has an invalid length. [ 431.379425][ T9452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.620497][ T9463] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1750'. [ 431.724660][ T9466] netlink: 'syz.0.1752': attribute type 19 has an invalid length. [ 431.739371][ T9466] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1752'. [ 431.858106][ T9472] netlink: 'syz.2.1753': attribute type 21 has an invalid length. [ 431.916950][ T9472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.544719][ T9495] netlink: 'syz.0.1763': attribute type 11 has an invalid length. [ 432.606793][ T9495] netlink: 204636 bytes leftover after parsing attributes in process `syz.0.1763'. [ 432.638859][ T9498] netlink: 'syz.2.1765': attribute type 21 has an invalid length. [ 432.663318][ T9498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.820106][ T9502] netlink: 'syz.3.1767': attribute type 19 has an invalid length. [ 432.887311][ T9502] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.1767'. [ 433.049446][ T9510] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1769'. [ 433.285526][ T9521] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1773'. [ 433.526686][ T9531] netlink: 'syz.2.1774': attribute type 17 has an invalid length. [ 433.656957][ T9537] netlink: 'syz.3.1779': attribute type 10 has an invalid length. [ 433.693416][ T9537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1779'. [ 433.973764][ T9546] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.1782'. [ 434.087898][ T9523] syz.2.1774 (9523) used greatest stack depth: 16920 bytes left [ 434.375807][ T9553] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1785'. [ 435.940033][ T9612] validate_nla: 4 callbacks suppressed [ 435.940049][ T9612] netlink: 'syz.2.1808': attribute type 10 has an invalid length. [ 436.019302][ T9612] __nla_validate_parse: 3 callbacks suppressed [ 436.019671][ T9612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1808'. [ 436.232355][ T9622] netlink: 'syz.0.1812': attribute type 19 has an invalid length. [ 436.267246][ T9622] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1812'. [ 436.308997][ T9624] netlink: 'syz.4.1813': attribute type 21 has an invalid length. [ 436.437922][ T9635] netlink: 'syz.3.1816': attribute type 17 has an invalid length. [ 436.698964][ T9642] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 436.872513][ T9650] netlink: 'syz.0.1822': attribute type 8 has an invalid length. [ 436.889709][ T9650] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1822'. [ 436.891996][ T9653] netlink: 'syz.3.1823': attribute type 27 has an invalid length. [ 436.940429][ T9653] netlink: 'syz.3.1823': attribute type 4 has an invalid length. [ 436.957922][ T9653] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1823'. [ 437.028121][ T9658] netlink: 'syz.2.1825': attribute type 10 has an invalid length. [ 437.041812][ T9658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1825'. [ 437.443404][ T9675] netlink: 'syz.4.1830': attribute type 21 has an invalid length. [ 437.629451][ T9684] netlink: 'syz.3.1831': attribute type 19 has an invalid length. [ 437.705089][ T9684] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.1831'. [ 437.862287][ T9692] FAULT_INJECTION: forcing a failure. [ 437.862287][ T9692] name failslab, interval 1, probability 0, space 0, times 0 [ 437.891492][ T9692] CPU: 0 PID: 9692 Comm: syz.1.1837 Not tainted syzkaller #0 [ 437.898911][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.908720][ T9696] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1838'. [ 437.908969][ T9692] Call Trace: [ 437.921512][ T9692] [ 437.924450][ T9692] dump_stack_lvl+0x188/0x250 [ 437.929141][ T9692] ? show_regs_print_info+0x20/0x20 [ 437.934430][ T9692] ? load_image+0x400/0x400 [ 437.938952][ T9692] ? __lock_acquire+0x7d10/0x7d10 [ 437.944000][ T9692] should_fail+0x38c/0x4c0 [ 437.948439][ T9692] should_failslab+0x5/0x20 [ 437.953072][ T9692] slab_pre_alloc_hook+0x51/0xc0 [ 437.958030][ T9692] __kmalloc+0x6b/0x330 [ 437.962200][ T9692] ? kernfs_fop_write_iter+0x155/0x4c0 [ 437.967786][ T9692] ? end_current_label_crit_section+0x14b/0x170 [ 437.974040][ T9692] kernfs_fop_write_iter+0x155/0x4c0 [ 437.979343][ T9692] ? iov_iter_init+0xb4/0x170 [ 437.984034][ T9692] vfs_write+0x745/0xd60 [ 437.988301][ T9692] ? file_end_write+0x250/0x250 [ 437.993191][ T9692] ? __fget_files+0x40f/0x480 [ 437.997919][ T9692] ? mutex_lock_nested+0x17/0x20 [ 438.002866][ T9692] ? __fdget_pos+0x2bf/0x370 [ 438.007462][ T9692] ? ksys_write+0x71/0x260 [ 438.011889][ T9692] ksys_write+0x152/0x260 [ 438.016232][ T9692] ? __ia32_sys_read+0x80/0x80 [ 438.021010][ T9692] ? lockdep_hardirqs_on+0x94/0x140 [ 438.026220][ T9692] do_syscall_64+0x4c/0xa0 [ 438.030643][ T9692] ? clear_bhb_loop+0x30/0x80 [ 438.035325][ T9692] ? clear_bhb_loop+0x30/0x80 [ 438.040018][ T9692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.045925][ T9692] RIP: 0033:0x7fd863b5fe59 [ 438.050349][ T9692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.069965][ T9692] RSP: 002b:00007fd861db9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.078409][ T9692] RAX: ffffffffffffffda RBX: 00007fd863dd8fa0 RCX: 00007fd863b5fe59 [ 438.086940][ T9692] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000006 [ 438.094932][ T9692] RBP: 00007fd861db9090 R08: 0000000000000000 R09: 0000000000000000 [ 438.102908][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.110888][ T9692] R13: 00007fd863dd9038 R14: 00007fd863dd8fa0 R15: 00007fff0238fb18 [ 438.118883][ T9692] [ 438.152138][ T9700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1839'. [ 438.311918][ T9692] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1837'. [ 438.617061][ T9720] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1847'. [ 439.021009][ T9744] FAULT_INJECTION: forcing a failure. [ 439.021009][ T9744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.042586][ T9744] CPU: 1 PID: 9744 Comm: syz.1.1855 Not tainted syzkaller #0 [ 439.049987][ T9744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 439.060052][ T9744] Call Trace: [ 439.063342][ T9744] [ 439.066285][ T9744] dump_stack_lvl+0x188/0x250 [ 439.070977][ T9744] ? show_regs_print_info+0x20/0x20 [ 439.076186][ T9744] ? load_image+0x400/0x400 [ 439.080698][ T9744] ? __lock_acquire+0x7d10/0x7d10 [ 439.085741][ T9744] should_fail+0x38c/0x4c0 [ 439.090172][ T9744] _copy_to_user+0x2e/0x130 [ 439.094686][ T9744] bpf_verifier_vlog+0x1b5/0x350 [ 439.099637][ T9744] __btf_verifier_log+0xdf/0x130 [ 439.104660][ T9744] ? __might_sleep+0xf0/0xf0 [ 439.109258][ T9744] ? btf_check_sec_info+0x350/0x350 [ 439.114467][ T9744] ? btf_parse_hdr+0x1e1/0x810 [ 439.119236][ T9744] btf_parse_hdr+0x368/0x810 [ 439.123831][ T9744] btf_new_fd+0x3fd/0x910 [ 439.128169][ T9744] __sys_bpf+0x58c/0x6f0 [ 439.132419][ T9744] ? bpf_link_show_fdinfo+0x380/0x380 [ 439.137789][ T9744] ? rcu_nmi_exit+0x6f/0xf0 [ 439.142303][ T9744] ? vtime_user_exit+0x2c8/0x3e0 [ 439.147254][ T9744] __x64_sys_bpf+0x78/0x90 [ 439.151680][ T9744] do_syscall_64+0x4c/0xa0 [ 439.156108][ T9744] ? clear_bhb_loop+0x30/0x80 [ 439.160784][ T9744] ? clear_bhb_loop+0x30/0x80 [ 439.165469][ T9744] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 439.171367][ T9744] RIP: 0033:0x7fd863b5fe59 [ 439.175789][ T9744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.195400][ T9744] RSP: 002b:00007fd861db9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.203837][ T9744] RAX: ffffffffffffffda RBX: 00007fd863dd8fa0 RCX: 00007fd863b5fe59 [ 439.211816][ T9744] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 439.219795][ T9744] RBP: 00007fd861db9090 R08: 0000000000000000 R09: 0000000000000000 [ 439.227773][ T9744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.235750][ T9744] R13: 00007fd863dd9038 R14: 00007fd863dd8fa0 R15: 00007fff0238fb18 [ 439.243743][ T9744] [ 439.813017][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.819347][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.226673][ T9784] device hsr0 entered promiscuous mode [ 440.262966][ T9784] bridge0: port 3(hsr0) entered blocking state [ 440.290036][ T9784] bridge0: port 3(hsr0) entered disabled state [ 443.146578][ T9805] validate_nla: 13 callbacks suppressed [ 443.146593][ T9805] netlink: 'syz.3.1879': attribute type 10 has an invalid length. [ 443.164875][ T9805] __nla_validate_parse: 7 callbacks suppressed [ 443.164891][ T9805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1879'. [ 443.236917][ T9807] netlink: 'syz.1.1876': attribute type 21 has an invalid length. [ 443.303226][ T9808] netlink: 'syz.0.1878': attribute type 19 has an invalid length. [ 443.351336][ T9808] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1878'. [ 443.587577][ T9823] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1885'. [ 443.623956][ T9825] netlink: 'syz.4.1886': attribute type 2 has an invalid length. [ 443.639135][ T9825] netlink: 'syz.4.1886': attribute type 8 has an invalid length. [ 443.664856][ T9825] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1886'. [ 443.850611][ T9825] netlink: 'syz.4.1886': attribute type 10 has an invalid length. [ 444.013485][ T9837] netlink: 'syz.3.1891': attribute type 10 has an invalid length. [ 444.026213][ T9837] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1891'. [ 447.146280][ T9851] netlink: 'syz.4.1893': attribute type 21 has an invalid length. [ 447.358936][ T9853] netlink: 'syz.2.1897': attribute type 19 has an invalid length. [ 447.380212][ T9853] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.1897'. [ 447.637430][ T9869] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1901'. [ 447.667324][ T9872] netlink: 'syz.2.1902': attribute type 10 has an invalid length. [ 447.698198][ T9872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1902'. [ 450.985477][ T9893] netlink: 'syz.4.1910': attribute type 21 has an invalid length. [ 451.259669][ T9897] netlink: 'syz.2.1914': attribute type 19 has an invalid length. [ 451.275565][ T9897] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.1914'. [ 451.318985][ T9910] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1917'. [ 451.464518][ T9914] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 451.473252][ T9914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1918'. [ 451.626484][ T9920] netlink: 'syz.0.1929': attribute type 10 has an invalid length. [ 451.635831][ T9920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1929'. [ 455.126084][ T9943] netlink: 'syz.1.1927': attribute type 21 has an invalid length. [ 455.251010][ T9951] netlink: 'syz.2.1931': attribute type 10 has an invalid length. [ 455.258861][ T9951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1931'. [ 455.467391][ T9953] netlink: 'syz.0.1932': attribute type 19 has an invalid length. [ 455.478011][ T9953] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1932'. [ 455.661289][ T9963] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1935'. [ 455.712592][ T9957] netlink: 'syz.3.1934': attribute type 10 has an invalid length. [ 455.723725][ T9957] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1934'. [ 455.740181][ T9957] device hsr0 entered promiscuous mode [ 455.988171][ T9967] netlink: 'syz.0.1946': attribute type 19 has an invalid length. [ 456.010454][ T9967] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1946'. [ 456.590555][ T9988] netlink: 'syz.0.1943': attribute type 21 has an invalid length. [ 456.797130][ T9998] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1947'. [ 456.832760][T10002] netlink: 'syz.4.1948': attribute type 10 has an invalid length. [ 456.867892][T10002] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1948'. [ 457.054399][T10011] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1962'. [ 457.196875][T10012] netlink: 'syz.2.1951': attribute type 19 has an invalid length. [ 457.238249][T10012] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.1951'. [ 457.399649][T10031] netlink: 'syz.3.1957': attribute type 21 has an invalid length. [ 457.693300][T10043] netlink: 'syz.4.1963': attribute type 10 has an invalid length. [ 457.716910][T10043] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1963'. [ 457.887052][T10054] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1967'. [ 457.909425][T10056] netlink: 'syz.3.1979': attribute type 10 has an invalid length. [ 457.946444][T10056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1979'. [ 458.102902][T10064] netlink: 'syz.1.1971': attribute type 21 has an invalid length. [ 458.314959][T10068] netlink: 'syz.3.1972': attribute type 19 has an invalid length. [ 458.368116][T10068] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.1972'. [ 458.789028][T10090] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1982'. [ 458.829224][T10093] netlink: 'syz.2.1983': attribute type 10 has an invalid length. [ 458.887877][T10093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1983'. [ 458.931524][T10103] netlink: 'syz.1.1986': attribute type 21 has an invalid length. [ 458.979408][T10105] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 458.986023][T10105] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 461.407345][T10193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.622758][T10207] validate_nla: 16 callbacks suppressed [ 461.622803][T10207] netlink: 'syz.1.2023': attribute type 2 has an invalid length. [ 461.654033][T10207] netlink: 'syz.1.2023': attribute type 8 has an invalid length. [ 461.720566][T10203] netlink: 'syz.3.2021': attribute type 19 has an invalid length. [ 461.729428][T10207] netlink: 'syz.1.2023': attribute type 10 has an invalid length. [ 462.001854][T10217] netlink: 'syz.1.2026': attribute type 3 has an invalid length. [ 462.043262][T10217] __nla_validate_parse: 11 callbacks suppressed [ 462.043298][T10217] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.2026'. [ 462.096634][T10221] netlink: 'syz.2.2027': attribute type 21 has an invalid length. [ 462.242422][T10229] netlink: 'syz.2.2029': attribute type 10 has an invalid length. [ 462.317841][T10229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2029'. [ 462.349522][T10231] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2030'. [ 462.505149][T10241] netlink: 'syz.2.2033': attribute type 2 has an invalid length. [ 462.547829][T10241] netlink: 'syz.2.2033': attribute type 8 has an invalid length. [ 462.607808][T10241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2033'. [ 462.679597][T10242] netlink: 'syz.0.2034': attribute type 21 has an invalid length. [ 462.702245][T10242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.710076][T10244] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.2035'. [ 462.917856][T10253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2038'. [ 463.164196][T10264] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2042'. [ 463.294301][T10267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2043'. [ 463.361209][T10271] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2045'. [ 463.577358][T10282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.766008][T10291] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2051'. [ 464.513303][T10320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.191593][T10339] FAULT_INJECTION: forcing a failure. [ 465.191593][T10339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.228160][T10339] CPU: 1 PID: 10339 Comm: syz.3.2069 Not tainted syzkaller #0 [ 465.235664][T10339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 465.245736][T10339] Call Trace: [ 465.249038][T10339] [ 465.251983][T10339] dump_stack_lvl+0x188/0x250 [ 465.256709][T10339] ? show_regs_print_info+0x20/0x20 [ 465.261923][T10339] ? load_image+0x400/0x400 [ 465.266450][T10339] ? __lock_acquire+0x7d10/0x7d10 [ 465.271502][T10339] should_fail+0x38c/0x4c0 [ 465.275942][T10339] _copy_from_user+0x2e/0x170 [ 465.280642][T10339] bpf_test_init+0x136/0x1b0 [ 465.285254][T10339] bpf_prog_test_run_skb+0x181/0x10b0 [ 465.290650][T10339] ? lockdep_hardirqs_on+0x94/0x140 [ 465.295872][T10339] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 465.302043][T10339] ? cpu_online+0x60/0x60 [ 465.306404][T10339] ? cpu_online+0x60/0x60 [ 465.310750][T10339] bpf_prog_test_run+0x31e/0x390 [ 465.315708][T10339] __sys_bpf+0x5a5/0x6f0 [ 465.319974][T10339] ? bpf_link_show_fdinfo+0x380/0x380 [ 465.325385][T10339] __x64_sys_bpf+0x78/0x90 [ 465.329819][T10339] do_syscall_64+0x4c/0xa0 [ 465.334249][T10339] ? clear_bhb_loop+0x30/0x80 [ 465.338948][T10339] ? clear_bhb_loop+0x30/0x80 [ 465.343640][T10339] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 465.349546][T10339] RIP: 0033:0x7fb4dd981e59 [ 465.353972][T10339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.373591][T10339] RSP: 002b:00007fb4dbbba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 465.382021][T10339] RAX: ffffffffffffffda RBX: 00007fb4ddbfb090 RCX: 00007fb4dd981e59 [ 465.390017][T10339] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 465.398016][T10339] RBP: 00007fb4dbbba090 R08: 0000000000000000 R09: 0000000000000000 [ 465.406015][T10339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.414006][T10339] R13: 00007fb4ddbfb128 R14: 00007fb4ddbfb090 R15: 00007fffae363d08 [ 465.422009][T10339] [ 467.717713][T10357] FAULT_INJECTION: forcing a failure. [ 467.717713][T10357] name failslab, interval 1, probability 0, space 0, times 0 [ 467.780458][T10357] CPU: 0 PID: 10357 Comm: syz.1.2075 Not tainted syzkaller #0 [ 467.787978][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 467.798056][T10357] Call Trace: [ 467.801351][T10357] [ 467.804289][T10357] dump_stack_lvl+0x188/0x250 [ 467.808987][T10357] ? show_regs_print_info+0x20/0x20 [ 467.814186][T10357] ? load_image+0x400/0x400 [ 467.818694][T10357] ? __might_sleep+0xf0/0xf0 [ 467.823282][T10357] ? __lock_acquire+0x7d10/0x7d10 [ 467.828316][T10357] ? mark_lock+0x94/0x320 [ 467.832675][T10357] should_fail+0x38c/0x4c0 [ 467.837118][T10357] should_failslab+0x5/0x20 [ 467.841622][T10357] slab_pre_alloc_hook+0x51/0xc0 [ 467.846574][T10357] __kmalloc+0x6b/0x330 [ 467.851624][T10357] ? tomoyo_realpath_from_path+0x118/0x610 [ 467.857542][T10357] tomoyo_realpath_from_path+0x118/0x610 [ 467.863199][T10357] tomoyo_path_number_perm+0x242/0x660 [ 467.868663][T10357] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 467.875269][T10357] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 467.880800][T10357] security_file_ioctl+0x6c/0xa0 [ 467.885744][T10357] __se_sys_ioctl+0x48/0x170 [ 467.890339][T10357] do_syscall_64+0x4c/0xa0 [ 467.894751][T10357] ? clear_bhb_loop+0x30/0x80 [ 467.899425][T10357] ? clear_bhb_loop+0x30/0x80 [ 467.904099][T10357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 467.910008][T10357] RIP: 0033:0x7fd863b5fe59 [ 467.914427][T10357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.934026][T10357] RSP: 002b:00007fd861db9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.942439][T10357] RAX: ffffffffffffffda RBX: 00007fd863dd8fa0 RCX: 00007fd863b5fe59 [ 467.950422][T10357] RDX: 0000000000000000 RSI: 0000000040042409 RDI: 0000000000000003 [ 467.958394][T10357] RBP: 00007fd861db9090 R08: 0000000000000000 R09: 0000000000000000 [ 467.966361][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.974333][T10357] R13: 00007fd863dd9038 R14: 00007fd863dd8fa0 R15: 00007fff0238fb18 [ 467.982327][T10357] [ 468.008352][T10366] validate_nla: 20 callbacks suppressed [ 468.008384][T10366] netlink: 'syz.3.2077': attribute type 21 has an invalid length. [ 468.135486][T10357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 468.223548][T10374] netlink: 'syz.3.2080': attribute type 2 has an invalid length. [ 468.241478][T10374] netlink: 'syz.3.2080': attribute type 8 has an invalid length. [ 468.249620][T10374] __nla_validate_parse: 6 callbacks suppressed [ 468.249662][T10374] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2080'. [ 468.270093][T10377] netlink: 'syz.1.2081': attribute type 10 has an invalid length. [ 468.278101][T10377] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2081'. [ 468.333157][T10379] FAULT_INJECTION: forcing a failure. [ 468.333157][T10379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.358650][T10374] netlink: 'syz.3.2080': attribute type 10 has an invalid length. [ 468.411976][T10379] CPU: 1 PID: 10379 Comm: syz.4.2082 Not tainted syzkaller #0 [ 468.419489][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 468.426997][T10381] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2083'. [ 468.429559][T10379] Call Trace: [ 468.429570][T10379] [ 468.429584][T10379] dump_stack_lvl+0x188/0x250 [ 468.429613][T10379] ? show_regs_print_info+0x20/0x20 [ 468.429633][T10379] ? load_image+0x400/0x400 [ 468.459473][T10379] ? __lock_acquire+0x7d10/0x7d10 [ 468.464520][T10379] should_fail+0x38c/0x4c0 [ 468.468949][T10379] _copy_from_user+0x2e/0x170 [ 468.473623][T10379] bpf_test_init+0x136/0x1b0 [ 468.478232][T10379] bpf_prog_test_run_skb+0x181/0x10b0 [ 468.483627][T10379] ? __fget_files+0x40f/0x480 [ 468.488323][T10379] ? cpu_online+0x60/0x60 [ 468.492655][T10379] bpf_prog_test_run+0x31e/0x390 [ 468.497592][T10379] __sys_bpf+0x5a5/0x6f0 [ 468.501837][T10379] ? bpf_link_show_fdinfo+0x380/0x380 [ 468.507216][T10379] ? vtime_user_exit+0x2c8/0x3e0 [ 468.512158][T10379] __x64_sys_bpf+0x78/0x90 [ 468.516573][T10379] do_syscall_64+0x4c/0xa0 [ 468.520981][T10379] ? clear_bhb_loop+0x30/0x80 [ 468.525653][T10379] ? clear_bhb_loop+0x30/0x80 [ 468.530324][T10379] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 468.536210][T10379] RIP: 0033:0x7f815915fe59 [ 468.540621][T10379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.560232][T10379] RSP: 002b:00007f81573b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.568761][T10379] RAX: ffffffffffffffda RBX: 00007f81593d8fa0 RCX: 00007f815915fe59 [ 468.576730][T10379] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 468.584714][T10379] RBP: 00007f81573b9090 R08: 0000000000000000 R09: 0000000000000000 [ 468.592791][T10379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.600769][T10379] R13: 00007f81593d9038 R14: 00007f81593d8fa0 R15: 00007ffc63be88e8 [ 468.608770][T10379] [ 468.925486][T10390] netlink: 'syz.4.2086': attribute type 19 has an invalid length. [ 468.962038][T10390] netlink: 14524 bytes leftover after parsing attributes in process `syz.4.2086'. [ 469.009663][T10398] netlink: 'syz.2.2090': attribute type 21 has an invalid length. [ 469.327469][T10410] netlink: 'syz.1.2094': attribute type 10 has an invalid length. [ 469.342634][T10410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2094'. [ 470.870180][T10420] netlink: 'syz.4.2098': attribute type 2 has an invalid length. [ 470.902844][T10422] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2100'. [ 470.917843][T10420] netlink: 'syz.4.2098': attribute type 8 has an invalid length. [ 470.928651][T10420] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2098'. [ 470.999008][T10434] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2103'. [ 471.168882][T10441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2105'. [ 471.339418][T10446] netlink: 14524 bytes leftover after parsing attributes in process `syz.4.2108'. [ 473.026468][T10538] validate_nla: 15 callbacks suppressed [ 473.026485][T10538] netlink: 'syz.1.2145': attribute type 10 has an invalid length. [ 473.076847][T10535] netlink: 'syz.3.2144': attribute type 19 has an invalid length. [ 473.125975][T10544] netlink: 'syz.2.2148': attribute type 2 has an invalid length. [ 473.165487][T10544] netlink: 'syz.2.2148': attribute type 8 has an invalid length. [ 473.220673][T10544] netlink: 'syz.2.2148': attribute type 10 has an invalid length. [ 473.409504][T10553] netlink: 'syz.0.2152': attribute type 21 has an invalid length. [ 473.471671][T10558] netlink: 'syz.1.2153': attribute type 7 has an invalid length. [ 474.061292][T10585] netlink: 'syz.0.2161': attribute type 19 has an invalid length. [ 474.083006][T10590] __nla_validate_parse: 13 callbacks suppressed [ 474.083040][T10590] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2162'. [ 474.112344][T10585] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.2161'. [ 474.147966][T10588] netlink: 'syz.3.2163': attribute type 10 has an invalid length. [ 474.177169][T10588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2163'. [ 474.435287][T10597] netlink: 'syz.2.2164': attribute type 2 has an invalid length. [ 474.450460][T10597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2164'. [ 475.685641][T10624] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2174'. [ 475.911795][T10635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2175'. [ 476.076278][T10633] netlink: 14524 bytes leftover after parsing attributes in process `syz.4.2176'. [ 476.166374][T10642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2178'. [ 476.202799][T10642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2178'. [ 476.872014][T10668] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2187'. [ 477.329849][T10690] team0: Device nlmon0 is of different type [ 477.962256][T10725] FAULT_INJECTION: forcing a failure. [ 477.962256][T10725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.022907][T10725] CPU: 0 PID: 10725 Comm: syz.4.2207 Not tainted syzkaller #0 [ 478.030407][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.040467][T10725] Call Trace: [ 478.043758][T10725] [ 478.046696][T10725] dump_stack_lvl+0x188/0x250 [ 478.051384][T10725] ? show_regs_print_info+0x20/0x20 [ 478.056595][T10725] ? load_image+0x400/0x400 [ 478.061112][T10725] ? __lock_acquire+0x7d10/0x7d10 [ 478.066155][T10725] should_fail+0x38c/0x4c0 [ 478.070585][T10725] _copy_to_user+0x2e/0x130 [ 478.075095][T10725] simple_read_from_buffer+0xe3/0x150 [ 478.080576][T10725] proc_fail_nth_read+0x1a6/0x220 [ 478.085615][T10725] ? proc_fault_inject_write+0x310/0x310 [ 478.091253][T10725] ? fsnotify_perm+0x254/0x560 [ 478.096018][T10725] ? proc_fault_inject_write+0x310/0x310 [ 478.101648][T10725] vfs_read+0x301/0xd60 [ 478.105805][T10725] ? kernel_read+0x1e0/0x1e0 [ 478.110391][T10725] ? __fget_files+0x40f/0x480 [ 478.115069][T10725] ? mutex_lock_nested+0x17/0x20 [ 478.119998][T10725] ? __fdget_pos+0x2bf/0x370 [ 478.124585][T10725] ? ksys_read+0x71/0x260 [ 478.128909][T10725] ksys_read+0x152/0x260 [ 478.133140][T10725] ? vfs_write+0xd60/0xd60 [ 478.137550][T10725] ? lockdep_hardirqs_on+0x94/0x140 [ 478.142749][T10725] do_syscall_64+0x4c/0xa0 [ 478.147155][T10725] ? clear_bhb_loop+0x30/0x80 [ 478.151821][T10725] ? clear_bhb_loop+0x30/0x80 [ 478.156489][T10725] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 478.162372][T10725] RIP: 0033:0x7f815912068e [ 478.166786][T10725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 478.186379][T10725] RSP: 002b:00007f81573b8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.194795][T10725] RAX: ffffffffffffffda RBX: 00007f81573b96c0 RCX: 00007f815912068e [ 478.202763][T10725] RDX: 000000000000000f RSI: 00007f81573b90a0 RDI: 0000000000000006 [ 478.210730][T10725] RBP: 00007f81573b9090 R08: 0000000000000000 R09: 0000000000000000 [ 478.218694][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.226654][T10725] R13: 00007f81593d9038 R14: 00007f81593d8fa0 R15: 00007ffc63be88e8 [ 478.234631][T10725] [ 478.283154][T10728] validate_nla: 23 callbacks suppressed [ 478.283191][T10728] netlink: 'syz.2.2208': attribute type 10 has an invalid length. [ 478.551082][T10730] netlink: 'syz.3.2209': attribute type 19 has an invalid length. [ 479.199949][T10755] netlink: 'syz.2.2216': attribute type 21 has an invalid length. [ 479.254478][T10756] device pim6reg1 entered promiscuous mode [ 479.275834][T10760] __nla_validate_parse: 7 callbacks suppressed [ 479.275889][T10760] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2219'. [ 479.408086][T10765] netlink: 'syz.2.2220': attribute type 10 has an invalid length. [ 479.439241][T10765] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2220'. [ 479.471079][T10767] netlink: 'syz.1.2222': attribute type 2 has an invalid length. [ 479.505905][T10767] netlink: 'syz.1.2222': attribute type 8 has an invalid length. [ 479.528131][T10767] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2222'. [ 479.563463][T10775] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2224'. [ 479.579244][T10774] netlink: 'syz.1.2222': attribute type 2 has an invalid length. [ 479.656819][T10774] netlink: 'syz.1.2222': attribute type 8 has an invalid length. [ 479.670750][T10774] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2222'. [ 479.686900][T10780] netlink: 'syz.2.2225': attribute type 10 has an invalid length. [ 479.710524][T10780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2225'. [ 480.913615][T10805] netlink: 'syz.2.2231': attribute type 21 has an invalid length. [ 481.112980][T10819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2235'. [ 481.209347][T10821] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2237'. [ 481.749978][T10834] device nlmon0 entered promiscuous mode [ 481.779557][T10834] team0: Device nlmon0 is of different type [ 482.432261][T10857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2247'. [ 482.815945][T10867] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2251'. [ 483.384733][T10884] validate_nla: 8 callbacks suppressed [ 483.384748][T10884] netlink: 'syz.0.2259': attribute type 10 has an invalid length. [ 484.008446][T10906] netlink: 'syz.4.2265': attribute type 21 has an invalid length. [ 484.098134][T10906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 484.372513][T10915] device bridge_slave_1 left promiscuous mode [ 484.384433][T10915] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.547005][T10915] device bridge_slave_0 left promiscuous mode [ 484.564070][T10915] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.631222][T10915] bond0: (slave bridge0): Releasing backup interface [ 484.680032][T10915] device bridge0 left promiscuous mode [ 484.840211][T10913] netlink: 'syz.4.2268': attribute type 21 has an invalid length. [ 485.005314][T10920] netlink: 'syz.2.2271': attribute type 2 has an invalid length. [ 485.038942][T10920] netlink: 'syz.2.2271': attribute type 8 has an invalid length. [ 485.076437][T10920] __nla_validate_parse: 3 callbacks suppressed [ 485.076472][T10920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2271'. [ 485.139064][T10923] netlink: 'syz.4.2272': attribute type 10 has an invalid length. [ 485.168314][T10923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2272'. [ 485.210387][T10927] netlink: 'syz.2.2271': attribute type 2 has an invalid length. [ 485.218152][T10927] netlink: 'syz.2.2271': attribute type 8 has an invalid length. [ 485.257387][T10927] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2271'. [ 485.667239][T10944] netlink: 'syz.4.2278': attribute type 21 has an invalid length. [ 485.710607][T10944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 485.725894][T10937] netlink: 'syz.2.2277': attribute type 19 has an invalid length. [ 485.759446][T10937] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.2277'. [ 485.888384][T10952] FAULT_INJECTION: forcing a failure. [ 485.888384][T10952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.994228][T10952] CPU: 1 PID: 10952 Comm: syz.1.2282 Not tainted syzkaller #0 [ 486.001725][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.011790][T10952] Call Trace: [ 486.015083][T10952] [ 486.018024][T10952] dump_stack_lvl+0x188/0x250 [ 486.022764][T10952] ? show_regs_print_info+0x20/0x20 [ 486.027980][T10952] ? load_image+0x400/0x400 [ 486.032503][T10952] ? __lock_acquire+0x7d10/0x7d10 [ 486.037546][T10952] should_fail+0x38c/0x4c0 [ 486.041971][T10952] _copy_to_user+0x2e/0x130 [ 486.046480][T10952] simple_read_from_buffer+0xe3/0x150 [ 486.051854][T10952] proc_fail_nth_read+0x1a6/0x220 [ 486.056874][T10952] ? proc_fault_inject_write+0x310/0x310 [ 486.062498][T10952] ? fsnotify_perm+0x254/0x560 [ 486.067255][T10952] ? proc_fault_inject_write+0x310/0x310 [ 486.072877][T10952] vfs_read+0x301/0xd60 [ 486.077031][T10952] ? kernel_read+0x1e0/0x1e0 [ 486.081623][T10952] ? __fget_files+0x40f/0x480 [ 486.086293][T10952] ? mutex_lock_nested+0x17/0x20 [ 486.091218][T10952] ? __fdget_pos+0x2bf/0x370 [ 486.095794][T10952] ? ksys_read+0x71/0x260 [ 486.100112][T10952] ksys_read+0x152/0x260 [ 486.104346][T10952] ? vfs_write+0xd60/0xd60 [ 486.108750][T10952] ? lockdep_hardirqs_on+0x94/0x140 [ 486.113937][T10952] do_syscall_64+0x4c/0xa0 [ 486.118338][T10952] ? clear_bhb_loop+0x30/0x80 [ 486.123001][T10952] ? clear_bhb_loop+0x30/0x80 [ 486.127666][T10952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 486.133552][T10952] RIP: 0033:0x7fd863b2068e [ 486.137955][T10952] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 486.157550][T10952] RSP: 002b:00007fd861db8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 486.165953][T10952] RAX: ffffffffffffffda RBX: 00007fd861db96c0 RCX: 00007fd863b2068e [ 486.173910][T10952] RDX: 000000000000000f RSI: 00007fd861db90a0 RDI: 0000000000000005 [ 486.181867][T10952] RBP: 00007fd861db9090 R08: 0000000000000000 R09: 0000000000000000 [ 486.189831][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.197810][T10952] R13: 00007fd863dd9038 R14: 00007fd863dd8fa0 R15: 00007fff0238fb18 [ 486.205789][T10952] [ 486.474282][T10965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2286'. [ 486.538253][T10957] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2284'. [ 486.741880][T10968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2287'. [ 486.816424][T10968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2287'. [ 487.754136][T10982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 487.890114][T10991] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.2294'. [ 488.135883][T11003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2297'. [ 488.241446][T11009] FAULT_INJECTION: forcing a failure. [ 488.241446][T11009] name failslab, interval 1, probability 0, space 0, times 0 [ 488.254514][T11009] CPU: 0 PID: 11009 Comm: syz.2.2302 Not tainted syzkaller #0 [ 488.261995][T11009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 488.272073][T11009] Call Trace: [ 488.275360][T11009] [ 488.278299][T11009] dump_stack_lvl+0x188/0x250 [ 488.283014][T11009] ? show_regs_print_info+0x20/0x20 [ 488.288235][T11009] ? load_image+0x400/0x400 [ 488.292763][T11009] ? __might_sleep+0xf0/0xf0 [ 488.297372][T11009] ? __lock_acquire+0x7d10/0x7d10 [ 488.302420][T11009] should_fail+0x38c/0x4c0 [ 488.306861][T11009] should_failslab+0x5/0x20 [ 488.311375][T11009] slab_pre_alloc_hook+0x51/0xc0 [ 488.316332][T11009] __kmalloc+0x6b/0x330 [ 488.320501][T11009] ? bpf_test_init+0xf8/0x1b0 [ 488.325198][T11009] bpf_test_init+0xf8/0x1b0 [ 488.329722][T11009] bpf_prog_test_run_skb+0x181/0x10b0 [ 488.335129][T11009] ? lockdep_hardirqs_on+0x94/0x140 [ 488.340344][T11009] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 488.346529][T11009] ? cpu_online+0x60/0x60 [ 488.350881][T11009] bpf_prog_test_run+0x31e/0x390 [ 488.355838][T11009] __sys_bpf+0x5a5/0x6f0 [ 488.360100][T11009] ? bpf_link_show_fdinfo+0x380/0x380 [ 488.365511][T11009] __x64_sys_bpf+0x78/0x90 [ 488.369943][T11009] do_syscall_64+0x4c/0xa0 [ 488.374371][T11009] ? clear_bhb_loop+0x30/0x80 [ 488.379058][T11009] ? clear_bhb_loop+0x30/0x80 [ 488.383749][T11009] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 488.389664][T11009] RIP: 0033:0x7f56313b7e59 [ 488.394101][T11009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.413720][T11009] RSP: 002b:00007f562f611028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 488.422151][T11009] RAX: ffffffffffffffda RBX: 00007f5631630fa0 RCX: 00007f56313b7e59 [ 488.430145][T11009] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 488.438130][T11009] RBP: 00007f562f611090 R08: 0000000000000000 R09: 0000000000000000 [ 488.446117][T11009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.454101][T11009] R13: 00007f5631631038 R14: 00007f5631630fa0 R15: 00007fff2f044b18 [ 488.462110][T11009] [ 491.093227][T11012] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2301'. [ 491.181880][T11012] team0: Port device team_slave_0 removed [ 491.195331][T11012] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 491.322559][T11024] FAULT_INJECTION: forcing a failure. [ 491.322559][T11024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.413580][T11030] validate_nla: 8 callbacks suppressed [ 491.413614][T11030] netlink: 'syz.4.2307': attribute type 21 has an invalid length. [ 491.428073][T11024] CPU: 0 PID: 11024 Comm: syz.3.2304 Not tainted syzkaller #0 [ 491.435556][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 491.445628][T11024] Call Trace: [ 491.448915][T11024] [ 491.451850][T11024] dump_stack_lvl+0x188/0x250 [ 491.456533][T11024] ? show_regs_print_info+0x20/0x20 [ 491.461733][T11024] ? load_image+0x400/0x400 [ 491.466240][T11024] ? __lock_acquire+0x7d10/0x7d10 [ 491.471259][T11024] should_fail+0x38c/0x4c0 [ 491.475671][T11024] _copy_from_user+0x2e/0x170 [ 491.480344][T11024] bpf_test_init+0x136/0x1b0 [ 491.484930][T11024] bpf_prog_test_run_skb+0x181/0x10b0 [ 491.490301][T11024] ? __fget_files+0x40f/0x480 [ 491.494981][T11024] ? cpu_online+0x60/0x60 [ 491.499301][T11024] bpf_prog_test_run+0x31e/0x390 [ 491.504232][T11024] __sys_bpf+0x5a5/0x6f0 [ 491.508476][T11024] ? bpf_link_show_fdinfo+0x380/0x380 [ 491.513850][T11024] __x64_sys_bpf+0x78/0x90 [ 491.518258][T11024] do_syscall_64+0x4c/0xa0 [ 491.522661][T11024] ? clear_bhb_loop+0x30/0x80 [ 491.527325][T11024] ? clear_bhb_loop+0x30/0x80 [ 491.531998][T11024] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 491.537881][T11024] RIP: 0033:0x7fb4dd981e59 [ 491.542288][T11024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.561883][T11024] RSP: 002b:00007fb4dbbdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.570291][T11024] RAX: ffffffffffffffda RBX: 00007fb4ddbfafa0 RCX: 00007fb4dd981e59 [ 491.578253][T11024] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 491.586217][T11024] RBP: 00007fb4dbbdb090 R08: 0000000000000000 R09: 0000000000000000 [ 491.594178][T11024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.602134][T11024] R13: 00007fb4ddbfb038 R14: 00007fb4ddbfafa0 R15: 00007fffae363d08 [ 491.610105][T11024] [ 491.629341][T11030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 492.020969][T11050] netlink: 'syz.0.2313': attribute type 10 has an invalid length. [ 492.049416][T11050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2313'. [ 492.106009][T11049] netlink: 'syz.3.2312': attribute type 19 has an invalid length. [ 492.133474][T11049] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.2312'. [ 492.423809][T11059] FAULT_INJECTION: forcing a failure. [ 492.423809][T11059] name failslab, interval 1, probability 0, space 0, times 0 [ 492.535646][T11059] CPU: 1 PID: 11059 Comm: syz.3.2316 Not tainted syzkaller #0 [ 492.543152][T11059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.553219][T11059] Call Trace: [ 492.556508][T11059] [ 492.559436][T11059] dump_stack_lvl+0x188/0x250 [ 492.564124][T11059] ? show_regs_print_info+0x20/0x20 [ 492.569329][T11059] ? load_image+0x400/0x400 [ 492.573839][T11059] ? __might_sleep+0xf0/0xf0 [ 492.578431][T11059] ? __lock_acquire+0x7d10/0x7d10 [ 492.583460][T11059] should_fail+0x38c/0x4c0 [ 492.587892][T11059] should_failslab+0x5/0x20 [ 492.592404][T11059] slab_pre_alloc_hook+0x51/0xc0 [ 492.597347][T11059] __kmalloc_node+0x6e/0x3b0 [ 492.601939][T11059] ? kvmalloc_node+0x84/0x130 [ 492.606706][T11059] ? __might_fault+0xb3/0x110 [ 492.611456][T11059] kvmalloc_node+0x84/0x130 [ 492.615968][T11059] map_update_elem+0x53d/0x770 [ 492.620756][T11059] __sys_bpf+0x46b/0x6f0 [ 492.625006][T11059] ? bpf_link_show_fdinfo+0x380/0x380 [ 492.630400][T11059] ? vtime_user_exit+0x2c8/0x3e0 [ 492.635353][T11059] __x64_sys_bpf+0x78/0x90 [ 492.639777][T11059] do_syscall_64+0x4c/0xa0 [ 492.644198][T11059] ? clear_bhb_loop+0x30/0x80 [ 492.648885][T11059] ? clear_bhb_loop+0x30/0x80 [ 492.653574][T11059] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 492.659479][T11059] RIP: 0033:0x7fb4dd981e59 [ 492.663902][T11059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.683519][T11059] RSP: 002b:00007fb4dbbdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 492.691947][T11059] RAX: ffffffffffffffda RBX: 00007fb4ddbfafa0 RCX: 00007fb4dd981e59 [ 492.699927][T11059] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000002 [ 492.707916][T11059] RBP: 00007fb4dbbdb090 R08: 0000000000000000 R09: 0000000000000000 [ 492.715907][T11059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.723892][T11059] R13: 00007fb4ddbfb038 R14: 00007fb4ddbfafa0 R15: 00007fffae363d08 [ 492.731896][T11059] [ 493.079632][T11070] netlink: 'syz.4.2321': attribute type 21 has an invalid length. [ 493.128938][T11070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.329314][T11082] netlink: 'syz.4.2323': attribute type 21 has an invalid length. [ 493.354595][T11082] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2323'. [ 493.435036][T11090] netlink: 'syz.0.2325': attribute type 10 has an invalid length. [ 493.452084][T11090] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2325'. [ 493.788250][T11092] netlink: 'syz.3.2326': attribute type 19 has an invalid length. [ 493.830807][T11092] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.2326'. [ 494.279122][T11113] netlink: 'syz.3.2333': attribute type 21 has an invalid length. [ 494.297601][T11113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.514336][T11154] netlink: 'syz.0.2343': attribute type 19 has an invalid length. [ 495.590455][T11154] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.2343'. [ 496.047324][T11170] netlink: 'syz.3.2349': attribute type 21 has an invalid length. [ 496.230002][T11170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 496.813523][T11191] FAULT_INJECTION: forcing a failure. [ 496.813523][T11191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.961752][T11191] CPU: 0 PID: 11191 Comm: syz.4.2356 Not tainted syzkaller #0 [ 496.969260][T11191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 496.979321][T11191] Call Trace: [ 496.982603][T11191] [ 496.985536][T11191] dump_stack_lvl+0x188/0x250 [ 496.990223][T11191] ? show_regs_print_info+0x20/0x20 [ 496.995425][T11191] ? load_image+0x400/0x400 [ 496.999945][T11191] ? __lock_acquire+0x7d10/0x7d10 [ 497.004984][T11191] should_fail+0x38c/0x4c0 [ 497.009416][T11191] _copy_to_user+0x2e/0x130 [ 497.013934][T11191] simple_read_from_buffer+0xe3/0x150 [ 497.019317][T11191] proc_fail_nth_read+0x1a6/0x220 [ 497.024351][T11191] ? proc_fault_inject_write+0x310/0x310 [ 497.029996][T11191] ? fsnotify_perm+0x254/0x560 [ 497.034765][T11191] ? proc_fault_inject_write+0x310/0x310 [ 497.040411][T11191] vfs_read+0x301/0xd60 [ 497.045020][T11191] ? kernel_read+0x1e0/0x1e0 [ 497.049627][T11191] ? __fget_files+0x40f/0x480 [ 497.054314][T11191] ? mutex_lock_nested+0x17/0x20 [ 497.059260][T11191] ? __fdget_pos+0x2bf/0x370 [ 497.063852][T11191] ? ksys_read+0x71/0x260 [ 497.068191][T11191] ksys_read+0x152/0x260 [ 497.072439][T11191] ? vfs_write+0xd60/0xd60 [ 497.076863][T11191] ? lockdep_hardirqs_on+0x94/0x140 [ 497.082085][T11191] do_syscall_64+0x4c/0xa0 [ 497.086509][T11191] ? clear_bhb_loop+0x30/0x80 [ 497.091194][T11191] ? clear_bhb_loop+0x30/0x80 [ 497.095875][T11191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 497.101778][T11191] RIP: 0033:0x7f815912068e [ 497.106200][T11191] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 497.125812][T11191] RSP: 002b:00007f81573b8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 497.134246][T11191] RAX: ffffffffffffffda RBX: 00007f81573b96c0 RCX: 00007f815912068e [ 497.142227][T11191] RDX: 000000000000000f RSI: 00007f81573b90a0 RDI: 0000000000000009 [ 497.150207][T11191] RBP: 00007f81573b9090 R08: 0000000000000000 R09: 0000000000000000 [ 497.158181][T11191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.166160][T11191] R13: 00007f81593d9038 R14: 00007f81593d8fa0 R15: 00007ffc63be88e8 [ 497.174158][T11191] [ 497.514060][T11202] FAULT_INJECTION: forcing a failure. [ 497.514060][T11202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.581635][T11202] CPU: 0 PID: 11202 Comm: syz.0.2360 Not tainted syzkaller #0 [ 497.589148][T11202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.599217][T11202] Call Trace: [ 497.602507][T11202] [ 497.605442][T11202] dump_stack_lvl+0x188/0x250 [ 497.610115][T11202] ? show_regs_print_info+0x20/0x20 [ 497.615298][T11202] ? load_image+0x400/0x400 [ 497.619818][T11202] ? __lock_acquire+0x7d10/0x7d10 [ 497.624846][T11202] should_fail+0x38c/0x4c0 [ 497.629256][T11202] _copy_from_user+0x2e/0x170 [ 497.633919][T11202] iovec_from_user+0x142/0x370 [ 497.638676][T11202] __import_iovec+0x70/0x490 [ 497.643261][T11202] import_iovec+0x6f/0xa0 [ 497.647584][T11202] ___sys_sendmsg+0x1fd/0x2e0 [ 497.652257][T11202] ? __sys_sendmsg+0x2a0/0x2a0 [ 497.657026][T11202] ? trace_event_raw_event_lock+0x270/0x270 [ 497.662910][T11202] ? vfs_write+0x8b2/0xd60 [ 497.667334][T11202] __se_sys_sendmsg+0x1af/0x290 [ 497.672181][T11202] ? __x64_sys_sendmsg+0x80/0x80 [ 497.677107][T11202] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 497.683084][T11202] ? lockdep_hardirqs_on+0x94/0x140 [ 497.688280][T11202] do_syscall_64+0x4c/0xa0 [ 497.692689][T11202] ? clear_bhb_loop+0x30/0x80 [ 497.697360][T11202] ? clear_bhb_loop+0x30/0x80 [ 497.702027][T11202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 497.707908][T11202] RIP: 0033:0x7f19aaf29e59 [ 497.712318][T11202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.731909][T11202] RSP: 002b:00007f19a9183028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.740315][T11202] RAX: ffffffffffffffda RBX: 00007f19ab1a2fa0 RCX: 00007f19aaf29e59 [ 497.748274][T11202] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000004 [ 497.756241][T11202] RBP: 00007f19a9183090 R08: 0000000000000000 R09: 0000000000000000 [ 497.764196][T11202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.772151][T11202] R13: 00007f19ab1a3038 R14: 00007f19ab1a2fa0 R15: 00007ffd4f543338 [ 497.780119][T11202] [ 498.009493][T11207] netlink: 'syz.2.2361': attribute type 19 has an invalid length. [ 498.053680][T11207] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.2361'. [ 498.257406][T11219] netlink: 'syz.2.2364': attribute type 21 has an invalid length. [ 498.296746][T11219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.949838][T11247] netlink: 'syz.0.2371': attribute type 21 has an invalid length. [ 499.028336][T11247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.357594][T11253] netlink: 'syz.0.2373': attribute type 3 has an invalid length. [ 499.387900][T11253] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2373'. [ 501.253748][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.260694][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.292875][T11259] netlink: 'syz.0.2374': attribute type 19 has an invalid length. [ 502.343265][T11259] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.2374'. Stopping sshd: [ 502.457356][T11271] netlink: 'syz.3.2377': attribute type 21 has an invalid length. [ 502.476919][T11271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE stopped /usr/sbin/sshd (pid 3951) OK [ 502.586563][T11277] FAULT_INJECTION: forcing a failure. [ 502.586563][T11277] name failslab, interval 1, probability 0, space 0, times 0 [ 502.639938][T11277] CPU: 1 PID: 11277 Comm: syz.4.2379 Not tainted syzkaller #0 [ 502.647445][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.657507][T11277] Call Trace: [ 502.660793][T11277] [ 502.663727][T11277] dump_stack_lvl+0x188/0x250 [ 502.668415][T11277] ? show_regs_print_info+0x20/0x20 [ 502.673623][T11277] ? load_image+0x400/0x400 [ 502.678139][T11277] ? __might_sleep+0xf0/0xf0 [ 502.682736][T11277] ? __lock_acquire+0x7d10/0x7d10 [ 502.687783][T11277] should_fail+0x38c/0x4c0 [ 502.692217][T11277] should_failslab+0x5/0x20 [ 502.696725][T11277] slab_pre_alloc_hook+0x51/0xc0 [ 502.701666][T11277] __kmalloc+0x6b/0x330 [ 502.705824][T11277] ? bpf_test_init+0xf8/0x1b0 [ 502.710507][T11277] ? __lock_acquire+0x7d10/0x7d10 [ 502.715546][T11277] bpf_test_init+0xf8/0x1b0 [ 502.720072][T11277] bpf_prog_test_run_skb+0x181/0x10b0 [ 502.725454][T11277] ? __fget_files+0x40f/0x480 [ 502.730150][T11277] ? cpu_online+0x60/0x60 [ 502.734493][T11277] bpf_prog_test_run+0x31e/0x390 [ 502.739448][T11277] __sys_bpf+0x5a5/0x6f0 [ 502.743705][T11277] ? bpf_link_show_fdinfo+0x380/0x380 [ 502.749092][T11277] ? rcu_nmi_exit+0x6f/0xf0 [ 502.753621][T11277] ? vtime_user_exit+0x2c8/0x3e0 [ 502.758585][T11277] __x64_sys_bpf+0x78/0x90 [ 502.763034][T11277] do_syscall_64+0x4c/0xa0 [ 502.767459][T11277] ? clear_bhb_loop+0x30/0x80 [ 502.772144][T11277] ? clear_bhb_loop+0x30/0x80 [ 502.776834][T11277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 502.782742][T11277] RIP: 0033:0x7f815915fe59 [ 502.787168][T11277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.806781][T11277] RSP: 002b:00007f81573b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 502.815214][T11277] RAX: ffffffffffffffda RBX: 00007f81593d8fa0 RCX: 00007f815915fe59 [ 502.823197][T11277] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 502.831181][T11277] RBP: 00007f81573b9090 R08: 0000000000000000 R09: 0000000000000000 [ 502.839159][T11277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.847141][T11277] R13: 00007f81593d9038 R14: 00007f81593d8fa0 R15: 00007ffc63be88e8 [ 502.855138][T11277] Stopping crond: stopped /usr/sbin/crond (pid 3928) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3853) Stopping network: [ 503.481002][T11300] netlink: 'syz.3.2382': attribute type 21 has an invalid length. [ 503.659846][T11300] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2382'. [ 503.715686][T11312] netlink: 'syz.4.2385': attribute type 2 has an invalid length. [ 503.740975][T11312] netlink: 'syz.4.2385': attribute type 8 has an invalid length. [ 503.748881][T11312] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2385'. [ 503.839158][T11321] netlink: 'syz.4.2385': attribute type 2 has an invalid length. [ 503.961334][T11321] netlink: 'syz.4.2385': attribute type 8 has an invalid length. [ 503.983536][T11321] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2385'. [ 504.046382][T11313] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2386'. [ 504.111337][T11313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.222128][T11313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.330757][T11313] bond0 (unregistering): Released all slaves [ 504.525643][T11337] netlink: 'syz.4.2390': attribute type 19 has an invalid length. [ 504.548424][T11337] netlink: 14524 bytes leftover after parsing attributes in process `syz.4.2390'. [ 504.584452][T11346] netlink: 'syz.1.2392': attribute type 30 has an invalid length. OK [ 504.816999][T11354] FAULT_INJECTION: forcing a failure. [ 504.816999][T11354] name failslab, interval 1, probability 0, space 0, times 0 Stopping iptables: [ 504.906628][T11359] FAULT_INJECTION: forcing a failure. [ 504.906628][T11359] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 504.938502][T11352] netlink: 'syz.1.2393': attribute type 21 has an invalid length. [ 504.987001][T11354] CPU: 0 PID: 11354 Comm: syz.3.2394 Not tainted syzkaller #0 [ 504.989169][T11352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 504.994499][T11354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 504.994515][T11354] Call Trace: [ 504.994521][T11354] [ 504.994529][T11354] dump_stack_lvl+0x188/0x250 [ 504.994555][T11354] ? show_regs_print_info+0x20/0x20 [ 504.994572][T11354] ? load_image+0x400/0x400 [ 504.994595][T11354] ? memset+0x1e/0x40 [ 505.036312][T11354] should_fail+0x38c/0x4c0 [ 505.040734][T11354] should_failslab+0x5/0x20 [ 505.045229][T11354] slab_pre_alloc_hook+0x51/0xc0 [ 505.050153][T11354] ? __build_skb+0x26/0x2e0 [ 505.054644][T11354] kmem_cache_alloc+0x3d/0x290 [ 505.059398][T11354] __build_skb+0x26/0x2e0 [ 505.063722][T11354] build_skb+0x1e/0x170 [ 505.067865][T11354] bpf_prog_test_run_skb+0x260/0x10b0 [ 505.073227][T11354] ? __fget_files+0x40f/0x480 [ 505.077900][T11354] ? cpu_online+0x60/0x60 [ 505.082218][T11354] bpf_prog_test_run+0x31e/0x390 [ 505.087153][T11354] __sys_bpf+0x5a5/0x6f0 [ 505.091389][T11354] ? bpf_link_show_fdinfo+0x380/0x380 [ 505.096758][T11354] ? vtime_user_exit+0x2c8/0x3e0 [ 505.101690][T11354] __x64_sys_bpf+0x78/0x90 [ 505.106094][T11354] do_syscall_64+0x4c/0xa0 [ 505.110496][T11354] ? clear_bhb_loop+0x30/0x80 [ 505.115161][T11354] ? clear_bhb_loop+0x30/0x80 [ 505.119824][T11354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 505.125705][T11354] RIP: 0033:0x7fb4dd981e59 [ 505.130108][T11354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.149698][T11354] RSP: 002b:00007fb4dbbdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 505.158104][T11354] RAX: ffffffffffffffda RBX: 00007fb4ddbfafa0 RCX: 00007fb4dd981e59 [ 505.166062][T11354] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 505.174016][T11354] RBP: 00007fb4dbbdb090 R08: 0000000000000000 R09: 0000000000000000 [ 505.181972][T11354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.189926][T11354] R13: 00007fb4ddbfb038 R14: 00007fb4ddbfafa0 R15: 00007fffae363d08 [ 505.198026][T11354] [ 505.203036][T11359] CPU: 1 PID: 11359 Comm: syz.0.2396 Not tainted syzkaller #0 [ 505.210523][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 505.220589][T11359] Call Trace: [ 505.223873][T11359] [ 505.226802][T11359] dump_stack_lvl+0x188/0x250 [ 505.231491][T11359] ? show_regs_print_info+0x20/0x20 [ 505.236697][T11359] ? load_image+0x400/0x400 [ 505.241204][T11359] ? __lock_acquire+0x7d10/0x7d10 [ 505.246238][T11359] ? slab_post_alloc_hook+0x4c/0x380 [ 505.251535][T11359] ? __alloc_skb+0xf4/0x750 [ 505.256048][T11359] ? alloc_skb_with_frags+0xa7/0x730 [ 505.261402][T11359] ? sock_alloc_send_pskb+0x87f/0x9a0 [ 505.266764][T11359] should_fail+0x38c/0x4c0 [ 505.271173][T11359] prepare_alloc_pages+0x1e4/0x5f0 [ 505.276298][T11359] __alloc_pages+0x11b/0x480 [ 505.280880][T11359] ? zone_statistics+0x170/0x170 [ 505.285816][T11359] kmalloc_large_node+0x7d/0x190 [ 505.290745][T11359] __kmalloc_node_track_caller+0x22e/0x3a0 [ 505.296535][T11359] ? alloc_skb_with_frags+0xa7/0x730 [ 505.301804][T11359] ? kmem_cache_alloc_node+0x162/0x2d0 [ 505.307248][T11359] ? __alloc_skb+0xf4/0x750 [ 505.311737][T11359] ? alloc_skb_with_frags+0xa7/0x730 [ 505.317008][T11359] __alloc_skb+0x22c/0x750 [ 505.321412][T11359] alloc_skb_with_frags+0xa7/0x730 [ 505.326509][T11359] ? mark_lock+0x94/0x320 [ 505.330827][T11359] sock_alloc_send_pskb+0x87f/0x9a0 [ 505.336028][T11359] ? sock_kzfree_s+0x50/0x50 [ 505.340618][T11359] tun_get_user+0x7c8/0x3a70 [ 505.345269][T11359] ? tun_ring_recv+0xc40/0xc40 [ 505.350031][T11359] ? rcu_lock_release+0x5/0x20 [ 505.354789][T11359] ? __lock_acquire+0x7d10/0x7d10 [ 505.359822][T11359] tun_chr_write_iter+0x112/0x1e0 [ 505.364838][T11359] vfs_write+0x745/0xd60 [ 505.369076][T11359] ? file_end_write+0x250/0x250 [ 505.373918][T11359] ? __fget_files+0x40f/0x480 [ 505.378585][T11359] ? __fdget_pos+0x1e2/0x370 [ 505.383158][T11359] ? ksys_write+0x71/0x260 [ 505.387562][T11359] ksys_write+0x152/0x260 [ 505.391880][T11359] ? __ia32_sys_read+0x80/0x80 [ 505.396632][T11359] ? lockdep_hardirqs_on+0x94/0x140 [ 505.401824][T11359] do_syscall_64+0x4c/0xa0 [ 505.406232][T11359] ? clear_bhb_loop+0x30/0x80 [ 505.410895][T11359] ? clear_bhb_loop+0x30/0x80 [ 505.415564][T11359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 505.421443][T11359] RIP: 0033:0x7f19aaf29e59 [ 505.425853][T11359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.445441][T11359] RSP: 002b:00007f19a9183028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 505.453845][T11359] RAX: ffffffffffffffda RBX: 00007f19ab1a2fa0 RCX: 00007f19aaf29e59 [ 505.461805][T11359] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 505.469765][T11359] RBP: 00007f19a9183090 R08: 0000000000000000 R09: 0000000000000000 [ 505.477720][T11359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.485676][T11359] R13: 00007f19ab1a3038 R14: 00007f19ab1a2fa0 R15: 00007ffd4f543338 [ 505.493644][T11359] OK Stopping system message bus: [ 506.392866][T11391] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2403'. [ 506.486893][T11388] netlink: 'syz.3.2402': attribute type 2 has an invalid length. [ 506.546728][T11388] netlink: 'syz.3.2402': attribute type 8 has an invalid length. [ 506.692951][T11388] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2402'. [ 506.802808][T11394] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2402'. done [ 507.013204][T11406] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.2407'. [ 507.218659][T11412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.323058][T11423] netlink: 197204 bytes leftover after parsing attributes in process `syz.1.2411'. [ 507.956004][T11448] FAULT_INJECTION: forcing a failure. [ 507.956004][T11448] name failslab, interval 1, probability 0, space 0, times 0 [ 508.023980][T11448] CPU: 1 PID: 11448 Comm: syz.1.2419 Not tainted syzkaller #0 [ 508.031486][T11448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 508.041555][T11448] Call Trace: [ 508.044840][T11448] [ 508.047768][T11448] dump_stack_lvl+0x188/0x250 [ 508.052436][T11448] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 508.058588][T11448] ? show_regs_print_info+0x20/0x20 [ 508.063769][T11448] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 508.069911][T11448] ? dump_stack+0x5/0x20 [ 508.074153][T11448] should_fail+0x38c/0x4c0 [ 508.078573][T11448] should_failslab+0x5/0x20 [ 508.083084][T11448] slab_pre_alloc_hook+0x51/0xc0 [ 508.088028][T11448] __kmalloc_node_track_caller+0x68/0x3a0 [ 508.093733][T11448] ? netlink_sendmsg+0x654/0xbe0 [ 508.098656][T11448] ? kmem_cache_alloc_node+0x162/0x2d0 [ 508.104107][T11448] ? __alloc_skb+0xf4/0x750 [ 508.108602][T11448] ? netlink_sendmsg+0x654/0xbe0 [ 508.113524][T11448] __alloc_skb+0x22c/0x750 [ 508.117929][T11448] netlink_sendmsg+0x654/0xbe0 [ 508.122682][T11448] ? netlink_getsockopt+0x570/0x570 [ 508.127870][T11448] ? aa_sock_msg_perm+0x94/0x150 [ 508.132797][T11448] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 508.138081][T11448] ? security_socket_sendmsg+0x7c/0xa0 [ 508.143543][T11448] ? netlink_getsockopt+0x570/0x570 [ 508.148738][T11448] ____sys_sendmsg+0x5b7/0x8f0 [ 508.153502][T11448] ? __sys_sendmsg_sock+0x30/0x30 [ 508.158532][T11448] ? import_iovec+0x6f/0xa0 [ 508.163028][T11448] ___sys_sendmsg+0x236/0x2e0 [ 508.167698][T11448] ? __sys_sendmsg+0x2a0/0x2a0 [ 508.172476][T11448] __se_sys_sendmsg+0x1af/0x290 [ 508.177318][T11448] ? __x64_sys_sendmsg+0x80/0x80 [ 508.182253][T11448] ? syscall_enter_from_user_mode+0x2a/0x70 [ 508.188135][T11448] do_syscall_64+0x4c/0xa0 [ 508.192538][T11448] ? clear_bhb_loop+0x30/0x80 [ 508.197198][T11448] ? clear_bhb_loop+0x30/0x80 [ 508.202532][T11448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.208424][T11448] RIP: 0033:0x7fd863b5fe59 [ 508.212836][T11448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.232431][T11448] RSP: 002b:00007fd861db9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.240834][T11448] RAX: ffffffffffffffda RBX: 00007fd863dd8fa0 RCX: 00007fd863b5fe59 [ 508.248789][T11448] RDX: 000000002000c884 RSI: 00002000000016c0 RDI: 0000000000000005 [ 508.256745][T11448] RBP: 00007fd861db9090 R08: 0000000000000000 R09: 0000000000000000 [ 508.264699][T11448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.272652][T11448] R13: 00007fd863dd9038 R14: 00007fd863dd8fa0 R15: 00007fff0238fb18 [ 508.280621][T11448] killall: can't kill pid 11028: No such process Stopping klogd: [ 508.910846][T11470] validate_nla: 8 callbacks suppressed [ 508.910882][T11470] netlink: 'syz.1.2425': attribute type 21 has an invalid length. [ 508.951168][T11470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE OK Stopping acpid: [ 509.354795][T11482] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 509.706765][T11502] __nla_validate_parse: 3 callbacks suppressed [ 509.706804][T11502] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2434'. [ 509.803535][T11505] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2436'. [ 510.202092][T11515] netlink: 'syz.0.2438': attribute type 21 has an invalid length. [ 510.348420][T11518] netlink: 'syz.1.2439': attribute type 2 has an invalid length. [ 510.373610][T11518] netlink: 'syz.1.2439': attribute type 8 has an invalid length. [ 510.413107][T11518] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2439'. [ 510.469290][T11520] netlink: 'syz.0.2440': attribute type 21 has an invalid length. [ 510.503644][T11520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 510.527426][T11521] netlink: 'syz.1.2439': attribute type 2 has an invalid length. [ 510.564473][T11521] netlink: 'syz.1.2439': attribute type 8 has an invalid length. [ 510.593940][T11521] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2439'. OK Stopping syslogd: stopped /sbin/syslogd (pid 3543) OK [ 511.359735][T11546] netlink: 'syz.3.2445': attribute type 1 has an invalid length. [ 511.378630][T11546] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2445'. [ 511.651116][T11555] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2448'. [ 511.916413][T11568] netlink: 'syz.1.2450': attribute type 21 has an invalid length. [ 512.021796][T11567] netlink: 197204 bytes leftover after parsing attributes in process `syz.3.2451'. [ 512.094850][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2451'. umount: can't remount debugfs read-only [ 512.483437][T11578] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2452'. [ 512.531123][T11575] netlink: 'syz.1.2454': attribute type 21 has an invalid length. [ 512.539358][T11575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 512.704783][T11557] ODEBUG: Out of memory. ODEBUG disabled [ 513.089991][T11599] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2462'. [ 514.095258][T11622] FAULT_INJECTION: forcing a failure. [ 514.095258][T11622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.191785][T11622] CPU: 0 PID: 11622 Comm: syz.4.2471 Not tainted syzkaller #0 [ 514.199289][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 514.209344][T11622] Call Trace: [ 514.212615][T11622] [ 514.215541][T11622] dump_stack_lvl+0x188/0x250 [ 514.220217][T11622] ? show_regs_print_info+0x20/0x20 [ 514.225407][T11622] ? load_image+0x400/0x400 [ 514.229907][T11622] ? __lock_acquire+0x7d10/0x7d10 [ 514.234927][T11622] should_fail+0x38c/0x4c0 [ 514.239338][T11622] _copy_from_iter+0x22e/0x1170 [ 514.244173][T11622] ? migrate_enable+0x13e/0x200 [ 514.249095][T11622] ? __lock_acquire+0x7d10/0x7d10 [ 514.254111][T11622] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 514.259470][T11622] ? __virt_addr_valid+0x3c6/0x470 [ 514.264566][T11622] ? __phys_addr_symbol+0x2b/0x70 [ 514.269573][T11622] ? __check_object_size+0x30c/0x410 [ 514.274906][T11622] tcp_sendmsg_locked+0x147f/0x3320 [ 514.280163][T11622] ? tcp_free_fastopen_req+0x70/0x70 [ 514.285471][T11622] tcp_sendmsg+0x2b/0x40 [ 514.289699][T11622] ? inet_send_prepare+0x260/0x260 [ 514.294890][T11622] ____sys_sendmsg+0x5b7/0x8f0 [ 514.299645][T11622] ? __sys_sendmsg_sock+0x30/0x30 [ 514.304664][T11622] ? import_iovec+0x6f/0xa0 [ 514.309161][T11622] ___sys_sendmsg+0x236/0x2e0 [ 514.313827][T11622] ? __sys_sendmsg+0x2a0/0x2a0 [ 514.318583][T11622] ? trace_event_raw_event_lock+0x270/0x270 [ 514.324461][T11622] ? vfs_write+0x8b2/0xd60 [ 514.328875][T11622] __se_sys_sendmsg+0x1af/0x290 [ 514.333713][T11622] ? __x64_sys_sendmsg+0x80/0x80 [ 514.338633][T11622] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 514.344604][T11622] ? lockdep_hardirqs_on+0x94/0x140 [ 514.349796][T11622] do_syscall_64+0x4c/0xa0 [ 514.354193][T11622] ? clear_bhb_loop+0x30/0x80 [ 514.358854][T11622] ? clear_bhb_loop+0x30/0x80 [ 514.363516][T11622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 514.369392][T11622] RIP: 0033:0x7f815915fe59 [ 514.373792][T11622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.393380][T11622] RSP: 002b:00007f81573b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.401779][T11622] RAX: ffffffffffffffda RBX: 00007f81593d8fa0 RCX: 00007f815915fe59 [ 514.409734][T11622] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000009 [ 514.417689][T11622] RBP: 00007f81573b9090 R08: 0000000000000000 R09: 0000000000000000 [ 514.425641][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.433595][T11622] R13: 00007f81593d9038 R14: 00007f81593d8fa0 R15: 00007ffc63be88e8 [ 514.441559][T11622] [ 514.552488][T11632] validate_nla: 2 callbacks suppressed [ 514.552519][T11632] netlink: 'syz.1.2472': attribute type 21 has an invalid length. [ 514.617258][T11632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 514.764407][T11641] __nla_validate_parse: 3 callbacks suppressed [ 514.764442][T11641] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2475'. [ 514.923674][T11648] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2476'. [ 515.203176][T11658] netlink: 'syz.4.2478': attribute type 21 has an invalid length. Connection to 10.128.1.76 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Sent SIGKILL to all processes Requesting system poweroff [ 516.764810][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.805240][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.877577][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.917909][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.988926][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.076204][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.146644][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.205658][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.649837][T11667] kvm: exiting hardware virtualization [ 517.662854][T11667] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 517.673434][T11667] ACPI: PM: Preparing to enter system sleep state S5 [ 517.685931][T11667] reboot: Power down serialport: VM disconnected.