last executing test programs: 10.800545039s ago: executing program 1 (id=3508): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac59, 0x0, 0x3, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.496210982s ago: executing program 0 (id=3512): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0xae842a9590c8b06, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000340)={0x1, 0x8, [@random="c9178209f6a7", @random="91794a9795d0", @local, @local, @empty, @random="110be0648a8b", @broadcast, @remote]}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 9.439347345s ago: executing program 0 (id=3514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x2000}) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x218082, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x2000}) (async) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x218082, 0x0) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x14) (async) 8.516453745s ago: executing program 0 (id=3515): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_config_ext={0x77fd0ba, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6f3bbdaa2617e6b1b8a8ca4dc57fb039f48d035928ef07e158a", &(0x7f0000000900)=""/170, &(0x7f0000000c40)="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", &(0x7f0000000a40), 0x80000001}, 0x38) mkdirat$cgroup(r2, &(0x7f0000000b80)='syz0\x00', 0x1ff) r3 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000120081ae00000c1aa1aec1e2237057f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40", 0x36}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r0}, 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0xfffffffffffffddf) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10a602, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="e9623dfe0f747a9bab1ccbda126d1d347f32978c0fca747cf4e1470f60d8eb0a11e419d1ccdb196b7523065612a6ecdb", 0x30}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720df80bf7bc8cec8d22a71217601d0bf6a41d41817f396df2b01232ac5bcd29f9ec395ede7369b16bf75341485af98788703b3a606acc4209e79c41453aabf395d437222a3f6fe9b3e3b3ee0", 0x6c}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r5) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 8.151756189s ago: executing program 2 (id=3517): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 7.641916535s ago: executing program 1 (id=3518): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) sendmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r5}) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000340)=""/193, 0xc1}, 0x40010103) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) 7.641303905s ago: executing program 2 (id=3519): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_config_ext={0x77fd0ba, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6f3bbdaa2617e6b1b8a8ca4dc57fb039f48d035928ef07e158a", &(0x7f0000000900)=""/170, &(0x7f0000000c40)="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", &(0x7f0000000a40), 0x80000001}, 0x38) mkdirat$cgroup(r2, &(0x7f0000000b80)='syz0\x00', 0x1ff) r3 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000120081ae00000c1aa1aec1e2237057f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r0}, 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0xfffffffffffffddf) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10a602, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="e9623dfe0f747a9bab1ccbda126d1d347f32978c0fca747cf4e1470f60d8eb0a11e419d1ccdb196b7523065612a6ecdb", 0x30}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720df80bf7bc8cec8d22a71217601d0bf6a41d41817f396df2b01232ac5bcd29f9ec395ede7369b16bf75341485af98788703b3a606acc4209e79c41453aabf395d437222a3f6fe9b3e3b3ee0", 0x6c}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r5) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x73) 6.486178297s ago: executing program 1 (id=3523): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004e00000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="0218030002000000e4a17c45c8d360c9", 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x7}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000011b00000000000700000000000000000000000b020000000000"], 0x0, 0x32}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000f1384f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.27803344s ago: executing program 2 (id=3525): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_config_ext={0x77fd0ba, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (fail_nth: 1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6f3bbdaa2617e6b1b8a8ca4dc57fb039f48d035928ef07e158a", &(0x7f0000000900)=""/170, &(0x7f0000000c40)="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", &(0x7f0000000a40), 0x80000001}, 0x38) mkdirat$cgroup(r2, &(0x7f0000000b80)='syz0\x00', 0x1ff) r3 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000120081ae00000c1aa1aec1e2237057f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r0}, 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0xfffffffffffffddf) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10a602, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="e9623dfe0f747a9bab1ccbda126d1d347f32978c0fca747cf4e1470f60d8eb0a11e419d1ccdb196b7523065612a6ecdb", 0x30}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720df80bf7bc8cec8d22a71217601d0bf6a41d41817f396df2b01232ac5bcd29f9ec395ede7369b16bf75341485af98788703b3a606acc4209e79c41453aabf395d437222a3f6fe9b3e3b3ee0", 0x6c}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r5) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x73) 5.874145894s ago: executing program 3 (id=3526): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYRESHEX=r0, @ANYBLOB="c9f32fd0a9c18b5871316a37d9fb4a32cf922c14db1079c322a1105f9e8770e9555aa03e75375e255a7e291757ab313b528498b3b5104477cdcfb2937682c0266b4d08dac70f7e12d16ab863067dabd27b64fea450f22c89472299", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES8=r1, @ANYRES32, @ANYRESOCT, @ANYRESDEC=r1, @ANYRES32=r1], 0x50) socket$kcm(0x21, 0x2, 0x2) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x0, 0xfd24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r2, 0x8) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x2, 0x0, 0x20, 0x0, 0x0, 0x20, 0x16584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x7fff}, 0x7842, 0x7, 0x9, 0x0, 0x3, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="a0", 0x1}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) recvmsg(r4, &(0x7f0000000580)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) socketpair(0x25, 0x4, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r7, 0x58, &(0x7f0000000600)}, 0x10) 5.587203268s ago: executing program 4 (id=3527): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x80260, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={&(0x7f0000000580), 0x7}, 0x104000, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff75) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x6, 0x1, 0x0, 0x0, 0x200, 0x24022, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x8000}, 0x4915, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf4c, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xff00000000000002, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xf6, &(0x7f00000000c0)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf4\x02\x00\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xff\xdd\x15\xcc\xd2\xddd\'c\x91l,D&$\x1a\xad\xb3\xa2 \xd0>\xde\xb6!\xcd\x88%\x9bS\x8e\xd8\x06\x81\xc7\r0\x9b\xcdIn\xbd\x8f\x8dN\xd5\xd5\xda7P6\xbf\xaby\xb0\xa5\x10\xf8l\x82\xb4\\\xa9\xe8k\xce\xea\xb7\x99\xfb\x1c\r\x14\t\x8bw\xc2\xc5N\xbd\x1a\xa8\xde\x1bqD>\xebM.\x87\x000\xd4\xf8\xaa\x9dJd\x8b9\x912\xff\xd81\x8cB\xdb\x96\xc8)\xcd\x11\x8d\xcfX7\xdeo\x950P\xf4\xb4k\xa6\x90\xaf\t\xe0g\xe6q\xb00\xbeA\x7f\xa8\xe0\xdb\xb7\xec=Vg\xb7\xc7I\xd9\xd7\xd6H\xb7\xa7\xcdB\x97\xc7\x97Ql\xf4\xee\xd8\"\xf9\x0fA\xd7\xa8W\xd5\x80N\f\x1fz.IL\"\xa5OvgE\xae\xc2\xae\xea\xcd\b@f)\xf7.\x15&'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6f3bbdaa2617e6b1b8a8ca4dc57fb039f48d035928ef07e158a", &(0x7f0000000900)=""/170, &(0x7f0000000c40)="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", &(0x7f0000000a40), 0x80000001}, 0x38) mkdirat$cgroup(r4, &(0x7f0000000b80)='syz0\x00', 0x1ff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r3, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000020000000000000003000000186300030000009717a0ffffffa70485200000020000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x9, 0x88, &(0x7f00000004c0)=""/136, 0x41000, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r5], &(0x7f00000009c0)=[{0x2, 0x1, 0x3, 0x4}, {0x5, 0x4, 0x10}, {0x4, 0x1, 0xe, 0xc}, {0x2, 0x2, 0x6, 0x8}], 0x10, 0xe4f0aa}, 0x94) r6 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000120081ae00000c1aa1aec1e2237057f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r0}, 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0xfffffffffffffddf) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x70, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffff}, 0x10a602, 0x0, 0x0, 0x9, 0x9, 0x8000, 0xfff7, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="e9623dfe0f747a9bab1ccbda126d1d347f32978c0fca747cf4e1470f60d8eb0a11e419d1ccdb196b7523065612a6ecdb", 0x30}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720df80bf7bc8cec8d22a71217601d0bf6a41d41817f396df2b01232ac5bcd29f9ec395ede7369b16bf75341485af98788703b3a606acc4209e79c41453aabf395d437222a3f6fe9b3e3b3ee0", 0x6c}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r8) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x73) 5.171463822s ago: executing program 2 (id=3528): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x1000000, &(0x7f00000005c0)='%pS \x00', 0x2000000}, 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) syz_clone(0x40100000, &(0x7f0000000000)="81690875c9bba8687492ef12ae0657bfd6ffe0a130c8dc485657018f8c481b0f269141949885d588072ec33ab8b0bc7848ede5910f812949128f7fea3a6cee9920df0ebdd3c239d2ee931abd4015905263c1f4520d277cbb", 0x58, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000400)="0294b9af690826c5b0986fdac2f1ebf13b050f40cf6545566030a89cfae9cdc136a1bfc806124fbc4d5da4c3f1e32d4dd8a2704672cf43c00f902cf53a8457aa064c43229df0ceb501ba") bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x20, 0x0, 0x0, 0x7, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x105840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000080)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x53, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="d80000001900eb054e81f783db4cb9040a1d08000600a2485a0d55a10a0015000600142603600e1208001e00060004012800090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754c8397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4c9c5238, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=r5, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x400}, [@map_idx={0x18, 0x7}, @jmp={0x5, 0x0, 0x7, 0xa, 0xb, 0xffffffffffffffff, 0x10}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x46, &(0x7f00000006c0)=""/70, 0x41100, 0x4, '\x00', r4, 0x25, r8, 0x8, &(0x7f0000000940)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x8, 0x7fffffff, 0x6a0}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000009c0)=[{0x3, 0x1, 0x1, 0x4}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@map=r2, r7, 0xf, 0x0, 0x0, @void, @value=r9}, 0x20) r10 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r10, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) sendmsg$inet(r10, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x11, &(0x7f0000000000)=r11, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffffffff, '\x00', r0, r11, 0x3, 0x2, 0x2}, 0x50) perf_event_open$cgroup(&(0x7f0000000b80)={0x1, 0x80, 0xea, 0x9, 0x5, 0x4, 0x0, 0x926, 0xc00, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000b40), 0x3}, 0x0, 0x1, 0x7fffffff, 0x4, 0x4, 0xbd, 0xb6fd, 0x0, 0xdf, 0x0, 0x6ff1}, r11, 0x1, r11, 0x7) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r12, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5.169231422s ago: executing program 0 (id=3529): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac59, 0x0, 0x3, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.085349793s ago: executing program 1 (id=3530): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 5.055698314s ago: executing program 3 (id=3531): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10000000000000b9, 0x0, &(0x7f00000003c0)=[{0xfffffffe, 0x0, 0x9}, {0x90010022, 0x0, 0x0, 0xa}]}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r5, r4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x4, 0x8000, 0x18000, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0xe}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x1c3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r9, r8, 0x5, 0xaf20, 0x3}, 0x50) 4.847455516s ago: executing program 4 (id=3532): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) 2.480946152s ago: executing program 2 (id=3533): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 2.442406873s ago: executing program 1 (id=3534): bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x5) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x200) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x6) 2.391342243s ago: executing program 3 (id=3535): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) sendmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r6}) r7 = perf_event_open(0x0, 0x0, 0xb, r5, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) 2.213843695s ago: executing program 4 (id=3536): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x523, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)="1c", &(0x7f0000000000), 0x6, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r2}, 0x38) 2.122905287s ago: executing program 2 (id=3537): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xa, 0x4, 0x208, 0xb, 0x78e80}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x82}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x76e9bdd7, &(0x7f0000000080)=[{&(0x7f0000000b80)="c00e02002c000b35d25a806f8c6394f90a24fc602f1b02000a740100053582c137153e370248018000f01700d1bda35d97dd4680a1602eb7b5d3c778e4128f4e4179c2ee7a4f7b7520483cfa140482c7c6a93f855c766e19a8d84784437ed3b1feead649d6d371107f11a7da905316d53c222fa1c76b0df5dc91a48b2266cf763b0d052e118f50eb0170cc01935718b72fc00e961b6b7c436125b94153950dd2b3c170e7d49048cf0f425b5afd508463e2656cf4304103", 0x33fe0}], 0x1}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="bf", 0x2, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) recvmsg$kcm(r7, &(0x7f00000008c0)={&(0x7f00000002c0)=@phonet, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000740)=""/102, 0x66}], 0x3, &(0x7f0000000800)=""/179, 0xb3}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000027110b7000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="d80000001a0081044e81f782db4cb904021d0800fe007c05e81156a10a0015000200142603600e12080010007a010401a8001600200002400400077c035c0400a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7eef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e101ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9412dd09206da6f7ddef7b39b27", 0xd7}], 0x1}, 0x0) 2.011037358s ago: executing program 3 (id=3538): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff4a}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) close(r0) 1.943958928s ago: executing program 0 (id=3539): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000001b40)=""/4065, 0xfe1}, {&(0x7f0000003b80)=""/4124, 0x101c}, {&(0x7f0000000240)=""/152, 0x98}], 0x4}, 0x20) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x80) 1.915106969s ago: executing program 1 (id=3540): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_config_ext={0x77fd0ba, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6f3bbdaa2617e6b1b8a8ca4dc57fb039f48d035928ef07e158a", &(0x7f0000000900)=""/170, &(0x7f0000000c40)="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", &(0x7f0000000a40), 0x80000001}, 0x38) mkdirat$cgroup(r2, &(0x7f0000000b80)='syz0\x00', 0x1ff) r3 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000120081ae00000c1aa1aec1e2237057f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40", 0x36}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r0}, 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0xfffffffffffffddf) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10a602, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="e9623dfe0f747a9bab1ccbda126d1d347f32978c0fca747cf4e1470f60d8eb0a11e419d1ccdb196b7523065612a6ecdb", 0x30}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720df80bf7bc8cec8d22a71217601d0bf6a41d41817f396df2b01232ac5bcd29f9ec395ede7369b16bf75341485af98788703b3a606acc4209e79c41453aabf395d437222a3f6fe9b3e3b3ee0", 0x6c}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r5) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 1.80204108s ago: executing program 4 (id=3541): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYRESHEX=r0, @ANYBLOB="c9f32fd0a9c18b5871316a37d9fb4a32cf922c14db1079c322a1105f9e8770e9555aa03e75375e255a7e291757ab313b528498b3b5104477cdcfb2937682c0266b4d08dac70f7e12d16ab863067dabd27b64fea450f22c89472299", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES8=r1, @ANYRES32, @ANYRESOCT, @ANYRESDEC=r1, @ANYRES32=r1], 0x50) socket$kcm(0x21, 0x2, 0x2) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x0, 0xfd24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r2, 0x8) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x2, 0x0, 0x20, 0x0, 0x0, 0x20, 0x16584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x7fff}, 0x7842, 0x7, 0x9, 0x0, 0x3, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="a0", 0x1}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) recvmsg(r4, &(0x7f0000000580)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) socketpair(0x25, 0x4, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r7, 0x58, &(0x7f0000000600)}, 0x10) 1.575916293s ago: executing program 4 (id=3542): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x2805, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40003, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000006, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x3, 0x80, 0x1, 0x1}, 0x0, 0x1, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0x15, 0x0, 0x401, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000001050000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff4cff8085000000c700000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) r6 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r6, r5, 0x0, 0x0, 0x0}, 0x30) r7 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r7, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback=r1, r0, 0xb, 0x202c, 0x0, @void, @void, @value=r3, @void, r2}, 0x20) ioctl$TUNGETVNETLE(r0, 0x8955, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) 1.503856263s ago: executing program 0 (id=3543): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac59, 0x0, 0x3, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.241630376s ago: executing program 4 (id=3544): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x1000000, &(0x7f00000005c0)='%pS \x00', 0x2000000}, 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) syz_clone(0x40100000, &(0x7f0000000000)="81690875c9bba8687492ef12ae0657bfd6ffe0a130c8dc485657018f8c481b0f269141949885d588072ec33ab8b0bc7848ede5910f812949128f7fea3a6cee9920df0ebdd3c239d2ee931abd4015905263c1f4520d277cbb", 0x58, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000400)="0294b9af690826c5b0986fdac2f1ebf13b050f40cf6545566030a89cfae9cdc136a1bfc806124fbc4d5da4c3f1e32d4dd8a2704672cf43c00f902cf53a8457aa064c43229df0ceb501ba") bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x20, 0x0, 0x0, 0x7, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x105840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000080)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x53, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="d80000001900eb054e81f783db4cb9040a1d08000600a2485a0d55a10a0015000600142603600e1208001e00060004012800090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754c8397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4c9c5238, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=r5, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x400}, [@map_idx={0x18, 0x7}, @jmp={0x5, 0x0, 0x7, 0xa, 0xb, 0xffffffffffffffff, 0x10}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x46, &(0x7f00000006c0)=""/70, 0x41100, 0x4, '\x00', r4, 0x25, r8, 0x8, &(0x7f0000000940)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x8, 0x7fffffff, 0x6a0}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000009c0)=[{0x3, 0x1, 0x1, 0x4}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@map=r2, r7, 0xf, 0x0, 0x0, @void, @value=r9}, 0x20) r10 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r10, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) sendmsg$inet(r10, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x11, &(0x7f0000000000)=r11, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffffffff, '\x00', r0, r11, 0x3, 0x2, 0x2}, 0x50) perf_event_open$cgroup(&(0x7f0000000b80)={0x1, 0x80, 0xea, 0x9, 0x5, 0x4, 0x0, 0x926, 0xc00, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000b40), 0x3}, 0x0, 0x1, 0x7fffffff, 0x4, 0x4, 0xbd, 0xb6fd, 0x0, 0xdf, 0x0, 0x6ff1}, r11, 0x1, r11, 0x7) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r12, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 820.645731ms ago: executing program 3 (id=3545): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 0s ago: executing program 3 (id=3546): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) kernel console output (not intermixed with test programs): 954.924317][T15285] CPU: 0 PID: 15285 Comm: syz.4.3051 Not tainted syzkaller #0 [ 954.927567][T15280] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3049'. [ 954.932679][T15285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 954.932695][T15285] Call Trace: [ 954.949647][T15284] netlink: 'syz.3.3050': attribute type 39 has an invalid length. [ 954.951734][T15285] [ 954.951745][T15285] dump_stack_lvl+0x188/0x24e [ 954.971009][T15285] ? show_regs_print_info+0x12/0x12 [ 954.976240][T15285] ? load_image+0x400/0x400 [ 954.980771][T15285] ? __lock_acquire+0x7d10/0x7d10 [ 954.985827][T15285] should_fail_ex+0x399/0x4d0 [ 954.990521][T15285] _copy_from_user+0x2c/0x170 [ 954.995217][T15285] __copy_msghdr+0x3b7/0x580 [ 954.999916][T15285] ___sys_sendmsg+0x210/0x360 [ 955.004615][T15285] ? __sys_sendmsg+0x290/0x290 [ 955.009401][T15285] ? __lock_acquire+0x7d10/0x7d10 [ 955.014445][T15285] __se_sys_sendmsg+0x1bb/0x2a0 [ 955.019302][T15285] ? __x64_sys_sendmsg+0x80/0x80 [ 955.024253][T15285] ? lockdep_hardirqs_on+0x94/0x140 [ 955.029454][T15285] do_syscall_64+0x4c/0xa0 [ 955.033873][T15285] ? clear_bhb_loop+0x60/0xb0 [ 955.038549][T15285] ? clear_bhb_loop+0x60/0xb0 [ 955.043401][T15285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 955.049323][T15285] RIP: 0033:0x7f48e859cdd9 [ 955.053763][T15285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.073372][T15285] RSP: 002b:00007f48e93c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.081786][T15285] RAX: ffffffffffffffda RBX: 00007f48e8815fa0 RCX: 00007f48e859cdd9 [ 955.089756][T15285] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 955.097734][T15285] RBP: 00007f48e93c4090 R08: 0000000000000000 R09: 0000000000000000 [ 955.105824][T15285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.113791][T15285] R13: 00007f48e8816038 R14: 00007f48e8815fa0 R15: 00007ffe5559d9e8 [ 955.121868][T15285] [ 955.140549][T15255] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.151864][T15255] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.162512][T15255] device bridge_slave_0 entered promiscuous mode [ 955.305464][ T4300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.327994][T15255] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.342359][T15255] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.351433][T15255] device bridge_slave_1 entered promiscuous mode [ 955.545582][T15255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.625676][T15296] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.3053'. [ 955.679818][T15255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.706049][T15296] openvswitch: netlink: Key type 386 is out of range max 32 [ 955.745231][T15255] team0: Port device team_slave_0 added [ 955.788325][T15255] team0: Port device team_slave_1 added [ 955.859459][T15255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.866888][T15255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.905818][T15255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.968043][T15255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.975587][T15255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.001993][T15255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.239881][T15299] netlink: 'syz.0.3055': attribute type 21 has an invalid length. [ 956.270718][T15299] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3055'. [ 956.622132][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 957.063254][T15255] device hsr_slave_0 entered promiscuous mode [ 957.070667][T15255] device hsr_slave_1 entered promiscuous mode [ 957.079456][T15255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 957.089184][T15255] Cannot create hsr debugfs directory [ 957.095233][T15303] device syzkaller0 entered promiscuous mode [ 957.267829][T15312] tun0: tun_chr_ioctl cmd 1074025675 [ 957.273238][T15312] tun0: persist enabled [ 957.318495][T15313] tun0: tun_chr_ioctl cmd 1074025675 [ 957.324389][T15313] tun0: persist enabled [ 957.592126][T15319] netlink: 'syz.3.3057': attribute type 10 has an invalid length. [ 957.635633][T15319] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3057'. [ 958.541789][T15255] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 958.638262][T15255] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 958.677783][T15255] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 958.685410][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 958.724525][T15255] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 959.655234][T15353] netlink: 'syz.2.3060': attribute type 21 has an invalid length. [ 959.685101][T15353] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3060'. [ 959.742284][T15255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.758808][ T4300] device hsr_slave_0 left promiscuous mode [ 959.773140][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.781700][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.797227][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.805605][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.836075][ T4300] device veth1_macvtap left promiscuous mode [ 959.842629][ T4300] device veth0_macvtap left promiscuous mode [ 959.850736][ T4300] device veth1_vlan left promiscuous mode [ 960.542669][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 960.580248][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 960.617200][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.764394][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 960.887678][ T4300] bond0 (unregistering): Released all slaves [ 961.082000][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 961.094968][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 961.252309][T15255] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.308512][T15381] tun0: tun_chr_ioctl cmd 1074025675 [ 961.313922][T15381] tun0: persist enabled [ 961.409949][T15375] tun0: tun_chr_ioctl cmd 1074025675 [ 961.415708][T15375] tun0: persist enabled [ 961.476331][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 961.526163][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 961.570062][T14860] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.577297][T14860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.618101][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 961.649500][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 961.673127][T14860] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.680281][T14860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.700511][T15391] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3069'. [ 961.706885][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 961.730288][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 962.123772][T15388] netlink: 'syz.0.3069': attribute type 10 has an invalid length. [ 962.158748][T15382] device syzkaller0 entered promiscuous mode [ 962.172410][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 962.185451][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 962.212334][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 962.290119][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 962.298626][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 962.314102][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 962.323747][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 962.338682][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 962.360195][T15255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 962.393177][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 962.409882][T15396] netlink: 'syz.3.3070': attribute type 21 has an invalid length. [ 962.440534][T15396] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3070'. [ 962.469652][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 962.488751][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 963.195794][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 963.203302][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 963.225417][T15255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.272064][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 963.312911][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 963.369200][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 963.395874][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 963.415531][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 963.423678][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 963.456333][T15255] device veth0_vlan entered promiscuous mode [ 963.490060][T15255] device veth1_vlan entered promiscuous mode [ 963.586225][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 963.605099][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 963.625112][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 963.645129][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 963.668347][T15415] device syzkaller0 entered promiscuous mode [ 963.698902][T15255] device veth0_macvtap entered promiscuous mode [ 963.716412][T15420] netlink: 'syz.3.3072': attribute type 21 has an invalid length. [ 963.734348][T15420] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3072'. [ 964.863168][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 966.750418][T15255] device veth1_macvtap entered promiscuous mode [ 966.866348][T15255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.880031][T15255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.891265][T15255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.902114][T15255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.912197][T15255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.922968][T15255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.950724][T15255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.984153][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 966.997433][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 967.026715][T15255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.046462][T15255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.062106][T15255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.082512][T15255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.093696][T15255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.106728][T15255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.119309][T15255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.135800][T15436] FAULT_INJECTION: forcing a failure. [ 967.135800][T15436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.154575][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 967.162726][T15436] CPU: 0 PID: 15436 Comm: syz.4.3078 Not tainted syzkaller #0 [ 967.170218][T15436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 967.178293][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 967.180271][T15436] Call Trace: [ 967.180280][T15436] [ 967.180295][T15436] dump_stack_lvl+0x188/0x24e [ 967.199343][T15436] ? show_regs_print_info+0x12/0x12 [ 967.204550][T15436] ? load_image+0x400/0x400 [ 967.209062][T15436] ? __might_fault+0xa6/0x120 [ 967.213834][T15436] should_fail_ex+0x399/0x4d0 [ 967.218517][T15436] copyout+0x1b/0x120 [ 967.222510][T15436] _copy_to_iter+0x48b/0x1040 [ 967.227210][T15436] ? iov_iter_init+0x1f0/0x1f0 [ 967.231987][T15436] ? __virt_addr_valid+0x188/0x540 [ 967.237142][T15436] ? __virt_addr_valid+0x465/0x540 [ 967.242401][T15436] ? __phys_addr_symbol+0x2b/0x70 [ 967.248212][T15436] ? __check_object_size+0x500/0xa40 [ 967.253500][T15436] __skb_datagram_iter+0xde/0x740 [ 967.258531][T15436] ? skb_copy_datagram_iter+0x290/0x290 [ 967.264207][T15436] skb_copy_datagram_iter+0xd7/0x290 [ 967.269503][T15436] netlink_recvmsg+0x2d0/0xe00 [ 967.274288][T15436] ? netlink_sendmsg+0xbd0/0xbd0 [ 967.279240][T15436] ? aa_af_perm+0x340/0x340 [ 967.283749][T15436] ? __might_fault+0xa6/0x120 [ 967.288427][T15436] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 967.293893][T15436] ? security_socket_recvmsg+0x85/0xb0 [ 967.299360][T15436] ? netlink_sendmsg+0xbd0/0xbd0 [ 967.304306][T15436] ____sys_recvmsg+0x2cb/0x5e0 [ 967.309633][T15436] ? __sys_recvmsg_sock+0x40/0x40 [ 967.314687][T15436] ? import_iovec+0x6f/0xa0 [ 967.319196][T15436] ___sys_recvmsg+0x212/0x590 [ 967.323910][T15436] ? __sys_recvmsg+0x290/0x290 [ 967.328723][T15436] ? common_file_perm+0x171/0x1c0 [ 967.333756][T15436] ? __fget_files+0x43d/0x4b0 [ 967.338449][T15436] __x64_sys_recvmsg+0x205/0x2e0 [ 967.343400][T15436] ? ___sys_recvmsg+0x590/0x590 [ 967.348295][T15436] ? lockdep_hardirqs_on+0x94/0x140 [ 967.353515][T15436] do_syscall_64+0x4c/0xa0 [ 967.357983][T15436] ? clear_bhb_loop+0x60/0xb0 [ 967.362680][T15436] ? clear_bhb_loop+0x60/0xb0 [ 967.367361][T15436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.373301][T15436] RIP: 0033:0x7f48e859cdd9 [ 967.377731][T15436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.397531][T15436] RSP: 002b:00007f48e93a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 967.406033][T15436] RAX: ffffffffffffffda RBX: 00007f48e8816090 RCX: 00007f48e859cdd9 [ 967.414005][T15436] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 967.422117][T15436] RBP: 00007f48e93a3090 R08: 0000000000000000 R09: 0000000000000000 [ 967.430117][T15436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.438102][T15436] R13: 00007f48e8816128 R14: 00007f48e8816090 R15: 00007ffe5559d9e8 [ 967.446098][T15436] [ 967.526560][T15435] netlink: 'syz.2.3079': attribute type 21 has an invalid length. [ 967.537931][T15435] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3079'. [ 967.547703][T15435] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3079'. [ 967.564485][T15255] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.574499][T15255] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.588647][T15255] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.599978][T15441] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3080'. [ 967.649519][T15255] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.676069][T15439] netlink: 'syz.0.3080': attribute type 10 has an invalid length. [ 968.069051][T14860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.095637][T14860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.123291][T15447] netlink: 'syz.4.3082': attribute type 21 has an invalid length. [ 968.195003][T15447] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3082'. [ 968.227501][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 968.452832][ T4672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.475077][T15452] tun0: tun_chr_ioctl cmd 1074025675 [ 968.480463][T15452] tun0: persist enabled [ 968.495626][ T4672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.597132][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 969.322935][T15465] netlink: 'syz.0.3086': attribute type 21 has an invalid length. [ 969.333907][T15465] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3086'. [ 969.560552][T15476] device syzkaller0 entered promiscuous mode [ 969.867099][T15481] device bridge_slave_1 left promiscuous mode [ 969.893630][T15481] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.903341][T15481] device bridge_slave_0 left promiscuous mode [ 969.934070][T15481] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.305779][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 970.315298][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 970.323692][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 970.333291][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 970.341764][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 970.349826][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 970.506367][T15483] chnl_net:caif_netlink_parms(): no params data found [ 970.557746][T15483] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.565173][T15483] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.573105][T15483] device bridge_slave_0 entered promiscuous mode [ 970.587134][T15483] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.611257][T15483] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.626074][T15483] device bridge_slave_1 entered promiscuous mode [ 970.710869][T15483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.753108][T15483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.839932][T15483] team0: Port device team_slave_0 added [ 970.875574][T15483] team0: Port device team_slave_1 added [ 970.942497][T15493] netlink: 'syz.2.3092': attribute type 21 has an invalid length. [ 970.957224][T15493] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3092'. [ 970.971197][T15493] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3092'. [ 970.992438][T15483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.008631][T15483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.070583][T15483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.092757][T15483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.108890][T15483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.135106][T15483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.169675][ T4300] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.191518][T15496] netlink: 'syz.0.3102': attribute type 21 has an invalid length. [ 971.200048][T15496] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3102'. [ 971.211028][T15496] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3102'. [ 971.288940][ T4300] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.328686][T15483] device hsr_slave_0 entered promiscuous mode [ 971.348397][T15483] device hsr_slave_1 entered promiscuous mode [ 971.362957][T15483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 971.400185][T15483] Cannot create hsr debugfs directory [ 971.488122][ T4300] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.497364][T15506] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3095'. [ 971.552152][T15503] netlink: 'syz.2.3095': attribute type 10 has an invalid length. [ 972.123291][ T4300] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.191479][T15513] tun1: tun_chr_ioctl cmd 1074025675 [ 972.198535][T15513] tun1: persist enabled [ 972.203370][T15514] tun1: tun_chr_ioctl cmd 1074025675 [ 972.210384][T15514] tun1: persist enabled [ 972.445040][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 972.903831][T15529] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3099'. [ 973.173994][T15538] device bridge_slave_1 left promiscuous mode [ 973.181701][T15538] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.203415][T15538] device bridge_slave_0 left promiscuous mode [ 973.218447][T15538] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.582312][T15551] netlink: 'syz.0.3104': attribute type 21 has an invalid length. [ 973.605463][T15551] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3104'. [ 973.629871][T15551] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3104'. [ 973.817250][T15483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 973.839042][T15483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 973.918490][T15483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 973.950691][T15562] netlink: 'syz.0.3116': attribute type 21 has an invalid length. [ 973.974425][T15562] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3116'. [ 973.983967][T15562] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3116'. [ 974.063526][T15572] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3109'. [ 974.086220][T15483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 974.187239][T15567] FAULT_INJECTION: forcing a failure. [ 974.187239][T15567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.262690][T15568] netlink: 'syz.3.3109': attribute type 10 has an invalid length. [ 974.285613][T15567] CPU: 1 PID: 15567 Comm: syz.1.3108 Not tainted syzkaller #0 [ 974.293317][T15567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 974.303416][T15567] Call Trace: [ 974.306721][T15567] [ 974.309679][T15567] dump_stack_lvl+0x188/0x24e [ 974.314398][T15567] ? show_regs_print_info+0x12/0x12 [ 974.319634][T15567] ? load_image+0x400/0x400 [ 974.324173][T15567] ? __lock_acquire+0x7d10/0x7d10 [ 974.329230][T15567] should_fail_ex+0x399/0x4d0 [ 974.333934][T15567] _copy_from_user+0x2c/0x170 [ 974.338644][T15567] iovec_from_user+0x143/0x360 [ 974.343471][T15567] __import_iovec+0x6d/0x500 [ 974.348096][T15567] import_iovec+0x6f/0xa0 [ 974.352453][T15567] ___sys_sendmsg+0x252/0x360 [ 974.357163][T15567] ? __sys_sendmsg+0x290/0x290 [ 974.361988][T15567] ? trace_call_bpf+0xbf/0x6b0 [ 974.366803][T15567] __se_sys_sendmsg+0x1bb/0x2a0 [ 974.371679][T15567] ? ct_nmi_exit+0x145/0x1c0 [ 974.376294][T15567] ? __x64_sys_sendmsg+0x80/0x80 [ 974.381275][T15567] ? lockdep_hardirqs_on+0x94/0x140 [ 974.386507][T15567] do_syscall_64+0x4c/0xa0 [ 974.390952][T15567] ? clear_bhb_loop+0x60/0xb0 [ 974.395660][T15567] ? clear_bhb_loop+0x60/0xb0 [ 974.400357][T15567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 974.406263][T15567] RIP: 0033:0x7fc88d79cdd9 [ 974.410682][T15567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.430299][T15567] RSP: 002b:00007fc88e603028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.438710][T15567] RAX: ffffffffffffffda RBX: 00007fc88da15fa0 RCX: 00007fc88d79cdd9 [ 974.446700][T15567] RDX: 0000000000044004 RSI: 0000200000000600 RDI: 0000000000000010 [ 974.454674][T15567] RBP: 00007fc88e603090 R08: 0000000000000000 R09: 0000000000000000 [ 974.462648][T15567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.470620][T15567] R13: 00007fc88da16038 R14: 00007fc88da15fa0 R15: 00007ffec3acede8 [ 974.478628][T15567] [ 974.524421][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 974.647719][T15564] netlink: 'syz.2.3107': attribute type 21 has an invalid length. [ 974.675106][T15564] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3107'. [ 975.383171][T15585] device syzkaller0 entered promiscuous mode [ 975.663668][T15483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.793699][ T4300] device hsr_slave_0 left promiscuous mode [ 975.885453][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.900219][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.942236][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.967897][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.047304][ T4300] device veth1_macvtap left promiscuous mode [ 976.064415][ T4300] device veth0_macvtap left promiscuous mode [ 976.081535][ T4300] device veth1_vlan left promiscuous mode [ 976.092286][ T4300] device veth0_vlan left promiscuous mode [ 976.564080][ T4300] team0 (unregistering): Port device macvlan0 removed [ 976.604379][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 976.840449][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 976.879958][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 976.918693][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.171981][ T4300] bond0 (unregistering): (slave team0): Releasing backup interface [ 977.203869][ T4300] bond0 (unregistering): Released all slaves [ 977.276321][T15483] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.283363][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 977.313270][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 977.339704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 977.349108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 977.358418][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.365594][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.435110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 977.451902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 977.461905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 977.484966][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.492198][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.500519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 977.509725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 977.534904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 977.550485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 977.572023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 977.588619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 977.597706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 977.611170][T15623] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3119'. [ 977.623495][T15623] device hsr_slave_0 left promiscuous mode [ 977.724115][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 977.748854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 977.771057][T15626] netlink: 'syz.0.3120': attribute type 21 has an invalid length. [ 977.779688][T15626] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3120'. [ 977.790073][T15626] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3120'. [ 977.816054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 977.825199][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 977.836844][T15483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 978.124081][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 978.136507][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 978.153470][T15483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.324760][T15635] netlink: 'syz.3.3122': attribute type 10 has an invalid length. [ 978.359711][T15635] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3122'. [ 978.407984][T15639] device syzkaller0 entered promiscuous mode [ 978.684401][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 980.058958][T15663] netlink: 'syz.3.3127': attribute type 1 has an invalid length. [ 980.085938][T15663] netlink: 'syz.3.3127': attribute type 4 has an invalid length. [ 980.103293][T15663] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3127'. [ 980.123997][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 980.141065][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 980.207791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 980.230078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 980.251878][T15483] device veth0_vlan entered promiscuous mode [ 980.261612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 980.273009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 980.301839][T15483] device veth1_vlan entered promiscuous mode [ 980.351344][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 980.389887][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 980.419128][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 980.439037][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 980.452460][T15483] device veth0_macvtap entered promiscuous mode [ 980.471001][T15674] FAULT_INJECTION: forcing a failure. [ 980.471001][T15674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.492164][T15674] CPU: 1 PID: 15674 Comm: syz.2.3132 Not tainted syzkaller #0 [ 980.499683][T15674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 980.509769][T15674] Call Trace: [ 980.513147][T15674] [ 980.516095][T15674] dump_stack_lvl+0x188/0x24e [ 980.520803][T15674] ? show_regs_print_info+0x12/0x12 [ 980.526024][T15674] ? load_image+0x400/0x400 [ 980.530548][T15674] ? __might_fault+0xa6/0x120 [ 980.535244][T15674] should_fail_ex+0x399/0x4d0 [ 980.539943][T15674] copyout+0x1b/0x120 [ 980.543956][T15674] _copy_to_iter+0x48b/0x1040 [ 980.548767][T15674] ? iov_iter_init+0x1f0/0x1f0 [ 980.553558][T15674] ? __virt_addr_valid+0x188/0x540 [ 980.558700][T15674] ? __virt_addr_valid+0x465/0x540 [ 980.563845][T15674] ? __phys_addr_symbol+0x2b/0x70 [ 980.568898][T15674] ? __check_object_size+0x500/0xa40 [ 980.574212][T15674] __skb_datagram_iter+0xde/0x740 [ 980.579263][T15674] ? skb_copy_datagram_iter+0x290/0x290 [ 980.584839][T15674] skb_copy_datagram_iter+0xd7/0x290 [ 980.590159][T15674] netlink_recvmsg+0x2d0/0xe00 [ 980.594955][T15674] ? netlink_sendmsg+0xbd0/0xbd0 [ 980.599896][T15674] ? aa_af_perm+0x340/0x340 [ 980.604398][T15674] ? __might_fault+0xa6/0x120 [ 980.609071][T15674] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 980.614450][T15674] ? security_socket_recvmsg+0x85/0xb0 [ 980.619944][T15674] ? netlink_sendmsg+0xbd0/0xbd0 [ 980.624917][T15674] ____sys_recvmsg+0x2cb/0x5e0 [ 980.629728][T15674] ? __sys_recvmsg_sock+0x40/0x40 [ 980.634780][T15674] ? import_iovec+0x6f/0xa0 [ 980.639278][T15674] ___sys_recvmsg+0x212/0x590 [ 980.643986][T15674] ? __sys_recvmsg+0x290/0x290 [ 980.648760][T15674] ? common_file_perm+0x171/0x1c0 [ 980.653792][T15674] ? __fget_files+0x43d/0x4b0 [ 980.658484][T15674] __x64_sys_recvmsg+0x205/0x2e0 [ 980.663426][T15674] ? ___sys_recvmsg+0x590/0x590 [ 980.668337][T15674] ? lockdep_hardirqs_on+0x94/0x140 [ 980.673547][T15674] do_syscall_64+0x4c/0xa0 [ 980.677980][T15674] ? clear_bhb_loop+0x60/0xb0 [ 980.682755][T15674] ? clear_bhb_loop+0x60/0xb0 [ 980.687458][T15674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 980.693472][T15674] RIP: 0033:0x7fc70ff9cdd9 [ 980.697895][T15674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.717527][T15674] RSP: 002b:00007fc710dbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 980.725943][T15674] RAX: ffffffffffffffda RBX: 00007fc710215fa0 RCX: 00007fc70ff9cdd9 [ 980.733913][T15674] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 980.741887][T15674] RBP: 00007fc710dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 980.749851][T15674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.757817][T15674] R13: 00007fc710216038 R14: 00007fc710215fa0 R15: 00007ffc9f98fd88 [ 980.765798][T15674] [ 980.773507][T15483] device veth1_macvtap entered promiscuous mode [ 980.805839][T15483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.817608][T15483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.828561][T15483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.839913][T15483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.853086][T15483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.864062][T15483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.879550][T15483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.889346][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 980.908399][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 980.923292][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 980.932752][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 980.946897][T15679] netlink: 'syz.2.3133': attribute type 10 has an invalid length. [ 980.961158][T15483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.973664][T15483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.985337][T15679] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3133'. [ 980.996338][T15483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.007134][T15483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.019031][T15483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.054797][T15483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.086394][T15483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.118539][T15483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.154497][T15483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.188985][T15483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.199235][T15483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.234072][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 981.263645][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 981.282223][T15684] netlink: 'syz.1.3134': attribute type 21 has an invalid length. [ 981.290534][T15684] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3134'. [ 981.516478][T15686] netlink: 'syz.2.3144': attribute type 10 has an invalid length. [ 981.533718][T15689] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3144'. [ 981.895240][T12337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.920970][T12337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.935023][T15693] netlink: 'syz.3.3135': attribute type 21 has an invalid length. [ 981.943441][T15693] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3135'. [ 981.962178][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 981.992380][T15691] netlink: 'syz.0.3136': attribute type 21 has an invalid length. [ 982.018028][T15691] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3136'. [ 982.537401][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.546834][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.634684][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 983.105684][T15706] netlink: 'syz.4.3139': attribute type 1 has an invalid length. [ 983.113948][T15706] netlink: 'syz.4.3139': attribute type 4 has an invalid length. [ 983.130447][T15706] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3139'. [ 983.859147][T15720] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3143'. [ 983.940594][T15719] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3143'. [ 983.971582][T15720] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3143'. [ 983.994564][T15721] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3143'. [ 984.036043][T15718] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3143'. [ 984.401345][T15725] device bridge_slave_1 left promiscuous mode [ 984.411583][T15725] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.584843][T15725] device bridge_slave_0 left promiscuous mode [ 984.591146][T15725] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.441819][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 985.454682][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 985.474801][T14556] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 985.483635][T14556] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 985.494632][T14556] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 985.502776][T14556] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 985.532224][T15743] device pim6reg1 entered promiscuous mode [ 986.096522][T15758] netlink: 'syz.2.3151': attribute type 1 has an invalid length. [ 986.111614][T15758] netlink: 'syz.2.3151': attribute type 4 has an invalid length. [ 986.120152][T15758] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3151'. [ 986.563774][T15767] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3153'. [ 986.601397][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.626381][T15767] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3153'. [ 986.710381][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.739545][T15770] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3153'. [ 986.774644][T15767] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3153'. [ 986.792258][T15750] chnl_net:caif_netlink_parms(): no params data found [ 986.856603][T15776] FAULT_INJECTION: forcing a failure. [ 986.856603][T15776] name failslab, interval 1, probability 0, space 0, times 0 [ 986.880002][T15776] CPU: 0 PID: 15776 Comm: syz.2.3155 Not tainted syzkaller #0 [ 986.887517][T15776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 986.897594][T15776] Call Trace: [ 986.900893][T15776] [ 986.903836][T15776] dump_stack_lvl+0x188/0x24e [ 986.908547][T15776] ? show_regs_print_info+0x12/0x12 [ 986.913949][T15776] ? load_image+0x400/0x400 [ 986.918478][T15776] ? rcu_is_watching+0x11/0xa0 [ 986.923276][T15776] should_fail_ex+0x399/0x4d0 [ 986.927982][T15776] should_failslab+0x5/0x20 [ 986.932506][T15776] slab_pre_alloc_hook+0x59/0x310 [ 986.937549][T15776] ? find_exception+0x171/0xa30 [ 986.942426][T15776] kmem_cache_alloc+0x56/0x2f0 [ 986.947211][T15776] ? dst_alloc+0x101/0x160 [ 986.951658][T15776] dst_alloc+0x101/0x160 [ 986.956188][T15776] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 986.962294][T15776] ? ip_route_output_key_hash+0x139/0x330 [ 986.968039][T15776] ip_route_output_key_hash+0x1ef/0x330 [ 986.973613][T15776] ? unwind_get_return_address+0x49/0x80 [ 986.979277][T15776] ? ip_route_input_rcu+0x3160/0x3160 [ 986.984702][T15776] tcp_v4_connect+0x6d9/0x18e0 [ 986.989605][T15776] ? tcp_twsk_unique+0x990/0x990 [ 986.994582][T15776] __inet_stream_connect+0x242/0xe10 [ 986.999986][T15776] ? inet_dgram_connect+0x360/0x360 [ 987.005225][T15776] tcp_sendmsg_fastopen+0x38f/0x600 [ 987.010450][T15776] tcp_sendmsg_locked+0x3616/0x3a90 [ 987.015678][T15776] ? verify_lock_unused+0x140/0x140 [ 987.020914][T15776] ? __might_sleep+0xd0/0xd0 [ 987.025530][T15776] ? mark_lock+0x94/0x320 [ 987.029891][T15776] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 987.035990][T15776] ? lock_chain_count+0x20/0x20 [ 987.040869][T15776] ? tcp_sendmsg+0x1d/0x40 [ 987.045401][T15776] ? tcp_set_state+0x520/0x520 [ 987.050197][T15776] tcp_sendmsg+0x2b/0x40 [ 987.054458][T15776] ? inet_send_prepare+0x260/0x260 [ 987.059589][T15776] ____sys_sendmsg+0x5be/0x970 [ 987.064400][T15776] ? __sys_sendmsg_sock+0x30/0x30 [ 987.069457][T15776] ? __import_iovec+0x315/0x500 [ 987.074345][T15776] ? import_iovec+0x6f/0xa0 [ 987.078880][T15776] ___sys_sendmsg+0x2a2/0x360 [ 987.083595][T15776] ? __sys_sendmsg+0x290/0x290 [ 987.088417][T15776] ? __lock_acquire+0x7d10/0x7d10 [ 987.093502][T15776] __se_sys_sendmsg+0x1bb/0x2a0 [ 987.098385][T15776] ? __x64_sys_sendmsg+0x80/0x80 [ 987.103375][T15776] ? lockdep_hardirqs_on+0x94/0x140 [ 987.108676][T15776] do_syscall_64+0x4c/0xa0 [ 987.113105][T15776] ? clear_bhb_loop+0x60/0xb0 [ 987.117790][T15776] ? clear_bhb_loop+0x60/0xb0 [ 987.122471][T15776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.128361][T15776] RIP: 0033:0x7fc70ff9cdd9 [ 987.132773][T15776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.152385][T15776] RSP: 002b:00007fc710dbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.160813][T15776] RAX: ffffffffffffffda RBX: 00007fc710215fa0 RCX: 00007fc70ff9cdd9 [ 987.168786][T15776] RDX: 00000000240008d0 RSI: 0000200000000080 RDI: 0000000000000004 [ 987.176759][T15776] RBP: 00007fc710dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 987.184730][T15776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.192696][T15776] R13: 00007fc710216038 R14: 00007fc710215fa0 R15: 00007ffc9f98fd88 [ 987.200679][T15776] [ 987.255543][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.292342][T15781] netlink: 'syz.3.3158': attribute type 16 has an invalid length. [ 987.564461][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 987.588177][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.603915][T15786] netlink: 'syz.4.3157': attribute type 21 has an invalid length. [ 987.672917][T15797] netlink: 'syz.3.3161': attribute type 39 has an invalid length. [ 987.681441][T15750] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.704575][T15750] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.755854][T15750] device bridge_slave_0 entered promiscuous mode [ 987.787934][T15750] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.821971][T15750] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.850931][T15750] device bridge_slave_1 entered promiscuous mode [ 987.886171][T15792] netlink: 'syz.2.3160': attribute type 21 has an invalid length. [ 988.048426][T15750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.317267][T15750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.550369][T15750] team0: Port device team_slave_0 added [ 988.621826][T15750] team0: Port device team_slave_1 added [ 988.663986][T15807] netlink: 'syz.1.3162': attribute type 1 has an invalid length. [ 988.674402][T15807] netlink: 'syz.1.3162': attribute type 4 has an invalid length. [ 988.832829][T15750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.841928][T15750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.875680][T15750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.211135][T15750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.223296][T15750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.321191][T15750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.645335][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 989.698455][T15750] device hsr_slave_0 entered promiscuous mode [ 989.735845][T15750] device hsr_slave_1 entered promiscuous mode [ 990.543167][T15832] FAULT_INJECTION: forcing a failure. [ 990.543167][T15832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.559481][T15832] CPU: 0 PID: 15832 Comm: syz.1.3166 Not tainted syzkaller #0 [ 990.566996][T15832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 990.577348][T15832] Call Trace: [ 990.580668][T15832] [ 990.583626][T15832] dump_stack_lvl+0x188/0x24e [ 990.588358][T15832] ? show_regs_print_info+0x12/0x12 [ 990.593595][T15832] ? load_image+0x400/0x400 [ 990.598154][T15832] ? __lock_acquire+0x7d10/0x7d10 [ 990.603213][T15832] ? snprintf+0xe5/0x140 [ 990.607492][T15832] should_fail_ex+0x399/0x4d0 [ 990.612211][T15832] _copy_to_user+0x2c/0x130 [ 990.616759][T15832] simple_read_from_buffer+0xe3/0x150 [ 990.622171][T15832] proc_fail_nth_read+0x1a6/0x220 [ 990.627223][T15832] ? proc_fault_inject_write+0x310/0x310 [ 990.632974][T15832] ? fsnotify_perm+0x248/0x550 [ 990.637767][T15832] ? proc_fault_inject_write+0x310/0x310 [ 990.643420][T15832] vfs_read+0x2de/0xa00 [ 990.647610][T15832] ? kernel_read+0x1e0/0x1e0 [ 990.652239][T15832] ? __fget_files+0x28/0x4b0 [ 990.656868][T15832] ? __fget_files+0x28/0x4b0 [ 990.661468][T15832] ? __fget_files+0x43d/0x4b0 [ 990.666193][T15832] ? __fdget_pos+0x2ae/0x360 [ 990.670908][T15832] ? ksys_read+0x71/0x250 [ 990.675287][T15832] ksys_read+0x14c/0x250 [ 990.679698][T15832] ? vfs_write+0xa30/0xa30 [ 990.684162][T15832] ? lockdep_hardirqs_on+0x94/0x140 [ 990.689404][T15832] do_syscall_64+0x4c/0xa0 [ 990.693859][T15832] ? clear_bhb_loop+0x60/0xb0 [ 990.698575][T15832] ? clear_bhb_loop+0x60/0xb0 [ 990.703306][T15832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.709239][T15832] RIP: 0033:0x7fc88d75d60e [ 990.713688][T15832] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 990.733333][T15832] RSP: 002b:00007fc88e602fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 990.741895][T15832] RAX: ffffffffffffffda RBX: 00007fc88e6036c0 RCX: 00007fc88d75d60e [ 990.749905][T15832] RDX: 000000000000000f RSI: 00007fc88e6030a0 RDI: 0000000000000006 [ 990.757913][T15832] RBP: 00007fc88e603090 R08: 0000000000000000 R09: 0000000000000000 [ 990.765928][T15832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.773932][T15832] R13: 00007fc88da16038 R14: 00007fc88da15fa0 R15: 00007ffec3acede8 [ 990.781975][T15832] [ 991.165492][T15846] __nla_validate_parse: 4 callbacks suppressed [ 991.165511][T15846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3169'. [ 991.214322][T15846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3169'. [ 991.341098][ T46] bond0: (slave wlan1): Releasing backup interface [ 991.405137][T15846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3169'. [ 991.470537][T15853] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3169'. [ 991.706215][T15863] netlink: 'syz.1.3172': attribute type 1 has an invalid length. [ 991.724602][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 991.750994][T15863] netlink: 'syz.1.3172': attribute type 4 has an invalid length. [ 991.767013][T15863] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3172'. [ 991.973419][ T46] device veth1_macvtap left promiscuous mode [ 991.981328][ T46] device veth0_macvtap left promiscuous mode [ 992.004715][ T46] device veth1_vlan left promiscuous mode [ 992.886667][ T46] team0 (unregistering): Port device hsr_slave_0 removed [ 992.926352][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.932791][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.998258][ T46] team0 (unregistering): Port device team_slave_1 removed [ 993.043105][ T46] team0 (unregistering): Port device team_slave_0 removed [ 993.081849][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.303041][ T46] bond0 (unregistering): (slave team0): Releasing backup interface [ 993.333103][ T46] bond0 (unregistering): Released all slaves [ 993.594390][T15887] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3176'. [ 993.628855][T15886] netlink: 'syz.2.3177': attribute type 39 has an invalid length. [ 993.776865][T15886] device hsr_slave_1 left promiscuous mode [ 993.805755][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 993.836143][T15887] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3176'. [ 993.874740][T15888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3176'. [ 994.032074][T15750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 994.116515][T15750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 994.176278][T15750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 994.242556][T15750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 994.525438][T15750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.559514][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 994.577921][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 994.660041][T15750] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.685013][T15911] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3182'. [ 994.700040][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 994.773405][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 994.794800][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.802058][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.842133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 994.871966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 994.887359][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 994.903507][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.910779][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.928403][T15920] netlink: 'syz.4.3184': attribute type 1 has an invalid length. [ 994.940727][T15920] netlink: 'syz.4.3184': attribute type 4 has an invalid length. [ 994.960482][T15920] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3184'. [ 994.986254][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 995.023429][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 995.043058][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 995.082130][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 995.110213][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 995.133543][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 995.185413][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 995.258614][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 995.269917][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 995.290620][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 995.308958][T12337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 995.350549][T15750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 996.797645][T15957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3191'. [ 996.822913][T15957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3191'. [ 996.829922][T15955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3190'. [ 996.842934][T15957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3191'. [ 996.854966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 996.870881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 996.891253][T15750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.920975][T15957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3191'. [ 996.962664][T15955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3190'. [ 997.030822][T15960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3190'. [ 997.113479][T15965] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3190'. [ 997.141370][T15968] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3193'. [ 997.168271][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 997.183347][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 997.232769][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 997.247692][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 997.263596][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 997.279925][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 997.310603][T15750] device veth0_vlan entered promiscuous mode [ 997.350911][T15750] device veth1_vlan entered promiscuous mode [ 997.413298][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 997.425208][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 997.449125][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 997.461696][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 997.485853][T15750] device veth0_macvtap entered promiscuous mode [ 997.523143][T15750] device veth1_macvtap entered promiscuous mode [ 997.545121][T15977] device pim6reg1 entered promiscuous mode [ 997.573868][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.622355][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.654396][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.666464][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.676625][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.689944][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.700110][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.711125][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.742544][T15750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.829892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 997.860042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 997.895621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 997.916452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 998.097456][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.134226][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.144116][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.164204][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.174073][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.195024][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.226848][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.254221][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.266517][T15750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.385232][T15984] netlink: 'syz.4.3195': attribute type 16 has an invalid length. [ 998.404327][T15984] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3195'. [ 998.502513][T15991] tun0: tun_chr_ioctl cmd 1074025675 [ 998.519219][T15991] tun0: persist enabled [ 998.537051][T15992] tun0: tun_chr_ioctl cmd 1074025675 [ 998.551369][T15992] tun0: persist enabled [ 998.558509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 998.575014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 998.597425][T15750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.615791][T15750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.654478][T15750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.684064][T15750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.138094][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.194489][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.220068][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1001.284949][T16021] netlink: 'syz.4.3202': attribute type 1 has an invalid length. [ 1001.293051][T16021] netlink: 'syz.4.3202': attribute type 4 has an invalid length. [ 1001.395721][T16025] netlink: 'syz.1.3203': attribute type 21 has an invalid length. [ 1001.410699][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.439550][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.474612][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1001.744107][T16033] device syzkaller0 entered promiscuous mode [ 1001.765021][T16038] netlink: 'syz.0.3147': attribute type 10 has an invalid length. [ 1001.806780][T16041] __nla_validate_parse: 1 callbacks suppressed [ 1001.806800][T16041] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3147'. [ 1001.900283][T16043] netlink: 'syz.1.3206': attribute type 3 has an invalid length. [ 1002.058990][T16043] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3206'. [ 1004.143845][T16140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3208'. [ 1004.184944][T16140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3208'. [ 1004.220666][T16141] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3208'. [ 1004.315074][T16140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3208'. [ 1005.106633][T16153] netlink: 'syz.0.3215': attribute type 21 has an invalid length. [ 1005.261596][T16155] tun1: tun_chr_ioctl cmd 1074025675 [ 1005.344765][T16155] tun1: persist enabled [ 1005.380983][T16158] tun1: tun_chr_ioctl cmd 1074025675 [ 1005.450494][T16158] tun1: persist enabled [ 1005.559780][T16163] netlink: 'syz.3.3214': attribute type 21 has an invalid length. [ 1005.596416][T16163] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3214'. [ 1005.596971][T16167] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3218'. [ 1005.776056][T16162] netlink: 'syz.0.3218': attribute type 10 has an invalid length. [ 1006.323997][T16184] netlink: 'syz.1.3221': attribute type 21 has an invalid length. [ 1006.354876][T16184] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3221'. [ 1006.492304][T16187] FAULT_INJECTION: forcing a failure. [ 1006.492304][T16187] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.561856][T16187] CPU: 0 PID: 16187 Comm: syz.0.3223 Not tainted syzkaller #0 [ 1006.569342][T16187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1006.579400][T16187] Call Trace: [ 1006.582703][T16187] [ 1006.585646][T16187] dump_stack_lvl+0x188/0x24e [ 1006.590357][T16187] ? show_regs_print_info+0x12/0x12 [ 1006.595674][T16187] ? load_image+0x400/0x400 [ 1006.600204][T16187] ? __might_sleep+0xd0/0xd0 [ 1006.604820][T16187] ? __lock_acquire+0x7d10/0x7d10 [ 1006.609882][T16187] should_fail_ex+0x399/0x4d0 [ 1006.614603][T16187] should_failslab+0x5/0x20 [ 1006.619124][T16187] slab_pre_alloc_hook+0x59/0x310 [ 1006.624180][T16187] kmem_cache_alloc_node+0x5a/0x320 [ 1006.629423][T16187] ? __alloc_skb+0xfc/0x7e0 [ 1006.633949][T16187] __alloc_skb+0xfc/0x7e0 [ 1006.638292][T16187] ? netlink_autobind+0xda/0x300 [ 1006.643252][T16187] netlink_sendmsg+0x654/0xbd0 [ 1006.648032][T16187] ? netlink_getsockopt+0x550/0x550 [ 1006.653242][T16187] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1006.658544][T16187] ? security_socket_sendmsg+0x7c/0xa0 [ 1006.664029][T16187] ? netlink_getsockopt+0x550/0x550 [ 1006.669240][T16187] ____sys_sendmsg+0x5be/0x970 [ 1006.674023][T16187] ? __sys_sendmsg_sock+0x30/0x30 [ 1006.679052][T16187] ? __import_iovec+0x315/0x500 [ 1006.683918][T16187] ? import_iovec+0x6f/0xa0 [ 1006.688434][T16187] ___sys_sendmsg+0x2a2/0x360 [ 1006.693133][T16187] ? __sys_sendmsg+0x290/0x290 [ 1006.697913][T16187] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1006.704088][T16187] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1006.710244][T16187] ? lockdep_hardirqs_on+0x94/0x140 [ 1006.715480][T16187] ? __se_sys_sendmsg+0xf4/0x2a0 [ 1006.720431][T16187] ? kasan_check_range+0x84/0x290 [ 1006.725478][T16187] __se_sys_sendmsg+0x1bb/0x2a0 [ 1006.730356][T16187] ? __x64_sys_sendmsg+0x80/0x80 [ 1006.735318][T16187] ? lockdep_hardirqs_on+0x94/0x140 [ 1006.740526][T16187] do_syscall_64+0x4c/0xa0 [ 1006.744946][T16187] ? clear_bhb_loop+0x60/0xb0 [ 1006.749620][T16187] ? clear_bhb_loop+0x60/0xb0 [ 1006.754295][T16187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.760183][T16187] RIP: 0033:0x7f53b4f9cdd9 [ 1006.764706][T16187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.784745][T16187] RSP: 002b:00007f53b5e42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.793157][T16187] RAX: ffffffffffffffda RBX: 00007f53b5215fa0 RCX: 00007f53b4f9cdd9 [ 1006.801141][T16187] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1006.809180][T16187] RBP: 00007f53b5e42090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.817161][T16187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.825129][T16187] R13: 00007f53b5216038 R14: 00007f53b5215fa0 R15: 00007ffeb9aa4888 [ 1006.833170][T16187] [ 1007.141653][T16193] device syzkaller0 entered promiscuous mode [ 1007.922024][T16206] device syzkaller0 entered promiscuous mode [ 1008.722780][T16211] FAULT_INJECTION: forcing a failure. [ 1008.722780][T16211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.761336][T16211] CPU: 1 PID: 16211 Comm: syz.4.3230 Not tainted syzkaller #0 [ 1008.768872][T16211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1008.779136][T16211] Call Trace: [ 1008.782607][T16211] [ 1008.785557][T16211] dump_stack_lvl+0x188/0x24e [ 1008.790312][T16211] ? show_regs_print_info+0x12/0x12 [ 1008.795544][T16211] ? load_image+0x400/0x400 [ 1008.800081][T16211] ? __might_fault+0xa6/0x120 [ 1008.804800][T16211] should_fail_ex+0x399/0x4d0 [ 1008.809519][T16211] copyout+0x1b/0x120 [ 1008.813572][T16211] _copy_to_iter+0x48b/0x1040 [ 1008.818398][T16211] ? iov_iter_init+0x1f0/0x1f0 [ 1008.823204][T16211] ? __virt_addr_valid+0x188/0x540 [ 1008.828341][T16211] ? __virt_addr_valid+0x465/0x540 [ 1008.833495][T16211] ? __phys_addr_symbol+0x2b/0x70 [ 1008.838546][T16211] ? __check_object_size+0x500/0xa40 [ 1008.843863][T16211] __skb_datagram_iter+0xde/0x740 [ 1008.848914][T16211] ? skb_copy_datagram_iter+0x290/0x290 [ 1008.854510][T16211] skb_copy_datagram_iter+0xd7/0x290 [ 1008.859834][T16211] netlink_recvmsg+0x2d0/0xe00 [ 1008.864650][T16211] ? netlink_sendmsg+0xbd0/0xbd0 [ 1008.869629][T16211] ? aa_af_perm+0x340/0x340 [ 1008.874263][T16211] ? __might_fault+0xa6/0x120 [ 1008.878971][T16211] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1008.884291][T16211] ? security_socket_recvmsg+0x85/0xb0 [ 1008.889794][T16211] ? netlink_sendmsg+0xbd0/0xbd0 [ 1008.894769][T16211] ____sys_recvmsg+0x2cb/0x5e0 [ 1008.899744][T16211] ? __sys_recvmsg_sock+0x40/0x40 [ 1008.904810][T16211] ? import_iovec+0x6f/0xa0 [ 1008.909341][T16211] ___sys_recvmsg+0x212/0x590 [ 1008.914154][T16211] ? __sys_recvmsg+0x290/0x290 [ 1008.919048][T16211] ? common_file_perm+0x171/0x1c0 [ 1008.924119][T16211] ? __fget_files+0x43d/0x4b0 [ 1008.928835][T16211] __x64_sys_recvmsg+0x205/0x2e0 [ 1008.933806][T16211] ? ___sys_recvmsg+0x590/0x590 [ 1008.938700][T16211] ? lockdep_hardirqs_on+0x94/0x140 [ 1008.943926][T16211] do_syscall_64+0x4c/0xa0 [ 1008.948368][T16211] ? clear_bhb_loop+0x60/0xb0 [ 1008.953066][T16211] ? clear_bhb_loop+0x60/0xb0 [ 1008.957768][T16211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1008.963686][T16211] RIP: 0033:0x7f11dab9cdd9 [ 1008.968122][T16211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.987844][T16211] RSP: 002b:00007f11dba8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1008.996419][T16211] RAX: ffffffffffffffda RBX: 00007f11dae15fa0 RCX: 00007f11dab9cdd9 [ 1009.004417][T16211] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1009.012408][T16211] RBP: 00007f11dba8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.020406][T16211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.028408][T16211] R13: 00007f11dae16038 R14: 00007f11dae15fa0 R15: 00007ffe5bd53188 [ 1009.036429][T16211] [ 1009.292925][T16214] tun0: tun_chr_ioctl cmd 1074025675 [ 1009.336612][T16214] tun0: persist enabled [ 1009.391521][T16215] tun0: tun_chr_ioctl cmd 1074025675 [ 1009.413293][T16215] tun0: persist enabled [ 1009.662695][T16217] netlink: 'syz.0.3232': attribute type 39 has an invalid length. [ 1009.774623][T16224] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3234'. [ 1010.395286][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 1010.442146][T16217] device hsr_slave_1 left promiscuous mode [ 1010.856345][T16223] netlink: 'syz.3.3234': attribute type 10 has an invalid length. [ 1010.874082][T16229] netlink: 'syz.2.3235': attribute type 39 has an invalid length. [ 1011.253064][T16243] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3239'. [ 1011.459122][T16237] netlink: 'syz.1.3237': attribute type 21 has an invalid length. [ 1011.545027][T16237] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3237'. [ 1011.703976][T16250] netlink: 'syz.3.3240': attribute type 1 has an invalid length. [ 1011.754363][T16250] netlink: 'syz.3.3240': attribute type 4 has an invalid length. [ 1011.771701][T16250] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3240'. [ 1014.282641][T16278] netlink: 'syz.0.3249': attribute type 10 has an invalid length. [ 1014.301797][T16278] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3249'. [ 1014.315310][T16276] FAULT_INJECTION: forcing a failure. [ 1014.315310][T16276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.316967][T16274] device syzkaller0 entered promiscuous mode [ 1014.334866][T16276] CPU: 1 PID: 16276 Comm: syz.4.3248 Not tainted syzkaller #0 [ 1014.342552][T16276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1014.352626][T16276] Call Trace: [ 1014.355928][T16276] [ 1014.360632][T16276] dump_stack_lvl+0x188/0x24e [ 1014.365432][T16276] ? show_regs_print_info+0x12/0x12 [ 1014.370779][T16276] ? load_image+0x400/0x400 [ 1014.375308][T16276] ? __lock_acquire+0x7d10/0x7d10 [ 1014.380359][T16276] ? snprintf+0xe5/0x140 [ 1014.384621][T16276] should_fail_ex+0x399/0x4d0 [ 1014.389414][T16276] _copy_to_user+0x2c/0x130 [ 1014.394118][T16276] simple_read_from_buffer+0xe3/0x150 [ 1014.399699][T16276] proc_fail_nth_read+0x1a6/0x220 [ 1014.404763][T16276] ? proc_fault_inject_write+0x310/0x310 [ 1014.410418][T16276] ? fsnotify_perm+0x248/0x550 [ 1014.415549][T16276] ? proc_fault_inject_write+0x310/0x310 [ 1014.421972][T16276] vfs_read+0x2de/0xa00 [ 1014.426156][T16276] ? kernel_read+0x1e0/0x1e0 [ 1014.430762][T16276] ? __fget_files+0x28/0x4b0 [ 1014.435368][T16276] ? __fget_files+0x28/0x4b0 [ 1014.439986][T16276] ? __fget_files+0x43d/0x4b0 [ 1014.444701][T16276] ? __fdget_pos+0x2ae/0x360 [ 1014.449488][T16276] ? ksys_read+0x71/0x250 [ 1014.453857][T16276] ksys_read+0x14c/0x250 [ 1014.458229][T16276] ? vfs_write+0xa30/0xa30 [ 1014.462668][T16276] ? lockdep_hardirqs_on+0x94/0x140 [ 1014.468158][T16276] do_syscall_64+0x4c/0xa0 [ 1014.472621][T16276] ? clear_bhb_loop+0x60/0xb0 [ 1014.477320][T16276] ? clear_bhb_loop+0x60/0xb0 [ 1014.482051][T16276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.488060][T16276] RIP: 0033:0x7f11dab5d60e [ 1014.492494][T16276] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1014.512474][T16276] RSP: 002b:00007f11dba89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1014.520991][T16276] RAX: ffffffffffffffda RBX: 00007f11dba8a6c0 RCX: 00007f11dab5d60e [ 1014.528986][T16276] RDX: 000000000000000f RSI: 00007f11dba8a0a0 RDI: 0000000000000006 [ 1014.536964][T16276] RBP: 00007f11dba8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.544944][T16276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.552956][T16276] R13: 00007f11dae16038 R14: 00007f11dae15fa0 R15: 00007ffe5bd53188 [ 1014.561133][T16276] [ 1015.914419][T16290] device bridge_slave_1 left promiscuous mode [ 1016.003479][T16290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.054830][T16290] device bridge_slave_0 left promiscuous mode [ 1016.082065][T16290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.195260][T16296] netlink: 'syz.1.3255': attribute type 1 has an invalid length. [ 1016.216193][T16296] netlink: 'syz.1.3255': attribute type 4 has an invalid length. [ 1016.258566][T16296] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3255'. [ 1016.274568][T16299] netlink: 'syz.4.3256': attribute type 39 has an invalid length. [ 1016.425700][T16299] device hsr_slave_1 left promiscuous mode [ 1016.469673][T16302] -1: renamed from syzkaller0 [ 1017.318601][T16316] FAULT_INJECTION: forcing a failure. [ 1017.318601][T16316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.360051][T16319] netlink: 'syz.3.3259': attribute type 39 has an invalid length. [ 1017.363374][T16316] CPU: 1 PID: 16316 Comm: syz.2.3269 Not tainted syzkaller #0 [ 1017.375644][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1017.385819][T16316] Call Trace: [ 1017.389124][T16316] [ 1017.392076][T16316] dump_stack_lvl+0x188/0x24e [ 1017.396900][T16316] ? show_regs_print_info+0x12/0x12 [ 1017.402128][T16316] ? load_image+0x400/0x400 [ 1017.406656][T16316] ? __lock_acquire+0x7d10/0x7d10 [ 1017.411795][T16316] ? perf_trace_lock+0xf8/0x390 [ 1017.416664][T16316] should_fail_ex+0x399/0x4d0 [ 1017.421365][T16316] _copy_from_user+0x2c/0x170 [ 1017.426047][T16316] dev_ethtool+0xc2/0x12f0 [ 1017.430477][T16316] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1017.436732][T16316] ? __lock_acquire+0x7d10/0x7d10 [ 1017.441774][T16316] ? __kmem_cache_free+0xb6/0x1f0 [ 1017.446803][T16316] ? full_name_hash+0x8e/0xe0 [ 1017.451482][T16316] ? dev_load+0x1d/0x1e0 [ 1017.455731][T16316] ? dev_load+0x1d/0x1e0 [ 1017.459985][T16316] dev_ioctl+0x474/0xe80 [ 1017.464237][T16316] sock_do_ioctl+0x245/0x320 [ 1017.468928][T16316] ? sock_show_fdinfo+0xb0/0xb0 [ 1017.473793][T16316] sock_ioctl+0x4d2/0x710 [ 1017.478128][T16316] ? sock_poll+0x410/0x410 [ 1017.482549][T16316] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1017.487497][T16316] ? security_file_ioctl+0x7c/0xa0 [ 1017.492616][T16316] ? sock_poll+0x410/0x410 [ 1017.497034][T16316] __se_sys_ioctl+0xfa/0x170 [ 1017.501631][T16316] do_syscall_64+0x4c/0xa0 [ 1017.506054][T16316] ? clear_bhb_loop+0x60/0xb0 [ 1017.510746][T16316] ? clear_bhb_loop+0x60/0xb0 [ 1017.515427][T16316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1017.521326][T16316] RIP: 0033:0x7fc70ff9cdd9 [ 1017.525823][T16316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.545468][T16316] RSP: 002b:00007fc710dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.554004][T16316] RAX: ffffffffffffffda RBX: 00007fc710215fa0 RCX: 00007fc70ff9cdd9 [ 1017.561995][T16316] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000017 [ 1017.569970][T16316] RBP: 00007fc710dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.577950][T16316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.585936][T16316] R13: 00007fc710216038 R14: 00007fc710215fa0 R15: 00007ffc9f98fd88 [ 1017.593921][T16316] [ 1017.615521][T16322] FAULT_INJECTION: forcing a failure. [ 1017.615521][T16322] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.685312][T16322] CPU: 1 PID: 16322 Comm: syz.1.3260 Not tainted syzkaller #0 [ 1017.692868][T16322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1017.702954][T16322] Call Trace: [ 1017.706253][T16322] [ 1017.709205][T16322] dump_stack_lvl+0x188/0x24e [ 1017.713916][T16322] ? show_regs_print_info+0x12/0x12 [ 1017.719154][T16322] ? load_image+0x400/0x400 [ 1017.723697][T16322] ? __might_sleep+0xd0/0xd0 [ 1017.728314][T16322] ? __lock_acquire+0x7d10/0x7d10 [ 1017.733381][T16322] should_fail_ex+0x399/0x4d0 [ 1017.738094][T16322] should_failslab+0x5/0x20 [ 1017.742707][T16322] slab_pre_alloc_hook+0x59/0x310 [ 1017.747767][T16322] ? sock_kmalloc+0x92/0xf0 [ 1017.752304][T16322] __kmem_cache_alloc_node+0x4f/0x260 [ 1017.757719][T16322] ? sock_kmalloc+0x92/0xf0 [ 1017.762252][T16322] __kmalloc+0xa0/0x240 [ 1017.766449][T16322] sock_kmalloc+0x92/0xf0 [ 1017.770920][T16322] ____sys_sendmsg+0x1bb/0x970 [ 1017.775738][T16322] ? __sys_sendmsg_sock+0x30/0x30 [ 1017.780802][T16322] ? __import_iovec+0x315/0x500 [ 1017.785697][T16322] ? import_iovec+0x6f/0xa0 [ 1017.790240][T16322] ___sys_sendmsg+0x2a2/0x360 [ 1017.794959][T16322] ? __sys_sendmsg+0x290/0x290 [ 1017.799777][T16322] ? __lock_acquire+0x7d10/0x7d10 [ 1017.804856][T16322] __se_sys_sendmsg+0x1bb/0x2a0 [ 1017.809742][T16322] ? ct_nmi_exit+0x145/0x1c0 [ 1017.814356][T16322] ? __x64_sys_sendmsg+0x80/0x80 [ 1017.819350][T16322] ? lockdep_hardirqs_on+0x94/0x140 [ 1017.824578][T16322] do_syscall_64+0x4c/0xa0 [ 1017.829055][T16322] ? clear_bhb_loop+0x60/0xb0 [ 1017.833766][T16322] ? clear_bhb_loop+0x60/0xb0 [ 1017.838480][T16322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1017.844488][T16322] RIP: 0033:0x7fc88d79cdd9 [ 1017.849016][T16322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.868654][T16322] RSP: 002b:00007fc88e603028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1017.877199][T16322] RAX: ffffffffffffffda RBX: 00007fc88da15fa0 RCX: 00007fc88d79cdd9 [ 1017.885206][T16322] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 1017.893208][T16322] RBP: 00007fc88e603090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.901208][T16322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.909210][T16322] R13: 00007fc88da16038 R14: 00007fc88da15fa0 R15: 00007ffec3acede8 [ 1017.917225][T16322] [ 1018.470492][T16330] netlink: 'syz.2.3262': attribute type 10 has an invalid length. [ 1018.527106][T16330] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3262'. [ 1018.981406][T16338] netlink: 'syz.1.3277': attribute type 10 has an invalid length. [ 1019.028950][T16339] netlink: 'syz.0.3265': attribute type 21 has an invalid length. [ 1019.295974][T16339] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3265'. [ 1019.306774][T16338] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3277'. [ 1020.248904][T16348] netlink: 'syz.4.3267': attribute type 21 has an invalid length. [ 1020.279437][T16348] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3267'. [ 1020.314365][T16353] netlink: 'syz.2.3266': attribute type 21 has an invalid length. [ 1020.336696][T16353] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3266'. [ 1020.535258][T16356] device syzkaller0 entered promiscuous mode [ 1023.222931][T16373] FAULT_INJECTION: forcing a failure. [ 1023.222931][T16373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.239171][T16373] CPU: 0 PID: 16373 Comm: syz.1.3274 Not tainted syzkaller #0 [ 1023.246650][T16373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1023.256702][T16373] Call Trace: [ 1023.260031][T16373] [ 1023.263110][T16373] dump_stack_lvl+0x188/0x24e [ 1023.267804][T16373] ? show_regs_print_info+0x12/0x12 [ 1023.273027][T16373] ? load_image+0x400/0x400 [ 1023.277559][T16373] ? __might_fault+0xa6/0x120 [ 1023.282236][T16373] should_fail_ex+0x399/0x4d0 [ 1023.286929][T16373] copyin+0x1b/0x120 [ 1023.290815][T16373] _copy_from_iter+0x447/0x1130 [ 1023.295667][T16373] ? copyout_mc+0x110/0x110 [ 1023.300259][T16373] ? __virt_addr_valid+0x188/0x540 [ 1023.305398][T16373] ? __virt_addr_valid+0x188/0x540 [ 1023.310566][T16373] ? __virt_addr_valid+0x465/0x540 [ 1023.315684][T16373] ? __check_object_size+0x500/0xa40 [ 1023.320972][T16373] netlink_sendmsg+0x755/0xbd0 [ 1023.325762][T16373] ? netlink_getsockopt+0x550/0x550 [ 1023.330960][T16373] ? aa_sock_msg_perm+0x94/0x150 [ 1023.335920][T16373] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1023.341550][T16373] ? security_socket_sendmsg+0x7c/0xa0 [ 1023.347137][T16373] ? netlink_getsockopt+0x550/0x550 [ 1023.352338][T16373] ____sys_sendmsg+0x5be/0x970 [ 1023.357107][T16373] ? __sys_sendmsg_sock+0x30/0x30 [ 1023.362222][T16373] ? __import_iovec+0x315/0x500 [ 1023.367086][T16373] ? import_iovec+0x6f/0xa0 [ 1023.371629][T16373] ___sys_sendmsg+0x2a2/0x360 [ 1023.376332][T16373] ? __sys_sendmsg+0x290/0x290 [ 1023.381155][T16373] ? __lock_acquire+0x7d10/0x7d10 [ 1023.386241][T16373] __se_sys_sendmsg+0x1bb/0x2a0 [ 1023.391096][T16373] ? __x64_sys_sendmsg+0x80/0x80 [ 1023.396080][T16373] ? lockdep_hardirqs_on+0x94/0x140 [ 1023.401279][T16373] do_syscall_64+0x4c/0xa0 [ 1023.405704][T16373] ? clear_bhb_loop+0x60/0xb0 [ 1023.410408][T16373] ? clear_bhb_loop+0x60/0xb0 [ 1023.415100][T16373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.421026][T16373] RIP: 0033:0x7fc88d79cdd9 [ 1023.425444][T16373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.445151][T16373] RSP: 002b:00007fc88e603028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1023.453572][T16373] RAX: ffffffffffffffda RBX: 00007fc88da15fa0 RCX: 00007fc88d79cdd9 [ 1023.461551][T16373] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 1023.469592][T16373] RBP: 00007fc88e603090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.477570][T16373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.485540][T16373] R13: 00007fc88da16038 R14: 00007fc88da15fa0 R15: 00007ffec3acede8 [ 1023.493608][T16373] [ 1023.639519][T16376] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3275'. [ 1024.229435][T16384] FAULT_INJECTION: forcing a failure. [ 1024.229435][T16384] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.302293][T16384] CPU: 1 PID: 16384 Comm: syz.1.3279 Not tainted syzkaller #0 [ 1024.309817][T16384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1024.319902][T16384] Call Trace: [ 1024.323204][T16384] [ 1024.326151][T16384] dump_stack_lvl+0x188/0x24e [ 1024.330993][T16384] ? show_regs_print_info+0x12/0x12 [ 1024.336238][T16384] ? load_image+0x400/0x400 [ 1024.340768][T16384] ? __might_sleep+0xd0/0xd0 [ 1024.345371][T16384] ? __lock_acquire+0x7d10/0x7d10 [ 1024.350417][T16384] should_fail_ex+0x399/0x4d0 [ 1024.355115][T16384] should_failslab+0x5/0x20 [ 1024.359634][T16384] slab_pre_alloc_hook+0x59/0x310 [ 1024.364684][T16384] kmem_cache_alloc_node+0x5a/0x320 [ 1024.369901][T16384] ? __alloc_skb+0xfc/0x7e0 [ 1024.374431][T16384] __alloc_skb+0xfc/0x7e0 [ 1024.378784][T16384] ? netlink_autobind+0xda/0x300 [ 1024.383735][T16384] netlink_sendmsg+0x654/0xbd0 [ 1024.388543][T16384] ? netlink_getsockopt+0x550/0x550 [ 1024.393768][T16384] ? aa_sock_msg_perm+0x94/0x150 [ 1024.398744][T16384] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1024.404565][T16384] ? security_socket_sendmsg+0x7c/0xa0 [ 1024.410069][T16384] ? netlink_getsockopt+0x550/0x550 [ 1024.415302][T16384] ____sys_sendmsg+0x5be/0x970 [ 1024.420093][T16384] ? __sys_sendmsg_sock+0x30/0x30 [ 1024.425147][T16384] ? ___sys_sendmsg+0x287/0x360 [ 1024.430030][T16384] ___sys_sendmsg+0x2a2/0x360 [ 1024.434728][T16384] ? migrate_enable+0x148/0x220 [ 1024.439609][T16384] ? __sys_sendmsg+0x290/0x290 [ 1024.444530][T16384] __se_sys_sendmsg+0x1bb/0x2a0 [ 1024.449416][T16384] ? __x64_sys_sendmsg+0x80/0x80 [ 1024.454393][T16384] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1024.460401][T16384] do_syscall_64+0x4c/0xa0 [ 1024.464844][T16384] ? clear_bhb_loop+0x60/0xb0 [ 1024.469536][T16384] ? clear_bhb_loop+0x60/0xb0 [ 1024.474238][T16384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1024.480151][T16384] RIP: 0033:0x7fc88d79cdd9 [ 1024.484572][T16384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.504349][T16384] RSP: 002b:00007fc88e603028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.512755][T16384] RAX: ffffffffffffffda RBX: 00007fc88da15fa0 RCX: 00007fc88d79cdd9 [ 1024.520725][T16384] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 1024.528688][T16384] RBP: 00007fc88e603090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.536839][T16384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.544812][T16384] R13: 00007fc88da16038 R14: 00007fc88da15fa0 R15: 00007ffec3acede8 [ 1024.552827][T16384] [ 1024.711084][T16388] netlink: 'syz.0.3280': attribute type 10 has an invalid length. [ 1024.753962][T16388] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3280'. [ 1024.916059][T16390] netlink: 'syz.1.3281': attribute type 39 has an invalid length. [ 1025.050085][T16399] netlink: 'syz.2.3283': attribute type 27 has an invalid length. [ 1025.061017][T16390] device hsr_slave_1 left promiscuous mode [ 1025.085068][T16399] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3283'. [ 1025.575410][T16408] device syzkaller0 entered promiscuous mode [ 1025.851985][T16418] FAULT_INJECTION: forcing a failure. [ 1025.851985][T16418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1025.928048][T16418] CPU: 0 PID: 16418 Comm: syz.0.3289 Not tainted syzkaller #0 [ 1025.935574][T16418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1025.945746][T16418] Call Trace: [ 1025.949046][T16418] [ 1025.951990][T16418] dump_stack_lvl+0x188/0x24e [ 1025.956703][T16418] ? show_regs_print_info+0x12/0x12 [ 1025.961935][T16418] ? load_image+0x400/0x400 [ 1025.966475][T16418] ? __lock_acquire+0x7d10/0x7d10 [ 1025.971529][T16418] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1025.977557][T16418] should_fail_ex+0x399/0x4d0 [ 1025.982269][T16418] _copy_to_user+0x2c/0x130 [ 1025.986797][T16418] bpf_test_finish+0x198/0x600 [ 1025.991589][T16418] ? convert_skb_to___skb+0x420/0x420 [ 1025.996999][T16418] bpf_prog_test_run_flow_dissector+0x4c5/0x640 [ 1026.003285][T16418] ? xdp_convert_buff_to_md+0x200/0x200 [ 1026.008864][T16418] ? __fget_files+0x28/0x4b0 [ 1026.013493][T16418] ? __fget_files+0x28/0x4b0 [ 1026.018121][T16418] ? xdp_convert_buff_to_md+0x200/0x200 [ 1026.023694][T16418] bpf_prog_test_run+0x31e/0x390 [ 1026.028667][T16418] __sys_bpf+0x62b/0x780 [ 1026.032958][T16418] ? bpf_link_show_fdinfo+0x380/0x380 [ 1026.038374][T16418] ? lock_chain_count+0x20/0x20 [ 1026.043242][T16418] __x64_sys_bpf+0x78/0x90 [ 1026.047693][T16418] do_syscall_64+0x4c/0xa0 [ 1026.052114][T16418] ? clear_bhb_loop+0x60/0xb0 [ 1026.056785][T16418] ? clear_bhb_loop+0x60/0xb0 [ 1026.061458][T16418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1026.067358][T16418] RIP: 0033:0x7f53b4f9cdd9 [ 1026.071774][T16418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.091392][T16418] RSP: 002b:00007f53b5e42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1026.099814][T16418] RAX: ffffffffffffffda RBX: 00007f53b5215fa0 RCX: 00007f53b4f9cdd9 [ 1026.107870][T16418] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1026.115837][T16418] RBP: 00007f53b5e42090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.123805][T16418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.131776][T16418] R13: 00007f53b5216038 R14: 00007f53b5215fa0 R15: 00007ffeb9aa4888 [ 1026.139757][T16418] [ 1026.180597][T16421] device syzkaller0 entered promiscuous mode [ 1026.935867][T16424] netlink: 'syz.3.3291': attribute type 21 has an invalid length. [ 1026.943730][T16424] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3291'. [ 1027.265749][T16432] netlink: 'syz.0.3292': attribute type 39 has an invalid length. [ 1027.556887][T16437] netlink: 'syz.1.3293': attribute type 21 has an invalid length. [ 1027.610896][T16437] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3293'. [ 1027.984064][T16441] netlink: 'syz.3.3294': attribute type 21 has an invalid length. [ 1028.800031][T16458] netlink: 'syz.4.3299': attribute type 10 has an invalid length. [ 1028.855276][T16459] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3299'. [ 1028.983971][T16463] netlink: 'syz.3.3300': attribute type 27 has an invalid length. [ 1029.054451][T16463] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3300'. [ 1029.820018][T16474] FAULT_INJECTION: forcing a failure. [ 1029.820018][T16474] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.860852][T16474] CPU: 0 PID: 16474 Comm: syz.4.3306 Not tainted syzkaller #0 [ 1029.868403][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1029.878525][T16474] Call Trace: [ 1029.881827][T16474] [ 1029.884783][T16474] dump_stack_lvl+0x188/0x24e [ 1029.889520][T16474] ? show_regs_print_info+0x12/0x12 [ 1029.895117][T16474] ? load_image+0x400/0x400 [ 1029.899664][T16474] ? __might_sleep+0xd0/0xd0 [ 1029.904297][T16474] ? __lock_acquire+0x7d10/0x7d10 [ 1029.909549][T16474] should_fail_ex+0x399/0x4d0 [ 1029.914273][T16474] should_failslab+0x5/0x20 [ 1029.918804][T16474] slab_pre_alloc_hook+0x59/0x310 [ 1029.923867][T16474] ? __sta_info_destroy_part2+0x245/0x3f0 [ 1029.929633][T16474] __kmem_cache_alloc_node+0x4f/0x260 [ 1029.935054][T16474] ? __sta_info_destroy_part2+0x245/0x3f0 [ 1029.940811][T16474] kmalloc_trace+0x26/0xe0 [ 1029.945354][T16474] __sta_info_destroy_part2+0x245/0x3f0 [ 1029.950914][T16474] __sta_info_flush+0x3b5/0x460 [ 1029.955798][T16474] ? sta_info_stop+0x40/0x40 [ 1029.960430][T16474] ieee80211_ibss_disconnect+0x262/0x710 [ 1029.966090][T16474] ieee80211_ibss_leave+0x21/0x130 [ 1029.971303][T16474] __cfg80211_leave_ibss+0x1da/0x450 [ 1029.976712][T16474] cfg80211_ibss_wext_siwfreq+0x220/0x370 [ 1029.982505][T16474] __cfg80211_wext_siwfreq+0x16d/0x7d0 [ 1029.988002][T16474] ? __cfg80211_wext_giwname+0x30/0x30 [ 1029.993490][T16474] ? full_name_hash+0x8e/0xe0 [ 1029.998176][T16474] ? __cfg80211_wext_giwname+0x30/0x30 [ 1030.003662][T16474] ioctl_standard_call+0xd4/0x2b0 [ 1030.008703][T16474] ? __cfg80211_wext_giwname+0x30/0x30 [ 1030.014177][T16474] wext_ioctl_dispatch+0x3da/0x470 [ 1030.019301][T16474] ? wext_ioctl_dispatch+0x470/0x470 [ 1030.024604][T16474] ? iw_handler_get_private+0x1e0/0x1e0 [ 1030.030187][T16474] wext_handle_ioctl+0x113/0x1d0 [ 1030.035146][T16474] ? call_commit_handler+0xf0/0xf0 [ 1030.040383][T16474] sock_ioctl+0x143/0x710 [ 1030.044726][T16474] ? sock_poll+0x410/0x410 [ 1030.049163][T16474] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1030.054116][T16474] ? security_file_ioctl+0x7c/0xa0 [ 1030.059327][T16474] ? sock_poll+0x410/0x410 [ 1030.063754][T16474] __se_sys_ioctl+0xfa/0x170 [ 1030.068360][T16474] do_syscall_64+0x4c/0xa0 [ 1030.073053][T16474] ? clear_bhb_loop+0x60/0xb0 [ 1030.077736][T16474] ? clear_bhb_loop+0x60/0xb0 [ 1030.082424][T16474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1030.088322][T16474] RIP: 0033:0x7f11dab9cdd9 [ 1030.092749][T16474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.112367][T16474] RSP: 002b:00007f11dba8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.120791][T16474] RAX: ffffffffffffffda RBX: 00007f11dae15fa0 RCX: 00007f11dab9cdd9 [ 1030.128766][T16474] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000008 [ 1030.136749][T16474] RBP: 00007f11dba8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.144723][T16474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.152722][T16474] R13: 00007f11dae16038 R14: 00007f11dae15fa0 R15: 00007ffe5bd53188 [ 1030.160726][T16474] [ 1030.389766][T16482] netlink: 'syz.2.3305': attribute type 21 has an invalid length. [ 1030.403413][T16482] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3305'. [ 1030.454625][T16483] netlink: 'syz.0.3307': attribute type 21 has an invalid length. [ 1030.477056][T16483] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3307'. [ 1031.140811][T16499] tun2: tun_chr_ioctl cmd 1074025675 [ 1031.146470][T16499] tun2: persist enabled [ 1031.159690][T16501] tun2: tun_chr_ioctl cmd 1074025675 [ 1031.177648][T16501] tun2: persist enabled [ 1031.935613][T16493] device syzkaller0 entered promiscuous mode [ 1032.320815][T16509] netlink: 'syz.3.3314': attribute type 10 has an invalid length. [ 1032.340667][T16509] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3314'. [ 1032.836890][T16513] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3316'. [ 1032.847307][T16513] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3316'. [ 1032.857319][T16513] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3316'. [ 1032.883572][T16513] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3316'. [ 1032.925594][T16513] FAULT_INJECTION: forcing a failure. [ 1032.925594][T16513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.973103][T16515] netlink: 'syz.3.3315': attribute type 21 has an invalid length. [ 1032.989714][T16515] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3315'. [ 1033.006075][T16513] CPU: 0 PID: 16513 Comm: syz.1.3316 Not tainted syzkaller #0 [ 1033.013604][T16513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1033.023769][T16513] Call Trace: [ 1033.027074][T16513] [ 1033.030037][T16513] dump_stack_lvl+0x188/0x24e [ 1033.034755][T16513] ? show_regs_print_info+0x12/0x12 [ 1033.040009][T16513] ? load_image+0x400/0x400 [ 1033.044543][T16513] ? __lock_acquire+0x7d10/0x7d10 [ 1033.049613][T16513] ? snprintf+0xe5/0x140 [ 1033.053891][T16513] should_fail_ex+0x399/0x4d0 [ 1033.058606][T16513] _copy_to_user+0x2c/0x130 [ 1033.063144][T16513] simple_read_from_buffer+0xe3/0x150 [ 1033.068545][T16513] proc_fail_nth_read+0x1a6/0x220 [ 1033.073605][T16513] ? proc_fault_inject_write+0x310/0x310 [ 1033.079265][T16513] ? fsnotify_perm+0x248/0x550 [ 1033.084056][T16513] ? proc_fault_inject_write+0x310/0x310 [ 1033.089724][T16513] vfs_read+0x2de/0xa00 [ 1033.093924][T16513] ? kernel_read+0x1e0/0x1e0 [ 1033.098641][T16513] ? __fget_files+0x28/0x4b0 [ 1033.103250][T16513] ? __fget_files+0x28/0x4b0 [ 1033.107869][T16513] ? __fget_files+0x43d/0x4b0 [ 1033.112578][T16513] ? __fdget_pos+0x2ae/0x360 [ 1033.117202][T16513] ? ksys_read+0x71/0x250 [ 1033.121656][T16513] ksys_read+0x14c/0x250 [ 1033.126026][T16513] ? vfs_write+0xa30/0xa30 [ 1033.130478][T16513] ? lockdep_hardirqs_on+0x94/0x140 [ 1033.135692][T16513] do_syscall_64+0x4c/0xa0 [ 1033.140127][T16513] ? clear_bhb_loop+0x60/0xb0 [ 1033.144822][T16513] ? clear_bhb_loop+0x60/0xb0 [ 1033.149506][T16513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1033.155412][T16513] RIP: 0033:0x7fc88d75d60e [ 1033.159823][T16513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1033.179429][T16513] RSP: 002b:00007fc88e602fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1033.187842][T16513] RAX: ffffffffffffffda RBX: 00007fc88e6036c0 RCX: 00007fc88d75d60e [ 1033.195812][T16513] RDX: 000000000000000f RSI: 00007fc88e6030a0 RDI: 0000000000000004 [ 1033.203806][T16513] RBP: 00007fc88e603090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.211777][T16513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.219919][T16513] R13: 00007fc88da16038 R14: 00007fc88da15fa0 R15: 00007ffec3acede8 [ 1033.227905][T16513] [ 1034.358063][T16536] tun2: tun_chr_ioctl cmd 1074025675 [ 1034.383973][T16536] tun2: persist enabled [ 1034.398292][T16545] tun2: tun_chr_ioctl cmd 1074025675 [ 1034.403628][T16545] tun2: persist enabled [ 1034.583635][T16551] __nla_validate_parse: 2 callbacks suppressed [ 1034.583655][T16551] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3326'. [ 1036.872881][T16549] netlink: 'syz.4.3326': attribute type 10 has an invalid length. [ 1037.064333][T16566] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3331'. [ 1037.181273][T16575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3333'. [ 1037.270429][T16579] netlink: 'syz.0.3332': attribute type 27 has an invalid length. [ 1037.300283][T16579] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3332'. [ 1039.042498][T16566] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3331'. [ 1039.051948][T16575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3333'. [ 1039.084324][T16578] netlink: 'syz.2.3333': attribute type 10 has an invalid length. [ 1039.103044][T16570] device syzkaller0 entered promiscuous mode [ 1039.462418][T16592] tun3: tun_chr_ioctl cmd 1074025675 [ 1039.505847][T16592] tun3: persist enabled [ 1039.526720][T16593] netlink: 'syz.1.3335': attribute type 21 has an invalid length. [ 1039.537827][T16597] netlink: 'syz.4.3339': attribute type 1 has an invalid length. [ 1039.571963][T16597] netlink: 'syz.4.3339': attribute type 3 has an invalid length. [ 1039.624500][T16597] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3339'. [ 1039.658883][T16593] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3335'. [ 1039.702093][T16592] tun3: tun_chr_ioctl cmd 1074025675 [ 1039.711335][T16592] tun3: persist enabled [ 1039.856158][T16599] team0: Port device team_slave_0 removed [ 1039.903425][T16605] netlink: 'syz.0.3340': attribute type 10 has an invalid length. [ 1040.121136][T16605] team0 (unregistering): Port device team_slave_1 removed [ 1040.135590][T16612] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3342'. [ 1040.434220][T16610] netlink: 'syz.2.3342': attribute type 10 has an invalid length. [ 1040.704048][T16615] netlink: 'syz.4.3344': attribute type 39 has an invalid length. [ 1043.214437][T16639] FAULT_INJECTION: forcing a failure. [ 1043.214437][T16639] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.234757][T16639] CPU: 1 PID: 16639 Comm: syz.4.3348 Not tainted syzkaller #0 [ 1043.242273][T16639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1043.252329][T16639] Call Trace: [ 1043.255601][T16639] [ 1043.258553][T16639] dump_stack_lvl+0x188/0x24e [ 1043.263259][T16639] ? show_regs_print_info+0x12/0x12 [ 1043.268472][T16639] ? load_image+0x400/0x400 [ 1043.273010][T16639] ? __lock_acquire+0x7d10/0x7d10 [ 1043.278034][T16639] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1043.283266][T16639] should_fail_ex+0x399/0x4d0 [ 1043.287962][T16639] should_failslab+0x5/0x20 [ 1043.292477][T16639] slab_pre_alloc_hook+0x59/0x310 [ 1043.297507][T16639] ? acct_exit_ns+0xe0/0xe0 [ 1043.302012][T16639] kmem_cache_alloc+0x56/0x2f0 [ 1043.306761][T16639] ? taskstats_exit+0x151/0x9d0 [ 1043.311628][T16639] taskstats_exit+0x151/0x9d0 [ 1043.316557][T16639] ? sync_mm_rss+0x211/0x350 [ 1043.321142][T16639] do_exit+0x8f8/0x2480 [ 1043.325295][T16639] ? put_task_struct+0x80/0x80 [ 1043.330052][T16639] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1043.336031][T16639] ? _raw_spin_lock_irq+0x86/0xf0 [ 1043.341063][T16639] ? lock_chain_count+0x20/0x20 [ 1043.345907][T16639] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1043.350923][T16639] do_group_exit+0x217/0x2d0 [ 1043.355506][T16639] ? lockdep_hardirqs_on+0x94/0x140 [ 1043.360710][T16639] get_signal+0x1272/0x1350 [ 1043.365309][T16639] arch_do_signal_or_restart+0xc4/0x1350 [ 1043.370940][T16639] ? __fget_files+0x43d/0x4b0 [ 1043.375630][T16639] ? get_sigframe_size+0x10/0x10 [ 1043.380567][T16639] ? fput+0x150/0x1a0 [ 1043.384572][T16639] ? exit_to_user_mode_loop+0x3b/0x110 [ 1043.390051][T16639] exit_to_user_mode_loop+0x70/0x110 [ 1043.395343][T16639] exit_to_user_mode_prepare+0xee/0x180 [ 1043.400884][T16639] syscall_exit_to_user_mode+0x16/0x40 [ 1043.406342][T16639] do_syscall_64+0x58/0xa0 [ 1043.410769][T16639] ? clear_bhb_loop+0x60/0xb0 [ 1043.415444][T16639] ? clear_bhb_loop+0x60/0xb0 [ 1043.420120][T16639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1043.426008][T16639] RIP: 0033:0x7f11dab9cdd9 [ 1043.430417][T16639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.450022][T16639] RSP: 002b:00007f11dba69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1043.458446][T16639] RAX: fffffffffffffe00 RBX: 00007f11dae16090 RCX: 00007f11dab9cdd9 [ 1043.466432][T16639] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1043.474398][T16639] RBP: 00007f11dba69090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.482376][T16639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1043.490435][T16639] R13: 00007f11dae16128 R14: 00007f11dae16090 R15: 00007ffe5bd53188 [ 1043.498586][T16639] [ 1045.637904][T16649] netlink: 'syz.3.3350': attribute type 21 has an invalid length. [ 1045.645984][T16649] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3350'. [ 1045.655282][T16649] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3350'. [ 1045.678943][T16651] netlink: 'syz.4.3351': attribute type 21 has an invalid length. [ 1045.694400][T16651] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3351'. [ 1046.091391][T16666] netlink: 'syz.1.3356': attribute type 1 has an invalid length. [ 1046.108133][T16664] netlink: 'syz.0.3355': attribute type 10 has an invalid length. [ 1046.153052][T16667] tun3: tun_chr_ioctl cmd 1074025675 [ 1046.170543][T16666] netlink: 'syz.1.3356': attribute type 3 has an invalid length. [ 1046.187864][T16664] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3355'. [ 1046.203080][T16666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3356'. [ 1046.204287][T16667] tun3: persist enabled [ 1046.228673][T16662] team0: Port device team_slave_0 removed [ 1046.239706][T16659] tun3: tun_chr_ioctl cmd 1074025675 [ 1046.245867][T16659] tun3: persist enabled [ 1046.455113][T16662] netlink: 'syz.2.3354': attribute type 10 has an invalid length. [ 1046.812161][T16662] team0 (unregistering): Port device team_slave_1 removed [ 1047.140070][T16672] netlink: 'syz.3.3357': attribute type 39 has an invalid length. [ 1047.216374][T16680] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3359'. [ 1047.286839][T16681] netlink: 'syz.0.3359': attribute type 10 has an invalid length. [ 1047.325587][T16681] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3359'. [ 1047.497196][T16684] device pim6reg1 entered promiscuous mode [ 1050.044889][T16696] netlink: 'syz.2.3363': attribute type 21 has an invalid length. [ 1050.053171][T16696] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3363'. [ 1050.063669][T16696] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3363'. [ 1050.452789][T16711] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3368'. [ 1050.667006][T16710] netlink: 'syz.2.3368': attribute type 10 has an invalid length. [ 1050.726169][T16712] netlink: 'syz.3.3366': attribute type 21 has an invalid length. [ 1050.742623][T16712] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3366'. [ 1052.825915][T16722] team0: Port device team_slave_0 removed [ 1052.832419][T16719] device syzkaller0 entered promiscuous mode [ 1052.844972][T16725] netlink: 'syz.1.3371': attribute type 10 has an invalid length. [ 1052.972897][T16725] team0 (unregistering): Port device team_slave_1 removed [ 1053.494420][T16739] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3374'. [ 1053.535343][T16739] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1053.558170][T16739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1053.583421][T16730] device syzkaller0 entered promiscuous mode [ 1053.860804][T16745] FAULT_INJECTION: forcing a failure. [ 1053.860804][T16745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.883936][T16745] CPU: 1 PID: 16745 Comm: syz.2.3376 Not tainted syzkaller #0 [ 1053.891456][T16745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1053.901525][T16745] Call Trace: [ 1053.904806][T16745] [ 1053.907753][T16745] dump_stack_lvl+0x188/0x24e [ 1053.912467][T16745] ? show_regs_print_info+0x12/0x12 [ 1053.917695][T16745] ? load_image+0x400/0x400 [ 1053.922311][T16745] ? __might_fault+0xa6/0x120 [ 1053.927101][T16745] should_fail_ex+0x399/0x4d0 [ 1053.931810][T16745] copyout+0x1b/0x120 [ 1053.935798][T16745] _copy_to_iter+0x48b/0x1040 [ 1053.940485][T16745] ? iov_iter_init+0x1f0/0x1f0 [ 1053.945261][T16745] ? __virt_addr_valid+0x188/0x540 [ 1053.950459][T16745] ? __virt_addr_valid+0x465/0x540 [ 1053.955577][T16745] ? __phys_addr_symbol+0x2b/0x70 [ 1053.960600][T16745] ? __check_object_size+0x500/0xa40 [ 1053.965973][T16745] __skb_datagram_iter+0xde/0x740 [ 1053.971285][T16745] ? skb_copy_datagram_iter+0x290/0x290 [ 1053.976918][T16745] skb_copy_datagram_iter+0xd7/0x290 [ 1053.982290][T16745] netlink_recvmsg+0x2d0/0xe00 [ 1053.987060][T16745] ? netlink_sendmsg+0xbd0/0xbd0 [ 1053.992014][T16745] ? aa_af_perm+0x340/0x340 [ 1053.996518][T16745] ? __might_fault+0xa6/0x120 [ 1054.001206][T16745] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1054.006485][T16745] ? security_socket_recvmsg+0x85/0xb0 [ 1054.011948][T16745] ? netlink_sendmsg+0xbd0/0xbd0 [ 1054.016886][T16745] ____sys_recvmsg+0x2cb/0x5e0 [ 1054.021658][T16745] ? __sys_recvmsg_sock+0x40/0x40 [ 1054.026693][T16745] ? import_iovec+0x6f/0xa0 [ 1054.031198][T16745] ___sys_recvmsg+0x212/0x590 [ 1054.035879][T16745] ? __sys_recvmsg+0x290/0x290 [ 1054.040736][T16745] ? common_file_perm+0x171/0x1c0 [ 1054.045767][T16745] ? __fget_files+0x43d/0x4b0 [ 1054.050454][T16745] __x64_sys_recvmsg+0x205/0x2e0 [ 1054.055428][T16745] ? ___sys_recvmsg+0x590/0x590 [ 1054.060310][T16745] ? lockdep_hardirqs_on+0x94/0x140 [ 1054.065510][T16745] do_syscall_64+0x4c/0xa0 [ 1054.069928][T16745] ? clear_bhb_loop+0x60/0xb0 [ 1054.074603][T16745] ? clear_bhb_loop+0x60/0xb0 [ 1054.079280][T16745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.085172][T16745] RIP: 0033:0x7fc70ff9cdd9 [ 1054.089584][T16745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.109280][T16745] RSP: 002b:00007fc710dbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1054.117954][T16745] RAX: ffffffffffffffda RBX: 00007fc710215fa0 RCX: 00007fc70ff9cdd9 [ 1054.125919][T16745] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1054.133886][T16745] RBP: 00007fc710dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.141853][T16745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.149817][T16745] R13: 00007fc710216038 R14: 00007fc710215fa0 R15: 00007ffc9f98fd88 [ 1054.157800][T16745] [ 1054.269636][T16747] device pim6reg1 entered promiscuous mode [ 1054.304686][T16749] netlink: 'syz.3.3378': attribute type 21 has an invalid length. [ 1054.317471][T16749] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1054.353552][T16749] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1054.375180][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.381543][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.738382][T16756] tun1: tun_chr_ioctl cmd 1074025675 [ 1054.754638][T16756] tun1: persist enabled [ 1054.774352][T16758] tun1: tun_chr_ioctl cmd 1074025675 [ 1054.790047][T16758] tun1: persist enabled [ 1054.820574][T16760] netlink: 'syz.3.3380': attribute type 21 has an invalid length. [ 1054.829807][T16760] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3380'. [ 1054.841384][T16761] netlink: 'syz.2.3390': attribute type 21 has an invalid length. [ 1054.864723][T16761] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3390'. [ 1054.873884][T16761] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3390'. [ 1055.031685][T16769] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3381'. [ 1055.102857][T16770] netlink: 'syz.2.3382': attribute type 27 has an invalid length. [ 1055.121224][T16770] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3382'. [ 1056.458766][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1056.802153][T16766] netlink: 'syz.1.3381': attribute type 10 has an invalid length. [ 1056.850241][T16776] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3383'. [ 1056.885656][T16776] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1056.904055][T16776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1057.118370][T16785] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3396'. [ 1057.177280][T16781] netlink: 'syz.1.3396': attribute type 10 has an invalid length. [ 1057.262847][T16783] team0: Port device team_slave_0 removed [ 1057.276711][T16790] netlink: 'syz.4.3385': attribute type 10 has an invalid length. [ 1057.363876][T16790] team0 (unregistering): Port device team_slave_1 removed [ 1057.452410][T16794] netlink: 'syz.0.3387': attribute type 13 has an invalid length. [ 1057.474997][T16794] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3387'. [ 1057.501851][T16794] syz_tun: refused to change device tx_queue_len [ 1057.511411][T16794] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1057.992778][T16804] netlink: 'syz.4.3389': attribute type 21 has an invalid length. [ 1058.019754][T16804] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3389'. [ 1058.256904][T16811] tun2: tun_chr_ioctl cmd 1074025675 [ 1058.262274][T16811] tun2: persist enabled [ 1058.371291][T16807] tun2: tun_chr_ioctl cmd 1074025675 [ 1058.386055][T16807] tun2: persist enabled [ 1058.473636][T16810] netlink: 'syz.0.3393': attribute type 21 has an invalid length. [ 1058.494443][T16810] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1058.544743][T16810] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1058.599912][T16815] netlink: 'syz.2.3394': attribute type 21 has an invalid length. [ 1058.660643][T16815] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3394'. [ 1058.809468][T16826] netlink: 'syz.0.3398': attribute type 27 has an invalid length. [ 1058.818026][T16820] device pim6reg1 entered promiscuous mode [ 1058.827116][T16826] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3398'. [ 1059.314675][T16835] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3401'. [ 1059.334830][T16835] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1059.357220][T16835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1060.346782][T16842] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3403'. [ 1061.330288][T16841] netlink: 'syz.3.3403': attribute type 10 has an invalid length. [ 1061.758477][T16855] tun4: tun_chr_ioctl cmd 1074025675 [ 1061.763828][T16855] tun4: persist enabled [ 1061.770006][T16851] tun4: tun_chr_ioctl cmd 1074025675 [ 1061.775709][T16851] tun4: persist enabled [ 1061.933251][T16857] netlink: 'syz.1.3408': attribute type 21 has an invalid length. [ 1062.000473][T16857] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3408'. [ 1062.011425][T16857] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3408'. [ 1062.063432][T16859] netlink: 'syz.0.3407': attribute type 21 has an invalid length. [ 1062.144289][T16859] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3407'. [ 1062.319072][T16865] netlink: 'syz.1.3410': attribute type 27 has an invalid length. [ 1062.341372][T16865] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3410'. [ 1062.574644][T16871] netlink: 'syz.3.3413': attribute type 4 has an invalid length. [ 1062.830999][T16876] device pim6reg1 entered promiscuous mode [ 1062.882877][T16881] netlink: 'syz.3.3416': attribute type 10 has an invalid length. [ 1062.910000][T16881] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3416'. [ 1063.689361][T16897] netlink: 'syz.1.3420': attribute type 21 has an invalid length. [ 1063.711103][T16897] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3420'. [ 1063.752202][T16897] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3420'. [ 1064.644263][T16898] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3421'. [ 1064.664048][T16892] device syzkaller0 entered promiscuous mode [ 1064.770657][T16911] netlink: 'syz.1.3424': attribute type 27 has an invalid length. [ 1064.797016][T16911] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3424'. [ 1066.949394][T16917] netlink: 'syz.0.3423': attribute type 21 has an invalid length. [ 1066.974442][T16917] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3423'. [ 1067.092571][T16921] netlink: 'syz.1.3427': attribute type 39 has an invalid length. [ 1067.311014][T16927] netlink: 'syz.3.3429': attribute type 10 has an invalid length. [ 1067.378195][T16927] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3429'. [ 1068.452595][T16944] netlink: 'syz.0.3434': attribute type 21 has an invalid length. [ 1068.473339][T16944] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1068.510351][T16944] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1068.527471][T16947] netlink: 'syz.2.3435': attribute type 1 has an invalid length. [ 1068.572411][T16947] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.3435'. [ 1068.732764][T16957] tun5: tun_chr_ioctl cmd 1074025675 [ 1068.759121][T16955] netlink: 'syz.2.3439': attribute type 27 has an invalid length. [ 1068.787847][T16957] tun5: persist enabled [ 1068.797735][T16955] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3439'. [ 1068.857885][T16956] device pim6reg1 entered promiscuous mode [ 1068.900472][T16960] tun5: tun_chr_ioctl cmd 1074025675 [ 1068.918088][T16960] tun5: persist enabled [ 1069.195221][T16962] netlink: 'syz.4.3440': attribute type 21 has an invalid length. [ 1069.210830][T16962] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3440'. [ 1069.221352][T16962] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3440'. [ 1069.249473][T16969] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1069.265169][T16968] netlink: 'syz.2.3442': attribute type 10 has an invalid length. [ 1071.864543][T16989] netlink: 'syz.4.3446': attribute type 21 has an invalid length. [ 1071.872447][T16989] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1072.142639][T16996] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3449'. [ 1072.439513][T17000] netlink: 'syz.3.3449': attribute type 10 has an invalid length. [ 1072.498244][T17000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.537604][T17000] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1072.566488][T17005] netlink: 'syz.2.3451': attribute type 1 has an invalid length. [ 1072.585278][T17005] __nla_validate_parse: 1 callbacks suppressed [ 1072.585297][T17005] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1072.661211][T17008] netlink: 'syz.1.3450': attribute type 21 has an invalid length. [ 1072.688888][T17008] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3450'. [ 1072.715298][T17008] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3450'. [ 1072.831589][T17009] tun0: tun_chr_ioctl cmd 1074025675 [ 1072.843631][T17009] tun0: persist enabled [ 1072.855893][T17012] tun0: tun_chr_ioctl cmd 1074025675 [ 1072.861340][T17012] tun0: persist enabled [ 1073.204720][T17015] tun4: tun_chr_ioctl cmd 1074025675 [ 1073.210078][T17015] tun4: persist enabled [ 1073.295022][T17022] netlink: 'syz.0.3465': attribute type 1 has an invalid length. [ 1073.310144][T17022] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1073.320136][T17019] tun4: tun_chr_ioctl cmd 1074025675 [ 1073.326455][T17019] tun4: persist enabled [ 1073.335761][T17020] netlink: 'syz.3.3455': attribute type 21 has an invalid length. [ 1073.344392][T17020] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3455'. [ 1073.356253][T17020] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3455'. [ 1073.549570][T17028] netlink: 'syz.2.3458': attribute type 1 has an invalid length. [ 1073.557809][T17028] netlink: 'syz.2.3458': attribute type 3 has an invalid length. [ 1073.563187][T17024] tun3: tun_chr_ioctl cmd 1074025675 [ 1073.584598][T17028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3458'. [ 1073.621749][T17024] tun3: persist enabled [ 1073.675373][T17026] tun3: tun_chr_ioctl cmd 1074025675 [ 1073.680732][T17026] tun3: persist enabled [ 1074.507076][T17042] netlink: 'syz.2.3460': attribute type 27 has an invalid length. [ 1074.544342][T17042] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3460'. [ 1074.553345][T17039] netlink: 'syz.1.3461': attribute type 10 has an invalid length. [ 1074.604492][T17041] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3461'. [ 1074.969248][T17051] netlink: 'syz.4.3463': attribute type 1 has an invalid length. [ 1074.987584][T17051] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.3463'. [ 1075.020703][T17047] device pim6reg1 entered promiscuous mode [ 1075.067624][T17053] tun5: tun_chr_ioctl cmd 1074025675 [ 1075.090714][T17053] tun5: persist enabled [ 1075.404699][T17053] tun5: tun_chr_ioctl cmd 1074025675 [ 1075.441842][T17053] tun5: persist enabled [ 1076.927449][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 1077.675855][T17075] tun6: tun_chr_ioctl cmd 1074025675 [ 1077.681900][T17075] tun6: persist enabled [ 1077.692023][T17066] tun6: tun_chr_ioctl cmd 1074025675 [ 1077.708142][T17066] tun6: persist enabled [ 1077.754315][T17081] tun1: tun_chr_ioctl cmd 1074025675 [ 1077.759673][T17081] tun1: persist enabled [ 1077.801171][T17082] tun1: tun_chr_ioctl cmd 1074025675 [ 1077.825147][T17082] tun1: persist enabled [ 1078.742988][T17098] validate_nla: 3 callbacks suppressed [ 1078.743012][T17098] netlink: 'syz.2.3476': attribute type 21 has an invalid length. [ 1078.771177][T17099] __nla_validate_parse: 2 callbacks suppressed [ 1078.771191][T17099] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3478'. [ 1078.787405][T17098] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3476'. [ 1078.810642][T17097] netlink: 'syz.4.3478': attribute type 10 has an invalid length. [ 1079.559643][T17111] netlink: 'syz.0.3483': attribute type 1 has an invalid length. [ 1079.598530][T17111] netlink: 'syz.0.3483': attribute type 3 has an invalid length. [ 1079.657289][T17111] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3483'. [ 1080.254623][T17130] tun7: tun_chr_ioctl cmd 1074025675 [ 1080.270359][T17130] tun7: persist enabled [ 1080.297259][T17120] tun7: tun_chr_ioctl cmd 1074025675 [ 1080.326763][T17120] tun7: persist enabled [ 1081.130153][T17140] tun1: tun_chr_ioctl cmd 1074025675 [ 1081.167617][T17140] tun1: persist enabled [ 1081.219756][T17146] netlink: 'syz.1.3491': attribute type 21 has an invalid length. [ 1081.228029][T17146] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3491'. [ 1081.238508][T17144] tun1: tun_chr_ioctl cmd 1074025675 [ 1081.243887][T17144] tun1: persist enabled [ 1081.298394][T17150] netlink: 'syz.3.3495': attribute type 10 has an invalid length. [ 1081.305698][T17153] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3495'. [ 1081.694861][T17157] netlink: 'syz.0.3497': attribute type 1 has an invalid length. [ 1081.702648][T17157] netlink: 'syz.0.3497': attribute type 3 has an invalid length. [ 1081.754267][T17159] netlink: 'syz.2.3498': attribute type 21 has an invalid length. [ 1081.755689][T17157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3497'. [ 1081.762181][T17159] netlink: 'syz.2.3498': attribute type 6 has an invalid length. [ 1081.794405][T17159] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3498'. [ 1081.883100][T17155] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3496'. [ 1083.047691][T17191] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3505'. [ 1083.354685][T17188] tun2: tun_chr_ioctl cmd 1074025675 [ 1083.360047][T17188] tun2: persist enabled [ 1083.368051][T17189] tun2: tun_chr_ioctl cmd 1074025675 [ 1083.373400][T17189] tun2: persist enabled [ 1083.755368][T17204] validate_nla: 3 callbacks suppressed [ 1083.755385][T17204] netlink: 'syz.2.3511': attribute type 1 has an invalid length. [ 1083.776007][T17204] netlink: 'syz.2.3511': attribute type 3 has an invalid length. [ 1083.801690][T17204] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3511'. [ 1087.235047][T17233] tun2: tun_chr_ioctl cmd 1074025675 [ 1087.349010][T17233] tun2: persist enabled [ 1087.496575][T17236] tun2: tun_chr_ioctl cmd 1074025675 [ 1087.568566][T17236] tun2: persist enabled [ 1088.049692][T17246] netlink: 'syz.1.3523': attribute type 1 has an invalid length. [ 1088.149932][T17246] netlink: 'syz.1.3523': attribute type 3 has an invalid length. [ 1088.270980][T17246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3523'. [ 1088.446754][T17253] FAULT_INJECTION: forcing a failure. [ 1088.446754][T17253] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.778371][T17253] CPU: 1 PID: 17253 Comm: syz.2.3525 Not tainted syzkaller #0 [ 1088.785912][T17253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1088.795983][T17253] Call Trace: [ 1088.799270][T17253] [ 1088.802212][T17253] dump_stack_lvl+0x188/0x24e [ 1088.806959][T17253] ? show_regs_print_info+0x12/0x12 [ 1088.812180][T17253] ? load_image+0x400/0x400 [ 1088.816710][T17253] ? __might_sleep+0xd0/0xd0 [ 1088.821308][T17253] ? __lock_acquire+0x7d10/0x7d10 [ 1088.826368][T17253] should_fail_ex+0x399/0x4d0 [ 1088.831068][T17253] should_failslab+0x5/0x20 [ 1088.835598][T17253] slab_pre_alloc_hook+0x59/0x310 [ 1088.840641][T17253] ? file_end_write+0x156/0x250 [ 1088.845540][T17253] kmem_cache_alloc+0x56/0x2f0 [ 1088.850333][T17253] ? getname_flags+0xb7/0x500 [ 1088.855037][T17253] getname_flags+0xb7/0x500 [ 1088.859568][T17253] do_sys_openat2+0xdd/0x4b0 [ 1088.864183][T17253] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1088.870355][T17253] ? do_sys_open+0xe0/0xe0 [ 1088.874796][T17253] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1088.880906][T17253] ? lock_chain_count+0x20/0x20 [ 1088.885815][T17253] __x64_sys_openat+0x135/0x160 [ 1088.890707][T17253] do_syscall_64+0x4c/0xa0 [ 1088.895145][T17253] ? clear_bhb_loop+0x60/0xb0 [ 1088.899847][T17253] ? clear_bhb_loop+0x60/0xb0 [ 1088.904531][T17253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1088.910428][T17253] RIP: 0033:0x7fc70ff9cdd9 [ 1088.914843][T17253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.934461][T17253] RSP: 002b:00007fc710d9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1088.942875][T17253] RAX: ffffffffffffffda RBX: 00007fc710216090 RCX: 00007fc70ff9cdd9 [ 1088.950865][T17253] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1088.958841][T17253] RBP: 00007fc710d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.966809][T17253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.974784][T17253] R13: 00007fc710216128 R14: 00007fc710216090 R15: 00007ffc9f98fd88 [ 1088.982762][T17253] [ 1089.599128][T17275] netlink: 'syz.2.3528': attribute type 21 has an invalid length. [ 1089.672552][T17275] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3528'. [ 1091.932062][T17282] netlink: 'syz.2.3533': attribute type 1 has an invalid length. [ 1091.965357][T17282] netlink: 'syz.2.3533': attribute type 4 has an invalid length. [ 1091.987257][T17282] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3533'. [ 1092.221732][T17287] tun4: tun_chr_ioctl cmd 1074025675 [ 1092.294408][T17287] tun4: persist enabled [ 1092.303475][T17284] tun4: tun_chr_ioctl cmd 1074025675 [ 1092.330013][T17284] tun4: persist enabled [ 1092.377899][T17294] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3537'. [ 1092.415015][T17289] netlink: 'syz.2.3537': attribute type 10 has an invalid length. [ 1092.495586][T17298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3539'. [ 1092.530992][T17295] netlink: 'syz.3.3538': attribute type 21 has an invalid length. [ 1092.567604][T17295] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3538'. [ 1092.614526][T17298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3539'. [ 1092.632741][T17302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3539'. [ 1092.693262][T17303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3539'. [ 1093.838487][T17315] netlink: 'syz.3.3545': attribute type 1 has an invalid length. [ 1093.998683][T17315] netlink: 'syz.3.3545': attribute type 4 has an invalid length. [ 1094.048120][T17315] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3545'. [ 1094.111071][T17318] netlink: 'syz.4.3544': attribute type 21 has an invalid length. [ 1094.265233][T17318] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3544'. [ 1096.085341][T17311] ------------[ cut here ]------------ [ 1096.090887][T17311] WARNING: CPU: 0 PID: 17311 at kernel/events/core.c:6592 perf_pending_task+0x358/0x470 [ 1096.100812][T17311] Modules linked in: [ 1096.104813][T17311] CPU: 0 PID: 17311 Comm: syz.0.3543 Not tainted syzkaller #0 [ 1096.113746][T17311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1096.124211][T17311] RIP: 0010:perf_pending_task+0x358/0x470 [ 1096.130151][T17311] Code: ff 84 db 75 14 e8 e8 76 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 76 da ff e8 37 85 58 ff eb e5 e8 c8 76 da ff <0f> 0b e9 f3 fe ff ff e8 bc 76 da ff 48 c7 c7 10 2d bc 8c 4c 89 f6 [ 1096.149886][T17311] RSP: 0018:ffffc90004a3f8e0 EFLAGS: 00010293 [ 1096.156015][T17311] RAX: ffffffff81a7fe88 RBX: ffff888028ad8a58 RCX: ffff888025003b80 [ 1096.164016][T17311] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1096.172069][T17311] RBP: 0000000000000001 R08: ffff888025004583 R09: 1ffff11004a008b0 [ 1096.180147][T17311] R10: dffffc0000000000 R11: ffffed1004a008b1 R12: ffff888025003b80 [ 1096.188284][T17311] R13: ffff8880573d7560 R14: ffff888028ad8820 R15: 1ffff1100515b104 [ 1096.196314][T17311] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1096.205334][T17311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1096.211959][T17311] CR2: 00005555561a47d0 CR3: 000000002ee88000 CR4: 00000000003506f0 [ 1096.220022][T17311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1096.228132][T17311] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1096.236247][T17311] Call Trace: [ 1096.239567][T17311] [ 1096.242521][T17311] task_work_run+0x1d0/0x260 [ 1096.247196][T17311] ? task_work_cancel+0x220/0x220 [ 1096.252258][T17311] ? do_raw_spin_unlock+0x11d/0x230 [ 1096.257601][T17311] do_exit+0x982/0x2480 [ 1096.261806][T17311] ? put_task_struct+0x80/0x80 [ 1096.266659][T17311] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1096.272933][T17311] ? _raw_spin_lock_irq+0x86/0xf0 [ 1096.278042][T17311] ? lock_chain_count+0x20/0x20 [ 1096.282926][T17311] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1096.288030][T17311] do_group_exit+0x217/0x2d0 [ 1096.292654][T17311] ? lockdep_hardirqs_on+0x94/0x140 [ 1096.297936][T17311] get_signal+0x1272/0x1350 [ 1096.302495][T17311] arch_do_signal_or_restart+0xc4/0x1350 [ 1096.308223][T17311] ? do_futex+0x310/0x320 [ 1096.312579][T17311] ? get_sigframe_size+0x10/0x10 [ 1096.317610][T17311] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1096.323653][T17311] ? exit_to_user_mode_loop+0x3b/0x110 [ 1096.329229][T17311] exit_to_user_mode_loop+0x70/0x110 [ 1096.334589][T17311] exit_to_user_mode_prepare+0xee/0x180 [ 1096.340183][T17311] syscall_exit_to_user_mode+0x16/0x40 [ 1096.345727][T17311] do_syscall_64+0x58/0xa0 [ 1096.350183][T17311] ? clear_bhb_loop+0x60/0xb0 [ 1096.355031][T17311] ? clear_bhb_loop+0x60/0xb0 [ 1096.359751][T17311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1096.365840][T17311] RIP: 0033:0x7f53b4f9cdd9 [ 1096.370305][T17311] Code: Unable to access opcode bytes at 0x7f53b4f9cdaf. [ 1096.377411][T17311] RSP: 002b:00007f53b5e210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1096.385989][T17311] RAX: fffffffffffffe00 RBX: 00007f53b5216098 RCX: 00007f53b4f9cdd9 [ 1096.394088][T17311] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f53b5216098 [ 1096.402159][T17311] RBP: 00007f53b5216090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.410213][T17311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.418252][T17311] R13: 00007f53b5216128 R14: 00007ffeb9aa47a0 R15: 00007ffeb9aa4888 [ 1096.426305][T17311] [ 1096.429340][T17311] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1096.436638][T17311] CPU: 0 PID: 17311 Comm: syz.0.3543 Not tainted syzkaller #0 [ 1096.444110][T17311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1096.454203][T17311] Call Trace: [ 1096.457489][T17311] [ 1096.460427][T17311] dump_stack_lvl+0x188/0x24e [ 1096.465146][T17311] ? memcpy+0x3c/0x60 [ 1096.469150][T17311] ? show_regs_print_info+0x12/0x12 [ 1096.474485][T17311] ? load_image+0x400/0x400 [ 1096.479021][T17311] panic+0x2e5/0x730 [ 1096.483041][T17311] ? bpf_jit_dump+0xd0/0xd0 [ 1096.487578][T17311] __warn+0x2f8/0x4f0 [ 1096.491594][T17311] ? perf_pending_task+0x358/0x470 [ 1096.496723][T17311] ? perf_pending_task+0x358/0x470 [ 1096.501853][T17311] report_bug+0x2ba/0x4f0 [ 1096.506246][T17311] ? perf_pending_task+0x358/0x470 [ 1096.511380][T17311] handle_bug+0x3a/0x70 [ 1096.515591][T17311] exc_invalid_op+0x16/0x40 [ 1096.520132][T17311] asm_exc_invalid_op+0x16/0x20 [ 1096.524996][T17311] RIP: 0010:perf_pending_task+0x358/0x470 [ 1096.530730][T17311] Code: ff 84 db 75 14 e8 e8 76 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 76 da ff e8 37 85 58 ff eb e5 e8 c8 76 da ff <0f> 0b e9 f3 fe ff ff e8 bc 76 da ff 48 c7 c7 10 2d bc 8c 4c 89 f6 [ 1096.550359][T17311] RSP: 0018:ffffc90004a3f8e0 EFLAGS: 00010293 [ 1096.556451][T17311] RAX: ffffffff81a7fe88 RBX: ffff888028ad8a58 RCX: ffff888025003b80 [ 1096.564443][T17311] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1096.572433][T17311] RBP: 0000000000000001 R08: ffff888025004583 R09: 1ffff11004a008b0 [ 1096.580423][T17311] R10: dffffc0000000000 R11: ffffed1004a008b1 R12: ffff888025003b80 [ 1096.588419][T17311] R13: ffff8880573d7560 R14: ffff888028ad8820 R15: 1ffff1100515b104 [ 1096.596412][T17311] ? perf_pending_task+0x358/0x470 [ 1096.601564][T17311] task_work_run+0x1d0/0x260 [ 1096.606182][T17311] ? task_work_cancel+0x220/0x220 [ 1096.611234][T17311] ? do_raw_spin_unlock+0x11d/0x230 [ 1096.616457][T17311] do_exit+0x982/0x2480 [ 1096.620685][T17311] ? put_task_struct+0x80/0x80 [ 1096.625476][T17311] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1096.631476][T17311] ? _raw_spin_lock_irq+0x86/0xf0 [ 1096.636518][T17311] ? lock_chain_count+0x20/0x20 [ 1096.641483][T17311] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1096.646520][T17311] do_group_exit+0x217/0x2d0 [ 1096.651130][T17311] ? lockdep_hardirqs_on+0x94/0x140 [ 1096.656357][T17311] get_signal+0x1272/0x1350 [ 1096.660901][T17311] arch_do_signal_or_restart+0xc4/0x1350 [ 1096.666564][T17311] ? do_futex+0x310/0x320 [ 1096.671000][T17311] ? get_sigframe_size+0x10/0x10 [ 1096.675957][T17311] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1096.681886][T17311] ? exit_to_user_mode_loop+0x3b/0x110 [ 1096.687546][T17311] exit_to_user_mode_loop+0x70/0x110 [ 1096.692860][T17311] exit_to_user_mode_prepare+0xee/0x180 [ 1096.698429][T17311] syscall_exit_to_user_mode+0x16/0x40 [ 1096.703907][T17311] do_syscall_64+0x58/0xa0 [ 1096.708344][T17311] ? clear_bhb_loop+0x60/0xb0 [ 1096.713133][T17311] ? clear_bhb_loop+0x60/0xb0 [ 1096.717850][T17311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1096.723874][T17311] RIP: 0033:0x7f53b4f9cdd9 [ 1096.728320][T17311] Code: Unable to access opcode bytes at 0x7f53b4f9cdaf. [ 1096.735370][T17311] RSP: 002b:00007f53b5e210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1096.743819][T17311] RAX: fffffffffffffe00 RBX: 00007f53b5216098 RCX: 00007f53b4f9cdd9 [ 1096.751899][T17311] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f53b5216098 [ 1096.759916][T17311] RBP: 00007f53b5216090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.767910][T17311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.775988][T17311] R13: 00007f53b5216128 R14: 00007ffeb9aa47a0 R15: 00007ffeb9aa4888 [ 1096.783997][T17311] [ 1096.787452][T17311] Kernel Offset: disabled [ 1096.791774][T17311] Rebooting in 86400 seconds..