last executing test programs: 14.7028248s ago: executing program 2 (id=2467): socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x4000000}) 14.05423132s ago: executing program 2 (id=2469): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000480), &(0x7f00000004c0)=r0}, 0x20) close(0x3) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001180)="cb79b0e03f078337c2f40b290cfd124803bd9f408f21746446cd7aaff7b28206b1bd5373ed2b2219a43dc3537dff6deee5fce092caf06076a17ba8d234efb1a5e5fcae269f1a3546fb1a9e5ac95c1fa4368809246a836b64a361365c781a3485a263427dabf4f1f81018e16ca8644caad25e5cc13f759c5fee1727d74786d96a4e34de7a6c68258d0799e9ffeee20e901bb70273057fc36f67d4d74bba67b88b56bfd9412a09e03bb4480ae34c6d6f9ac13f8ff081ac72fa052a14a57a6494c0c55b8e5a5c0362bbeb0a54e50c40c9316242d560892c728955a2e1ab4afbc0ec3b07a327d3", 0xe5}, {&(0x7f0000001280)="a7973dcaeeefa156a9d0b2c993efe424c66e31c9d1c67d8bce39674b5f046baa469089e77fa3b7022463cf7552b39394b73f81f04701802f6114f2adb38a5e9cdb3738c3b80cddf170fc0b572869403ec0aeee32f1a9dd8394953bcc5d160d531ac5d2a83c37305f34067190b68bd8845ce64d812bf7e65a334ebe4437845e7a1fd91999ed2753bb37a0eeeb2b4950fdf6de29769f18fb7d6effb2a5df3ef361926cfc474cdecbfd4db15fa0a807fe57cb0e9af3a07368608a29e7133822e6679398835440cdb3b9eac012459a30f08c83e84b72a8", 0xd5}, {&(0x7f0000001380)="f9f774d40700232912f1fbb786ae6bfb2a17ae756f02ca03b5deb00d83887423c076e778259e0edf63144794a78ac5e8ae206be13b29e9dd7653f2b8c084e77ba497c1f6e9ed2e84df99619f152a6af14f1234d1d2cff91958150b3aa5ffe7a15d3b5f94dca246eebb27cf584dcc16dd922f44691e6e0f19c715a558", 0x7c}, {&(0x7f0000001400)}], 0x4, &(0x7f0000001480)="33d9436a757ffa64c1e81b5263e3710103edc995f4260d", 0x17, 0x400c404}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x1c, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @exit, @ldst={0x3, 0x2, 0x6, 0x3, 0x6, 0xc, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x76}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='syzkaller\x00', 0x10000, 0xab, &(0x7f0000000900)=""/171, 0x40f00, 0x42, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x4, 0xf, 0x6}, 0x10, 0x1abdb, 0xffffffffffffffff, 0x6, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x1, 0x2, 0x9, 0x4}, {0x1, 0x4, 0xe, 0x3}, {0x4, 0x5, 0x5, 0xa}, {0x3, 0x3, 0x0, 0x4}, {0x3, 0x2, 0xe, 0x5}, {0x2, 0x4, 0x9, 0x4}], 0x10, 0xfffffffb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r4}, &(0x7f0000000780), &(0x7f0000000b80)=r5}, 0x20) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x102) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.809953327s ago: executing program 2 (id=2475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff0000000009a200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000070000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.610029233s ago: executing program 2 (id=2478): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600040001", 0x37}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) (async, rerun: 32) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000002e000d640a762d7f08", 0xd}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff", 0x17}], 0x2}, 0x0) (async) recvmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f0000000200)=""/93, 0x5d}, 0x10002) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x17, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xaba, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 12.189329305s ago: executing program 2 (id=2479): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1e, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000023eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11.873274805s ago: executing program 2 (id=2482): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x1170) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f0000000940)=""/4106, 0x100a}, {&(0x7f0000001a00)=""/206, 0xce}, {&(0x7f0000000240)=""/72, 0x48}], 0x4}, 0x0) 4.134245527s ago: executing program 0 (id=2515): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x54e}, 0x0, 0xf452, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000180061115c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 3.648880741s ago: executing program 0 (id=2517): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000f000000040000000100000000000000", @ANYRES32, @ANYBLOB="feffffff0000000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000016c0)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000f70000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x21) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.979315561s ago: executing program 3 (id=2518): r0 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@bcast, @bcast, @default, @null, @null, @default, @bcast, @bcast]}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="ab4eea17b6dcc1eb3d6d8b471cd7c9c207cd922e8f570b004e08cd510e5dd555f2beea492dab83e3fbe07668f17d2722f0254ee2f50bd21e01b4e34e895036c3e9e3393f0eeb87d2a9adaae64da97d8c10364821ebd043d50c48cdee5923ba45eee0ed8bd80326feaa", 0x69}, {&(0x7f0000000100)="b365bb7d0210d4cdfd6f7a16ffbd4ae3d5039184f6ecbbb5e6a779d0bed2eb3c3ee4", 0x22}], 0x2, &(0x7f0000000180)=[{0x48, 0x10e, 0x6, "4a802600319d30351712183ca5a24ebe61604d5c6b30bc1889e9c09ac86e23a2d20aa7e2cf0b8bd64a9add807ed6ad1db36c7b"}], 0x48}, 0x4000080) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000001480)={&(0x7f0000000240)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="8253d39ad6c7a5912961b46b9e4918f4117c57ce1c11957e53d1310afb4ae4e212ec03dc3be22b854361c6be973466ac71b59dae40037e08", 0x38}], 0x1, &(0x7f0000000340)=[{0x108, 0x108, 0xff, "4bbe9357e8517d3f392ba5c253daaeaa723c73dfb8fdefc17cbbc0205fa5fd12ce266c8f8fb15576bacf84fc09c2fe648dabc6b66724587115c91228ff6a6f7caba616e1b1e641e4c210ec223bc38c52ce15f2392eec48a0ef87faad61271bb89b892b16fd0e050ebba49e754139726bacf4d12081117600b364ef2a97eb1a9f82b008995d842aae206380b0f0c1941ad6e248ccf3c0abd0e8010ba796c77732670d2f3ac87b210c371151d85cb8513e40c2d0f11f4a706332238d3c1fce45aca7ff21784f8a2f1701cc23c3c7225ec58b663a60ff80215e9b0f6396a9a6e8a2c647c0ac2f7c78859732af1bdda956e229"}, {0x1010, 0x1, 0x80000000, "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"}], 0x1118}, 0x40800) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x58, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000015c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001600)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', r3, r4, 0x0, 0x2, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001700)={r2, 0x58, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) write$cgroup_subtree(r2, &(0x7f0000001740)={[{0x2d, 'cpuacct'}, {0x2b, 'memory'}, {0x2b, 'rlimit'}, {0x2d, 'cpuset'}, {0x2b, 'net'}, {0x2b, 'rlimit'}]}, 0x2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001f00)={&(0x7f00000017c0)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001840)=""/126, 0x7e}, {&(0x7f00000018c0)=""/162, 0xa2}, {&(0x7f0000001980)=""/195, 0xc3}, {&(0x7f0000001a80)=""/195, 0xc3}, {&(0x7f0000001b80)=""/21, 0x15}, {&(0x7f0000001bc0)=""/84, 0x54}, {&(0x7f0000001c40)=""/248, 0xf8}, {&(0x7f0000001d40)=""/24, 0x18}], 0x8, &(0x7f0000001e00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x40000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001f40)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001f80)=r15, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002040)={{r2, 0xffffffffffffffff}, &(0x7f0000001fc0), &(0x7f0000002000)=r11}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000022c0)=@bpf_lsm={0x1d, 0xc, &(0x7f0000002080)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xd}, @ldst={0x0, 0x1, 0x4, 0x7, 0x0, 0xfffffffffffffff2, 0x10}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x0, 0x7, 0x9, 0x8, 0xfffffffffffffff4, 0x7ffffffffffffffd}, @call={0x85, 0x0, 0x0, 0xa5}, @jmp={0x5, 0x1, 0x3, 0xb, 0xb, 0xffffffffffffffc0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r16}}], &(0x7f0000002100)='syzkaller\x00', 0x4, 0xdc, &(0x7f0000002140)=""/220, 0x41000, 0x0, '\x00', r3, 0x1b, r9, 0x8, &(0x7f0000002240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002280)={0x1, 0x4, 0x5, 0x84800000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000002380)={'b', ' *:* ', 'wm\x00'}, 0x9) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000023c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000, '\x00', r5, r11, 0x3, 0x2, 0x1}, 0x50) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_procs(r10, &(0x7f0000002440)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002480)=@base={0x9, 0x69c0, 0x81, 0x4, 0xa110, r0, 0x99c6, '\x00', r3, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @value=r17}, 0x50) sendmsg(r8, &(0x7f0000003900)={&(0x7f0000002500)=@pppoe={0x18, 0x0, {0x2, @multicast, 'wg2\x00'}}, 0x80, &(0x7f0000002580), 0x0, &(0x7f00000025c0)=[{0xf8, 0x6, 0x40, "4b122194cdfd854d68238fc6d1a0b95e4e6d7019f8059a1f4447c5444a86ba34c0e39dd7855292cca990bcd354c86dbc0375fe188682364097ace8ef8625e90482560f160c6e3da27190a1c72b81cd2499ff05935624c9a0a20fa96c7d0c997f276947f04f7f7c4bfcd2cb2675e6fd9a58c0bd6db04e8c4bd61cc759d15d65fef8658b23ae851240761fd459dfb1c7b0651b6ce163f26c8f14cee018fd5d569cd71fbb70ebe05700ad24c3e979df52aca941dbe8892e486b5480e6a04abdbbbfc1b276572c9f075af9fa27a57a8c173c04808e1ca2087a84ce30b03dc6c962c2d90ce95be7fc69"}, {0x18, 0x108, 0x2, "ac9e"}, {0x1010, 0x111, 0x2, "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"}, {0x50, 0x3e, 0xfffffffb, "2579037edfc73808608242c2e68353ee12b6060c180ad86e70a08920867ce3b1cda3635f1f6ccdc39ec06eff920d5b7896573ba7352bc48e8743702fc30c"}, {0xf0, 0x104, 0x10000, "6e1f7ab50e023a08f66ff2b3e95a866565b08b63f6a981f4a93e6bc234788de50955cdd746b7528db653ddf8903964cdefee927b094c5638649f52371a1adf58a4e2ad77d3d14717196863a86b1660a6508a015bc36a83caae72c8322c0b5685e6252674062e82c6bb79636f189ae06ceae2200f9960023118a5984603dfae030de8c0d9f0691db95918e05e82f68fbf1e8ddbac8828f0ef7bb60e3eae260920d992df060e5ee66dc68124c250182d26a01120d949482a4e5fc4769daa033bfcc59b9e8cb1a0129555443def0b72f384af2b43a070919e7c556958323643"}, {0x60, 0x0, 0x3, "77837d9f188c17392399530493f7fe1954acb678389f49687dbcc51ef30d4e9d571122c43677d5c87a06a87f65428b1e77ae863599df71750716a74c72b0cf8f2b310faa8540e83aa7b3216c1b"}, {0x70, 0x115, 0x3, "28f883f62779d5697adf54ebc31513168789ef79613fca41f2cb931713577790bca52117f782a9e18770dcf26f2297d01481cad9bbca9471bc4cbf940c25a4575bd1c825ff37493120fac468243daa23400146ef4d3817c31af22d1bc8dd"}], 0x1330}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003d80)={r7, 0xe0, &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000003ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000003b00)=[0x0], &(0x7f0000003b40)=[0x0, 0x0], 0x0, 0x70, &(0x7f0000003b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000003bc0), &(0x7f0000003c00), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000003c40)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004040)={r2, 0x20, &(0x7f0000004000)={&(0x7f0000003e40)=""/184, 0xb8, 0x0, &(0x7f0000003f00)=""/231, 0xe7}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000004080)={0xd, 0x12, &(0x7f0000003940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2650, 0x0, 0x0, 0x0, 0x3}, [@generic={0x1, 0xa, 0x7, 0x59fe, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xa1}, @exit, @alu={0x7, 0x1, 0x8, 0x6, 0xb, 0x6, 0xfffffffffffffffc}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}]}, &(0x7f0000003a00)='GPL\x00', 0xfffffff8, 0x55, &(0x7f0000003a40)=""/85, 0x40f00, 0x0, '\x00', r18, @sock_ops, r13, 0x8, &(0x7f0000003dc0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000003e00)={0x5, 0x3, 0x6, 0xb92}, 0x10, r19, r14, 0x0, 0x0, 0x0, 0x10, 0x4db3abca}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000004140)='cgroup.procs\x00') r20 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8001, '\x00', r3, r12, 0x1, 0x4, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004200)={0x2, 0x4, 0x8, 0x1, 0x80, r20, 0x3, '\x00', r3, r12, 0x4, 0x1, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000042c0)=@generic={&(0x7f0000004280)='./file0\x00', r13}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004300)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0xfffffffa, '\x00', r3, r4, 0x5, 0x2}, 0x50) 2.824768666s ago: executing program 0 (id=2520): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000026c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x64239, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x9}, 0x1200d7, 0x1, 0x43a1ad7a, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x0, 0x6}, {0x10020002, 0x0, 0x0, 0x2}]}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b000000400000000000d52be02e7ae23dd39279d620f4faae1048895f2b81bf60feb4ed5bbf9aba6f289c2cd121a25c8afcd89931b5b47302e0fd5f5cdba40d71cc670eb7624f69a0fa56c11ce02d6a0e82f55c2e13016a2b2fafd2483bb955b979903e991b864f291012becdbb277f91fa6ea27f1d6383054300edae49bc32bd4816eec746370fe7bd0ded1fe2c3a4790319cd87352fcfabe6577023972677ff1001a512bf28b52bb0b3cf6f54226db7084c17a3daf7505220d26c77abfba81af859b78d635be016bc64007acc3d", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f0000000340)=r9, 0x4) 2.292245091s ago: executing program 1 (id=2521): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x2, 0x20, 0x0, 0x0, 0xb3d50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x88e0}, 0x0, 0x0, 0x0, 0x4, 0x1000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xf7) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair(0x1, 0x5, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5411, &(0x7f0000000100)) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280), 0x4) (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x1, 0x4, 0x0, 0x0, 0x0, 0x70a, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x80, 0x0, 0x8, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000018000000000000000000000000000000000000000000000000006306595acd57ba69184e01b0"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.261762393s ago: executing program 0 (id=2522): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000010c0)={@fallback=r0, 0x36, 0x1, 0xff, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001040)=[0x0, 0x0], &(0x7f0000001080), &(0x7f0000000900)}, 0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f4, &(0x7f0000000380)='D\xa7\xa9*,\xd95\x02\f<(5\xf0i{P\xd8$w\x04\"\xad\xd7\x18\x05D\x11\x80\xf9\xeaW\'\xb0\xb1\xa0\x06^<\x10&\x16\xf9\xda$-\xad\xe1x\xec\x87&.\xd1\x98+\xfe\x88\x8a\x8b\xd2<\xb3\x10Ja\xf6\xfdpD\x8f\x94;\xff\x1c\xde\x16+\xf9\xc7\x10P\xdev2\x13\x19\x88\x1d\x01\xd9\xf8\x19\xf7\x7f\x00\x11N\xf6\x01\xca!o\xa5\x91(\xcd\xae\x88\x19jC\x81X\xd4uS;\xc5\x06\bj\xca\x16FP\x04p\x82\x01\xd5\"\xbf\xb1S\xbaH\f\x80\x82\x8e\xea\xa7[\x8a\xef\x03\xbc\x93\x88\xe3\x1cfq\xfa\a\x1a\xdfW\xa0\x16a\x86\r0\x98!\xedHl\xe3\x97\x88\xd8\x97\x00n\x83\x7f\xdcFu\x97\x1bG\xe0\x014$\xfb\xf2\xc4\x89\x80:\\\x8e\x0f+3$\x93\xb5\x8e5ma_%S\x16\v\xa2\xfbFO\x80\x9aGe\xf1\xda\xcfR\xc1\x99:\xc0\xe57\x86\xbf%\x90\xdb\x8f\xe5x\xce\x1eA\xe0X\x05\xe1y~\xe8\r\xea\xae\xbcT\xba\xab\x0e\xe2\xdc,\x01\xb9e\xa9{\xefb\x8e\x16\xe1\xc0aj7t\x9e\xf6\xa73\x0e\xad\x9d4\xd5\x92F\xa7\xc9\x8b\xa2@\xe9{[\x97I\xdef\xb1\xe4)\xe1\x96\xa3\xe6\xc58#\xea\xbe\x88\x95&\xb0\xf9\xfd\xc4\xe7') r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x77, &(0x7f0000000000)=r5, 0x62) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000077f5d0757f25fff0905a76f3f925fa9a1fb064913dba1da1d0344ebe6b1d55490370437cac1ec1c2f572047e07f2798a18e9a388fdc686e0a5d68d8e593990043ff2039bf3e6a2ea8098840ebf1932f0fb031512664d2630a08f9440048e1aa0a720d3"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r6}, 0xc) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a00100000feba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x13, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c0000000000000018110000e9e76df1c05d864f86c8", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf9800000000000056080000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r7}, 0x18) write$cgroup_int(r7, &(0x7f0000000000), 0xfffffd26) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r7, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, &(0x7f0000000840)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000900), 0x0, 0x10, &(0x7f0000000940), &(0x7f0000000a00), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$kcm(r7, &(0x7f0000000fc0)={&(0x7f0000000bc0)=@can={0x1d, r8}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)="a0d3a31de99292116872a4707006b45c955223a33fffbcbb0fa76d29ef850ee1fbaf72", 0x23}], 0x1, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x2c8}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f0000000e80)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x63f6, 0x9d, &(0x7f00000002c0)=""/157, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x0, 0x8f3, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r7, 0xffffffffffffffff, r7, r7, r7], 0x0, 0x10, 0x3c}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000800)=0x8) openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.freeze\x00', 0x100002, 0x0) 2.101092217s ago: executing program 1 (id=2523): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xf5ffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825ff02000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 1.990223511s ago: executing program 3 (id=2524): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475ae", 0x17}], 0x1, 0x0, 0x6b}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000001"], 0x0, 0x3e, 0x0, 0x1}, 0x28) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xa, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000180)=r5) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', 0x0, r3, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x80, &(0x7f00000002c0)=""/128}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41) 1.921535823s ago: executing program 1 (id=2525): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000480), &(0x7f00000004c0)=r0}, 0x20) close(0x3) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001180)="cb79b0e03f078337c2f40b290cfd124803bd9f408f21746446cd7aaff7b28206b1bd5373ed2b2219a43dc3537dff6deee5fce092caf06076a17ba8d234efb1a5e5fcae269f1a3546fb1a9e5ac95c1fa4368809246a836b64a361365c781a3485a263427dabf4f1f81018e16ca8644caad25e5cc13f759c5fee1727d74786d96a4e34de7a6c68258d0799e9ffeee20e901bb70273057fc36f67d4d74bba67b88b56bfd9412a09e03bb4480ae34c6d6f9ac13f8ff081ac72fa052a14a57a6494c0c55b8e5a5c0362bbeb0a54e50c40c9316242d560892c728955a2e1ab4afbc0ec3b07a327d3", 0xe5}, {&(0x7f0000001280)="a7973dcaeeefa156a9d0b2c993efe424c66e31c9d1c67d8bce39674b5f046baa469089e77fa3b7022463cf7552b39394b73f81f04701802f6114f2adb38a5e9cdb3738c3b80cddf170fc0b572869403ec0aeee32f1a9dd8394953bcc5d160d531ac5d2a83c37305f34067190b68bd8845ce64d812bf7e65a334ebe4437845e7a1fd91999ed2753bb37a0eeeb2b4950fdf6de29769f18fb7d6effb2a5df3ef361926cfc474cdecbfd4db15fa0a807fe57cb0e9af3a07368608a29e7133822e6679398835440cdb3b9eac012459a30f08c83e84b72a8", 0xd5}, {&(0x7f0000001380)="f9f774d40700232912f1fbb786ae6bfb2a17ae756f02ca03b5deb00d83887423c076e778259e0edf63144794a78ac5e8ae206be13b29e9dd7653f2b8c084e77ba497c1f6e9ed2e84df99619f152a6af14f1234d1d2cff91958150b3aa5ffe7a15d3b5f94dca246eebb27cf584dcc16dd922f44691e6e0f19c715a558", 0x7c}, {&(0x7f0000001400)}], 0x4, &(0x7f0000001480)="33d9436a757ffa64c1e81b5263e3710103edc995f4260d", 0x17, 0x400c404}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x1c, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @exit, @ldst={0x3, 0x2, 0x6, 0x3, 0x6, 0xc, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x76}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='syzkaller\x00', 0x10000, 0xab, &(0x7f0000000900)=""/171, 0x40f00, 0x42, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x4, 0xf, 0x6}, 0x10, 0x1abdb, 0xffffffffffffffff, 0x6, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x1, 0x2, 0x9, 0x4}, {0x1, 0x4, 0xe, 0x3}, {0x4, 0x5, 0x5, 0xa}, {0x3, 0x3, 0x0, 0x4}, {0x3, 0x2, 0xe, 0x5}, {0x2, 0x4, 0x9, 0x4}], 0x10, 0xfffffffb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r4}, &(0x7f0000000780), &(0x7f0000000b80)=r5}, 0x20) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x102) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 836.441685ms ago: executing program 0 (id=2526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="09000000010000004200000040000000c2000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)="31140f62", &(0x7f0000000bc0), 0x4, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x7, r5}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000140), &(0x7f00000001c0)=r4}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 751.908038ms ago: executing program 3 (id=2527): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}}, 0x80, &(0x7f0000000840)=[{0x0, 0x55}, {&(0x7f0000000440)="495bb4d8379fd36a26b300088c007d9f97ce2a31951a49427754a4ca6d692b1d690154ecfbffc95adce65b9dda0ed4864a9b3af06f81c3e2a1927565625326d65e6dbe2ae1f3c5befac6b5bef16dd86ad140f1908b", 0x3d}, {&(0x7f00000004c0)="26bb7c3986b4e1c1dc15cc4e93f79fe8402e127d168fecc13d872f2bd6c60af82748bd59487a3bae4f325e776b893e29030dcf1794fd7a399566daaeb988177b64a6d4ffa42eebce44690e01f429c89359475d6ef17f"}, {&(0x7f0000000540)="7bccc625b34f5db6e9ff8f54939db292ce4af60317fde51d40dd08fe7aab6669a8939dca89114dc7c4e7ec932acf4a87d3a6fdf27f07ad51b7f6"}, {&(0x7f0000000a80)="4ded0d2fcaf737dc6b1a84101660a7a6301eca15488366bf3dbf255d3979f1e9773c0f327e23de80e195ca15a28cdff44ac6a013baffe234595a2f748622ad7013e3448743eec8fb0983febecf12c5e0c0c531b1c081fd65eb5c4bbcc1a1b607bf7d0621f932a3351a9f062d44631dd4f745e84e8bfd69772ed876b890a6e7dac164007f956bd069f92835af21326946c492df50c6b9dc9ca80420e33b3c89f888c9002338cf4f3bcfb88bc6ab71d9db167058f323ce895da1a7d04f69"}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010055007d95df16a39b1a6c900000000000000001000000040500002b24ec76064bef2f000000fb71caef932f3889d1fdda5b57000000860f5878437ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110700000094412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 652.056621ms ago: executing program 1 (id=2528): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000080040000003f00000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 510.899635ms ago: executing program 3 (id=2529): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3e15937b6a69a71d9a1f9a5bb17ef4fc9f30f215302da814d151105d097f2af92140a388ade4f81eab917eac4004dbdcea4fb0073f5615a1248d14d2c3907da613c457ddcbc90b7b0c08f6c7a04ce6a2054600fb2e171be30f7368213fa450a608fda0cecf5f1badb21cf584c445f5555fa552fb27903da912c3632c72bba00d1b4ab0e2cc2679a94f0becdd52df990e382d704fda19aaa6ed4eda6336061af20c4d4501c8a8da8592724017e35c60873a98dd5d106ed901eaaae300a22beb1a22655713dfdd1dda936a7f7b20f63954612ba61a050986d0e52dff5c94c891eb6b75963c9dee379e5a", 0xe9}, {&(0x7f0000000300)="e40b84c14cfcd883dffe11bc4ada9725b3a3ea769f91a1c7a355e2efa66629458db321165d6ad96eeeb53d5e37a1019a3a2ff2b011ca73e10ed2d47feceb6562b2f59464d6991a8c6d0e02a6d30c36a224824f3dd8473499b4de32be87930a6b5cf616d12c86ac65943d14a207f744282c", 0x71}, {&(0x7f0000000380)="bc59921eea28fadb3d38315c97170dc09e30cae1dd9a74c472c0b61594ec746b7950db98dfca54591fec5c540d676d9268d7a83564fa4eef78e82ac84b01cc3a79524f33a56362ce9aa172e8fcd9c86788e8299731150bcc608ae8137a8f1cf8358775de5188cd07", 0x68}, {&(0x7f0000000400)="e0834d1ebb51a1526dd1f9ccd9c1c44b73a1a44fce7c696ef287a565fcd4e8b1724be607ae013c276ba26f8ef16f3448d07037fc32cfb071e02d804fc16d66f2b65651342ee2b2d93b63d008d30c2002db4dd2eeb64ad720a1978141091f581387275c40007b9805ec072ec362327ad90d1a9b89962a6e6ca8d0a6231660688fc78a70d27ee59d360382d3bee49be49856896e4ed353a71e7261eb45c63e51e84c24d1", 0xa3}, {&(0x7f00000004c0)="ae6fc34c933ccb2d4e953adcc1102f0141b878c5d5b82055f16cf71a6fc85fba29571aeef46b79e734bf1fe58b0d8056bfb474fe70765bf86fb0cb1432a4d281794e7d4bc047714202c2b28c4c7fd16428b6f8f74dc3bde9560fac586fe57b9d87829d6f8f32dfca0acc159b235a390601841e934ba21ce5aea19e523bb288fcedb8480b324c524aae4be87866d913fc463ef0137cf42163", 0x98}, {&(0x7f0000000580)="2cd1bf36cbad0d814f0682396c516795e1416b579439c5b81881ab9b3d8c9b22d2862750e2f1f126aa1d51", 0x2b}, {&(0x7f00000005c0)="b5a84fb947ac7512d4a3db3fcc1e3c1cebbe199e5dd69203f24ba7e2636d", 0x1e}, {&(0x7f0000000600)="426b75e6710f8664d95864c2654ac52a250aab85ac3d2c160c279f4a7d672dec237b168278ae0c8f7e95211229b792b048307025e6c91bcd2586c77c8b2c8c93907a6aada0a7efc30bf920b3f30cf19f6b8579c821235eb7f99c2a8f2de893158c34599a602c139839a5459c84aa735e59c99a0d1d012e0993936b12367da06ba399ccda5fcb791f6168c3e852", 0x8d}, {&(0x7f00000006c0)="da7d09b5c210ae37e919e23b1b041077ec9f1f762cda4b205eab6e01e6f4bc9648c141cd61fc25de70061f4954ab4cc3c7bb49c9f4bd408b5f0a1c0d29d90f31eae300fdbdf8e6a797b1e55a6c5f89ff3dc62154a4b950e379cb1019250fe8", 0x5f}], 0x9}, 0x20000080) 377.061849ms ago: executing program 1 (id=2530): socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000100000007000000441c0503e0200001", @ANYRES64], 0x30}, 0x40880) 253.219933ms ago: executing program 3 (id=2531): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800004c000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000002040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 92.997448ms ago: executing program 3 (id=2532): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x9}, 0x8) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000", @ANYBLOB="0000000000000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) r7 = socket$kcm(0x2, 0x0, 0x84) sendmsg$inet(r7, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000340)="90c8a0f1f41b8cbe780214e68bfe7adfe4334c5bd45d84498538fe351aea2eeb71c62020f761905ebb59d8160e5c56163353d5ab33e111843107e70300000045712714ebdb9c40e945", 0x49}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r7, 0x84, 0xb, &(0x7f0000000000), 0xe) 91.974857ms ago: executing program 1 (id=2533): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r1, 0x0, 0x0}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 0s ago: executing program 0 (id=2534): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0xfffd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x1000001000}) kernel console output (not intermixed with test programs): nvalid length. [ 352.779239][T10173] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1418'. [ 352.970454][T10178] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1420'. [ 353.024686][T10182] FAULT_INJECTION: forcing a failure. [ 353.024686][T10182] name failslab, interval 1, probability 0, space 0, times 0 [ 353.047383][T10182] CPU: 0 PID: 10182 Comm: syz.3.1422 Not tainted syzkaller #0 [ 353.054913][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 353.065007][T10182] Call Trace: [ 353.068325][T10182] [ 353.071292][T10182] dump_stack_lvl+0x18c/0x250 [ 353.076030][T10182] ? sctp_sendmsg+0x1575/0x28c0 [ 353.080933][T10182] ? ___sys_sendmsg+0x2a6/0x360 [ 353.085825][T10182] ? show_regs_print_info+0x20/0x20 [ 353.091081][T10182] ? load_image+0x420/0x420 [ 353.095649][T10182] should_fail_ex+0x39d/0x4d0 [ 353.100391][T10182] should_failslab+0x9/0x20 [ 353.104952][T10182] slab_pre_alloc_hook+0x59/0x310 [ 353.110052][T10182] ? sctp_add_bind_addr+0x8c/0x360 [ 353.115211][T10182] __kmem_cache_alloc_node+0x53/0x250 [ 353.120642][T10182] ? sctp_add_bind_addr+0x8c/0x360 [ 353.125782][T10182] kmalloc_trace+0x2a/0xe0 [ 353.130227][T10182] sctp_add_bind_addr+0x8c/0x360 [ 353.135183][T10182] sctp_copy_local_addr_list+0x315/0x4f0 [ 353.140836][T10182] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 353.146574][T10182] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 353.152662][T10182] ? sctp_v6_is_any+0x64/0x70 [ 353.157360][T10182] ? sctp_copy_one_addr+0x8c/0x350 [ 353.162488][T10182] sctp_bind_addr_copy+0xb3/0x3c0 [ 353.167528][T10182] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 353.173881][T10182] sctp_connect_new_asoc+0x2f9/0x6a0 [ 353.179185][T10182] ? __sctp_connect+0xd80/0xd80 [ 353.184054][T10182] ? __local_bh_enable_ip+0x13a/0x1c0 [ 353.189444][T10182] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 353.195003][T10182] ? security_sctp_bind_connect+0x89/0xb0 [ 353.200764][T10182] sctp_sendmsg+0x1575/0x28c0 [ 353.205483][T10182] ? sctp_getsockopt+0xb60/0xb60 [ 353.210437][T10182] ? aa_sk_perm+0x83c/0x970 [ 353.214970][T10182] ? aa_af_perm+0x330/0x330 [ 353.219684][T10182] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 353.226114][T10182] ? sock_rps_record_flow+0x19/0x3f0 [ 353.231417][T10182] ? inet_sendmsg+0xe9/0x2f0 [ 353.236026][T10182] ? inet_send_prepare+0x260/0x260 [ 353.241157][T10182] ____sys_sendmsg+0x5ba/0x960 [ 353.245937][T10182] ? __lock_acquire+0x7d40/0x7d40 [ 353.250981][T10182] ? __asan_memset+0x22/0x40 [ 353.255590][T10182] ? __sys_sendmsg_sock+0x30/0x30 [ 353.260626][T10182] ? __import_iovec+0x5f2/0x850 [ 353.265496][T10182] ? import_iovec+0x73/0xa0 [ 353.270014][T10182] ___sys_sendmsg+0x2a6/0x360 [ 353.274718][T10182] ? __sys_sendmsg+0x2a0/0x2a0 [ 353.279537][T10182] ? __lock_acquire+0x7d40/0x7d40 [ 353.284604][T10182] __se_sys_sendmsg+0x1c2/0x2b0 [ 353.289472][T10182] ? __x64_sys_sendmsg+0x80/0x80 [ 353.294439][T10182] ? lockdep_hardirqs_on+0x98/0x150 [ 353.299653][T10182] do_syscall_64+0x55/0xa0 [ 353.304078][T10182] ? clear_bhb_loop+0x40/0x90 [ 353.308768][T10182] ? clear_bhb_loop+0x40/0x90 [ 353.313460][T10182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.319364][T10182] RIP: 0033:0x7f900df9ce59 [ 353.323799][T10182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.343425][T10182] RSP: 002b:00007f900ed86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.351865][T10182] RAX: ffffffffffffffda RBX: 00007f900e215fa0 RCX: 00007f900df9ce59 [ 353.359866][T10182] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 353.367855][T10182] RBP: 00007f900ed86090 R08: 0000000000000000 R09: 0000000000000000 [ 353.375835][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.383816][T10182] R13: 00007f900e216038 R14: 00007f900e215fa0 R15: 00007ffee0083798 [ 353.391815][T10182] [ 353.817916][T10203] netlink: 'syz.0.1426': attribute type 4 has an invalid length. [ 353.928463][T10203] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1426'. [ 354.214568][T10203] .`: renamed from bond0 (while UP) [ 355.117969][T10213] netlink: 'syz.0.1429': attribute type 13 has an invalid length. [ 355.142416][T10213] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1429'. [ 355.164601][T10213] syz_tun: refused to change device tx_queue_len [ 355.172015][T10213] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 356.184133][T10230] netlink: 'syz.0.1435': attribute type 10 has an invalid length. [ 356.204972][T10226] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1433'. [ 356.216376][T10226] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.1433'. [ 357.576138][T10265] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1446'. [ 357.843733][T10264] netlink: 'syz.2.1444': attribute type 10 has an invalid length. [ 357.854402][T10264] netlink: 'syz.2.1444': attribute type 16 has an invalid length. [ 357.870816][T10264] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1444'. [ 358.137477][T10280] FAULT_INJECTION: forcing a failure. [ 358.137477][T10280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.164813][T10280] CPU: 1 PID: 10280 Comm: syz.2.1452 Not tainted syzkaller #0 [ 358.172349][T10280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.182435][T10280] Call Trace: [ 358.185738][T10280] [ 358.188723][T10280] dump_stack_lvl+0x18c/0x250 [ 358.193461][T10280] ? show_regs_print_info+0x20/0x20 [ 358.198702][T10280] ? load_image+0x420/0x420 [ 358.203244][T10280] ? __might_fault+0xaa/0x120 [ 358.207955][T10280] ? __lock_acquire+0x7d40/0x7d40 [ 358.213015][T10280] should_fail_ex+0x39d/0x4d0 [ 358.217752][T10280] _copy_from_iter+0x1d9/0x12e0 [ 358.222647][T10280] ? rep_movs_alternative+0x4a/0x90 [ 358.227877][T10280] ? _copy_from_iter+0x24e/0x12e0 [ 358.232938][T10280] ? __virt_addr_valid+0x18c/0x540 [ 358.238082][T10280] ? __lock_acquire+0x7d40/0x7d40 [ 358.243137][T10280] ? copyout_mc+0x70/0x70 [ 358.247515][T10280] ? copyout_mc+0x70/0x70 [ 358.251880][T10280] ? __virt_addr_valid+0x18c/0x540 [ 358.257042][T10280] ? page_copy_sane+0x16a/0x270 [ 358.261954][T10280] copy_page_from_iter+0x7b/0x100 [ 358.267029][T10280] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 358.272894][T10280] tun_get_user+0x15db/0x3ca0 [ 358.277626][T10280] ? aa_file_perm+0x11b/0xee0 [ 358.282351][T10280] ? rcu_read_unlock+0xa0/0xa0 [ 358.287169][T10280] ? tun_get+0x1c/0x2e0 [ 358.291369][T10280] ? __lock_acquire+0x7d40/0x7d40 [ 358.296441][T10280] ? tun_get+0x1c/0x2e0 [ 358.300654][T10280] tun_chr_write_iter+0x119/0x200 [ 358.305733][T10280] vfs_write+0x46c/0x990 [ 358.310033][T10280] ? file_end_write+0x250/0x250 [ 358.314931][T10280] ? __fget_files+0x43d/0x4b0 [ 358.319685][T10280] ? __fdget_pos+0x1d8/0x330 [ 358.324298][T10280] ? ksys_write+0x75/0x260 [ 358.328719][T10280] ksys_write+0x150/0x260 [ 358.333087][T10280] ? __ia32_sys_read+0x90/0x90 [ 358.337854][T10280] ? lockdep_hardirqs_on+0x98/0x150 [ 358.343070][T10280] do_syscall_64+0x55/0xa0 [ 358.347490][T10280] ? clear_bhb_loop+0x40/0x90 [ 358.352167][T10280] ? clear_bhb_loop+0x40/0x90 [ 358.356865][T10280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.362809][T10280] RIP: 0033:0x7f9ffd19ce59 [ 358.367267][T10280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.386917][T10280] RSP: 002b:00007f9ffe13c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.395381][T10280] RAX: ffffffffffffffda RBX: 00007f9ffd415fa0 RCX: 00007f9ffd19ce59 [ 358.403406][T10280] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 358.411416][T10280] RBP: 00007f9ffe13c090 R08: 0000000000000000 R09: 0000000000000000 [ 358.419412][T10280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.427386][T10280] R13: 00007f9ffd416038 R14: 00007f9ffd415fa0 R15: 00007fff7bfdd158 [ 358.435366][T10280] [ 358.968337][T10292] netlink: 'syz.0.1453': attribute type 15 has an invalid length. [ 359.030905][T10292] netlink: 'syz.0.1453': attribute type 7 has an invalid length. [ 360.827517][T10321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1468'. [ 360.978611][T10326] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1470'. [ 361.468524][T10336] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1474'. [ 364.389130][T10361] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1479'. [ 364.544024][T10361] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 364.610924][T10361] CPU: 1 PID: 10361 Comm: syz.3.1479 Not tainted syzkaller #0 [ 364.618527][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 364.628657][T10361] Call Trace: [ 364.632014][T10361] [ 364.635034][T10361] dump_stack_lvl+0x18c/0x250 [ 364.639838][T10361] ? show_regs_print_info+0x20/0x20 [ 364.645141][T10361] ? load_image+0x420/0x420 [ 364.649814][T10361] sysfs_warn_dup+0x8e/0xa0 [ 364.654412][T10361] sysfs_do_create_link_sd+0xc0/0x110 [ 364.659880][T10361] device_add_class_symlinks+0x1cf/0x240 [ 364.665623][T10361] device_add+0x507/0xc20 [ 364.670077][T10361] wiphy_register+0x1dad/0x2ae0 [ 364.675127][T10361] ? cfg80211_event_work+0x40/0x40 [ 364.680318][T10361] ? minstrel_ht_alloc+0x88a/0x990 [ 364.685588][T10361] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 364.691778][T10361] ieee80211_register_hw+0x3464/0x4250 [ 364.697465][T10361] ? ieee80211_tasklet_handler+0x20/0x20 [ 364.703179][T10361] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 364.709181][T10361] ? __debug_object_init+0xec/0x450 [ 364.714500][T10361] ? __asan_memset+0x22/0x40 [ 364.719189][T10361] ? __hrtimer_init+0x186/0x270 [ 364.724156][T10361] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 364.730128][T10361] ? mac80211_hwsim_free+0x220/0x220 [ 364.735497][T10361] ? rcu_is_watching+0x15/0xb0 [ 364.740355][T10361] ? kstrndup+0xbd/0x140 [ 364.744755][T10361] hwsim_new_radio_nl+0xdc9/0x1a90 [ 364.749989][T10361] ? __nla_validate+0x50/0x50 [ 364.754837][T10361] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 364.761344][T10361] ? __nla_parse+0x40/0x50 [ 364.765874][T10361] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 364.772329][T10361] genl_family_rcv_msg_doit+0x211/0x310 [ 364.778018][T10361] ? end_current_label_crit_section+0x170/0x170 [ 364.784383][T10361] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 364.790418][T10361] ? bpf_lsm_capable+0x9/0x10 [ 364.795186][T10361] ? security_capable+0x89/0xb0 [ 364.800180][T10361] genl_rcv_msg+0x619/0x7a0 [ 364.804817][T10361] ? genl_bind+0x360/0x360 [ 364.809332][T10361] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 364.815759][T10361] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 364.822518][T10361] netlink_rcv_skb+0x241/0x4d0 [ 364.827388][T10361] ? genl_bind+0x360/0x360 [ 364.831904][T10361] ? netlink_ack+0x1180/0x1180 [ 364.836842][T10361] ? __lock_acquire+0x7d40/0x7d40 [ 364.842006][T10361] ? down_read+0x1ac/0x2e0 [ 364.846536][T10361] genl_rcv+0x28/0x40 [ 364.850597][T10361] netlink_unicast+0x751/0x8d0 [ 364.855517][T10361] netlink_sendmsg+0x8d0/0xbf0 [ 364.860382][T10361] ? perf_trace_lock+0x304/0x3b0 [ 364.865460][T10361] ? netlink_getsockopt+0x590/0x590 [ 364.870798][T10361] ? aa_sock_msg_perm+0x94/0x150 [ 364.875846][T10361] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 364.881235][T10361] ? security_socket_sendmsg+0x80/0xa0 [ 364.886785][T10361] ? netlink_getsockopt+0x590/0x590 [ 364.892107][T10361] ____sys_sendmsg+0x5ba/0x960 [ 364.897048][T10361] ? __asan_memset+0x22/0x40 [ 364.901744][T10361] ? __sys_sendmsg_sock+0x30/0x30 [ 364.906848][T10361] ? __import_iovec+0x5f2/0x850 [ 364.911852][T10361] ? import_iovec+0x73/0xa0 [ 364.916477][T10361] ___sys_sendmsg+0x2a6/0x360 [ 364.921280][T10361] ? __sys_sendmsg+0x2a0/0x2a0 [ 364.926442][T10361] __se_sys_sendmsg+0x1c2/0x2b0 [ 364.931408][T10361] ? __x64_sys_sendmsg+0x80/0x80 [ 364.936536][T10361] ? lockdep_hardirqs_on+0x98/0x150 [ 364.941848][T10361] do_syscall_64+0x55/0xa0 [ 364.946346][T10361] ? clear_bhb_loop+0x40/0x90 [ 364.951112][T10361] ? clear_bhb_loop+0x40/0x90 [ 364.955895][T10361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.961874][T10361] RIP: 0033:0x7f900df9ce59 [ 364.966372][T10361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.986062][T10361] RSP: 002b:00007f900ed86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.994580][T10361] RAX: ffffffffffffffda RBX: 00007f900e215fa0 RCX: 00007f900df9ce59 [ 365.002628][T10361] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 365.010672][T10361] RBP: 00007f900e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 365.018716][T10361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.026765][T10361] R13: 00007f900e216038 R14: 00007f900e215fa0 R15: 00007ffee0083798 [ 365.034925][T10361] [ 365.862734][T10371] netlink: 'syz.1.1483': attribute type 10 has an invalid length. [ 365.865476][T10367] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1481'. [ 365.883299][T10371] .`: (slave netdevsim0): Releasing backup interface [ 365.900113][T10371] batman_adv: batadv0: Adding interface: netdevsim0 [ 365.908552][T10371] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.941116][T10371] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 366.158973][T10375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1484'. [ 366.353250][T10377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.671120][T10491] netlink: 'syz.0.1505': attribute type 39 has an invalid length. [ 371.190711][T10495] netlink: 'syz.0.1505': attribute type 10 has an invalid length. [ 371.198787][T10495] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1505'. [ 371.279828][T10495] .`: entered promiscuous mode [ 371.286410][T10495] bond_slave_0: entered promiscuous mode [ 371.300827][T10495] bond_slave_1: entered promiscuous mode [ 371.320272][T10495] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 371.352697][T10495] 8021q: adding VLAN 0 to HW filter on device .` [ 371.380227][T10495] bridge0: port 3(.`) entered blocking state [ 371.389847][T10495] bridge0: port 3(.`) entered disabled state [ 371.403008][T10495] .`: entered allmulticast mode [ 371.408136][T10495] bond_slave_0: entered allmulticast mode [ 371.417487][T10495] bond_slave_1: entered allmulticast mode [ 371.426666][T10495] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 371.437957][T10495] syz_tun: entered allmulticast mode [ 371.450815][T10495] bridge0: port 3(.`) entered blocking state [ 371.457039][T10495] bridge0: port 3(.`) entered forwarding state [ 373.596883][T10518] netlink: 807 bytes leftover after parsing attributes in process `syz.1.1512'. [ 373.851613][T10523] FAULT_INJECTION: forcing a failure. [ 373.851613][T10523] name failslab, interval 1, probability 0, space 0, times 0 [ 373.871226][T10523] CPU: 1 PID: 10523 Comm: syz.2.1513 Not tainted syzkaller #0 [ 373.878759][T10523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 373.889723][T10523] Call Trace: [ 373.893048][T10523] [ 373.896009][T10523] dump_stack_lvl+0x18c/0x250 [ 373.900735][T10523] ? sctp_sendmsg+0x1575/0x28c0 [ 373.905645][T10523] ? ___sys_sendmsg+0x2a6/0x360 [ 373.910550][T10523] ? show_regs_print_info+0x20/0x20 [ 373.915803][T10523] ? load_image+0x420/0x420 [ 373.920376][T10523] should_fail_ex+0x39d/0x4d0 [ 373.925106][T10523] should_failslab+0x9/0x20 [ 373.929656][T10523] slab_pre_alloc_hook+0x59/0x310 [ 373.934730][T10523] ? sctp_add_bind_addr+0x8c/0x360 [ 373.939884][T10523] __kmem_cache_alloc_node+0x53/0x250 [ 373.945299][T10523] ? sctp_add_bind_addr+0x8c/0x360 [ 373.950440][T10523] kmalloc_trace+0x2a/0xe0 [ 373.954899][T10523] sctp_add_bind_addr+0x8c/0x360 [ 373.959879][T10523] sctp_copy_local_addr_list+0x315/0x4f0 [ 373.965555][T10523] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 373.971313][T10523] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 373.977421][T10523] ? sctp_v6_is_any+0x64/0x70 [ 373.982137][T10523] ? sctp_copy_one_addr+0x8c/0x350 [ 373.987302][T10523] sctp_bind_addr_copy+0xb3/0x3c0 [ 373.992360][T10523] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 373.998726][T10523] sctp_connect_new_asoc+0x2f9/0x6a0 [ 374.004067][T10523] ? __sctp_connect+0xd80/0xd80 [ 374.008949][T10523] ? __local_bh_enable_ip+0x13a/0x1c0 [ 374.014367][T10523] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 374.019993][T10523] ? security_sctp_bind_connect+0x89/0xb0 [ 374.025784][T10523] sctp_sendmsg+0x1575/0x28c0 [ 374.030535][T10523] ? sctp_getsockopt+0xb60/0xb60 [ 374.035527][T10523] ? aa_sk_perm+0x83c/0x970 [ 374.040089][T10523] ? aa_af_perm+0x330/0x330 [ 374.044632][T10523] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 374.051091][T10523] ? sock_rps_record_flow+0x19/0x3f0 [ 374.056417][T10523] ? inet_sendmsg+0xe9/0x2f0 [ 374.061044][T10523] ? inet_send_prepare+0x260/0x260 [ 374.066198][T10523] ____sys_sendmsg+0x5ba/0x960 [ 374.070998][T10523] ? __lock_acquire+0x7d40/0x7d40 [ 374.076059][T10523] ? __asan_memset+0x22/0x40 [ 374.080690][T10523] ? __sys_sendmsg_sock+0x30/0x30 [ 374.085749][T10523] ? __import_iovec+0x5f2/0x850 [ 374.090650][T10523] ? import_iovec+0x73/0xa0 [ 374.095242][T10523] ___sys_sendmsg+0x2a6/0x360 [ 374.099979][T10523] ? get_pid_task+0x20/0x1e0 [ 374.104635][T10523] ? __sys_sendmsg+0x2a0/0x2a0 [ 374.109465][T10523] ? __lock_acquire+0x7d40/0x7d40 [ 374.114557][T10523] __se_sys_sendmsg+0x1c2/0x2b0 [ 374.119448][T10523] ? __x64_sys_sendmsg+0x80/0x80 [ 374.124444][T10523] ? lockdep_hardirqs_on+0x98/0x150 [ 374.129685][T10523] do_syscall_64+0x55/0xa0 [ 374.134123][T10523] ? clear_bhb_loop+0x40/0x90 [ 374.138817][T10523] ? clear_bhb_loop+0x40/0x90 [ 374.143517][T10523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.149425][T10523] RIP: 0033:0x7f9ffd19ce59 [ 374.153854][T10523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.173609][T10523] RSP: 002b:00007f9ffe13c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.182051][T10523] RAX: ffffffffffffffda RBX: 00007f9ffd415fa0 RCX: 00007f9ffd19ce59 [ 374.190041][T10523] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 374.198032][T10523] RBP: 00007f9ffe13c090 R08: 0000000000000000 R09: 0000000000000000 [ 374.206107][T10523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.214091][T10523] R13: 00007f9ffd416038 R14: 00007f9ffd415fa0 R15: 00007fff7bfdd158 [ 374.222092][T10523] [ 374.483681][T10529] FAULT_INJECTION: forcing a failure. [ 374.483681][T10529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.530745][T10529] CPU: 0 PID: 10529 Comm: syz.1.1517 Not tainted syzkaller #0 [ 374.538291][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.548381][T10529] Call Trace: [ 374.551693][T10529] [ 374.554658][T10529] dump_stack_lvl+0x18c/0x250 [ 374.559480][T10529] ? show_regs_print_info+0x20/0x20 [ 374.564728][T10529] ? load_image+0x420/0x420 [ 374.569291][T10529] ? __might_fault+0xaa/0x120 [ 374.574008][T10529] ? __lock_acquire+0x7d40/0x7d40 [ 374.579076][T10529] should_fail_ex+0x39d/0x4d0 [ 374.583801][T10529] _copy_from_user+0x2f/0xe0 [ 374.588531][T10529] ___sys_recvmsg+0x176/0x590 [ 374.593254][T10529] ? __sys_recvmsg+0x2a0/0x2a0 [ 374.598059][T10529] ? ksys_write+0x1c4/0x260 [ 374.602618][T10529] ? __fget_files+0x43d/0x4b0 [ 374.607356][T10529] __x64_sys_recvmsg+0x20c/0x2e0 [ 374.612335][T10529] ? ___sys_recvmsg+0x590/0x590 [ 374.617237][T10529] ? lockdep_hardirqs_on+0x98/0x150 [ 374.622487][T10529] do_syscall_64+0x55/0xa0 [ 374.626966][T10529] ? clear_bhb_loop+0x40/0x90 [ 374.631688][T10529] ? clear_bhb_loop+0x40/0x90 [ 374.636412][T10529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.642349][T10529] RIP: 0033:0x7fd09ff9ce59 [ 374.646805][T10529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.666463][T10529] RSP: 002b:00007fd0a0e75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 374.674940][T10529] RAX: ffffffffffffffda RBX: 00007fd0a0215fa0 RCX: 00007fd09ff9ce59 [ 374.682948][T10529] RDX: 0000000000000002 RSI: 0000200000000d00 RDI: 0000000000000003 [ 374.690960][T10529] RBP: 00007fd0a0e75090 R08: 0000000000000000 R09: 0000000000000000 [ 374.698966][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.706970][T10529] R13: 00007fd0a0216038 R14: 00007fd0a0215fa0 R15: 00007ffd50666128 [ 374.714990][T10529] [ 375.223848][T10543] netlink: 'syz.1.1523': attribute type 10 has an invalid length. [ 375.400812][T10547] netlink: 'syz.2.1525': attribute type 13 has an invalid length. [ 375.414821][T10547] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1525'. [ 375.465299][T10547] syz_tun: refused to change device tx_queue_len [ 375.477302][T10547] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 377.046257][T10566] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1532'. [ 377.056631][T10566] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.1532'. [ 377.297009][T10579] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1537'. [ 377.336801][T10577] netlink: 'syz.1.1536': attribute type 3 has an invalid length. [ 377.354234][T10577] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1536'. [ 377.530420][T10584] netlink: 'syz.1.1539': attribute type 9 has an invalid length. [ 377.544570][T10584] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1539'. [ 378.332804][T10600] FAULT_INJECTION: forcing a failure. [ 378.332804][T10600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.382339][T10600] CPU: 1 PID: 10600 Comm: syz.0.1543 Not tainted syzkaller #0 [ 378.389880][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 378.399980][T10600] Call Trace: [ 378.403376][T10600] [ 378.406343][T10600] dump_stack_lvl+0x18c/0x250 [ 378.411073][T10600] ? show_regs_print_info+0x20/0x20 [ 378.416315][T10600] ? load_image+0x420/0x420 [ 378.420871][T10600] ? __might_fault+0xaa/0x120 [ 378.425602][T10600] ? __lock_acquire+0x7d40/0x7d40 [ 378.430672][T10600] should_fail_ex+0x39d/0x4d0 [ 378.435410][T10600] _copy_from_iter+0x1d9/0x12e0 [ 378.440317][T10600] ? rep_movs_alternative+0x4a/0x90 [ 378.445563][T10600] ? _copy_from_iter+0x24e/0x12e0 [ 378.450663][T10600] ? __virt_addr_valid+0x18c/0x540 [ 378.455829][T10600] ? __lock_acquire+0x7d40/0x7d40 [ 378.460893][T10600] ? copyout_mc+0x70/0x70 [ 378.465282][T10600] ? copyout_mc+0x70/0x70 [ 378.469659][T10600] ? __virt_addr_valid+0x18c/0x540 [ 378.474816][T10600] ? page_copy_sane+0x16a/0x270 [ 378.479704][T10600] copy_page_from_iter+0x7b/0x100 [ 378.484773][T10600] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 378.490619][T10600] tun_get_user+0x15db/0x3ca0 [ 378.495329][T10600] ? aa_file_perm+0x11b/0xee0 [ 378.500031][T10600] ? rcu_read_unlock+0xa0/0xa0 [ 378.504822][T10600] ? tun_get+0x1c/0x2e0 [ 378.508994][T10600] ? __lock_acquire+0x7d40/0x7d40 [ 378.514044][T10600] ? tun_get+0x1c/0x2e0 [ 378.518221][T10600] tun_chr_write_iter+0x119/0x200 [ 378.523267][T10600] vfs_write+0x46c/0x990 [ 378.527531][T10600] ? file_end_write+0x250/0x250 [ 378.532404][T10600] ? __fget_files+0x43d/0x4b0 [ 378.537109][T10600] ? __fdget_pos+0x1d8/0x330 [ 378.541712][T10600] ? ksys_write+0x75/0x260 [ 378.546158][T10600] ksys_write+0x150/0x260 [ 378.550507][T10600] ? __ia32_sys_read+0x90/0x90 [ 378.555299][T10600] ? lockdep_hardirqs_on+0x98/0x150 [ 378.560518][T10600] do_syscall_64+0x55/0xa0 [ 378.564951][T10600] ? clear_bhb_loop+0x40/0x90 [ 378.569646][T10600] ? clear_bhb_loop+0x40/0x90 [ 378.574338][T10600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.580249][T10600] RIP: 0033:0x7fba3f59ce59 [ 378.584680][T10600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.604312][T10600] RSP: 002b:00007fba40463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.612747][T10600] RAX: ffffffffffffffda RBX: 00007fba3f815fa0 RCX: 00007fba3f59ce59 [ 378.620737][T10600] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 378.628718][T10600] RBP: 00007fba40463090 R08: 0000000000000000 R09: 0000000000000000 [ 378.636706][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.644692][T10600] R13: 00007fba3f816038 R14: 00007fba3f815fa0 R15: 00007fffaee912b8 [ 378.652693][T10600] [ 378.885776][T10604] netlink: 'syz.1.1544': attribute type 13 has an invalid length. [ 378.904145][T10604] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1544'. [ 378.929355][T10604] syz_tun: refused to change device tx_queue_len [ 378.997097][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.003566][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.014358][T10604] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 379.033940][T10610] netlink: 'syz.3.1548': attribute type 10 has an invalid length. [ 380.711289][T10651] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1561'. [ 380.782030][T10651] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 380.920771][T10653] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1564'. [ 381.286342][T10658] netlink: 'syz.2.1565': attribute type 4 has an invalid length. [ 381.294193][T10658] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1565'. [ 381.819927][T10670] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1568'. [ 382.180273][T10684] netlink: 'syz.2.1572': attribute type 3 has an invalid length. [ 382.197330][T10684] __nla_validate_parse: 1 callbacks suppressed [ 382.197372][T10684] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1572'. [ 382.950142][T10706] netlink: 'syz.2.1580': attribute type 3 has an invalid length. [ 382.970137][T10706] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1580'. [ 383.527565][T10713] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1582'. [ 383.732654][T10713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.966664][T10717] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1584'. [ 384.712381][T10729] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1590'. [ 384.734980][T10729] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 385.375890][T10741] netlink: 'syz.3.1594': attribute type 10 has an invalid length. [ 385.423172][T10741] bond0: (slave netdevsim0): Releasing backup interface [ 385.449580][T10741] batman_adv: batadv0: Adding interface: netdevsim0 [ 385.470862][T10741] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.526517][T10741] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 386.934706][T10759] netlink: 'syz.0.1602': attribute type 10 has an invalid length. [ 386.950685][T10759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1602'. [ 386.971762][T10759] batman_adv: batadv0: Adding interface: vlan1 [ 386.977989][T10759] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.066434][T10759] batman_adv: batadv0: Interface activated: vlan1 [ 387.762821][T10768] netlink: 'syz.0.1606': attribute type 4 has an invalid length. [ 387.884515][T10768] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1606'. [ 389.071922][T10793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1613'. [ 391.753857][T10803] netlink: 'syz.0.1615': attribute type 3 has an invalid length. [ 391.766771][T10803] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1615'. [ 392.340974][T10812] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1618'. [ 393.122616][T10822] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1621'. [ 393.138272][T10822] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1621'. [ 393.151174][T10823] netlink: 'syz.3.1620': attribute type 39 has an invalid length. [ 396.088663][T10883] syzkaller0: left promiscuous mode [ 396.094220][T10883] syzkaller0: left allmulticast mode [ 396.243704][T10879] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1641'. [ 396.260699][T10879] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 396.512676][T10886] FAULT_INJECTION: forcing a failure. [ 396.512676][T10886] name failslab, interval 1, probability 0, space 0, times 0 [ 396.535250][T10886] CPU: 0 PID: 10886 Comm: syz.2.1643 Not tainted syzkaller #0 [ 396.542799][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.552894][T10886] Call Trace: [ 396.556206][T10886] [ 396.559171][T10886] dump_stack_lvl+0x18c/0x250 [ 396.563919][T10886] ? show_regs_print_info+0x20/0x20 [ 396.569166][T10886] ? load_image+0x420/0x420 [ 396.573718][T10886] ? __might_sleep+0xe0/0xe0 [ 396.578371][T10886] ? __lock_acquire+0x7d40/0x7d40 [ 396.583438][T10886] ? prepend_path+0x4b/0x960 [ 396.588075][T10886] should_fail_ex+0x39d/0x4d0 [ 396.592808][T10886] should_failslab+0x9/0x20 [ 396.597361][T10886] slab_pre_alloc_hook+0x59/0x310 [ 396.601110][T10881] netlink: 'syz.0.1641': attribute type 10 has an invalid length. [ 396.602414][T10886] ? __asan_memcpy+0x40/0x70 [ 396.602470][T10886] ? tomoyo_encode+0x28b/0x540 [ 396.602493][T10886] ? tomoyo_encode+0x28b/0x540 [ 396.602512][T10886] __kmem_cache_alloc_node+0x53/0x250 [ 396.602539][T10886] ? prepend_path+0x4b/0x960 [ 396.602565][T10886] ? tomoyo_encode+0x28b/0x540 [ 396.602584][T10886] __kmalloc+0xa4/0x230 [ 396.602616][T10886] tomoyo_encode+0x28b/0x540 [ 396.602645][T10886] tomoyo_realpath_from_path+0x592/0x5d0 [ 396.602687][T10886] tomoyo_path_number_perm+0x248/0x620 [ 396.602716][T10886] ? tomoyo_path_number_perm+0x217/0x620 [ 396.602754][T10886] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 396.602844][T10886] ? current_check_access_path+0x39b/0x480 [ 396.602876][T10886] ? lookup_one_qstr_excl+0x23d/0x250 [ 396.602908][T10886] tomoyo_path_mkdir+0xb1/0xf0 [ 396.602932][T10886] ? tomoyo_path_unlink+0xf0/0xf0 [ 396.602959][T10886] ? kern_path_create+0x50/0x50 [ 396.602987][T10886] security_path_mkdir+0xe4/0x140 [ 396.603020][T10886] do_mkdirat+0x162/0x450 [ 396.603044][T10886] ? vfs_mkdir+0x440/0x440 [ 396.603068][T10886] ? getname_flags+0x20a/0x500 [ 396.603102][T10886] __x64_sys_mkdir+0x6e/0x80 [ 396.603124][T10886] do_syscall_64+0x55/0xa0 [ 396.603143][T10886] ? clear_bhb_loop+0x40/0x90 [ 396.603167][T10886] ? clear_bhb_loop+0x40/0x90 [ 396.603194][T10886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.603217][T10886] RIP: 0033:0x7f9ffd19ce59 [ 396.603237][T10886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.603255][T10886] RSP: 002b:00007f9ffe13c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 396.603279][T10886] RAX: ffffffffffffffda RBX: 00007f9ffd415fa0 RCX: 00007f9ffd19ce59 [ 396.603294][T10886] RDX: 0000000000000000 RSI: 0000000000000116 RDI: 0000200000000000 [ 396.603308][T10886] RBP: 00007f9ffe13c090 R08: 0000000000000000 R09: 0000000000000000 [ 396.603322][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.603333][T10886] R13: 00007f9ffd416038 R14: 00007f9ffd415fa0 R15: 00007fff7bfdd158 [ 396.603371][T10886] [ 396.665864][T10886] ERROR: Out of memory at tomoyo_realpath_from_path. [ 396.967709][T10891] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1644'. [ 399.156242][T10881] team0 (unregistering): Port device C removed [ 399.276014][T10881] team0 (unregistering): Port device team_slave_1 removed [ 399.308319][T10881] team0 (unregistering): Port device wlan1 removed [ 399.429028][T10891] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.1644'. [ 401.176347][T10929] netlink: 'syz.1.1657': attribute type 15 has an invalid length. [ 401.199001][T10929] netlink: 'syz.1.1657': attribute type 7 has an invalid length. [ 401.225679][T10933] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1658'. [ 401.539625][T10939] sit0: entered allmulticast mode [ 402.024698][T10949] netlink: 'syz.2.1663': attribute type 25 has an invalid length. [ 402.796066][T10951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1664'. [ 403.663715][T10978] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1672'. [ 403.681088][T10981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.444739][T10998] netlink: 'syz.0.1678': attribute type 3 has an invalid length. [ 404.499851][T10998] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1678'. [ 404.741842][T11008] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1682'. [ 404.805831][T11008] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 405.132805][T11014] netlink: 'syz.2.1680': attribute type 10 has an invalid length. [ 405.170807][T11014] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1680'. [ 405.400331][T11018] netlink: 'syz.1.1685': attribute type 10 has an invalid length. [ 413.922887][T11124] netlink: 'syz.0.1719': attribute type 10 has an invalid length. [ 413.982375][T11125] netlink: 'syz.0.1719': attribute type 10 has an invalid length. [ 414.452503][T11140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1725'. [ 415.787521][T11168] FAULT_INJECTION: forcing a failure. [ 415.787521][T11168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.825563][T11168] CPU: 1 PID: 11168 Comm: syz.0.1736 Not tainted syzkaller #0 [ 415.833106][T11168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 415.843213][T11168] Call Trace: [ 415.846525][T11168] [ 415.849488][T11168] dump_stack_lvl+0x18c/0x250 [ 415.854198][T11168] ? show_regs_print_info+0x20/0x20 [ 415.859425][T11168] ? load_image+0x420/0x420 [ 415.863955][T11168] ? __might_fault+0xaa/0x120 [ 415.868655][T11168] ? __lock_acquire+0x7d40/0x7d40 [ 415.873701][T11168] should_fail_ex+0x39d/0x4d0 [ 415.878404][T11168] _copy_from_iter+0x1d9/0x12e0 [ 415.883272][T11168] ? rep_movs_alternative+0x4a/0x90 [ 415.888484][T11168] ? _copy_from_iter+0x24e/0x12e0 [ 415.893524][T11168] ? __virt_addr_valid+0x18c/0x540 [ 415.898649][T11168] ? __lock_acquire+0x7d40/0x7d40 [ 415.903692][T11168] ? copyout_mc+0x70/0x70 [ 415.908040][T11168] ? copyout_mc+0x70/0x70 [ 415.912384][T11168] ? __virt_addr_valid+0x18c/0x540 [ 415.917514][T11168] ? page_copy_sane+0x16a/0x270 [ 415.922382][T11168] copy_page_from_iter+0x7b/0x100 [ 415.927427][T11168] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 415.933357][T11168] tun_get_user+0x15db/0x3ca0 [ 415.938055][T11168] ? aa_file_perm+0x11b/0xee0 [ 415.942752][T11168] ? rcu_read_unlock+0xa0/0xa0 [ 415.947537][T11168] ? tun_get+0x1c/0x2e0 [ 415.951706][T11168] ? __lock_acquire+0x7d40/0x7d40 [ 415.956837][T11168] ? tun_get+0x1c/0x2e0 [ 415.961280][T11168] tun_chr_write_iter+0x119/0x200 [ 415.966318][T11168] vfs_write+0x46c/0x990 [ 415.970590][T11168] ? file_end_write+0x250/0x250 [ 415.975458][T11168] ? __fget_files+0x43d/0x4b0 [ 415.980154][T11168] ? __fdget_pos+0x1d8/0x330 [ 415.984755][T11168] ? ksys_write+0x75/0x260 [ 415.989188][T11168] ksys_write+0x150/0x260 [ 415.993622][T11168] ? __ia32_sys_read+0x90/0x90 [ 415.998405][T11168] ? lockdep_hardirqs_on+0x98/0x150 [ 416.003623][T11168] do_syscall_64+0x55/0xa0 [ 416.008058][T11168] ? clear_bhb_loop+0x40/0x90 [ 416.012834][T11168] ? clear_bhb_loop+0x40/0x90 [ 416.017550][T11168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.023458][T11168] RIP: 0033:0x7fba3f59ce59 [ 416.027889][T11168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.047516][T11168] RSP: 002b:00007fba40463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 416.055945][T11168] RAX: ffffffffffffffda RBX: 00007fba3f815fa0 RCX: 00007fba3f59ce59 [ 416.063931][T11168] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 416.071917][T11168] RBP: 00007fba40463090 R08: 0000000000000000 R09: 0000000000000000 [ 416.079894][T11168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 416.087872][T11168] R13: 00007fba3f816038 R14: 00007fba3f815fa0 R15: 00007fffaee912b8 [ 416.095868][T11168] [ 418.667967][T11204] netlink: 'syz.3.1748': attribute type 2 has an invalid length. [ 418.706620][T11204] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1748'. [ 420.133113][T11229] sit0: entered allmulticast mode [ 420.156559][T11229] sit0: entered promiscuous mode [ 420.862718][T11245] netlink: 'syz.2.1759': attribute type 25 has an invalid length. [ 420.960883][T11251] netlink: 'syz.1.1764': attribute type 10 has an invalid length. [ 421.194946][T11245] netlink: 'syz.2.1759': attribute type 2 has an invalid length. [ 421.259888][T11245] netlink: 'syz.2.1759': attribute type 6 has an invalid length. [ 421.430976][T11256] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1766'. [ 421.875007][T11256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.044770][T11270] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1772'. [ 422.067362][T11270] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 422.080488][T11270] CPU: 1 PID: 11270 Comm: syz.1.1772 Not tainted syzkaller #0 [ 422.088036][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 422.098154][T11270] Call Trace: [ 422.101494][T11270] [ 422.104473][T11270] dump_stack_lvl+0x18c/0x250 [ 422.109238][T11270] ? show_regs_print_info+0x20/0x20 [ 422.114511][T11270] ? load_image+0x420/0x420 [ 422.119119][T11270] sysfs_warn_dup+0x8e/0xa0 [ 422.123713][T11270] sysfs_do_create_link_sd+0xc0/0x110 [ 422.129156][T11270] device_add_class_symlinks+0x1cf/0x240 [ 422.134890][T11270] device_add+0x507/0xc20 [ 422.139292][T11270] wiphy_register+0x1dad/0x2ae0 [ 422.144253][T11270] ? cfg80211_event_work+0x40/0x40 [ 422.149416][T11270] ? minstrel_ht_alloc+0x88a/0x990 [ 422.154614][T11270] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 422.160796][T11270] ieee80211_register_hw+0x3464/0x4250 [ 422.166387][T11270] ? ieee80211_tasklet_handler+0x20/0x20 [ 422.172090][T11270] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 422.178062][T11270] ? __debug_object_init+0xec/0x450 [ 422.183338][T11270] ? __asan_memset+0x22/0x40 [ 422.187990][T11270] ? __hrtimer_init+0x186/0x270 [ 422.192921][T11270] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 422.198776][T11270] ? mac80211_hwsim_free+0x220/0x220 [ 422.204211][T11270] ? rcu_is_watching+0x15/0xb0 [ 422.209032][T11270] ? kstrndup+0xbd/0x140 [ 422.213362][T11270] hwsim_new_radio_nl+0xdc9/0x1a90 [ 422.218554][T11270] ? __nla_validate+0x50/0x50 [ 422.223327][T11270] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 422.229747][T11270] ? __nla_parse+0x40/0x50 [ 422.234233][T11270] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 422.240640][T11270] genl_family_rcv_msg_doit+0x211/0x310 [ 422.246256][T11270] ? end_current_label_crit_section+0x170/0x170 [ 422.252574][T11270] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 422.258547][T11270] ? bpf_lsm_capable+0x9/0x10 [ 422.263283][T11270] ? security_capable+0x89/0xb0 [ 422.268223][T11270] genl_rcv_msg+0x619/0x7a0 [ 422.272800][T11270] ? genl_bind+0x360/0x360 [ 422.277267][T11270] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 422.283679][T11270] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 422.290333][T11270] ? ref_tracker_free+0x690/0x840 [ 422.295476][T11270] netlink_rcv_skb+0x241/0x4d0 [ 422.300312][T11270] ? genl_bind+0x360/0x360 [ 422.304794][T11270] ? netlink_ack+0x1180/0x1180 [ 422.309649][T11270] ? __lock_acquire+0x7d40/0x7d40 [ 422.314770][T11270] ? down_read+0x1ac/0x2e0 [ 422.319255][T11270] genl_rcv+0x28/0x40 [ 422.323293][T11270] netlink_unicast+0x751/0x8d0 [ 422.328156][T11270] netlink_sendmsg+0x8d0/0xbf0 [ 422.333014][T11270] ? netlink_getsockopt+0x590/0x590 [ 422.338283][T11270] ? aa_sock_msg_perm+0x94/0x150 [ 422.343293][T11270] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 422.348645][T11270] ? security_socket_sendmsg+0x80/0xa0 [ 422.354165][T11270] ? netlink_getsockopt+0x590/0x590 [ 422.359437][T11270] ____sys_sendmsg+0x5ba/0x960 [ 422.364285][T11270] ? __asan_memset+0x22/0x40 [ 422.368933][T11270] ? __sys_sendmsg_sock+0x30/0x30 [ 422.374005][T11270] ? __import_iovec+0x5f2/0x850 [ 422.378935][T11270] ? import_iovec+0x73/0xa0 [ 422.383502][T11270] ___sys_sendmsg+0x2a6/0x360 [ 422.388251][T11270] ? __sys_sendmsg+0x2a0/0x2a0 [ 422.393214][T11270] __se_sys_sendmsg+0x1c2/0x2b0 [ 422.398132][T11270] ? __x64_sys_sendmsg+0x80/0x80 [ 422.403170][T11270] ? lockdep_hardirqs_on+0x98/0x150 [ 422.408443][T11270] do_syscall_64+0x55/0xa0 [ 422.412911][T11270] ? clear_bhb_loop+0x40/0x90 [ 422.417640][T11270] ? clear_bhb_loop+0x40/0x90 [ 422.422386][T11270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.428341][T11270] RIP: 0033:0x7fd09ff9ce59 [ 422.432811][T11270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.452481][T11270] RSP: 002b:00007fd0a0e75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.460959][T11270] RAX: ffffffffffffffda RBX: 00007fd0a0215fa0 RCX: 00007fd09ff9ce59 [ 422.468961][T11270] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 422.476966][T11270] RBP: 00007fd0a0032d6f R08: 0000000000000000 R09: 0000000000000000 [ 422.484964][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.492958][T11270] R13: 00007fd0a0216038 R14: 00007fd0a0215fa0 R15: 00007ffd50666128 [ 422.500983][T11270] [ 426.881108][T11346] netlink: 'syz.3.1800': attribute type 10 has an invalid length. [ 426.898618][T11346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1800'. [ 426.909547][T11346] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 426.941986][T11347] netlink: 'syz.0.1799': attribute type 21 has an invalid length. [ 426.962622][T11347] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1799'. [ 426.987667][T11347] netlink: 'syz.0.1799': attribute type 5 has an invalid length. [ 427.005073][T11347] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1799'. [ 427.311198][T11354] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1801'. [ 427.331956][T11356] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1803'. [ 427.359337][T11358] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1804'. [ 429.159287][T11391] netlink: 'syz.1.1815': attribute type 39 has an invalid length. [ 429.507020][T11399] syzkaller0: left promiscuous mode [ 429.547394][T11399] syzkaller0: left allmulticast mode [ 429.878098][T11405] netlink: 'syz.0.1822': attribute type 10 has an invalid length. [ 431.748140][T11445] netlink: 'syz.3.1835': attribute type 10 has an invalid length. [ 431.756433][T11445] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1835'. [ 431.765752][T11445] dummy0: entered promiscuous mode [ 431.772033][T11445] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 431.797101][T11445] netlink: 'syz.3.1835': attribute type 9 has an invalid length. [ 431.805344][T11445] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1835'. [ 432.372979][T11453] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 432.412323][T11459] netlink: zone id is out of range [ 432.430648][T11459] netlink: set zone limit has 8 unknown bytes [ 433.410848][ T5788] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 433.417346][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 434.114771][T11493] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1853'. [ 434.176534][T11493] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1853'. [ 434.304709][T11503] netlink: 'syz.3.1855': attribute type 21 has an invalid length. [ 435.320813][T11525] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1861'. [ 435.329883][T11525] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1861'. [ 435.414203][T11534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.813855][T11543] netlink: 'syz.3.1866': attribute type 4 has an invalid length. [ 435.833169][T11543] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1866'. [ 436.553586][T11561] syzkaller0: entered promiscuous mode [ 436.559151][T11561] syzkaller0: entered allmulticast mode [ 437.405542][T11566] netlink: 'syz.0.1873': attribute type 46 has an invalid length. [ 437.557325][T11566] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1873'. [ 437.739275][T11571] netlink: 'syz.1.1876': attribute type 10 has an invalid length. [ 439.988975][T11592] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1882'. [ 440.028728][T11592] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 440.157662][T11597] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1883'. [ 440.206910][T11597] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 440.232893][T11597] CPU: 0 PID: 11597 Comm: syz.0.1883 Not tainted syzkaller #0 [ 440.240430][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 440.250511][T11597] Call Trace: [ 440.253823][T11597] [ 440.256775][T11597] dump_stack_lvl+0x18c/0x250 [ 440.261495][T11597] ? show_regs_print_info+0x20/0x20 [ 440.266725][T11597] ? load_image+0x420/0x420 [ 440.271291][T11597] sysfs_warn_dup+0x8e/0xa0 [ 440.275823][T11597] sysfs_do_create_link_sd+0xc0/0x110 [ 440.281226][T11597] device_add_class_symlinks+0x1cf/0x240 [ 440.286894][T11597] device_add+0x507/0xc20 [ 440.291267][T11597] wiphy_register+0x1dad/0x2ae0 [ 440.296181][T11597] ? cfg80211_event_work+0x40/0x40 [ 440.301315][T11597] ? minstrel_ht_alloc+0x88a/0x990 [ 440.306469][T11597] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 440.312574][T11597] ieee80211_register_hw+0x3464/0x4250 [ 440.318098][T11597] ? ieee80211_tasklet_handler+0x20/0x20 [ 440.323747][T11597] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 440.329671][T11597] ? __debug_object_init+0xec/0x450 [ 440.334913][T11597] ? __asan_memset+0x22/0x40 [ 440.339539][T11597] ? __hrtimer_init+0x186/0x270 [ 440.344424][T11597] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 440.350210][T11597] ? mac80211_hwsim_free+0x220/0x220 [ 440.355515][T11597] ? rcu_is_watching+0x15/0xb0 [ 440.360305][T11597] ? kstrndup+0xbd/0x140 [ 440.364595][T11597] hwsim_new_radio_nl+0xdc9/0x1a90 [ 440.369739][T11597] ? __nla_validate+0x50/0x50 [ 440.374473][T11597] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 440.380871][T11597] ? __nla_parse+0x40/0x50 [ 440.385355][T11597] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 440.391728][T11597] genl_family_rcv_msg_doit+0x211/0x310 [ 440.397297][T11597] ? end_current_label_crit_section+0x170/0x170 [ 440.403575][T11597] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 440.409523][T11597] ? bpf_lsm_capable+0x9/0x10 [ 440.414224][T11597] ? security_capable+0x89/0xb0 [ 440.419118][T11597] genl_rcv_msg+0x619/0x7a0 [ 440.423661][T11597] ? genl_bind+0x360/0x360 [ 440.428098][T11597] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 440.434454][T11597] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 440.441093][T11597] netlink_rcv_skb+0x241/0x4d0 [ 440.445891][T11597] ? genl_bind+0x360/0x360 [ 440.450339][T11597] ? netlink_ack+0x1180/0x1180 [ 440.455158][T11597] ? __lock_acquire+0x7d40/0x7d40 [ 440.460220][T11597] ? down_read+0x1ac/0x2e0 [ 440.464669][T11597] genl_rcv+0x28/0x40 [ 440.468671][T11597] netlink_unicast+0x751/0x8d0 [ 440.473486][T11597] netlink_sendmsg+0x8d0/0xbf0 [ 440.478280][T11597] ? perf_trace_lock+0x304/0x3b0 [ 440.483259][T11597] ? netlink_getsockopt+0x590/0x590 [ 440.488492][T11597] ? aa_sock_msg_perm+0x94/0x150 [ 440.493466][T11597] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 440.498778][T11597] ? security_socket_sendmsg+0x80/0xa0 [ 440.504257][T11597] ? netlink_getsockopt+0x590/0x590 [ 440.509490][T11597] ____sys_sendmsg+0x5ba/0x960 [ 440.514295][T11597] ? __asan_memset+0x22/0x40 [ 440.518911][T11597] ? __sys_sendmsg_sock+0x30/0x30 [ 440.523964][T11597] ? __import_iovec+0x5f2/0x850 [ 440.528857][T11597] ? import_iovec+0x73/0xa0 [ 440.533389][T11597] ___sys_sendmsg+0x2a6/0x360 [ 440.538103][T11597] ? __sys_sendmsg+0x2a0/0x2a0 [ 440.542990][T11597] __se_sys_sendmsg+0x1c2/0x2b0 [ 440.547871][T11597] ? __x64_sys_sendmsg+0x80/0x80 [ 440.552863][T11597] ? lockdep_hardirqs_on+0x98/0x150 [ 440.558092][T11597] do_syscall_64+0x55/0xa0 [ 440.562530][T11597] ? clear_bhb_loop+0x40/0x90 [ 440.567232][T11597] ? clear_bhb_loop+0x40/0x90 [ 440.571945][T11597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.577863][T11597] RIP: 0033:0x7fba3f59ce59 [ 440.582304][T11597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.601959][T11597] RSP: 002b:00007fba40463028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.610424][T11597] RAX: ffffffffffffffda RBX: 00007fba3f815fa0 RCX: 00007fba3f59ce59 [ 440.618435][T11597] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 440.626437][T11597] RBP: 00007fba3f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 440.634434][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.642426][T11597] R13: 00007fba3f816038 R14: 00007fba3f815fa0 R15: 00007fffaee912b8 [ 440.650450][T11597] [ 440.662172][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.668558][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.332329][T11605] netlink: 'syz.2.1887': attribute type 39 has an invalid length. [ 441.862596][T11614] netlink: 'syz.0.1889': attribute type 4 has an invalid length. [ 441.870458][T11614] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1889'. [ 443.053985][T11630] netlink: 'syz.1.1893': attribute type 10 has an invalid length. [ 443.228408][T11633] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1896'. [ 443.336082][T11630] team0: Device veth1_macvtap failed to register rx_handler [ 444.729885][T11653] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1900'. [ 444.854546][T11660] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1902'. [ 444.951849][T11662] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1903'. [ 444.981080][T11662] bridge_slave_1: entered promiscuous mode [ 445.603291][T11673] netlink: 'syz.3.1908': attribute type 10 has an invalid length. [ 447.059694][T11673] hsr_slave_0: left promiscuous mode [ 447.089471][T11673] hsr_slave_1: left promiscuous mode [ 447.886218][T11688] netlink: 'syz.3.1913': attribute type 13 has an invalid length. [ 447.953654][T11688] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1913'. [ 448.433619][T11688] syz_tun: refused to change device tx_queue_len [ 448.463206][T11688] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 448.540164][T11686] netlink: 'syz.3.1913': attribute type 10 has an invalid length. [ 448.555705][T11686] batman_adv: batadv0: Removing interface: netdevsim0 [ 448.576641][T11686] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 448.606060][T11687] netlink: 'syz.0.1911': attribute type 39 has an invalid length. [ 449.158609][T11687] hsr_slave_1 (unregistering): left promiscuous mode [ 450.077766][T11747] delete_channel: no stack [ 450.091154][T11747] delete_channel: no stack [ 450.429688][T11759] netlink: 'syz.1.1934': attribute type 21 has an invalid length. [ 451.008172][T11769] netlink: 'syz.1.1937': attribute type 21 has an invalid length. [ 451.035981][T11769] netlink: 'syz.1.1937': attribute type 6 has an invalid length. [ 451.882664][T11777] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1941'. [ 452.515317][T11793] netlink: 'syz.2.1946': attribute type 10 has an invalid length. [ 452.578272][T11794] netlink: 'syz.2.1946': attribute type 1 has an invalid length. [ 452.602160][T11794] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1946'. [ 452.713149][T11793] geneve0: entered promiscuous mode [ 452.975227][T11793] .`: (slave geneve0): Enslaving as an active interface with an up link [ 454.129699][T11823] FAULT_INJECTION: forcing a failure. [ 454.129699][T11823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.184853][T11823] CPU: 1 PID: 11823 Comm: syz.2.1957 Not tainted syzkaller #0 [ 454.192482][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 454.202588][T11823] Call Trace: [ 454.205916][T11823] [ 454.208887][T11823] dump_stack_lvl+0x18c/0x250 [ 454.213623][T11823] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 454.219829][T11823] ? show_regs_print_info+0x20/0x20 [ 454.225103][T11823] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 454.231315][T11823] ? dump_stack+0x9/0x20 [ 454.235608][T11823] should_fail_ex+0x39d/0x4d0 [ 454.240341][T11823] _copy_to_user+0x2f/0xa0 [ 454.244802][T11823] simple_read_from_buffer+0xe7/0x150 [ 454.250231][T11823] proc_fail_nth_read+0x1e8/0x260 [ 454.255305][T11823] ? proc_fault_inject_write+0x360/0x360 [ 454.260990][T11823] ? proc_fault_inject_write+0x360/0x360 [ 454.266667][T11823] vfs_read+0x28b/0x970 [ 454.270878][T11823] ? kernel_read+0x1e0/0x1e0 [ 454.275525][T11823] ? __fget_files+0x28/0x4b0 [ 454.280158][T11823] ? __fget_files+0x28/0x4b0 [ 454.284784][T11823] ? __fget_files+0x43d/0x4b0 [ 454.289490][T11823] ? __fdget_pos+0x2a3/0x330 [ 454.294093][T11823] ? ksys_read+0x75/0x260 [ 454.298439][T11823] ksys_read+0x150/0x260 [ 454.302701][T11823] ? vfs_write+0x990/0x990 [ 454.307134][T11823] ? syscall_enter_from_user_mode+0x2e/0x80 [ 454.313046][T11823] do_syscall_64+0x55/0xa0 [ 454.317468][T11823] ? clear_bhb_loop+0x40/0x90 [ 454.322157][T11823] ? clear_bhb_loop+0x40/0x90 [ 454.326847][T11823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.332758][T11823] RIP: 0033:0x7f9ffd15d68e [ 454.337185][T11823] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 454.356823][T11823] RSP: 002b:00007f9ffe13bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 454.365255][T11823] RAX: ffffffffffffffda RBX: 00007f9ffe13c6c0 RCX: 00007f9ffd15d68e [ 454.373240][T11823] RDX: 000000000000000f RSI: 00007f9ffe13c0a0 RDI: 0000000000000006 [ 454.381223][T11823] RBP: 00007f9ffe13c090 R08: 0000000000000000 R09: 0000000000000000 [ 454.389206][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.397183][T11823] R13: 00007f9ffd416038 R14: 00007f9ffd415fa0 R15: 00007fff7bfdd158 [ 454.405184][T11823] [ 454.966874][T11837] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1962'. [ 455.206351][T11843] netlink: 'syz.1.1965': attribute type 13 has an invalid length. [ 455.230702][T11843] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1965'. [ 455.258044][T11843] syz_tun: refused to change device tx_queue_len [ 455.290799][T11843] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 455.326774][T11850] netlink: 'syz.1.1965': attribute type 10 has an invalid length. [ 455.358055][T11850] batman_adv: batadv0: Removing interface: netdevsim0 [ 455.408518][T11850] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 455.445764][T11855] mac80211_hwsim hwsim9 .3ãc¤±: renamed from wlan1 (while UP) [ 455.576659][T11846] netlink: 'syz.3.1966': attribute type 21 has an invalid length. [ 455.616261][T11846] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1966'. [ 455.794655][T11859] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 456.479447][T11879] netlink: 'syz.0.1978': attribute type 21 has an invalid length. [ 456.520860][T11879] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1978'. [ 456.573189][T11879] netlink: 'syz.0.1978': attribute type 4 has an invalid length. [ 456.605878][T11879] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1978'. [ 457.561767][T11892] netlink: 'syz.2.1982': attribute type 25 has an invalid length. [ 457.720148][T11891] netlink: 'syz.2.1982': attribute type 2 has an invalid length. [ 457.742453][T11891] netlink: 'syz.2.1982': attribute type 6 has an invalid length. [ 458.019275][T11902] netlink: 'syz.1.1986': attribute type 10 has an invalid length. [ 458.048213][T11902] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1986'. [ 458.085766][T11904] netlink: 'syz.2.1987': attribute type 10 has an invalid length. [ 458.174226][T11900] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1985'. [ 458.189935][T11904] .`: (slave netdevsim0): Releasing backup interface [ 458.370829][T11904] batman_adv: batadv0: Adding interface: netdevsim0 [ 458.380684][T11904] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.430741][T11904] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 458.723128][T11909] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1990'. [ 458.855584][T11899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.764216][T11926] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1996'. [ 459.871307][T11926] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 459.901028][T11926] CPU: 0 PID: 11926 Comm: syz.1.1996 Not tainted syzkaller #0 [ 459.908585][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 459.918697][T11926] Call Trace: [ 459.922010][T11926] [ 459.924977][T11926] dump_stack_lvl+0x18c/0x250 [ 459.929711][T11926] ? show_regs_print_info+0x20/0x20 [ 459.934952][T11926] ? load_image+0x420/0x420 [ 459.939529][T11926] sysfs_warn_dup+0x8e/0xa0 [ 459.944075][T11926] sysfs_do_create_link_sd+0xc0/0x110 [ 459.949486][T11926] device_add_class_symlinks+0x1cf/0x240 [ 459.955166][T11926] device_add+0x507/0xc20 [ 459.959552][T11926] wiphy_register+0x1dad/0x2ae0 [ 459.964491][T11926] ? cfg80211_event_work+0x40/0x40 [ 459.969645][T11926] ? minstrel_ht_alloc+0x88a/0x990 [ 459.974813][T11926] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 459.980931][T11926] ieee80211_register_hw+0x3464/0x4250 [ 459.986481][T11926] ? ieee80211_tasklet_handler+0x20/0x20 [ 459.992153][T11926] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 459.998102][T11926] ? __debug_object_init+0xec/0x450 [ 460.003354][T11926] ? __asan_memset+0x22/0x40 [ 460.007995][T11926] ? __hrtimer_init+0x186/0x270 [ 460.012900][T11926] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 460.018707][T11926] ? mac80211_hwsim_free+0x220/0x220 [ 460.024029][T11926] ? rcu_is_watching+0x15/0xb0 [ 460.028839][T11926] ? kstrndup+0xbd/0x140 [ 460.033145][T11926] hwsim_new_radio_nl+0xdc9/0x1a90 [ 460.038306][T11926] ? __nla_validate+0x50/0x50 [ 460.043046][T11926] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 460.049454][T11926] ? __nla_parse+0x40/0x50 [ 460.053915][T11926] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 460.060305][T11926] genl_family_rcv_msg_doit+0x211/0x310 [ 460.065894][T11926] ? end_current_label_crit_section+0x170/0x170 [ 460.072194][T11926] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 460.078144][T11926] ? bpf_lsm_capable+0x9/0x10 [ 460.082858][T11926] ? security_capable+0x89/0xb0 [ 460.087761][T11926] genl_rcv_msg+0x619/0x7a0 [ 460.092317][T11926] ? genl_bind+0x360/0x360 [ 460.096772][T11926] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 460.103141][T11926] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 460.109768][T11926] ? ref_tracker_free+0x690/0x840 [ 460.114865][T11926] netlink_rcv_skb+0x241/0x4d0 [ 460.119687][T11926] ? genl_bind+0x360/0x360 [ 460.124137][T11926] ? netlink_ack+0x1180/0x1180 [ 460.128974][T11926] ? __lock_acquire+0x7d40/0x7d40 [ 460.134059][T11926] ? down_read+0x1ac/0x2e0 [ 460.138521][T11926] genl_rcv+0x28/0x40 [ 460.142534][T11926] netlink_unicast+0x751/0x8d0 [ 460.147366][T11926] netlink_sendmsg+0x8d0/0xbf0 [ 460.152202][T11926] ? netlink_getsockopt+0x590/0x590 [ 460.157456][T11926] ? aa_sock_msg_perm+0x94/0x150 [ 460.162442][T11926] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 460.167773][T11926] ? security_socket_sendmsg+0x80/0xa0 [ 460.173274][T11926] ? netlink_getsockopt+0x590/0x590 [ 460.178527][T11926] ____sys_sendmsg+0x5ba/0x960 [ 460.183338][T11926] ? __asan_memset+0x22/0x40 [ 460.187961][T11926] ? __sys_sendmsg_sock+0x30/0x30 [ 460.193024][T11926] ? __import_iovec+0x5f2/0x850 [ 460.197933][T11926] ? import_iovec+0x73/0xa0 [ 460.202485][T11926] ___sys_sendmsg+0x2a6/0x360 [ 460.207229][T11926] ? __sys_sendmsg+0x2a0/0x2a0 [ 460.212182][T11926] __se_sys_sendmsg+0x1c2/0x2b0 [ 460.217095][T11926] ? __x64_sys_sendmsg+0x80/0x80 [ 460.222117][T11926] ? lockdep_hardirqs_on+0x98/0x150 [ 460.227374][T11926] do_syscall_64+0x55/0xa0 [ 460.231840][T11926] ? clear_bhb_loop+0x40/0x90 [ 460.236596][T11926] ? clear_bhb_loop+0x40/0x90 [ 460.241354][T11926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.247306][T11926] RIP: 0033:0x7fd09ff9ce59 [ 460.251766][T11926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.271433][T11926] RSP: 002b:00007fd0a0e75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.279904][T11926] RAX: ffffffffffffffda RBX: 00007fd0a0215fa0 RCX: 00007fd09ff9ce59 [ 460.287915][T11926] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 460.295933][T11926] RBP: 00007fd0a0032d6f R08: 0000000000000000 R09: 0000000000000000 [ 460.303943][T11926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.311950][T11926] R13: 00007fd0a0216038 R14: 00007fd0a0215fa0 R15: 00007ffd50666128 [ 460.319993][T11926] [ 461.082591][T11927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1995'. [ 461.223592][T11929] validate_nla: 1 callbacks suppressed [ 461.223612][T11929] netlink: 'syz.2.1995': attribute type 10 has an invalid length. [ 461.334605][T11929] team0: Port device hsr_slave_0 added [ 461.417100][T11927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1995'. [ 461.823346][T11940] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 461.848507][T11940] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1998'. [ 461.911331][T11940] batman_adv: batadv0: Interface deactivated: vlan1 [ 462.340067][T11940] batman_adv: batadv0: Removing interface: vlan1 [ 462.815114][T11954] netlink: 'syz.1.2003': attribute type 4 has an invalid length. [ 462.838028][T11954] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2003'. [ 463.059428][T11959] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2006'. [ 463.228867][T11961] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2005'. [ 465.409865][T12006] netlink: 'syz.0.2020': attribute type 13 has an invalid length. [ 465.418758][T12006] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2020'. [ 465.438426][T12006] syz_tun: refused to change device tx_queue_len [ 465.445894][T12006] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 465.468370][T12008] netlink: 'syz.3.2021': attribute type 10 has an invalid length. [ 465.632170][T12011] netlink: 'syz.0.2020': attribute type 10 has an invalid length. [ 466.946296][T12039] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2032'. [ 466.956655][T12039] openvswitch: netlink: Flow key attribute not present in set flow. [ 468.890922][T12047] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.2034'. [ 469.372303][T12065] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2040'. [ 469.386057][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2040'. [ 469.573264][T12069] netlink: 'syz.1.2040': attribute type 21 has an invalid length. [ 469.755346][T12076] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2044'. [ 469.790177][T12076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.864838][T12076] syz.3.2044 (12076) used greatest stack depth: 19176 bytes left [ 470.109556][T12085] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 470.451291][T12100] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2051'. [ 471.067071][T12124] FAULT_INJECTION: forcing a failure. [ 471.067071][T12124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.097147][T12124] CPU: 1 PID: 12124 Comm: syz.0.2060 Not tainted syzkaller #0 [ 471.104675][T12124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.114769][T12124] Call Trace: [ 471.118093][T12124] [ 471.121064][T12124] dump_stack_lvl+0x18c/0x250 [ 471.125802][T12124] ? show_regs_print_info+0x20/0x20 [ 471.131045][T12124] ? load_image+0x420/0x420 [ 471.135644][T12124] ? __might_fault+0xaa/0x120 [ 471.140365][T12124] ? __lock_acquire+0x7d40/0x7d40 [ 471.145440][T12124] should_fail_ex+0x39d/0x4d0 [ 471.150173][T12124] _copy_from_iter+0x1d9/0x12e0 [ 471.155149][T12124] ? rep_movs_alternative+0x4a/0x90 [ 471.160363][T12124] ? _copy_from_iter+0x24e/0x12e0 [ 471.165409][T12124] ? __virt_addr_valid+0x18c/0x540 [ 471.170550][T12124] ? __lock_acquire+0x7d40/0x7d40 [ 471.175609][T12124] ? copyout_mc+0x70/0x70 [ 471.179961][T12124] ? copyout_mc+0x70/0x70 [ 471.184310][T12124] ? __virt_addr_valid+0x18c/0x540 [ 471.189444][T12124] ? page_copy_sane+0x16a/0x270 [ 471.194315][T12124] copy_page_from_iter+0x7b/0x100 [ 471.199361][T12124] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 471.205199][T12124] tun_get_user+0x15db/0x3ca0 [ 471.209905][T12124] ? aa_file_perm+0x11b/0xee0 [ 471.214607][T12124] ? rcu_read_unlock+0xa0/0xa0 [ 471.219396][T12124] ? tun_get+0x1c/0x2e0 [ 471.223582][T12124] ? __lock_acquire+0x7d40/0x7d40 [ 471.228626][T12124] ? tun_get+0x1c/0x2e0 [ 471.232801][T12124] tun_chr_write_iter+0x119/0x200 [ 471.237846][T12124] vfs_write+0x46c/0x990 [ 471.242113][T12124] ? file_end_write+0x250/0x250 [ 471.246987][T12124] ? __fget_files+0x43d/0x4b0 [ 471.251686][T12124] ? __fdget_pos+0x1d8/0x330 [ 471.256287][T12124] ? ksys_write+0x75/0x260 [ 471.260719][T12124] ksys_write+0x150/0x260 [ 471.265068][T12124] ? __ia32_sys_read+0x90/0x90 [ 471.269854][T12124] ? lockdep_hardirqs_on+0x98/0x150 [ 471.275066][T12124] do_syscall_64+0x55/0xa0 [ 471.279494][T12124] ? clear_bhb_loop+0x40/0x90 [ 471.284186][T12124] ? clear_bhb_loop+0x40/0x90 [ 471.288880][T12124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.294787][T12124] RIP: 0033:0x7fba3f59ce59 [ 471.299212][T12124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.318830][T12124] RSP: 002b:00007fba40463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.327261][T12124] RAX: ffffffffffffffda RBX: 00007fba3f815fa0 RCX: 00007fba3f59ce59 [ 471.335244][T12124] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 471.343224][T12124] RBP: 00007fba40463090 R08: 0000000000000000 R09: 0000000000000000 [ 471.351209][T12124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.359206][T12124] R13: 00007fba3f816038 R14: 00007fba3f815fa0 R15: 00007fffaee912b8 [ 471.367201][T12124] [ 472.547603][T12155] vcan0: entered allmulticast mode [ 472.565330][T12154] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.2072'. [ 472.574024][T12155] netlink: 'syz.3.2071': attribute type 10 has an invalid length. [ 473.843988][T12174] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2075'. [ 474.157554][T12174] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.2075'. [ 474.173984][T12176] netlink: 'syz.1.2079': attribute type 21 has an invalid length. [ 474.183163][T12176] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2079'. [ 474.192753][T12176] netlink: 'syz.1.2079': attribute type 5 has an invalid length. [ 474.201106][T12176] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2079'. [ 476.427257][T12207] netlink: 'syz.3.2088': attribute type 3 has an invalid length. [ 476.459890][T12207] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2088'. [ 476.950391][T12219] netlink: 'syz.2.2093': attribute type 10 has an invalid length. [ 478.283018][T12240] netlink: 'syz.0.2100': attribute type 25 has an invalid length. [ 478.440471][T12239] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 478.508377][T12239] netlink: 'syz.0.2100': attribute type 6 has an invalid length. [ 479.596849][T12257] netlink: 'syz.1.2106': attribute type 10 has an invalid length. [ 479.689721][T12257] .`: (slave netdevsim0): Releasing backup interface [ 479.734702][T12257] batman_adv: batadv0: Adding interface: netdevsim0 [ 479.758233][T12257] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.796226][T12257] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 479.975321][T12267] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2108'. [ 480.711207][T12297] netlink: 'syz.2.2115': attribute type 21 has an invalid length. [ 480.719116][T12297] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2115'. [ 480.854120][T12297] netlink: 'syz.2.2115': attribute type 5 has an invalid length. [ 480.969252][T12297] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2115'. [ 481.980476][T12324] netlink: 'syz.0.2125': attribute type 10 has an invalid length. [ 482.001072][T12324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2125'. [ 482.036543][T12324] batman_adv: batadv0: Interface activated: virt_wifi0 [ 482.049787][T12324] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 482.069530][T12324] batman_adv: batadv0: Removing interface: virt_wifi0 [ 482.129475][T12324] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 482.309675][T12332] netlink: 'syz.3.2130': attribute type 19 has an invalid length. [ 483.105446][T12355] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2137'. [ 483.440150][T12363] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2139'. [ 483.922279][T12374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2143'. [ 483.989943][T12382] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2145'. [ 484.041723][T12382] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2145'. [ 485.201444][T12395] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2150'. [ 485.342804][T12404] netlink: 'syz.0.2154': attribute type 39 has an invalid length. [ 485.424763][T12404] netlink: 'syz.0.2154': attribute type 9 has an invalid length. [ 485.434587][T12404] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2154'. [ 486.806271][T12421] netlink: 'syz.0.2161': attribute type 21 has an invalid length. [ 486.839182][T12421] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2161'. [ 486.908443][T12421] netlink: 'syz.0.2161': attribute type 4 has an invalid length. [ 487.089474][T12421] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2161'. [ 488.488212][T12465] netlink: 'syz.2.2174': attribute type 10 has an invalid length. [ 489.650029][T12500] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2187'. [ 489.697061][T12502] netlink: 'syz.0.2187': attribute type 39 has an invalid length. [ 490.548470][T12512] FAULT_INJECTION: forcing a failure. [ 490.548470][T12512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.649362][T12512] CPU: 1 PID: 12512 Comm: syz.2.2190 Not tainted syzkaller #0 [ 490.656898][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 490.666989][T12512] Call Trace: [ 490.670293][T12512] [ 490.673250][T12512] dump_stack_lvl+0x18c/0x250 [ 490.677975][T12512] ? show_regs_print_info+0x20/0x20 [ 490.683212][T12512] ? load_image+0x420/0x420 [ 490.687761][T12512] ? __might_fault+0xaa/0x120 [ 490.692477][T12512] ? __lock_acquire+0x7d40/0x7d40 [ 490.697562][T12512] should_fail_ex+0x39d/0x4d0 [ 490.702294][T12512] _copy_from_iter+0x1d9/0x12e0 [ 490.707188][T12512] ? rep_movs_alternative+0x4a/0x90 [ 490.712432][T12512] ? _copy_from_iter+0x24e/0x12e0 [ 490.717502][T12512] ? __virt_addr_valid+0x18c/0x540 [ 490.722665][T12512] ? __lock_acquire+0x7d40/0x7d40 [ 490.727733][T12512] ? copyout_mc+0x70/0x70 [ 490.732105][T12512] ? copyout_mc+0x70/0x70 [ 490.736476][T12512] ? __virt_addr_valid+0x18c/0x540 [ 490.742160][T12512] ? page_copy_sane+0x16a/0x270 [ 490.747046][T12512] copy_page_from_iter+0x7b/0x100 [ 490.752097][T12512] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 490.757932][T12512] tun_get_user+0x15db/0x3ca0 [ 490.762631][T12512] ? aa_file_perm+0x11b/0xee0 [ 490.767329][T12512] ? rcu_read_unlock+0xa0/0xa0 [ 490.772116][T12512] ? tun_get+0x1c/0x2e0 [ 490.776286][T12512] ? __lock_acquire+0x7d40/0x7d40 [ 490.781328][T12512] ? tun_get+0x1c/0x2e0 [ 490.785501][T12512] tun_chr_write_iter+0x119/0x200 [ 490.790565][T12512] vfs_write+0x46c/0x990 [ 490.794842][T12512] ? file_end_write+0x250/0x250 [ 490.799714][T12512] ? __fget_files+0x43d/0x4b0 [ 490.804440][T12512] ? __fdget_pos+0x1d8/0x330 [ 490.809046][T12512] ? ksys_write+0x75/0x260 [ 490.813481][T12512] ksys_write+0x150/0x260 [ 490.817828][T12512] ? __ia32_sys_read+0x90/0x90 [ 490.822610][T12512] ? lockdep_hardirqs_on+0x98/0x150 [ 490.827828][T12512] do_syscall_64+0x55/0xa0 [ 490.832255][T12512] ? clear_bhb_loop+0x40/0x90 [ 490.836944][T12512] ? clear_bhb_loop+0x40/0x90 [ 490.841641][T12512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.847553][T12512] RIP: 0033:0x7f9ffd19ce59 [ 490.851982][T12512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.871599][T12512] RSP: 002b:00007f9ffe13c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 490.880026][T12512] RAX: ffffffffffffffda RBX: 00007f9ffd415fa0 RCX: 00007f9ffd19ce59 [ 490.888011][T12512] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 490.895992][T12512] RBP: 00007f9ffe13c090 R08: 0000000000000000 R09: 0000000000000000 [ 490.903974][T12512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.911957][T12512] R13: 00007f9ffd416038 R14: 00007f9ffd415fa0 R15: 00007fff7bfdd158 [ 490.919955][T12512] [ 493.132089][T12568] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2208'. [ 493.297177][T12569] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2209'. [ 493.320632][T12569] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2209'. [ 493.823275][T12571] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2210'. [ 495.514544][T12615] netlink: 'syz.0.2225': attribute type 29 has an invalid length. [ 495.586294][T12615] netlink: 'syz.0.2225': attribute type 29 has an invalid length. [ 495.671090][T12618] netlink: 'syz.0.2225': attribute type 29 has an invalid length. [ 496.200721][T12639] netlink: 'syz.1.2233': attribute type 10 has an invalid length. [ 497.658590][T12672] netlink: 'syz.0.2243': attribute type 5 has an invalid length. [ 497.755233][T12676] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2246'. [ 497.997448][T12678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.710706][T12693] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2252'. [ 499.369030][T12708] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2257'. [ 499.405509][T12708] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 499.429347][T12708] CPU: 1 PID: 12708 Comm: syz.1.2257 Not tainted syzkaller #0 [ 499.436893][T12708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 499.446973][T12708] Call Trace: [ 499.450272][T12708] [ 499.453224][T12708] dump_stack_lvl+0x18c/0x250 [ 499.457946][T12708] ? show_regs_print_info+0x20/0x20 [ 499.463178][T12708] ? load_image+0x420/0x420 [ 499.467738][T12708] sysfs_warn_dup+0x8e/0xa0 [ 499.472270][T12708] sysfs_do_create_link_sd+0xc0/0x110 [ 499.477669][T12708] device_add_class_symlinks+0x1cf/0x240 [ 499.483336][T12708] device_add+0x507/0xc20 [ 499.487705][T12708] wiphy_register+0x1dad/0x2ae0 [ 499.492620][T12708] ? cfg80211_event_work+0x40/0x40 [ 499.497751][T12708] ? minstrel_ht_alloc+0x88a/0x990 [ 499.502907][T12708] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 499.509012][T12708] ieee80211_register_hw+0x3464/0x4250 [ 499.514538][T12708] ? ieee80211_tasklet_handler+0x20/0x20 [ 499.520194][T12708] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 499.526123][T12708] ? __debug_object_init+0xec/0x450 [ 499.531362][T12708] ? __asan_memset+0x22/0x40 [ 499.535991][T12708] ? __hrtimer_init+0x186/0x270 [ 499.540877][T12708] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 499.546666][T12708] ? mac80211_hwsim_free+0x220/0x220 [ 499.551973][T12708] ? rcu_is_watching+0x15/0xb0 [ 499.556764][T12708] ? kstrndup+0xbd/0x140 [ 499.561057][T12708] hwsim_new_radio_nl+0xdc9/0x1a90 [ 499.566204][T12708] ? __nla_validate+0x50/0x50 [ 499.570930][T12708] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 499.577305][T12708] ? __nla_parse+0x40/0x50 [ 499.581754][T12708] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 499.588121][T12708] genl_family_rcv_msg_doit+0x211/0x310 [ 499.593690][T12708] ? end_current_label_crit_section+0x170/0x170 [ 499.599967][T12708] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 499.605916][T12708] ? bpf_lsm_capable+0x9/0x10 [ 499.610621][T12708] ? security_capable+0x89/0xb0 [ 499.615515][T12708] genl_rcv_msg+0x619/0x7a0 [ 499.620064][T12708] ? genl_bind+0x360/0x360 [ 499.624501][T12708] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 499.630859][T12708] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 499.637472][T12708] ? ref_tracker_free+0x690/0x840 [ 499.642540][T12708] netlink_rcv_skb+0x241/0x4d0 [ 499.647345][T12708] ? genl_bind+0x360/0x360 [ 499.651792][T12708] ? netlink_ack+0x1180/0x1180 [ 499.656611][T12708] ? __lock_acquire+0x7d40/0x7d40 [ 499.661674][T12708] ? down_read+0x1ac/0x2e0 [ 499.666122][T12708] genl_rcv+0x28/0x40 [ 499.670127][T12708] netlink_unicast+0x751/0x8d0 [ 499.674943][T12708] netlink_sendmsg+0x8d0/0xbf0 [ 499.679757][T12708] ? netlink_getsockopt+0x590/0x590 [ 499.684993][T12708] ? aa_sock_msg_perm+0x94/0x150 [ 499.689959][T12708] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 499.695268][T12708] ? security_socket_sendmsg+0x80/0xa0 [ 499.700753][T12708] ? netlink_getsockopt+0x590/0x590 [ 499.705983][T12708] ____sys_sendmsg+0x5ba/0x960 [ 499.710784][T12708] ? __asan_memset+0x22/0x40 [ 499.715409][T12708] ? __sys_sendmsg_sock+0x30/0x30 [ 499.720450][T12708] ? __import_iovec+0x5f2/0x850 [ 499.725346][T12708] ? import_iovec+0x73/0xa0 [ 499.729886][T12708] ___sys_sendmsg+0x2a6/0x360 [ 499.734603][T12708] ? __sys_sendmsg+0x2a0/0x2a0 [ 499.739485][T12708] __se_sys_sendmsg+0x1c2/0x2b0 [ 499.744362][T12708] ? __x64_sys_sendmsg+0x80/0x80 [ 499.749351][T12708] ? lockdep_hardirqs_on+0x98/0x150 [ 499.754587][T12708] do_syscall_64+0x55/0xa0 [ 499.759025][T12708] ? clear_bhb_loop+0x40/0x90 [ 499.763727][T12708] ? clear_bhb_loop+0x40/0x90 [ 499.768431][T12708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.774348][T12708] RIP: 0033:0x7fd09ff9ce59 [ 499.778788][T12708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.798414][T12708] RSP: 002b:00007fd0a0e75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.806857][T12708] RAX: ffffffffffffffda RBX: 00007fd0a0215fa0 RCX: 00007fd09ff9ce59 [ 499.814855][T12708] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 499.822849][T12708] RBP: 00007fd0a0032d6f R08: 0000000000000000 R09: 0000000000000000 [ 499.830852][T12708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.838856][T12708] R13: 00007fd0a0216038 R14: 00007fd0a0215fa0 R15: 00007ffd50666128 [ 499.846880][T12708] [ 500.674697][T12728] netlink: 'syz.1.2262': attribute type 10 has an invalid length. [ 500.716048][T12728] team0: Device veth1_macvtap failed to register rx_handler [ 500.991704][T12736] netlink: 'syz.2.2264': attribute type 17 has an invalid length. [ 500.999595][T12736] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2264'. [ 501.177705][T12745] FAULT_INJECTION: forcing a failure. [ 501.177705][T12745] name failslab, interval 1, probability 0, space 0, times 0 [ 501.233506][T12746] netlink: 'syz.1.2266': attribute type 39 has an invalid length. [ 501.239020][T12745] CPU: 1 PID: 12745 Comm: syz.3.2267 Not tainted syzkaller #0 [ 501.248866][T12745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.258961][T12745] Call Trace: [ 501.262281][T12745] [ 501.265254][T12745] dump_stack_lvl+0x18c/0x250 [ 501.269982][T12745] ? sctp_sendmsg+0x1575/0x28c0 [ 501.274877][T12745] ? ___sys_sendmsg+0x2a6/0x360 [ 501.279766][T12745] ? show_regs_print_info+0x20/0x20 [ 501.285017][T12745] ? load_image+0x420/0x420 [ 501.289583][T12745] should_fail_ex+0x39d/0x4d0 [ 501.294321][T12745] should_failslab+0x9/0x20 [ 501.298874][T12745] slab_pre_alloc_hook+0x59/0x310 [ 501.303954][T12745] ? sctp_add_bind_addr+0x8c/0x360 [ 501.309110][T12745] __kmem_cache_alloc_node+0x53/0x250 [ 501.314533][T12745] ? sctp_add_bind_addr+0x8c/0x360 [ 501.319682][T12745] kmalloc_trace+0x2a/0xe0 [ 501.324151][T12745] sctp_add_bind_addr+0x8c/0x360 [ 501.329148][T12745] sctp_copy_local_addr_list+0x315/0x4f0 [ 501.334826][T12745] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 501.340591][T12745] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 501.346704][T12745] ? sctp_v6_is_any+0x64/0x70 [ 501.351432][T12745] ? sctp_copy_one_addr+0x8c/0x350 [ 501.356579][T12745] sctp_bind_addr_copy+0xb3/0x3c0 [ 501.361631][T12745] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 501.367989][T12745] sctp_connect_new_asoc+0x2f9/0x6a0 [ 501.373316][T12745] ? __sctp_connect+0xd80/0xd80 [ 501.378191][T12745] ? __local_bh_enable_ip+0x13a/0x1c0 [ 501.383585][T12745] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 501.389152][T12745] ? security_sctp_bind_connect+0x89/0xb0 [ 501.394898][T12745] sctp_sendmsg+0x1575/0x28c0 [ 501.399611][T12745] ? sctp_getsockopt+0xb60/0xb60 [ 501.404571][T12745] ? aa_sk_perm+0x83c/0x970 [ 501.409108][T12745] ? aa_af_perm+0x330/0x330 [ 501.413629][T12745] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 501.420060][T12745] ? sock_rps_record_flow+0x19/0x3f0 [ 501.425365][T12745] ? inet_sendmsg+0xe9/0x2f0 [ 501.429973][T12745] ? inet_send_prepare+0x260/0x260 [ 501.435099][T12745] ____sys_sendmsg+0x5ba/0x960 [ 501.439882][T12745] ? __lock_acquire+0x7d40/0x7d40 [ 501.444930][T12745] ? __asan_memset+0x22/0x40 [ 501.449540][T12745] ? __sys_sendmsg_sock+0x30/0x30 [ 501.454577][T12745] ? __import_iovec+0x5f2/0x850 [ 501.459451][T12745] ? import_iovec+0x73/0xa0 [ 501.463973][T12745] ___sys_sendmsg+0x2a6/0x360 [ 501.468665][T12745] ? get_pid_task+0x20/0x1e0 [ 501.473274][T12745] ? __sys_sendmsg+0x2a0/0x2a0 [ 501.478070][T12745] ? __lock_acquire+0x7d40/0x7d40 [ 501.483157][T12745] __se_sys_sendmsg+0x1c2/0x2b0 [ 501.488020][T12745] ? __x64_sys_sendmsg+0x80/0x80 [ 501.492988][T12745] ? lockdep_hardirqs_on+0x98/0x150 [ 501.498205][T12745] do_syscall_64+0x55/0xa0 [ 501.502630][T12745] ? clear_bhb_loop+0x40/0x90 [ 501.507322][T12745] ? clear_bhb_loop+0x40/0x90 [ 501.512014][T12745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.517919][T12745] RIP: 0033:0x7f900df9ce59 [ 501.522349][T12745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.541967][T12745] RSP: 002b:00007f900ed86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.550400][T12745] RAX: ffffffffffffffda RBX: 00007f900e215fa0 RCX: 00007f900df9ce59 [ 501.558385][T12745] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 501.566369][T12745] RBP: 00007f900ed86090 R08: 0000000000000000 R09: 0000000000000000 [ 501.574351][T12745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.582334][T12745] R13: 00007f900e216038 R14: 00007f900e215fa0 R15: 00007ffee0083798 [ 501.590336][T12745] [ 501.784510][T12748] netlink: 'syz.3.2268': attribute type 10 has an invalid length. [ 501.797636][T12748] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2268'. [ 501.818275][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.826274][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.183170][T12789] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2281'. [ 505.097264][T12789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.132230][T12789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.165318][T12789] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 505.197816][T12789] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 505.232806][T12789] bond0 (unregistering): Released all slaves [ 506.276628][T12825] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 506.781878][T12839] netlink: 'syz.2.2298': attribute type 11 has an invalid length. [ 506.789772][T12839] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.2298'. [ 506.900000][T12844] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2301'. [ 506.956211][T12848] FAULT_INJECTION: forcing a failure. [ 506.956211][T12848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.970077][T12848] CPU: 0 PID: 12848 Comm: syz.3.2303 Not tainted syzkaller #0 [ 506.977576][T12848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 506.987647][T12848] Call Trace: [ 506.990938][T12848] [ 506.993878][T12848] dump_stack_lvl+0x18c/0x250 [ 506.998589][T12848] ? show_regs_print_info+0x20/0x20 [ 507.003812][T12848] ? load_image+0x420/0x420 [ 507.008347][T12848] ? __might_fault+0xaa/0x120 [ 507.013039][T12848] ? __lock_acquire+0x7d40/0x7d40 [ 507.018083][T12848] should_fail_ex+0x39d/0x4d0 [ 507.022787][T12848] _copy_from_iter+0x1d9/0x12e0 [ 507.027692][T12848] ? rep_movs_alternative+0x4a/0x90 [ 507.032903][T12848] ? _copy_from_iter+0x24e/0x12e0 [ 507.037949][T12848] ? __virt_addr_valid+0x18c/0x540 [ 507.043077][T12848] ? __lock_acquire+0x7d40/0x7d40 [ 507.048120][T12848] ? copyout_mc+0x70/0x70 [ 507.052473][T12848] ? copyout_mc+0x70/0x70 [ 507.056817][T12848] ? __virt_addr_valid+0x18c/0x540 [ 507.061947][T12848] ? page_copy_sane+0x16a/0x270 [ 507.066820][T12848] copy_page_from_iter+0x7b/0x100 [ 507.071865][T12848] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 507.077699][T12848] tun_get_user+0x15db/0x3ca0 [ 507.082398][T12848] ? aa_file_perm+0x11b/0xee0 [ 507.087098][T12848] ? rcu_read_unlock+0xa0/0xa0 [ 507.091889][T12848] ? tun_get+0x1c/0x2e0 [ 507.096058][T12848] ? __lock_acquire+0x7d40/0x7d40 [ 507.101104][T12848] ? tun_get+0x1c/0x2e0 [ 507.105279][T12848] tun_chr_write_iter+0x119/0x200 [ 507.110318][T12848] vfs_write+0x46c/0x990 [ 507.114587][T12848] ? file_end_write+0x250/0x250 [ 507.119465][T12848] ? __fget_files+0x43d/0x4b0 [ 507.124169][T12848] ? __fdget_pos+0x1d8/0x330 [ 507.128774][T12848] ? ksys_write+0x75/0x260 [ 507.133208][T12848] ksys_write+0x150/0x260 [ 507.137553][T12848] ? __ia32_sys_read+0x90/0x90 [ 507.142341][T12848] ? lockdep_hardirqs_on+0x98/0x150 [ 507.147559][T12848] do_syscall_64+0x55/0xa0 [ 507.152013][T12848] ? clear_bhb_loop+0x40/0x90 [ 507.156726][T12848] ? clear_bhb_loop+0x40/0x90 [ 507.161436][T12848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.167359][T12848] RIP: 0033:0x7f900df9ce59 [ 507.171796][T12848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.191419][T12848] RSP: 002b:00007f900ed86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 507.199852][T12848] RAX: ffffffffffffffda RBX: 00007f900e215fa0 RCX: 00007f900df9ce59 [ 507.207838][T12848] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 507.215821][T12848] RBP: 00007f900ed86090 R08: 0000000000000000 R09: 0000000000000000 [ 507.223806][T12848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.231787][T12848] R13: 00007f900e216038 R14: 00007f900e215fa0 R15: 00007ffee0083798 [ 507.239786][T12848] [ 508.704323][T12875] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2311'. [ 508.770254][T12875] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2311'. [ 509.017480][T12880] netlink: 'syz.0.2313': attribute type 29 has an invalid length. [ 509.055503][T12880] netlink: 'syz.0.2313': attribute type 29 has an invalid length. [ 509.088594][T12881] netlink: 'syz.0.2313': attribute type 29 has an invalid length. [ 510.302280][T12911] netlink: 'syz.3.2322': attribute type 9 has an invalid length. [ 510.310084][T12911] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2322'. [ 510.663517][T12921] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2323'. [ 510.716562][T12911] netlink: 'syz.3.2322': attribute type 21 has an invalid length. [ 510.724993][T12911] netlink: 'syz.3.2322': attribute type 4 has an invalid length. [ 510.733462][T12911] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2322'. [ 510.747476][T12921] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.2323'. [ 511.132111][T12937] netlink: 'syz.3.2331': attribute type 10 has an invalid length. [ 511.816721][T12950] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.2335'. [ 512.024647][T12959] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2338'. [ 512.033901][T12959] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2338'. [ 512.044676][T12959] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2338'. [ 513.571923][ T5788] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 514.557862][T12988] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 514.621150][T12988] netlink: 'syz.3.2347': attribute type 3 has an invalid length. [ 514.629822][T12988] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.2347'. [ 515.192245][T12999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 515.201318][T12999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 515.210047][T12999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 515.219446][T12999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 515.231100][T12999] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 515.244700][T12999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 515.562394][T12930] .`: (slave syz_tun): Releasing backup interface [ 515.579779][T12998] chnl_net:caif_netlink_parms(): no params data found [ 515.751367][T13010] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2353'. [ 516.293516][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.369585][T13019] netlink: 'syz.0.2355': attribute type 10 has an invalid length. [ 516.421934][T13019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2355'. [ 516.451728][T13019] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 516.543151][T12998] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.550459][T12998] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.561083][T12998] bridge_slave_0: entered allmulticast mode [ 516.572298][T12998] bridge_slave_0: entered promiscuous mode [ 516.598142][T12998] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.613705][T12998] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.630732][T12998] bridge_slave_1: entered allmulticast mode [ 516.659032][T12998] bridge_slave_1: entered promiscuous mode [ 516.740592][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.967527][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.006592][T12998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.104184][T12998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.211848][ T49] batman_adv: batadv0: Removing interface: netdevsim0 [ 517.234045][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.326613][T12998] team0: Port device team_slave_0 added [ 517.340855][ T5788] Bluetooth: hci4: command tx timeout [ 517.393182][T12998] team0: Port device team_slave_1 added [ 517.399573][T13038] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2362'. [ 517.538815][T12998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.565312][T12998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.591947][T12998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.672208][T12998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.704889][T12998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.750585][T12998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.024964][T12998] hsr_slave_0: entered promiscuous mode [ 518.069139][T12998] hsr_slave_1: entered promiscuous mode [ 518.082339][T12998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.090040][T12998] Cannot create hsr debugfs directory [ 519.417545][ T5788] Bluetooth: hci4: command tx timeout [ 519.801035][T13079] netlink: 'syz.0.2370': attribute type 6 has an invalid length. [ 519.809922][T13079] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2370'. [ 519.856017][T13080] IPv6: Can't replace route, no match found [ 521.497802][ T5788] Bluetooth: hci4: command tx timeout [ 521.964401][T12998] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 522.047655][T12998] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 522.244597][T12998] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 522.676763][T12998] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 523.188305][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.214610][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.233142][ T49] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 523.240344][ T49] batman_adv: batadv0: Removing interface: veth0_vlan [ 523.302595][ T49] bridge_slave_1: left allmulticast mode [ 523.309775][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.351447][ T49] bridge_slave_0: left allmulticast mode [ 523.357169][ T49] bridge_slave_0: left promiscuous mode [ 523.369882][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.580987][ T5788] Bluetooth: hci4: command tx timeout [ 523.631717][ T49] veth0_macvtap: left promiscuous mode [ 523.637621][ T49] veth1_vlan: left promiscuous mode [ 523.668566][ T49] veth0_vlan: left promiscuous mode [ 528.061286][ T49] team0 (unregistering): Port device team_slave_1 removed [ 528.108322][ T49] team0 (unregistering): Port device team_slave_0 removed [ 528.155201][ T49] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.198007][ T49] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.514156][ T49] .` (unregistering): Released all slaves [ 528.710926][T12998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.793073][T12998] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.875391][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.882627][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.003443][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.010691][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.208764][T12998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.273991][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 530.417950][T12998] veth0_vlan: entered promiscuous mode [ 530.477570][T12998] veth1_vlan: entered promiscuous mode [ 530.535077][T12998] veth0_macvtap: entered promiscuous mode [ 530.589409][T12998] veth1_macvtap: entered promiscuous mode [ 530.674222][T12998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.700807][T12998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.730789][T12998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.756985][T12998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.800325][T12998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.821883][T12998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.856929][T12998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.897785][T12998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.960581][T12998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.001656][T12998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.044982][T12998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.073054][T12998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.160659][T12998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.202851][T12998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.336940][T13205] netlink: 'syz.2.2394': attribute type 10 has an invalid length. [ 531.450799][T12998] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.459826][T12998] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.499153][T12998] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.520751][T12998] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.300430][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.324573][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.428512][T13236] FAULT_INJECTION: forcing a failure. [ 532.428512][T13236] name failslab, interval 1, probability 0, space 0, times 0 [ 532.443929][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.461932][T13236] CPU: 1 PID: 13236 Comm: syz.3.2397 Not tainted syzkaller #0 [ 532.465831][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.469427][T13236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 532.469456][T13236] Call Trace: [ 532.469465][T13236] [ 532.493084][T13236] dump_stack_lvl+0x18c/0x250 [ 532.497807][T13236] ? show_regs_print_info+0x20/0x20 [ 532.503052][T13236] ? load_image+0x420/0x420 [ 532.507607][T13236] ? __might_sleep+0xe0/0xe0 [ 532.512244][T13236] ? __lock_acquire+0x7d40/0x7d40 [ 532.517316][T13236] should_fail_ex+0x39d/0x4d0 [ 532.522041][T13236] should_failslab+0x9/0x20 [ 532.526593][T13236] slab_pre_alloc_hook+0x59/0x310 [ 532.531672][T13236] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.537431][T13236] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.543190][T13236] __kmem_cache_alloc_node+0x53/0x250 [ 532.548603][T13236] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.554340][T13236] __kmalloc+0xa4/0x230 [ 532.558520][T13236] tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.564093][T13236] tomoyo_path_number_perm+0x248/0x620 [ 532.569569][T13236] ? tomoyo_path_number_perm+0x217/0x620 [ 532.575225][T13236] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 532.580707][T13236] ? ksys_write+0x1c4/0x260 [ 532.585269][T13236] ? __fget_files+0x28/0x4b0 [ 532.589867][T13236] ? __fget_files+0x28/0x4b0 [ 532.594481][T13236] security_file_ioctl+0x70/0xa0 [ 532.599438][T13236] __se_sys_ioctl+0x48/0x170 [ 532.604045][T13236] do_syscall_64+0x55/0xa0 [ 532.608472][T13236] ? clear_bhb_loop+0x40/0x90 [ 532.613164][T13236] ? clear_bhb_loop+0x40/0x90 [ 532.617851][T13236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.623763][T13236] RIP: 0033:0x7f900df9ce59 [ 532.628189][T13236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.647804][T13236] RSP: 002b:00007f900ed86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.656234][T13236] RAX: ffffffffffffffda RBX: 00007f900e215fa0 RCX: 00007f900df9ce59 [ 532.664220][T13236] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 532.672205][T13236] RBP: 00007f900ed86090 R08: 0000000000000000 R09: 0000000000000000 [ 532.680185][T13236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.688163][T13236] R13: 00007f900e216038 R14: 00007f900e215fa0 R15: 00007ffee0083798 [ 532.696249][T13236] [ 532.730186][T13236] ERROR: Out of memory at tomoyo_realpath_from_path. [ 533.605161][T13264] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2406'. [ 533.778559][T13270] netlink: 'syz.2.2408': attribute type 9 has an invalid length. [ 533.820092][T13270] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2408'. [ 534.648721][ T5776] .`: (slave syz_tun): Releasing backup interface [ 534.669151][ T5776] syz_tun (unregistering): left allmulticast mode [ 534.897431][T12999] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.910744][T12999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.919129][T12999] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.937847][T12999] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 534.947241][T12999] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 534.965374][T12999] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 535.042429][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.476877][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.734360][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.196547][ T42] .`: (slave netdevsim0): Releasing backup interface [ 536.247234][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 536.293457][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 536.332795][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.935132][T13323] netlink: 'syz.2.2421': attribute type 9 has an invalid length. [ 536.945912][T13325] netlink: 'syz.3.2420': attribute type 10 has an invalid length. [ 537.020774][T13323] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2421'. [ 537.033223][T12999] Bluetooth: hci0: command tx timeout [ 537.052493][T13330] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2422'. [ 537.168227][T13330] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2422'. [ 537.285716][T13300] chnl_net:caif_netlink_parms(): no params data found [ 537.444950][T13335] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2423'. [ 537.937225][T13300] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.944679][T13300] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.956070][T13300] bridge_slave_0: entered allmulticast mode [ 537.964009][T13300] bridge_slave_0: entered promiscuous mode [ 537.976345][T13300] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.983831][T13300] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.997356][T13300] bridge_slave_1: entered allmulticast mode [ 538.005414][T13300] bridge_slave_1: entered promiscuous mode [ 538.129790][T13362] netlink: 'syz.3.2428': attribute type 9 has an invalid length. [ 538.160614][T13362] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2428'. [ 538.182031][T13300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.195196][T13300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.391326][T13354] syzkaller0: entered promiscuous mode [ 538.400892][T13354] syzkaller0: entered allmulticast mode [ 538.422486][T13364] netlink: 'syz.3.2428': attribute type 2 has an invalid length. [ 538.447785][T13364] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2428'. [ 538.856629][T13300] team0: Port device team_slave_0 added [ 538.891479][T13358] netlink: 'syz.3.2428': attribute type 9 has an invalid length. [ 538.903185][T13300] team0: Port device team_slave_1 added [ 538.913358][T13358] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2428'. [ 539.025722][T13300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.042561][T13300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.096272][T12999] Bluetooth: hci0: command tx timeout [ 539.141879][T13300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.261340][T13300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.311062][T13383] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2435'. [ 539.320748][T13300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.410846][T13300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.170892][T12999] Bluetooth: hci0: command tx timeout [ 542.024040][T13300] hsr_slave_0: entered promiscuous mode [ 542.053460][T13300] hsr_slave_1: entered promiscuous mode [ 542.059973][T13300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.069818][T13300] Cannot create hsr debugfs directory [ 542.965606][T13417] netlink: 'syz.2.2443': attribute type 25 has an invalid length. [ 542.997305][T13420] netlink: 'syz.3.2444': attribute type 10 has an invalid length. [ 543.015455][T13420] batman_adv: batadv0: Adding interface: netdevsim0 [ 543.040660][T13420] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.082376][T13420] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 543.123221][T13415] netlink: 'syz.2.2443': attribute type 2 has an invalid length. [ 543.152836][T13415] netlink: 'syz.2.2443': attribute type 6 has an invalid length. [ 543.235409][ T42] hsr_slave_0: left promiscuous mode [ 543.250819][T12999] Bluetooth: hci0: command tx timeout [ 543.700373][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.710005][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.719280][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.727133][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.738716][ T42] .`: left allmulticast mode [ 543.744165][ T42] bond_slave_0: left allmulticast mode [ 543.749671][ T42] bond_slave_1: left allmulticast mode [ 543.756175][ T42] bridge0: port 3(.`) entered disabled state [ 543.772969][ T42] bridge_slave_1: left allmulticast mode [ 543.778846][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.803195][ T42] bridge_slave_0: left promiscuous mode [ 543.808962][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.043948][T13446] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2446'. [ 544.069816][ T42] veth0_macvtap: left promiscuous mode [ 544.084811][ T42] veth1_vlan: left promiscuous mode [ 544.106890][ T42] veth0_vlan: left promiscuous mode [ 547.259430][ T42] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.268872][ T42] bond_slave_1 (unregistering): left promiscuous mode [ 547.317519][ T42] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.327064][ T42] bond_slave_0 (unregistering): left promiscuous mode [ 547.588222][ T42] .` (unregistering): Released all slaves [ 548.754877][T13476] netlink: 'syz.3.2456': attribute type 39 has an invalid length. [ 549.244286][T13300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 549.299083][T13300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 549.365002][T13300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 549.475534][T13300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 550.244920][T13300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.326484][T13300] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.369015][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.376238][ T6178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.439142][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.447107][ T6178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.594624][T13300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.728661][T13300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.857316][T13300] veth0_vlan: entered promiscuous mode [ 551.930786][T13300] veth1_vlan: entered promiscuous mode [ 552.025560][T13300] veth0_macvtap: entered promiscuous mode [ 552.042886][T13300] veth1_macvtap: entered promiscuous mode [ 552.072684][T13300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.123494][T13300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.180686][T13300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.185534][T13563] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2477'. [ 552.240998][T13300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.251258][T13300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.266804][T13300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.312373][T13300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.349905][T13565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.427101][T13300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.480593][T13300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.511008][T13300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.570576][T13300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.596710][T13300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.610583][T13300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.631828][T13300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.658537][T13575] netlink: 'syz.1.2481': attribute type 10 has an invalid length. [ 552.677597][T13575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2481'. [ 552.698596][T13575] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 552.763355][T13300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.800212][T13300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.819634][T13300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.830544][T13300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.062011][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.083601][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.182205][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.192480][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.836345][T13602] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2487'. [ 554.716039][T13615] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2490'. [ 554.841978][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 554.866279][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 554.875517][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 554.889806][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 554.906926][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 554.922595][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 555.457900][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.683792][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.534026][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.599620][T13620] chnl_net:caif_netlink_parms(): no params data found [ 557.106714][ T5788] Bluetooth: hci1: command tx timeout [ 557.776788][ T42] batman_adv: batadv0: Removing interface: netdevsim0 [ 557.793190][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.404939][T13620] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.435766][T13620] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.443575][T13620] bridge_slave_0: entered allmulticast mode [ 558.461878][T13620] bridge_slave_0: entered promiscuous mode [ 558.482193][T13620] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.489795][T13620] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.511053][T13620] bridge_slave_1: entered allmulticast mode [ 558.519526][T13620] bridge_slave_1: entered promiscuous mode [ 559.171670][ T5788] Bluetooth: hci1: command tx timeout [ 559.290374][T13620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.416227][T13620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.604470][T13707] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2509'. [ 559.867087][T13709] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2508'. [ 559.896555][T13620] team0: Port device team_slave_0 added [ 559.922897][T13707] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 560.012519][T13620] team0: Port device team_slave_1 added [ 560.241246][T13620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.248282][T13620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.310563][T13620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.362273][T13620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.383100][T13620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.477887][T13620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.253535][ T5788] Bluetooth: hci1: command tx timeout [ 561.267108][T13620] hsr_slave_0: entered promiscuous mode [ 561.343711][T13620] hsr_slave_1: entered promiscuous mode [ 561.686552][T13756] FAULT_INJECTION: forcing a failure. [ 561.686552][T13756] name failslab, interval 1, probability 0, space 0, times 0 [ 561.735115][T13756] CPU: 1 PID: 13756 Comm: syz.1.2519 Not tainted syzkaller #0 [ 561.742659][T13756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 561.752761][T13756] Call Trace: [ 561.756077][T13756] [ 561.759043][T13756] dump_stack_lvl+0x18c/0x250 [ 561.763769][T13756] ? sctp_sendmsg+0x1575/0x28c0 [ 561.768661][T13756] ? ___sys_sendmsg+0x2a6/0x360 [ 561.773575][T13756] ? show_regs_print_info+0x20/0x20 [ 561.778823][T13756] ? load_image+0x420/0x420 [ 561.783386][T13756] should_fail_ex+0x39d/0x4d0 [ 561.788144][T13756] should_failslab+0x9/0x20 [ 561.792700][T13756] slab_pre_alloc_hook+0x59/0x310 [ 561.797777][T13756] ? sctp_add_bind_addr+0x8c/0x360 [ 561.802939][T13756] __kmem_cache_alloc_node+0x53/0x250 [ 561.808360][T13756] ? sctp_add_bind_addr+0x8c/0x360 [ 561.813519][T13756] kmalloc_trace+0x2a/0xe0 [ 561.817987][T13756] sctp_add_bind_addr+0x8c/0x360 [ 561.822977][T13756] sctp_copy_local_addr_list+0x315/0x4f0 [ 561.828671][T13756] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 561.834436][T13756] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 561.840542][T13756] ? sctp_v6_is_any+0x64/0x70 [ 561.845268][T13756] ? sctp_copy_one_addr+0x8c/0x350 [ 561.850422][T13756] sctp_bind_addr_copy+0xb3/0x3c0 [ 561.855486][T13756] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 561.861864][T13756] sctp_connect_new_asoc+0x2f9/0x6a0 [ 561.867199][T13756] ? __sctp_connect+0xd80/0xd80 [ 561.872097][T13756] ? __local_bh_enable_ip+0x13a/0x1c0 [ 561.877526][T13756] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 561.883133][T13756] ? security_sctp_bind_connect+0x89/0xb0 [ 561.888922][T13756] sctp_sendmsg+0x1575/0x28c0 [ 561.893661][T13756] ? sctp_getsockopt+0xb60/0xb60 [ 561.898640][T13756] ? aa_sk_perm+0x83c/0x970 [ 561.903210][T13756] ? aa_af_perm+0x330/0x330 [ 561.907764][T13756] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 561.914231][T13756] ? sock_rps_record_flow+0x19/0x3f0 [ 561.919563][T13756] ? inet_sendmsg+0xe9/0x2f0 [ 561.924204][T13756] ? inet_send_prepare+0x260/0x260 [ 561.929364][T13756] ____sys_sendmsg+0x5ba/0x960 [ 561.934181][T13756] ? __lock_acquire+0x7d40/0x7d40 [ 561.939258][T13756] ? __asan_memset+0x22/0x40 [ 561.943902][T13756] ? __sys_sendmsg_sock+0x30/0x30 [ 561.948969][T13756] ? __import_iovec+0x5f2/0x850 [ 561.953870][T13756] ? import_iovec+0x73/0xa0 [ 561.958430][T13756] ___sys_sendmsg+0x2a6/0x360 [ 561.963152][T13756] ? get_pid_task+0x20/0x1e0 [ 561.967809][T13756] ? __sys_sendmsg+0x2a0/0x2a0 [ 561.972659][T13756] ? __lock_acquire+0x7d40/0x7d40 [ 561.977754][T13756] __se_sys_sendmsg+0x1c2/0x2b0 [ 561.982650][T13756] ? __x64_sys_sendmsg+0x80/0x80 [ 561.987650][T13756] ? lockdep_hardirqs_on+0x98/0x150 [ 561.992899][T13756] do_syscall_64+0x55/0xa0 [ 561.997358][T13756] ? clear_bhb_loop+0x40/0x90 [ 562.002085][T13756] ? clear_bhb_loop+0x40/0x90 [ 562.006814][T13756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.012753][T13756] RIP: 0033:0x7f3b7419ce59 [ 562.017204][T13756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.036849][T13756] RSP: 002b:00007f3b750f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.045303][T13756] RAX: ffffffffffffffda RBX: 00007f3b74415fa0 RCX: 00007f3b7419ce59 [ 562.053318][T13756] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 562.061332][T13756] RBP: 00007f3b750f6090 R08: 0000000000000000 R09: 0000000000000000 [ 562.069340][T13756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 562.077352][T13756] R13: 00007f3b74416038 R14: 00007f3b74415fa0 R15: 00007ffc440bdae8 [ 562.085381][T13756] [ 562.365574][T13778] netlink: 'syz.0.2522': attribute type 10 has an invalid length. [ 562.407541][T13778] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2522'. [ 562.711882][T13787] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2524'. [ 562.765558][T13794] netlink: 'syz.3.2524': attribute type 10 has an invalid length. [ 562.865222][T13794] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2524'. [ 563.281638][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.288018][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.360716][ T5788] Bluetooth: hci1: command tx timeout [ 563.470042][T13794] veth0_vlan: left promiscuous mode [ 564.457130][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.520234][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.852362][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.921907][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.979588][ T42] batman_adv: batadv0: Removing interface: virt_wifi0 [ 566.011396][T13826] ------------[ cut here ]------------ [ 566.016926][T13826] WARNING: CPU: 0 PID: 13826 at kernel/events/core.c:6808 perf_pending_task+0x35c/0x470 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 566.027005][T13826] Modules linked in: [ 566.030975][T13826] CPU: 0 PID: 13826 Comm: syz.3.2532 Not tainted syzkaller #0 [ 566.038471][T13826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.048619][T13826] RIP: 0010:perf_pending_task+0x35c/0x470 [ 566.054446][T13826] Code: ff 84 db 75 14 e8 44 d8 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 d8 d5 ff e8 ab 53 4f ff eb e5 e8 24 d8 d5 ff <0f> 0b e9 f3 fe ff ff e8 18 d8 d5 ff 48 c7 c7 70 f4 1c 8d 4c 89 f6 [ 566.074918][T13826] RSP: 0018:ffffc900038779c0 EFLAGS: 00010293 [ 566.081441][T13826] RAX: ffffffff81b149dc RBX: ffff88802d024d88 RCX: ffff888025febc00 [ 566.089613][T13826] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 566.097708][T13826] RBP: 0000000000000001 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 566.105816][T13826] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: ffff888025febc00 [ 566.114040][T13826] R13: ffff888026879130 R14: ffff88802d024b48 R15: 1ffff11005a04969 [ 566.122089][T13826] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 566.131226][T13826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.137846][T13826] CR2: 00007f900ed86990 CR3: 0000000022276000 CR4: 00000000003506f0 [ 566.145933][T13826] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 566.153998][T13826] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 566.162069][T13826] Call Trace: [ 566.165383][T13826] [ 566.168729][T13826] task_work_run+0x1d4/0x260 [ 566.173509][T13826] ? task_work_cancel+0x220/0x220 [ 566.178588][T13826] do_exit+0x95a/0x2460 [ 566.182858][T13826] ? put_task_struct+0xc0/0xc0 [ 566.187673][T13826] ? lockdep_hardirqs_on+0x98/0x150 [ 566.192983][T13826] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 566.199198][T13826] do_group_exit+0x21b/0x2d0 [ 566.203883][T13826] ? lockdep_hardirqs_on+0x98/0x150 [ 566.209125][T13826] get_signal+0x12fc/0x13f0 [ 566.213804][T13826] arch_do_signal_or_restart+0xc2/0x800 [ 566.219395][T13826] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 566.225192][T13826] ? get_sigframe_size+0x20/0x20 [ 566.230192][T13826] ? exit_to_user_mode_loop+0x3b/0x110 [ 566.235750][T13826] exit_to_user_mode_loop+0x70/0x110 [ 566.241117][T13826] exit_to_user_mode_prepare+0xee/0x180 [ 566.246706][T13826] syscall_exit_to_user_mode+0x1a/0x50 [ 566.252249][T13826] do_syscall_64+0x61/0xa0 [ 566.256700][T13826] ? clear_bhb_loop+0x40/0x90 [ 566.261509][T13826] ? clear_bhb_loop+0x40/0x90 [ 566.266225][T13826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.272590][T13826] RIP: 0033:0x7f900df9ce59 [ 566.277053][T13826] Code: Unable to access opcode bytes at 0x7f900df9ce2f. [ 566.284211][T13826] RSP: 002b:00007f900ed86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.292737][T13826] RAX: fffffffffffffffc RBX: 00007f900e215fa0 RCX: 00007f900df9ce59 [ 566.300796][T13826] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 566.308807][T13826] RBP: 00007f900e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 566.316866][T13826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.324899][T13826] R13: 00007f900e216038 R14: 00007f900e215fa0 R15: 00007ffee0083798 [ 566.332971][T13826] [ 566.336029][T13826] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 566.343332][T13826] CPU: 0 PID: 13826 Comm: syz.3.2532 Not tainted syzkaller #0 [ 566.350825][T13826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.360907][T13826] Call Trace: [ 566.364208][T13826] [ 566.367163][T13826] dump_stack_lvl+0x18c/0x250 [ 566.371886][T13826] ? show_regs_print_info+0x20/0x20 [ 566.377120][T13826] ? load_image+0x420/0x420 [ 566.381667][T13826] panic+0x2dc/0x730 [ 566.385580][T13826] ? bpf_jit_dump+0xd0/0xd0 [ 566.390110][T13826] __warn+0x2e0/0x470 [ 566.394106][T13826] ? perf_pending_task+0x35c/0x470 [ 566.399235][T13826] ? perf_pending_task+0x35c/0x470 [ 566.404365][T13826] report_bug+0x2be/0x4f0 [ 566.408703][T13826] ? perf_pending_task+0x35c/0x470 [ 566.413831][T13826] ? perf_pending_task+0x35c/0x470 [ 566.418956][T13826] ? perf_pending_task+0x35e/0x470 [ 566.424081][T13826] handle_bug+0xcf/0x120 [ 566.428335][T13826] exc_invalid_op+0x1a/0x50 [ 566.432854][T13826] asm_exc_invalid_op+0x1a/0x20 [ 566.437726][T13826] RIP: 0010:perf_pending_task+0x35c/0x470 [ 566.443460][T13826] Code: ff 84 db 75 14 e8 44 d8 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 d8 d5 ff e8 ab 53 4f ff eb e5 e8 24 d8 d5 ff <0f> 0b e9 f3 fe ff ff e8 18 d8 d5 ff 48 c7 c7 70 f4 1c 8d 4c 89 f6 [ 566.463082][T13826] RSP: 0018:ffffc900038779c0 EFLAGS: 00010293 [ 566.469163][T13826] RAX: ffffffff81b149dc RBX: ffff88802d024d88 RCX: ffff888025febc00 [ 566.477142][T13826] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 566.485120][T13826] RBP: 0000000000000001 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 566.493096][T13826] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: ffff888025febc00 [ 566.501078][T13826] R13: ffff888026879130 R14: ffff88802d024b48 R15: 1ffff11005a04969 [ 566.509065][T13826] ? perf_pending_task+0x35c/0x470 [ 566.514204][T13826] task_work_run+0x1d4/0x260 [ 566.518809][T13826] ? task_work_cancel+0x220/0x220 [ 566.523858][T13826] do_exit+0x95a/0x2460 [ 566.528038][T13826] ? put_task_struct+0xc0/0xc0 [ 566.532823][T13826] ? lockdep_hardirqs_on+0x98/0x150 [ 566.538031][T13826] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 566.544212][T13826] do_group_exit+0x21b/0x2d0 [ 566.548817][T13826] ? lockdep_hardirqs_on+0x98/0x150 [ 566.554028][T13826] get_signal+0x12fc/0x13f0 [ 566.558554][T13826] arch_do_signal_or_restart+0xc2/0x800 [ 566.564123][T13826] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 566.569851][T13826] ? get_sigframe_size+0x20/0x20 [ 566.574818][T13826] ? exit_to_user_mode_loop+0x3b/0x110 [ 566.580290][T13826] exit_to_user_mode_loop+0x70/0x110 [ 566.585593][T13826] exit_to_user_mode_prepare+0xee/0x180 [ 566.591156][T13826] syscall_exit_to_user_mode+0x1a/0x50 [ 566.596628][T13826] do_syscall_64+0x61/0xa0 [ 566.601055][T13826] ? clear_bhb_loop+0x40/0x90 [ 566.605743][T13826] ? clear_bhb_loop+0x40/0x90 [ 566.610427][T13826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.616331][T13826] RIP: 0033:0x7f900df9ce59 [ 566.620751][T13826] Code: Unable to access opcode bytes at 0x7f900df9ce2f. [ 566.627767][T13826] RSP: 002b:00007f900ed86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.636190][T13826] RAX: fffffffffffffffc RBX: 00007f900e215fa0 RCX: 00007f900df9ce59 [ 566.644166][T13826] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 566.652140][T13826] RBP: 00007f900e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 566.660114][T13826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.668091][T13826] R13: 00007f900e216038 R14: 00007f900e215fa0 R15: 00007ffee0083798 [ 566.676079][T13826] [ 566.679437][T13826] Kernel Offset: disabled [ 566.683759][T13826] Rebooting in 86400 seconds..